last executing test programs: 13.635417743s ago: executing program 1 (id=363): bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) faccessat2(0xffffffffffffffff, 0x0, 0x2, 0x1200) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) close(0xffffffffffffffff) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000000)=0x1) 13.525759675s ago: executing program 1 (id=366): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f000001a640)=@delchain={0x1810, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1600, 0x2, [@TCA_MATCHALL_ACT={0x15fc, 0x2, [@m_sample={0x11c, 0x5, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}]}, {0xe8, 0x6, "38f25df555191be2c666d9a5f9fbf1c6674d930a6b49548795f779c04738d31476e7b46904303e774f670daac95204b3aa00967b9ec65d764b2e48bd715da197540ac2dbea2e115f4efd22ebb0c4531bf7fcd31b61547bd15f710737fab7ba50f6730bcf7c68fd6f6734dc220ebc37df3b8e187fddc4516e5f783c302bbc133134d2a06ab408a97de6505724f9be2eb62a565a1535810f54b758c56ab347d36db167b672425230830efb7606f51b3a894056ee7b74af7ad106d611b3d7c4a326bbd604993d9eba87f5d9d7c682cf9643bb5648bc70f946ebac22580878bb773b062b1b0d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x7}}}}, @m_ctinfo={0x90, 0x1b, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x72a0, 0x4, 0xffffffffeffffff1, 0x2, 0x9}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8001}]}, {0x3a, 0x6, "89a75f1f9832982c0a59ad5c7b043805d7ff0d0a67a9df5adf2ac6dab7c5cfad8bbf15a9388f68544ed8dea9946ee57f3ffd502c8065"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_gact={0xb4, 0x1d, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xc7f, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xa96}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x160e, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x400, 0x9, 0x5, 0x3, 0x3bc}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x5, 0x4, 0xe, 0x2800000}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x92a, 0x10000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xfd0, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8, 0x4, 0xfff, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_tunnel_key={0x9c, 0x3, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xb, 0x81, 0x2, 0xffffffff, 0x3}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1}]}, {0x45, 0x6, "7c3b5bfcb83686732928afc192a22d90d27a9989759a481dd012b504df8599e1385efa6ed3eed4aa4eadeabe7be45721cade4f630ee42bca96886403cdc70c3430"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0x106c, 0x9, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7f, 0x401, 0x3, 0x7, 0x101}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xe4, 0x7, 0x20000000, 0x0, 0x2}, @dev={0xac, 0x14, 0x14, 0x31}, @private=0xa010101, 0xff000000}}]}, {0xff2, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_mirred={0x17c, 0x16, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000001, 0xfffffff7, 0x3, 0xe}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4, 0x1, 0x8}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x0, 0x1, 0x5, 0x3}, 0x3}}]}, {0xee, 0x6, "605524e3626aca9778df374bbcad3d51d25178b24ec88e3a92acc301747daa26bb3deb8b829e8a55fdb30b1765bad6b2ed28273083ed0a35559ef9dfc77b5bd2e05bd2ccccad0ad73d611653ce29c79832ce1a80c857bc92eb376b42ab09b1778f1bd4400cba36f0002420428ecf149c920e535bc21a81383ab87116a652e6a9f737b5a390799307a1b121ace65bfa0ec1c7d7e4ec7dd74bef4770681bb50c0ab70d8987118f03d1a5bc3e1e5aa55c552e6248b91ed765b9f7409670b105369937ac1c99025cfe5b2b020cd69de786290273150b5c3a9621cfee5b5a3970e43270972198b62355926fb3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_sample={0x114, 0x9, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}]}, {0xdd, 0x6, "e6b0e74476bf8a639de044e1ddc46b91d5d10f82426cbe8105c4fc1c8a7ce70437ab48a5830e3977ecdb3e3da68d505606eb4ba9f466583e623799ce0925894b032ded7702d56d71e960bdeaaa528d004ed1073da40767f94e65b9b7e0d6d79e8fc722fb4cbde27f8180453df41e5557719122a4c82905d8a73c4dba79298394d566a8889b1bcde351529459a08e5f6fce37b039eeb668f321f6d23d49953fe11d1c069e543f1732e854e82d780a11e784d968c7b0b3eebdbe0189223c2426cc72a567bca23d0c663069282c776675575072d53394ce99dc19"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1cc, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x94, 0x1, [@m_mirred={0x60, 0x5, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xcdf, 0x1, 0x10000000, 0x2, 0xfffff001}, 0x4}}]}, {0x11, 0x6, "d527360c37d81b077c369a3b45"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_skbmod={0x30, 0xa, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0x124, 0x1, [@m_ctinfo={0x120, 0x19, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffff}]}, {0xe9, 0x6, "ed5c1eb99390e7d0a8730c2f4ad7eab8a255351b763e5585c30ef05596ff09fd3ea6975074d4baa7805a08bfdd7f7fa2634cbcdbba1c88eea89d70023a7b9d8d2a94daf79fa1e5bffdc60fbea174f1aa7372acb7f356da638e68d8cc0dfa35b1ef1879e8526f439300c841829ae601a7811d02b21fcc5aaa7951b03466f8a1800a4b912630d3eb9f282786ef340f4e3cb08280f71f4ee2941ec13001a2c7884372e6ba0fb2f0aaa4766f88f4e7f768d299cf02a379f46bdc6682f28a257745a6d3ef46b8f9de69a946bbf1ee9dcd47e35fd96ce64d20d45afb7c448a0482449961a6539ce9"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x1810}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 13.376940497s ago: executing program 1 (id=368): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) openat$cgroup_ro(r3, &(0x7f0000000380)='blkio.throttle.io_service_bytes_recursive\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)={'#! ', './file0'}, 0xb) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r5, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/122, 0x7a}, {&(0x7f0000000580)=""/102, 0x66}, {&(0x7f0000000600)=""/4097, 0x1001}], 0x3, 0x10000005, 0x2) ioctl$EXT4_IOC_SETFSUUID(r5, 0x4008662c, &(0x7f0000000040)={0x10, 0x0, "5c82f078cb3f7739b9de5730b6ca0da5"}) mmap$IORING_OFF_SQ_RING(&(0x7f0000003000/0x6000)=nil, 0x6000, 0x4, 0x88012, r4, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x20, 0x0, 0x5f, 0x0, 0x82, 0x0, 0x40000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0xd}, 0x1, 0x0, 0xc28, 0x2, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800702, &(0x7f0000000100)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8001}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@noauto_da_alloc}, {@noload}, {@oldalloc}, {@resuid}]}, 0x2, 0x470, &(0x7f0000000dc0)="$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") r9 = inotify_init1(0x0) inotify_add_watch(r9, &(0x7f0000000040)='./file1\x00', 0x7f7) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') close(r6) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) 13.004079685s ago: executing program 1 (id=376): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000340)='sched_switch\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r3, 0x0, 0x200000000000006}, 0x18) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x14) 12.853661428s ago: executing program 1 (id=381): pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000027c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0xe6) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r7], 0x48}}, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r8, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) ioctl$TIOCVHANGUP(r8, 0x5437, 0x2) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x2, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010300000000fcdbdf252600000018000180140002"], 0x2c}}, 0x20000000) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000700)={0xd4, r12, 0x304, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x99affabc1b1d03f0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20044000}, 0x20040050) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r13) sendmsg$NLBL_UNLABEL_C_STATICADD(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r14, 0x201, 0x70bd26, 0xfffffffe, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x31}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x4c}, 0x8, 0x3000000000002, 0x0, 0x20000}, 0x844) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="6400000010000104000000009cde668990487c8027be2a73b2c8f500000000000000806b4eac45437cccccedf2645521701b8489149176d230e7ac1753ef23f774ef3d0cad322ccb8a8255c160ae6a6d1383ebd5a518af76cfe0360884f0d74a49a14115e5970072d972239ca93ce2bbee487b1c7eeba0b51c91834f874d36a4d4d1354ad787cf88c641bbbbefe11c993a0fb7c81656e530123fe943fbade1c0cc69ffd6732f350f43645581d5987f55aded0413ad88b5790e0205f655481ead0a9af3e1fa981d48422752a774733fea00000000000000083f98b26766057b06c33bcf5807177cf1", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010067656e657665000020000280080001000120000014000700ff0000000000000000000000000000001400030067656e65766531"], 0x64}}, 0x2000000) 12.211171291s ago: executing program 1 (id=387): bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) faccessat2(0xffffffffffffffff, 0x0, 0x2, 0x1200) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) close(0xffffffffffffffff) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000000)=0x1) 2.149756098s ago: executing program 0 (id=554): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r2, &(0x7f0000000900)={&(0x7f0000000500)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000540)="e8691a913b", 0x1718}, {0x0, 0x2900}], 0x2, &(0x7f00000008c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010101}}}], 0x38}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = inotify_init() r6 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r5, &(0x7f0000000200)='./file0\x00', 0x400008bf) write$binfmt_elf32(r6, &(0x7f0000000400)=ANY=[@ANYRES8=r5], 0x69) close(r6) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010003000000fbdbdf25250000000e0001006e657464657673696d000000ba5f709c5091ec1b0f0002006e657464"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) 2.092599529s ago: executing program 0 (id=556): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x3, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0x0, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$inet6(0xa, 0x3, 0x38) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 2.057980589s ago: executing program 0 (id=557): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40, 0x0, 0xffffffffffffffff, 0x52, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xcd4, 0x8, 0xeaf0000, 0x424, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0x1, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r7) bind$inet(r2, &(0x7f0000001400)={0x2, 0x4e22, @remote}, 0x10) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000002740)={0x4, 0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001440)=""/230, 0xe6}, {&(0x7f0000001540)=""/141, 0x8d}, {&(0x7f0000002600)=""/121, 0x79}, {&(0x7f0000002680)=""/20, 0x14}], &(0x7f0000002700)=[0x1, 0xffffffffffffff64]}, 0x20) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="8c000000100037042a00"/20, @ANYRES32=r8, @ANYBLOB="83040500000000006c0012800900010069706970000000005c000280060012004e210000060010000f00000008000100", @ANYRES32=r8, @ANYBLOB="05000a0001000000060010007f000000060011004e200000050004004b000000060011004e20000006000f0002"], 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r6, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r9, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="3eed50d0125719a810f88e3f47186fe4dae74182dfd109a2587c4797410c9b8e39bd3d9aa144d5908647c30c8db69b5c17084c9b1bfbb8680737c4f88abcdbc7d294d72ab1b344270915df9ddf5635644c351c22b29d948ac4106bce7107570beed63077cfbc98ef71699eae65d37724d995b553e7a3ade619b522313ab382caf879feb48942878e605ee3ee2872794e3abe22a3f025068b628a5d92468092a5cc649bbbd978b5772e537939432a502122235ced312dafd108c9ffeb0b38cc16da9418ca01d485a6afb5827da4df6e1121ec307de14bb32b6a977608e4576a998182dd93d592ff43e55bfdbbce23ecd501e43b3e93ef8d9d01711dff54c301e299d3801a3cffe6c9883fbd0e47124dc02569f62d48b878fcb58ce99fcffcd2a5166eff3ad93cf1d137274993d86a3b3730d63ded759f6ca88fa449e5575b15321e5a58a1f888eed7466db4976ce35f6d2efb5ad05d99a66482dc607cb5acb24d326803bd337519cc98103f59c63b5962cd72e4497d1b00817d6e09de70270a09b493c2226617b1c9ef9d506be00d6e07f14633a966f04ecca90fb8d2b963ad6f3817935bd6534fa3da1c5dc468789cbf1192f3c0bff3777f1edd2ada5d35f88f12f29e952c44445ce623509d66811c80a9e0f13ad85aba37d86ff0da4dda601d9e8acb264233bc939fb056316612cff687d5c44157be05bcc88b333ff2a40041d98f1acfe6e2231a84e09bd7a54a0442cf87ce3ee8fd8da39da1862862ae40fc3cb3055c8b70e62f243850707341f51426bb3e71c7a4fffefab060db786000618b05eb087a424a2f30f6a232ff44b605f70ceec0a8f70e37907f6e0bbba21e9d5b7ecb6d287742b75c101ba79525918c3473eae38f3c177249dfa8816661c9921f0b0c858d53ab87c8407b97950c842111002edd1d1e80b801b495da28bcd5409bc971e55dab1857e188ac9728efc8f9a4543945f86ade13b445eacecbbf848a96410ac37c57e3e9e8bc8b8fadd559d225c7468639da2b5d1208558b51e94c14faa7947a7c60e81a96bb5d194cc7289adbc02ebb4b49be1f1efc429db2f9b79b5a22919dba0c35341042c5776942c52365367c4bfc95b42be383cca7107161ded7e851d0126da33d581f1e2b08d0c061e86d31e7a83f9b51c79b4034c7deda7697034e1404c6e8e459f76c2efe64350146c7437ef808e04ca14df5f6f500264fd977272bbf8fc096774e8eb61d0963430751ac1425a073f84346b0eba368cba7fa34adc420800d4f99927280eba199f9695cf88124fafc3a2b1226d2f2ab3ea27c69a127650cf5c725b54c02bd8729033cf699ce7f030f9a3442056244da3cfb61a8126dba11377624f39eb009242152fd7b8b88de7dd86057f29bfcb7b7df0e65e7e9ac9eeaa41afa62743698bff03d5b2d51fb6bca2d92294e8e177cfa3661b26f1c040e9bed983b7bc0aa154eb9c92e4ee25091318c53113a1c23ac62d2d71504cba99041f29a4f332133292cf20abec9222a2acca57cac48fa6c0668ee5eecb494741a64d33b011dcca74696d4614c5b45a5d20983b1708d365ed3ffa60f9161972a611c22642c3c259b41f943f6d7a8b60f284d325e38fe76f0645e069ff70cae38850ccf973193b6232c987df26239a574691f7f07fffa6deae1eb0324fe546573c36f2a2c31cd442517a9b036ae6a2a491e7343864693c107a5dc2585820863c146c1ba6caa4fea9b87d567716f4c8ca1a9d2848055cd750512d3b7415d090019dc8a04a1a1d28931093cd8f00e94c407ca1fa2a5ce903d9df26e008c07cd13afa783220e1bd5e6b60645f3dbb6ecb4156fedafa2dd25498c6a99d94f0b38125ea7741b75109dcac9f80635f79f5c8a0483bb9f05a3a5bf721c7541edb252449f8b13e63c370a6146332f03ca1f1b6fe0bed984f13744bb7fa0fe322e83ddf9ffb2083e94f33604a0a199220c450dad94bf154805e7f9e4350ca2d81adf2978c87dcc8a8a7d56297ec124bfef0d28f35777205e973272c87e01070f14f5b14daa3b5104d9ff6b296c4f16ed49eb42d35e7ba3bccb7a26c33a263df88aadd596e9d9de0abbd4d449df11081f2cd62e1d8962b9b9feb25a3b8e03537d61a61c11ac22b7211d12c84e60a6abcc219e558b2513d8c530b3c7a57cdc47de545aafbb2a13c0e6c75b1b92fa241c713c83a09c92b2b61d565120372a9143415583c9596f27a663d4967cd653b08cebd6cb96c1f0dc80d57267ac9a8281d7149bde880828ee27d69a6818db58320db29d1b044eaf6ab8a5108bc522de406990b5393b1f7e7bab71bf6cf8eed1cd59c7607d662e8b313f5c4fce0f59b1027371381011b63dd5b2b09739082c0d62ffad96e30153a395234937d377c32fe7af82aca3a19d0ebc4a5c5fb5ff190f14d5695c703b571fb4bf03756635cafc6cf6267eab836c347a9d07e8089fc105346934cf3364e5be370b3c42b94bc5ae3d17a817398566a2953251eb91697d67278145df9a4b917bcca1bf211780b22f4caacfcb7604c84f943d05f6fdf8edbd258d7d8dbf84f9d99e57472c5b1c2337d749a1f345e662e2536d23c7a63bbbbf00f8b5b0a2106a0342ab27b9a10b82e82668cd49e0cbb09d7be0217645f1dda3be59c8232fa290d34791cda52aa5b5cec6339ab96a2eb3f5328cc7c0e6717c2824344547a2ed518f6b2b4e4fe5b684596aa6a9d3988fc5d5ff4cb46cec99d951b8386b10949a163af974b7543df97b4882a4ed60e927a1deb67c5f814235bef65fea79a2c712815be7403c93a3707fb90d4604ec3a6a3b0928f253f6ab6bd56c958e026c8c58172c4ac2a3efe2ecd5cea70c8313f9ac2d638bc296ba99e2ca86d2fd06b5402cdcddc3f3c9845d5ae77f6f36963b91e8f6cdccd17abe8d40ed02463af4bb0e496344f350097f1cc13313fa1e172b63556ed2b8a8121c01a5fb343ff7767821626fc49b0d6bd522e1c9bf137d5a5bccb4bc8dbb64c83a82ef6c2894f3896c9f6bf0c3764011d53eeb6db9ea9dae22d3ebcca4942d5828c0bca0d9ea37701d5a06c066ac4fe318e11e9c0d6c658ac810fb5d7836cfffe4ccbb0934e5567d74695980a156d4bf1c18861c5a29ccd349999dc20562d00e1f6c1851ae563541086438d60b975c8ceb466414ff60efa0b2dee790fd0659ffa98b92414c13d5a6825368f56c4984412205041cd8e006c7127d4395ecdffb5addf80ef938ce54a367154c4fc286d5f969325c12b13655a9a956dd3b98281f537e837669fc55d8930676e807aa8cd046e0f4583d59f86cb99f3f7a7ddde1fb39111fdec7677d2fee4b8f4814a5def5ebcc67c653384ce80eaffd880405f7edf8fd3ea049f040595df4a75e2f892e7a85e0ba351fb8d263bfff7168bb85017b360fcd2ba89346682a6ea7ccc46afbdb5ab444e3f477238b2ab503bde914d3cf1789539cde9c0621152cd97bff9f235d88a1ef4ea4309db3a05d401af7fb82784b050ef529dab4f1f003eb29710a962f7538c521e617e2f0efac36182d09985e1d725cc38c3833a53742a02f76fb2854a9e45f0febacf3bda83f11183ef5b9fef02ebcdf56d4104b175bad937d8f61964f97d673577cdcbbb48d8eb62b063ee6563b9ff053719baff871bcd83822d865b2f7ef023076425ac5cd71b1f2309de0c6f14cc9c4d3e8fad945f756a7c8a084ea1bfdf5ac6e740043e7f7bdaca06774b084ae314c2636529d4fdcd965c7f8c07156572620b827d694efdc9d2bfc5aa9391220a83765f2c71fcd48d4acaed60afb53d1013fa3b15e948ec4159f7d130ef85b594018346e99034c18738285223ea53a6b1d5cf11a607de2e19608ba03ec970a915b773824261f3fc931dd6d3b934d89f07baf14776314c3eeb8cd0537ef5736f565fbd14e520d4ab2f77ed9597b76ff91f8d1f99ebd6e473efda7accb273975a06944d1037032129992b994ca791a09b4d83980a1e494b0f97098df5f6fb6bbb02722adb11dc319c565c2c363cbd19d9fb3efb4613b62d6584cd53f7bd80e3e89304f444ce9dd1835661e3bb4de02ccf568a2a5daaf0d56898d4286c3fb62e22af62d7ac318685834467f337561dde2e0c1e2827cdffcf42c17728ee64b3ff4ccc0227590badd0bd7e448b8cca0892d6a5e0130d2ac665f47c6b28daa101c1b319869bdd39fa924d6d9ba7d72feda5f21ac78641c7d4801d41c7879721b3be4dab40d9c4a78552440101f373489cc5240b0144a9ce32691a784b6dfe971a21bb5980ff67da2d1bb90b223c9e192a39c1aeadd1f5c790811079c0b51a97105c99b6f95d71bb3ea47c33d9dcb0a53c929c44499e184a3cd722c908d3b0d157e28ffdeb2ed7192e780d96a7a2f0fd5a87bdc973e049da0caf931f26f5a21813e2e602ceb2259997e0205ce48fd9424bd6d4d75dd4301f429ee30745cd839a40dbeab4c3db2f0f10bbaea071ca41d1392385681730a3678a5f60f604dbe19cb9d7dd234337e327451b8cc65394af399432ef7fc3765d055874ebdca14e5999292d6f72f31e92bacf25db5ef8f5212952c1910de06ddbe1687a0e1837922f2228289916ed3aeb7b9cc24da3ae47139e371930afa6d3573df6732c26c0c7ae06d9cedfa77160711bcb06e6553338deae4c5731cf53cc154113096d02f3036d7d9edfcdc331e4bb860c5208489212e904eab70e7f860b0379895cbdecbf7a0b7a25e5b853c7dbe08a4e296a30afec8cf5a9f6ea4aef32a508655d539a770b21e660c9ee1d7688c56abeb7cf1afccc8d59780cf26312589e0c8e1bc00ad7b1325cd9a5dd69246e0b33407c381ea09265154aec297e4ccdf9785a1042a83e77c13d4ce4360782f2428f9916b5cd123b089eb683d30c1e895b9944aa905a1a5b52301d8cc5e4741834ead6ebdb5dc05c9c49c5e883e99d40b9838037beaf876534d747856103e59caf6266fbbe760b6ef83d004634b74f14f8eb4aef93c4cc9cbbd78d83d532c70feef51ea3f170b25d81a6a9b074bfca7e9b3771bf83517e0dd9d0600f70b86b20f61fe36076f8bada334b2390fa954973bc901619a3cfd039349cb328625f495ab288dbdd6dbfd022c2a83f59e0b998619a12e35891b5ae9e83a71765507b4a571cd2241e5885c705244c1022688bef7c5065fbcf219fc01753adb611b3fbc09403dcb10a4f99d788667eff75fa27074ca8481a633530e26163ccf7dada049d23e717e067b6fa5b2f652bc50abda9e7ccdc5f2f3c35ecc2c4431c819c9691be4422e379750774e9f39dae06f26423c8a4278789c9f3111b43f6dd25b0ad47c4cc5fda3f3ed82079c9366e0adced883488f429c1d7e1b351fd0bb204dd7977ef224c4df6d7a5f7697bc6500a7d03a8a914154779fa7092bf1be6bad4092367ce5d295a5d5d0e7c469f372ca2011d612637025e89f178ae9ada0c5b73bcb7d7c034ff595263cd4216e3c76ba5f3d81932a088a90bf8043e877e299c670ef1622a098d5519d9adc4ee7d4cd00e5934a4375fa83fdb81214b892482b31bdde59a70aaf25cb7f417c3a2a91c4e54b48149f6c41d9d396ee6ff13e3028c64a7c9b1f2e7c6e67184a3d52d6f570db3d225c947423c4c6533f22df57d15c5e5a3183422bd378b06fe4732a9401dcb19840fb8fa5c50a0ff497fef362c507753e46b8881d3e767f3b1d893a3805941c94f2efa05ce34b9ea81d716984af6834230d4707a87089d40779503ee6a9bb245d7d997f14acb80e89731c042bbbbe3dcd05177b0ee0eec23455830ef5b65aca357f2b0b887e0b9821c0", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) r11 = dup2(r10, r9) sendmmsg(r11, &(0x7f0000008800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x20004095) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000880)=[0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf2, &(0x7f0000000900)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0x2f, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x5, &(0x7f0000000b40)=@raw=[@map_fd={0x18, 0x7}, @cb_func={0x18, 0x13}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], &(0x7f0000000b80)='GPL\x00', 0x1ff, 0x58, &(0x7f0000000bc0)=""/88, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000001140)={0x3, 0x3, 0xc193, 0x1000}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001180)=[0x1], &(0x7f00000011c0)=[{0x5, 0x2, 0x1, 0x4}, {0x0, 0x2, 0x4, 0x4}, {0x0, 0x4, 0x1, 0x8}, {0x2, 0x5, 0xe}, {0x1, 0x1, 0x5, 0xa}, {0x2, 0x3, 0xe, 0x7}], 0x10, 0x3}, 0x94) ioctl$BTRFS_IOC_START_SYNC(r9, 0x80089418, &(0x7f0000002780)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8540, 0x4d) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000080)={0x200000, 0x0, 0x29}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x1f, 0x33, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x23c6, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xe938, 0x0, 0x0, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800}, @map_val={0x18, 0x8, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x401}, @exit, @map_idx={0x18, 0x3, 0x5, 0x0, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000680)='GPL\x00', 0x3f0, 0xc5, &(0x7f00000006c0)=""/197, 0x40f00, 0x49, '\x00', r8, @fallback=0x2c, r11, 0x8, &(0x7f00000007c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x5, 0x3, 0x74, 0x4}, 0x10, r12, r13, 0x3, 0x0, &(0x7f0000001300)=[{0x1, 0x2, 0xb, 0x9}, {0x3, 0x4, 0x2, 0xb}, {0x4, 0x5, 0xc, 0x8}], 0x10, 0x7}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f0000000040), 0x1, 0x4b4, &(0x7f0000000c80)="$eJzs3E9sFNUfAPDvbHdpgR8/KiIKoi6isdHYQkHh4AWjiQdMjHjQY9MWghRqaE2EECmJwaMh8W48evXgVb0ZTyZe8WhiSIjhAnhaM7sz7e52t//Y7oL7+SRL35t9s+99982bfTNvlwD6Vjn9J4n4X0TcjIidtWxjgXLtz707Vybv37kyGQuVyqm/k2q5u2k+k++3PcuMFCIKXyRNL1gzd+nyuYmZmemLWX5s/vwnY3OXLr969vzEmekz0xfGjx8/euTwsdfHX1t/UC3qS+O6u+/z2f173/noxruTxXz7UPa3Po5OKUe5VVOqXux0ZT22oy6dFHvYENZlICLS7ipVx//OGAidB/2iUqlUBts/vVBpdm3ZFuCRlUSvWwD0Rv5Bn17/5o8uTT0eCrdP1C6A0rjvZY/aM8UoZGVKTde3nTQUER8u/PNN+ohNug8BAFDvpxP5TLB5/leIPXXl/p+toQxHxGMRsSsiHo+I3RHxRES17JMR8VTT65cjorJC/eWm/PL5T+HWAwW4inT+90a2ttU4/8tnfzE8kOV2ROQT5ulD2XsyEqXB02dnpg+vUMfPb/3+VbvnynXzv/SR1p/PBbN23Co23aCbmpif2HDATW5fi9hXbI4/KUYkiysBSUTsjYh963jd4br02Ze/27+YKTWWWz3+qkrLdbQOLFVUvo14qdb/C9HQ/0s1JiuvT44Nxcz0obH0KDjUso5ff7v+Xrv6V43/hz+bd3n72I+nHjTsRWn/b6s7/iNfv12KfziJSBbXa+fWX8f1P75se02ztuP/asM+6fG/Jfmgmt6SbftsYn7+4uGILcnJ5dvHl/bN83n5NP6Rg63H/65sn/SdeDoi0oP4mYh4NiKey9p+ICKej4iDK8T/y5svfLzx+DdXGv9Uy/NfQ/8vrdfPncwTl9aaGDh34Ob9NiePtfX/0WpqJNvS+vyXNJwi1trADryFAAAA8NArRPW7/4XRxXShMDpauwe0O7YVZmbn5l85PfvphanabwSGo1TI73TV7geXkvz+53BdfrwpfyS7b/z1wNZqfnRydmaq18FDn9teHfPJsvGf+mug160DNp2f/ED/Wm3877nRpYYAXefzH/pX3fhfaFNkwTdl4L+p9ed/qevtALqv1fi/uoF9gEdLxViGvmb8Q/8qxvuL6UJPWwJ0m89/6Etr/xX/RhKVwdZPDcXywjG0Oc3Y2qKuniTSmVVPat+6kb3y/02hbZkorPY6xYZjbDCWlxmInvTFmT0dP/gr2XflO93U71cep/l0fRPeqO6ehwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbLvwEAAP//cdfX0w==") 1.791785075s ago: executing program 2 (id=560): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) 1.294972374s ago: executing program 4 (id=561): r0 = socket$netlink(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket(0x2, 0x80805, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000240)={{0x2, 0x4e23, @multicast2}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, 0x20, {0x2, 0x4e22, @multicast1}, 'batadv_slave_1\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_read_part_table(0x5dc, &(0x7f0000000600)="$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") socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xd, 0x9, 0x4, 0x1, 0x0, r4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r6, 0x0, 0x73b}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180), 0x101, 0x0) keyctl$chown(0x6, 0x0, 0x0, 0x0) write$vga_arbiter(r7, &(0x7f0000000340)=ANY=[@ANYBLOB='decodes mem'], 0xc) socket(0x8, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'team_slave_0\x00'}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[], 0x40}}, 0x2404c095) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000007c0)='inet_sk_error_report\x00', r9}, 0x18) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r10}, &(0x7f0000000240), &(0x7f00000003c0)}, 0x20) (fail_nth: 3) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a3200000000080041007369770014003380"], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) 1.172051657s ago: executing program 0 (id=562): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) getpeername$l2tp(r0, &(0x7f00000003c0)={0x2, 0x0, @dev}, &(0x7f0000000400)=0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x62) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, 0x0) r2 = gettid() timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r4, &(0x7f0000000700)=[{&(0x7f0000000240)=""/35, 0x23}], 0x1) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000280)=r1) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000000c40)={0x5dc, 0x12, 0x100, 0x70bd27, 0x25dfdbfc, {0x9, 0x9, 0x0, 0x7, {0x4e23, 0x4e23, [0x3, 0x6, 0x7, 0x9], [0xfffffe01, 0x2, 0x5], 0x0, [0x10001, 0x2]}, 0x2fa4d239}, [@INET_DIAG_REQ_BYTECODE={0x89, 0x1, "48f6e99d732494beb4a5b273cc92065837d47d28f3056f1a04a6a6073b95bf123e73fef8b624c2302e718ec3632469f3a86b2e06b5a2ca915d389f6a2f610540bd81b80d23307ae688676fca3cf94ac2e336d0eb502890ef0bb73708d03fa406ec7b69d51a7424b6f04eec5a86cbf83c9a211cf4b4c2fe695f4c248c8bccba0e40ea4b4054"}, @INET_DIAG_REQ_BYTECODE={0xae, 0x1, "aed6945221d3c9ecfc0c45f30153d7772d058df770b7b6707876018f41201eded1f8d502f4f8c01731a85a5184bc837f3aa96933f63bc7fbe2ce88d8fd6e836f729973ccf9cd5385d09b0d5a24221c77e6fec851eb26844814f87e1a8f34ec9f781ce4af5afdd412520dcd7083547d08fe310c663674f218283dd377a07ce4a7a334e97b2ee8c7dba27573dbffcb2824983f5f22b023b73e3419096802f5a51b33889266ea0847ca77a7"}, @INET_DIAG_REQ_BYTECODE={0xfd, 0x1, "2e67429d199906870a5d74734ab19c50f030c520d6b37d74972f2bffdde8bb7c2e57b9881648f5e97fd2fbdd4e7ebf6ade209c08b029e815945b0539cd31ddb03545a0b6d20e55f5947cc9b4bf680d2f6d30009bc660a3f0b9bd9cd474301d753db65334d64d8aed8afe03bd99df8e5ff48a4f719d492e41fca9cff69cf5a1a416d85072cb605d07601a11be386f316a925a1f88a0b6f5949319383892f1a06890f181b29468246c9ae374520768b26887a202f3e297f54f0588726575d9db3ce83389984cf612cb02ee5c8f261f2c86066b915121347a7026183f7ee6cb7ebc30eb5ca35985ffa355e95a98359ee036d64fbf3b97ed257302"}, @INET_DIAG_REQ_BYTECODE={0x93, 0x1, "212b1b36f218b07913757555669d84db92a544eb995086d3c8b8f149ac4da1f1b54691fe4b69cd9c1be7bcc3eab3839a2e49c15d11c0ebc61edd844216e1f424c6a674e0af462427e0ccb81e36683ec0a11459ae945e3d3c5bab36475b12f807775fce3540584819b013ea37825cdca0e8b1360116170d1d763db28ff3c950169730332f555d18b3045c70ce85e7eb"}, @INET_DIAG_REQ_BYTECODE={0x91, 0x1, "0ded7c52bc22187b1e8594bef55e142dc88a0135e8eba49f69739b4e3e2444a2865d552179e0d775a6dfdfe06e159972aa99076ec60718b38594b8ac34bd367d910c0e43735d3fe04ba99f672f6f9e878ce92f5c3eaef13dec6a3af155a4b75571ac0bd03f63437fba5216c7359ea0aa611b353a6b81d2780aeb5f083e10cb90efecc3cb2043e5d9ba1b8cd9c4"}, @INET_DIAG_REQ_BYTECODE={0x7c, 0x1, "fc068c69ea28324995e9300c2d3430a83e905b97c3b5dca7336da9e40e357829fb37e7ed440b870f584f39dacbb78eef9f87aa378975b838ee0857f6c82e64c547b91fa9920cae48f8a725ef0cf4d6bcb1e03fe9156a1759ce3f6bbe175f0cf69d493990dd7188bbf5b8cc3be07f452e485f61a99bb6c59c"}, @INET_DIAG_REQ_BYTECODE={0x75, 0x1, "54343fd36bbd8637bcd9da031895feb5a92639cf85853001ddef146e5e851c78507d1431c24ff83e3d827dc27676e7832e8dd2cae2d7564cbe9519a5b4b3b54be76dba9e6937928341576b3bc2dee64852e627473bc7a9178702b7c5ba7dd20bf9e7a193445603cc5588b2c514460a50b6"}, @INET_DIAG_REQ_BYTECODE={0xd7, 0x1, "66b333d4fe28ebf3cd6296127e822ce47bfb5aec2cb220bcec059ba83a74852bf27c31a26514dd11d40e514bdd32f3f1474e012d7d3902cbf733fe638f8aa67158d990f2a36da4299d980545a2909d7d7f02252ad3218b5072d1964f6169997c8205a726fa017e9811da7766b171ef61f7e0d8be8d4816e1e9d0eba215cf24365223a71d8da42a071cf5706e9a0e06a86f270e878892ae6f66c26bcc6f079b13e44f6fdd3774e61be6a08b2264b155123dee5941d19177003afee43b0a8fd77cc1c93fb866ae1b1550f7c9dc11ef2679dcaa14"}, @INET_DIAG_REQ_BYTECODE={0x5f, 0x1, "2ac74d29b303aa3c1c49c53142db916cdc0a925c0471443a2496462b23f95e1eb5994ed103e3dd90b585e5f0730583f7bbf198451d389b4412be0413616c6aae20785d481c22d74696319557ad8599c7d764a4e64b3f161bdf3ffd"}]}, 0x5dc}, 0x1, 0x0, 0x0, 0x8080}, 0x40090) 971.904711ms ago: executing program 4 (id=563): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r2}, 0x18) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) write(r0, &(0x7f00000000c0)="8f2a0a", 0x3) 971.536641ms ago: executing program 4 (id=564): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 907.383062ms ago: executing program 2 (id=565): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x18) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000000000000000000009500000016000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0xb6}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="3eed50d0125719a810f88e3f47186fe4dae74182dfd109a2587c4797410c9b8e39bd3d9aa144d5908647c30c8db69b5c17084c9b1bfbb8680737c4f88abcdbc7d294d72ab1b344270915df9ddf5635644c351c22b29d948ac4106bce7107570beed63077cfbc98ef71699eae65d37724d995b553e7a3ade619b522313ab382caf879feb48942878e605ee3ee2872794e3abe22a3f025068b628a5d92468092a5cc649bbbd978b5772e537939432a502122235ced312dafd108c9ffeb0b38cc16da9418ca01d485a6afb5827da4df6e1121ec307de14bb32b6a977608e4576a998182dd93d592ff43e55bfdbbce23ecd501e43b3e93ef8d9d01711dff54c301e299d3801a3cffe6c9883fbd0e47124dc02569f62d48b878fcb58ce99fcffcd2a5166eff3ad93cf1d137274993d86a3b3730d63ded759f6ca88fa449e5575b15321e5a58a1f888eed7466db4976ce35f6d2efb5ad05d99a66482dc607cb5acb24d326803bd337519cc98103f59c63b5962cd72e4497d1b00817d6e09de70270a09b493c2226617b1c9ef9d506be00d6e07f14633a966f04ecca90fb8d2b963ad6f3817935bd6534fa3da1c5dc468789cbf1192f3c0bff3777f1edd2ada5d35f88f12f29e952c44445ce623509d66811c80a9e0f13ad85aba37d86ff0da4dda601d9e8acb264233bc939fb056316612cff687d5c44157be05bcc88b333ff2a40041d98f1acfe6e2231a84e09bd7a54a0442cf87ce3ee8fd8da39da1862862ae40fc3cb3055c8b70e62f243850707341f51426bb3e71c7a4fffefab060db786000618b05eb087a424a2f30f6a232ff44b605f70ceec0a8f70e37907f6e0bbba21e9d5b7ecb6d287742b75c101ba79525918c3473eae38f3c177249dfa8816661c9921f0b0c858d53ab87c8407b97950c842111002edd1d1e80b801b495da28bcd5409bc971e55dab1857e188ac9728efc8f9a4543945f86ade13b445eacecbbf848a96410ac37c57e3e9e8bc8b8fadd559d225c7468639da2b5d1208558b51e94c14faa7947a7c60e81a96bb5d194cc7289adbc02ebb4b49be1f1efc429db2f9b79b5a22919dba0c35341042c5776942c52365367c4bfc95b42be383cca7107161ded7e851d0126da33d581f1e2b08d0c061e86d31e7a83f9b51c79b4034c7deda7697034e1404c6e8e459f76c2efe64350146c7437ef808e04ca14df5f6f500264fd977272bbf8fc096774e8eb61d0963430751ac1425a073f84346b0eba368cba7fa34adc420800d4f99927280eba199f9695cf88124fafc3a2b1226d2f2ab3ea27c69a127650cf5c725b54c02bd8729033cf699ce7f030f9a3442056244da3cfb61a8126dba11377624f39eb009242152fd7b8b88de7dd86057f29bfcb7b7df0e65e7e9ac9eeaa41afa62743698bff03d5b2d51fb6bca2d92294e8e177cfa3661b26f1c040e9bed983b7bc0aa154eb9c92e4ee25091318c53113a1c23ac62d2d71504cba99041f29a4f332133292cf20abec9222a2acca57cac48fa6c0668ee5eecb494741a64d33b011dcca74696d4614c5b45a5d20983b1708d365ed3ffa60f9161972a611c22642c3c259b41f943f6d7a8b60f284d325e38fe76f0645e069ff70cae38850ccf973193b6232c987df26239a574691f7f07fffa6deae1eb0324fe546573c36f2a2c31cd442517a9b036ae6a2a491e7343864693c107a5dc2585820863c146c1ba6caa4fea9b87d567716f4c8ca1a9d2848055cd750512d3b7415d090019dc8a04a1a1d28931093cd8f00e94c407ca1fa2a5ce903d9df26e008c07cd13afa783220e1bd5e6b60645f3dbb6ecb4156fedafa2dd25498c6a99d94f0b38125ea7741b75109dcac9f80635f79f5c8a0483bb9f05a3a5bf721c7541edb252449f8b13e63c370a6146332f03ca1f1b6fe0bed984f13744bb7fa0fe322e83ddf9ffb2083e94f33604a0a199220c450dad94bf154805e7f9e4350ca2d81adf2978c87dcc8a8a7d56297ec124bfef0d28f35777205e973272c87e01070f14f5b14daa3b5104d9ff6b296c4f16ed49eb42d35e7ba3bccb7a26c33a263df88aadd596e9d9de0abbd4d449df11081f2cd62e1d8962b9b9feb25a3b8e03537d61a61c11ac22b7211d12c84e60a6abcc219e558b2513d8c530b3c7a57cdc47de545aafbb2a13c0e6c75b1b92fa241c713c83a09c92b2b61d565120372a9143415583c9596f27a663d4967cd653b08cebd6cb96c1f0dc80d57267ac9a8281d7149bde880828ee27d69a6818db58320db29d1b044eaf6ab8a5108bc522de406990b5393b1f7e7bab71bf6cf8eed1cd59c7607d662e8b313f5c4fce0f59b1027371381011b63dd5b2b09739082c0d62ffad96e30153a395234937d377c32fe7af82aca3a19d0ebc4a5c5fb5ff190f14d5695c703b571fb4bf03756635cafc6cf6267eab836c347a9d07e8089fc105346934cf3364e5be370b3c42b94bc5ae3d17a817398566a2953251eb91697d67278145df9a4b917bcca1bf211780b22f4caacfcb7604c84f943d05f6fdf8edbd258d7d8dbf84f9d99e57472c5b1c2337d749a1f345e662e2536d23c7a63bbbbf00f8b5b0a2106a0342ab27b9a10b82e82668cd49e0cbb09d7be0217645f1dda3be59c8232fa290d34791cda52aa5b5cec6339ab96a2eb3f5328cc7c0e6717c2824344547a2ed518f6b2b4e4fe5b684596aa6a9d3988fc5d5ff4cb46cec99d951b8386b10949a163af974b7543df97b4882a4ed60e927a1deb67c5f814235bef65fea79a2c712815be7403c93a3707fb90d4604ec3a6a3b0928f253f6ab6bd56c958e026c8c58172c4ac2a3efe2ecd5cea70c8313f9ac2d638bc296ba99e2ca86d2fd06b5402cdcddc3f3c9845d5ae77f6f36963b91e8f6cdccd17abe8d40ed02463af4bb0e496344f350097f1cc13313fa1e172b63556ed2b8a8121c01a5fb343ff7767821626fc49b0d6bd522e1c9bf137d5a5bccb4bc8dbb64c83a82ef6c2894f3896c9f6bf0c3764011d53eeb6db9ea9dae22d3ebcca4942d5828c0bca0d9ea37701d5a06c066ac4fe318e11e9c0d6c658ac810fb5d7836cfffe4ccbb0934e5567d74695980a156d4bf1c18861c5a29ccd349999dc20562d00e1f6c1851ae563541086438d60b975c8ceb466414ff60efa0b2dee790fd0659ffa98b92414c13d5a6825368f56c4984412205041cd8e006c7127d4395ecdffb5addf80ef938ce54a367154c4fc286d5f969325c12b13655a9a956dd3b98281f537e837669fc55d8930676e807aa8cd046e0f4583d59f86cb99f3f7a7ddde1fb39111fdec7677d2fee4b8f4814a5def5ebcc67c653384ce80eaffd880405f7edf8fd3ea049f040595df4a75e2f892e7a85e0ba351fb8d263bfff7168bb85017b360fcd2ba89346682a6ea7ccc46afbdb5ab444e3f477238b2ab503bde914d3cf1789539cde9c0621152cd97bff9f235d88a1ef4ea4309db3a05d401af7fb82784b050ef529dab4f1f003eb29710a962f7538c521e617e2f0efac36182d09985e1d725cc38c3833a53742a02f76fb2854a9e45f0febacf3bda83f11183ef5b9fef02ebcdf56d4104b175bad937d8f61964f97d673577cdcbbb48d8eb62b063ee6563b9ff053719baff871bcd83822d865b2f7ef023076425ac5cd71b1f2309de0c6f14cc9c4d3e8fad945f756a7c8a084ea1bfdf5ac6e740043e7f7bdaca06774b084ae314c2636529d4fdcd965c7f8c07156572620b827d694efdc9d2bfc5aa9391220a83765f2c71fcd48d4acaed60afb53d1013fa3b15e948ec4159f7d130ef85b594018346e99034c18738285223ea53a6b1d5cf11a607de2e19608ba03ec970a915b773824261f3fc931dd6d3b934d89f07baf14776314c3eeb8cd0537ef5736f565fbd14e520d4ab2f77ed9597b76ff91f8d1f99ebd6e473efda7accb273975a06944d1037032129992b994ca791a09b4d83980a1e494b0f97098df5f6fb6bbb02722adb11dc319c565c2c363cbd19d9fb3efb4613b62d6584cd53f7bd80e3e89304f444ce9dd1835661e3bb4de02ccf568a2a5daaf0d56898d4286c3fb62e22af62d7ac318685834467f337561dde2e0c1e2827cdffcf42c17728ee64b3ff4ccc0227590badd0bd7e448b8cca0892d6a5e0130d2ac665f47c6b28daa101c1b319869bdd39fa924d6d9ba7d72feda5f21ac78641c7d4801d41c7879721b3be4dab40d9c4a78552440101f373489cc5240b0144a9ce32691a784b6dfe971a21bb5980ff67da2d1bb90b223c9e192a39c1aeadd1f5c790811079c0b51a97105c99b6f95d71bb3ea47c33d9dcb0a53c929c44499e184a3cd722c908d3b0d157e28ffdeb2ed7192e780d96a7a2f0fd5a87bdc973e049da0caf931f26f5a21813e2e602ceb2259997e0205ce48fd9424bd6d4d75dd4301f429ee30745cd839a40dbeab4c3db2f0f10bbaea071ca41d1392385681730a3678a5f60f604dbe19cb9d7dd234337e327451b8cc65394af399432ef7fc3765d055874ebdca14e5999292d6f72f31e92bacf25db5ef8f5212952c1910de06ddbe1687a0e1837922f2228289916ed3aeb7b9cc24da3ae47139e371930afa6d3573df6732c26c0c7ae06d9cedfa77160711bcb06e6553338deae4c5731cf53cc154113096d02f3036d7d9edfcdc331e4bb860c5208489212e904eab70e7f860b0379895cbdecbf7a0b7a25e5b853c7dbe08a4e296a30afec8cf5a9f6ea4aef32a508655d539a770b21e660c9ee1d7688c56abeb7cf1afccc8d59780cf26312589e0c8e1bc00ad7b1325cd9a5dd69246e0b33407c381ea09265154aec297e4ccdf9785a1042a83e77c13d4ce4360782f2428f9916b5cd123b089eb683d30c1e895b9944aa905a1a5b52301d8cc5e4741834ead6ebdb5dc05c9c49c5e883e99d40b9838037beaf876534d747856103e59caf6266fbbe760b6ef83d004634b74f14f8eb4aef93c4cc9cbbd78d83d532c70feef51ea3f170b25d81a6a9b074bfca7e9b3771bf83517e0dd9d0600f70b86b20f61fe36076f8bada334b2390fa954973bc901619a3cfd039349cb328625f495ab288dbdd6dbfd022c2a83f59e0b998619a12e35891b5ae9e83a71765507b4a571cd2241e5885c705244c1022688bef7c5065fbcf219fc01753adb611b3fbc09403dcb10a4f99d788667eff75fa27074ca8481a633530e26163ccf7dada049d23e717e067b6fa5b2f652bc50abda9e7ccdc5f2f3c35ecc2c4431c819c9691be4422e379750774e9f39dae06f26423c8a4278789c9f3111b43f6dd25b0ad47c4cc5fda3f3ed82079c9366e0adced883488f429c1d7e1b351fd0bb204dd7977ef224c4df6d7a5f7697bc6500a7d03a8a914154779fa7092bf1be6bad4092367ce5d295a5d5d0e7c469f372ca2011d612637025e89f178ae9ada0c5b73bcb7d7c034ff595263cd4216e3c76ba5f3d81932a088a90bf8043e877e299c670ef1622a098d5519d9adc4ee7d4cd00e5934a4375fa83fdb81214b892482b31bdde59a70aaf25cb7f417c3a2a91c4e54b48149f6c41d9d396ee6ff13e3028c64a7c9b1f2e7c6e67184a3d52d6f570db3d225c947423c4c6533f22df57d15c5e5a3183422bd378b06fe4732a9401dcb19840fb8fa5c50a0ff497fef362c507753e46b8881d3e767f3b1d893a3805941c94f2efa05ce34b9ea81d716984af6834230d4707a87089d40779503ee6a9bb245d7d997f14acb80e89731c042bbbbe3dcd05177b0ee0eec23455830ef5b65aca357f2b0b887e", 0xffc}, {&(0x7f0000000340)}], 0x4, 0x0, 0x0, 0x8000}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000140)='sched_switch\x00', r5, 0x0, 0x40000000000}, 0x18) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x8000) ioctl$EVIOCGUNIQ(r6, 0x80404508, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000080)=0x14) write$eventfd(0xffffffffffffffff, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) close_range(r1, 0xffffffffffffffff, 0x0) 906.813042ms ago: executing program 2 (id=566): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 861.679153ms ago: executing program 2 (id=567): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x3, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0x0, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) r0 = socket$inet6(0xa, 0x3, 0x38) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 768.594265ms ago: executing program 2 (id=568): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000180)={[{@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7fffffffffffffff}}]}, 0x1, 0x51b, &(0x7f00000008c0)="$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") truncate(0x0, 0x8fff5) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x3, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3f}, [], {0x95, 0x0, 0x1200}}, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x30}}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x4}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021181500001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000ec140380300000802c000180250001"], 0x159c}}, 0x0) 673.683847ms ago: executing program 2 (id=571): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff0b7a0204be1486d8a0056406040c5c0009003f0006180a0000000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160040030a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x20000800, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000280)={[{@discard}, {@jqfmt_vfsv0}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$eJzs3d9rHNUeAPDvbJLmR3tvcuFy7+1b4EJvoHRzU2Or4EPFBxEsFPTZNmy2oWaTLdlNaULAFhF8EVR8EPSlz/6ob776A3zS/8IHaamaFis+SGR2Z5M02c2vJtloPh+YzDkzsznnO+fMzNmdYTeAQ2sw/ZOLOB4RbycR/dnyJCK6aqnOiHP17R4uLvRERCGJpaWXfkpq2zxYXCjEqtekjmaZ/0TEV29EnMytL7cyNz85VioVZ7L8cHXq6nBlbv7UlamxieJEcfrMyOjo6bNPnj2ze7H+8t38sbvvPP+/T8/99vq/b7/1dRLn4li2bnUcu2UwBrN90pXuwkc8t9uFtVnS7gqwI+mh2VE/yuN49EdHLdVC737WDADYK69FxBIAcMgkrv8AcMg0Pgd4sLhQaEzt/URif917NiJ66vE/zKb6ms7snl1P7T5o34PkkTsjSUQM7EL5gxHx4eevnOjI8mk93EsD9sONmxFxaWBw/fk/WffMwnb9f6OVS9212eCaxYft+gPt9EU6/nmq2fgvtzz+iSbjn+76sfuvxy1/8+M/d+dxy9hIOv57pv5s25rx3/JDawMdWe5vtTFfV3L5SqmYntv+HhFD0dWd5kdqmzYfuQ3d//1+q/Kz8d/H6fTzu69+lJafzle2yN3p7H70NeNj1c5vHjfwzL2b0Zcl18SfLLd/0mL8e2GLZbzw9JsftFqXxp/G25jWx7+3lm5FnGja/ittmWz4fOJwrTsMNzpFE599/35fq/JXt386peWn892PtLl7N6PWAZJkZR/U1yzHP5Csfl6zsv0yvr3V/2WrdZvH37T/jx1JXq6lj2TLro9VqzMjEUeSF9cvP73y2ka+sX0a/9B/mx//9WKb9//0PeGlLcbfeffHT3Ye/95K4x/fuP+vaf+ebPHKks0Stx9OdrQqf2vtP1pLDWVL0vbfLK6t1GtnvRkAAAAAAAAAAAAAAAAAAAAAAAAAti8XEcciyeWX07lcPl//De9/Rl+uVK5UT14uz06PR+23sgeiK9f4qsv+Vd+HOpJ9H34jf3pN/omI+EdEvNfdW8vnC+XSeLuDBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDM0Ra//5/6obvdtQMA9kxPuysAAOw7138AOHy2d/3v3bN6AAD7x/t/ADh8tnz9v7S39QAA9o/3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOyxC+fPp9PSr4sLhTQ/fm1udrJ87dR4sTKZn5ot5Avlmav5iXJ5olTMF8pTLf/RjfqsVC5fHY3p2evD1WKlOlyZm784VZ6drl68MjU2UbxY7Nq3yAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg6ypz85NjpVJx5i+RuLES2C7/5962xtV3MHbvqkRnHIhqHOhEdxyIauwwsfos0duGMxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAn8MfAQAA//94WBdi") r1 = creat(&(0x7f0000000100)='./file1\x00', 0x158) write$UHID_INPUT(r1, &(0x7f0000000f80)={0x8, {"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", 0x1000}}, 0x1006) close(r1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x24f0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10000, 0x10000, 0x0, 0x1, 0xa, 0x20009, 0x5, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000003780)=[{{&(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001740)=[{&(0x7f00000006c0)='\f', 0x1}], 0x1}}, {{&(0x7f0000000540)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000001780)='\"', 0x1}], 0x1}}], 0x2, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r4, 0xd}, 0x8) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x8, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x9, 0x3ff}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa424e1aa2e0d4080045"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x43}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={r4, @in6={{0xa, 0x4e24, 0xb8c6, @empty, 0x6}}, 0x800, 0x2, 0x68b, 0x6, 0x0, 0xffffffb0, 0xde}, 0x9c) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000580)=@nullb, 0x0, &(0x7f0000000640)='./bus\x00') 600.670128ms ago: executing program 3 (id=573): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x29, 0xf8, 0x6, 0x3, 0x6, @private0, @mcast2, 0x80, 0x40, 0x7, 0xfff7ff8d}}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)=""/148, 0xb0, 0x94, 0x1, 0x4}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800005f7d75000100000080", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="01000000040000000500"/28], 0x50) r2 = inotify_init() r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket(0x2, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000ffffff7f000000000000000085000000270000003b225ee8111ebf9c101801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a001000000850000009b0000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x0, 0xe, 0x0, &(0x7f0000000040)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f00000000c0)={@multicast2, @multicast1, r7}, 0xfffffffffffffc4d) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f00000000c0)={@multicast2=0xe0004000, @private=0xa010102, r7}, 0xc) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r9, 0x0, 0x21, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x102, 0x3, @private0, 0x8}, 0x1c) splice(r9, 0x0, r8, 0x0, 0x406f413, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 567.496569ms ago: executing program 3 (id=574): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000000)=0x9, 0x8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) timer_create(0x3, &(0x7f0000000200)={0x0, 0x21, 0x1}, &(0x7f00000002c0)=0x0) timer_delete(r1) 490.126721ms ago: executing program 3 (id=575): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f000001a640)=@delchain={0x17dc, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x15cc, 0x2, [@TCA_MATCHALL_ACT={0x15c8, 0x2, [@m_sample={0x11c, 0x5, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}]}, {0xe8, 0x6, "38f25df555191be2c666d9a5f9fbf1c6674d930a6b49548795f779c04738d31476e7b46904303e774f670daac95204b3aa00967b9ec65d764b2e48bd715da197540ac2dbea2e115f4efd22ebb0c4531bf7fcd31b61547bd15f710737fab7ba50f6730bcf7c68fd6f6734dc220ebc37df3b8e187fddc4516e5f783c302bbc133134d2a06ab408a97de6505724f9be2eb62a565a1535810f54b758c56ab347d36db167b672425230830efb7606f51b3a894056ee7b74af7ad106d611b3d7c4a326bbd604993d9eba87f5d9d7c682cf9643bb5648bc70f946ebac22580878bb773b062b1b0d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x7}}}}, @m_ctinfo={0x90, 0x1b, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x72a0, 0x4, 0xffffffffeffffff1, 0x2, 0x9}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8001}]}, {0x3a, 0x6, "89a75f1f9832982c0a59ad5c7b043805d7ff0d0a67a9df5adf2ac6dab7c5cfad8bbf15a9388f68544ed8dea9946ee57f3ffd502c8065"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_gact={0xb4, 0x1d, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xc7f, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xa96}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x160e, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x400, 0x9, 0x5, 0x3, 0x3bc}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x5, 0x4, 0xe, 0x2800000}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x92a, 0x10000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xfd0, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8, 0x4, 0xfff, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_tunnel_key={0x58, 0x3, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xb, 0x81, 0x2, 0xffffffff, 0x3}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0x107c, 0x9, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7f, 0x401, 0x3, 0x7, 0x101}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xe4, 0x7, 0x20000000, 0x0, 0x2}, @dev={0xac, 0x14, 0x14, 0x31}, @private=0xa010101, 0xff000000}}]}, {0x1001, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_mirred={0x17c, 0x16, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000001, 0xfffffff7, 0x3, 0xe}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4, 0x1, 0x8}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x0, 0x1, 0x5, 0x3}, 0x3}}]}, {0xee, 0x6, "605524e3626aca9778df374bbcad3d51d25178b24ec88e3a92acc301747daa26bb3deb8b829e8a55fdb30b1765bad6b2ed28273083ed0a35559ef9dfc77b5bd2e05bd2ccccad0ad73d611653ce29c79832ce1a80c857bc92eb376b42ab09b1778f1bd4400cba36f0002420428ecf149c920e535bc21a81383ab87116a652e6a9f737b5a390799307a1b121ace65bfa0ec1c7d7e4ec7dd74bef4770681bb50c0ab70d8987118f03d1a5bc3e1e5aa55c552e6248b91ed765b9f7409670b105369937ac1c99025cfe5b2b020cd69de786290273150b5c3a9621cfee5b5a3970e43270972198b62355926fb3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_sample={0x114, 0x9, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}]}, {0xdd, 0x6, "e6b0e74476bf8a639de044e1ddc46b91d5d10f82426cbe8105c4fc1c8a7ce70437ab48a5830e3977ecdb3e3da68d505606eb4ba9f466583e623799ce0925894b032ded7702d56d71e960bdeaaa528d004ed1073da40767f94e65b9b7e0d6d79e8fc722fb4cbde27f8180453df41e5557719122a4c82905d8a73c4dba79298394d566a8889b1bcde351529459a08e5f6fce37b039eeb668f321f6d23d49953fe11d1c069e543f1732e854e82d780a11e784d968c7b0b3eebdbe0189223c2426cc72a567bca23d0c663069282c776675575072d53394ce99dc19"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1cc, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x94, 0x1, [@m_mirred={0x60, 0x5, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xcdf, 0x1, 0x10000000, 0x2, 0xfffff001}, 0x4}}]}, {0x11, 0x6, "d527360c37d81b077c369a3b45"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_skbmod={0x30, 0xa, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0x124, 0x1, [@m_ctinfo={0x120, 0x19, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffff}]}, {0xe9, 0x6, "ed5c1eb99390e7d0a8730c2f4ad7eab8a255351b763e5585c30ef05596ff09fd3ea6975074d4baa7805a08bfdd7f7fa2634cbcdbba1c88eea89d70023a7b9d8d2a94daf79fa1e5bffdc60fbea174f1aa7372acb7f356da638e68d8cc0dfa35b1ef1879e8526f439300c841829ae601a7811d02b21fcc5aaa7951b03466f8a1800a4b912630d3eb9f282786ef340f4e3cb08280f71f4ee2941ec13001a2c7884372e6ba0fb2f0aaa4766f88f4e7f768d299cf02a379f46bdc6682f28a257745a6d3ef46b8f9de69a946bbf1ee9dcd47e35fd96ce64d20d45afb7c448a0482449961a6539ce9"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x17dc}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 482.0276ms ago: executing program 4 (id=576): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) getpriority(0x1, 0x0) 460.502741ms ago: executing program 3 (id=577): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000800)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f00000005c0)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 391.909332ms ago: executing program 4 (id=578): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) prlimit64(r3, 0x0, &(0x7f0000000140)={0x1ff, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x22) write$qrtrtun(r4, &(0x7f0000000900)="9d8d645e53", 0x5) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000240)='sys_enter\x00', r5, 0x0, 0xfffffffffffffffc}, 0x18) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000010426bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="03150000000000001c0012800b0001006d616373656300000c000280050008000100000008000500", @ANYRES32=r7, @ANYBLOB="8e20d033b3d6684dd877d11348bb85d758beb793476ecefaa7c4551b33d26f0569608a0686be1ea8b9c3"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x3, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0xb, 0x7, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) getrlimit(0xc, &(0x7f0000000040)) r9 = fsmount(r0, 0x0, 0x0) openat$cgroup_subtree(r9, &(0x7f0000000100), 0x2, 0x0) 386.682992ms ago: executing program 3 (id=579): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) fadvise64(r1, 0x12b6, 0x95bd, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2}, &(0x7f0000000500), &(0x7f00000005c0)=r3}, 0x20) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x17, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES8=r0, @ANYRESOCT=r4], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000010000c50000000e00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='rxrpc_peer\x00', r6}, 0x10) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffff7, 0x0, 0x865d, 0xfd, "ffff00000000000000965700"}) r8 = syz_open_pts(r7, 0x0) io_setup(0x6, &(0x7f0000000000)=0x0) r10 = eventfd(0x10) io_submit(r9, 0x1, &(0x7f00000006c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4, r8, &(0x7f00000003c0)='z', 0x1, 0xcead, 0x0, 0x5, r10}]) close_range(r7, 0xffffffffffffffff, 0x0) 331.951773ms ago: executing program 0 (id=580): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52b, &(0x7f0000000a00)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) 159.715207ms ago: executing program 3 (id=581): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000200000000050005"], 0x80}}, 0x0) 144.654017ms ago: executing program 0 (id=582): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x310}, 0x1, 0x0, 0x0, 0x4000020}, 0x40010) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5, 0x1}, 0x20) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)={0x2, 'tunl0\x00', {0x7}, 0x53f9}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x15}, 0x0, 0x0, 0x800004, 0x5, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023892) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$nfc_llcp(r3, 0x118, 0x4, &(0x7f0000000a80)=""/4096, 0x1000) 0s ago: executing program 4 (id=583): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): dump_stack+0x15/0x1b [ 43.562321][ T3740] should_fail_ex+0x265/0x280 [ 43.562350][ T3740] should_fail+0xb/0x20 [ 43.562454][ T3740] should_fail_usercopy+0x1a/0x20 [ 43.562478][ T3740] strncpy_from_user+0x25/0x230 [ 43.562591][ T3740] ? kmem_cache_alloc_noprof+0x186/0x310 [ 43.562619][ T3740] ? getname_flags+0x80/0x3b0 [ 43.562651][ T3740] getname_flags+0xae/0x3b0 [ 43.562744][ T3740] __se_sys_newstat+0x4b/0x280 [ 43.562840][ T3740] ? fput+0x8f/0xc0 [ 43.562865][ T3740] ? ksys_write+0x192/0x1a0 [ 43.562891][ T3740] __x64_sys_newstat+0x31/0x40 [ 43.562922][ T3740] x64_sys_call+0x73e/0x2ff0 [ 43.562999][ T3740] do_syscall_64+0xd2/0x200 [ 43.563029][ T3740] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 43.563061][ T3740] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 43.563211][ T3740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.563236][ T3740] RIP: 0033:0x7f4c5494ec29 [ 43.563255][ T3740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.563272][ T3740] RSP: 002b:00007f4c533af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 43.563295][ T3740] RAX: ffffffffffffffda RBX: 00007f4c54b95fa0 RCX: 00007f4c5494ec29 [ 43.563307][ T3740] RDX: 0000000000000000 RSI: 0000200000001c80 RDI: 0000200000000cc0 [ 43.563318][ T3740] RBP: 00007f4c533af090 R08: 0000000000000000 R09: 0000000000000000 [ 43.563330][ T3740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.563424][ T3740] R13: 00007f4c54b96038 R14: 00007f4c54b95fa0 R15: 00007fff070bd008 [ 43.563446][ T3740] [ 43.658364][ T3715] lo speed is unknown, defaulting to 1000 [ 43.691871][ T3744] FAULT_INJECTION: forcing a failure. [ 43.691871][ T3744] name failslab, interval 1, probability 0, space 0, times 0 [ 43.773673][ T3715] lo speed is unknown, defaulting to 1000 [ 43.782551][ T3744] CPU: 1 UID: 0 PID: 3744 Comm: syz.2.75 Not tainted syzkaller #0 PREEMPT(voluntary) [ 43.782585][ T3744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 43.782597][ T3744] Call Trace: [ 43.782603][ T3744] [ 43.782611][ T3744] __dump_stack+0x1d/0x30 [ 43.782634][ T3744] dump_stack_lvl+0xe8/0x140 [ 43.782654][ T3744] dump_stack+0x15/0x1b [ 43.782690][ T3744] should_fail_ex+0x265/0x280 [ 43.782747][ T3744] should_failslab+0x8c/0xb0 [ 43.782772][ T3744] kmem_cache_alloc_node_noprof+0x57/0x320 [ 43.782878][ T3744] ? __alloc_skb+0x101/0x320 [ 43.782901][ T3744] __alloc_skb+0x101/0x320 [ 43.782923][ T3744] netlink_alloc_large_skb+0xba/0xf0 [ 43.782946][ T3744] netlink_sendmsg+0x3cf/0x6b0 [ 43.783035][ T3744] ? __pfx_netlink_sendmsg+0x10/0x10 [ 43.783061][ T3744] __sock_sendmsg+0x142/0x180 [ 43.783092][ T3744] ____sys_sendmsg+0x31e/0x4e0 [ 43.783134][ T3744] ___sys_sendmsg+0x17b/0x1d0 [ 43.783169][ T3744] __x64_sys_sendmsg+0xd4/0x160 [ 43.783250][ T3744] x64_sys_call+0x191e/0x2ff0 [ 43.783338][ T3744] do_syscall_64+0xd2/0x200 [ 43.783368][ T3744] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 43.783441][ T3744] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 43.783516][ T3744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.783537][ T3744] RIP: 0033:0x7f738c0dec29 [ 43.783553][ T3744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.783583][ T3744] RSP: 002b:00007f738ab3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 43.783604][ T3744] RAX: ffffffffffffffda RBX: 00007f738c325fa0 RCX: 00007f738c0dec29 [ 43.783617][ T3744] RDX: 0000000000008800 RSI: 0000200000000480 RDI: 0000000000000004 [ 43.783640][ T3744] RBP: 00007f738ab3f090 R08: 0000000000000000 R09: 0000000000000000 [ 43.783652][ T3744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.783713][ T3744] R13: 00007f738c326038 R14: 00007f738c325fa0 R15: 00007ffc4cc78e78 [ 43.783730][ T3744] [ 43.807837][ T3749] loop4: detected capacity change from 0 to 1024 [ 43.996583][ T3715] lo speed is unknown, defaulting to 1000 [ 44.163308][ T3749] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.295151][ T3715] rock: directory entry would overflow storage [ 44.301480][ T3715] rock: sig=0x4f50, size=4, remaining=3 [ 44.307102][ T3715] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 44.322196][ T3749] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 44.358028][ T3749] netlink: 16 bytes leftover after parsing attributes in process `syz.4.76'. [ 44.422272][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.651600][ T3794] netlink: 44 bytes leftover after parsing attributes in process `syz.4.87'. [ 44.666216][ T3786] program syz.2.84 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 44.755028][ T3786] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=528 sclass=netlink_route_socket pid=3786 comm=syz.2.84 [ 44.853082][ T3799] loop4: detected capacity change from 0 to 1024 [ 44.879069][ T3799] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.909638][ T3799] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.925596][ T3799] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.954613][ T3801] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.91' sets config #0 [ 45.041470][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.055179][ T3821] FAULT_INJECTION: forcing a failure. [ 45.055179][ T3821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 45.068247][ T3821] CPU: 0 UID: 0 PID: 3821 Comm: syz.1.89 Not tainted syzkaller #0 PREEMPT(voluntary) [ 45.068286][ T3821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 45.068348][ T3821] Call Trace: [ 45.068354][ T3821] [ 45.068362][ T3821] __dump_stack+0x1d/0x30 [ 45.068382][ T3821] dump_stack_lvl+0xe8/0x140 [ 45.068400][ T3821] dump_stack+0x15/0x1b [ 45.068459][ T3821] should_fail_ex+0x265/0x280 [ 45.068486][ T3821] should_fail+0xb/0x20 [ 45.068505][ T3821] should_fail_usercopy+0x1a/0x20 [ 45.068529][ T3821] _copy_from_user+0x1c/0xb0 [ 45.068595][ T3821] ucma_create_id+0x7d/0x250 [ 45.068624][ T3821] ucma_write+0x1b0/0x250 [ 45.068647][ T3821] ? __pfx_ucma_write+0x10/0x10 [ 45.068793][ T3821] vfs_write+0x266/0x960 [ 45.068817][ T3821] ? __rcu_read_unlock+0x4f/0x70 [ 45.068841][ T3821] ? __fget_files+0x184/0x1c0 [ 45.068870][ T3821] ksys_write+0xda/0x1a0 [ 45.068894][ T3821] __x64_sys_write+0x40/0x50 [ 45.068951][ T3821] x64_sys_call+0x27fe/0x2ff0 [ 45.068972][ T3821] do_syscall_64+0xd2/0x200 [ 45.069050][ T3821] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 45.069075][ T3821] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 45.069141][ T3821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.069166][ T3821] RIP: 0033:0x7fe82f74ec29 [ 45.069183][ T3821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.069226][ T3821] RSP: 002b:00007fe82e16d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 45.069248][ T3821] RAX: ffffffffffffffda RBX: 00007fe82f996180 RCX: 00007fe82f74ec29 [ 45.069262][ T3821] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000007 [ 45.069275][ T3821] RBP: 00007fe82e16d090 R08: 0000000000000000 R09: 0000000000000000 [ 45.069320][ T3821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.069333][ T3821] R13: 00007fe82f996218 R14: 00007fe82f996180 R15: 00007ffdaab0cd78 [ 45.069353][ T3821] [ 45.304724][ T3826] loop0: detected capacity change from 0 to 1024 [ 45.363595][ T3826] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.382140][ T3826] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.404871][ T3826] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.582048][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.672023][ T3839] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.103' sets config #1 [ 45.856209][ T3845] mmap: syz.1.107 (3845) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 45.923374][ T3853] FAULT_INJECTION: forcing a failure. [ 45.923374][ T3853] name failslab, interval 1, probability 0, space 0, times 0 [ 45.936174][ T3853] CPU: 1 UID: 0 PID: 3853 Comm: syz.3.110 Not tainted syzkaller #0 PREEMPT(voluntary) [ 45.936203][ T3853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 45.936215][ T3853] Call Trace: [ 45.936221][ T3853] [ 45.936227][ T3853] __dump_stack+0x1d/0x30 [ 45.936247][ T3853] dump_stack_lvl+0xe8/0x140 [ 45.936267][ T3853] dump_stack+0x15/0x1b [ 45.936285][ T3853] should_fail_ex+0x265/0x280 [ 45.936310][ T3853] should_failslab+0x8c/0xb0 [ 45.936333][ T3853] kmem_cache_alloc_noprof+0x50/0x310 [ 45.936359][ T3853] ? mas_alloc_nodes+0x265/0x520 [ 45.936394][ T3853] mas_alloc_nodes+0x265/0x520 [ 45.936428][ T3853] mas_preallocate+0x33e/0x520 [ 45.936463][ T3853] __split_vma+0x240/0x650 [ 45.936492][ T3853] vms_gather_munmap_vmas+0x17a/0x7b0 [ 45.936515][ T3853] ? mas_find+0x608/0x700 [ 45.936542][ T3853] mmap_region+0x53f/0x1630 [ 45.936568][ T3853] ? __rcu_read_unlock+0x4f/0x70 [ 45.936587][ T3853] ? mntput_no_expire+0x6f/0x460 [ 45.936630][ T3853] do_mmap+0x9b3/0xbe0 [ 45.936665][ T3853] __se_sys_remap_file_pages+0x55e/0x600 [ 45.936692][ T3853] ? __bpf_trace_sys_enter+0x10/0x30 [ 45.936717][ T3853] __x64_sys_remap_file_pages+0x67/0x80 [ 45.936740][ T3853] x64_sys_call+0x23af/0x2ff0 [ 45.936760][ T3853] do_syscall_64+0xd2/0x200 [ 45.936787][ T3853] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 45.936808][ T3853] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 45.936838][ T3853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.936858][ T3853] RIP: 0033:0x7fabe0d8ec29 [ 45.936873][ T3853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.936888][ T3853] RSP: 002b:00007fabdf7ef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 45.936906][ T3853] RAX: ffffffffffffffda RBX: 00007fabe0fd5fa0 RCX: 00007fabe0d8ec29 [ 45.936918][ T3853] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000800000 [ 45.936930][ T3853] RBP: 00007fabdf7ef090 R08: 0000000000000000 R09: 0000000000000000 [ 45.936942][ T3853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.936955][ T3853] R13: 00007fabe0fd6038 R14: 00007fabe0fd5fa0 R15: 00007fff6d421048 [ 45.936974][ T3853] [ 46.286338][ T3863] loop1: detected capacity change from 0 to 512 [ 46.293054][ T3870] 8021q: VLANs not supported on ip6tnl0 [ 46.359992][ T3863] EXT4-fs (loop1): orphan cleanup on readonly fs [ 46.374449][ T3863] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.114: bad orphan inode 13 [ 46.393306][ T3863] ext4_test_bit(bit=12, block=18) = 1 [ 46.398779][ T3863] is_bad_inode(inode)=0 [ 46.403103][ T3863] NEXT_ORPHAN(inode)=2130706432 [ 46.408111][ T3863] max_ino=32 [ 46.411484][ T3863] i_nlink=1 [ 46.428846][ T3863] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.432650][ T3883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.120'. [ 46.469025][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.489185][ T3889] netlink: 'syz.1.121': attribute type 10 has an invalid length. [ 46.593461][ T3897] netlink: 28 bytes leftover after parsing attributes in process `syz.1.126'. [ 46.605700][ T3897] netlink: 'syz.1.126': attribute type 4 has an invalid length. [ 46.615983][ T3393] lo speed is unknown, defaulting to 1000 [ 46.621794][ T3393] syz2: Port: 1 Link DOWN [ 47.186688][ T3908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.131'. [ 47.198705][ T3908] macvtap0: refused to change device tx_queue_len [ 47.211661][ T3908] netlink: 32 bytes leftover after parsing attributes in process `syz.0.131'. [ 47.235058][ T3908] batman_adv: batadv0: Adding interface: dummy0 [ 47.241451][ T3908] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.270212][ T3913] netlink: 'syz.2.133': attribute type 13 has an invalid length. [ 47.278083][ T3913] netlink: 164 bytes leftover after parsing attributes in process `syz.2.133'. [ 47.287907][ T3908] batman_adv: batadv0: Interface activated: dummy0 [ 47.295736][ T3913] syz_tun: refused to change device tx_queue_len [ 47.304344][ T3916] net_ratelimit: 10 callbacks suppressed [ 47.304357][ T3916] batadv0: mtu less than device minimum [ 47.316163][ T3916] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 47.327044][ T3916] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 47.337946][ T3916] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 47.348670][ T3916] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 47.359614][ T3916] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 47.370394][ T3916] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 47.381247][ T3916] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 47.392112][ T3916] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 47.402714][ T3916] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 47.417735][ T3915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.425496][ T3915] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.433683][ T3915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.441213][ T3915] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.448848][ T3921] FAULT_INJECTION: forcing a failure. [ 47.448848][ T3921] name failslab, interval 1, probability 0, space 0, times 0 [ 47.461558][ T3921] CPU: 1 UID: 0 PID: 3921 Comm: syz.4.136 Not tainted syzkaller #0 PREEMPT(voluntary) [ 47.461644][ T3921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 47.461657][ T3921] Call Trace: [ 47.461664][ T3921] [ 47.461672][ T3921] __dump_stack+0x1d/0x30 [ 47.461696][ T3921] dump_stack_lvl+0xe8/0x140 [ 47.461722][ T3921] dump_stack+0x15/0x1b [ 47.461736][ T3921] should_fail_ex+0x265/0x280 [ 47.461794][ T3921] should_failslab+0x8c/0xb0 [ 47.461816][ T3921] kmem_cache_alloc_node_noprof+0x57/0x320 [ 47.461908][ T3921] ? __alloc_skb+0x101/0x320 [ 47.461928][ T3921] __alloc_skb+0x101/0x320 [ 47.461996][ T3921] netlink_alloc_large_skb+0xba/0xf0 [ 47.462016][ T3921] netlink_sendmsg+0x3cf/0x6b0 [ 47.462071][ T3921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 47.462138][ T3921] __sock_sendmsg+0x142/0x180 [ 47.462247][ T3921] ____sys_sendmsg+0x31e/0x4e0 [ 47.462328][ T3921] ___sys_sendmsg+0x17b/0x1d0 [ 47.462366][ T3921] __x64_sys_sendmsg+0xd4/0x160 [ 47.462392][ T3921] x64_sys_call+0x191e/0x2ff0 [ 47.462411][ T3921] do_syscall_64+0xd2/0x200 [ 47.462438][ T3921] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 47.462498][ T3921] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 47.462525][ T3921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.462544][ T3921] RIP: 0033:0x7f4c5494ec29 [ 47.462557][ T3921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.462589][ T3921] RSP: 002b:00007f4c533af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.462607][ T3921] RAX: ffffffffffffffda RBX: 00007f4c54b95fa0 RCX: 00007f4c5494ec29 [ 47.462618][ T3921] RDX: 0000000000040000 RSI: 00002000000001c0 RDI: 0000000000000006 [ 47.462660][ T3921] RBP: 00007f4c533af090 R08: 0000000000000000 R09: 0000000000000000 [ 47.462671][ T3921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.462681][ T3921] R13: 00007f4c54b96038 R14: 00007f4c54b95fa0 R15: 00007fff070bd008 [ 47.462698][ T3921] [ 47.674074][ T3915] bond0: (slave batadv0): Releasing backup interface [ 47.687127][ T3924] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 47.696861][ T29] kauditd_printk_skb: 467 callbacks suppressed [ 47.696955][ T29] audit: type=1400 audit(1758514660.478:1106): avc: denied { relabelto } for pid=3923 comm="syz.2.138" name="file0" dev="tmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 47.704592][ T3924] loop2: detected capacity change from 0 to 1024 [ 47.739081][ T29] audit: type=1400 audit(1758514660.478:1107): avc: denied { associate } for pid=3923 comm="syz.2.138" name="file0" dev="tmpfs" ino=131 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 47.770210][ T3925] syz_tun: entered allmulticast mode [ 47.773378][ T3924] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 47.786608][ T3924] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 47.794787][ T3924] EXT4-fs (loop2): orphan cleanup on readonly fs [ 47.807297][ T3924] Quota error (device loop2): v2_read_file_info: Can't read info structure [ 47.821314][ T3924] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 47.835845][ T3924] EXT4-fs (loop2): Cannot turn on quotas: error -5 [ 47.854324][ T3925] syz_tun: left allmulticast mode [ 47.871965][ T29] audit: type=1400 audit(1758514660.548:1108): avc: denied { mounton } for pid=3923 comm="syz.2.138" path="/22/file0" dev="tmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 47.898590][ T29] audit: type=1326 audit(1758514660.658:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3914 comm="syz.1.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82f74ec29 code=0x7ffc0000 [ 47.921982][ T29] audit: type=1326 audit(1758514660.658:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3914 comm="syz.1.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82f74ec29 code=0x7ffc0000 [ 47.923634][ T3924] EXT4-fs (loop2): 1 truncate cleaned up [ 47.964735][ T3924] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.984969][ T3924] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.006126][ T3939] loop1: detected capacity change from 0 to 512 [ 48.011256][ T29] audit: type=1326 audit(1758514660.778:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3938 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82f74ec29 code=0x7ffc0000 [ 48.035922][ T29] audit: type=1326 audit(1758514660.778:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3938 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82f74ec29 code=0x7ffc0000 [ 48.036865][ T3939] EXT4-fs (loop1): orphan cleanup on readonly fs [ 48.059379][ T29] audit: type=1326 audit(1758514660.778:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3938 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe82f74ec29 code=0x7ffc0000 [ 48.068788][ T3939] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.142: bad orphan inode 13 [ 48.088993][ T29] audit: type=1326 audit(1758514660.778:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3938 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82f74ec29 code=0x7ffc0000 [ 48.099689][ T3939] ext4_test_bit(bit=12, block=18) = 1 [ 48.127641][ T3939] is_bad_inode(inode)=0 [ 48.131914][ T3939] NEXT_ORPHAN(inode)=2130706432 [ 48.136762][ T3939] max_ino=32 [ 48.139975][ T3939] i_nlink=1 [ 48.144088][ T3939] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.214343][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.296013][ T3955] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.336072][ T3955] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.364054][ T3964] loop2: detected capacity change from 0 to 128 [ 48.405970][ T3955] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.486418][ T3955] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.557965][ T41] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.575374][ T41] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.608899][ T41] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.624767][ T41] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.850454][ T4010] loop3: detected capacity change from 0 to 1024 [ 48.872540][ T4004] program syz.0.162 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 48.920754][ T4010] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 48.986686][ T4010] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.010414][ T3998] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 4: comm syz.3.159: lblock 4 mapped to illegal pblock 4 (length 1) [ 49.034827][ T3998] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 49.047331][ T3998] EXT4-fs (loop3): This should not happen!! Data will be lost [ 49.047331][ T3998] [ 49.130118][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 49.156648][ T4032] netlink: 12 bytes leftover after parsing attributes in process `syz.1.168'. [ 49.232853][ T4044] FAULT_INJECTION: forcing a failure. [ 49.232853][ T4044] name failslab, interval 1, probability 0, space 0, times 0 [ 49.245594][ T4044] CPU: 1 UID: 0 PID: 4044 Comm: syz.3.170 Not tainted syzkaller #0 PREEMPT(voluntary) [ 49.245621][ T4044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 49.245632][ T4044] Call Trace: [ 49.245639][ T4044] [ 49.245647][ T4044] __dump_stack+0x1d/0x30 [ 49.245671][ T4044] dump_stack_lvl+0xe8/0x140 [ 49.245694][ T4044] dump_stack+0x15/0x1b [ 49.245746][ T4044] should_fail_ex+0x265/0x280 [ 49.245812][ T4044] ? qdisc_get_rtab+0x1a5/0x2d0 [ 49.245886][ T4044] should_failslab+0x8c/0xb0 [ 49.245911][ T4044] __kmalloc_cache_noprof+0x4c/0x320 [ 49.245938][ T4044] qdisc_get_rtab+0x1a5/0x2d0 [ 49.245964][ T4044] tbf_change+0x16f/0xcd0 [ 49.246054][ T4044] ? stack_trace_save+0x5e/0x90 [ 49.246081][ T4044] ? __list_add_valid_or_report+0x38/0xe0 [ 49.246108][ T4044] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 49.246135][ T4044] ? rtnetlink_rcv+0x1c/0x30 [ 49.246208][ T4044] ? netlink_unicast+0x5bd/0x690 [ 49.246241][ T4044] ? netlink_sendmsg+0x58b/0x6b0 [ 49.246266][ T4044] ? __sock_sendmsg+0x142/0x180 [ 49.246414][ T4044] ? read_tsc+0x9/0x20 [ 49.246433][ T4044] ? __pfx_tbf_init+0x10/0x10 [ 49.246454][ T4044] tbf_init+0x72/0x90 [ 49.246484][ T4044] qdisc_create+0x591/0x9e0 [ 49.246570][ T4044] tc_modify_qdisc+0xf2e/0x1420 [ 49.246611][ T4044] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 49.246682][ T4044] rtnetlink_rcv_msg+0x657/0x6d0 [ 49.246778][ T4044] netlink_rcv_skb+0x123/0x220 [ 49.246804][ T4044] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 49.246843][ T4044] rtnetlink_rcv+0x1c/0x30 [ 49.246867][ T4044] netlink_unicast+0x5bd/0x690 [ 49.246888][ T4044] netlink_sendmsg+0x58b/0x6b0 [ 49.246916][ T4044] ? __pfx_netlink_sendmsg+0x10/0x10 [ 49.246984][ T4044] __sock_sendmsg+0x142/0x180 [ 49.247015][ T4044] ____sys_sendmsg+0x31e/0x4e0 [ 49.247047][ T4044] ___sys_sendmsg+0x17b/0x1d0 [ 49.247119][ T4044] __x64_sys_sendmsg+0xd4/0x160 [ 49.247150][ T4044] x64_sys_call+0x191e/0x2ff0 [ 49.247173][ T4044] do_syscall_64+0xd2/0x200 [ 49.247242][ T4044] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 49.247265][ T4044] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 49.247344][ T4044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.247394][ T4044] RIP: 0033:0x7fabe0d8ec29 [ 49.247412][ T4044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.247430][ T4044] RSP: 002b:00007fabdf7ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.247453][ T4044] RAX: ffffffffffffffda RBX: 00007fabe0fd5fa0 RCX: 00007fabe0d8ec29 [ 49.247468][ T4044] RDX: 0000000000000000 RSI: 0000200000001f80 RDI: 0000000000000004 [ 49.247482][ T4044] RBP: 00007fabdf7ef090 R08: 0000000000000000 R09: 0000000000000000 [ 49.247497][ T4044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.247556][ T4044] R13: 00007fabe0fd6038 R14: 00007fabe0fd5fa0 R15: 00007fff6d421048 [ 49.247575][ T4044] [ 49.247586][ T4044] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 49.548971][ T41] bio_check_eod: 17 callbacks suppressed [ 49.548987][ T41] kworker/u8:2: attempt to access beyond end of device [ 49.548987][ T41] loop2: rw=1, sector=145, nr_sectors = 8 limit=128 [ 49.568192][ T41] kworker/u8:2: attempt to access beyond end of device [ 49.568192][ T41] loop2: rw=1, sector=161, nr_sectors = 8 limit=128 [ 49.582982][ T41] kworker/u8:2: attempt to access beyond end of device [ 49.582982][ T41] loop2: rw=1, sector=177, nr_sectors = 8 limit=128 [ 49.596486][ T41] kworker/u8:2: attempt to access beyond end of device [ 49.596486][ T41] loop2: rw=1, sector=193, nr_sectors = 8 limit=128 [ 49.610864][ T41] kworker/u8:2: attempt to access beyond end of device [ 49.610864][ T41] loop2: rw=1, sector=209, nr_sectors = 8 limit=128 [ 49.624489][ T41] kworker/u8:2: attempt to access beyond end of device [ 49.624489][ T41] loop2: rw=1, sector=225, nr_sectors = 8 limit=128 [ 49.637902][ T41] kworker/u8:2: attempt to access beyond end of device [ 49.637902][ T41] loop2: rw=1, sector=241, nr_sectors = 8 limit=128 [ 49.651370][ T41] kworker/u8:2: attempt to access beyond end of device [ 49.651370][ T41] loop2: rw=1, sector=257, nr_sectors = 8 limit=128 [ 49.665520][ T41] kworker/u8:2: attempt to access beyond end of device [ 49.665520][ T41] loop2: rw=1, sector=273, nr_sectors = 8 limit=128 [ 49.678896][ T41] kworker/u8:2: attempt to access beyond end of device [ 49.678896][ T41] loop2: rw=1, sector=289, nr_sectors = 8 limit=128 [ 49.709224][ T4053] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.177' sets config #1 [ 49.709298][ T4063] pimreg: entered allmulticast mode [ 49.727864][ T4063] pimreg: left allmulticast mode [ 49.766141][ T4067] program syz.2.174 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 49.997197][ T4092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.188'. [ 50.006407][ T4090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.019632][ T4090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.034328][ T4092] bond_slave_0: entered promiscuous mode [ 50.040013][ T4092] bond_slave_1: entered promiscuous mode [ 50.054085][ T4092] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 50.063839][ T4092] bond_slave_0: left promiscuous mode [ 50.069243][ T4092] bond_slave_1: left promiscuous mode [ 50.160201][ T4102] lo speed is unknown, defaulting to 1000 [ 50.405997][ T4124] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.194' sets config #1 [ 50.482841][ T4127] netlink: 'syz.1.195': attribute type 10 has an invalid length. [ 50.493893][ T4129] 9pnet_fd: Insufficient options for proto=fd [ 50.691112][ T4138] Illegal XDP return value 4294967274 on prog (id 182) dev syz_tun, expect packet loss! [ 50.709620][ T4150] loop4: detected capacity change from 0 to 1024 [ 50.732959][ T4150] EXT4-fs: Ignoring removed bh option [ 50.748736][ T4154] FAULT_INJECTION: forcing a failure. [ 50.748736][ T4154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.761935][ T4154] CPU: 0 UID: 0 PID: 4154 Comm: syz.1.206 Not tainted syzkaller #0 PREEMPT(voluntary) [ 50.761985][ T4154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 50.761997][ T4154] Call Trace: [ 50.762003][ T4154] [ 50.762012][ T4154] __dump_stack+0x1d/0x30 [ 50.762088][ T4154] dump_stack_lvl+0xe8/0x140 [ 50.762110][ T4154] dump_stack+0x15/0x1b [ 50.762176][ T4154] should_fail_ex+0x265/0x280 [ 50.762202][ T4154] should_fail+0xb/0x20 [ 50.762232][ T4154] should_fail_usercopy+0x1a/0x20 [ 50.762271][ T4154] strncpy_from_user+0x25/0x230 [ 50.762304][ T4154] ? kmem_cache_alloc_noprof+0x186/0x310 [ 50.762392][ T4154] ? getname_flags+0x80/0x3b0 [ 50.762421][ T4154] getname_flags+0xae/0x3b0 [ 50.762526][ T4154] user_path_at+0x28/0x130 [ 50.762560][ T4154] __se_sys_name_to_handle_at+0xff/0x630 [ 50.762590][ T4154] ? ksys_write+0x192/0x1a0 [ 50.762616][ T4154] __x64_sys_name_to_handle_at+0x67/0x80 [ 50.762718][ T4154] x64_sys_call+0x1552/0x2ff0 [ 50.762761][ T4154] do_syscall_64+0xd2/0x200 [ 50.762796][ T4154] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 50.762845][ T4154] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 50.762878][ T4154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.762899][ T4154] RIP: 0033:0x7fe82f74ec29 [ 50.762914][ T4154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.762950][ T4154] RSP: 002b:00007fe82e1af038 EFLAGS: 00000246 ORIG_RAX: 000000000000012f [ 50.762973][ T4154] RAX: ffffffffffffffda RBX: 00007fe82f995fa0 RCX: 00007fe82f74ec29 [ 50.762988][ T4154] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 50.763002][ T4154] RBP: 00007fe82e1af090 R08: 0000000000000600 R09: 0000000000000000 [ 50.763017][ T4154] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 50.763032][ T4154] R13: 00007fe82f996038 R14: 00007fe82f995fa0 R15: 00007ffdaab0cd78 [ 50.763134][ T4154] [ 50.966790][ T4150] EXT4-fs: inline encryption not supported [ 50.974333][ T4150] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 50.986277][ T4150] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 51.025866][ T4150] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.204: lblock 2 mapped to illegal pblock 2 (length 1) [ 51.073134][ T4150] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.204: lblock 0 mapped to illegal pblock 48 (length 1) [ 51.093332][ T4166] FAULT_INJECTION: forcing a failure. [ 51.093332][ T4166] name failslab, interval 1, probability 0, space 0, times 0 [ 51.106170][ T4166] CPU: 1 UID: 0 PID: 4166 Comm: syz.0.210 Not tainted syzkaller #0 PREEMPT(voluntary) [ 51.106228][ T4166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 51.106300][ T4166] Call Trace: [ 51.106306][ T4166] [ 51.106312][ T4166] __dump_stack+0x1d/0x30 [ 51.106390][ T4166] dump_stack_lvl+0xe8/0x140 [ 51.106414][ T4166] dump_stack+0x15/0x1b [ 51.106485][ T4166] should_fail_ex+0x265/0x280 [ 51.106510][ T4166] should_failslab+0x8c/0xb0 [ 51.106556][ T4166] kmem_cache_alloc_node_noprof+0x57/0x320 [ 51.106582][ T4166] ? __alloc_skb+0x101/0x320 [ 51.106608][ T4166] __alloc_skb+0x101/0x320 [ 51.106699][ T4166] netlink_alloc_large_skb+0xba/0xf0 [ 51.106721][ T4166] netlink_sendmsg+0x3cf/0x6b0 [ 51.106754][ T4166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 51.106864][ T4166] __sock_sendmsg+0x142/0x180 [ 51.107023][ T4166] ____sys_sendmsg+0x31e/0x4e0 [ 51.107049][ T4166] ___sys_sendmsg+0x17b/0x1d0 [ 51.107162][ T4166] __x64_sys_sendmsg+0xd4/0x160 [ 51.107193][ T4166] x64_sys_call+0x191e/0x2ff0 [ 51.107325][ T4166] do_syscall_64+0xd2/0x200 [ 51.107430][ T4166] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 51.107461][ T4166] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 51.107489][ T4166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.107509][ T4166] RIP: 0033:0x7fc67b8eec29 [ 51.107524][ T4166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.107541][ T4166] RSP: 002b:00007fc67a357038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.107610][ T4166] RAX: ffffffffffffffda RBX: 00007fc67bb35fa0 RCX: 00007fc67b8eec29 [ 51.107624][ T4166] RDX: 0000000000004886 RSI: 0000200000000240 RDI: 0000000000000006 [ 51.107708][ T4166] RBP: 00007fc67a357090 R08: 0000000000000000 R09: 0000000000000000 [ 51.107719][ T4166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.107731][ T4166] R13: 00007fc67bb36038 R14: 00007fc67bb35fa0 R15: 00007ffe3a687588 [ 51.107751][ T4166] [ 51.324919][ T4164] lo speed is unknown, defaulting to 1000 [ 51.337435][ T4150] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.204: Failed to acquire dquot type 0 [ 51.349139][ T4150] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 51.359494][ T4150] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.204: mark_inode_dirty error [ 51.371409][ T4150] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 51.383821][ T4150] EXT4-fs (loop4): 1 orphan inode deleted [ 51.386362][ T4169] blkio.reset_stats is deprecated [ 51.390005][ T4150] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.397346][ T4170] netlink: 'syz.2.211': attribute type 10 has an invalid length. [ 51.418021][ T70] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 51.435883][ T4167] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 51.445000][ T70] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 0 [ 51.447236][ T4150] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz.4.204: Invalid inode table block 1 in block_group 0 [ 51.474976][ T4150] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 51.480782][ T4170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.500931][ T4170] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 51.542131][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.589222][ T3305] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 51.607258][ T3305] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 51.621549][ T3305] EXT4-fs error (device loop4): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 51.648347][ T4189] netlink: 136 bytes leftover after parsing attributes in process `syz.2.220'. [ 51.797905][ T4210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.223'. [ 51.815650][ T4210] macvtap0: refused to change device tx_queue_len [ 51.824470][ T4210] netlink: 32 bytes leftover after parsing attributes in process `syz.1.223'. [ 51.866240][ T4218] FAULT_INJECTION: forcing a failure. [ 51.866240][ T4218] name failslab, interval 1, probability 0, space 0, times 0 [ 51.879024][ T4218] CPU: 0 UID: 0 PID: 4218 Comm: syz.3.225 Not tainted syzkaller #0 PREEMPT(voluntary) [ 51.879055][ T4218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 51.879068][ T4218] Call Trace: [ 51.879075][ T4218] [ 51.879139][ T4218] __dump_stack+0x1d/0x30 [ 51.879161][ T4218] dump_stack_lvl+0xe8/0x140 [ 51.879181][ T4218] dump_stack+0x15/0x1b [ 51.879196][ T4218] should_fail_ex+0x265/0x280 [ 51.879225][ T4218] should_failslab+0x8c/0xb0 [ 51.879252][ T4218] kmem_cache_alloc_noprof+0x50/0x310 [ 51.879306][ T4218] ? radix_tree_node_alloc+0x8a/0x1f0 [ 51.879389][ T4218] radix_tree_node_alloc+0x8a/0x1f0 [ 51.879450][ T4218] idr_get_free+0x1fa/0x550 [ 51.879500][ T4218] idr_alloc_u32+0xca/0x180 [ 51.879533][ T4218] gen_new_kid+0x5c/0x100 [ 51.879582][ T4218] u32_change+0xbe6/0x14c0 [ 51.879704][ T4218] ? should_fail_ex+0xdb/0x280 [ 51.879732][ T4218] ? __pfx_u32_change+0x10/0x10 [ 51.879838][ T4218] tc_new_tfilter+0xde1/0x10a0 [ 51.879861][ T4218] ? __rcu_read_unlock+0x4f/0x70 [ 51.879890][ T4218] ? ns_capable+0x7d/0xb0 [ 51.879909][ T4218] ? __pfx_tc_new_tfilter+0x10/0x10 [ 51.880001][ T4218] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 51.880041][ T4218] netlink_rcv_skb+0x123/0x220 [ 51.880067][ T4218] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 51.880136][ T4218] rtnetlink_rcv+0x1c/0x30 [ 51.880166][ T4218] netlink_unicast+0x5bd/0x690 [ 51.880188][ T4218] netlink_sendmsg+0x58b/0x6b0 [ 51.880220][ T4218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 51.880263][ T4218] __sock_sendmsg+0x142/0x180 [ 51.880295][ T4218] ____sys_sendmsg+0x31e/0x4e0 [ 51.880321][ T4218] ___sys_sendmsg+0x17b/0x1d0 [ 51.880357][ T4218] __x64_sys_sendmsg+0xd4/0x160 [ 51.880467][ T4218] x64_sys_call+0x191e/0x2ff0 [ 51.880518][ T4218] do_syscall_64+0xd2/0x200 [ 51.880626][ T4218] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 51.880654][ T4218] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 51.880724][ T4218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.880747][ T4218] RIP: 0033:0x7fabe0d8ec29 [ 51.880765][ T4218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.880843][ T4218] RSP: 002b:00007fabdf7ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.880865][ T4218] RAX: ffffffffffffffda RBX: 00007fabe0fd5fa0 RCX: 00007fabe0d8ec29 [ 51.880946][ T4218] RDX: 000000002008c014 RSI: 0000200000000580 RDI: 0000000000000004 [ 51.880959][ T4218] RBP: 00007fabdf7ef090 R08: 0000000000000000 R09: 0000000000000000 [ 51.880972][ T4218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 51.880983][ T4218] R13: 00007fabe0fd6038 R14: 00007fabe0fd5fa0 R15: 00007fff6d421048 [ 51.881017][ T4218] [ 52.214927][ T4232] FAULT_INJECTION: forcing a failure. [ 52.214927][ T4232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.228359][ T4232] CPU: 1 UID: 0 PID: 4232 Comm: syz.0.230 Not tainted syzkaller #0 PREEMPT(voluntary) [ 52.228390][ T4232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 52.228412][ T4232] Call Trace: [ 52.228418][ T4232] [ 52.228426][ T4232] __dump_stack+0x1d/0x30 [ 52.228449][ T4232] dump_stack_lvl+0xe8/0x140 [ 52.228471][ T4232] dump_stack+0x15/0x1b [ 52.228529][ T4232] should_fail_ex+0x265/0x280 [ 52.228557][ T4232] should_fail+0xb/0x20 [ 52.228580][ T4232] should_fail_usercopy+0x1a/0x20 [ 52.228660][ T4232] _copy_from_user+0x1c/0xb0 [ 52.228687][ T4232] ___sys_sendmsg+0xc1/0x1d0 [ 52.228724][ T4232] __x64_sys_sendmsg+0xd4/0x160 [ 52.228756][ T4232] x64_sys_call+0x191e/0x2ff0 [ 52.228778][ T4232] do_syscall_64+0xd2/0x200 [ 52.228890][ T4232] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 52.228997][ T4232] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 52.229028][ T4232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.229111][ T4232] RIP: 0033:0x7fc67b8eec29 [ 52.229129][ T4232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.229146][ T4232] RSP: 002b:00007fc67a357038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.229166][ T4232] RAX: ffffffffffffffda RBX: 00007fc67bb35fa0 RCX: 00007fc67b8eec29 [ 52.229181][ T4232] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 52.229194][ T4232] RBP: 00007fc67a357090 R08: 0000000000000000 R09: 0000000000000000 [ 52.229207][ T4232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.229279][ T4232] R13: 00007fc67bb36038 R14: 00007fc67bb35fa0 R15: 00007ffe3a687588 [ 52.229297][ T4232] [ 52.416265][ T4234] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=4234 comm=syz.1.231 [ 52.437466][ T4234] netlink: 204 bytes leftover after parsing attributes in process `syz.1.231'. [ 52.446504][ T4234] netlink: 72 bytes leftover after parsing attributes in process `syz.1.231'. [ 52.458931][ T4234] netlink: 24 bytes leftover after parsing attributes in process `syz.1.231'. [ 52.535503][ T4247] loop3: detected capacity change from 0 to 512 [ 52.545251][ T4247] EXT4-fs: Ignoring removed bh option [ 52.550809][ T4247] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.561009][ T4247] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 52.580038][ T4253] netlink: 'syz.1.239': attribute type 10 has an invalid length. [ 52.588014][ T4247] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 52.596413][ T4247] EXT4-fs (loop3): orphan cleanup on readonly fs [ 52.607804][ T4247] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.237: Failed to acquire dquot type 1 [ 52.619274][ T4254] loop2: detected capacity change from 0 to 512 [ 52.620922][ T4247] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.237: Invalid block bitmap block 0 in block_group 0 [ 52.639669][ T4254] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.660985][ T4254] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.675074][ T4247] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.237: Invalid block bitmap block 0 in block_group 0 [ 52.688762][ T4254] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.692111][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 52.692126][ T29] audit: type=1400 audit(1758514665.543:1306): avc: denied { mount } for pid=4258 comm="syz.4.241" name="/" dev="ramfs" ino=7085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 52.699753][ T4247] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.237: Invalid block bitmap block 0 in block_group 0 [ 52.746125][ T4247] Quota error (device loop3): write_blk: dquota write failed [ 52.753587][ T4247] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 52.763576][ T4247] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.237: Failed to acquire dquot type 1 [ 52.785137][ T29] audit: type=1400 audit(1758514665.625:1307): avc: denied { create } for pid=4243 comm="syz.2.236" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 52.849712][ T4247] Quota error (device loop3): write_blk: dquota write failed [ 52.857226][ T4247] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 52.867100][ T4247] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.237: Failed to acquire dquot type 1 [ 52.888138][ T4274] loop0: detected capacity change from 0 to 512 [ 52.915818][ T4247] EXT4-fs (loop3): 1 orphan inode deleted [ 52.927555][ T4274] EXT4-fs: Ignoring removed bh option [ 52.941093][ T4274] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.953542][ T4274] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 52.954108][ T4247] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 52.993695][ T4291] FAULT_INJECTION: forcing a failure. [ 52.993695][ T4291] name failslab, interval 1, probability 0, space 0, times 0 [ 53.006477][ T4291] CPU: 1 UID: 0 PID: 4291 Comm: syz.1.246 Not tainted syzkaller #0 PREEMPT(voluntary) [ 53.006506][ T4291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 53.006520][ T4291] Call Trace: [ 53.006528][ T4291] [ 53.006538][ T4291] __dump_stack+0x1d/0x30 [ 53.006562][ T4291] dump_stack_lvl+0xe8/0x140 [ 53.006656][ T4291] dump_stack+0x15/0x1b [ 53.006675][ T4291] should_fail_ex+0x265/0x280 [ 53.006700][ T4291] should_failslab+0x8c/0xb0 [ 53.006754][ T4291] __kvmalloc_node_noprof+0x123/0x4e0 [ 53.006781][ T4291] ? bpf_test_run_xdp_live+0xed/0xfe0 [ 53.006806][ T4291] bpf_test_run_xdp_live+0xed/0xfe0 [ 53.006828][ T4291] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 53.006874][ T4291] ? cpus_read_unlock+0x6e/0xc0 [ 53.006899][ T4291] ? __static_call_update+0x37c/0x3b0 [ 53.006944][ T4291] ? 0xffffffffa02054c0 [ 53.007017][ T4291] ? synchronize_rcu+0x45/0x320 [ 53.007043][ T4291] ? 0xffffffffa02054c0 [ 53.007057][ T4291] ? 0xffffffffa02054c0 [ 53.007074][ T4291] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 53.007190][ T4291] ? 0xffffffffa0203508 [ 53.007221][ T4291] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 53.007260][ T4291] bpf_prog_test_run_xdp+0x4f5/0x910 [ 53.007285][ T4291] ? __rcu_read_unlock+0x4f/0x70 [ 53.007367][ T4291] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.007395][ T4291] bpf_prog_test_run+0x22a/0x390 [ 53.007429][ T4291] __sys_bpf+0x4b9/0x7b0 [ 53.007460][ T4291] __x64_sys_bpf+0x41/0x50 [ 53.007481][ T4291] x64_sys_call+0x2aea/0x2ff0 [ 53.007504][ T4291] do_syscall_64+0xd2/0x200 [ 53.007540][ T4291] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 53.007607][ T4291] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 53.007687][ T4291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.007761][ T4291] RIP: 0033:0x7fe82f74ec29 [ 53.007779][ T4291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.007799][ T4291] RSP: 002b:00007fe82e1af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 53.007823][ T4291] RAX: ffffffffffffffda RBX: 00007fe82f995fa0 RCX: 00007fe82f74ec29 [ 53.007839][ T4291] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 53.007878][ T4291] RBP: 00007fe82e1af090 R08: 0000000000000000 R09: 0000000000000000 [ 53.007892][ T4291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.007906][ T4291] R13: 00007fe82f996038 R14: 00007fe82f995fa0 R15: 00007ffdaab0cd78 [ 53.007989][ T4291] [ 53.145484][ T4254] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, [ 53.233674][ T29] audit: type=1400 audit(1758514666.026:1308): avc: denied { setattr } for pid=4243 comm="syz.2.236" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 53.235431][ T4254] block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 53.245192][ T4247] syz.3.237 (4247) used greatest stack depth: 9072 bytes left [ 53.251789][ T4254] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2048 with error 28 [ 53.254693][ T4274] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 53.262786][ T4254] EXT4-fs (loop2): This should not happen!! Data will be lost [ 53.262786][ T4254] [ 53.262805][ T4254] EXT4-fs (loop2): Total free blocks count 0 [ 53.299412][ T4274] EXT4-fs (loop0): orphan cleanup on readonly fs [ 53.300977][ T4254] EXT4-fs (loop2): Free/Dirty block details [ 53.349471][ T4254] EXT4-fs (loop2): free_blocks=39626 [ 53.354925][ T4254] EXT4-fs (loop2): dirty_blocks=4096 [ 53.360377][ T4254] EXT4-fs (loop2): Block reservation details [ 53.366372][ T4254] EXT4-fs (loop2): i_reserved_data_blocks=4096 [ 53.374999][ T4274] Quota error (device loop0): do_insert_tree: Free block already used in tree: block 4 [ 53.384737][ T4274] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 53.396397][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.404674][ T4274] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.243: Failed to acquire dquot type 1 [ 53.418104][ T4274] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.243: Invalid block bitmap block 0 in block_group 0 [ 53.438945][ T4306] net_ratelimit: 12 callbacks suppressed [ 53.438961][ T4306] IPv6: addrconf: prefix option has invalid lifetime [ 53.442413][ T4274] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.243: Invalid block bitmap block 0 in block_group 0 [ 53.470555][ T4274] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.243: Invalid block bitmap block 0 in block_group 0 [ 53.491790][ T4309] FAULT_INJECTION: forcing a failure. [ 53.491790][ T4309] name failslab, interval 1, probability 0, space 0, times 0 [ 53.504491][ T4309] CPU: 1 UID: 0 PID: 4309 Comm: syz.3.247 Not tainted syzkaller #0 PREEMPT(voluntary) [ 53.504557][ T4309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 53.504570][ T4309] Call Trace: [ 53.504577][ T4309] [ 53.504584][ T4309] __dump_stack+0x1d/0x30 [ 53.504605][ T4309] dump_stack_lvl+0xe8/0x140 [ 53.504624][ T4309] dump_stack+0x15/0x1b [ 53.504644][ T4309] should_fail_ex+0x265/0x280 [ 53.504690][ T4274] Quota error (device loop0): write_blk: dquota write failed [ 53.504689][ T4309] should_failslab+0x8c/0xb0 [ 53.504718][ T4309] __kmalloc_cache_node_noprof+0x54/0x320 [ 53.504745][ T4309] ? __get_vm_area_node+0x106/0x1d0 [ 53.504946][ T4309] __get_vm_area_node+0x106/0x1d0 [ 53.504976][ T4309] __vmalloc_node_range_noprof+0x273/0xe00 [ 53.505007][ T4309] ? copy_process+0x399/0x2000 [ 53.505036][ T4309] ? __rcu_read_unlock+0x4f/0x70 [ 53.505134][ T4309] __vmalloc_node_noprof+0x89/0xc0 [ 53.505186][ T4309] ? copy_process+0x399/0x2000 [ 53.505209][ T4309] ? copy_process+0x399/0x2000 [ 53.505234][ T4309] dup_task_struct+0x449/0x6a0 [ 53.505279][ T4309] ? _parse_integer+0x27/0x40 [ 53.505303][ T4309] copy_process+0x399/0x2000 [ 53.505377][ T4309] ? kstrtouint+0x76/0xc0 [ 53.505489][ T4309] ? kstrtouint_from_user+0x9f/0xf0 [ 53.505514][ T4309] ? __rcu_read_unlock+0x4f/0x70 [ 53.505568][ T4309] kernel_clone+0x16c/0x5c0 [ 53.505593][ T4309] ? vfs_write+0x7e8/0x960 [ 53.505616][ T4309] __x64_sys_clone+0xe6/0x120 [ 53.505649][ T4309] x64_sys_call+0x119c/0x2ff0 [ 53.505731][ T4309] do_syscall_64+0xd2/0x200 [ 53.505761][ T4309] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 53.505859][ T4309] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 53.505888][ T4309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.505918][ T4309] RIP: 0033:0x7fabe0d8ec29 [ 53.505946][ T4309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.505964][ T4309] RSP: 002b:00007fabdf7eefe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 53.506007][ T4309] RAX: ffffffffffffffda RBX: 00007fabe0fd5fa0 RCX: 00007fabe0d8ec29 [ 53.506020][ T4309] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000026801000 [ 53.506033][ T4309] RBP: 00007fabdf7ef090 R08: 0000000000000000 R09: 0000000000000000 [ 53.506045][ T4309] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 53.506057][ T4309] R13: 00007fabe0fd6038 R14: 00007fabe0fd5fa0 R15: 00007fff6d421048 [ 53.506075][ T4309] [ 53.506200][ T4309] syz.3.247: vmalloc error: size 16384, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 53.514465][ T4274] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.243: Failed to acquire dquot type 1 [ 53.524579][ T4309] ,cpuset=/ [ 53.532229][ T4274] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.243: Failed to acquire dquot type 1 [ 53.535225][ T4309] ,mems_allowed=0 [ 53.540696][ T4274] EXT4-fs (loop0): 1 orphan inode deleted [ 53.543945][ T4309] [ 53.543959][ T4309] CPU: 1 UID: 0 PID: 4309 Comm: syz.3.247 Not tainted syzkaller #0 PREEMPT(voluntary) [ 53.543987][ T4309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 53.543999][ T4309] Call Trace: [ 53.544006][ T4309] [ 53.544026][ T4309] __dump_stack+0x1d/0x30 [ 53.544049][ T4309] dump_stack_lvl+0xe8/0x140 [ 53.544068][ T4309] dump_stack+0x15/0x1b [ 53.544085][ T4309] warn_alloc+0x12b/0x1a0 [ 53.544119][ T4309] __vmalloc_node_range_noprof+0x297/0xe00 [ 53.544229][ T4309] ? __rcu_read_unlock+0x4f/0x70 [ 53.544279][ T4309] __vmalloc_node_noprof+0x89/0xc0 [ 53.544309][ T4309] ? copy_process+0x399/0x2000 [ 53.544339][ T4309] ? copy_process+0x399/0x2000 [ 53.544362][ T4309] dup_task_struct+0x449/0x6a0 [ 53.544386][ T4309] ? _parse_integer+0x27/0x40 [ 53.544410][ T4309] copy_process+0x399/0x2000 [ 53.544553][ T4309] ? kstrtouint+0x76/0xc0 [ 53.544575][ T4309] ? kstrtouint_from_user+0x9f/0xf0 [ 53.544600][ T4309] ? __rcu_read_unlock+0x4f/0x70 [ 53.544653][ T4309] kernel_clone+0x16c/0x5c0 [ 53.544707][ T4309] ? vfs_write+0x7e8/0x960 [ 53.544731][ T4309] __x64_sys_clone+0xe6/0x120 [ 53.544764][ T4309] x64_sys_call+0x119c/0x2ff0 [ 53.544785][ T4309] do_syscall_64+0xd2/0x200 [ 53.544873][ T4309] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 53.544897][ T4309] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 53.544925][ T4309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.544954][ T4309] RIP: 0033:0x7fabe0d8ec29 [ 53.545026][ T4309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.545044][ T4309] RSP: 002b:00007fabdf7eefe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 53.545063][ T4309] RAX: ffffffffffffffda RBX: 00007fabe0fd5fa0 RCX: 00007fabe0d8ec29 [ 53.545077][ T4309] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000026801000 [ 53.545096][ T4309] RBP: 00007fabdf7ef090 R08: 0000000000000000 R09: 0000000000000000 [ 53.545108][ T4309] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 53.545126][ T4309] R13: 00007fabe0fd6038 R14: 00007fabe0fd5fa0 R15: 00007fff6d421048 [ 53.545155][ T4309] [ 53.545204][ T4309] Mem-Info: [ 53.551358][ T4274] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.556118][ T4309] active_anon:6809 inactive_anon:0 isolated_anon:0 [ 53.556118][ T4309] active_file:9195 inactive_file:6366 isolated_file:0 [ 53.556118][ T4309] unevictable:0 dirty:3865 writeback:0 [ 53.556118][ T4309] slab_reclaimable:3221 slab_unreclaimable:13722 [ 53.556118][ T4309] mapped:29536 shmem:309 pagetables:1054 [ 53.556118][ T4309] sec_pagetables:0 bounce:0 [ 53.556118][ T4309] kernel_misc_reclaimable:0 [ 53.556118][ T4309] free:1840117 free_pcp:60243 free_cma:0 [ 53.644859][ T4311] loop3: detected capacity change from 0 to 512 [ 53.649321][ T4309] Node 0 active_anon:27236kB inactive_anon:0kB active_file:36780kB inactive_file:25464kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118144kB dirty:15460kB writeback:0kB shmem:1468kB kernel_stack:3312kB pagetables:4216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 53.676576][ T4311] EXT4-fs: Ignoring removed bh option [ 53.680728][ T4309] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 53.680791][ T4309] lowmem_reserve[]: 0 2883 7862 7862 [ 53.680818][ T4309] Node 0 [ 53.701676][ T4311] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.708994][ T4309] DMA32 free:2949188kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952820kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 53.719683][ T4311] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 53.725003][ T4309] lowmem_reserve[]: 0 0 [ 53.736736][ T4311] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 53.741009][ T4309] 4978 4978 [ 53.741033][ T4309] Node 0 Normal free:4395920kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27352kB inactive_anon:0kB active_file:36780kB inactive_file:25464kB unevictable:0kB writepending:15448kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:237200kB local_pcp:200952kB free_cma:0kB [ 53.749244][ T4311] EXT4-fs (loop3): orphan cleanup on readonly fs [ 53.752092][ T4309] lowmem_reserve[]: 0 0 0 0 [ 53.752128][ T4309] Node 0 [ 53.766088][ T4311] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.247: Failed to acquire dquot type 1 [ 53.775791][ T4309] DMA: 0*4kB [ 53.779481][ T4311] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.247: Invalid block bitmap block 0 in block_group 0 [ 53.790245][ T4309] 0*8kB [ 53.794542][ T4311] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.247: Invalid block bitmap block 0 in block_group 0 [ 53.799640][ T4309] 0*16kB [ 53.802638][ T4311] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.247: Invalid block bitmap block 0 in block_group 0 [ 53.811623][ T4309] 0*32kB [ 53.824151][ T4311] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.247: Failed to acquire dquot type 1 [ 53.824982][ T4309] 0*64kB [ 53.828209][ T4311] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.247: Failed to acquire dquot type 1 [ 53.832269][ T4309] 0*128kB 0*256kB [ 53.837193][ T4311] EXT4-fs (loop3): 1 orphan inode deleted [ 53.841035][ T4309] 0*512kB [ 53.846568][ T4311] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.851230][ T4309] 1*1024kB [ 54.182808][ T4318] loop4: detected capacity change from 0 to 1024 [ 54.187637][ T4309] (U) [ 54.219701][ T4318] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.244956][ T4309] 1*2048kB (M) 3*4096kB (M) = 15360kB [ 54.244999][ T4309] Node 0 DMA32: [ 54.261812][ T4318] EXT4-fs error (device loop4): ext4_check_all_de:659: inode #12: block 7: comm +}[@: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 54.269952][ T4309] 3*4kB (M) 1*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949188kB [ 54.438792][ T4309] Node 0 Normal: 6*4kB (UME) 4*8kB (UME) 6*16kB (UME) 3*32kB (UE) 5*64kB (UME) 7*128kB (UME) 6*256kB (UE) 6*512kB (UME) 7*1024kB (UME) 8*2048kB (UM) 1066*4096kB (UM) = 4395960kB [ 54.456765][ T4309] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 54.466073][ T4309] 16075 total pagecache pages [ 54.470734][ T4309] 0 pages in swap cache [ 54.474901][ T4309] Free swap = 124996kB [ 54.479057][ T4309] Total swap = 124996kB [ 54.483529][ T4309] 2097051 pages RAM [ 54.487344][ T4309] 0 pages HighMem/MovableOnly [ 54.492050][ T4309] 80446 pages reserved [ 54.499104][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.511547][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.514894][ T292] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2046 with error 28 [ 54.549239][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.669435][ T4333] loop2: detected capacity change from 0 to 1024 [ 54.682688][ T4340] netlink: 96 bytes leftover after parsing attributes in process `syz.1.259'. [ 54.692572][ T4333] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.716046][ T4333] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.724693][ T4342] lo speed is unknown, defaulting to 1000 [ 54.759644][ T4333] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.816906][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.894996][ T4357] loop2: detected capacity change from 0 to 512 [ 54.934512][ T4357] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.960425][ T4357] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.014587][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.073871][ T4360] syz.0.268 (4360): /proc/4359/oom_adj is deprecated, please use /proc/4359/oom_score_adj instead. [ 55.103837][ T4369] $Hÿ: renamed from bond0 (while UP) [ 55.124889][ T4369] $Hÿ: entered promiscuous mode [ 55.130145][ T4369] bond_slave_0: entered promiscuous mode [ 55.130267][ T4369] bond_slave_1: entered promiscuous mode [ 55.243864][ T4378] loop2: detected capacity change from 0 to 1024 [ 55.301598][ T4378] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.310237][ T4378] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.333092][ T4378] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.373245][ T4388] loop3: detected capacity change from 0 to 512 [ 55.382492][ T4388] EXT4-fs: Ignoring removed mblk_io_submit option [ 55.416056][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.427418][ T4388] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 55.474709][ T4388] EXT4-fs (loop3): 1 truncate cleaned up [ 55.480927][ T4388] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.599612][ T4395] netlink: 'syz.0.280': attribute type 10 has an invalid length. [ 55.789749][ T4410] FAULT_INJECTION: forcing a failure. [ 55.789749][ T4410] name failslab, interval 1, probability 0, space 0, times 0 [ 55.802664][ T4410] CPU: 1 UID: 0 PID: 4410 Comm: syz.1.288 Not tainted syzkaller #0 PREEMPT(voluntary) [ 55.802696][ T4410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 55.802710][ T4410] Call Trace: [ 55.802796][ T4410] [ 55.802805][ T4410] __dump_stack+0x1d/0x30 [ 55.802826][ T4410] dump_stack_lvl+0xe8/0x140 [ 55.802845][ T4410] dump_stack+0x15/0x1b [ 55.802865][ T4410] should_fail_ex+0x265/0x280 [ 55.802967][ T4410] should_failslab+0x8c/0xb0 [ 55.802993][ T4410] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 55.803094][ T4410] ? __d_alloc+0x3d/0x340 [ 55.803122][ T4410] __d_alloc+0x3d/0x340 [ 55.803153][ T4410] ? avc_has_perm_noaudit+0x1b1/0x200 [ 55.803250][ T4410] d_alloc_parallel+0x53/0xc60 [ 55.803277][ T4410] ? selinux_inode_permission+0x62d/0x740 [ 55.803322][ T4410] ? lockref_get_not_dead+0x120/0x1c0 [ 55.803359][ T4410] ? __rcu_read_unlock+0x4f/0x70 [ 55.803433][ T4410] __lookup_slow+0x8c/0x250 [ 55.803462][ T4410] lookup_slow+0x3c/0x60 [ 55.803493][ T4410] walk_component+0x1ec/0x220 [ 55.803559][ T4410] path_lookupat+0xfe/0x2a0 [ 55.803592][ T4410] filename_lookup+0x147/0x340 [ 55.803638][ T4410] kern_path+0x3b/0x130 [ 55.803688][ T4410] lookup_bdev+0x66/0x150 [ 55.803724][ T4410] __se_sys_quotactl+0x1b7/0x670 [ 55.803748][ T4410] __x64_sys_quotactl+0x55/0x70 [ 55.803769][ T4410] x64_sys_call+0x15d6/0x2ff0 [ 55.803880][ T4410] do_syscall_64+0xd2/0x200 [ 55.803916][ T4410] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 55.803944][ T4410] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 55.804018][ T4410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.804038][ T4410] RIP: 0033:0x7fe82f74ec29 [ 55.804055][ T4410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.804096][ T4410] RSP: 002b:00007fe82e1af038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 55.804121][ T4410] RAX: ffffffffffffffda RBX: 00007fe82f995fa0 RCX: 00007fe82f74ec29 [ 55.804204][ T4410] RDX: 0000000000000000 RSI: 0000200000000180 RDI: ffffffff80000202 [ 55.804216][ T4410] RBP: 00007fe82e1af090 R08: 0000000000000000 R09: 0000000000000000 [ 55.804237][ T4410] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000002 [ 55.804249][ T4410] R13: 00007fe82f996038 R14: 00007fe82f995fa0 R15: 00007ffdaab0cd78 [ 55.804269][ T4410] [ 55.807983][ T4412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.287'. [ 55.865725][ T4414] loop0: detected capacity change from 0 to 1024 [ 55.899873][ T4415] 9pnet_fd: Insufficient options for proto=fd [ 55.920811][ T4414] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.070145][ T4414] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.081031][ T4414] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.081233][ T4418] macvlan1: entered promiscuous mode [ 56.103597][ T4418] ipvlan0: entered promiscuous mode [ 56.109626][ T4418] ipvlan0: left promiscuous mode [ 56.138210][ T4418] macvlan1: left promiscuous mode [ 56.144992][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.203902][ T4426] netlink: 'syz.4.293': attribute type 12 has an invalid length. [ 56.298352][ T4437] netlink: 'syz.0.298': attribute type 10 has an invalid length. [ 56.313886][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.366054][ T4445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.299'. [ 56.390594][ T4441] loop4: detected capacity change from 0 to 1024 [ 56.395124][ T4445] macvtap0: refused to change device tx_queue_len [ 56.400779][ T4441] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.415369][ T4441] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.426066][ T4445] netlink: 32 bytes leftover after parsing attributes in process `syz.3.299'. [ 56.445645][ T4445] batman_adv: batadv0: Adding interface: dummy0 [ 56.452017][ T4445] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.491484][ T4445] batman_adv: batadv0: Interface activated: dummy0 [ 56.499704][ T4441] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.552513][ T4459] batadv0: mtu less than device minimum [ 56.558649][ T4459] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 56.569514][ T4459] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 56.580390][ T4459] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 56.591265][ T4459] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 56.602149][ T4459] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 56.613182][ T4459] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 56.623971][ T4459] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 56.634823][ T4459] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 56.695691][ T4463] loop2: detected capacity change from 0 to 1024 [ 56.723951][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.736213][ T4463] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.757192][ T4466] netlink: 'syz.3.310': attribute type 10 has an invalid length. [ 56.767529][ T4463] EXT4-fs error (device loop2): ext4_check_all_de:659: inode #12: block 7: comm +}[@: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 56.791464][ T4466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.811296][ T4466] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 56.849685][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.888671][ T4472] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 57.059912][ T4478] lo speed is unknown, defaulting to 1000 [ 57.360605][ T4495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.321'. [ 57.375081][ T4495] macvtap0: refused to change device tx_queue_len [ 57.386607][ T4496] loop4: detected capacity change from 0 to 512 [ 57.397747][ T4495] netlink: 32 bytes leftover after parsing attributes in process `syz.0.321'. [ 57.426971][ T4496] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.440549][ T4501] loop0: detected capacity change from 0 to 1024 [ 57.474068][ T4496] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.511044][ T4490] program syz.2.319 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.531174][ T4496] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.576086][ T4501] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.600915][ T29] kauditd_printk_skb: 580 callbacks suppressed [ 57.600959][ T29] audit: type=1326 audit(1758514670.568:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4489 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f738c0dec29 code=0x7ffc0000 [ 57.723420][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.734905][ T4526] netlink: 'syz.1.328': attribute type 10 has an invalid length. [ 57.750149][ T29] audit: type=1326 audit(1758514670.629:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4489 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738c0dec29 code=0x7ffc0000 [ 57.773586][ T29] audit: type=1326 audit(1758514670.629:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4489 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738c0dec29 code=0x7ffc0000 [ 57.979704][ T4532] lo speed is unknown, defaulting to 1000 [ 58.212202][ T4561] loop0: detected capacity change from 0 to 512 [ 58.233869][ T4561] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 58.279372][ T4491] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 58.300392][ T4491] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2048 with error 28 [ 58.312951][ T4491] EXT4-fs (loop4): This should not happen!! Data will be lost [ 58.312951][ T4491] [ 58.321465][ T4567] netlink: 'syz.1.332': attribute type 21 has an invalid length. [ 58.322753][ T4491] EXT4-fs (loop4): Total free blocks count 0 [ 58.330459][ T4567] netlink: 156 bytes leftover after parsing attributes in process `syz.1.332'. [ 58.345447][ T4491] EXT4-fs (loop4): Free/Dirty block details [ 58.351490][ T4491] EXT4-fs (loop4): free_blocks=39626 [ 58.356855][ T4491] EXT4-fs (loop4): dirty_blocks=3582 [ 58.362408][ T4491] EXT4-fs (loop4): Block reservation details [ 58.368533][ T4491] EXT4-fs (loop4): i_reserved_data_blocks=3582 [ 58.377331][ T4561] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.402689][ T4561] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.423016][ T3589] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1533 with error 28 [ 58.605461][ T29] audit: type=1400 audit(1758514671.597:1883): avc: denied { connect } for pid=4583 comm="syz.3.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 58.628905][ T4584] loop3: detected capacity change from 0 to 128 [ 58.679871][ T4587] bond0: (slave batadv0): Releasing backup interface [ 58.738189][ T4594] netlink: 'syz.2.343': attribute type 10 has an invalid length. [ 58.740693][ T29] audit: type=1400 audit(1758514671.720:1884): avc: denied { module_load } for pid=4585 comm="syz.2.343" path="/sys/power/wakeup_count" dev="sysfs" ino=219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 58.746005][ T4594] netlink: 40 bytes leftover after parsing attributes in process `syz.2.343'. [ 58.810035][ T4587] bridge_slave_0: left allmulticast mode [ 58.815722][ T4587] bridge_slave_0: left promiscuous mode [ 58.821636][ T4587] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.840409][ T4600] loop4: detected capacity change from 0 to 1024 [ 58.847517][ T4600] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.854431][ T29] audit: type=1326 audit(1758514671.791:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4599 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5494ec29 code=0x7ffc0000 [ 58.877813][ T29] audit: type=1326 audit(1758514671.791:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4599 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5494ec29 code=0x7ffc0000 [ 58.901377][ T29] audit: type=1326 audit(1758514671.791:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4599 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c5494ec29 code=0x7ffc0000 [ 58.918235][ T4601] loop2: detected capacity change from 0 to 512 [ 58.924932][ T29] audit: type=1326 audit(1758514671.791:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4599 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5494ec29 code=0x7ffc0000 [ 58.954913][ T29] audit: type=1326 audit(1758514671.791:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4599 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5494ec29 code=0x7ffc0000 [ 58.989495][ T4561] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 59.030025][ T4561] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2048 with error 28 [ 59.042772][ T4561] EXT4-fs (loop0): This should not happen!! Data will be lost [ 59.042772][ T4561] [ 59.052475][ T4561] EXT4-fs (loop0): Total free blocks count 0 [ 59.058571][ T4561] EXT4-fs (loop0): Free/Dirty block details [ 59.064473][ T4561] EXT4-fs (loop0): free_blocks=39626 [ 59.069823][ T4561] EXT4-fs (loop0): dirty_blocks=4096 [ 59.075153][ T4561] EXT4-fs (loop0): Block reservation details [ 59.081174][ T4561] EXT4-fs (loop0): i_reserved_data_blocks=4096 [ 59.093278][ T4587] bridge_slave_1: left allmulticast mode [ 59.099011][ T4587] bridge_slave_1: left promiscuous mode [ 59.099157][ T4600] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.104697][ T4587] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.130149][ T4600] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.148297][ T4587] bond0: (slave bond_slave_0): Releasing backup interface [ 59.168998][ T4601] EXT4-fs error (device loop2): ext4_quota_enable:7128: inode #4: comm syz.2.343: iget: bogus i_mode (4200) [ 59.199382][ T4587] bond0: (slave bond_slave_1): Releasing backup interface [ 59.201951][ T4616] loop1: detected capacity change from 0 to 512 [ 59.214381][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.225840][ T4616] EXT4-fs: Ignoring removed mblk_io_submit option [ 59.232887][ T4616] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.239501][ T4601] EXT4-fs error (device loop2): ext4_quota_enable:7131: comm syz.2.343: Bad quota inode: 4, type: 1 [ 59.251053][ T4616] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 59.259885][ T4616] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 59.282913][ T4618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.354'. [ 59.299322][ T4601] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 59.332487][ T4616] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.353: Allocating blocks 41-42 which overlap fs metadata [ 59.351831][ T4616] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.353: Allocating blocks 41-42 which overlap fs metadata [ 59.364039][ T4622] program syz.4.355 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.367146][ T4587] team0: Port device team_slave_0 removed [ 59.377154][ T4601] EXT4-fs (loop2): mount failed [ 59.381287][ T4616] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.353: Failed to acquire dquot type 1 [ 59.402339][ T4616] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 59.421829][ T4587] team0: Port device team_slave_1 removed [ 59.440810][ T4616] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #12: comm syz.1.353: corrupted inode contents [ 59.454599][ T4601] loop2: detected capacity change from 0 to 512 [ 59.459546][ T4587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.468311][ T4587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.478518][ T4616] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #12: comm syz.1.353: mark_inode_dirty error [ 59.506524][ T4616] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #12: comm syz.1.353: corrupted inode contents [ 59.517274][ T4587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.525671][ T4587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.531178][ T4616] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.353: mark_inode_dirty error [ 59.544834][ T4616] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #12: comm syz.1.353: corrupted inode contents [ 59.560657][ T4616] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 59.570421][ T4616] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #12: comm syz.1.353: corrupted inode contents [ 59.584340][ T4616] EXT4-fs error (device loop1): ext4_truncate:4666: inode #12: comm syz.1.353: mark_inode_dirty error [ 59.612626][ T4616] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 59.623063][ T4616] EXT4-fs (loop1): 1 truncate cleaned up [ 59.658905][ T4594] batman_adv: batadv0: Adding interface: veth1_vlan [ 59.665621][ T4594] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.698402][ T4616] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.717433][ T4616] capability: warning: `syz.1.353' uses deprecated v2 capabilities in a way that may be insecure [ 59.743012][ T4594] batman_adv: batadv0: Interface activated: veth1_vlan [ 59.909124][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2046 with error 28 [ 59.944598][ T4649] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.363' sets config #1 [ 59.973348][ T4643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.361'. [ 60.017649][ T4643] macvtap0: refused to change device tx_queue_len [ 60.092522][ T4660] netlink: 'syz.4.367': attribute type 2 has an invalid length. [ 60.101325][ T4643] netlink: 32 bytes leftover after parsing attributes in process `syz.2.361'. [ 60.116154][ T4643] batman_adv: batadv0: Adding interface: dummy0 [ 60.122469][ T4643] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.186939][ T4674] loop1: detected capacity change from 0 to 512 [ 60.193856][ T4674] EXT4-fs: Ignoring removed oldalloc option [ 60.205787][ T4674] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.368: Parent and EA inode have the same ino 15 [ 60.229098][ T4643] batman_adv: batadv0: Interface activated: dummy0 [ 60.260305][ T4643] net_ratelimit: 15 callbacks suppressed [ 60.260402][ T4643] batadv0: mtu less than device minimum [ 60.271677][ T4674] EXT4-fs (loop1): 1 orphan inode deleted [ 60.272133][ T4643] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 60.286788][ T4687] loop3: detected capacity change from 0 to 1024 [ 60.288314][ T4643] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 60.295338][ T4687] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.305002][ T4643] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 60.321835][ T4643] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 60.332671][ T4643] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 60.343546][ T4643] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 60.354360][ T4643] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 60.363423][ T4674] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.368: deleted inode referenced: 15 [ 60.365754][ T4643] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 60.387293][ T4643] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 60.387519][ T4687] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 60.413280][ T4674] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.368: deleted inode referenced: 15 [ 60.443719][ T4674] random: crng reseeded on system resumption [ 60.557860][ T4707] loop0: detected capacity change from 0 to 1024 [ 60.598527][ T4716] netlink: 60 bytes leftover after parsing attributes in process `syz.3.377'. [ 60.638921][ T4722] loop2: detected capacity change from 0 to 512 [ 60.674154][ T4722] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 60.691348][ T4729] netlink: 12 bytes leftover after parsing attributes in process `syz.1.381'. [ 60.705209][ T4722] EXT4-fs (loop2): mount failed [ 60.733725][ T4729] bridge0: port 3(batadv0) entered blocking state [ 60.740337][ T4729] bridge0: port 3(batadv0) entered disabled state [ 60.747470][ T4729] batadv0: entered allmulticast mode [ 60.754621][ T4729] batadv0: entered promiscuous mode [ 60.847271][ T4744] lo speed is unknown, defaulting to 1000 [ 60.902339][ T4744] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 60.908932][ T4744] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 60.916454][ T4744] vhci_hcd vhci_hcd.0: Device attached [ 60.925097][ T4744] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 60.936789][ T4744] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(13) [ 60.943399][ T4744] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 60.950878][ T4744] vhci_hcd vhci_hcd.0: Device attached [ 60.965745][ T4744] loop0: detected capacity change from 0 to 128 [ 60.996861][ T4729] netlink: 68 bytes leftover after parsing attributes in process `syz.1.381'. [ 61.162895][ T1044] vhci_hcd: vhci_device speed not set [ 61.200726][ T292] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 61.210165][ T292] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 61.291724][ T1044] usb 1-1: new full-speed USB device number 2 using vhci_hcd [ 61.310022][ T4754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.386'. [ 61.321090][ T4754] macvtap0: refused to change device tx_queue_len [ 61.329835][ T4754] netlink: 32 bytes leftover after parsing attributes in process `syz.2.386'. [ 61.343611][ T4758] tmpfs: Bad value for 'mpol' [ 61.366166][ T3386] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.381784][ T3386] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 61.397501][ T4764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.390'. [ 61.409134][ T3408] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 61.416714][ T3408] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 61.424140][ T3408] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 61.431696][ T3408] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 61.439116][ T3408] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 61.446607][ T3408] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 61.454000][ T3408] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 61.461469][ T3408] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 61.468886][ T3408] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 61.492115][ T3408] hid-generic 0003:0004:0000.0002: hidraw1: USB HID v0.00 Device [syz0] on syz1 [ 61.516667][ T4766] fido_id[4766]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 61.744281][ T4785] loop3: detected capacity change from 0 to 512 [ 61.752834][ T4785] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 61.761988][ T4785] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 61.771208][ T4785] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 61.780323][ T4785] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 61.788480][ T4785] System zones: 0-2, 18-18, 34-34 [ 61.794140][ T4785] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.398: iget: bad i_size value: 360287970189639680 [ 61.808114][ T4785] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.398: couldn't read orphan inode 15 (err -117) [ 61.830374][ T4785] netlink: 'syz.3.398': attribute type 21 has an invalid length. [ 61.838401][ T4785] netlink: 156 bytes leftover after parsing attributes in process `syz.3.398'. [ 61.847695][ T4785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.398'. [ 61.919337][ T4790] loop4: detected capacity change from 0 to 1024 [ 61.988473][ T4801] random: crng reseeded on system resumption [ 61.995340][ T4801] FAULT_INJECTION: forcing a failure. [ 61.995340][ T4801] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 62.008984][ T4801] CPU: 0 UID: 0 PID: 4801 Comm: syz.4.403 Not tainted syzkaller #0 PREEMPT(voluntary) [ 62.009012][ T4801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 62.009024][ T4801] Call Trace: [ 62.009044][ T4801] [ 62.009052][ T4801] __dump_stack+0x1d/0x30 [ 62.009089][ T4801] dump_stack_lvl+0xe8/0x140 [ 62.009111][ T4801] dump_stack+0x15/0x1b [ 62.009131][ T4801] should_fail_ex+0x265/0x280 [ 62.009154][ T4801] should_fail_alloc_page+0xf2/0x100 [ 62.009260][ T4801] __alloc_frozen_pages_noprof+0xff/0x360 [ 62.009295][ T4801] alloc_pages_mpol+0xb3/0x250 [ 62.009388][ T4801] alloc_pages_noprof+0x90/0x130 [ 62.009425][ T4801] get_zeroed_page_noprof+0x1a/0x40 [ 62.009445][ T4801] get_image_page+0x2b/0x420 [ 62.009467][ T4801] ? alloc_pages_noprof+0xa9/0x130 [ 62.009609][ T4801] alloc_rtree_node+0x146/0x1f0 [ 62.009635][ T4801] memory_bm_create+0x723/0xd90 [ 62.009662][ T4801] create_basic_memory_bitmaps+0xa6/0x450 [ 62.009724][ T4801] snapshot_open+0x1b4/0x270 [ 62.009753][ T4801] ? __pfx_snapshot_open+0x10/0x10 [ 62.009799][ T4801] misc_open+0x1d6/0x200 [ 62.009831][ T4801] chrdev_open+0x2e8/0x3a0 [ 62.009859][ T4801] do_dentry_open+0x649/0xa20 [ 62.009885][ T4801] ? __pfx_chrdev_open+0x10/0x10 [ 62.009923][ T4801] vfs_open+0x37/0x1e0 [ 62.009978][ T4801] path_openat+0x1c5e/0x2170 [ 62.010077][ T4801] do_filp_open+0x109/0x230 [ 62.010101][ T4801] do_sys_openat2+0xa6/0x110 [ 62.010195][ T4801] __x64_sys_openat+0xf2/0x120 [ 62.010230][ T4801] x64_sys_call+0x2e9c/0x2ff0 [ 62.010320][ T4801] do_syscall_64+0xd2/0x200 [ 62.010351][ T4801] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 62.010380][ T4801] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 62.010427][ T4801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.010526][ T4801] RIP: 0033:0x7f4c5494ec29 [ 62.010543][ T4801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.010563][ T4801] RSP: 002b:00007f4c533af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 62.010585][ T4801] RAX: ffffffffffffffda RBX: 00007f4c54b95fa0 RCX: 00007f4c5494ec29 [ 62.010597][ T4801] RDX: 0000000000000481 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 62.010609][ T4801] RBP: 00007f4c533af090 R08: 0000000000000000 R09: 0000000000000000 [ 62.010681][ T4801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 62.010692][ T4801] R13: 00007f4c54b96038 R14: 00007f4c54b95fa0 R15: 00007fff070bd008 [ 62.010710][ T4801] [ 62.421655][ T4816] macvtap0: refused to change device tx_queue_len [ 62.568561][ T29] kauditd_printk_skb: 581 callbacks suppressed [ 62.568578][ T29] audit: type=1400 audit(1758514675.612:2466): avc: denied { setopt } for pid=4828 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.593764][ T29] audit: type=1326 audit(1758514675.612:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4828 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738c0dec29 code=0x7ffc0000 [ 62.619022][ T29] audit: type=1326 audit(1758514675.673:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4828 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f738c0dec29 code=0x7ffc0000 [ 62.642058][ T29] audit: type=1326 audit(1758514675.673:2469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4828 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738c0dec29 code=0x7ffc0000 [ 62.684197][ T29] audit: type=1326 audit(1758514675.734:2470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4830 comm="syz.0.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67b8eec29 code=0x7ffc0000 [ 62.708281][ T29] audit: type=1326 audit(1758514675.734:2471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4832 comm="syz.2.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738c0dec29 code=0x7ffc0000 [ 62.731678][ T29] audit: type=1326 audit(1758514675.734:2472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4832 comm="syz.2.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f738c0dec29 code=0x7ffc0000 [ 62.755296][ T29] audit: type=1326 audit(1758514675.734:2473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4832 comm="syz.2.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738c0dec29 code=0x7ffc0000 [ 62.778947][ T29] audit: type=1326 audit(1758514675.734:2474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4832 comm="syz.2.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f738c0dec29 code=0x7ffc0000 [ 62.781223][ T4833] loop2: detected capacity change from 0 to 512 [ 62.802652][ T29] audit: type=1326 audit(1758514675.734:2475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4832 comm="syz.2.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738c0dec29 code=0x7ffc0000 [ 62.854105][ T4833] EXT4-fs (loop2): orphan cleanup on readonly fs [ 62.862322][ T4833] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.418: bad orphan inode 13 [ 62.894411][ T4833] ext4_test_bit(bit=12, block=18) = 1 [ 62.899939][ T4833] is_bad_inode(inode)=0 [ 62.904173][ T4833] NEXT_ORPHAN(inode)=2130706432 [ 62.909067][ T4833] max_ino=32 [ 62.912294][ T4833] i_nlink=1 [ 62.945455][ T4841] macvtap0: refused to change device tx_queue_len [ 63.034625][ T4845] lo speed is unknown, defaulting to 1000 [ 63.063209][ T4856] loop2: detected capacity change from 0 to 512 [ 63.093569][ T4854] loop0: detected capacity change from 0 to 512 [ 63.119849][ T4856] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 63.135948][ T4854] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.145343][ T4856] EXT4-fs (loop2): mount failed [ 63.159803][ T4854] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.363454][ T4893] loop2: detected capacity change from 0 to 512 [ 63.395584][ T4893] EXT4-fs (loop2): orphan cleanup on readonly fs [ 63.433157][ T4893] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.434: bad orphan inode 13 [ 63.464157][ T4893] ext4_test_bit(bit=12, block=18) = 1 [ 63.469674][ T4893] is_bad_inode(inode)=0 [ 63.473877][ T4893] NEXT_ORPHAN(inode)=2130706432 [ 63.478797][ T4893] max_ino=32 [ 63.482000][ T4893] i_nlink=1 [ 63.723407][ T4924] loop2: detected capacity change from 0 to 1024 [ 63.731366][ T4926] loop4: detected capacity change from 0 to 1024 [ 63.739634][ T4924] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.749619][ T4926] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.762989][ T4924] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.771525][ T4926] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.798161][ T4854] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 63.845373][ T4854] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2048 with error 28 [ 63.857917][ T4854] EXT4-fs (loop0): This should not happen!! Data will be lost [ 63.857917][ T4854] [ 63.867604][ T4854] EXT4-fs (loop0): Total free blocks count 0 [ 63.873714][ T4854] EXT4-fs (loop0): Free/Dirty block details [ 63.879621][ T4854] EXT4-fs (loop0): free_blocks=39626 [ 63.885018][ T4854] EXT4-fs (loop0): dirty_blocks=4096 [ 63.890314][ T4854] EXT4-fs (loop0): Block reservation details [ 63.896431][ T4854] EXT4-fs (loop0): i_reserved_data_blocks=4096 [ 64.030196][ T4938] loop3: detected capacity change from 0 to 512 [ 64.044728][ T4938] EXT4-fs (loop3): orphan cleanup on readonly fs [ 64.053948][ T4938] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.447: bad orphan inode 13 [ 64.089586][ T4938] ext4_test_bit(bit=12, block=18) = 1 [ 64.095083][ T4938] is_bad_inode(inode)=0 [ 64.099388][ T4938] NEXT_ORPHAN(inode)=2130706432 [ 64.104246][ T4938] max_ino=32 [ 64.107446][ T4938] i_nlink=1 [ 64.143837][ T3589] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2046 with error 28 [ 64.156765][ T3589] EXT4-fs (loop0): This should not happen!! Data will be lost [ 64.156765][ T3589] [ 64.197699][ T4944] bridge1: entered promiscuous mode [ 64.202955][ T4944] bridge1: entered allmulticast mode [ 64.298253][ T3386] IPVS: starting estimator thread 0... [ 64.306002][ T4965] FAULT_INJECTION: forcing a failure. [ 64.306002][ T4965] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 64.319411][ T4965] CPU: 1 UID: 0 PID: 4965 Comm: syz.4.455 Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.319441][ T4965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 64.319453][ T4965] Call Trace: [ 64.319461][ T4965] [ 64.319469][ T4965] __dump_stack+0x1d/0x30 [ 64.319492][ T4965] dump_stack_lvl+0xe8/0x140 [ 64.319513][ T4965] dump_stack+0x15/0x1b [ 64.319531][ T4965] should_fail_ex+0x265/0x280 [ 64.319604][ T4965] should_fail_alloc_page+0xf2/0x100 [ 64.319632][ T4965] __alloc_frozen_pages_noprof+0xff/0x360 [ 64.319676][ T4965] alloc_pages_mpol+0xb3/0x250 [ 64.319716][ T4965] folio_alloc_mpol_noprof+0x39/0x80 [ 64.319749][ T4965] shmem_get_folio_gfp+0x3cf/0xd60 [ 64.319832][ T4965] shmem_write_begin+0xa8/0x190 [ 64.319855][ T4965] generic_perform_write+0x184/0x490 [ 64.319884][ T4965] shmem_file_write_iter+0xc5/0xf0 [ 64.319959][ T4965] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 64.319985][ T4965] vfs_write+0x527/0x960 [ 64.320036][ T4965] __x64_sys_pwrite64+0xfd/0x150 [ 64.320062][ T4965] x64_sys_call+0xc4d/0x2ff0 [ 64.320093][ T4965] do_syscall_64+0xd2/0x200 [ 64.320170][ T4965] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 64.320195][ T4965] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 64.320277][ T4965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.320300][ T4965] RIP: 0033:0x7f4c5494ec29 [ 64.320317][ T4965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.320336][ T4965] RSP: 002b:00007f4c533af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 64.320417][ T4965] RAX: ffffffffffffffda RBX: 00007f4c54b95fa0 RCX: 00007f4c5494ec29 [ 64.320430][ T4965] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000004 [ 64.320443][ T4965] RBP: 00007f4c533af090 R08: 0000000000000000 R09: 0000000000000000 [ 64.320457][ T4965] R10: 000000000000fecc R11: 0000000000000246 R12: 0000000000000002 [ 64.320470][ T4965] R13: 00007f4c54b96038 R14: 00007f4c54b95fa0 R15: 00007fff070bd008 [ 64.320572][ T4965] [ 64.533416][ T4971] FAULT_INJECTION: forcing a failure. [ 64.533416][ T4971] name failslab, interval 1, probability 0, space 0, times 0 [ 64.546251][ T4971] CPU: 1 UID: 0 PID: 4971 Comm: syz.3.456 Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.546296][ T4971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 64.546309][ T4971] Call Trace: [ 64.546316][ T4971] [ 64.546325][ T4971] __dump_stack+0x1d/0x30 [ 64.546349][ T4971] dump_stack_lvl+0xe8/0x140 [ 64.546438][ T4971] dump_stack+0x15/0x1b [ 64.546456][ T4971] should_fail_ex+0x265/0x280 [ 64.546483][ T4971] should_failslab+0x8c/0xb0 [ 64.546508][ T4971] kmem_cache_alloc_noprof+0x50/0x310 [ 64.546574][ T4971] ? security_file_alloc+0x32/0x100 [ 64.546611][ T4971] security_file_alloc+0x32/0x100 [ 64.546677][ T4971] init_file+0x5c/0x1d0 [ 64.546710][ T4971] alloc_empty_file+0x8b/0x200 [ 64.546809][ T4971] alloc_file_pseudo+0xc6/0x160 [ 64.546872][ T4971] __shmem_file_setup+0x1de/0x210 [ 64.546909][ T4971] shmem_file_setup+0x3b/0x50 [ 64.546928][ T4971] __se_sys_memfd_create+0x2c3/0x590 [ 64.547009][ T4971] __x64_sys_memfd_create+0x31/0x40 [ 64.547031][ T4971] x64_sys_call+0x2abe/0x2ff0 [ 64.547055][ T4971] do_syscall_64+0xd2/0x200 [ 64.547246][ T4971] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 64.547333][ T4971] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 64.547366][ T4971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.547387][ T4971] RIP: 0033:0x7fabe0d8ec29 [ 64.547402][ T4971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.547433][ T4971] RSP: 002b:00007fabdf7eee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 64.547453][ T4971] RAX: ffffffffffffffda RBX: 000000000000059d RCX: 00007fabe0d8ec29 [ 64.547467][ T4971] RDX: 00007fabdf7eeef0 RSI: 0000000000000000 RDI: 00007fabe0e12810 [ 64.547481][ T4971] RBP: 0000200000001100 R08: 00007fabdf7eebb7 R09: 00007fabdf7eee40 [ 64.547564][ T4971] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000002c0 [ 64.547576][ T4971] R13: 00007fabdf7eeef0 R14: 00007fabdf7eeeb0 R15: 0000200000000600 [ 64.547593][ T4971] [ 64.779744][ T4967] IPVS: using max 2832 ests per chain, 141600 per kthread [ 64.806313][ T4975] lo speed is unknown, defaulting to 1000 [ 64.884492][ T4976] loop4: detected capacity change from 0 to 1024 [ 64.927902][ T4976] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 64.938891][ T4976] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 64.996040][ T4976] JBD2: no valid journal superblock found [ 65.001905][ T4976] EXT4-fs (loop4): Could not load journal inode [ 65.008902][ T4985] loop3: detected capacity change from 0 to 2048 [ 65.126697][ T4976] loop4: detected capacity change from 0 to 512 [ 65.142313][ T4985] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 65.157350][ T4985] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 684 with error 28 [ 65.169757][ T4985] EXT4-fs (loop3): This should not happen!! Data will be lost [ 65.169757][ T4985] [ 65.179451][ T4985] EXT4-fs (loop3): Total free blocks count 0 [ 65.185549][ T4985] EXT4-fs (loop3): Free/Dirty block details [ 65.191446][ T4985] EXT4-fs (loop3): free_blocks=2415919104 [ 65.197247][ T4985] EXT4-fs (loop3): dirty_blocks=688 [ 65.202454][ T4985] EXT4-fs (loop3): Block reservation details [ 65.208574][ T4985] EXT4-fs (loop3): i_reserved_data_blocks=43 [ 65.216656][ T4976] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.269739][ T4985] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:169: inode #12: comm syz.3.462: inline data xattr refers to an external xattr inode [ 65.373670][ T292] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 65.385994][ T292] EXT4-fs (loop3): This should not happen!! Data will be lost [ 65.385994][ T292] [ 65.483748][ T5003] __nla_validate_parse: 5 callbacks suppressed [ 65.483767][ T5003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.467'. [ 65.511668][ T5003] macvtap0: refused to change device tx_queue_len [ 65.822136][ T5010] loop0: detected capacity change from 0 to 2048 [ 65.872310][ T3644] loop0: p2 p3 p7 [ 65.889390][ T5010] loop0: p2 p3 p7 [ 66.013796][ T3644] udevd[3644]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 66.014070][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 66.036264][ T3645] udevd[3645]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 66.049786][ T5018] lo speed is unknown, defaulting to 1000 [ 66.159027][ T3645] udevd[3645]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 66.167061][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 66.174350][ T3644] udevd[3644]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 66.286896][ T5036] loop2: detected capacity change from 0 to 512 [ 66.307996][ T5036] EXT4-fs (loop2): orphan cleanup on readonly fs [ 66.325363][ T5036] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.481: bad orphan inode 13 [ 66.382164][ T5036] ext4_test_bit(bit=12, block=18) = 1 [ 66.387573][ T5036] is_bad_inode(inode)=0 [ 66.391840][ T5036] NEXT_ORPHAN(inode)=2130706432 [ 66.396752][ T5036] max_ino=32 [ 66.399974][ T5036] i_nlink=1 [ 66.745776][ T4972] syz.4.458 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 66.756829][ T4972] CPU: 0 UID: 0 PID: 4972 Comm: syz.4.458 Not tainted syzkaller #0 PREEMPT(voluntary) [ 66.756922][ T4972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 66.756933][ T4972] Call Trace: [ 66.756939][ T4972] [ 66.756947][ T4972] __dump_stack+0x1d/0x30 [ 66.757046][ T4972] dump_stack_lvl+0xe8/0x140 [ 66.757119][ T4972] dump_stack+0x15/0x1b [ 66.757135][ T4972] dump_header+0x81/0x220 [ 66.757162][ T4972] oom_kill_process+0x342/0x400 [ 66.757192][ T4972] out_of_memory+0x979/0xb80 [ 66.757252][ T4972] try_charge_memcg+0x5e6/0x9e0 [ 66.757298][ T4972] charge_memcg+0x51/0xc0 [ 66.757318][ T4972] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 66.757343][ T4972] __read_swap_cache_async+0x1df/0x350 [ 66.757415][ T4972] swap_cluster_readahead+0x376/0x3e0 [ 66.757454][ T4972] swapin_readahead+0xde/0x6f0 [ 66.757483][ T4972] ? __filemap_get_folio+0x4f7/0x6b0 [ 66.757512][ T4972] ? __rcu_read_unlock+0x34/0x70 [ 66.757533][ T4972] ? swap_cache_get_folio+0x77/0x200 [ 66.757565][ T4972] do_swap_page+0x301/0x2430 [ 66.757591][ T4972] ? css_rstat_updated+0xb7/0x240 [ 66.757656][ T4972] ? __pfx_default_wake_function+0x10/0x10 [ 66.757797][ T4972] handle_mm_fault+0x9a5/0x2c20 [ 66.757879][ T4972] do_user_addr_fault+0x636/0x1090 [ 66.757918][ T4972] exc_page_fault+0x62/0xa0 [ 66.757946][ T4972] asm_exc_page_fault+0x26/0x30 [ 66.757965][ T4972] RIP: 0033:0x7f4c548112a7 [ 66.758055][ T4972] Code: 2f fb ff ff eb a6 b8 01 00 00 00 48 81 c4 b8 00 00 00 5b 5d 41 5c 41 5d 41 5e 41 5f c3 66 0f 1f 44 00 00 80 3d 02 6b 38 00 00 <48> 8b 47 18 48 8b 4f 28 74 1f 48 8b 30 89 f2 83 c6 02 48 8d 04 f0 [ 66.758074][ T4972] RSP: 002b:00007fff070bd158 EFLAGS: 00010202 [ 66.758092][ T4972] RAX: 0000000000000000 RBX: 00007f4c54b95f40 RCX: 00007f4c5494ec29 [ 66.758169][ T4972] RDX: 0000000000000000 RSI: 000000000000001e RDI: 00007f4c54b95f40 [ 66.758187][ T4972] RBP: 00007f4c54b97da0 R08: 000000000003424c R09: 0000001e070bd45f [ 66.758244][ T4972] R10: 00007f4c54b97cb0 R11: 0000000000000246 R12: 000000000001025b [ 66.758258][ T4972] R13: 00007f4c54b96180 R14: ffffffffffffffff R15: 00007fff070bd280 [ 66.758277][ T4972] [ 66.758285][ T4972] memory: usage 307200kB, limit 307200kB, failcnt 349 [ 66.974268][ T4972] memory+swap: usage 307676kB, limit 9007199254740988kB, failcnt 0 [ 66.982174][ T4972] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 66.989491][ T4972] Memory cgroup stats for /syz4: [ 67.106620][ T4972] cache 8192 [ 67.114827][ T4972] rss 0 [ 67.117608][ T4972] shmem 0 [ 67.120555][ T4972] mapped_file 667648 [ 67.124535][ T4972] dirty 0 [ 67.127559][ T4972] writeback 0 [ 67.130848][ T4972] workingset_refault_anon 64 [ 67.135496][ T4972] workingset_refault_file 378 [ 67.140233][ T4972] swap 487424 [ 67.143620][ T4972] swapcached 4096 [ 67.147258][ T4972] pgpgin 20933 [ 67.150624][ T4972] pgpgout 20929 [ 67.154101][ T4972] pgfault 36306 [ 67.157552][ T4972] pgmajfault 49 [ 67.161043][ T4972] inactive_anon 4096 [ 67.164971][ T4972] active_anon 0 [ 67.168431][ T4972] inactive_file 12288 [ 67.172432][ T4972] active_file 0 [ 67.176051][ T4972] unevictable 0 [ 67.179657][ T4972] hierarchical_memory_limit 314572800 [ 67.185182][ T4972] hierarchical_memsw_limit 9223372036854771712 [ 67.191336][ T4972] total_cache 8192 [ 67.195647][ T4972] total_rss 0 [ 67.199246][ T4972] total_shmem 0 [ 67.202757][ T4972] total_mapped_file 667648 [ 67.207197][ T4972] total_dirty 0 [ 67.210701][ T4972] total_writeback 0 [ 67.214567][ T4972] total_workingset_refault_anon 64 [ 67.219690][ T4972] total_workingset_refault_file 378 [ 67.225001][ T4972] total_swap 487424 [ 67.228813][ T4972] total_swapcached 4096 [ 67.233063][ T4972] total_pgpgin 20933 [ 67.236990][ T4972] total_pgpgout 20929 [ 67.240992][ T4972] total_pgfault 36306 [ 67.245158][ T4972] total_pgmajfault 49 [ 67.249284][ T4972] total_inactive_anon 4096 [ 67.253823][ T4972] total_active_anon 0 [ 67.257815][ T4972] total_inactive_file 12288 [ 67.262702][ T4972] total_active_file 0 [ 67.266712][ T4972] total_unevictable 0 [ 67.268072][ T5065] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 67.270736][ T4972] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 67.277234][ T5065] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 67.277352][ T5065] vhci_hcd vhci_hcd.0: Device attached [ 67.284152][ T4972] ,cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.458,pid=4972,uid=0 [ 67.307331][ T4972] Memory cgroup out of memory: Killed process 4972 (syz.4.458) total-vm:96724kB, anon-rss:1072kB, file-rss:23136kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 67.392766][ T5080] serio: Serial port ptm0 [ 67.463839][ T5080] SELinux: security_context_str_to_sid () failed with errno=-22 [ 67.471641][ T3408] vhci_hcd: vhci_device speed not set [ 67.552924][ T3408] usb 7-1: new full-speed USB device number 2 using vhci_hcd [ 68.005744][ T4976] syz.4.458 (4976) used greatest stack depth: 6168 bytes left [ 68.203584][ T29] kauditd_printk_skb: 531 callbacks suppressed [ 68.203601][ T29] audit: type=1326 audit(1758514681.330:3006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5111 comm="syz.4.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5494ec29 code=0x7ffc0000 [ 68.258263][ T29] audit: type=1326 audit(1758514681.360:3007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5111 comm="syz.4.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f4c5494ec29 code=0x7ffc0000 [ 68.281957][ T29] audit: type=1326 audit(1758514681.360:3008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5111 comm="syz.4.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5494ec29 code=0x7ffc0000 [ 68.305338][ T29] audit: type=1326 audit(1758514681.360:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5111 comm="syz.4.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5494ec29 code=0x7ffc0000 [ 68.328946][ T29] audit: type=1326 audit(1758514681.360:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5111 comm="syz.4.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c5494ec29 code=0x7ffc0000 [ 68.352299][ T29] audit: type=1326 audit(1758514681.360:3011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5111 comm="syz.4.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5494ec29 code=0x7ffc0000 [ 68.375614][ T29] audit: type=1326 audit(1758514681.360:3012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5111 comm="syz.4.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f4c5494ec29 code=0x7ffc0000 [ 68.399076][ T29] audit: type=1326 audit(1758514681.360:3013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5111 comm="syz.4.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5494ec29 code=0x7ffc0000 [ 68.422702][ T29] audit: type=1326 audit(1758514681.360:3014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5111 comm="syz.4.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f4c5494ec29 code=0x7ffc0000 [ 68.446100][ T29] audit: type=1326 audit(1758514681.360:3015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5111 comm="syz.4.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5494ec29 code=0x7ffc0000 [ 68.547853][ T5124] loop2: detected capacity change from 0 to 128 [ 68.591277][ T5130] tunl0: entered promiscuous mode [ 68.644166][ T5131] loop2: detected capacity change from 0 to 128 [ 68.649762][ T5130] net_ratelimit: 11 callbacks suppressed [ 68.649776][ T5130] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 68.766509][ T5141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.510'. [ 68.777850][ T5141] macvtap0: refused to change device tx_queue_len [ 68.802382][ T5067] vhci_hcd: connection reset by peer [ 68.808627][ T41] vhci_hcd: stop threads [ 68.812910][ T41] vhci_hcd: release socket [ 68.817395][ T41] vhci_hcd: disconnect device [ 69.050069][ T5163] loop3: detected capacity change from 0 to 1024 [ 69.064851][ T5163] EXT4-fs mount: 30 callbacks suppressed [ 69.064863][ T5163] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.162853][ T5170] lo speed is unknown, defaulting to 1000 [ 69.356252][ T5163] EXT4-fs error (device loop3): ext4_check_all_de:659: inode #12: block 7: comm +}[@: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 69.477279][ T5176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.523'. [ 69.491857][ T5165] lo speed is unknown, defaulting to 1000 [ 69.498696][ T5176] macvtap0: refused to change device tx_queue_len [ 69.554104][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.566117][ T5176] netlink: 32 bytes leftover after parsing attributes in process `syz.2.523'. [ 69.803512][ T5188] loop4: detected capacity change from 0 to 512 [ 69.856514][ T5188] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.872948][ T5186] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.880268][ T5186] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.925912][ T5188] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.949497][ T5186] batman_adv: batadv0: Interface deactivated: dummy0 [ 70.083576][ T5186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.093278][ T5186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.133621][ T5155] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.164585][ T5155] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.190747][ T5155] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.217534][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.239435][ T5155] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.317911][ T5231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.535'. [ 70.336738][ T5231] macvtap0: refused to change device tx_queue_len [ 70.350403][ T5231] netlink: 32 bytes leftover after parsing attributes in process `syz.2.535'. [ 70.504827][ T5250] SELinux: ebitmap: truncated map [ 70.520444][ T5250] SELinux: failed to load policy [ 70.691243][ T5258] lo speed is unknown, defaulting to 1000 [ 70.846514][ T5263] loop2: detected capacity change from 0 to 1024 [ 70.874198][ T5263] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.889124][ T5263] EXT4-fs error (device loop2): ext4_check_all_de:659: inode #12: block 7: comm +}[@: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 70.922316][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.943946][ T5272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.548'. [ 70.953435][ T5272] macvtap0: refused to change device tx_queue_len [ 70.962865][ T5272] netlink: 32 bytes leftover after parsing attributes in process `syz.2.548'. [ 71.401412][ T5287] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.417851][ T5287] netlink: 16 bytes leftover after parsing attributes in process `syz.0.554'. [ 71.479310][ T5296] netlink: 16 bytes leftover after parsing attributes in process `syz.0.557'. [ 71.550195][ T5298] loop0: detected capacity change from 0 to 512 [ 71.563944][ T5298] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.557: bg 0: block 393: padding at end of block bitmap is not set [ 71.578655][ T5298] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 71.587824][ T5298] EXT4-fs (loop0): 2 truncates cleaned up [ 71.594092][ T5298] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.607665][ T5298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.249390][ T5313] loop4: detected capacity change from 0 to 2048 [ 72.286641][ T3644] loop4: p1 < > p4 [ 72.291463][ T3644] loop4: p4 start 42180 is beyond EOD, truncated [ 72.299695][ T5313] loop4: p1 < > p4 [ 72.304222][ T5313] loop4: p4 start 42180 is beyond EOD, truncated [ 72.315977][ T5313] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 72.330079][ T5313] FAULT_INJECTION: forcing a failure. [ 72.330079][ T5313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.343176][ T5313] CPU: 1 UID: 0 PID: 5313 Comm: syz.4.561 Not tainted syzkaller #0 PREEMPT(voluntary) [ 72.343205][ T5313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 72.343295][ T5313] Call Trace: [ 72.343302][ T5313] [ 72.343310][ T5313] __dump_stack+0x1d/0x30 [ 72.343352][ T5313] dump_stack_lvl+0xe8/0x140 [ 72.343374][ T5313] dump_stack+0x15/0x1b [ 72.343417][ T5313] should_fail_ex+0x265/0x280 [ 72.343489][ T5313] should_fail+0xb/0x20 [ 72.343508][ T5313] should_fail_usercopy+0x1a/0x20 [ 72.343587][ T5313] _copy_from_user+0x1c/0xb0 [ 72.343661][ T5313] ___bpf_copy_key+0xa5/0x110 [ 72.343767][ T5313] map_update_elem+0x165/0x520 [ 72.343799][ T5313] __sys_bpf+0x571/0x7b0 [ 72.343908][ T5313] __x64_sys_bpf+0x41/0x50 [ 72.343930][ T5313] x64_sys_call+0x2aea/0x2ff0 [ 72.343986][ T5313] do_syscall_64+0xd2/0x200 [ 72.344014][ T5313] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 72.344072][ T5313] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 72.344099][ T5313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.344119][ T5313] RIP: 0033:0x7f4c5494ec29 [ 72.344133][ T5313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.344151][ T5313] RSP: 002b:00007f4c533af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 72.344204][ T5313] RAX: ffffffffffffffda RBX: 00007f4c54b95fa0 RCX: 00007f4c5494ec29 [ 72.344218][ T5313] RDX: 0000000000000020 RSI: 0000200000000400 RDI: 0000000000000002 [ 72.344232][ T5313] RBP: 00007f4c533af090 R08: 0000000000000000 R09: 0000000000000000 [ 72.344245][ T5313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.344256][ T5313] R13: 00007f4c54b96038 R14: 00007f4c54b95fa0 R15: 00007fff070bd008 [ 72.344273][ T5313] [ 72.593833][ T3408] usb 7-1: enqueue for inactive port 0 [ 72.599440][ T3408] usb 7-1: enqueue for inactive port 0 [ 72.693239][ T3408] vhci_hcd: vhci_device speed not set [ 72.775352][ T5328] loop2: detected capacity change from 0 to 512 [ 72.782248][ T5328] ext4: Bad value for 'max_dir_size_kb' [ 72.856625][ T5334] loop2: detected capacity change from 0 to 2048 [ 72.893960][ T5334] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.932676][ T5334] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 72.967189][ T5334] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 72.979497][ T5334] EXT4-fs (loop2): This should not happen!! Data will be lost [ 72.979497][ T5334] [ 72.989355][ T5334] EXT4-fs (loop2): Total free blocks count 0 [ 72.995375][ T5334] EXT4-fs (loop2): Free/Dirty block details [ 73.001344][ T5334] EXT4-fs (loop2): free_blocks=2415919104 [ 73.007079][ T5334] EXT4-fs (loop2): dirty_blocks=16 [ 73.012293][ T5334] EXT4-fs (loop2): Block reservation details [ 73.018288][ T5334] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 73.151042][ T5352] team_slave_0: entered promiscuous mode [ 73.156942][ T5352] team_slave_1: entered promiscuous mode [ 73.162969][ T5352] macsec1: entered promiscuous mode [ 73.168235][ T5352] team0: entered promiscuous mode [ 73.207003][ T5357] loop0: detected capacity change from 0 to 512 [ 73.215823][ T5357] EXT4-fs (loop0): orphan cleanup on readonly fs [ 73.222657][ T5357] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.580: bad orphan inode 13 [ 73.234976][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 73.234990][ T29] audit: type=1326 audit(1758514686.392:3215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5351 comm="syz.4.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5494ec29 code=0x7ffc0000 [ 73.239022][ T5357] ext4_test_bit(bit=12, block=18) = 1 [ 73.241571][ T29] audit: type=1326 audit(1758514686.402:3216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5351 comm="syz.4.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f4c5494ec29 code=0x7ffc0000 [ 73.264489][ T5357] is_bad_inode(inode)=0 [ 73.271927][ T29] audit: type=1326 audit(1758514686.432:3217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5351 comm="syz.4.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5494ec29 code=0x7ffc0000 [ 73.293036][ T5357] NEXT_ORPHAN(inode)=2130706432 [ 73.293048][ T5357] max_ino=32 [ 73.293056][ T5357] i_nlink=1 [ 73.294771][ T5357] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.297257][ T29] audit: type=1326 audit(1758514686.432:3218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5351 comm="syz.4.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5494ec29 code=0x7ffc0000 [ 73.367481][ T29] audit: type=1326 audit(1758514686.432:3219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5351 comm="syz.4.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f4c5494ec29 code=0x7ffc0000 [ 73.390922][ T29] audit: type=1326 audit(1758514686.432:3220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5351 comm="syz.4.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5494ec29 code=0x7ffc0000 [ 73.414255][ T29] audit: type=1326 audit(1758514686.432:3221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5351 comm="syz.4.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5494ec29 code=0x7ffc0000 [ 73.437600][ T29] audit: type=1326 audit(1758514686.432:3222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5351 comm="syz.4.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4c5494ec29 code=0x7ffc0000 [ 73.460930][ T29] audit: type=1326 audit(1758514686.432:3223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5351 comm="syz.4.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5494ec29 code=0x7ffc0000 [ 73.484273][ T29] audit: type=1326 audit(1758514686.432:3224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5351 comm="syz.4.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5494ec29 code=0x7ffc0000 [ 73.508422][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.527254][ T3313] ================================================================== [ 73.535369][ T3313] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru [ 73.543103][ T3313] [ 73.545429][ T3313] read-write to 0xffff888237c26f50 of 8 bytes by task 3295 on cpu 0: [ 73.553490][ T3313] find_get_block_common+0x4f0/0x960 [ 73.558792][ T3313] bdev_getblk+0x83/0x3b0 [ 73.563125][ T3313] __ext4_get_inode_loc+0x303/0x930 [ 73.568339][ T3313] ext4_reserve_inode_write+0xd7/0x250 [ 73.573802][ T3313] __ext4_mark_inode_dirty+0x8c/0x3f0 [ 73.579179][ T3313] ext4_dirty_inode+0x92/0xc0 [ 73.583861][ T3313] __mark_inode_dirty+0x15f/0x750 [ 73.588904][ T3313] file_update_time+0x288/0x2b0 [ 73.593772][ T3313] ext4_page_mkwrite+0x18c/0xb90 [ 73.598720][ T3313] do_wp_page+0xddb/0x24e0 [ 73.603146][ T3313] handle_mm_fault+0x77d/0x2c20 [ 73.608004][ T3313] do_user_addr_fault+0x636/0x1090 [ 73.613133][ T3313] exc_page_fault+0x62/0xa0 [ 73.617650][ T3313] asm_exc_page_fault+0x26/0x30 [ 73.622516][ T3313] [ 73.624859][ T3313] read to 0xffff888237c26f50 of 8 bytes by task 3313 on cpu 1: [ 73.632406][ T3313] has_bh_in_lru+0x35/0x1f0 [ 73.636928][ T3313] __lru_add_drain_all+0x234/0x3f0 [ 73.642057][ T3313] lru_add_drain_all+0x10/0x20 [ 73.646823][ T3313] invalidate_bdev+0x47/0x70 [ 73.651513][ T3313] ext4_put_super+0x624/0x7d0 [ 73.656200][ T3313] generic_shutdown_super+0xe6/0x210 [ 73.661493][ T3313] kill_block_super+0x2a/0x70 [ 73.666261][ T3313] ext4_kill_sb+0x42/0x80 [ 73.670609][ T3313] deactivate_locked_super+0x75/0x1c0 [ 73.675993][ T3313] deactivate_super+0x97/0xa0 [ 73.680803][ T3313] cleanup_mnt+0x269/0x2e0 [ 73.685238][ T3313] __cleanup_mnt+0x19/0x20 [ 73.689662][ T3313] task_work_run+0x12e/0x1a0 [ 73.694263][ T3313] exit_to_user_mode_loop+0xe4/0x100 [ 73.699556][ T3313] do_syscall_64+0x1d6/0x200 [ 73.704165][ T3313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.710068][ T3313] [ 73.712395][ T3313] value changed: 0x0000000000000000 -> 0xffff888106f39068 [ 73.719498][ T3313] [ 73.721822][ T3313] Reported by Kernel Concurrency Sanitizer on: [ 73.727978][ T3313] CPU: 1 UID: 0 PID: 3313 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 73.737873][ T3313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 73.747930][ T3313] ================================================================== [ 73.788906][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.