last executing test programs: 4.434275243s ago: executing program 2 (id=669): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) readv(r0, &(0x7f0000000b40)=[{&(0x7f00000033c0)=""/4089, 0xff9}, {&(0x7f00000023c0)=""/4087, 0xff7}], 0x2) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) 4.3564715s ago: executing program 2 (id=671): socket$nl_route(0x10, 0x3, 0x0) r0 = gettid() sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x844) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x7, 0x9) write$P9_RWRITE(r3, &(0x7f0000000040)={0xb}, 0x11000) read(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) fallocate(r4, 0x0, 0xbf5, 0x2000402) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="33072d89da29d0"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xe, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = accept(r6, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r8, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x2200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") 3.380882966s ago: executing program 2 (id=684): mkdirat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r2}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x1c161, 0x2, 0x0, 0x6, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="6800000010000104fafffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r6], 0x68}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xf) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r9, 0xc020f509, 0x0) r10 = getpid() tkill(r10, 0x35) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{}, &(0x7f00000004c0), &(0x7f0000000340)='%-010d \x00'}, 0x20) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r12}, 0x10) dup(r11) ioctl$TCFLSH(r7, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2.803958223s ago: executing program 4 (id=697): r0 = socket$inet(0x2, 0x1, 0x0) listen(r0, 0x1) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x1}}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r3, &(0x7f0000000080)=""/1, 0x1) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x2) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) r7 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x2}, 0x0) r8 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0xd1, 0x428a, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x7, @perf_config_ext={0x100000008}, 0x88025, 0xccf8, 0x0, 0x1, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = dup(r8) exit(0x0) read$char_usb(r9, &(0x7f0000000180)=""/147, 0xfdef) write$cgroup_subtree(r6, &(0x7f00000001c0)=ANY=[@ANYRES64=r2], 0x5) r10 = socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000200)='./cgroup/cgroup.procs\x00', 0x440200, 0x40) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r10, 0x8982, &(0x7f0000000000)={0x1, 'syzkaller1\x00'}) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) close_range(r11, 0xffffffffffffffff, 0x0) 1.953539407s ago: executing program 4 (id=715): socket$nl_route(0x10, 0x3, 0x0) r0 = gettid() sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1f4, 0x2, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_EXPECT_MASK={0x74, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x17}}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_MASTER={0xb0, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xb}}, {0x14, 0x4, @mcast2}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x431}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x400}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_EXPECT_TUPLE={0x88, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2a}}}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x80000000}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x800}, 0x844) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x7, 0x9) write$P9_RWRITE(r3, &(0x7f0000000040)={0xb}, 0x11000) read(r2, &(0x7f0000032440)=""/102364, 0x18fdc) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) fallocate(r4, 0x0, 0xbf5, 0x2000402) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="33072d89da29d0"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xe, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, 0x0, 0x0) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = accept(r6, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r8, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x2200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file2\x00', &(0x7f00000000c0), &(0x7f0000000340)=ANY=[], 0xfe37, 0x0) sync() 1.41098849s ago: executing program 3 (id=721): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r2, 0x9) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r3, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) readv(r1, &(0x7f0000000b40)=[{&(0x7f00000033c0)=""/4089, 0xff9}, {&(0x7f00000023c0)=""/4087, 0xff7}], 0x2) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) futex(&(0x7f0000004000)=0x2, 0x8d, 0xfffff7fc, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215) pread64(r4, &(0x7f0000000200)=""/43, 0x2b, 0x730) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x29, 0x7, 0x9, 0x6, 0x3, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x40}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000500a}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x38, r5, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3}]}, 0x38}}, 0x20000000) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x8, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r6, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) 1.311319321s ago: executing program 3 (id=722): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000180)=[{0x6, 0xd, 0x7, 0x7ffc0001}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffffffe0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x39be}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000300)="580000001400add405000000000000000a117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c710020000ffffffffffe7ee000000000000000002000000000000000000", 0x58}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x6, 0x0, 0x7ffc1ffb}]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000014c0)={0x20, 0x0, 0xb, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_COMPAT_NAME={0xb, 0x1, 'mangle\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x8082) unshare(0x8000000) r7 = semget$private(0x0, 0x20000000102, 0x0) semop(r7, &(0x7f0000000240)=[{0x3, 0x0, 0x1800}], 0x1) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="980011000000000000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x10, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r8, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d) 1.175751144s ago: executing program 3 (id=724): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = gettid() timer_create(0x8, &(0x7f0000000280)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r3, &(0x7f0000001140), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1.0079147s ago: executing program 4 (id=726): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x9658, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd9b, 0x3}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x8f17, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b00500000000"], 0x5b0}, 0x20008001) sendmsg$inet6(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000022c0)="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", 0x5ac}], 0x1}, 0x20000044) 942.209007ms ago: executing program 3 (id=728): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffff8}, 0x18) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000280)=0x630a, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) recvmmsg(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000300)=""/122, 0x7a}, {&(0x7f0000000780)=""/126, 0x7e}, {&(0x7f00000004c0)=""/68, 0x44}, {&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/182, 0xb6}, {&(0x7f0000000700)=""/102, 0x66}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f0000001000)=""/193, 0xc1}, {&(0x7f0000000880)=""/242, 0xf2}], 0x9, &(0x7f0000000a40)=""/126, 0x7e}, 0xe4}, {{0x0, 0x0, &(0x7f0000000e80)}, 0x1}], 0x2, 0x40012020, 0x0) 902.590181ms ago: executing program 1 (id=729): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c5"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001080)={0xf, {"6852ad21e0fd02661b37090987f70e06d038e7ff7fc6e5539b0d650e8b089b3f360068090890e0878f0efcc5e7049b3b612c416b23240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d077202b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d020000001c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b4a5f3090000000000000075271b060029d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841040014f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f33491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c24ffffffffffffff7fb70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bed0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f643577590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4ed134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146784078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34a1c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e2bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9b05000bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48ca2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889bce3076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b7da2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a35595f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e205ef4a7c43b42aae501b20f7694a035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d558ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427bf6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd6700800000082ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39dd2ea9762639ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769777c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd133d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359deea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e150600d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b2c2fc5d5f0da42c0456ec015f08e5247d33ae2d35623ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e938ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a893664ac70297dc8d62700000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d902952b72c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dc2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec0300068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8075ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b67804cfa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000f700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044dd0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x1000}}, 0x1006) 882.915583ms ago: executing program 4 (id=731): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000046, &(0x7f00000003c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@sysvgroups}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nodioread_nolock}, {@data_err_ignore}, {@grpquota}, {@dioread_nolock}, {@nobarrier}, {@resuid}, {@quota}]}, 0x1, 0x55a, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0XUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56c2WNUmbddnSmc8Hbjkn9ybnfnPvOf3enBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG+3dr9q7PZkkS9/ulfSWO7rN58rebz9ueVlyLit68ijhfa262urC6UyuV0Ka9P1hYvTVZXVk9cWCzNp/PpxemZmVNvz0y/9+47fYv1jbP/fP/J7Q9PfX107btf7h66mcTpOJCva43jCVxrrUzERP6ejMXpDRtO9aGxnSQZ9A6wLSN5Px+LbAw4GCN5rwf+/76MiDowpBL9H4ZUMw9oXtv36Tr4uXHvg/ULoPb4R9c/G4k9jWujfWvJI1dG2fXueB/az9r49c9bN7Ml+vc5BMCWrl2PiJOjo+3jX5KPf9t3sodt2tow/sEzczvLf97slP8UHuQ/0SH/2d+p727Dxtdoz38Kd/vQTFdZ/vd+x/z3waTV+Ehee6GR840l5y+U02xsezEijsXY7qy+2XzOqbU79W7rWvO/bMnab+aC+X7cHd396HPmSrXSk8Tc6t71iFc65r9JfX1OZ08j1914/LP342yPbRxJb73Wbd3W8T9d9Z8iXu94/B/OaCWbz09ONs6HyeZZ0e7vG0d+79b+oOPPjv++zeMfT1rna6uP38aPe/5Nu617JP7o/fzflXzWKO/KH7tSqtWWpiJ2JR+3Pz798LnNenP7LP5jRzcf/zqd/3sj4vMe479x+OdXe4p/QMd/7rGO/+MX7nz0xQ/d2u9t/HurUTqWP9LL+NfrDj7JewcAAAAAAAA7TSEiDkRSKD4oFwrF4vr9HYdjX6FcqdaOn68sX5yLxndlx2Os0JzpPthyP8RUfj9ssz69oT4TEYci4tuRvY16cbZSnht08AAAAAAAAAAAAAAAAAAAALBD7O/y/f/MHyOD3jvgqfOT3zC8tuz//filJ2BH8v8fhpf+D8NL/4fhpf/D8NL/YXjp/zC89H8YXvo/AAAAAAAAAAAAAAAAAAAAAAAAAAAA9NXZM2eypb52/+psVp+7vLK8ULl8Yi6tLhQXl2eLs5WlS8X5SmW+nBZnK4tbvV65Urk0NR3LVyZrabU2WV1ZPbdYWb5YO3dhsTSfnkvHnklUAAAAAAAAAAAAAAAAAAAA8HyprqwulMrldElBYVuF0Z2xGwp9Lgx6ZAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh/4LAAD///4gN54=") ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 854.831326ms ago: executing program 3 (id=732): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190a01"], 0x44}}, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r6 = syz_open_pts(r0, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000080)=0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) dup2(r8, r8) io_submit(0x0, 0x9, &(0x7f0000000b80)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x5, 0x8173, r2, &(0x7f0000000600)="7744416c6fb179fa3b8bfebb9424a085c601b9eccfc69135c7d0bd45529c1d9eca76daeb867b2e90e7fdcb660f2ddf11329a561ba6ac2acd69d988dec0ed27a64b530d2e441c9ce07ae38f0b04946c10e52de31baa90008c926c6de77b9029a8779dcbe32920576dcb7deea2cb730c9048c3fa8b9dfab1c17bae50a6499f3d9dc7f4452cf137b8098717656a50e73b909b9610101118d3efef893cfdf22ee37b41c240a6b7f94e8339ee4ad55a6e", 0xae, 0x6, 0x0, 0x2}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x4, 0x4e0e, r5, &(0x7f00000006c0)="7f4719642289ec7b2b452d1cd05951826bc5b2fb394032e9bf8e51d91ef01496441549acbf5bd2b29bdfd1eba31dd4140c", 0x31, 0x0, 0x0, 0x3, r8}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x7, r7, &(0x7f0000000740)="6c180f7e1d0706d7cd2c4a6526e778ffcbeb45d7749730ccda370cacf31049eb77da773a63ea8ba16268e42eb032e77e9da162ac21102f8d7748eb589a15c7b53f6303822997ca3017bf21547205a75b0196073d44051e1ce64c7dba74b173e81bf959fd4f42cc1cf10d3276d974401d2eb3cf60a1425fb21e4f858700", 0x7d, 0x8000000000000001}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x6, 0x4, r2, &(0x7f0000000800)="d2a428192bfa780a29c01e925d7186affa5687ac3349b0c4370961ca2735916ca06ce5df", 0x24, 0x4}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x1, r6, &(0x7f0000000880)="c4407faec7020e334154ccb42b07f76ba8c105cd180c975fa0980fe381ee45f812da6b819545395a6f7017444ecbea121e49dd277628ea0d52dba65c9b2e480c6c8cde601681a10e2995b8f1688776695c3ef23d7b8247881135ce2c02ea82f5795dcca74cca03c2a683cbb81c54fab2fb5a1d24c74d", 0x76, 0x7fff, 0x0, 0x3}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x2, 0x4, r2, &(0x7f0000000940)="76a2fcef12e9e28c9fe254dcfd8076d494f77b62963189816d7feafb71ffe8a1915840e122cce014dacea455954726ccd6e0535b046e76ef68284437c0274e8d0306e7742ea03bc20a34c0f63b5f4cb2c8c06597aa0c87009939a3e011d8ff4a6ed3e53c8e0ce615c786bd82dff5e1af51ada94d576ab5348a", 0x79, 0xff, 0x0, 0x1, r4}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x21, r5, &(0x7f00000033c0)="9ab18d469cbec835b4c0ce82266b3d476d8d5f86cdfff8dd218fa26d6d1592c3a47afc096e575a7ebcdfe1ab8c04a365efae1ff07c70a99e37a97c7e07609baf862dcaa10800d267afdb0ffbd91561688a60afe88e5c31d85a98480c90a859f81fdf14541c4eb732bb4a4627ac336dcf2c46029d32729b01dc2469541f3c8e14bc04a08a451805c879174478c59a753024c32889564144a238ac72cc6ec0429fd6ffa172ee62dffc9f637ecce4f471fe523a10493e55d6cc2eaba0a5d6ffe333145768a796ef7c14bbb12f610671c4a0900072782e5811594b517a75b8c33acbd95aa5960c53a01ed2cbcb1e19c79be3e327dcb5a42054f9505e4a8eb93dd2ce4d6946b051d69d34f917d11fa8ce54ebb6db0559fac8c6bfa15d82d44f3f77d4a70e256f694fee3dd6336a0eee035acc1d14eb144dbc224490db28bed3022d8e72418ac64d179ef1aaa4355adf1ee13cbeafc28393708848d00b1a02395598a9f19b967e149147b4ced4f514b4dc735cbac562df0c39a2b2e4b7a4634c7481b942fbb142b959615a24c01702398f60b85c3574d62d9508c08302eab27e2c8ecea2c84c669d4950602fd08ba83d4be6c8b5dbd9230c2f0ff7cced9c711b846ee7a04e2a233321e276af82879d264cd3772a90baffd92071ea93a5aca161ee1356f8d0e195440f6cec28efa60fbddf9010ac2cb6a9048242094717028c4568559ee9cb9b0a56dfe25e2d105486ed06ef9b8fb301f0bcd9d7366e9df8e3f8a718c2bf9c179465e0dd8e455edf62c931eec981505b7cd91e837862a031e89843adabf78c6876af790331bfddbfe5472804644da0f8dcf68d9bf1824a9e3cacbda17cee4bf65f425ba63c099f8d406d779c06365122647e0d6f684371416329469f18d7b7cfd03666b75f91c5633168efda706862ec2db362f79903a03e1e62d43ee6e527d77cd7fffdb89b92fec3c8e095182e52b1dbc3cf21abf978dd1c51964306a7c930f672c361cb42131549a588549a2da3ec5d95cf22be9b18d6a6dab460907ccb1b0017dfe8eb01d81d713bd61f3719215938d789b1a5999abb14cfff7f67104d9ea40be47fe26cc5e3e681b667a8d9f915da602dac1009ceb62b85d13904f2f75a98e039ed92e89efffe55bc48a9c3321446ec773a28dfbfd3982604fdc72426e668cf793d56442ebf4bb0342690d3d4410c96037253900a6c79231af752cd94504ab294c29509546a460a01a95857f3a4f028081a479a8c73dd7fe54b43155bc08bb36c4b469cae8030668313bd2cc2cc1c8d59ab483ab9843733957e4cb2f2283a455154a23e38fb1e3c4411fc95a8aa6aed5f48cec3b6953818608986b4c5d0c56d0a83f07fee8c92f9c4f3fecc09a93d2f15754683e67661be26429796dfe5a5b7f729477fb21b10363a6cbdc5f0a24896209f6ceeec8a9c9dc9a4c1ff6688f78127e9e1752542f860b6c73443ea71aad31bdb4bcf0937fe6bef9e08f6041d48fb43a35b93916bdc7759496494adf634b851238138943f60ed68134179a5c759565964621785cf9178b615a9f3dbd0ebea1283846d47ba05b306d3105c6fdf98ec7862a064e4905a7f13b58605cf850d2389cb3132013862ee23c468f46f870ad1059760a57aee3d0e6eaecd9471d899aa37e5ade6ce971874142f0b4994397b96918b6b26fa9fcc6038f9ccedaace1fc7e143d7eddc75a7dbdec0ff488b08edc5939c526e51f603afb567bfd7d6294ed3dc73c762c152b6d998dccab69bd9e0a3e774070ce617df519896aaf9820d9908af912ce8bdd07de5742152e59c6d794793d83bffecb0527c32e1d313b0414bc6a3d2e25a5341938fa4bd6efe73e1e36e35e71e5ee452dd87c089ccabe361b2181e013e746a374691d8e9c52fafae0e14a03d255956067a370c9f2c62d3dd9ee208fefdfdd39a9e90f81d25f7927fdbcf6af4f04a502e3bbc1aafac0a71493fc599896b6e1a10152bb918a87d60676546111cb3cf32008d1f36cc889b09b674810b2e7620791215410b35d2f47ad9a813e78d29dca619484c9aa503df8ba1cf7f09e41b759274c3e6578ac7603df481b38a764c2c572380a9843617f3ec7c30f6e0da36dee12e76e8fbf97c1b9862ddbb1e231075e2f2b93aec56088d82b8673a4f2fafc0901e4b74cfe4489d21bc53ea5d51cf65e3dc0dc1f671b6fb90075ad890619cf19425c9b305b99698e476af564a9452d1e6e53a5782a28978a7b011f8e47b6a05d5461003ca571fab918918aa416581f08f7b6e81fd95afb5d2f8442fb40c2b11e3f2a444dccd9f93eacb5fc6ccea742340cbfa55572c6010683d53f7abb6c4f9824f9a2a5a22a6b127b9458368f51dfddaf6876e741dad5674951fb76a9255470f92edf53277462d63620ccde66e46fcef0a8bcb56b529adc465c4ba966cfb7096abcc4e1fab0172be248e48e2a9490005ecf3d69cdd8f96e54b180a7ebca94e64ba11a36ded2b877af64d368d4080b0cc1f3de596c88dedf4320c15a1cc09de0cfb66cd69f7a09dc6fe4ef8c5ba56aa605c7e836e9bd1f36b4184342e343eabda8bb7eb81f6b942037dcced74e2cfede897d47e1ac5916cc233498cc911f614249dbed3344c5825528854f86deb87511db498a8997451a2b82a91c73b6e4e3fc10d60e2a2507b4c224b3fd807ef0c18c1366ed725afe150d536910298af44c765d45b9e12c62bd3f14bab89dec915a94c5fd75ab426ce8912dad26385a769873521875f58394d5d0482a9c0f48fecab4e89caf9955fda190b014514cbe36b19978e9b83e97cacbb2da0352eaf87b74b9fd267e7fdccb572bbfee927d24e1863101b17acef455aeffd4b922927328bdb4ef1d94870f689343def7859640460f9c3e261491b69bd08c79c46f4a3caa8b0f7544701726dd72b3f957d57dde130e81e2343d50e35fc0fe8ecf40faa7b6095ce5a343c2299e9a6bf3373acc7abc0b11c5f80d07897e129ce9fee67afda87d806ddd7ab2a3cdadaddb9c2a3281cac186f6829678de212725f0c15ee190ad3311bcfce5754594b0b537d24cf3aa4e1a03d8aea7490bc48c5c7848ddc97ea812bada02cdd419c3ed3840244900549ceeaf05c63a1b2d3d25f122b8413c90697f902a3a285f507ef1f5549b15dcc20a1d09ef2cda6c734f2c5e46bc711ff3f06abe591e3f2b04a8d15f98197e0e574803a9b39fdc20aa37ddd2c0081521cef4bf25a98898cca9c9bce841c02fcbc7c7a9a6e3ce60cc0b623ec9649bc5ec7aa0150044fadb8fe4417816e8c57dd609e3b3f5cc4a367ac74df9550cdde600126e235d412fae0b29dcce25a00f773cb53cac450e0fea22a4d20649d0c6a00ed475b8dd1594417980685d55bdbb48f34b9b894d36cab41a3cadaa0d92cb1885e7ec60d74edec98035fd67db4e440432357b6aebcd2bb504d0d9c4f881f6a99b10a91ca381209043a22280af8101056ee8dfea5c86c73602a9ac1905bd8fbb17c8d9aeb9f8805fd1603768b89a4f3bf8217455907628544d67153126b9522b94dd83862060dcaf356a885c7fc766e60c143076b804030f6b9db1e7e61a40b76a9fa1ecc9a7293b1e9d82d90b7fe6406f986778013e2f8e2c517faa0512dddf78ca827c82438357b6c9ad02feedb5e874233c398de9fd29735ab004521a4ba066418eada11c4aca13462e69a9439f4b0ae1989f350ecbee9250d8dca2eec2a1ea5572e18b529286e98b3815d531565ce054e411e6f32a25f80560f4c71a1cf585adc69b0e81b6d1eae7af6193657848e6a8e66e530b8c3fbce006ebe6aa8f4eabf83ed8409f00fdde936b35b83fbcc324472bbad29b8e2829c1b4bf7aae778bf3175650582a0179e9d04759f4a1d7c23cd29a50a54c9ef92df2876d6979e930cca56486028d6b9da9e227ca78f8f645c5d2e7976edf0815baf9f6d4c4c8953054b426eb40bac1e7192f8afa281a53510bf78e40e29fd144585bb3740bb3b122d0d91807923b668eee9b5374fe9038ba9172d79c6bbf2dffcb05f60b59ab6ed5ec749dfa829c29283e1c2c1f9c7b984a07be45385130e86b645b23f129b168c11a0f90ce48bda788986c0dc11e731e9e79b20f29c549c36e825bba018a70f742d78069e456d1deba0a498d77ed8c87f2ff6961bc6758c831a928d1046e614b785b44cc43bf72a9875989ae2c9bf621cc03d89483d6407923a2a0a9b5067edfcb97aa0ff8d066dcf7b8921f1a7d25f77ac78ea0939712ee1ba6877a54ecbfba5daa194361af84061f3f1b6a62abad7e2b66480040433e32607e83a7104c7fa281666eff8b189f7f5bc7dd8aa665d5ce041924ae837207f0c480b54890a7a7c57b29d5a6384962efa2a49fc46c1e4affb944452ea87dca9fb3e5f3dc7a2e40cbdd88250907fd385e535a436275c2c0816afa1ceb55fe95ab84b5fff40229ed22f2e9a99b1edf8a7c0708f7242f611ff1d8697177a1fc684bc3ea180602e3fc4287590c3e816d58a18a282f6eb8ef40697b7613c9e7ce540b4204ca4ddf92293cfe348e0712d8a212db77d7828a480dbc5659e3e401427b613bd83266411b5ea81c2176ca2fe678d762beeac67ee66cdbb0107bcbe6ec0a9cc50d1986d6249a2b7d189e29af254df4c90345f90dba550891069087a66d2bb3b2ff3607411d3aec2a13a51050df543c0103e9b95f400932d6d88229c226a6b7991d7c8d0544ed61b11b6f84f6bd7381ea94d80f4d328f6a025db4364b74e86c1da52bfd2de6078bbc5ea8db2125d96839960dbe4573149681b07fcc67d7055e095d4128273e67f0d62f11082c10b07cb4b440ea1c2c8d4e2eea67fa7daea0ced462bc7b2fe32232c2a1718909dd62f72a6f3d8cf4a31cb6e40a20989a408b486c901e3ac8544e2645f0040e5c83f77c495e30d9ea4b2a6334bc79b66843c11d8726abc8bc3bb0cec655faa22ccef9f3f997e5f384c429ed11ce20909f79a9d759ce78ec50ffedbfb3407a6022c8bab4970e8a916462bc8d2ae68a4a80f7fd8fade1e44a577f05cd53e5c2d4371916b31d4cad6293473f06e002b828f6915887deb1ad9ecfce1fc4da70d87afa38f3ae702b2c870a3b4c58394fbc031c199b9f28720f2cec0ceced141ba125d5df8b079b290f9ea8cb5422f1f45ef92e6f5849d6bd3d1e0ab515a5fce0a00ae4f7565115e6d7e79e0cfc6c0a0acd947a3411850d7a0cd181c3e208680490a033e08e5373642728897ad2db8717c01a06d47d16dd1e3ba7bb456efa3f19132895c2aeeea2bff2840d88e5a91062db6a0ce22f8c3239424303d77e2d5cde478885f2cfc8167e5acb39cc3d892847cdacae950abdde11adf8d78106b1462dfcb20df81b340f893d21cba1596925c71a623e76d3fcc9615c6a238d9fbab1a8fd9d23230ac90775646e92652b5c2747c9d426b27a529b5fb2fe8df1ef5b2866ccd80f6f68cb36b9882c853ca9cfe5563ccf66f4c5c8ab89b202bba456c970c7696b386a1e54a27e6b1cd731058de3a4a3479301934df6d13050abd3b78e469714afd8729b695db0768c6e13f7ec7e8f1a72219bbeff7e8273ed3c7b6ebd87798fc441fdb5fc19d5794a04113de4562c4adc252c4cabf8af61450e80f69f3a2fe2f14fe03cb6aceadc711adfdbf0aabed57b0f9b10b83bf3e829b26589bbc8216b077acd6ed44073136e6f9125ad17c4c8c53736c1942ad2f98aae6c0ef02aa9c0d78a118c251d1bae92abf437eabb66b69702993087c41db3f57609c7af5939d566e625f31d5afa3b46b55df0d4773b6f65e0e43081ffa34e20a", 0x1000, 0x0, 0x0, 0x3}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x7, 0x8, 0xffffffffffffffff, &(0x7f0000000a80)="a5325e9cc4686c8c28bdd0e5963b688ea50a9c4b09aa443c397eadaa780f", 0x1e, 0x3, 0x0, 0x1}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x2, 0x75c, 0xffffffffffffffff, &(0x7f0000000b00)="8066350b90898f44a62ff575a21db706eacc6238ff6b929b54e51d34eb79", 0x1e, 0x4, 0x0, 0x2, r8}]) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) r10 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000380)={'syztnl0\x00', r11, 0x7800, 0x10, 0x6, 0x0, {{0x9, 0x4, 0x2, 0x9, 0x24, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast2, @private=0xa010102, {[@lsrr={0x83, 0x7, 0xbb, [@multicast1]}, @generic={0x7, 0x7, "ecb090098f"}]}}}}}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r10, 0x8982, &(0x7f0000000400)={0x2, 'geneve1\x00', {0x9}, 0x9}) 801.508871ms ago: executing program 0 (id=734): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r2, 0x9) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r3, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) readv(r1, &(0x7f0000000b40)=[{&(0x7f00000033c0)=""/4089, 0xff9}, {&(0x7f00000023c0)=""/4087, 0xff7}], 0x2) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) futex(&(0x7f0000004000)=0x2, 0x8d, 0xfffff7fc, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215) pread64(r4, &(0x7f0000000200)=""/43, 0x2b, 0x730) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x29, 0x7, 0x9, 0x6, 0x3, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x40}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000500a}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x38, r5, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3}]}, 0x38}}, 0x20000000) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x8, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r6, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) 794.315751ms ago: executing program 1 (id=735): perf_event_open(&(0x7f0000001280)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1d0499, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x6025, 0x4005, 0x2, 0x8, 0x2, 0x20005, 0x7f, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x40940, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffff8}, 0x18) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000280)=0x630a, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) recvmmsg(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000300)=""/122, 0x7a}, {&(0x7f0000000780)=""/126, 0x7e}, {&(0x7f00000004c0)=""/68, 0x44}, {&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/182, 0xb6}, {&(0x7f0000000700)=""/102, 0x66}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f0000001000)=""/193, 0xc1}, {&(0x7f0000000880)=""/242, 0xf2}], 0x9, &(0x7f0000000a40)=""/126, 0x7e}, 0xe4}], 0x1, 0x40012020, 0x0) 753.059725ms ago: executing program 1 (id=736): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x4000) r5 = syz_io_uring_setup(0x14f5, 0x0, 0x0, &(0x7f0000000140)=0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r7 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000180)='%+9llu \x00'}, 0x20) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000780)={{{@in=@private, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@dev}}, &(0x7f0000000400)=0xe8) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x6, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func={0x18, 0x2}]}, &(0x7f0000000600)='syzkaller\x00', 0xe2, 0x0, 0x0, 0x40f00, 0x8, '\x00', r9, 0x0, r3, 0x8, &(0x7f0000000680)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0xe, 0x2, 0x4}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000700)=[r7, r8, r7, r1], &(0x7f0000000740)=[{0x5, 0x1, 0xa}, {0x4, 0x5, 0x6, 0x5}], 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='kfree\x00', r11}, 0x18) close(0xffffffffffffffff) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0x28, r13, 0xc4fc9e906872338b, 0x70bd2e, 0x1000000, {{0x15}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x37}}}}}, 0x28}}, 0xc040000) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x34, r13, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7f, 0xc}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x48040}, 0x20009000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r6, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r5, 0x3516, 0xddd6, 0x4, 0x0, 0x0) 730.658258ms ago: executing program 4 (id=737): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x99089e6a87f181e9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0, 0x0, 0x5}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r1) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r5, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x3, 0xfffffff2, 0x1, 0x1}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x40) sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x300, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) close(r4) 655.285835ms ago: executing program 0 (id=738): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020001, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f0000001a40)=[{&(0x7f00000014c0)="aca628ce8c14bb79756f7ed21e68d54ee666f95b8f1405ca3da81f0448bdda6e4f805a0b9afbec14fcd1e26eb2b02ded590a06a7f2278912ef1e6b455582470eaa394e49e0c65a769a12cc0db8c379d2b9cdb583e4d357be3b671c5dde39aaaacb8c7c7c298fd091ee3cd1581d70fe215857018db3d4a88f360d415215ee18ae4a", 0x81}, {&(0x7f0000000240)="49cdc1e6b71832ecfb957a31f3829731d0e7ad68f7f7f228e7a6ca528052a078e82b93e719086ff33545c6455056c7e0ee521397cb2ea510019221bf920c47363397b6feea7d40641bc20ea7dc871d3c8910fe49d00c6a7a025f4ce3a42782e8", 0x60}, {&(0x7f0000000180)="3190cd248b6de14bab90f104d47907b6321c91511a409a5f4ac3c8ba7367ff83a50a7a1edbb6f473cb7e8b0f9f95d596dca6b5bffa", 0x35}, {&(0x7f0000001600)}, {&(0x7f0000001700)="6d211a48886383c371915ff7e1ccbacc543d9e633330d3d00eb8e124718a943b4a0dd513a6ea30bf8c38b84d29ab7df79b350f128cb3ab31eeeb37a57e1399bf95ab19394ae8339b877a72df0acb2e6df29cbb0a132190ebef514a03042c733ba865a8ec2f5e25daabe5b88f99338e8a96641adee2decfec55cbdb06d9ad1ca22f66fae3609dff7d1caa4bf726554f2721f5309aaf7816ffc94254ad07437035d4469c2ee02c75caa1", 0xa9}, {&(0x7f00000017c0)="61954face372ecd5ac1f92abe75fb93f725f1ef49fb429a41d659aeb1e3c38a2f2e30cae44b0c7a74ae4685712d6f77a1d49ed8da097656b8779ca0c1e5a880462e8cbef6e0eeb0ef7da7cb8e9735f2e06646c1d9bcfaa3df19e186fe6d89318bcc9d1994f38739b9b28db6cee047978ff51bfef111a82", 0x77}, {&(0x7f0000001840)="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", 0xfb}, {&(0x7f0000001940)="32614b75920f0452676a99ff53efef281137e25c08d36f496094396357c2d404838f09d2dccf306822ed7064120419e5d338a91b5f62b10cb16392fbbd392a1721e590429a64b58dcf67fbabd9eda07b7bcfe805c2d4caf4f1289291c1ab1a5557e5aa5ec5917cb56d87aeab7b8e1cbc4c15246c50fa91269554583d8b37342555aac8201380afe982972dd3d882dc1ddab34d27672e23a911165ad73b2eac24d637642999185f8e6e3ef11571b8d1ab94b90c55bae422f4aca269d884ef0ae5509d4e6046610942", 0xc8}], 0x8, 0x3, 0x8, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = msgget$private(0x0, 0x80) msgrcv(r2, 0x0, 0x0, 0x1, 0x2000) msgrcv(r2, 0x0, 0x0, 0x3, 0x2000) msgctl$IPC_RMID(r2, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005200010000000000000000000200000008000100", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0xfe8e, 0x12) 606.88242ms ago: executing program 1 (id=739): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000008000"], 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x205, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x80, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80ad}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0xe, @local, 0x7}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000003140100c68f7bec9aff068609000200737962320000000008004100736977001400330062726964676530"], 0x38}, 0x1, 0x0, 0x0, 0x44805}, 0x50) 564.805214ms ago: executing program 1 (id=740): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000001340)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0xf, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000600)="92", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e20, 0x9, @private2, 0x5}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000040)='g', 0x1}], 0x1}}], 0x2, 0x20000800) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000010040)={0x0, 0x7ff}, &(0x7f0000010080)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000001000000000fe8000000000000000000000000000bb", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) 519.043968ms ago: executing program 1 (id=741): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710429000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000000010104"], 0x64}}, 0x2000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x4004814}, 0x40) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="00006005bbbbbbbbbbbb007ddd0bbf008100000086dd"], 0x42) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x20240, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r7, &(0x7f0000004200)='t', 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r9, 0x0, 0x2000000000000000}, 0x18) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r8) sendfile(r7, r6, 0x0, 0x3ffff) sendfile(r7, r6, 0x0, 0x7ffff000) 487.209111ms ago: executing program 0 (id=742): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x9658, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd9b, 0x3}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x8f17, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b00500000000"], 0x5b0}, 0x20008001) sendmsg$inet6(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000022c0)="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", 0x5ac}], 0x1}, 0x20000044) 486.799531ms ago: executing program 0 (id=743): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffff8}, 0x18) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000280)=0x630a, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) recvmmsg(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000300)=""/122, 0x7a}, {&(0x7f0000000780)=""/126, 0x7e}, {&(0x7f00000004c0)=""/68, 0x44}, {&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/182, 0xb6}, {&(0x7f0000000700)=""/102, 0x66}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f0000001000)=""/193, 0xc1}, {&(0x7f0000000880)=""/242, 0xf2}], 0x9, &(0x7f0000000a40)=""/126, 0x7e}, 0xe4}, {{0x0, 0x0, &(0x7f0000000e80)}, 0x1}], 0x2, 0x40012020, 0x0) 471.674803ms ago: executing program 2 (id=744): bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unlink(&(0x7f0000000140)='./cgroup\x00') 456.471885ms ago: executing program 0 (id=745): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c5"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001080)={0xf, {"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", 0x1000}}, 0x1006) 428.559217ms ago: executing program 2 (id=746): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000002060101000000000000000000000000050005000a0000000500010007007c4505000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 388.005212ms ago: executing program 2 (id=747): mkdirat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r2}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x1c161, 0x2, 0x0, 0x6, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="6800000010000104fafffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r6], 0x68}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xf) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r9, 0xc020f509, 0x0) r10 = getpid() tkill(r10, 0x35) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{}, &(0x7f00000004c0), &(0x7f0000000340)='%-010d \x00'}, 0x20) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r12}, 0x10) dup(r11) ioctl$TCFLSH(r7, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 377.164372ms ago: executing program 0 (id=748): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x200000000000000) timer_create(0x0, &(0x7f0000000580)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x60e, &(0x7f00000007c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0x800}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd30, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee11, 0x0, 0x0, 0x3], [0x0, 0x8, 0x3]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4c845}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x145402, 0x1c3) writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) 270.593663ms ago: executing program 4 (id=749): mkdirat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r2}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x1c161, 0x2, 0x0, 0x6, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="6800000010000104fafffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r6], 0x68}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xf) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r9, 0xc020f509, 0x0) getpid() bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r8, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000380)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r10}, &(0x7f00000004c0), &(0x7f0000000340)='%-010d \x00'}, 0x20) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r12}, 0x10) dup(r11) ioctl$TCFLSH(r7, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 0s ago: executing program 3 (id=750): r0 = socket$inet(0x2, 0x1, 0x0) listen(r0, 0x1) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x1}}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r3, &(0x7f0000000080)=""/1, 0x1) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x2) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) r7 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x2}, 0x0) r8 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0xd1, 0x428a, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x7, @perf_config_ext={0x100000008}, 0x88025, 0xccf8, 0x0, 0x1, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = dup(r8) exit(0x0) read$char_usb(r9, &(0x7f0000000180)=""/147, 0xfdef) write$cgroup_subtree(r6, &(0x7f00000001c0)=ANY=[@ANYRES64=r2], 0x5) r10 = socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000200)='./cgroup/cgroup.procs\x00', 0x440200, 0x40) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r10, 0x8982, &(0x7f0000000000)={0x1, 'syzkaller1\x00'}) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) close_range(r11, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ten_on_dev, error -98 [ 38.449550][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 38.449767][ T3610] Bluetooth: hci0: command 0x1003 tx timeout [ 38.549960][ T3835] loop1: detected capacity change from 0 to 32768 [ 38.581862][ T3850] loop2: detected capacity change from 0 to 2048 [ 38.600156][ T3545] loop1: p1 p3 < > [ 38.619931][ T3310] loop2: p1 < > p4 [ 38.624370][ T3310] loop2: p4 size 8388608 extends beyond EOD, truncated [ 38.648274][ T3850] loop2: p1 < > p4 [ 38.654810][ T3835] loop1: p1 p3 < > [ 38.659017][ T3850] loop2: p4 size 8388608 extends beyond EOD, truncated [ 38.778365][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 38.778702][ T3545] udevd[3545]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 38.802339][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 38.802362][ T3545] udevd[3545]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 38.824864][ T3856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.109'. [ 38.834922][ T3856] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 38.858564][ T3865] netlink: 48 bytes leftover after parsing attributes in process `syz.1.112'. [ 38.983737][ T3866] loop4: detected capacity change from 0 to 1024 [ 38.990555][ T3866] EXT4-fs: Ignoring removed orlov option [ 39.010873][ T3866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.058864][ C0] hrtimer: interrupt took 28917 ns [ 39.445973][ T3884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.117'. [ 39.456356][ T3884] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 39.612756][ T3903] syz2: rxe_newlink: already configured on ip6_vti0 [ 39.629165][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.640853][ T3903] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.654102][ T3903] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.711650][ T3901] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 39.719556][ T3901] FAT-fs (loop2): Filesystem has been set read-only [ 39.726302][ T3901] syz.2.123: attempt to access beyond end of device [ 39.726302][ T3901] loop2: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 39.740363][ T3901] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 39.748184][ T3901] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 39.756637][ T3901] syz.2.123: attempt to access beyond end of device [ 39.756637][ T3901] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 39.764452][ T3903] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 39.770456][ T3901] syz.2.123: attempt to access beyond end of device [ 39.770456][ T3901] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 39.809631][ T3901] syz.2.123: attempt to access beyond end of device [ 39.809631][ T3901] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 39.823548][ T3901] syz.2.123: attempt to access beyond end of device [ 39.823548][ T3901] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 39.837503][ T3901] syz.2.123: attempt to access beyond end of device [ 39.837503][ T3901] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 39.851462][ T3901] syz.2.123: attempt to access beyond end of device [ 39.851462][ T3901] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 39.878968][ T3901] syz.2.123: attempt to access beyond end of device [ 39.878968][ T3901] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 39.893358][ T3901] syz.2.123: attempt to access beyond end of device [ 39.893358][ T3901] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 39.907890][ T3901] syz.2.123: attempt to access beyond end of device [ 39.907890][ T3901] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 39.921558][ T3912] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.921800][ T3912] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.954804][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.992449][ T3917] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 40.001218][ T3917] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 40.027627][ T3919] siw: device registration error -23 [ 40.060008][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.094736][ T3917] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.127: Allocating blocks 41-42 which overlap fs metadata [ 40.126021][ T3917] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.127: Allocating blocks 41-42 which overlap fs metadata [ 40.126520][ T3922] EXT4-fs: Ignoring removed orlov option [ 40.146295][ T3917] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.127: Failed to acquire dquot type 1 [ 40.162897][ T3926] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.175699][ T3917] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 40.178155][ T3930] FAULT_INJECTION: forcing a failure. [ 40.178155][ T3930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 40.190333][ T3917] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.127: corrupted inode contents [ 40.203362][ T3930] CPU: 0 UID: 0 PID: 3930 Comm: syz.4.131 Not tainted syzkaller #0 PREEMPT(voluntary) [ 40.203396][ T3930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 40.203451][ T3930] Call Trace: [ 40.203459][ T3930] [ 40.203468][ T3930] __dump_stack+0x1d/0x30 [ 40.203496][ T3930] dump_stack_lvl+0xe8/0x140 [ 40.203577][ T3930] dump_stack+0x15/0x1b [ 40.203601][ T3930] should_fail_ex+0x265/0x280 [ 40.203629][ T3930] should_fail+0xb/0x20 [ 40.203650][ T3930] should_fail_usercopy+0x1a/0x20 [ 40.203733][ T3930] _copy_to_user+0x20/0xa0 [ 40.203766][ T3930] simple_read_from_buffer+0xb5/0x130 [ 40.203791][ T3930] proc_fail_nth_read+0x10e/0x150 [ 40.203838][ T3930] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 40.203867][ T3930] vfs_read+0x1a8/0x770 [ 40.203886][ T3930] ? __rcu_read_unlock+0x4f/0x70 [ 40.203910][ T3930] ? __fget_files+0x184/0x1c0 [ 40.203936][ T3930] ? mutex_lock+0x58/0x90 [ 40.204014][ T3930] ksys_read+0xda/0x1a0 [ 40.204036][ T3930] __x64_sys_read+0x40/0x50 [ 40.204086][ T3930] x64_sys_call+0x2889/0x3000 [ 40.204114][ T3930] do_syscall_64+0xd8/0x2c0 [ 40.204154][ T3930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.204201][ T3930] RIP: 0033:0x7f2704abe15c [ 40.204217][ T3930] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 40.204237][ T3930] RSP: 002b:00007f270351f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 40.204267][ T3930] RAX: ffffffffffffffda RBX: 00007f2704d15fa0 RCX: 00007f2704abe15c [ 40.204281][ T3930] RDX: 000000000000000f RSI: 00007f270351f0a0 RDI: 0000000000000006 [ 40.204301][ T3930] RBP: 00007f270351f090 R08: 0000000000000000 R09: 0000000000000000 [ 40.204314][ T3930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.204328][ T3930] R13: 00007f2704d16038 R14: 00007f2704d15fa0 R15: 00007fff21039008 [ 40.204348][ T3930] [ 40.223706][ T3926] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.416648][ T3917] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.127: mark_inode_dirty error [ 40.436533][ T3917] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.127: corrupted inode contents [ 40.457681][ T3922] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.479865][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.496670][ T3917] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.127: mark_inode_dirty error [ 40.507930][ T29] kauditd_printk_skb: 380 callbacks suppressed [ 40.507946][ T29] audit: type=1400 audit(1766171042.904:1123): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 40.554282][ T3917] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.127: corrupted inode contents [ 40.576886][ T3939] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 40.587714][ T3917] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 40.596394][ T29] audit: type=1326 audit(1766171043.004:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3942 comm="syz.3.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71eabf749 code=0x7ffc0000 [ 40.619824][ T29] audit: type=1326 audit(1766171043.004:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3942 comm="syz.3.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71eabf749 code=0x7ffc0000 [ 40.619891][ T3939] netlink: 28 bytes leftover after parsing attributes in process `syz.2.134'. [ 40.652090][ T29] audit: type=1326 audit(1766171043.004:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3942 comm="syz.3.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc71eabf749 code=0x7ffc0000 [ 40.675521][ T29] audit: type=1326 audit(1766171043.004:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3942 comm="syz.3.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71eabf749 code=0x7ffc0000 [ 40.677931][ T3917] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.127: corrupted inode contents [ 40.698854][ T29] audit: type=1326 audit(1766171043.004:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3942 comm="syz.3.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc71eabf749 code=0x7ffc0000 [ 40.698938][ T29] audit: type=1326 audit(1766171043.004:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3942 comm="syz.3.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71eabf749 code=0x7ffc0000 [ 40.711738][ T3917] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.127: mark_inode_dirty error [ 40.733913][ T29] audit: type=1326 audit(1766171043.004:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3942 comm="syz.3.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7fc71eabf749 code=0x7ffc0000 [ 40.733945][ T29] audit: type=1326 audit(1766171043.004:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3942 comm="syz.3.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71eabf749 code=0x7ffc0000 [ 40.757901][ T3917] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 40.816186][ T3939] netlink: 'syz.2.134': attribute type 3 has an invalid length. [ 40.848606][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.878221][ T3917] EXT4-fs (loop0): 1 truncate cleaned up [ 40.884778][ T3917] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.939049][ T29] audit: type=1326 audit(1766171043.344:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3948 comm="syz.3.138" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc71eabf749 code=0x0 [ 40.970293][ T3917] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 40.999199][ T3956] EXT4-fs: Ignoring removed orlov option [ 41.029829][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.061719][ T3956] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.314974][ T3977] set_capacity_and_notify: 7 callbacks suppressed [ 41.314990][ T3977] loop1: detected capacity change from 0 to 512 [ 41.353035][ T3977] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.367385][ T3977] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.390444][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.436830][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.495176][ T4000] netlink: 48 bytes leftover after parsing attributes in process `syz.2.151'. [ 41.562451][ T4007] netlink: 'syz.2.151': attribute type 4 has an invalid length. [ 41.570184][ T4007] netlink: 152 bytes leftover after parsing attributes in process `syz.2.151'. [ 41.633193][ T4007] .`: renamed from bond0 (while UP) [ 41.659487][ T4013] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 41.668728][ T4013] loop4: detected capacity change from 0 to 512 [ 41.687125][ T4013] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.706541][ T4013] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.730231][ T4019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.156'. [ 41.739278][ T4019] netlink: 312 bytes leftover after parsing attributes in process `syz.0.156'. [ 41.744136][ T4013] bridge_slave_0: left allmulticast mode [ 41.748384][ T4019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.156'. [ 41.753971][ T4013] bridge_slave_0: left promiscuous mode [ 41.754146][ T4013] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.780068][ T4013] bridge_slave_1: left allmulticast mode [ 41.785834][ T4013] bridge_slave_1: left promiscuous mode [ 41.791725][ T4013] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.802060][ T4013] bond0: (slave bond_slave_0): Releasing backup interface [ 41.818991][ T4013] bond0: (slave bond_slave_1): Releasing backup interface [ 41.846181][ T4013] team0: Port device team_slave_0 removed [ 41.871249][ T4013] team0: Port device team_slave_1 removed [ 41.874944][ T4035] loop0: detected capacity change from 0 to 512 [ 41.881846][ T4013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.891086][ T4013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.901313][ T4013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.908786][ T4013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.926737][ T4013] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 41.950140][ T4035] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.990477][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.009802][ T4035] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.039883][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.081385][ T4032] loop3: detected capacity change from 0 to 1024 [ 42.088317][ T4032] EXT4-fs: Ignoring removed orlov option [ 42.121441][ T4032] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.249778][ T4057] ipvlan3: entered promiscuous mode [ 42.262637][ T4057] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 42.265870][ T4052] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 42.280737][ T3610] Bluetooth: hci0: sending frame failed (-49) [ 42.290582][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 42.515191][ T4082] loop2: detected capacity change from 0 to 512 [ 42.533798][ T4082] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.546765][ T4082] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.573737][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.632054][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.647926][ T4090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.657639][ T4090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.668304][ T3486] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 42.676055][ T3486] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 42.683824][ T3486] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 42.694747][ T3486] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 42.702472][ T3486] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 42.710185][ T3486] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 42.717832][ T3486] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 42.739692][ T3486] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 42.789187][ T4091] fido_id[4091]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 42.856930][ T4096] loop3: detected capacity change from 0 to 512 [ 42.864405][ T4096] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 42.877479][ T4096] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 42.888654][ T4096] EXT4-fs (loop3): 1 truncate cleaned up [ 42.894774][ T4096] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.909896][ T4096] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.944635][ T4100] dvmrp1: entered allmulticast mode [ 42.951759][ T4100] __nla_validate_parse: 2 callbacks suppressed [ 42.951776][ T4100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.179'. [ 43.010819][ T4105] loop4: detected capacity change from 0 to 512 [ 43.151513][ T4099] dvmrp1: left allmulticast mode [ 43.190134][ T4113] netlink: 24 bytes leftover after parsing attributes in process `syz.0.183'. [ 43.225105][ T4113] bridge_slave_0: entered promiscuous mode [ 43.235373][ T4113] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 43.259847][ T4117] loop4: detected capacity change from 0 to 512 [ 43.275745][ T4117] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.303773][ T4117] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.330733][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.371719][ T4130] FAULT_INJECTION: forcing a failure. [ 43.371719][ T4130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.384859][ T4130] CPU: 1 UID: 0 PID: 4130 Comm: syz.0.189 Not tainted syzkaller #0 PREEMPT(voluntary) [ 43.384886][ T4130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 43.384900][ T4130] Call Trace: [ 43.384908][ T4130] [ 43.384916][ T4130] __dump_stack+0x1d/0x30 [ 43.385013][ T4130] dump_stack_lvl+0xe8/0x140 [ 43.385037][ T4130] dump_stack+0x15/0x1b [ 43.385057][ T4130] should_fail_ex+0x265/0x280 [ 43.385144][ T4130] should_fail+0xb/0x20 [ 43.385187][ T4130] should_fail_usercopy+0x1a/0x20 [ 43.385218][ T4130] _copy_from_user+0x1c/0xb0 [ 43.385334][ T4130] ___sys_sendmsg+0xc1/0x1d0 [ 43.385377][ T4130] __x64_sys_sendmsg+0xd4/0x160 [ 43.385426][ T4130] x64_sys_call+0x17ba/0x3000 [ 43.385529][ T4130] do_syscall_64+0xd8/0x2c0 [ 43.385567][ T4130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.385593][ T4130] RIP: 0033:0x7f5b9cf2f749 [ 43.385611][ T4130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.385631][ T4130] RSP: 002b:00007f5b9b98f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 43.385776][ T4130] RAX: ffffffffffffffda RBX: 00007f5b9d185fa0 RCX: 00007f5b9cf2f749 [ 43.385784][ T4130] RDX: 0000000000000000 RSI: 00002000000029c0 RDI: 0000000000000003 [ 43.385791][ T4130] RBP: 00007f5b9b98f090 R08: 0000000000000000 R09: 0000000000000000 [ 43.385799][ T4130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.385806][ T4130] R13: 00007f5b9d186038 R14: 00007f5b9d185fa0 R15: 00007ffedd928498 [ 43.385817][ T4130] [ 43.604290][ T4140] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 43.622954][ T4145] dvmrp1: entered allmulticast mode [ 43.645692][ T4145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.195'. [ 43.670636][ T4140] netlink: 28 bytes leftover after parsing attributes in process `syz.2.194'. [ 43.684639][ T4152] loop4: detected capacity change from 0 to 512 [ 43.706649][ T4140] netlink: 'syz.2.194': attribute type 3 has an invalid length. [ 43.735165][ T4152] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.747925][ T4156] loop0: detected capacity change from 0 to 512 [ 43.747925][ T4162] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 43.747951][ T4162] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 43.747985][ T4162] vhci_hcd vhci_hcd.0: Device attached [ 43.770590][ T4152] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.786036][ T4160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.200'. [ 43.794918][ T4160] netlink: 16 bytes leftover after parsing attributes in process `syz.3.200'. [ 43.806446][ T4164] vhci_hcd: connection closed [ 43.806645][ T330] vhci_hcd vhci_hcd.2: stop threads [ 43.817700][ T330] vhci_hcd vhci_hcd.2: release socket [ 43.823233][ T330] vhci_hcd vhci_hcd.2: disconnect device [ 43.863961][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.914717][ T4142] dvmrp1: left allmulticast mode [ 43.931030][ T4174] EXT4-fs: Ignoring removed orlov option [ 43.957965][ T4174] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.981178][ T4182] netlink: 44 bytes leftover after parsing attributes in process `syz.4.205'. [ 43.994256][ T4182] ipvlan4: entered promiscuous mode [ 44.003057][ T4184] FAULT_INJECTION: forcing a failure. [ 44.003057][ T4184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.016222][ T4184] CPU: 0 UID: 0 PID: 4184 Comm: syz.3.206 Not tainted syzkaller #0 PREEMPT(voluntary) [ 44.016365][ T4184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 44.016378][ T4184] Call Trace: [ 44.016386][ T4184] [ 44.016393][ T4184] __dump_stack+0x1d/0x30 [ 44.016494][ T4184] dump_stack_lvl+0xe8/0x140 [ 44.016516][ T4184] dump_stack+0x15/0x1b [ 44.016537][ T4184] should_fail_ex+0x265/0x280 [ 44.016611][ T4184] should_fail+0xb/0x20 [ 44.016631][ T4184] should_fail_usercopy+0x1a/0x20 [ 44.016664][ T4184] _copy_from_iter+0xcf/0xe70 [ 44.016691][ T4184] ? __alloc_skb+0x3bb/0x4d0 [ 44.016715][ T4184] ? __alloc_skb+0x24d/0x4d0 [ 44.016740][ T4184] netlink_sendmsg+0x471/0x6b0 [ 44.016852][ T4184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 44.016884][ T4184] __sock_sendmsg+0x145/0x180 [ 44.016904][ T4184] ____sys_sendmsg+0x31e/0x4a0 [ 44.016954][ T4184] ___sys_sendmsg+0x17b/0x1d0 [ 44.017035][ T4184] __x64_sys_sendmsg+0xd4/0x160 [ 44.017105][ T4184] x64_sys_call+0x17ba/0x3000 [ 44.017168][ T4184] do_syscall_64+0xd8/0x2c0 [ 44.017204][ T4184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.017226][ T4184] RIP: 0033:0x7fc71eabf749 [ 44.017269][ T4184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.017288][ T4184] RSP: 002b:00007fc71d51f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 44.017307][ T4184] RAX: ffffffffffffffda RBX: 00007fc71ed15fa0 RCX: 00007fc71eabf749 [ 44.017320][ T4184] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000007 [ 44.017332][ T4184] RBP: 00007fc71d51f090 R08: 0000000000000000 R09: 0000000000000000 [ 44.017415][ T4184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.017427][ T4184] R13: 00007fc71ed16038 R14: 00007fc71ed15fa0 R15: 00007fffa3c56988 [ 44.017445][ T4184] [ 44.231285][ T4189] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 44.263551][ T4191] FAULT_INJECTION: forcing a failure. [ 44.263551][ T4191] name failslab, interval 1, probability 0, space 0, times 0 [ 44.268741][ T4189] mmap: syz.3.208 (4189) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 44.276222][ T4191] CPU: 0 UID: 0 PID: 4191 Comm: syz.0.209 Not tainted syzkaller #0 PREEMPT(voluntary) [ 44.276249][ T4191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 44.276328][ T4191] Call Trace: [ 44.276335][ T4191] [ 44.276343][ T4191] __dump_stack+0x1d/0x30 [ 44.276373][ T4191] dump_stack_lvl+0xe8/0x140 [ 44.276397][ T4191] dump_stack+0x15/0x1b [ 44.276420][ T4191] should_fail_ex+0x265/0x280 [ 44.276525][ T4191] should_failslab+0x8c/0xb0 [ 44.276551][ T4191] kmem_cache_alloc_noprof+0x69/0x4b0 [ 44.276654][ T4191] ? prepare_creds+0x39/0x550 [ 44.276675][ T4191] ? get_random_u64+0x164/0x210 [ 44.276705][ T4191] prepare_creds+0x39/0x550 [ 44.276801][ T4191] copy_creds+0x8f/0x340 [ 44.276878][ T4191] ? dup_task_struct+0x60b/0x950 [ 44.276901][ T4191] copy_process+0x638/0x1ef0 [ 44.276925][ T4191] ? 0xffffffff81000000 [ 44.276981][ T4191] kernel_clone+0x16c/0x5c0 [ 44.277009][ T4191] ? vfs_write+0x7e8/0x960 [ 44.277031][ T4191] __x64_sys_clone+0xe6/0x120 [ 44.277128][ T4191] x64_sys_call+0x12d0/0x3000 [ 44.277156][ T4191] do_syscall_64+0xd8/0x2c0 [ 44.277191][ T4191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.277286][ T4191] RIP: 0033:0x7f5b9cf2f749 [ 44.277302][ T4191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.277428][ T4191] RSP: 002b:00007f5b9b98efe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 44.277449][ T4191] RAX: ffffffffffffffda RBX: 00007f5b9d185fa0 RCX: 00007f5b9cf2f749 [ 44.277464][ T4191] RDX: 0000200000000080 RSI: 0000000000000000 RDI: 0000000020324000 [ 44.277477][ T4191] RBP: 00007f5b9b98f090 R08: 0000000000000000 R09: 0000000000000000 [ 44.277491][ T4191] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 44.277505][ T4191] R13: 00007f5b9d186038 R14: 00007f5b9d185fa0 R15: 00007ffedd928498 [ 44.277536][ T4191] [ 44.483735][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.674261][ T4203] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.696000][ T4207] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 44.708677][ T4207] netlink: 28 bytes leftover after parsing attributes in process `syz.1.211'. [ 44.709514][ T4203] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.732809][ T4207] netlink: 'syz.1.211': attribute type 3 has an invalid length. [ 44.771467][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.824672][ T4213] netlink: 48 bytes leftover after parsing attributes in process `syz.1.216'. [ 44.873653][ T4214] EXT4-fs: Ignoring removed orlov option [ 44.973668][ T4214] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.068036][ T4219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.218'. [ 45.078093][ T4219] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 45.102846][ T4223] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 45.105045][ T4229] FAULT_INJECTION: forcing a failure. [ 45.105045][ T4229] name failslab, interval 1, probability 0, space 0, times 0 [ 45.125090][ T4229] CPU: 1 UID: 0 PID: 4229 Comm: syz.2.220 Not tainted syzkaller #0 PREEMPT(voluntary) [ 45.125115][ T4229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 45.125148][ T4229] Call Trace: [ 45.125156][ T4229] [ 45.125165][ T4229] __dump_stack+0x1d/0x30 [ 45.125190][ T4229] dump_stack_lvl+0xe8/0x140 [ 45.125222][ T4229] dump_stack+0x15/0x1b [ 45.125247][ T4229] should_fail_ex+0x265/0x280 [ 45.125277][ T4229] should_failslab+0x8c/0xb0 [ 45.125335][ T4229] kmem_cache_alloc_noprof+0x69/0x4b0 [ 45.125477][ T4229] ? skb_clone+0x151/0x1f0 [ 45.125508][ T4229] skb_clone+0x151/0x1f0 [ 45.125542][ T4229] __netlink_deliver_tap+0x2c9/0x500 [ 45.125664][ T4229] netlink_unicast+0x66b/0x690 [ 45.125705][ T4229] netlink_sendmsg+0x58b/0x6b0 [ 45.125818][ T4229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 45.125858][ T4229] __sock_sendmsg+0x145/0x180 [ 45.125979][ T4229] ____sys_sendmsg+0x31e/0x4a0 [ 45.126017][ T4229] ___sys_sendmsg+0x17b/0x1d0 [ 45.126112][ T4229] __x64_sys_sendmsg+0xd4/0x160 [ 45.126150][ T4229] x64_sys_call+0x17ba/0x3000 [ 45.126259][ T4229] do_syscall_64+0xd8/0x2c0 [ 45.126294][ T4229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.126316][ T4229] RIP: 0033:0x7f96da0df749 [ 45.126408][ T4229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.126426][ T4229] RSP: 002b:00007f96d8b3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.126445][ T4229] RAX: ffffffffffffffda RBX: 00007f96da335fa0 RCX: 00007f96da0df749 [ 45.126461][ T4229] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 45.126502][ T4229] RBP: 00007f96d8b3f090 R08: 0000000000000000 R09: 0000000000000000 [ 45.126515][ T4229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.126527][ T4229] R13: 00007f96da336038 R14: 00007f96da335fa0 R15: 00007fff0f83d308 [ 45.126584][ T4229] [ 45.343791][ T4233] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 45.360937][ T4233] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.373793][ T4233] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.399242][ T4233] bridge_slave_0: left allmulticast mode [ 45.405029][ T4233] bridge_slave_0: left promiscuous mode [ 45.410766][ T4233] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.421716][ T4233] bridge_slave_1: left allmulticast mode [ 45.427430][ T4233] bridge_slave_1: left promiscuous mode [ 45.433288][ T4233] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.444298][ T4233] .`: (slave bond_slave_0): Releasing backup interface [ 45.454582][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.464115][ T4233] .`: (slave bond_slave_1): Releasing backup interface [ 45.476539][ T4233] team0: Port device team_slave_0 removed [ 45.485956][ T4233] team0: Port device team_slave_1 removed [ 45.492920][ T4233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.500423][ T4233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.518972][ T4233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.526691][ T4233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.536296][ T4233] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 45.633954][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.636698][ T29] kauditd_printk_skb: 685 callbacks suppressed [ 45.636713][ T29] audit: type=1326 audit(1766171048.044:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4243 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71eabf749 code=0x7ffc0000 [ 45.674865][ T4242] EXT4-fs: Ignoring removed orlov option [ 45.708381][ T29] audit: type=1326 audit(1766171048.084:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4243 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71eabf749 code=0x7ffc0000 [ 45.731927][ T29] audit: type=1326 audit(1766171048.094:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4243 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc71eabf749 code=0x7ffc0000 [ 45.755352][ T29] audit: type=1326 audit(1766171048.094:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4243 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71eabf749 code=0x7ffc0000 [ 45.778740][ T29] audit: type=1326 audit(1766171048.094:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4243 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71eabf749 code=0x7ffc0000 [ 45.802086][ T29] audit: type=1326 audit(1766171048.094:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4243 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc71eabf749 code=0x7ffc0000 [ 45.825455][ T29] audit: type=1326 audit(1766171048.094:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4243 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71eabf749 code=0x7ffc0000 [ 45.848809][ T29] audit: type=1326 audit(1766171048.094:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4243 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71eabf749 code=0x7ffc0000 [ 45.872162][ T29] audit: type=1326 audit(1766171048.094:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4243 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc71eabf749 code=0x7ffc0000 [ 45.895538][ T29] audit: type=1326 audit(1766171048.094:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4243 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71eabf749 code=0x7ffc0000 [ 45.933266][ T4242] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.946079][ T4250] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 45.964459][ T4250] netlink: 'syz.3.226': attribute type 3 has an invalid length. [ 46.049685][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 46.161925][ T4268] ipvlan2: entered promiscuous mode [ 46.173415][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.185623][ T4268] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 46.197172][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 46.358092][ T4277] set_capacity_and_notify: 6 callbacks suppressed [ 46.358109][ T4277] loop0: detected capacity change from 0 to 512 [ 46.385929][ T4263] loop3: detected capacity change from 0 to 128 [ 46.395130][ T4277] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.413294][ T4277] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.413652][ T4263] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 46.441088][ T4263] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 46.451285][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.473891][ T4281] netlink: 'syz.0.234': attribute type 1 has an invalid length. [ 46.487216][ T4281] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.500267][ T4281] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=4281 comm=syz.0.234 [ 46.517564][ T4281] loop0: detected capacity change from 0 to 1024 [ 46.524274][ T4281] ======================================================= [ 46.524274][ T4281] WARNING: The mand mount option has been deprecated and [ 46.524274][ T4281] and is ignored by this kernel. Remove the mand [ 46.524274][ T4281] option from the mount to silence this warning. [ 46.524274][ T4281] ======================================================= [ 46.561610][ T4281] EXT4-fs: inline encryption not supported [ 46.583421][ T4281] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.634058][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.700660][ T4297] netlink: 'syz.4.238': attribute type 4 has an invalid length. [ 46.711841][ T4297] .`: renamed from bond0 (while UP) [ 46.735018][ T4298] loop0: detected capacity change from 0 to 2048 [ 46.779996][ T4298] loop0: p1 < > p4 [ 46.784464][ T4298] loop0: p4 size 8388608 extends beyond EOD, truncated [ 47.333859][ T31] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 47.537889][ T4306] IPv4: Oversized IP packet from 127.202.26.0 [ 47.547450][ T4312] loop0: detected capacity change from 0 to 512 [ 47.587302][ T4312] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.603868][ T4312] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.638453][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.706471][ T4327] loop3: detected capacity change from 0 to 1024 [ 47.725279][ T4327] EXT4-fs: Ignoring removed orlov option [ 47.759987][ T4333] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 47.768168][ T4327] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.784432][ T4333] loop2: detected capacity change from 0 to 512 [ 47.827249][ T4333] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.852935][ T4340] loop0: detected capacity change from 0 to 512 [ 47.860517][ T4340] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 47.869329][ T4340] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 47.878587][ T4333] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.912810][ T4333] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 47.930996][ T4340] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.252: Allocating blocks 41-42 which overlap fs metadata [ 47.955069][ T4340] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.252: Allocating blocks 41-42 which overlap fs metadata [ 47.969349][ T4340] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.252: Failed to acquire dquot type 1 [ 47.969395][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.981151][ T4340] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 48.004620][ T4340] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.252: corrupted inode contents [ 48.005501][ T4330] loop4: detected capacity change from 0 to 2048 [ 48.024087][ T4340] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.252: mark_inode_dirty error [ 48.037082][ T4340] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.252: corrupted inode contents [ 48.049085][ T4340] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.252: mark_inode_dirty error [ 48.061072][ T4340] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.252: corrupted inode contents [ 48.073397][ T4340] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 48.082266][ T4340] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.252: corrupted inode contents [ 48.089449][ T4330] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.099792][ T4340] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.252: mark_inode_dirty error [ 48.117360][ T4340] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 48.126722][ T4340] EXT4-fs (loop0): 1 truncate cleaned up [ 48.128402][ T4346] __nla_validate_parse: 11 callbacks suppressed [ 48.128417][ T4346] netlink: 48 bytes leftover after parsing attributes in process `syz.2.253'. [ 48.165235][ T4340] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 48.198607][ T4330] caif0: entered allmulticast mode [ 48.209527][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 48.215620][ T3610] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 48.231108][ T4347] netlink: 'syz.2.253': attribute type 4 has an invalid length. [ 48.238787][ T4347] netlink: 152 bytes leftover after parsing attributes in process `syz.2.253'. [ 48.303707][ T4353] loop4: detected capacity change from 0 to 512 [ 48.337755][ T4353] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.350089][ T4351] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.254: corrupted inode contents [ 48.364974][ T4351] EXT4-fs (loop0): Remounting filesystem read-only [ 48.372135][ T4351] EXT4-fs (loop0): 1 truncate cleaned up [ 48.377912][ T2042] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 48.378305][ T4351] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.388570][ T2042] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 48.410506][ T2042] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 48.422809][ T4351] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 48.430186][ T4351] vhci_hcd vhci_hcd.2: invalid port number 96 [ 48.436367][ T4351] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 48.472053][ T4362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.258'. [ 48.482486][ T4362] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 48.592930][ T4377] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 48.601881][ T4377] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 48.623290][ T4377] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.264: Allocating blocks 41-42 which overlap fs metadata [ 48.637499][ T4377] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.264: Allocating blocks 41-42 which overlap fs metadata [ 48.651717][ T4377] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.264: Failed to acquire dquot type 1 [ 48.663701][ T4376] GUP no longer grows the stack in syz.0.263 (4376): 200000006000-200000008000 (200000004000) [ 48.674079][ T4376] CPU: 1 UID: 0 PID: 4376 Comm: syz.0.263 Not tainted syzkaller #0 PREEMPT(voluntary) [ 48.674107][ T4376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 48.674120][ T4376] Call Trace: [ 48.674185][ T4376] [ 48.674193][ T4376] __dump_stack+0x1d/0x30 [ 48.674220][ T4376] dump_stack_lvl+0xe8/0x140 [ 48.674243][ T4376] dump_stack+0x15/0x1b [ 48.674266][ T4376] fixup_user_fault+0x50e/0x560 [ 48.674304][ T4376] fault_in_user_writeable+0x5d/0xd0 [ 48.674402][ T4376] futex_lock_pi+0x597/0x780 [ 48.674437][ T4376] ? __pfx_futex_wake_mark+0x10/0x10 [ 48.674465][ T4376] do_futex+0x21f/0x380 [ 48.674524][ T4376] __se_sys_futex+0x2ed/0x360 [ 48.674559][ T4376] ? xfd_validate_state+0x45/0xf0 [ 48.674654][ T4376] __x64_sys_futex+0x78/0x90 [ 48.674690][ T4376] x64_sys_call+0x2bc2/0x3000 [ 48.674764][ T4376] do_syscall_64+0xd8/0x2c0 [ 48.674800][ T4376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.674888][ T4376] RIP: 0033:0x7f5b9cf2f749 [ 48.674907][ T4376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.674930][ T4376] RSP: 002b:00007f5b9b98f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 48.674988][ T4376] RAX: ffffffffffffffda RBX: 00007f5b9d185fa0 RCX: 00007f5b9cf2f749 [ 48.675003][ T4376] RDX: 00000000fffff7fc RSI: 000000000000008d RDI: 0000200000004000 [ 48.675018][ T4376] RBP: 00007f5b9cfb3f91 R08: 0000000000000000 R09: 0000000000000000 [ 48.675033][ T4376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 48.675048][ T4376] R13: 00007f5b9d186038 R14: 00007f5b9d185fa0 R15: 00007ffedd928498 [ 48.675070][ T4376] [ 48.675795][ T4377] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, [ 48.714235][ T4378] loop3: p1 < > p4 [ 48.715028][ T4377] inode 12: [ 48.758295][ T4378] loop3: p4 size 8388608 extends beyond EOD, [ 48.758326][ T4377] block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 48.762869][ T4378] truncated [ 48.769328][ T4377] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.264: corrupted inode contents [ 48.888766][ T4377] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.264: mark_inode_dirty error [ 48.893361][ T3008] loop3: p1 < > p4 [ 48.900515][ T4377] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.264: corrupted inode contents [ 48.904998][ T3008] loop3: p4 size 8388608 extends beyond EOD, truncated [ 48.922859][ T4377] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.264: mark_inode_dirty error [ 48.935229][ T4377] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.264: corrupted inode contents [ 48.949659][ T4377] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 48.970499][ T4377] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.264: corrupted inode contents [ 48.985890][ T4377] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.264: mark_inode_dirty error [ 48.997268][ T4377] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 49.015032][ T4377] EXT4-fs (loop4): 1 truncate cleaned up [ 49.040109][ T4377] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 49.240016][ T4413] EXT4-fs: Ignoring removed orlov option [ 49.350131][ T4422] netlink: 'syz.4.272': attribute type 7 has an invalid length. [ 49.361584][ T4422] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 49.523512][ T4430] netlink: 12 bytes leftover after parsing attributes in process `syz.4.273'. [ 49.550839][ T4427] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 49.676609][ T4438] netlink: 44 bytes leftover after parsing attributes in process `syz.4.276'. [ 49.717810][ T4438] ipvlan5: entered promiscuous mode [ 49.736141][ T4438] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 49.746372][ T1088] Bluetooth: hci0: Frame reassembly failed (-84) [ 49.802410][ T4440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.278'. [ 49.813601][ T4440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.278'. [ 49.835221][ T4440] netlink: 3 bytes leftover after parsing attributes in process `syz.3.278'. [ 49.980221][ T4452] loop2: p1 < > p4 [ 49.984652][ T4452] loop2: p4 size 8388608 extends beyond EOD, truncated [ 50.391339][ T4460] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.439201][ T4466] netlink: 68 bytes leftover after parsing attributes in process `syz.0.285'. [ 50.639822][ T3308] loop0: p1 < > p4 [ 50.644403][ T3308] loop0: p4 size 8388608 extends beyond EOD, truncated [ 50.654089][ T4472] loop0: p1 < > p4 [ 50.659180][ T4472] loop0: p4 size 8388608 extends beyond EOD, truncated [ 50.791379][ T4483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.291'. [ 50.959580][ T29] kauditd_printk_skb: 249 callbacks suppressed [ 50.959671][ T29] audit: type=1326 audit(1766171053.374:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4495 comm="syz.1.296" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c985ff749 code=0x0 [ 51.023737][ T29] audit: type=1326 audit(1766171053.434:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4498 comm="syz.2.297" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f96da0df749 code=0x0 [ 51.434782][ T4504] set_capacity_and_notify: 7 callbacks suppressed [ 51.434835][ T4504] loop0: detected capacity change from 0 to 512 [ 51.450954][ T4504] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 51.459920][ T4504] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 51.481272][ T4504] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.298: Allocating blocks 41-42 which overlap fs metadata [ 51.495221][ T4504] Quota error (device loop0): write_blk: dquota write failed [ 51.502710][ T4504] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 51.512394][ T4504] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 51.522334][ T4504] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.298: Failed to acquire dquot type 1 [ 51.533877][ T4504] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 51.548581][ T4504] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.298: corrupted inode contents [ 51.560514][ T4504] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.298: mark_inode_dirty error [ 51.572061][ T4504] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.298: corrupted inode contents [ 51.584263][ T4504] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.298: mark_inode_dirty error [ 51.595832][ T4504] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.298: corrupted inode contents [ 51.607757][ T4504] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 51.616580][ T4504] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.298: corrupted inode contents [ 51.628626][ T4504] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.298: mark_inode_dirty error [ 51.639963][ T4504] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 51.649127][ T4504] EXT4-fs (loop0): 1 truncate cleaned up [ 51.657969][ T4504] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 51.761672][ T4513] loop3: detected capacity change from 0 to 2048 [ 51.789827][ T3308] loop3: p1 < > p4 [ 51.795424][ T3308] loop3: p4 size 8388608 extends beyond EOD, truncated [ 51.807006][ T4518] netlink: 'syz.0.303': attribute type 1 has an invalid length. [ 51.809500][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 51.820849][ T3610] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 51.831599][ T4513] loop3: p1 < > p4 [ 51.843461][ T4513] loop3: p4 size 8388608 extends beyond EOD, truncated [ 51.852249][ T4518] 8021q: adding VLAN 0 to HW filter on device bond2 [ 51.864864][ T4523] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 51.872201][ T4518] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=4518 comm=syz.0.303 [ 51.885176][ T3008] loop3: p1 < > p4 [ 51.891794][ T4523] loop1: detected capacity change from 0 to 512 [ 51.898726][ T3008] loop3: p4 size 8388608 extends beyond EOD, truncated [ 51.901577][ T4518] loop0: detected capacity change from 0 to 1024 [ 51.914188][ T4518] EXT4-fs: inline encryption not supported [ 51.924052][ T4523] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.024903][ T4523] bridge_slave_0: left allmulticast mode [ 52.030662][ T4523] bridge_slave_0: left promiscuous mode [ 52.036374][ T4523] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.051345][ T4523] bridge_slave_1: left allmulticast mode [ 52.056999][ T4523] bridge_slave_1: left promiscuous mode [ 52.062747][ T4523] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.088910][ T4523] bond0: (slave bond_slave_0): Releasing backup interface [ 52.120836][ T4523] bond0: (slave bond_slave_1): Releasing backup interface [ 52.168522][ T4523] team0: Port device team_slave_0 removed [ 52.218274][ T4523] team0: Port device team_slave_1 removed [ 52.239581][ T4523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.247087][ T4523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.262279][ T4523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.269873][ T4523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.295252][ T4523] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 52.311392][ T36] syb2: Port: 1 Link DOWN [ 52.392512][ T29] audit: type=1400 audit(1766171054.804:2065): avc: denied { shutdown } for pid=4547 comm="syz.1.312" laddr=fe80::12 lport=43013 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.430657][ T4548] syz.1.312 (4548) used greatest stack depth: 9400 bytes left [ 52.473108][ T29] audit: type=1400 audit(1766171054.844:2066): avc: denied { getopt } for pid=4547 comm="syz.1.312" laddr=fe80::12 lport=43013 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.513830][ T29] audit: type=1326 audit(1766171054.914:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4554 comm="syz.2.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96da0df749 code=0x7ffc0000 [ 52.537287][ T29] audit: type=1326 audit(1766171054.924:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4554 comm="syz.2.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f96da0df749 code=0x7ffc0000 [ 52.560524][ T29] audit: type=1326 audit(1766171054.924:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4554 comm="syz.2.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96da0df749 code=0x7ffc0000 [ 52.587091][ T4553] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 52.620771][ T4575] loop0: detected capacity change from 0 to 764 [ 52.660005][ T4575] Symlink component flag not implemented [ 52.665670][ T4575] Symlink component flag not implemented [ 52.666381][ T4581] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 52.679833][ T4575] Symlink component flag not implemented (129) [ 52.686018][ T4575] Symlink component flag not implemented (6) [ 52.715532][ T4581] loop4: detected capacity change from 0 to 512 [ 52.730732][ T4575] rock: directory entry would overflow storage [ 52.736917][ T4575] rock: sig=0x4f50, size=4, remaining=3 [ 52.742522][ T4575] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 52.787624][ T4581] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.798870][ T4589] loop1: detected capacity change from 0 to 1024 [ 52.806920][ T4589] EXT4-fs: Ignoring removed orlov option [ 52.867638][ T4581] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 53.206639][ T4621] loop0: detected capacity change from 0 to 1024 [ 53.216791][ T4621] EXT4-fs: Ignoring removed orlov option [ 53.290437][ T4625] loop4: detected capacity change from 0 to 1024 [ 53.297470][ T4625] EXT4-fs: Ignoring removed orlov option [ 53.599354][ T4644] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 53.608029][ T4644] loop1: detected capacity change from 0 to 512 [ 53.624739][ T4644] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.641963][ T4648] __nla_validate_parse: 11 callbacks suppressed [ 53.641992][ T4648] netlink: 464 bytes leftover after parsing attributes in process `syz.2.340'. [ 53.677168][ T4644] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 53.677485][ T4650] netlink: 48 bytes leftover after parsing attributes in process `syz.2.341'. [ 53.760080][ T4656] netlink: 'syz.2.341': attribute type 4 has an invalid length. [ 53.767768][ T4656] netlink: 152 bytes leftover after parsing attributes in process `syz.2.341'. [ 53.900826][ T4658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.344'. [ 53.941341][ T4658] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 54.148946][ T4683] siw: device registration error -23 [ 54.293956][ T4696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.358'. [ 54.367930][ T4698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.359'. [ 54.378455][ T4698] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 54.398828][ T4709] netlink: 48 bytes leftover after parsing attributes in process `syz.3.362'. [ 54.477885][ T4716] netlink: 464 bytes leftover after parsing attributes in process `syz.1.365'. [ 54.503747][ T4721] netlink: 172 bytes leftover after parsing attributes in process `syz.0.367'. [ 54.517011][ T4723] netlink: 172 bytes leftover after parsing attributes in process `syz.1.368'. [ 54.577270][ T4731] netlink: 'syz.1.371': attribute type 1 has an invalid length. [ 54.592209][ T4731] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.602207][ T4731] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=4731 comm=syz.1.371 [ 54.637155][ T4737] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 54.645954][ T4737] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 54.664422][ T4737] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.374: Allocating blocks 41-42 which overlap fs metadata [ 54.681447][ T4737] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.374: Allocating blocks 41-42 which overlap fs metadata [ 54.695883][ T4737] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.374: Failed to acquire dquot type 1 [ 54.707655][ T4737] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 54.722752][ T4737] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.374: corrupted inode contents [ 54.734719][ T4737] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.374: mark_inode_dirty error [ 54.746438][ T4737] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.374: corrupted inode contents [ 54.758550][ T4737] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.374: mark_inode_dirty error [ 54.772865][ T4737] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.374: corrupted inode contents [ 54.780176][ T3308] loop1: p1 < > p4 [ 54.784893][ T4737] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 54.797613][ T4737] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.374: corrupted inode contents [ 54.809752][ T4737] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.374: mark_inode_dirty error [ 54.821895][ T3308] loop1: p4 size 8388608 extends beyond EOD, truncated [ 54.830914][ T4737] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 54.831477][ T4746] loop1: p1 < > p4 [ 54.840157][ T4737] EXT4-fs (loop0): 1 truncate cleaned up [ 54.850748][ T4746] loop1: p4 size 8388608 extends beyond EOD, truncated [ 54.869091][ T4737] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 54.878612][ T3008] loop1: p1 < > p4 [ 54.884635][ T4751] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.895650][ T3008] loop1: p4 size 8388608 extends beyond EOD, truncated [ 54.930159][ T4756] dvmrp1: entered allmulticast mode [ 54.972648][ T4755] dvmrp1: left allmulticast mode [ 55.061486][ T4764] netlink: 'syz.2.382': attribute type 4 has an invalid length. [ 55.168056][ T4773] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 55.183035][ T4773] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.212776][ T4773] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 55.256590][ T4778] siw: device registration error -23 [ 55.273385][ T4779] EXT4-fs: Ignoring removed orlov option [ 55.395318][ T4790] netlink: 'syz.4.391': attribute type 1 has an invalid length. [ 55.410057][ T4790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.425494][ T4790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=4790 comm=syz.4.391 [ 55.438452][ T4787] EXT4-fs: Ignoring removed orlov option [ 55.454561][ T4790] EXT4-fs: inline encryption not supported [ 55.569864][ T3308] loop4: p1 < > p4 [ 55.574539][ T3308] loop4: p4 size 8388608 extends beyond EOD, truncated [ 55.583865][ T4800] loop4: p1 < > p4 [ 55.588375][ T4800] loop4: p4 size 8388608 extends beyond EOD, truncated [ 55.623731][ T4799] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 55.631622][ T4799] FAT-fs (loop1): Filesystem has been set read-only [ 55.638460][ T4799] bio_check_eod: 7867 callbacks suppressed [ 55.638473][ T4799] syz.1.393: attempt to access beyond end of device [ 55.638473][ T4799] loop1: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 55.658328][ T4799] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 55.666179][ T4799] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 55.674201][ T4799] syz.1.393: attempt to access beyond end of device [ 55.674201][ T4799] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 55.688043][ T4799] syz.1.393: attempt to access beyond end of device [ 55.688043][ T4799] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 55.701926][ T4799] syz.1.393: attempt to access beyond end of device [ 55.701926][ T4799] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 55.715754][ T4799] syz.1.393: attempt to access beyond end of device [ 55.715754][ T4799] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 55.729715][ T4799] syz.1.393: attempt to access beyond end of device [ 55.729715][ T4799] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 55.743650][ T4799] syz.1.393: attempt to access beyond end of device [ 55.743650][ T4799] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 55.757378][ T4799] syz.1.393: attempt to access beyond end of device [ 55.757378][ T4799] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 55.771098][ T4799] syz.1.393: attempt to access beyond end of device [ 55.771098][ T4799] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 55.784882][ T4799] syz.1.393: attempt to access beyond end of device [ 55.784882][ T4799] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 55.876109][ T4802] dvmrp1: entered allmulticast mode [ 56.027862][ T4805] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 56.044307][ T4805] netlink: 'syz.0.395': attribute type 3 has an invalid length. [ 56.061234][ T4801] dvmrp1: left allmulticast mode [ 56.079097][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 56.079113][ T29] audit: type=1326 audit(1766171058.484:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4806 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9cf2f749 code=0x7ffc0000 [ 56.109165][ T29] audit: type=1326 audit(1766171058.494:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4806 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9cf2f749 code=0x7ffc0000 [ 56.132552][ T29] audit: type=1326 audit(1766171058.494:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4806 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f5b9cf2f749 code=0x7ffc0000 [ 56.155812][ T29] audit: type=1326 audit(1766171058.494:2283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4806 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9cf2f749 code=0x7ffc0000 [ 56.179293][ T29] audit: type=1326 audit(1766171058.494:2284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4806 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9cf2f749 code=0x7ffc0000 [ 56.202741][ T29] audit: type=1326 audit(1766171058.494:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4806 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f5b9cf2f749 code=0x7ffc0000 [ 56.233780][ T29] audit: type=1326 audit(1766171058.644:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4806 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9cf2f749 code=0x7ffc0000 [ 56.259317][ T29] audit: type=1326 audit(1766171058.644:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4806 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9cf2f749 code=0x7ffc0000 [ 56.306661][ T29] audit: type=1326 audit(1766171058.694:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4806 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5b9cf2e3aa code=0x7ffc0000 [ 56.329908][ T29] audit: type=1326 audit(1766171058.694:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4806 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5b9cf62005 code=0x7ffc0000 [ 56.383417][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 56.417427][ T4816] siw: device registration error -23 [ 56.549121][ T4831] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 56.615719][ T4838] dvmrp1: entered allmulticast mode [ 56.658740][ T4838] set_capacity_and_notify: 11 callbacks suppressed [ 56.658759][ T4838] loop2: detected capacity change from 0 to 512 [ 56.668828][ T4837] dvmrp1: left allmulticast mode [ 56.731612][ T4843] loop3: detected capacity change from 0 to 512 [ 56.744396][ T4843] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.750194][ T4844] loop1: detected capacity change from 0 to 1024 [ 56.751709][ T4844] EXT4-fs: Ignoring removed orlov option [ 56.860542][ T4856] loop3: detected capacity change from 0 to 2048 [ 56.900266][ T4530] loop3: p1 < > p4 [ 56.904925][ T4530] loop3: p4 size 8388608 extends beyond EOD, truncated [ 56.913896][ T4856] loop3: p1 < > p4 [ 56.918361][ T4856] loop3: p4 size 8388608 extends beyond EOD, truncated [ 57.004704][ T4861] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 57.030289][ T4865] siw: device registration error -23 [ 57.051114][ T4867] loop4: detected capacity change from 0 to 512 [ 57.071252][ T4867] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.314556][ T4872] loop4: detected capacity change from 0 to 1024 [ 57.321484][ T4872] EXT4-fs: Ignoring removed orlov option [ 57.435563][ T4877] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 57.447181][ T4879] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.482440][ T4879] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.521559][ T4879] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.535054][ T4884] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 57.543797][ T4884] loop1: detected capacity change from 0 to 512 [ 57.561051][ T4884] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.591702][ T4884] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 57.609006][ T4879] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.657852][ T4891] netlink: 'syz.1.421': attribute type 1 has an invalid length. [ 57.678303][ T320] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.705261][ T320] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.719095][ T4896] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=4896 comm=syz.1.421 [ 57.719546][ T320] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.746264][ T4891] 8021q: adding VLAN 0 to HW filter on device bond2 [ 57.754328][ T4896] loop1: detected capacity change from 0 to 1024 [ 57.757936][ T4894] ipvlan3: entered promiscuous mode [ 57.768641][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 57.779337][ T320] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.780485][ T4896] EXT4-fs: inline encryption not supported [ 57.876842][ T4900] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 57.909645][ T4915] loop0: detected capacity change from 0 to 512 [ 57.917017][ T4915] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 57.925812][ T4915] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 57.949581][ T4917] ip6_vti0 speed is unknown, defaulting to 1000 [ 57.959940][ T4915] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.429: Allocating blocks 41-42 which overlap fs metadata [ 57.976812][ T4915] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.429: Allocating blocks 41-42 which overlap fs metadata [ 58.010441][ T4920] loop2: detected capacity change from 0 to 128 [ 58.037523][ T4915] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.429: Failed to acquire dquot type 1 [ 58.053956][ T4915] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 58.069723][ T4915] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.429: corrupted inode contents [ 58.120386][ T4915] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.429: mark_inode_dirty error [ 58.133830][ T4915] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.429: corrupted inode contents [ 58.158186][ T4915] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.429: mark_inode_dirty error [ 58.169723][ T4924] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 58.170137][ T4915] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.429: corrupted inode contents [ 58.178457][ T4924] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 58.190638][ T4915] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 58.210265][ T4928] EXT4-fs: Ignoring removed orlov option [ 58.225776][ T4915] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.429: corrupted inode contents [ 58.250370][ T4915] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.429: mark_inode_dirty error [ 58.282126][ T4915] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 58.292385][ T4924] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.431: Allocating blocks 41-42 which overlap fs metadata [ 58.307138][ T4915] EXT4-fs (loop0): 1 truncate cleaned up [ 58.310925][ T3308] loop2: p1 < > p4 [ 58.313062][ T4924] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.431: Allocating blocks 41-42 which overlap fs metadata [ 58.326323][ T3308] loop2: p4 size 8388608 extends beyond EOD, truncated [ 58.337225][ T4924] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.431: Failed to acquire dquot type 1 [ 58.348863][ T4924] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 58.352979][ T4929] loop2: p1 < > p4 [ 58.364330][ T4924] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.431: corrupted inode contents [ 58.368376][ T4929] loop2: p4 size 8388608 extends beyond EOD, truncated [ 58.386616][ T4924] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.431: mark_inode_dirty error [ 58.387133][ T4915] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 58.400458][ T4924] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.431: corrupted inode contents [ 58.427073][ T4924] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.431: mark_inode_dirty error [ 58.438762][ T4924] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.431: corrupted inode contents [ 58.450946][ T4924] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 58.460099][ T4924] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.431: corrupted inode contents [ 58.472527][ T4924] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.431: mark_inode_dirty error [ 58.483683][ T4924] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 58.493132][ T4924] EXT4-fs (loop4): 1 truncate cleaned up [ 58.519752][ T4924] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 58.606165][ T4943] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.713699][ T4958] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 58.722470][ T4958] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 58.741204][ T4958] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.443: Allocating blocks 41-42 which overlap fs metadata [ 58.755267][ T4958] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.443: Allocating blocks 41-42 which overlap fs metadata [ 58.769695][ T4958] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.443: Failed to acquire dquot type 1 [ 58.781311][ T4958] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 58.795847][ T4958] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.443: corrupted inode contents [ 58.808150][ T4958] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.443: mark_inode_dirty error [ 58.820120][ T4958] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.443: corrupted inode contents [ 58.832370][ T4958] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.443: mark_inode_dirty error [ 58.843916][ T4958] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.443: corrupted inode contents [ 58.856380][ T4958] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 58.865485][ T4958] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.443: corrupted inode contents [ 58.877888][ T4958] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.443: mark_inode_dirty error [ 58.889289][ T4958] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 58.898849][ T4958] EXT4-fs (loop4): 1 truncate cleaned up [ 58.922235][ T4958] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 58.970095][ T3308] loop0: p1 < > p4 [ 58.974885][ T3308] loop0: p4 size 8388608 extends beyond EOD, truncated [ 59.017513][ T4964] loop0: p1 < > p4 [ 59.030461][ T4964] loop0: p4 size 8388608 extends beyond EOD, truncated [ 59.057246][ T4972] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 59.074647][ T4971] __nla_validate_parse: 21 callbacks suppressed [ 59.074664][ T4971] netlink: 16 bytes leftover after parsing attributes in process `syz.2.448'. [ 59.103878][ T4972] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.163149][ T4981] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.175919][ T4972] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 59.381328][ T5004] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 59.394708][ T5004] netlink: 28 bytes leftover after parsing attributes in process `syz.2.458'. [ 59.438035][ T5011] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.511963][ T5011] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.536896][ T5015] netlink: 'syz.1.462': attribute type 1 has an invalid length. [ 59.571411][ T5011] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.611233][ T5011] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.660982][ T5017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.463'. [ 59.671006][ T5017] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 59.688069][ T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.711701][ T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.715695][ T5021] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 59.732962][ T31] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.753305][ T31] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.781401][ T5021] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.811656][ T3610] Bluetooth: hci0: command 0x1003 tx timeout [ 59.817704][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 59.859001][ T5021] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 59.927335][ T5039] ip6_vti0 speed is unknown, defaulting to 1000 [ 59.984442][ T5044] netlink: 'syz.0.472': attribute type 1 has an invalid length. [ 60.018002][ T5044] 8021q: adding VLAN 0 to HW filter on device bond3 [ 60.035657][ T5044] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=5044 comm=syz.0.472 [ 60.057319][ T5044] EXT4-fs: inline encryption not supported [ 60.194362][ T5060] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 60.203129][ T5060] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 60.220840][ T5060] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.476: Allocating blocks 41-42 which overlap fs metadata [ 60.234079][ T5057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.475'. [ 60.235276][ T5060] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.476: Allocating blocks 41-42 which overlap fs metadata [ 60.244806][ T5057] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 60.260107][ T5060] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.476: Failed to acquire dquot type 1 [ 60.286174][ T5060] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 60.305499][ T5060] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.476: corrupted inode contents [ 60.305954][ T5066] netlink: 'syz.1.477': attribute type 1 has an invalid length. [ 60.325657][ T5060] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.476: mark_inode_dirty error [ 60.333904][ T5066] 8021q: adding VLAN 0 to HW filter on device bond3 [ 60.339890][ T5060] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.476: corrupted inode contents [ 60.355751][ T5060] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.476: mark_inode_dirty error [ 60.366731][ T5066] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=5066 comm=syz.1.477 [ 60.385933][ T5066] EXT4-fs: inline encryption not supported [ 60.392272][ T5060] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.476: corrupted inode contents [ 60.404368][ T5060] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 60.413768][ T5060] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.476: corrupted inode contents [ 60.425832][ T5060] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.476: mark_inode_dirty error [ 60.437344][ T5060] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 60.447780][ T5069] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.460112][ T5060] EXT4-fs (loop4): 1 truncate cleaned up [ 60.480753][ T5060] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 60.503080][ T5069] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.531915][ T5078] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 60.556228][ T5069] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.568068][ T5078] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.610428][ T5078] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 60.632144][ T5069] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.688082][ T42] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.708550][ T42] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.717407][ T42] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.720207][ T5088] EXT4-fs: Ignoring removed orlov option [ 60.726038][ T42] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.790354][ T4530] loop4: p1 < > p4 [ 60.799926][ T4530] loop4: p4 size 8388608 extends beyond EOD, truncated [ 60.832686][ T5089] loop4: p1 < > p4 [ 60.841322][ T5089] loop4: p4 size 8388608 extends beyond EOD, truncated [ 60.878030][ T5100] netlink: 172 bytes leftover after parsing attributes in process `syz.2.489'. [ 60.908283][ T5103] siw: device registration error -23 [ 60.935728][ T5105] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 60.944554][ T5105] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 60.962407][ T5105] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.491: Allocating blocks 41-42 which overlap fs metadata [ 60.976454][ T5105] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.491: Allocating blocks 41-42 which overlap fs metadata [ 60.998584][ T5105] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.491: Failed to acquire dquot type 1 [ 61.010253][ T5105] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 61.025154][ T5105] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.491: corrupted inode contents [ 61.037477][ T5105] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.491: mark_inode_dirty error [ 61.049093][ T5105] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.491: corrupted inode contents [ 61.061274][ T5105] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.491: mark_inode_dirty error [ 61.072763][ T5105] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.491: corrupted inode contents [ 61.086417][ T5105] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 61.096282][ T5105] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.491: corrupted inode contents [ 61.108368][ T5105] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.491: mark_inode_dirty error [ 61.119808][ T5105] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 61.120013][ T5116] syz2: rxe_newlink: already configured on ip6_vti0 [ 61.132136][ T5105] EXT4-fs (loop2): 1 truncate cleaned up [ 61.144957][ T5105] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 61.161000][ T5116] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.190863][ T5116] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 61.303952][ T29] kauditd_printk_skb: 364 callbacks suppressed [ 61.303965][ T29] audit: type=1326 audit(1766171063.714:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5122 comm="syz.2.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96da0df749 code=0x7ffc0000 [ 61.339988][ T29] audit: type=1326 audit(1766171063.724:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5122 comm="syz.2.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96da0df749 code=0x7ffc0000 [ 61.363396][ T29] audit: type=1326 audit(1766171063.724:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5122 comm="syz.2.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96da0df749 code=0x7ffc0000 [ 61.384230][ T5130] Zero length message leads to an empty skb [ 61.386828][ T29] audit: type=1326 audit(1766171063.744:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5122 comm="syz.2.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96da0df749 code=0x7ffc0000 [ 61.416031][ T29] audit: type=1326 audit(1766171063.744:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5122 comm="syz.2.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96da0df749 code=0x7ffc0000 [ 61.439374][ T29] audit: type=1326 audit(1766171063.744:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5122 comm="syz.2.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96da0df749 code=0x7ffc0000 [ 61.462785][ T29] audit: type=1326 audit(1766171063.744:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5122 comm="syz.2.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96da0df749 code=0x7ffc0000 [ 61.486097][ T29] audit: type=1326 audit(1766171063.744:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5122 comm="syz.2.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96da0df749 code=0x7ffc0000 [ 61.509406][ T29] audit: type=1326 audit(1766171063.744:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5122 comm="syz.2.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96da0df749 code=0x7ffc0000 [ 61.532785][ T29] audit: type=1326 audit(1766171063.744:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5122 comm="syz.2.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96da0df749 code=0x7ffc0000 [ 61.572810][ T5135] netlink: 172 bytes leftover after parsing attributes in process `syz.0.501'. [ 61.662751][ T5141] netlink: 'syz.0.505': attribute type 1 has an invalid length. [ 61.696393][ T5141] 8021q: adding VLAN 0 to HW filter on device bond4 [ 61.710536][ T5141] set_capacity_and_notify: 18 callbacks suppressed [ 61.710554][ T5141] loop0: detected capacity change from 0 to 1024 [ 61.726917][ T5141] EXT4-fs: inline encryption not supported [ 61.728448][ T5146] netlink: 44 bytes leftover after parsing attributes in process `syz.2.507'. [ 61.779916][ T5146] ipvlan2: entered promiscuous mode [ 61.797969][ T5150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.508'. [ 61.813991][ T5146] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 61.849176][ T5157] ip6_vti0 speed is unknown, defaulting to 1000 [ 61.861359][ T1088] Bluetooth: hci0: Frame reassembly failed (-84) [ 61.892551][ T5163] loop0: detected capacity change from 0 to 128 [ 61.974689][ T5173] netlink: 172 bytes leftover after parsing attributes in process `syz.4.514'. [ 62.056803][ T5183] siw: device registration error -23 [ 62.085810][ T5184] loop3: detected capacity change from 0 to 2048 [ 62.101331][ T3308] loop3: p1 < > p4 [ 62.108331][ T3308] loop3: p4 size 8388608 extends beyond EOD, truncated [ 62.116102][ T5187] netlink: 16 bytes leftover after parsing attributes in process `syz.0.520'. [ 62.137563][ T5184] loop3: p1 < > p4 [ 62.142290][ T5184] loop3: p4 size 8388608 extends beyond EOD, truncated [ 62.333723][ T5193] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 62.375551][ T5199] loop0: detected capacity change from 0 to 512 [ 62.391931][ T5199] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.551583][ T5210] ip6_vti0 speed is unknown, defaulting to 1000 [ 62.595677][ T5211] loop0: detected capacity change from 0 to 128 [ 63.054582][ T5222] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 63.108218][ T5229] loop4: detected capacity change from 0 to 512 [ 63.124692][ T5223] loop3: detected capacity change from 0 to 1024 [ 63.126045][ T5229] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.131574][ T5223] EXT4-fs: Ignoring removed orlov option [ 63.191556][ T5236] loop4: detected capacity change from 0 to 128 [ 63.267491][ T5243] loop1: detected capacity change from 0 to 512 [ 63.282763][ T5243] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.556676][ T5256] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 63.582586][ T5269] loop0: detected capacity change from 0 to 512 [ 63.611291][ T5269] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.791187][ T5284] EXT4-fs: Ignoring removed orlov option [ 63.889555][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 63.895713][ T3610] Bluetooth: hci0: command 0x1003 tx timeout [ 64.154124][ T5310] EXT4-fs: Ignoring removed orlov option [ 64.166616][ T5312] __nla_validate_parse: 6 callbacks suppressed [ 64.166666][ T5312] netlink: 44 bytes leftover after parsing attributes in process `syz.4.562'. [ 64.186728][ T5312] ipvlan6: entered promiscuous mode [ 64.202280][ T330] Bluetooth: hci0: Frame reassembly failed (-84) [ 64.440919][ T5320] netlink: 'syz.2.564': attribute type 1 has an invalid length. [ 64.456108][ T5320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.468082][ T5320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=5320 comm=syz.2.564 [ 64.562123][ T3308] Alternate GPT is invalid, using primary GPT. [ 64.568480][ T3308] loop2: p2 p3 p7 [ 64.581971][ T5331] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 64.582192][ T5327] Alternate GPT is invalid, using primary GPT. [ 64.594574][ T5327] loop2: p2 p3 p7 [ 64.607137][ T5331] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.656934][ T5331] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 64.844839][ T3318] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 64.859827][ T3318] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 64.861227][ T5349] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 64.912626][ T5349] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.924940][ T5354] netlink: 48 bytes leftover after parsing attributes in process `syz.2.576'. [ 64.936939][ T5355] netlink: 'syz.0.577': attribute type 1 has an invalid length. [ 64.958439][ T5349] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 64.983878][ T5355] 8021q: adding VLAN 0 to HW filter on device bond5 [ 64.998497][ T5355] EXT4-fs: inline encryption not supported [ 65.082075][ T5367] syz2: rxe_newlink: already configured on ip6_vti0 [ 65.101619][ T5365] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.121612][ T5367] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.160547][ T5367] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 65.191676][ T5365] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.217775][ T5374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.583'. [ 65.227306][ T5374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.583'. [ 65.243912][ T5374] netlink: 3 bytes leftover after parsing attributes in process `syz.3.583'. [ 65.275115][ T5365] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.388636][ T5365] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.446346][ T53] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.457026][ T53] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.468545][ T53] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.481127][ T1088] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.525075][ T5388] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.654205][ T5389] EXT4-fs: Ignoring removed orlov option [ 65.764499][ T5411] EXT4-fs: inline encryption not supported [ 65.947397][ T5431] netlink: 48 bytes leftover after parsing attributes in process `syz.1.604'. [ 66.008927][ T5435] netlink: 'syz.1.604': attribute type 4 has an invalid length. [ 66.016616][ T5435] netlink: 152 bytes leftover after parsing attributes in process `syz.1.604'. [ 66.028182][ T5435] .`: renamed from bond0 (while UP) [ 66.089873][ T5434] netlink: 12 bytes leftover after parsing attributes in process `syz.2.605'. [ 66.099867][ T5434] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 66.138937][ T5444] netlink: 48 bytes leftover after parsing attributes in process `syz.2.607'. [ 66.209498][ T3610] Bluetooth: hci0: command 0x1003 tx timeout [ 66.209614][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 66.255711][ T3323] EXT4-fs unmount: 115 callbacks suppressed [ 66.255730][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.382978][ T29] kauditd_printk_skb: 888 callbacks suppressed [ 66.382994][ T29] audit: type=1326 audit(1766171068.794:3532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5450 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71eabf749 code=0x7ffc0000 [ 66.412636][ T29] audit: type=1326 audit(1766171068.794:3533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5450 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71eabf749 code=0x7ffc0000 [ 66.435982][ T29] audit: type=1326 audit(1766171068.794:3534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5450 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc71eabf749 code=0x7ffc0000 [ 66.459409][ T29] audit: type=1326 audit(1766171068.794:3535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5450 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71eabf749 code=0x7ffc0000 [ 66.482933][ T29] audit: type=1326 audit(1766171068.794:3536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5450 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71eabf749 code=0x7ffc0000 [ 66.506248][ T29] audit: type=1326 audit(1766171068.794:3537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5450 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc71eabf749 code=0x7ffc0000 [ 66.529692][ T29] audit: type=1326 audit(1766171068.794:3538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5450 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71eabf749 code=0x7ffc0000 [ 66.553070][ T29] audit: type=1326 audit(1766171068.794:3539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5450 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc71eabf749 code=0x7ffc0000 [ 66.576365][ T29] audit: type=1326 audit(1766171068.794:3540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5450 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71eabf749 code=0x7ffc0000 [ 66.581860][ T5456] FAULT_INJECTION: forcing a failure. [ 66.581860][ T5456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.599723][ T29] audit: type=1326 audit(1766171068.794:3541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5450 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7fc71eabf749 code=0x7ffc0000 [ 66.636123][ T5456] CPU: 1 UID: 0 PID: 5456 Comm: syz.3.611 Not tainted syzkaller #0 PREEMPT(voluntary) [ 66.636153][ T5456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 66.636163][ T5456] Call Trace: [ 66.636168][ T5456] [ 66.636174][ T5456] __dump_stack+0x1d/0x30 [ 66.636240][ T5456] dump_stack_lvl+0xe8/0x140 [ 66.636265][ T5456] dump_stack+0x15/0x1b [ 66.636289][ T5456] should_fail_ex+0x265/0x280 [ 66.636305][ T5456] should_fail+0xb/0x20 [ 66.636317][ T5456] should_fail_usercopy+0x1a/0x20 [ 66.636347][ T5456] _copy_from_user+0x1c/0xb0 [ 66.636365][ T5456] __sys_bpf+0x183/0x7c0 [ 66.636442][ T5456] __x64_sys_bpf+0x41/0x50 [ 66.636504][ T5456] x64_sys_call+0x28e1/0x3000 [ 66.636519][ T5456] do_syscall_64+0xd8/0x2c0 [ 66.636541][ T5456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.636610][ T5456] RIP: 0033:0x7fc71eabf749 [ 66.636621][ T5456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.636638][ T5456] RSP: 002b:00007fc71d4fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 66.636652][ T5456] RAX: ffffffffffffffda RBX: 00007fc71ed16090 RCX: 00007fc71eabf749 [ 66.636660][ T5456] RDX: 0000000000000010 RSI: 0000200000000340 RDI: 000000000000000f [ 66.636667][ T5456] RBP: 00007fc71d4fe090 R08: 0000000000000000 R09: 0000000000000000 [ 66.636675][ T5456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.636718][ T5456] R13: 00007fc71ed16128 R14: 00007fc71ed16090 R15: 00007fffa3c56988 [ 66.636730][ T5456] [ 66.829626][ T5461] netlink: 172 bytes leftover after parsing attributes in process `syz.3.612'. [ 66.880415][ T5466] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 66.908113][ T5466] set_capacity_and_notify: 11 callbacks suppressed [ 66.908199][ T5466] loop3: detected capacity change from 0 to 512 [ 66.922816][ T5468] loop0: detected capacity change from 0 to 512 [ 66.952304][ T5466] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.952752][ T5470] ip6_vti0 speed is unknown, defaulting to 1000 [ 66.965525][ T5468] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.009342][ T5466] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.022989][ T5476] loop4: detected capacity change from 0 to 128 [ 67.025020][ T5480] dvmrp1: entered allmulticast mode [ 67.042587][ T5468] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.101367][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.128098][ T5466] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 67.154989][ T5482] loop1: detected capacity change from 0 to 512 [ 67.174387][ T5483] loop0: detected capacity change from 0 to 1024 [ 67.202393][ T5483] EXT4-fs: inline encryption not supported [ 67.209401][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.233118][ T5483] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.250936][ T5492] ipvlan4: entered promiscuous mode [ 67.266353][ T5492] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 67.275778][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.325457][ T5493] netlink: 'syz.2.623': attribute type 30 has an invalid length. [ 67.510695][ T5497] loop0: detected capacity change from 0 to 1024 [ 67.517504][ T5497] EXT4-fs: Ignoring removed orlov option [ 67.531476][ T5497] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.845261][ T5478] dvmrp1: left allmulticast mode [ 67.912663][ T5512] loop3: detected capacity change from 0 to 128 [ 67.952810][ T5516] 8021q: VLANs not supported on ip6tnl0 [ 67.988066][ T5520] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 67.996652][ T5520] loop3: detected capacity change from 0 to 512 [ 68.012107][ T5520] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.024849][ T5520] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.072140][ T5520] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 68.104861][ T5529] ip6_vti0 speed is unknown, defaulting to 1000 [ 68.114734][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.152327][ T5532] loop2: detected capacity change from 0 to 128 [ 68.168132][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.217891][ T5538] loop4: detected capacity change from 0 to 1024 [ 68.243049][ T5538] EXT4-fs: inline encryption not supported [ 68.271054][ T5538] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.298036][ T5545] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.643: EA inode hash validation failed [ 68.311308][ T5545] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 68.324720][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.347348][ T5545] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.643: corrupted inode contents [ 68.367086][ T5548] ipvlan2: entered promiscuous mode [ 68.376683][ T5548] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 68.387744][ T5545] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.643: mark_inode_dirty error [ 68.399402][ T5545] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.643: corrupted inode contents [ 68.411882][ T5545] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #15: comm syz.3.643: mark_inode_dirty error [ 68.424709][ T5545] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #15: comm syz.3.643: mark inode dirty (error -117) [ 68.437899][ T5545] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 68.447321][ T5545] EXT4-fs (loop3): 1 orphan inode deleted [ 68.453969][ T5545] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.490375][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.533101][ T5561] capability: warning: `syz.3.648' uses deprecated v2 capabilities in a way that may be insecure [ 68.802890][ T5567] EXT4-fs: Ignoring removed orlov option [ 68.810929][ T5567] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.086315][ T5585] FAULT_INJECTION: forcing a failure. [ 69.086315][ T5585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.099496][ T5585] CPU: 0 UID: 0 PID: 5585 Comm: syz.2.654 Not tainted syzkaller #0 PREEMPT(voluntary) [ 69.099590][ T5585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 69.099771][ T5585] Call Trace: [ 69.099777][ T5585] [ 69.099785][ T5585] __dump_stack+0x1d/0x30 [ 69.099810][ T5585] dump_stack_lvl+0xe8/0x140 [ 69.099838][ T5585] dump_stack+0x15/0x1b [ 69.099935][ T5585] should_fail_ex+0x265/0x280 [ 69.100038][ T5585] should_fail+0xb/0x20 [ 69.100063][ T5585] should_fail_usercopy+0x1a/0x20 [ 69.100093][ T5585] _copy_from_user+0x1c/0xb0 [ 69.100212][ T5585] ___sys_sendmsg+0xc1/0x1d0 [ 69.100397][ T5585] __x64_sys_sendmsg+0xd4/0x160 [ 69.100438][ T5585] x64_sys_call+0x17ba/0x3000 [ 69.100469][ T5585] do_syscall_64+0xd8/0x2c0 [ 69.100586][ T5585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.100610][ T5585] RIP: 0033:0x7f96da0df749 [ 69.100700][ T5585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.100722][ T5585] RSP: 002b:00007f96d8b3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.100746][ T5585] RAX: ffffffffffffffda RBX: 00007f96da335fa0 RCX: 00007f96da0df749 [ 69.100817][ T5585] RDX: 0000000000004050 RSI: 0000200000000180 RDI: 0000000000000003 [ 69.100832][ T5585] RBP: 00007f96d8b3f090 R08: 0000000000000000 R09: 0000000000000000 [ 69.100847][ T5585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.100861][ T5585] R13: 00007f96da336038 R14: 00007f96da335fa0 R15: 00007fff0f83d308 [ 69.100887][ T5585] [ 69.380805][ T5599] loop0: p1 < > p4 [ 69.395383][ T5599] loop0: p4 size 8388608 extends beyond EOD, truncated [ 69.443015][ T5606] __nla_validate_parse: 9 callbacks suppressed [ 69.443032][ T5606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.659'. [ 69.445493][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.454195][ T5606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.659'. [ 69.488810][ T5606] netlink: 3 bytes leftover after parsing attributes in process `syz.2.659'. [ 69.597656][ T5610] ip6_vti0 speed is unknown, defaulting to 1000 [ 69.642156][ T5620] FAULT_INJECTION: forcing a failure. [ 69.642156][ T5620] name failslab, interval 1, probability 0, space 0, times 0 [ 69.654949][ T5620] CPU: 0 UID: 0 PID: 5620 Comm: syz.2.664 Not tainted syzkaller #0 PREEMPT(voluntary) [ 69.655007][ T5620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 69.655020][ T5620] Call Trace: [ 69.655027][ T5620] [ 69.655035][ T5620] __dump_stack+0x1d/0x30 [ 69.655064][ T5620] dump_stack_lvl+0xe8/0x140 [ 69.655137][ T5620] dump_stack+0x15/0x1b [ 69.655157][ T5620] should_fail_ex+0x265/0x280 [ 69.655181][ T5620] should_failslab+0x8c/0xb0 [ 69.655280][ T5620] __kmalloc_noprof+0xb9/0x5a0 [ 69.655309][ T5620] ? alloc_pipe_info+0x1c9/0x340 [ 69.655341][ T5620] ? alloc_pipe_info+0xae/0x340 [ 69.655364][ T5620] alloc_pipe_info+0x1c9/0x340 [ 69.655385][ T5620] splice_direct_to_actor+0x592/0x680 [ 69.655407][ T5620] ? kstrtouint_from_user+0x9f/0xf0 [ 69.655433][ T5620] ? __pfx_direct_splice_actor+0x10/0x10 [ 69.655495][ T5620] ? __rcu_read_unlock+0x4f/0x70 [ 69.655520][ T5620] ? get_pid_task+0x96/0xd0 [ 69.655559][ T5620] ? avc_policy_seqno+0x15/0x30 [ 69.655582][ T5620] ? selinux_file_permission+0x1e2/0x320 [ 69.655672][ T5620] do_splice_direct+0xda/0x150 [ 69.655695][ T5620] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 69.655727][ T5620] do_sendfile+0x380/0x650 [ 69.655797][ T5620] __x64_sys_sendfile64+0x105/0x150 [ 69.655825][ T5620] x64_sys_call+0x2db1/0x3000 [ 69.655880][ T5620] do_syscall_64+0xd8/0x2c0 [ 69.655921][ T5620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.655948][ T5620] RIP: 0033:0x7f96da0df749 [ 69.655964][ T5620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.655987][ T5620] RSP: 002b:00007f96d8b3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 69.656079][ T5620] RAX: ffffffffffffffda RBX: 00007f96da335fa0 RCX: 00007f96da0df749 [ 69.656093][ T5620] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 69.656144][ T5620] RBP: 00007f96d8b3f090 R08: 0000000000000000 R09: 0000000000000000 [ 69.656160][ T5620] R10: 0000000008000002 R11: 0000000000000246 R12: 0000000000000001 [ 69.656176][ T5620] R13: 00007f96da336038 R14: 00007f96da335fa0 R15: 00007fff0f83d308 [ 69.656197][ T5620] [ 69.952056][ T5623] EXT4-fs: inline encryption not supported [ 69.972004][ T5623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.004911][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.265164][ T5656] EXT4-fs: Ignoring removed orlov option [ 70.291614][ T5656] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.381153][ T5653] EXT4-fs: Ignoring removed orlov option [ 70.392046][ T5653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.466906][ T5665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.673'. [ 70.476262][ T5665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.673'. [ 70.490339][ T5665] netlink: 3 bytes leftover after parsing attributes in process `syz.4.673'. [ 70.571604][ T5671] ip6_vti0 speed is unknown, defaulting to 1000 [ 70.704327][ T5674] dvmrp1: entered allmulticast mode [ 70.722640][ T5674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.677'. [ 70.738958][ T5673] dvmrp1: left allmulticast mode [ 70.777055][ T5678] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 70.794055][ T5678] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.810449][ T5678] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.848592][ T5678] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 70.893122][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.905759][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.930847][ T5685] EXT4-fs: inline encryption not supported [ 70.975884][ T5685] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.011917][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.079864][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.111336][ T5696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.685'. [ 71.120976][ T5696] netlink: 12 bytes leftover after parsing attributes in process `syz.0.685'. [ 71.138156][ T5696] netlink: 3 bytes leftover after parsing attributes in process `syz.0.685'. [ 71.289628][ T5706] ipvlan3: entered promiscuous mode [ 71.294866][ T5710] dvmrp1: entered allmulticast mode [ 71.310755][ T5704] ip6_vti0 speed is unknown, defaulting to 1000 [ 71.331559][ T5709] dvmrp1: left allmulticast mode [ 71.339955][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 71.396015][ T5708] siw: device registration error -23 [ 71.454285][ T29] kauditd_printk_skb: 484 callbacks suppressed [ 71.454344][ T29] audit: type=1326 audit(1766171073.864:4024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5719 comm="syz.3.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71eabf749 code=0x7ffc0000 [ 71.483915][ T29] audit: type=1326 audit(1766171073.864:4025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5719 comm="syz.3.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71eabf749 code=0x7ffc0000 [ 71.532648][ T5725] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 71.533115][ T29] audit: type=1326 audit(1766171073.914:4026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5719 comm="syz.3.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc71eabf749 code=0x7ffc0000 [ 71.562474][ T29] audit: type=1326 audit(1766171073.914:4027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5719 comm="syz.3.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71eabf749 code=0x7ffc0000 [ 71.586117][ T29] audit: type=1326 audit(1766171073.914:4028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5719 comm="syz.3.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71eabf749 code=0x7ffc0000 [ 71.586166][ T29] audit: type=1326 audit(1766171073.914:4029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5719 comm="syz.3.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc71eabf749 code=0x7ffc0000 [ 71.586265][ T29] audit: type=1326 audit(1766171073.914:4030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5719 comm="syz.3.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71eabf749 code=0x7ffc0000 [ 71.586294][ T29] audit: type=1326 audit(1766171073.914:4031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5719 comm="syz.3.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71eabf749 code=0x7ffc0000 [ 71.586352][ T29] audit: type=1326 audit(1766171073.914:4032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5719 comm="syz.3.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc71eabf749 code=0x7ffc0000 [ 71.586382][ T29] audit: type=1326 audit(1766171073.924:4033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5719 comm="syz.3.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71eabf749 code=0x7ffc0000 [ 71.635204][ T5725] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.635404][ T5725] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.664012][ T5725] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 71.790500][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.884379][ T5751] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.961736][ T5751] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.021352][ T5751] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.098879][ T5751] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.109552][ T5757] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 72.190043][ T2871] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.192906][ T5767] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 72.208482][ T2871] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.217106][ T5767] set_capacity_and_notify: 15 callbacks suppressed [ 72.217122][ T5767] loop3: detected capacity change from 0 to 512 [ 72.224483][ T2871] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.269380][ T2871] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.285292][ T5770] loop0: detected capacity change from 0 to 2048 [ 72.294532][ T5767] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.307412][ T5767] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.330293][ T3308] loop0: p1 < > p4 [ 72.335009][ T3308] loop0: p4 size 8388608 extends beyond EOD, truncated [ 72.349344][ T5770] loop0: p1 < > p4 [ 72.353313][ T5767] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 72.370928][ T5770] loop0: p4 size 8388608 extends beyond EOD, truncated [ 72.391210][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.404210][ T3008] loop0: p1 < > p4 [ 72.406308][ T3008] loop0: p4 size 8388608 extends beyond EOD, truncated [ 72.441088][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 72.445859][ T4530] udevd[4530]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 72.474339][ T5782] loop0: detected capacity change from 0 to 512 [ 72.493457][ T5782] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.493601][ T5782] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.507377][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 72.513099][ T4530] udevd[4530]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 72.570963][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 72.572473][ T4530] udevd[4530]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 72.601301][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.694482][ T5798] ip6_vti0 speed is unknown, defaulting to 1000 [ 72.722406][ T5803] loop0: detected capacity change from 0 to 128 [ 72.737821][ T5804] loop4: detected capacity change from 0 to 1024 [ 72.738418][ T5804] EXT4-fs: Ignoring removed orlov option [ 72.785400][ T5804] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.268809][ T5828] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 73.279517][ T5828] loop1: detected capacity change from 0 to 512 [ 73.292614][ T5828] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.305400][ T5828] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.339348][ T5828] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 73.375055][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.387079][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.409689][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 73.606623][ T5847] loop4: detected capacity change from 0 to 1024 [ 73.637593][ T5847] EXT4-fs: inline encryption not supported [ 73.671199][ T5847] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.696548][ T5860] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 73.706252][ T5860] loop1: detected capacity change from 0 to 512 [ 73.713115][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.737116][ T5860] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.752182][ T5860] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.771526][ T5864] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.803395][ T5860] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 73.832761][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.844319][ T5864] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.879353][ T5864] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.908655][ T5868] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 73.939833][ T5864] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.035644][ T127] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.050999][ T5888] loop1: detected capacity change from 0 to 1024 [ 74.063516][ T127] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.075816][ T5888] EXT4-fs: Ignoring removed orlov option [ 74.087008][ T5890] ipvlan4: entered promiscuous mode [ 74.098873][ T127] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.107612][ T127] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.124394][ T53] Bluetooth: hci0: Frame reassembly failed (-84) [ 74.135772][ T5888] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.157520][ T5894] loop0: detected capacity change from 0 to 2048 [ 74.176615][ T5896] ipvlan7: entered promiscuous mode [ 74.194612][ T1088] Bluetooth: hci1: Frame reassembly failed (-84) [ 74.201534][ T4530] loop0: p1 < > p4 [ 74.205969][ T4530] loop0: p4 size 8388608 extends beyond EOD, truncated [ 74.214818][ T5894] loop0: p1 < > p4 [ 74.219323][ T5894] loop0: p4 size 8388608 extends beyond EOD, truncated [ 74.856967][ T5888] ================================================================== [ 74.865106][ T5888] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 74.873211][ T5888] [ 74.875535][ T5888] write to 0xffff88811babb8e8 of 8 bytes by task 5877 on cpu 1: [ 74.883188][ T5888] filemap_splice_read+0x4f4/0x740 [ 74.888318][ T5888] ext4_file_splice_read+0x8f/0xb0 [ 74.893443][ T5888] splice_direct_to_actor+0x26f/0x680 [ 74.898823][ T5888] do_splice_direct+0xda/0x150 [ 74.903598][ T5888] do_sendfile+0x380/0x650 [ 74.908025][ T5888] __x64_sys_sendfile64+0x105/0x150 [ 74.913227][ T5888] x64_sys_call+0x2db1/0x3000 [ 74.917918][ T5888] do_syscall_64+0xd8/0x2c0 [ 74.922439][ T5888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.928355][ T5888] [ 74.930676][ T5888] write to 0xffff88811babb8e8 of 8 bytes by task 5888 on cpu 0: [ 74.938566][ T5888] filemap_splice_read+0x4f4/0x740 [ 74.943693][ T5888] ext4_file_splice_read+0x8f/0xb0 [ 74.948805][ T5888] splice_direct_to_actor+0x26f/0x680 [ 74.954186][ T5888] do_splice_direct+0xda/0x150 [ 74.958969][ T5888] do_sendfile+0x380/0x650 [ 74.963391][ T5888] __x64_sys_sendfile64+0x105/0x150 [ 74.968594][ T5888] x64_sys_call+0x2db1/0x3000 [ 74.973275][ T5888] do_syscall_64+0xd8/0x2c0 [ 74.977797][ T5888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.983692][ T5888] [ 74.986006][ T5888] value changed: 0x00000000000010b7 -> 0x00000000000010b8 [ 74.993111][ T5888] [ 74.995432][ T5888] Reported by Kernel Concurrency Sanitizer on: [ 75.001578][ T5888] CPU: 0 UID: 0 PID: 5888 Comm: syz.1.741 Not tainted syzkaller #0 PREEMPT(voluntary) [ 75.011219][ T5888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 75.021279][ T5888] ================================================================== [ 75.070669][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 75.071192][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.089961][ T4530] udevd[4530]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 76.129498][ T3540] Bluetooth: hci0: command 0x1003 tx timeout [ 76.129498][ T3610] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 76.209503][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 76.209567][ T3610] Bluetooth: hci1: command 0x1003 tx timeout