last executing test programs: 4.478651004s ago: executing program 0 (id=287): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 4.445025637s ago: executing program 0 (id=289): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_rr_get_interval(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 3.733121419s ago: executing program 3 (id=291): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 3.534853737s ago: executing program 0 (id=293): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000300)=[{0x200000000006, 0x3, 0x2, 0x7ffc0002}]}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@deltaction={0x2c, 0x31, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x851) socket$netlink(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="02030003130000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2400000004ff010000000000000000000000000001000000000000000002000100000000000000070c0100000005000500000000000a004e2400000009000000000000000000000000000000000600000000002000020013"], 0x98}, 0x1, 0x7}, 0x0) 3.512921069s ago: executing program 0 (id=294): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 2.812280211s ago: executing program 3 (id=298): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0), 0x0) 2.754259266s ago: executing program 3 (id=299): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c776664c92194336e6f3d", @ANYRESHEX=r2, @ANYBLOB=',k']) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00'}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) 2.643351026s ago: executing program 0 (id=302): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r4}, &(0x7f00000008c0), &(0x7f0000000880)=r5}, 0x20) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="0100000200373a4541062101a59ea940d2cb0b36b8f5020000a00000050000000000eb000000a5e5be21c44e328e68f3922af831e4e51bfb30f7788fd57e51bc464355bd646d037ccc16ddb08a7b3a697aedb66ddd793acf37119e61f502d8bbb016f701890700000068d945af468c1c9090c76906b94e0f27761c75e58c82da54d010078660684a4106855beaf5e813ed18aa4acabb5bee7f082d24a16b01fc91471eba59152e716af8776ab90ac48bcbee6570df22513808ecab7a9680aa613a56aa11bfa73af4c4e94b5cfc855f0e910186d7e68ac24f8b125140ac5f7f4819168ce1c25550c6773b41011999d8d9827757d96c5e8aa4617cc54c5e67060a92661f84e698d1fe3cee10a85882cbecb29f2a22535ac50e64d95ecbab66f54373b94475e05b79a0a61bc2ae1e", 0x12d, r3) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000005304"], 0x14}, 0x1, 0x0, 0x0, 0x24000841}, 0x4008840) r7 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x5, 0x401, 0x9, {0x0, 0xea60}, {0x77359400}, {0x0, 0x0, 0x1}, 0x1, @can={{}, 0x8, 0x0, 0x0, 0x0, "de4502a50a4f60ec"}}, 0x48}}, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='kfree\x00', r8}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000140)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@grpquota}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@grpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}]}, 0x80, 0x54f, &(0x7f0000000a00)="$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") r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r9) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r9, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r10, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x400}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20}, 0x4000010) r11 = fspick(r9, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r11, 0x7, 0x0, 0x0, 0x0) 2.205393844s ago: executing program 0 (id=305): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000010380)="d800000018007b29e00212ba0d8105040a601800fe0f041c067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262fbb9ad8ffd5e1cace81ccd40dd601edef3d9393f975307ff0ff0e97031e9f05e9f16e9c95115568624f7ab5000000000000000000000000000000000000000000007a630a5092", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1800180000000000000000000000000000009500"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00'}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) r5 = syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYRESOCT=r3, @ANYRES8=0x0, @ANYRESOCT=r5, @ANYRESHEX=r3, @ANYRESOCT=r0, @ANYRES8, @ANYRES32], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r6, 0x0, 0x3}, 0x18) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) 2.03494869s ago: executing program 1 (id=307): pselect6(0x40, &(0x7f0000000000)={0x8, 0x0, 0x47, 0x6e, 0xf, 0x88260000000, 0x6, 0x8}, &(0x7f0000000040)={0x2, 0x7, 0x7, 0xe94b, 0x7, 0x1, 0x3000, 0xd5e2}, &(0x7f0000000080)={0x5, 0x6, 0x4, 0x7f, 0x5, 0x1, 0x7f, 0x1}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x72cae81]}, 0x8}) io_pgetevents(0x0, 0x7, 0x5, &(0x7f0000000180)=[{}, {}, {}, {}, {}], &(0x7f0000000240), &(0x7f00000002c0)={&(0x7f0000000280)={[0x6]}, 0x8}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340)={0xffffffffffffffff}) r2 = syz_open_dev$loop(&(0x7f0000000380), 0xffffffff7fffffff, 0x1a1301) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000440)=0x60, 0x0) r4 = fspick(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r7 = syz_socket_connect_nvme_tcp() ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3ff}}, './file0\x00'}) ppoll(&(0x7f0000000540)=[{r0, 0x1723}, {r1, 0x102}, {r2, 0x6030}, {r3, 0x40}, {r4, 0x2}, {r5, 0x20}, {r6, 0x201}, {0xffffffffffffffff, 0x20}, {r7, 0x41}, {r8, 0x50e8}], 0xa, &(0x7f00000005c0)={0x77359400}, &(0x7f0000000600)={[0x9]}, 0x8) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000016c0)={r8, &(0x7f0000000640)="0afeac2bffef23f6537da908917e073867f36cd40491b937f16355ce241042b7147ab9a595f377deee900d047599d96eadabe8dbe40542451e58b91a87fb21aa11b80603bf794c576e9ed2bd2af55f72fdc7a3a01b3e83de852c", &(0x7f00000006c0)=""/4096}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002900)={&(0x7f0000001700)="ff373c67b6ce82ead24a7c47bb6aaa87014e27a12e5589f012448d13b84db88c4bbc936793843e067fd96a1a07f9c51d1bb03ae252e9678ade2d431ba1d45f325acc5b55c681728608d37e48a0b74f278a1349019b6d0ecdb56d92d498932de9f9ffadf62cf9dbe2e8262a93cea7b2ff7095bbd7c0c286ecd6", &(0x7f0000001780)=""/221, &(0x7f0000001880)="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", &(0x7f0000002880)="cf8fe9aea5f592bea22866f8cc4bd1454e3266fec3b956bd5a90298cdca74395deb5e985cdfbd892c982f63f68a85d4905ce2ba1f92566ec0f38451fe566f1808fb47fcd3815cf4d81e94d0d83fedeae0d751e7a39030cd5e8bd4ecbada27e4a489e855352da113d0d04d48fab60b69d021f", 0xf49, r8, 0x4}, 0x38) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) ioctl$USBDEVFS_DISCSIGNAL(r8, 0x8010550e, &(0x7f0000002980)={0x1, &(0x7f0000002940)="c14226b0d9930def22d345dcff39ce63267295184817a95c295d6f2c144871e965a62ebed9c4f6535e163817dae16c4e"}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002cc0)={&(0x7f0000002a00), 0xc, &(0x7f0000002c80)={&(0x7f0000002a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x1}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0xf, 0xc, "ac63ae1749205175350030"}]}, @NFT_MSG_DELSET={0x15c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_DESC={0x54, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffffff81}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_EXPRESSIONS={0xe8, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0xa4, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x94, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_BITWISE_DATA={0x78, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff7}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x28, 0x1, "435f49ca58af402678bf84b0d1a1264c5a8811d753ec15bb07e4aff06ec9b1aaf230de07"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1d4}}, 0x40008005) ioctl$GIO_CMAP(r8, 0x4b70, &(0x7f0000002d00)) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r8, &(0x7f00000035c0)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003580)={&(0x7f0000002d80)={0x78c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6e, 0x68}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0x5}, @device_b}}, @NL80211_ATTR_FRAME={0x481, 0x33, @mgmt_frame=@beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x81}, @broadcast, @broadcast, @initial, {0x0, 0x4d4}, @value=@ver_80211n={0x0, 0xf, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0x4, @random=0x1ff, 0x4404, @void, @void, @val={0x3, 0x1, 0x24}, @val={0x4, 0x6, {0x9, 0x4, 0x78, 0x40}}, @val={0x6, 0x2, 0x68a}, @val={0x5, 0x7b, {0x7, 0x5d, 0x0, "d2579c8f16dee5c3b44d33aa19085760f10919d96f1ea75aeb2640edbd812dc283c2fd65a8284c72d24dab87ee6836145cad4780cb723740b6e8446609c92d76668959cf542085078f673fd9725f96acc12c9f31411ecbafbd3cd022868c00952f0271b40f85f713690b2d7f59afdd1820c9eb9e8baccdad"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x9, 0xad, 0xd}}, @val={0x2d, 0x1a, {0x20, 0x3, 0x5, 0x0, {0x2000, 0x6, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2}, 0x1, 0x680, 0xff}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x1, 0x0, 0x2, 0x6, 0x20}}, @void, [{0xdd, 0xc2, "ea7b4264f34c78ae14dd013426694f41e47c10872f045eba9ed3accace916739745f14d5e99baf22f506ef99a6bdd8be3b19e0c71c0b1039c9a4254d0a7b7342b624f898775a3c2d41d2871e253d2863898e99de2a95564b9a8388ec3344b9adedecb3491876550be488701ab557bf8975bfd54ebc4cb0b6ef2d91a387188f35fcd68c4a720034cd6e8278bd885289572467af4d76827fce457322a5b533d6040be1753d5048ebefa6fcf6ea8398c1315acd090a86951065fdba6a15be0ed209ac9e"}, {0xdd, 0x81, "71ad7e50d4e574c1240f20b6afc1988208e0267ed2e3503425d639d07dd5bbef9a2d8aa0af03debf7adbf0ed1732c8e295026eff0dad91d708348f16151d8ff760ffae198dcf4f0900162469eb8af5e234561b2b39edd11c9c0073d6e4c3c908e7fad02ab15f0578eee115074285924001b116408954d32d97a40379e7dd051f5c"}, {0xdd, 0x68, "35767dea9a9151277ad945cb22744584a1c49137feac470be479bf1e1752d7795c074ae999ece1fa60be01f59f65bd42f8e41d61352331c0b575be93235579e365931bfc566cafbb0365f4894c7293631b44a45cba94a723d324ec1d99080ccedaa2251769425cfc"}, {0xdd, 0x90, "81574869b071ece8cc107c3f80f90f77bc8d018979ba56ced29dbdae414254c862151a3dd4d44741002d3dd31e6fac726a598c82279c296db4b61b89e2fbb44b4b1b85ca04dc366c2b7ccc6adecc9143d0882286d5eafa873f90c31c6ba8c37cd2f1ab2526d5db51d261410e35a79da5c25bc432928bdb3af45e4ba17d92c9a35c1f1e09b29e966f9923d4b39bdc4ec6"}, {0xdd, 0x8e, "eb3969e2841e1d35bcb14e8174e5a29057c6d669d0173048b06863f7c0db86233dd9d21795ab982dd4560080e9b0e4881dbe8faade492bb03c6ae4ed565fb62df644ba7b90010226f5d8e37a3bb0003e93676b3efc9410549a761bcdcdd1a597a35f077ce54b5ff3f474911e31d6507c699847adbbfe25a225cbdc3eaea3d22b2dde7296fc0882c03dd70201f09d"}, {0xdd, 0xc1, "daaddf2c08a31a926930dd825302c41d1b934e2332ee45709c0005afe16a673914fea55efccbcc3919d95cb3f965a9551a0edd4c9194685760c100e85ffbc21057f286fbfa157586e57390bd4cfda30b2b9fc3bd66d9a4c7a176a94fbb02e41805bf237f3e6d4628a69def0c3a415494869c3928c1c19dadf967fec20bfe562a7d70688fcc2a01ae7cd066d44b5eff97a1af6f56b2119007b25e025c7e1e7e075b3b073ac76c4ea392e923d662944a1b38bbe6168d052f1530f4305fe9c3d2719b"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x2b4, 0x33, @data_frame={@a_msdu=@type00={{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x2}, @broadcast, @device_b, @random="56e51b74bb4e", {0x4, 0x9}}, @a_msdu=[{@broadcast, @device_b, 0x12, "dc1d007748013fae53491c584ff8bd715872"}, {@device_a, @device_a, 0xd8, "fdf31d6248a595051afedd0a41ce59c607f6a95d0dd3e8517038bd7560843bcaadc15998b8c4b7c93a3cf2d3663a77df72e0c4eba3adc2374ee914a947850cb42f2cd73659f728235be83a27c00c5971bc0964a48e2b7c798aabce4b2e842c1478f8a8208f466d56404d39c5f783266d7d0142b8f320c5af4f03c4b8425011933675fc99120dcc355c8c7ff5809dfcbace2b803962b8cbf27fbaaa1350af0bdb7d25932d6ce1879a626a6225d8d6a1b8224fedb1a240980113a1c7f58cdc3e867bcad438801ebd38a7973bf8147f2a15a5c5a50746eaaff9"}, {@device_b, @device_a, 0x3d, "86189d16d2751c76e243e711b0d095bcf9a2658130fdd2f4f3c85201e51ae482b4a4d64f7d24fab23d10cde016ef48a9ef4a843885b8f142056e717244"}, {@broadcast, @broadcast, 0xac, "cc5d03ff2c1d4babeb5260d6f8d5465fe9aadac9fcb34a2de7a7bc8ff49784560b2d9613b3301449c23cfeca7e1081990a598e29a302931002800ee2a0d01526674f099af80ce58b3e7a730aca0d3fdc1e9b74f3be96162ce1e7fd9a366902aec5313b671c5cbac13b589fbec79c5a56d0b6b5b36ae03ab4692568c7c04a152499f3f7ec41d70fb132f042c6a8697a2d7c430df1bd2f1a5e580137b5c024707851287901ff41a9f2f704701f"}, {@broadcast, @device_a, 0x79, "8eb691418723b0a75c7dfacf4230b7e6fbbc53aa365c1ba3295f2d910ff7b33e8be2ac414c2e25dd8f33181597db5be456b156632492e332ed558382e769070c781e77451975387b6c2a7bab1575456b94624ea08819815fe0ca21c30992c692e7d1bf4d3b4b813fd10f1be5f5ea375f278e7af6d899637afa"}]}}]}, 0x78c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) timer_create(0x4, &(0x7f0000003780)={0x0, 0xb, 0x2, @thr={&(0x7f0000003600)="8f87cca387e1a3579b7b6d53893cdebf8df52d958fa575eb2d81039c719ea53afcad444bddf6526a31f51f075942fac928613686276def8b50a44e54590c33dc737b6d3fea86117bf6b663014e9a5ed4737e411bd231641e0f1923d4c88747f1", &(0x7f0000003680)="eb39937d334362f8a4bd94f6d4b54b0f5e26f083d64d57f863d6aedf12a722902a408aeb313969948a371381a3af07a7dca7a998070447a191225d310f66cc15885a6b675cf9826ebf2a9a4994de078f34423004b9b4331d40da6122f57d3e60f6ef39df4ff0baf5e0ba0addf3a30e4f931bf639305d2584f377e1895c4d30bdb1ae33b464a9f1bff6b0358723adce6886c7ec10b8b9a9571e12e12e0eefeb5887e6b369132731efa0710bde1e33005f9df30bd6ea3d4fa860f89104afe8899b3409b42b1968aac3972f7d599c3f7066b0f2100f31ba868eb0e143b1e1b990c5bc8d57dd23a2f530de03bd7e75fb9dbd90"}}, &(0x7f00000037c0)=0x0) clock_gettime(0x0, &(0x7f0000003800)={0x0, 0x0}) timer_settime(r9, 0x1, &(0x7f0000003840)={{r10, r11+60000000}}, &(0x7f0000003880)) r12 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000038c0), 0x0, 0x0) finit_module(r12, &(0x7f0000003900)='syz1\x00', 0x0) writev(r2, &(0x7f0000004b80)=[{&(0x7f0000003940)="f39bc0a3959f7e39688ede1b147d0a5d0d7765c0e22686a785e49ff0a5db3ce1d140169f90e6347bb44694d0b6ffec65277c64f0e33ec218b35ca700a25d889e1760eff83c4ea92231f94c927855cd4d712853d53b5acd419d90420f6219eba7156717e159ae", 0x66}, {&(0x7f00000039c0)="aa60d074b7b298773326a8e80e5a42dea0ca58592a2f0bfd3d3a490c5da69198e9b6d72b1816c47e9b5659e17db2e104997a87399c0d3c37576f8a79206acf51e61c9d97f4093c9853d8e43e92942026132c1177969b336d41e2469214b70558c54fada2f1681e2abfdc6ecc12556c0fb056393c130fdf04836a6118727c3518792a214f5112fe6a19a97387130d016cd6e0dba61fd204bbaaf6c93f5ade25282a62aafbd9af628e55d246ca038e09890ddd327521b1e7d088e5a5aa6838029d3b47a13f403911544f823272c24a538bcd6a68983e46debe19679e836072057aac00649599313dea26bf15e9bf25f6", 0xef}, {&(0x7f0000003ac0)="23415868756f0152945f278c07ab321b7a22e3bc9aaebc43bf8af2b5e352913c822da6c619658cbb8013506a54c54c5ff4f3a2be0d128d717d7911165ac4b52990384e0e9402df914592c1cda29bfa7a3492168fb04a87eb8b80b351c7", 0x5d}, {&(0x7f0000003b40)}, {&(0x7f0000003b80)="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", 0x1000}], 0x5) timer_create(0x4, &(0x7f0000004d40)={0x0, 0x25, 0x0, @thr={&(0x7f0000004c00)="7b43860c65f394eca36d64304f1409d25e046466942dfea973c18ac68bec6ec081b583209bb9bd3ececd441d668c8e1678dc8028c3ad2843a5f5a950891cec656d850b753aeb3c31f7652fc100d5f4d0e8254210e22fe538609c687213b3c04c348760f392640807851ee86275492042ad046c774f3b8d055573571c1d8b933e9ed8ba524b054910d60e8ffe6d71289fd9fa3ea10c0e8a8b40dd60a38ac4a0f5b5cc0d7b1d60a40dcc7a8d572310d6c86b7d7ff0b6dec8618242f428517f9455f4e65aa46a5f064b35d008a040da6511", &(0x7f0000004d00)="5f878581fa76e3cf16d7852f56757c0ade77d90fd53b871ace4210b1e4aeac9f83236f910b0ca388360b1d91b7"}}, &(0x7f0000004d80)) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000004dc0)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x80000000, 0x26b2, 0x0, 0x5, 0x1, 0x4, "0d16a0ac32885a7615f2c39ce02bdc2e01483de455309d22c17eb7299aa32595726a65839a1f25cabab94caecf89a072832995afcb3dd700532a4dfbda49ed1d", "75f5cbcb861ff214d5c2873154ad23d4248d8c628c0fdb9a8eff536b848a43ddd00e7ac575262aa24d31630cf37b87949c08daeabb6e9ae41fadbf8e5b8c9e6d", "ecd83e6c80b70fb0a56ef78b04dc2391f57d67759a3907f4965f5466c7caf86f", [0x2, 0x8]}}) select(0x40, &(0x7f0000004f00)={0x0, 0x623f, 0x3, 0x5, 0x9, 0x7, 0x3, 0xb}, &(0x7f0000004f40)={0xd, 0x56, 0x7, 0xffff, 0x1, 0x20, 0x2, 0x7}, &(0x7f0000004f80)={0x9b, 0xea5, 0x80, 0x3, 0x7fffffff, 0xb0a, 0x7fffffffffffffff, 0xffffffffffffffff}, &(0x7f0000005000)) 1.989676654s ago: executing program 4 (id=309): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x12}, @private1={0xfc, 0x1, '\x00', 0x1}, {[@routing={0x2f, 0x0, 0x1, 0x4}]}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x96bce70) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000"], 0x50) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x7, 0x0, 0xfffff8bc}, 0x10}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) 1.867675234s ago: executing program 3 (id=310): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mm_page_free\x00', r0, 0x0, 0xfff}, 0x18) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20002) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/mem_sleep', 0x200381, 0xe4) readahead(r2, 0x6, 0x8) r3 = fcntl$dupfd(r1, 0x0, r1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0xce8}, 0x23) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xff48, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) unshare(0x22020400) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r6 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r8}, 0x18) mknodat(0xffffffffffffffff, &(0x7f0000001740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000000), 0x3a664c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 1.765296914s ago: executing program 4 (id=312): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee00}}, './bus\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x11, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000280)={[{@grpquota}, {@nobarrier}, {@noload}]}, 0x1, 0x50a, &(0x7f0000001700)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8401) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20080e, &(0x7f0000000540)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@block_validity}, {@lazytime}, {@nombcache}, {@usrjquota}]}, 0x3, 0x446, &(0x7f0000000ec0)="$eJzs28tvG8UfAPDv2kn66+uXUJVHH0CgIMoradJSeuACAokDSEhwKMeQuFWp26AmSLSqICBUjqgSJy6IIxJ/ASe4IOCExBXuqFKFcmnhZLT2bmI7thunTlzqz0dae2Z3nJmvd8ee2YkDGFjj6UMSsSsifo+I0Vq2scB47enm8uXZv5cvzyZRqbz5V1Itd2P58mxeNH/dzjwzFFH4NIkDLepduHgpLVG6kOUnF8+9N7lw8dKzZ87NnC6dLp2fPnHi2NGp549PP9eTONO4buz/cP7gvlffvvr67Mmr7/z8bZLH3xRHj4x3Ovh4pdLj6vqjkD3vrtuXDPWpMXStWOumMVzt/6NRjNWTNxqvfNLXxgGbqlKpVO5rf3ipAtzFkuh3C4D+yL/o0/lvvm3R0OOOcP3F2gQojftmttWODK3MbYeb5re9NB4RJ5f++SrdYnPuQwAANPg+Hf8802r8V4j6+0L/z9ZQxiLinojYExHHI2JvRNwbUS17f0Q80GX9zYska8c/hWsbCmyd0vHfC9naVuP4Lx/9xVgxy+2uxj+cnDpTLh3J3pPDMbwtzU91qOOHl3/7vN2x+vFfuqX152PBrB3XhrY1vmZuZnHmdmKud/3jiP1DreJPVlYCkojYFxH7N1jHmae+Odju2K3j76AH60yVryOeqJ3/pWiKP5d0Xp+c/F+US0cm86tirV9+vfJGu/pvK/4eSM//jpbX/0r8Y0ltvfbsTLlcurDQzV//8sn08cofn7Wd02z0+h9J3mrY98HM4uKFqYiR5LVao+v3TzeVm14tn8Z/+FDr/r8nVt+JAxGRXsQPRsRDEfFw1vZHIuLRiDjU4V346aXH3t14/JsrjX+uq/O/mhiJ5j2tE8WzP37XUOlYN/Gn5/9YNXU427Oez7/1tKvbqxkAAAD+qwoRsSuSwsRKulCYmKj9D//e2FEozy8sPn1q/v3zc7XfCIzFcCG/0zVadz90KpvW5/nppvzR7L7xF8Xt1fzE7Hx5rt/Bw4Db2ab/p/4s9rt1wKbzey0YXPo/DC79HwaX/g+Dq0X/396PdgBbr9X3/0d9aAew9Zr6v2U/GCDm/zC4NtL/fWbA3aFjXx7ZunYAW2phe9z6R/ISEmsSUbgjmiGxSYl+fzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0xr8BAAD//4kK5gE=") openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r4, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) 1.396664756s ago: executing program 4 (id=316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 1.381317128s ago: executing program 2 (id=317): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x9) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) syz_open_dev$sg(&(0x7f00000001c0), 0x4, 0x200) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r1, @ANYBLOB="2c776664c92194336e6f3d", @ANYRESHEX=r3, @ANYBLOB=',k']) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="90000000100003050000", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0) 1.295623905s ago: executing program 2 (id=318): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x2, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa0}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x80}, 0x18) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r3) sendmsg$NFC_CMD_DEP_LINK_UP(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) removexattr(&(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000)=@known='security.apparmor\x00') 1.170226046s ago: executing program 1 (id=319): r0 = socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) getpid() r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000780)="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") close_range(r0, 0xffffffffffffffff, 0x0) 877.432262ms ago: executing program 3 (id=320): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES64, @ANYRES16], 0x1, 0x374, &(0x7f0000000f80)="$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") r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="96", 0x1, 0x0, 0x0, 0x0, r1}]) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100030010651fbe347b2c2b00000c00018008000100", @ANYRES16=r5], 0x20}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r4) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000800000009500"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x18) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000003"], 0x64}}, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r8, &(0x7f0000000240)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x6, 0xe, 0x0, 0x33}, @ipv6=@dccp_packet={0x4, 0x6, "f51d51", 0xf98, 0x21, 0x1, @empty, @empty, {[@dstopts={0x32, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0xa2}, @jumbo={0xc2, 0x4, 0x7}]}, @srh={0x2b, 0x6, 0x4, 0x3, 0xd8, 0x8, 0x5, [@private0={0xfc, 0x0, '\x00', 0xff}, @private2, @remote]}, @hopopts={0x0, 0x1c6, '\x00', [@generic={0x7, 0xe26, "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"}, @jumbo={0xc2, 0x4, 0x800}, @enc_lim={0x4, 0x1, 0xd}]}], {{0x4e21, 0x4e23, 0x4, 0x1, 0xc, 0x0, 0x0, 0x5, 0x6, "173153", 0x38, "74c149"}, "b943d731c580ae6e3d63da638a803f3a5e041e3666bd3e26ca94482a779f847f87c83abf3990c5cba82803b123fd5e51327cb48b29723e3ea6b15709d7d7eade99e05fefb305691cf7d2054ff535dc456ea165a108cbd86053c42f3e9f45829914ad28772779ad1f40f70b292c5165196e40e6938911f9b9be4f7814b2fd600cd8aa1d640d07f9b641b36502e2e4e8ab13d0cb38dc5babfeca5090b52681a0f30cadcc7bb61fd2c704de373a0608bb24ee28c3cd58d07c170c4d576e988e9b162c38736dd0ad47e52123f02635bc66fceab0960d5282e7aa3d82851871486dfcd6de11c143cb7ca0728b9eaa89a8942c8cc46f0b2391a5f0"}}}}, 0xfce) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x129, 0x870bd2c, 0x4, {0x0, 0x0, 0x0, r7, {0x8, 0x3}, {}, {0xffff, 0xb}}}, 0x24}}, 0x40004) 802.226599ms ago: executing program 1 (id=321): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000004000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x328, 0xffffffff, 0xc8, 0x0, 0xc8, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan0\x00', 'ip6gre0\x00', {}, {}, 0x73}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x60010000}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000200)={'ah\x00'}, &(0x7f0000000800)=0x1e) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000440)=0x1, 0x4) r5 = syz_open_dev$sg(&(0x7f0000000740), 0x0, 0x18b203) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r8, @ANYBLOB="059900f3ffffff111800128008000100677470000c000280050005"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendto$packet(r3, &(0x7f0000000140)='\x00', 0x1, 0x4c090, &(0x7f0000000400)={0x11, 0x86dd, r8, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 685.442039ms ago: executing program 2 (id=322): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x12}, @private1={0xfc, 0x1, '\x00', 0x1}, {[@routing={0x2f, 0x0, 0x1, 0x4}]}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x96bce70) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000"], 0x50) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x7, 0x0, 0xfffff8bc}, 0x10}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 684.047549ms ago: executing program 1 (id=323): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000300)=[{0x200000000006, 0x3, 0x2, 0x7ffc0002}]}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@deltaction={0x2c, 0x31, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x851) socket$netlink(0x10, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="02030003130000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2400000004ff010000000000000000000000000001000000000000000002000100000000000000070c0100000005000500000000000a004e2400000009000000000000000000000000000000000600000000002000020013"], 0x98}, 0x1, 0x7}, 0x0) 654.790992ms ago: executing program 1 (id=324): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (fail_nth: 2) 423.730272ms ago: executing program 4 (id=325): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4e, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x278, 0xd8, 0xc8, 0x8, 0xd8, 0x5803, 0x1a8, 0x2e8, 0x2e8, 0x1a8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [0x0, 0xffffffff], [0xff], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xd8, 0x0, {0x0, 0x2000000000000}}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0xffffffff}}}, {{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, [0xff, 0x0, 0xff000000], [0xff000000, 0x0, 0xff000000], 'ip_vti0\x00', 'rose0\x00', {}, {}, 0x11, 0x4, 0x2, 0x18}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d8) io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6930, 0x24, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[], 0xf0}}, 0x90) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x800498, 0x10000, 0x1, 0x163}, &(0x7f0000000dc0)=0x0, &(0x7f0000000240)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="01002bbd7000000000003600000008007300000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x3c}, 0x1, 0x0, 0x0, 0x4040811}, 0x2004e055) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x20, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x1}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r0, 0x847ba, 0x4c86, 0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='snd_soc_dapm_path\x00'}, 0x2f) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000280)='qgroup_num_dirty_extents\x00', r5, 0x0, 0x5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000000"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x8, &(0x7f0000000080)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x7}, 0x18) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00"/17], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x4802, 0x0) 369.335457ms ago: executing program 1 (id=326): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 368.080777ms ago: executing program 4 (id=327): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) symlinkat(&(0x7f0000000080)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00') unlinkat(r2, &(0x7f0000000040)='./file0\x00', 0x0) (fail_nth: 2) 358.300868ms ago: executing program 2 (id=328): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r1, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x15}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x2a}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x44080}, 0x4004) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x7, 0xe58f}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 135.859188ms ago: executing program 3 (id=329): pselect6(0x40, &(0x7f0000000000)={0x8, 0x0, 0x47, 0x6e, 0xf, 0x88260000000, 0x6, 0x8}, &(0x7f0000000040)={0x2, 0x7, 0x7, 0xe94b, 0x7, 0x1, 0x3000, 0xd5e2}, &(0x7f0000000080)={0x5, 0x6, 0x4, 0x7f, 0x5, 0x1, 0x7f, 0x1}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x72cae81]}, 0x8}) io_pgetevents(0x0, 0x7, 0x5, &(0x7f0000000180)=[{}, {}, {}, {}, {}], &(0x7f0000000240), &(0x7f00000002c0)={&(0x7f0000000280)={[0x6]}, 0x8}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340)={0xffffffffffffffff}) r2 = syz_open_dev$loop(&(0x7f0000000380), 0xffffffff7fffffff, 0x1a1301) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000440)=0x60, 0x0) r4 = fspick(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r7 = syz_socket_connect_nvme_tcp() ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3ff}}, './file0\x00'}) ppoll(&(0x7f0000000540)=[{r0, 0x1723}, {r1, 0x102}, {r2, 0x6030}, {r3, 0x40}, {r4, 0x2}, {r5, 0x20}, {r6, 0x201}, {0xffffffffffffffff, 0x20}, {r7, 0x41}, {r8, 0x50e8}], 0xa, &(0x7f00000005c0)={0x77359400}, &(0x7f0000000600)={[0x9]}, 0x8) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000016c0)={r8, &(0x7f0000000640)="0afeac2bffef23f6537da908917e073867f36cd40491b937f16355ce241042b7147ab9a595f377deee900d047599d96eadabe8dbe40542451e58b91a87fb21aa11b80603bf794c576e9ed2bd2af55f72fdc7a3a01b3e83de852c", &(0x7f00000006c0)=""/4096}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002900)={&(0x7f0000001700)="ff373c67b6ce82ead24a7c47bb6aaa87014e27a12e5589f012448d13b84db88c4bbc936793843e067fd96a1a07f9c51d1bb03ae252e9678ade2d431ba1d45f325acc5b55c681728608d37e48a0b74f278a1349019b6d0ecdb56d92d498932de9f9ffadf62cf9dbe2e8262a93cea7b2ff7095bbd7c0c286ecd6", &(0x7f0000001780)=""/221, &(0x7f0000001880)="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", &(0x7f0000002880)="cf8fe9aea5f592bea22866f8cc4bd1454e3266fec3b956bd5a90298cdca74395deb5e985cdfbd892c982f63f68a85d4905ce2ba1f92566ec0f38451fe566f1808fb47fcd3815cf4d81e94d0d83fedeae0d751e7a39030cd5e8bd4ecbada27e4a489e855352da113d0d04d48fab60b69d021f", 0xf49, r8, 0x4}, 0x38) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) ioctl$USBDEVFS_DISCSIGNAL(r8, 0x8010550e, &(0x7f0000002980)={0x1, &(0x7f0000002940)="c14226b0d9930def22d345dcff39ce63267295184817a95c295d6f2c144871e965a62ebed9c4f6535e163817dae16c4e"}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002cc0)={&(0x7f0000002a00), 0xc, &(0x7f0000002c80)={&(0x7f0000002a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x1}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0xf, 0xc, "ac63ae1749205175350030"}]}, @NFT_MSG_DELSET={0x15c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_DESC={0x54, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffffff81}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_EXPRESSIONS={0xe8, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0xa4, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x94, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_BITWISE_DATA={0x78, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff7}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x28, 0x1, "435f49ca58af402678bf84b0d1a1264c5a8811d753ec15bb07e4aff06ec9b1aaf230de07"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1d4}}, 0x40008005) ioctl$GIO_CMAP(r8, 0x4b70, &(0x7f0000002d00)) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r8, &(0x7f00000035c0)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003580)={&(0x7f0000002d80)={0x78c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6e, 0x68}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0x5}, @device_b}}, @NL80211_ATTR_FRAME={0x481, 0x33, @mgmt_frame=@beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x81}, @broadcast, @broadcast, @initial, {0x0, 0x4d4}, @value=@ver_80211n={0x0, 0xf, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0x4, @random=0x1ff, 0x4404, @void, @void, @val={0x3, 0x1, 0x24}, @val={0x4, 0x6, {0x9, 0x4, 0x78, 0x40}}, @val={0x6, 0x2, 0x68a}, @val={0x5, 0x7b, {0x7, 0x5d, 0x0, "d2579c8f16dee5c3b44d33aa19085760f10919d96f1ea75aeb2640edbd812dc283c2fd65a8284c72d24dab87ee6836145cad4780cb723740b6e8446609c92d76668959cf542085078f673fd9725f96acc12c9f31411ecbafbd3cd022868c00952f0271b40f85f713690b2d7f59afdd1820c9eb9e8baccdad"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x9, 0xad, 0xd}}, @val={0x2d, 0x1a, {0x20, 0x3, 0x5, 0x0, {0x2000, 0x6, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2}, 0x1, 0x680, 0xff}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x1, 0x0, 0x2, 0x6, 0x20}}, @void, [{0xdd, 0xc2, "ea7b4264f34c78ae14dd013426694f41e47c10872f045eba9ed3accace916739745f14d5e99baf22f506ef99a6bdd8be3b19e0c71c0b1039c9a4254d0a7b7342b624f898775a3c2d41d2871e253d2863898e99de2a95564b9a8388ec3344b9adedecb3491876550be488701ab557bf8975bfd54ebc4cb0b6ef2d91a387188f35fcd68c4a720034cd6e8278bd885289572467af4d76827fce457322a5b533d6040be1753d5048ebefa6fcf6ea8398c1315acd090a86951065fdba6a15be0ed209ac9e"}, {0xdd, 0x81, "71ad7e50d4e574c1240f20b6afc1988208e0267ed2e3503425d639d07dd5bbef9a2d8aa0af03debf7adbf0ed1732c8e295026eff0dad91d708348f16151d8ff760ffae198dcf4f0900162469eb8af5e234561b2b39edd11c9c0073d6e4c3c908e7fad02ab15f0578eee115074285924001b116408954d32d97a40379e7dd051f5c"}, {0xdd, 0x68, "35767dea9a9151277ad945cb22744584a1c49137feac470be479bf1e1752d7795c074ae999ece1fa60be01f59f65bd42f8e41d61352331c0b575be93235579e365931bfc566cafbb0365f4894c7293631b44a45cba94a723d324ec1d99080ccedaa2251769425cfc"}, {0xdd, 0x90, "81574869b071ece8cc107c3f80f90f77bc8d018979ba56ced29dbdae414254c862151a3dd4d44741002d3dd31e6fac726a598c82279c296db4b61b89e2fbb44b4b1b85ca04dc366c2b7ccc6adecc9143d0882286d5eafa873f90c31c6ba8c37cd2f1ab2526d5db51d261410e35a79da5c25bc432928bdb3af45e4ba17d92c9a35c1f1e09b29e966f9923d4b39bdc4ec6"}, {0xdd, 0x8e, "eb3969e2841e1d35bcb14e8174e5a29057c6d669d0173048b06863f7c0db86233dd9d21795ab982dd4560080e9b0e4881dbe8faade492bb03c6ae4ed565fb62df644ba7b90010226f5d8e37a3bb0003e93676b3efc9410549a761bcdcdd1a597a35f077ce54b5ff3f474911e31d6507c699847adbbfe25a225cbdc3eaea3d22b2dde7296fc0882c03dd70201f09d"}, {0xdd, 0xc1, "daaddf2c08a31a926930dd825302c41d1b934e2332ee45709c0005afe16a673914fea55efccbcc3919d95cb3f965a9551a0edd4c9194685760c100e85ffbc21057f286fbfa157586e57390bd4cfda30b2b9fc3bd66d9a4c7a176a94fbb02e41805bf237f3e6d4628a69def0c3a415494869c3928c1c19dadf967fec20bfe562a7d70688fcc2a01ae7cd066d44b5eff97a1af6f56b2119007b25e025c7e1e7e075b3b073ac76c4ea392e923d662944a1b38bbe6168d052f1530f4305fe9c3d2719b"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x2b4, 0x33, @data_frame={@a_msdu=@type00={{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x2}, @broadcast, @device_b, @random="56e51b74bb4e", {0x4, 0x9}}, @a_msdu=[{@broadcast, @device_b, 0x12, "dc1d007748013fae53491c584ff8bd715872"}, {@device_a, @device_a, 0xd8, "fdf31d6248a595051afedd0a41ce59c607f6a95d0dd3e8517038bd7560843bcaadc15998b8c4b7c93a3cf2d3663a77df72e0c4eba3adc2374ee914a947850cb42f2cd73659f728235be83a27c00c5971bc0964a48e2b7c798aabce4b2e842c1478f8a8208f466d56404d39c5f783266d7d0142b8f320c5af4f03c4b8425011933675fc99120dcc355c8c7ff5809dfcbace2b803962b8cbf27fbaaa1350af0bdb7d25932d6ce1879a626a6225d8d6a1b8224fedb1a240980113a1c7f58cdc3e867bcad438801ebd38a7973bf8147f2a15a5c5a50746eaaff9"}, {@device_b, @device_a, 0x3d, "86189d16d2751c76e243e711b0d095bcf9a2658130fdd2f4f3c85201e51ae482b4a4d64f7d24fab23d10cde016ef48a9ef4a843885b8f142056e717244"}, {@broadcast, @broadcast, 0xac, "cc5d03ff2c1d4babeb5260d6f8d5465fe9aadac9fcb34a2de7a7bc8ff49784560b2d9613b3301449c23cfeca7e1081990a598e29a302931002800ee2a0d01526674f099af80ce58b3e7a730aca0d3fdc1e9b74f3be96162ce1e7fd9a366902aec5313b671c5cbac13b589fbec79c5a56d0b6b5b36ae03ab4692568c7c04a152499f3f7ec41d70fb132f042c6a8697a2d7c430df1bd2f1a5e580137b5c024707851287901ff41a9f2f704701f"}, {@broadcast, @device_a, 0x79, "8eb691418723b0a75c7dfacf4230b7e6fbbc53aa365c1ba3295f2d910ff7b33e8be2ac414c2e25dd8f33181597db5be456b156632492e332ed558382e769070c781e77451975387b6c2a7bab1575456b94624ea08819815fe0ca21c30992c692e7d1bf4d3b4b813fd10f1be5f5ea375f278e7af6d899637afa"}]}}]}, 0x78c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) timer_create(0x4, &(0x7f0000003780)={0x0, 0xb, 0x2, @thr={&(0x7f0000003600)="8f87cca387e1a3579b7b6d53893cdebf8df52d958fa575eb2d81039c719ea53afcad444bddf6526a31f51f075942fac928613686276def8b50a44e54590c33dc737b6d3fea86117bf6b663014e9a5ed4737e411bd231641e0f1923d4c88747f1", &(0x7f0000003680)="eb39937d334362f8a4bd94f6d4b54b0f5e26f083d64d57f863d6aedf12a722902a408aeb313969948a371381a3af07a7dca7a998070447a191225d310f66cc15885a6b675cf9826ebf2a9a4994de078f34423004b9b4331d40da6122f57d3e60f6ef39df4ff0baf5e0ba0addf3a30e4f931bf639305d2584f377e1895c4d30bdb1ae33b464a9f1bff6b0358723adce6886c7ec10b8b9a9571e12e12e0eefeb5887e6b369132731efa0710bde1e33005f9df30bd6ea3d4fa860f89104afe8899b3409b42b1968aac3972f7d599c3f7066b0f2100f31ba868eb0e143b1e1b990c5bc8d57dd23a2f530de03bd7e75fb9dbd90"}}, &(0x7f00000037c0)=0x0) clock_gettime(0x0, &(0x7f0000003800)={0x0, 0x0}) timer_settime(r9, 0x1, &(0x7f0000003840)={{r10, r11+60000000}}, &(0x7f0000003880)) r12 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000038c0), 0x0, 0x0) finit_module(r12, &(0x7f0000003900)='syz1\x00', 0x0) writev(r2, &(0x7f0000004b80)=[{&(0x7f0000003940)="f39bc0a3959f7e39688ede1b147d0a5d0d7765c0e22686a785e49ff0a5db3ce1d140169f90e6347bb44694d0b6ffec65277c64f0e33ec218b35ca700a25d889e1760eff83c4ea92231f94c927855cd4d712853d53b5acd419d90420f6219eba7156717e159ae", 0x66}, {&(0x7f00000039c0)="aa60d074b7b298773326a8e80e5a42dea0ca58592a2f0bfd3d3a490c5da69198e9b6d72b1816c47e9b5659e17db2e104997a87399c0d3c37576f8a79206acf51e61c9d97f4093c9853d8e43e92942026132c1177969b336d41e2469214b70558c54fada2f1681e2abfdc6ecc12556c0fb056393c130fdf04836a6118727c3518792a214f5112fe6a19a97387130d016cd6e0dba61fd204bbaaf6c93f5ade25282a62aafbd9af628e55d246ca038e09890ddd327521b1e7d088e5a5aa6838029d3b47a13f403911544f823272c24a538bcd6a68983e46debe19679e836072057aac00649599313dea26bf15e9bf25f6", 0xef}, {&(0x7f0000003ac0)="23415868756f0152945f278c07ab321b7a22e3bc9aaebc43bf8af2b5e352913c822da6c619658cbb8013506a54c54c5ff4f3a2be0d128d717d7911165ac4b52990384e0e9402df914592c1cda29bfa7a3492168fb04a87eb8b80b351c7", 0x5d}, {&(0x7f0000003b40)}, {&(0x7f0000003b80)="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", 0x1000}], 0x5) timer_create(0x4, &(0x7f0000004d40)={0x0, 0x25, 0x0, @thr={&(0x7f0000004c00)="7b43860c65f394eca36d64304f1409d25e046466942dfea973c18ac68bec6ec081b583209bb9bd3ececd441d668c8e1678dc8028c3ad2843a5f5a950891cec656d850b753aeb3c31f7652fc100d5f4d0e8254210e22fe538609c687213b3c04c348760f392640807851ee86275492042ad046c774f3b8d055573571c1d8b933e9ed8ba524b054910d60e8ffe6d71289fd9fa3ea10c0e8a8b40dd60a38ac4a0f5b5cc0d7b1d60a40dcc7a8d572310d6c86b7d7ff0b6dec8618242f428517f9455f4e65aa46a5f064b35d008a040da6511", &(0x7f0000004d00)="5f878581fa76e3cf16d7852f56757c0ade77d90fd53b871ace4210b1e4aeac9f83236f910b0ca388360b1d91b7"}}, &(0x7f0000004d80)) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000004dc0)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x80000000, 0x26b2, 0x0, 0x5, 0x1, 0x4, "0d16a0ac32885a7615f2c39ce02bdc2e01483de455309d22c17eb7299aa32595726a65839a1f25cabab94caecf89a072832995afcb3dd700532a4dfbda49ed1d", "75f5cbcb861ff214d5c2873154ad23d4248d8c628c0fdb9a8eff536b848a43ddd00e7ac575262aa24d31630cf37b87949c08daeabb6e9ae41fadbf8e5b8c9e6d", "ecd83e6c80b70fb0a56ef78b04dc2391f57d67759a3907f4965f5466c7caf86f", [0x2, 0x8]}}) select(0x40, &(0x7f0000004f00)={0x0, 0x623f, 0x3, 0x5, 0x9, 0x7, 0x3, 0xb}, &(0x7f0000004f40)={0xd, 0x56, 0x7, 0xffff, 0x1, 0x20, 0x2, 0x7}, &(0x7f0000004f80)={0x9b, 0xea5, 0x80, 0x3, 0x7fffffff, 0xb0a, 0x7fffffffffffffff, 0xffffffffffffffff}, &(0x7f0000005000)) 135.500667ms ago: executing program 4 (id=330): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) r3 = syz_open_dev$sg(&(0x7f00000001c0), 0x4, 0x200) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c776664c92194336e6f3d", @ANYRESHEX=r2, @ANYBLOB=',k']) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0) 1.02326ms ago: executing program 2 (id=331): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5402"], 0x69) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 0s ago: executing program 2 (id=332): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0xfffffffffffffe42, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='xprtrdma_reply\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) fsmount(r1, 0x1, 0xf5) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2be, &(0x7f00000014c0)="$eJzs3MFrE1sUx/HzmrRJU9rkweOBgnrQjW6GNv4BGqQFMaDUpqgLYWonGjImZSZEImKzEbf+HcWlO0H9B7oRN+7dFUFw04U40plMm8S0pm3SxPb7gTJ3eu+vc9qm5dxC78adV4+LedfImxUZiauMiNRlUyS1NWr4p3Ed8cdj0qwulya+fz5z++69G5lsdnZedS6zcDmtqlPn3j159vr8h8rE4puptzFZT93f+Jb+sv7/+qmNnwuPCq4WXC2VK2rqUrlcMZdsS5cLbtFQvWVbpmtpoeRaTst83i6vrNTULC1PJlYcy3XVLNW0aNW0UtaKU1PzoVkoqWEYOpmQky3axZrc2vy8mdl12ov0tCL0Xqz1drzTGsfJ1DtP5tb6VRcAABhee/f/Qa+/e/+fXQyuPe7/Rej/+6TecveH/h/HguNkzETj57cV/T8AAAAAAAAAAAAAAAAAAAAAAH+DTc9Lep6XDK/hW0xE4iIS3g+6TvTHAb//VwZULnqs6R/34iL2y2qumguuwXwmLwWxxZJpScoP//XgRf3XRTCeu56dnVbfaONDbuVXq7mIfzaBnw+lgkwgzJ/9dybIq7zfylUb+VFJND8/LUn5r1M+O5veyYfHIaxWc2Ny8UJT3pCkfHwgZbFlua3+5zOq125m254/7q8DAAAAAOA4MHRbqnX/G5z9aPgL4uJv71vmg3ynvw+078+nO+7vo3K6myMqAQAAAADAobm1p0XTti3nAIOYiBwiflwHERmKMtoGV0VkCMo4qkFcRIL36EHiX7fjXaW8LtZERWTgX5Z9DAb9mwkAAABAr+00/fsIfXrRx4oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADh5uj0PLFz/21Q4sUe86XGRI/8EAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCHyKwAA//9OCxaA") r3 = inotify_init() close(0xffffffffffffffff) inotify_add_watch(r3, &(0x7f0000000200)='./file0\x00', 0x400008bf) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000007}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='kfree\x00', r2, 0x0, 0x6}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x29, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x40040) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x82044, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x3ffff) sendfile(r6, r5, 0x0, 0x7ffff000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r8, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): 9][ T3488] EXT4-fs: Ignoring removed orlov option [ 33.385086][ T360] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.396909][ T3314] veth0_vlan: entered promiscuous mode [ 33.407949][ T3314] veth1_vlan: entered promiscuous mode [ 33.430499][ T3314] veth0_macvtap: entered promiscuous mode [ 33.430649][ T3488] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.447488][ T3314] veth1_macvtap: entered promiscuous mode [ 33.474178][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 33.474196][ T29] audit: type=1400 audit(1768009772.688:105): avc: denied { prog_run } for pid=3492 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 33.499176][ T29] audit: type=1400 audit(1768009772.688:106): avc: denied { mount } for pid=3486 comm="syz.1.2" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.516452][ T3488] 9pnet_fd: Insufficient options for proto=fd [ 33.521916][ T360] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.545629][ T3320] veth0_macvtap: entered promiscuous mode [ 33.547836][ T3495] loop0: detected capacity change from 0 to 512 [ 33.560491][ T29] audit: type=1400 audit(1768009772.738:107): avc: denied { mounton } for pid=3486 comm="syz.1.2" path="/0/bus/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 33.583145][ T29] audit: type=1400 audit(1768009772.748:108): avc: denied { create } for pid=3486 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 33.603704][ T29] audit: type=1400 audit(1768009772.758:109): avc: denied { map_create } for pid=3492 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 33.622616][ T29] audit: type=1400 audit(1768009772.758:110): avc: denied { map_read map_write } for pid=3492 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 33.639301][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.642253][ T29] audit: type=1400 audit(1768009772.758:111): avc: denied { write } for pid=3492 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 33.669510][ T29] audit: type=1400 audit(1768009772.758:112): avc: denied { read write } for pid=3492 comm="syz.3.4" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 33.692728][ T29] audit: type=1400 audit(1768009772.758:113): avc: denied { open } for pid=3492 comm="syz.3.4" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 33.703641][ T3320] veth1_macvtap: entered promiscuous mode [ 33.717922][ T29] audit: type=1400 audit(1768009772.758:114): avc: denied { ioctl } for pid=3492 comm="syz.3.4" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x534e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 33.735013][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.754476][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.775625][ T3495] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.791328][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.798788][ T3495] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.822545][ T3500] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7'. [ 33.836446][ T431] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.845908][ T3500] netlink: 'syz.3.7': attribute type 1 has an invalid length. [ 33.853393][ T3500] netlink: 'syz.3.7': attribute type 1 has an invalid length. [ 33.861070][ T3500] netlink: 'syz.3.7': attribute type 1 has an invalid length. [ 33.879372][ T3502] loop1: detected capacity change from 0 to 1024 [ 33.887552][ T3502] EXT4-fs: Ignoring removed orlov option [ 33.894029][ T3500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7'. [ 33.905953][ T431] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.917025][ T3502] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.928035][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.961881][ T431] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.982154][ T3502] 9pnet_fd: Insufficient options for proto=fd [ 33.990217][ T431] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.030013][ T431] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.043901][ T3508] loop3: detected capacity change from 0 to 1024 [ 34.064513][ T431] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.086100][ T3508] EXT4-fs: Ignoring removed orlov option [ 34.103854][ T3512] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6'. [ 34.106084][ T431] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.113080][ T3512] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6'. [ 34.140573][ T3508] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.156817][ T3511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 34.174598][ T3511] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 34.182214][ T3511] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 34.189788][ T3511] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 34.208187][ T3508] 9pnet_fd: Insufficient options for proto=fd [ 34.216585][ T3511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 34.229993][ T3512] ip6gretap0: entered promiscuous mode [ 34.239548][ T3512] syz_tun: entered promiscuous mode [ 34.256391][ C1] hrtimer: interrupt took 51226 ns [ 34.265885][ T431] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.327313][ T3520] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8'. [ 34.336138][ T3520] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8'. [ 34.361454][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.650344][ T3528] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12'. [ 34.686193][ T3528] netlink: 'syz.4.12': attribute type 1 has an invalid length. [ 34.693803][ T3528] netlink: 'syz.4.12': attribute type 1 has an invalid length. [ 34.701561][ T3528] netlink: 'syz.4.12': attribute type 1 has an invalid length. [ 34.735428][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.745331][ T3531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12'. [ 34.792056][ T3533] loop1: detected capacity change from 0 to 512 [ 34.855695][ T3533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.907646][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.921842][ T3517] loop2: detected capacity change from 0 to 1024 [ 34.928960][ T3533] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.952236][ T3517] EXT4-fs: Ignoring removed bh option [ 34.975448][ T3517] ext4: Unknown parameter 'smackfsroot' [ 34.996483][ T3541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.055248][ T3541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.071235][ T3517] syz.2.9 uses obsolete (PF_INET,SOCK_PACKET) [ 35.182615][ T3547] loop2: detected capacity change from 0 to 1024 [ 35.217147][ T3547] ======================================================= [ 35.217147][ T3547] WARNING: The mand mount option has been deprecated and [ 35.217147][ T3547] and is ignored by this kernel. Remove the mand [ 35.217147][ T3547] option from the mount to silence this warning. [ 35.217147][ T3547] ======================================================= [ 35.295532][ T3547] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 35.319468][ T3547] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.9: Invalid block bitmap block 0 in block_group 0 [ 35.405270][ T3547] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.9: Failed to acquire dquot type 0 [ 35.480802][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.484091][ T3547] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm syz.2.9: Freeing blocks not in datazone - block = 0, count = 4096 [ 35.546189][ T3547] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.9: Invalid inode bitmap blk 0 in block_group 0 [ 35.565147][ T431] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:8: Failed to release dquot type 0 [ 35.600961][ T3547] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 35.611845][ T3547] EXT4-fs (loop2): 1 orphan inode deleted [ 35.620834][ T3547] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.654101][ T3517] vhci_hcd vhci_hcd.3: default hub control req: 4003 v0017 i0001 l0 [ 35.674042][ T3547] syz.2.9 (3547) used greatest stack depth: 9448 bytes left [ 35.729418][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.899350][ T3562] mmap: syz.0.19 (3562) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 36.164725][ T3567] xt_l2tp: v2 doesn't support IP mode [ 36.242783][ T3571] loop4: detected capacity change from 0 to 128 [ 36.981361][ T3587] loop0: detected capacity change from 0 to 128 [ 37.053546][ T3588] netlink: 'syz.1.25': attribute type 10 has an invalid length. [ 37.062263][ T3588] batman_adv: batadv0: Adding interface: veth1_vlan [ 37.069026][ T3588] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.117770][ T3588] batman_adv: batadv0: Interface activated: veth1_vlan [ 37.157786][ T3592] loop2: detected capacity change from 0 to 1024 [ 37.164460][ T3592] EXT4-fs: Ignoring removed orlov option [ 37.186294][ T3592] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.207750][ T3592] 9pnet_fd: Insufficient options for proto=fd [ 37.236841][ T3596] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 37.286323][ T3596] EXT4-fs error (device loop1): ext4_get_journal_inode:5849: comm syz.1.25: inode #1: comm syz.1.25: iget: illegal inode # [ 37.338264][ T3596] EXT4-fs (loop1): no journal found [ 37.343548][ T3596] EXT4-fs (loop1): can't get journal size [ 37.375390][ T3596] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 37.393657][ T3596] EXT4-fs (loop1): failed to initialize system zone (-22) [ 37.417586][ T3596] EXT4-fs (loop1): mount failed [ 37.484820][ T3588] Set syz1 is full, maxelem 65536 reached [ 37.594031][ T3595] EXT4-fs: Ignoring removed bh option [ 37.603715][ T3595] ext4: Unknown parameter 'smackfsroot' [ 38.013969][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.113918][ T3600] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 38.224097][ T3600] EXT4-fs (loop3): orphan cleanup on readonly fs [ 38.281578][ T3600] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 38.366347][ T3624] set_capacity_and_notify: 3 callbacks suppressed [ 38.366361][ T3624] loop9: detected capacity change from 0 to 7 [ 38.412363][ T3600] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 38.433041][ T3600] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #13: comm syz.3.29: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 38.458834][ T3624] Buffer I/O error on dev loop9, logical block 0, async page read [ 38.474363][ T3617] loop0: detected capacity change from 0 to 512 [ 38.533483][ T3617] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 38.563635][ T3600] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.29: couldn't read orphan inode 13 (err -117) [ 38.586089][ T3624] Buffer I/O error on dev loop9, logical block 0, async page read [ 38.594060][ T3624] loop9: unable to read partition table [ 38.616566][ T3617] EXT4-fs (loop0): orphan cleanup on readonly fs [ 38.641553][ T3617] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 38.674858][ T3624] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 38.674858][ T3624] ) failed (rc=-5) [ 38.708862][ T3617] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 38.716403][ T3600] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.738890][ T3617] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #13: comm syz.0.30: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 38.772629][ T3595] loop4: detected capacity change from 0 to 1024 [ 38.783468][ T3600] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 38.793243][ T3617] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.30: couldn't read orphan inode 13 (err -117) [ 38.822494][ T3617] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.835526][ T3600] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 38.848020][ T3617] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 38.858085][ T3617] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 38.866760][ T3600] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 38.875840][ T3595] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 38.943368][ T3617] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 38.961921][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.026453][ T3595] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.28: Invalid block bitmap block 0 in block_group 0 [ 39.060163][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.073077][ T3595] __quota_error: 76 callbacks suppressed [ 39.073108][ T3595] Quota error (device loop4): write_blk: dquota write failed [ 39.087441][ T3595] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 39.124922][ T3595] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.28: Failed to acquire dquot type 0 [ 39.277498][ T3595] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.28: Freeing blocks not in datazone - block = 0, count = 4096 [ 39.318349][ T3595] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.28: Invalid inode bitmap blk 0 in block_group 0 [ 39.447568][ T431] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-7 [ 39.456702][ T431] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:8: Failed to release dquot type 0 [ 39.487893][ T3595] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 39.571584][ T29] audit: type=1326 audit(1768009778.788:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3629 comm="syz.1.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428c95f749 code=0x7ffc0000 [ 39.614471][ T3595] EXT4-fs (loop4): 1 orphan inode deleted [ 39.669251][ T3595] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.799029][ T29] audit: type=1326 audit(1768009778.818:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3629 comm="syz.1.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428c95f749 code=0x7ffc0000 [ 39.822411][ T29] audit: type=1326 audit(1768009778.818:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3629 comm="syz.1.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428c95f749 code=0x7ffc0000 [ 39.845863][ T29] audit: type=1326 audit(1768009778.838:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3629 comm="syz.1.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428c95f749 code=0x7ffc0000 [ 39.869190][ T29] audit: type=1326 audit(1768009778.838:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3629 comm="syz.1.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f428c95f749 code=0x7ffc0000 [ 39.892603][ T29] audit: type=1326 audit(1768009778.918:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3629 comm="syz.1.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f428c95f783 code=0x7ffc0000 [ 39.915692][ T29] audit: type=1326 audit(1768009778.918:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3629 comm="syz.1.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f428c95f783 code=0x7ffc0000 [ 40.012930][ T3652] __nla_validate_parse: 4 callbacks suppressed [ 40.012946][ T3652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.38'. [ 40.038524][ T3651] loop0: detected capacity change from 0 to 128 [ 40.047035][ T3652] netlink: 'syz.3.38': attribute type 1 has an invalid length. [ 40.054634][ T3652] netlink: 'syz.3.38': attribute type 1 has an invalid length. [ 40.061328][ T3632] loop2: detected capacity change from 0 to 1024 [ 40.062439][ T3652] netlink: 'syz.3.38': attribute type 1 has an invalid length. [ 40.077564][ T3595] vhci_hcd vhci_hcd.3: default hub control req: 4003 v0017 i0001 l0 [ 40.114145][ T3632] EXT4-fs: Ignoring removed bh option [ 40.125833][ T3632] ext4: Unknown parameter 'smackfsroot' [ 40.187506][ T3595] syz.4.28 (3595) used greatest stack depth: 9160 bytes left [ 40.218799][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.339963][ T3663] netlink: 'syz.3.39': attribute type 10 has an invalid length. [ 40.347754][ T3663] netlink: 40 bytes leftover after parsing attributes in process `syz.3.39'. [ 40.369503][ T3654] loop3: detected capacity change from 0 to 512 [ 40.416285][ T3654] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 40.428272][ T3654] EXT4-fs error (device loop3): ext4_get_journal_inode:5849: comm syz.3.39: inode #1: comm syz.3.39: iget: illegal inode # [ 40.576216][ T3654] EXT4-fs (loop3): no journal found [ 40.581509][ T3654] EXT4-fs (loop3): can't get journal size [ 40.685312][ T3654] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 40.773144][ T3654] EXT4-fs (loop3): failed to initialize system zone (-22) [ 40.840362][ T3668] netlink: 'syz.1.42': attribute type 10 has an invalid length. [ 40.848126][ T3668] netlink: 40 bytes leftover after parsing attributes in process `syz.1.42'. [ 40.867380][ T3654] EXT4-fs (loop3): mount failed [ 40.986866][ T3679] loop1: detected capacity change from 0 to 512 [ 41.014579][ T3679] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 41.024520][ T3632] loop2: detected capacity change from 0 to 1024 [ 41.045005][ T3679] EXT4-fs error (device loop1): ext4_get_journal_inode:5849: comm syz.1.42: inode #1: comm syz.1.42: iget: illegal inode # [ 41.063634][ T3632] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 41.101272][ T3679] EXT4-fs (loop1): no journal found [ 41.106667][ T3679] EXT4-fs (loop1): can't get journal size [ 41.135263][ T3683] netlink: 'syz.3.44': attribute type 9 has an invalid length. [ 41.142452][ T3632] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.34: Invalid block bitmap block 0 in block_group 0 [ 41.156140][ T3683] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.44'. [ 41.167594][ T3679] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 41.197221][ T3632] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.34: Failed to acquire dquot type 0 [ 41.210830][ T3679] EXT4-fs (loop1): failed to initialize system zone (-22) [ 41.210873][ T3679] EXT4-fs (loop1): mount failed [ 41.228867][ T3632] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm syz.2.34: Freeing blocks not in datazone - block = 0, count = 4096 [ 41.249868][ T3632] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.34: Invalid inode bitmap blk 0 in block_group 0 [ 41.264977][ T37] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:2: Failed to release dquot type 0 [ 41.277028][ T3632] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 41.289486][ T3632] EXT4-fs (loop2): 1 orphan inode deleted [ 41.311649][ T3632] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.318349][ T3690] loop3: detected capacity change from 0 to 1024 [ 41.362521][ T3690] EXT4-fs: Ignoring removed orlov option [ 41.370273][ T3684] netlink: 'syz.4.45': attribute type 10 has an invalid length. [ 41.378034][ T3684] netlink: 40 bytes leftover after parsing attributes in process `syz.4.45'. [ 41.389429][ T3690] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.411819][ T3690] 9pnet_fd: Insufficient options for proto=fd [ 41.431424][ T3632] vhci_hcd vhci_hcd.3: default hub control req: 4003 v0017 i0001 l0 [ 41.461675][ T3690] netlink: 28 bytes leftover after parsing attributes in process `syz.3.46'. [ 41.470676][ T3690] netlink: 20 bytes leftover after parsing attributes in process `syz.3.46'. [ 41.481382][ T3688] loop4: detected capacity change from 0 to 512 [ 41.493718][ T3632] syz.2.34 (3632) used greatest stack depth: 9032 bytes left [ 41.523866][ T3688] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 41.553205][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.578216][ T3688] EXT4-fs error (device loop4): ext4_get_journal_inode:5849: comm syz.4.45: inode #1: comm syz.4.45: iget: illegal inode # [ 41.599296][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.633518][ T3701] FAULT_INJECTION: forcing a failure. [ 41.633518][ T3701] name failslab, interval 1, probability 0, space 0, times 1 [ 41.646289][ T3701] CPU: 0 UID: 0 PID: 3701 Comm: syz.2.48 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.646322][ T3701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 41.646342][ T3701] Call Trace: [ 41.646355][ T3701] [ 41.646365][ T3701] __dump_stack+0x1d/0x30 [ 41.646423][ T3701] dump_stack_lvl+0x95/0xd0 [ 41.646444][ T3701] dump_stack+0x15/0x1b [ 41.646465][ T3701] should_fail_ex+0x265/0x280 [ 41.646493][ T3701] should_failslab+0x8c/0xb0 [ 41.646520][ T3701] kmem_cache_alloc_noprof+0x69/0x4b0 [ 41.646614][ T3701] ? security_file_alloc+0x32/0x100 [ 41.646647][ T3701] security_file_alloc+0x32/0x100 [ 41.646679][ T3701] init_file+0x5c/0x1c0 [ 41.646768][ T3701] alloc_empty_file+0x8b/0x200 [ 41.646801][ T3701] path_openat+0x63/0x23b0 [ 41.646834][ T3701] ? _parse_integer_limit+0x170/0x190 [ 41.646854][ T3701] ? _parse_integer+0x27/0x40 [ 41.646871][ T3701] ? kstrtoull+0x111/0x140 [ 41.646914][ T3701] ? kstrtouint+0x76/0xc0 [ 41.646938][ T3701] do_filp_open+0x109/0x230 [ 41.647001][ T3701] do_sys_openat2+0xa6/0x150 [ 41.647036][ T3701] __x64_sys_openat+0xf2/0x120 [ 41.647073][ T3701] x64_sys_call+0x2b07/0x3000 [ 41.647097][ T3701] do_syscall_64+0xca/0x2b0 [ 41.647171][ T3701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.647257][ T3701] RIP: 0033:0x7f94713edf90 [ 41.647276][ T3701] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 41.647297][ T3701] RSP: 002b:00007f946fe4ef10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 41.647364][ T3701] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f94713edf90 [ 41.647380][ T3701] RDX: 0000000000000002 RSI: 00007f946fe4efa0 RDI: 00000000ffffff9c [ 41.647396][ T3701] RBP: 00007f946fe4efa0 R08: 0000000000000000 R09: 0000000000000000 [ 41.647438][ T3701] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 41.647453][ T3701] R13: 00007f9471646038 R14: 00007f9471645fa0 R15: 00007ffe3b73e908 [ 41.647471][ T3701] [ 41.697161][ T3688] EXT4-fs (loop4): no journal found [ 41.862680][ T3688] EXT4-fs (loop4): can't get journal size [ 41.879511][ T3703] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.932672][ T3711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.51'. [ 41.943149][ T3703] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.960238][ T3711] netlink: 'syz.0.51': attribute type 1 has an invalid length. [ 41.968088][ T3711] netlink: 'syz.0.51': attribute type 1 has an invalid length. [ 41.975753][ T3711] netlink: 'syz.0.51': attribute type 1 has an invalid length. [ 42.005021][ T3688] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 42.018798][ T3711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.51'. [ 42.035423][ T3703] +}[@ (3703) used greatest stack depth: 8648 bytes left [ 42.057085][ T3688] EXT4-fs (loop4): failed to initialize system zone (-22) [ 42.064429][ T3688] EXT4-fs (loop4): mount failed [ 42.099531][ T3711] team0: Port device team_slave_0 removed [ 42.129910][ T3684] Set syz1 is full, maxelem 65536 reached [ 42.301753][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.592100][ T3725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.54'. [ 42.777764][ T3737] SELinux: policydb table sizes (8,7) do not match mine (6,7) [ 42.808436][ T3737] SELinux: failed to load policy [ 42.911901][ T3739] EXT4-fs: Ignoring removed orlov option [ 42.995390][ T3739] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.034375][ T3727] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 43.063342][ T3739] 9pnet_fd: Insufficient options for proto=fd [ 43.094598][ T3727] EXT4-fs (loop0): orphan cleanup on readonly fs [ 43.132985][ T3727] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 43.171102][ T3739] bridge0: entered promiscuous mode [ 43.195459][ T3739] ip6gretap0: entered promiscuous mode [ 43.219405][ T3727] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 43.237565][ T3739] debugfs: 'hsr1' already exists in 'hsr' [ 43.243345][ T3739] Cannot create hsr debugfs directory [ 43.264830][ T3727] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #13: comm syz.0.55: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 43.308289][ T3733] EXT4-fs: Ignoring removed bh option [ 43.361386][ T3733] ext4: Unknown parameter 'smackfsroot' [ 43.385186][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.395423][ T3727] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.55: couldn't read orphan inode 13 (err -117) [ 43.457834][ T3727] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.480065][ T3746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.501869][ T3746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.526765][ T3748] xt_l2tp: v2 doesn't support IP mode [ 43.558181][ T3727] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 43.574835][ T3727] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 43.589684][ T3755] set_capacity_and_notify: 4 callbacks suppressed [ 43.589705][ T3755] loop1: detected capacity change from 0 to 1024 [ 43.605555][ T3727] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 43.683789][ T3755] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 43.745390][ T3755] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.58: Invalid block bitmap block 0 in block_group 0 [ 43.771344][ T3755] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.58: Failed to acquire dquot type 0 [ 43.783591][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.807796][ T3755] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.58: Freeing blocks not in datazone - block = 0, count = 4096 [ 43.822864][ T3755] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.58: Invalid inode bitmap blk 0 in block_group 0 [ 43.836014][ T12] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 0 [ 43.836320][ T3755] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 43.859036][ T3755] EXT4-fs (loop1): 1 orphan inode deleted [ 43.865670][ T3755] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.947033][ T3733] vhci_hcd vhci_hcd.3: default hub control req: 4003 v0017 i0001 l0 [ 44.154755][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 44.176963][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.215005][ T3764] FAULT_INJECTION: forcing a failure. [ 44.215005][ T3764] name failslab, interval 1, probability 0, space 0, times 0 [ 44.227710][ T3764] CPU: 1 UID: 0 PID: 3764 Comm: syz.0.66 Not tainted syzkaller #0 PREEMPT(voluntary) [ 44.227744][ T3764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 44.227806][ T3764] Call Trace: [ 44.227815][ T3764] [ 44.227825][ T3764] __dump_stack+0x1d/0x30 [ 44.227895][ T3764] dump_stack_lvl+0x95/0xd0 [ 44.227923][ T3764] dump_stack+0x15/0x1b [ 44.227948][ T3764] should_fail_ex+0x265/0x280 [ 44.227977][ T3764] should_failslab+0x8c/0xb0 [ 44.228030][ T3764] kmem_cache_alloc_noprof+0x69/0x4b0 [ 44.228058][ T3764] ? skb_clone+0x151/0x1f0 [ 44.228095][ T3764] skb_clone+0x151/0x1f0 [ 44.228138][ T3764] __netlink_deliver_tap+0x2c9/0x500 [ 44.228189][ T3764] netlink_unicast+0x66b/0x690 [ 44.228277][ T3764] netlink_sendmsg+0x58b/0x6b0 [ 44.228321][ T3764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 44.228370][ T3764] __sock_sendmsg+0x145/0x180 [ 44.228396][ T3764] ____sys_sendmsg+0x31e/0x4a0 [ 44.228501][ T3764] ___sys_sendmsg+0x17b/0x1d0 [ 44.228553][ T3764] __x64_sys_sendmsg+0xd4/0x160 [ 44.228595][ T3764] x64_sys_call+0x17ba/0x3000 [ 44.228690][ T3764] do_syscall_64+0xca/0x2b0 [ 44.228734][ T3764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.228762][ T3764] RIP: 0033:0x7fe2c9ccf749 [ 44.228780][ T3764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.228832][ T3764] RSP: 002b:00007fe2c872f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 44.228915][ T3764] RAX: ffffffffffffffda RBX: 00007fe2c9f25fa0 RCX: 00007fe2c9ccf749 [ 44.228931][ T3764] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 44.229011][ T3764] RBP: 00007fe2c872f090 R08: 0000000000000000 R09: 0000000000000000 [ 44.229023][ T3764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.229037][ T3764] R13: 00007fe2c9f26038 R14: 00007fe2c9f25fa0 R15: 00007ffcda318e78 [ 44.229061][ T3764] [ 44.296471][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 44.296586][ T29] audit: type=1326 audit(1768009783.458:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.1.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428c95f749 code=0x7ffc0000 [ 44.400373][ T3759] loop4: detected capacity change from 0 to 1024 [ 44.400548][ T29] audit: type=1326 audit(1768009783.458:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.1.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428c95f749 code=0x7ffc0000 [ 44.525491][ T3759] EXT4-fs: Ignoring removed bh option [ 44.548184][ T3759] ext4: Unknown parameter 'smackfsroot' [ 44.708341][ T3780] loop1: detected capacity change from 0 to 512 [ 44.725842][ T3780] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 44.737466][ T3780] EXT4-fs error (device loop1): ext4_get_journal_inode:5849: comm syz.1.70: inode #1: comm syz.1.70: iget: illegal inode # [ 44.751245][ T3780] EXT4-fs (loop1): no journal found [ 44.756656][ T3780] EXT4-fs (loop1): can't get journal size [ 44.762817][ T3780] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 44.772414][ T3780] EXT4-fs (loop1): failed to initialize system zone (-22) [ 44.779786][ T3780] EXT4-fs (loop1): mount failed [ 44.841965][ T3786] loop2: detected capacity change from 0 to 128 [ 44.867823][ T3786] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 44.880234][ T3786] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 44.891659][ T29] audit: type=1400 audit(1768009784.108:266): avc: denied { watch watch_reads } for pid=3785 comm="syz.2.71" path="/10/file0/file0" dev="loop2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 44.918695][ T3786] IPv6: NLM_F_CREATE should be specified when creating new route [ 44.961160][ T29] audit: type=1326 audit(1768009784.148:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3785 comm="syz.2.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94713ef749 code=0x7ffc0000 [ 44.984373][ T29] audit: type=1326 audit(1768009784.148:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3785 comm="syz.2.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f94713ef749 code=0x7ffc0000 [ 45.007607][ T29] audit: type=1326 audit(1768009784.148:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3785 comm="syz.2.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f94713ef783 code=0x7ffc0000 [ 45.030687][ T29] audit: type=1326 audit(1768009784.148:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3785 comm="syz.2.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f94713ee1ff code=0x7ffc0000 [ 45.053765][ T29] audit: type=1326 audit(1768009784.148:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3785 comm="syz.2.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f94713ef7d7 code=0x7ffc0000 [ 45.077262][ T29] audit: type=1326 audit(1768009784.148:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3785 comm="syz.2.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f94713edf90 code=0x7ffc0000 [ 45.100497][ T29] audit: type=1326 audit(1768009784.148:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3785 comm="syz.2.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f94713ee3aa code=0x7ffc0000 [ 45.456760][ T3759] loop4: detected capacity change from 0 to 1024 [ 45.523447][ T3759] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 45.575594][ T3759] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.63: Invalid block bitmap block 0 in block_group 0 [ 45.613141][ T3759] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.63: Failed to acquire dquot type 0 [ 45.635864][ T3793] xt_l2tp: v2 doesn't support IP mode [ 45.666098][ T3759] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.63: Freeing blocks not in datazone - block = 0, count = 4096 [ 45.699283][ T431] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 45.704427][ T3798] loop1: detected capacity change from 0 to 1024 [ 45.722167][ T3759] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.63: Invalid inode bitmap blk 0 in block_group 0 [ 45.758047][ T3798] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 45.772563][ T431] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:8: Failed to release dquot type 0 [ 45.777612][ T3759] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 45.802188][ T3806] loop3: detected capacity change from 0 to 1024 [ 45.818012][ T3804] __nla_validate_parse: 6 callbacks suppressed [ 45.818025][ T3804] netlink: 9 bytes leftover after parsing attributes in process `syz.2.76'. [ 45.833434][ T3804] netlink: 9 bytes leftover after parsing attributes in process `syz.2.76'. [ 45.846263][ T3806] EXT4-fs: Ignoring removed orlov option [ 45.847609][ T3798] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.864582][ T3759] EXT4-fs (loop4): 1 orphan inode deleted [ 45.877512][ T3798] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 45.896330][ T3806] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.910404][ T3806] 9pnet_fd: Insufficient options for proto=fd [ 45.918550][ T3802] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 45.946163][ T3759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.968695][ T3798] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2857: Unable to expand inode 2. Delete some EAs or run e2fsck. [ 45.986390][ T3798] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.74: missing EA_INODE flag [ 45.999546][ T3798] EXT4-fs (loop1): Remounting filesystem read-only [ 46.014481][ T3802] $Hÿ: renamed from bond0 (while UP) [ 46.036751][ T3802] $Hÿ: entered promiscuous mode [ 46.041877][ T3802] bond_slave_0: entered promiscuous mode [ 46.047782][ T3802] bond_slave_1: entered promiscuous mode [ 46.072401][ T3759] vhci_hcd vhci_hcd.3: default hub control req: 4003 v0017 i0001 l0 [ 46.082793][ T3819] netlink: 28 bytes leftover after parsing attributes in process `syz.3.77'. [ 46.091642][ T3819] netlink: 20 bytes leftover after parsing attributes in process `syz.3.77'. [ 46.347345][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.391483][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.602889][ T3831] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.655481][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.671266][ T3835] loop4: detected capacity change from 0 to 1024 [ 46.694964][ T3835] EXT4-fs: Ignoring removed orlov option [ 46.732260][ T3835] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.748469][ T3835] 9pnet_fd: Insufficient options for proto=fd [ 46.776670][ T3835] netlink: 96 bytes leftover after parsing attributes in process `syz.4.84'. [ 46.838772][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.898408][ T3839] validate_nla: 1 callbacks suppressed [ 46.898428][ T3839] netlink: 'syz.0.83': attribute type 10 has an invalid length. [ 46.911737][ T3839] netlink: 40 bytes leftover after parsing attributes in process `syz.0.83'. [ 46.921698][ T3839] batman_adv: batadv0: Adding interface: veth1_vlan [ 46.928533][ T3839] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.955148][ T3839] batman_adv: batadv0: Interface activated: veth1_vlan [ 46.967338][ T3852] loop2: detected capacity change from 0 to 128 [ 47.006918][ T53] Bluetooth: hci0: Frame reassembly failed (-84) [ 47.057599][ T3839] loop0: detected capacity change from 0 to 512 [ 47.068846][ T3839] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 47.084592][ T3839] EXT4-fs error (device loop0): ext4_get_journal_inode:5849: comm syz.0.83: inode #1: comm syz.0.83: iget: illegal inode # [ 47.146458][ T3839] EXT4-fs (loop0): no journal found [ 47.151749][ T3839] EXT4-fs (loop0): can't get journal size [ 47.197841][ T3839] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 47.248508][ T3839] EXT4-fs (loop0): failed to initialize system zone (-22) [ 47.256281][ T3839] EXT4-fs (loop0): mount failed [ 47.345851][ T3850] Set syz1 is full, maxelem 65536 reached [ 47.598587][ T3857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.625866][ T3861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.90'. [ 47.628577][ T3857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.741371][ T3872] FAULT_INJECTION: forcing a failure. [ 47.741371][ T3872] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 47.754515][ T3872] CPU: 0 UID: 0 PID: 3872 Comm: syz.2.93 Not tainted syzkaller #0 PREEMPT(voluntary) [ 47.754544][ T3872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 47.754618][ T3872] Call Trace: [ 47.754626][ T3872] [ 47.754633][ T3872] __dump_stack+0x1d/0x30 [ 47.754657][ T3872] dump_stack_lvl+0x95/0xd0 [ 47.754684][ T3872] dump_stack+0x15/0x1b [ 47.754709][ T3872] should_fail_ex+0x265/0x280 [ 47.754771][ T3872] should_fail+0xb/0x20 [ 47.754794][ T3872] should_fail_usercopy+0x1a/0x20 [ 47.754823][ T3872] _copy_from_user+0x1c/0xb0 [ 47.754857][ T3872] memdup_user+0x5e/0xd0 [ 47.754953][ T3872] strndup_user+0x68/0xb0 [ 47.754995][ T3872] perf_ioctl+0x58a/0x12e0 [ 47.755034][ T3872] ? ioctl_has_perm+0x287/0x2a0 [ 47.755101][ T3872] ? do_vfs_ioctl+0x866/0xe10 [ 47.755149][ T3872] ? selinux_file_ioctl+0x308/0x3a0 [ 47.755185][ T3872] ? __fget_files+0x184/0x1c0 [ 47.755249][ T3872] ? __pfx_perf_ioctl+0x10/0x10 [ 47.755343][ T3872] __se_sys_ioctl+0xce/0x140 [ 47.755379][ T3872] __x64_sys_ioctl+0x43/0x50 [ 47.755469][ T3872] x64_sys_call+0x14b0/0x3000 [ 47.755498][ T3872] do_syscall_64+0xca/0x2b0 [ 47.755542][ T3872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.755642][ T3872] RIP: 0033:0x7f94713ef749 [ 47.755660][ T3872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.755682][ T3872] RSP: 002b:00007f946fe4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 47.755705][ T3872] RAX: ffffffffffffffda RBX: 00007f9471645fa0 RCX: 00007f94713ef749 [ 47.755721][ T3872] RDX: 0000200000000340 RSI: 0000000040082406 RDI: 0000000000000006 [ 47.755753][ T3872] RBP: 00007f946fe4f090 R08: 0000000000000000 R09: 0000000000000000 [ 47.755790][ T3872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.755805][ T3872] R13: 00007f9471646038 R14: 00007f9471645fa0 R15: 00007ffe3b73e908 [ 47.755891][ T3872] [ 48.053485][ T3877] xt_l2tp: v2 doesn't support IP mode [ 48.230501][ T3883] tipc: Started in network mode [ 48.235682][ T3883] tipc: Node identity 4a4245d4b6fe, cluster identity 4711 [ 48.242936][ T3883] tipc: Enabled bearer , priority 0 [ 48.431253][ T3885] EXT4-fs: Ignoring removed orlov option [ 48.483337][ T3885] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.519596][ T3885] 9pnet_fd: Insufficient options for proto=fd [ 48.540141][ T3885] netlink: 96 bytes leftover after parsing attributes in process `syz.0.97'. [ 48.617628][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.802634][ T3898] netlink: 'syz.0.100': attribute type 10 has an invalid length. [ 48.810476][ T3898] netlink: 40 bytes leftover after parsing attributes in process `syz.0.100'. [ 48.823834][ T3898] set_capacity_and_notify: 1 callbacks suppressed [ 48.823852][ T3898] loop0: detected capacity change from 0 to 512 [ 48.841681][ T3898] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 48.850618][ T3898] EXT4-fs error (device loop0): ext4_get_journal_inode:5849: comm syz.0.100: inode #1: comm syz.0.100: iget: illegal inode # [ 48.864244][ T3898] EXT4-fs (loop0): no journal found [ 48.869546][ T3898] EXT4-fs (loop0): can't get journal size [ 48.876888][ T3898] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 48.886589][ T3898] EXT4-fs (loop0): failed to initialize system zone (-22) [ 48.893951][ T3898] EXT4-fs (loop0): mount failed [ 48.927004][ T3880] tipc: Resetting bearer [ 48.940028][ T3880] tipc: Disabling bearer [ 49.015680][ T3904] FAULT_INJECTION: forcing a failure. [ 49.015680][ T3904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.028906][ T3904] CPU: 1 UID: 0 PID: 3904 Comm: syz.2.102 Not tainted syzkaller #0 PREEMPT(voluntary) [ 49.029013][ T3904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 49.029034][ T3904] Call Trace: [ 49.029042][ T3904] [ 49.029052][ T3904] __dump_stack+0x1d/0x30 [ 49.029083][ T3904] dump_stack_lvl+0x95/0xd0 [ 49.029111][ T3904] dump_stack+0x15/0x1b [ 49.029135][ T3904] should_fail_ex+0x265/0x280 [ 49.029157][ T3904] should_fail+0xb/0x20 [ 49.029268][ T3904] should_fail_usercopy+0x1a/0x20 [ 49.029294][ T3904] _copy_from_iter+0xcf/0xe70 [ 49.029317][ T3904] ? __alloc_frozen_pages_noprof+0x18f/0x360 [ 49.029352][ T3904] copy_page_from_iter+0x178/0x2a0 [ 49.029412][ T3904] ? anon_pipe_write+0x51/0xb30 [ 49.029441][ T3904] anon_pipe_write+0x541/0xb30 [ 49.029462][ T3904] ? anon_pipe_write+0x51/0xb30 [ 49.029490][ T3904] ? __pfx_anon_pipe_write+0x10/0x10 [ 49.029517][ T3904] vfs_write+0x52a/0x960 [ 49.029666][ T3904] ksys_write+0xda/0x1a0 [ 49.029695][ T3904] __x64_sys_write+0x40/0x50 [ 49.029731][ T3904] x64_sys_call+0x2847/0x3000 [ 49.029757][ T3904] do_syscall_64+0xca/0x2b0 [ 49.029802][ T3904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.029829][ T3904] RIP: 0033:0x7f94713ef749 [ 49.029844][ T3904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.029886][ T3904] RSP: 002b:00007f946fe4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 49.029961][ T3904] RAX: ffffffffffffffda RBX: 00007f9471645fa0 RCX: 00007f94713ef749 [ 49.030057][ T3904] RDX: 00000000200002e6 RSI: 00002000000002c0 RDI: 0000000000000006 [ 49.030072][ T3904] RBP: 00007f946fe4f090 R08: 0000000000000000 R09: 0000000000000000 [ 49.030087][ T3904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.030098][ T3904] R13: 00007f9471646038 R14: 00007f9471645fa0 R15: 00007ffe3b73e908 [ 49.030117][ T3904] [ 49.230100][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 49.244794][ T3558] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 49.413228][ T3911] loop2: detected capacity change from 0 to 128 [ 49.550633][ T3913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.105'. [ 49.601002][ T3915] xt_l2tp: v2 doesn't support IP mode [ 49.623240][ T3915] gtp0: entered promiscuous mode [ 49.666155][ T3919] loop0: detected capacity change from 0 to 1024 [ 49.679452][ T3919] EXT4-fs: Ignoring removed orlov option [ 49.694306][ T3919] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.708283][ T3919] 9pnet_fd: Insufficient options for proto=fd [ 49.743412][ T3923] FAULT_INJECTION: forcing a failure. [ 49.743412][ T3923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.756683][ T3923] CPU: 1 UID: 0 PID: 3923 Comm: syz.3.109 Not tainted syzkaller #0 PREEMPT(voluntary) [ 49.756715][ T3923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 49.756731][ T3923] Call Trace: [ 49.756740][ T3923] [ 49.756777][ T3923] __dump_stack+0x1d/0x30 [ 49.756833][ T3923] dump_stack_lvl+0x95/0xd0 [ 49.756861][ T3923] dump_stack+0x15/0x1b [ 49.756887][ T3923] should_fail_ex+0x265/0x280 [ 49.756921][ T3923] should_fail+0xb/0x20 [ 49.756969][ T3923] should_fail_usercopy+0x1a/0x20 [ 49.757000][ T3923] _copy_from_user+0x1c/0xb0 [ 49.757097][ T3923] ___sys_sendmsg+0xc1/0x1d0 [ 49.757142][ T3923] __x64_sys_sendmsg+0xd4/0x160 [ 49.757185][ T3923] x64_sys_call+0x17ba/0x3000 [ 49.757235][ T3923] do_syscall_64+0xca/0x2b0 [ 49.757352][ T3923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.757403][ T3923] RIP: 0033:0x7f93c7bcf749 [ 49.757422][ T3923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.757441][ T3923] RSP: 002b:00007f93c662f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.757566][ T3923] RAX: ffffffffffffffda RBX: 00007f93c7e25fa0 RCX: 00007f93c7bcf749 [ 49.757583][ T3923] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 49.757597][ T3923] RBP: 00007f93c662f090 R08: 0000000000000000 R09: 0000000000000000 [ 49.757610][ T3923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.757625][ T3923] R13: 00007f93c7e26038 R14: 00007f93c7e25fa0 R15: 00007ffc5f60f198 [ 49.757648][ T3923] [ 49.940158][ T3926] netlink: 'syz.4.110': attribute type 1 has an invalid length. [ 49.947973][ T3926] netlink: 'syz.4.110': attribute type 1 has an invalid length. [ 49.955850][ T3926] netlink: 'syz.4.110': attribute type 1 has an invalid length. [ 49.982447][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 49.982462][ T29] audit: type=1400 audit(1768009789.198:318): avc: denied { create } for pid=3927 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 50.016014][ T29] audit: type=1400 audit(1768009789.198:319): avc: denied { connect } for pid=3928 comm="syz.1.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.035686][ T29] audit: type=1400 audit(1768009789.198:320): avc: denied { name_connect } for pid=3928 comm="syz.1.108" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 50.106091][ T3940] loop1: detected capacity change from 0 to 1024 [ 50.114490][ T3940] EXT4-fs: Ignoring removed orlov option [ 50.129894][ T3940] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.143897][ T3940] 9pnet_fd: Insufficient options for proto=fd [ 50.226880][ T3937] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 50.238554][ T3937] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 50.261718][ T3937] loop3: detected capacity change from 0 to 2048 [ 50.272094][ T29] audit: type=1400 audit(1768009789.438:321): avc: denied { read } for pid=3936 comm="syz.3.113" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 50.295029][ T29] audit: type=1400 audit(1768009789.438:322): avc: denied { open } for pid=3936 comm="syz.3.113" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 50.318293][ T29] audit: type=1326 audit(1768009789.438:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3936 comm="syz.3.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93c7bcf749 code=0x7ffc0000 [ 50.341604][ T29] audit: type=1326 audit(1768009789.438:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3936 comm="syz.3.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93c7bcf749 code=0x7ffc0000 [ 50.364996][ T29] audit: type=1326 audit(1768009789.438:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3936 comm="syz.3.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f93c7bcf749 code=0x7ffc0000 [ 50.388346][ T29] audit: type=1400 audit(1768009789.438:326): avc: denied { ioctl } for pid=3936 comm="syz.3.113" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 50.413114][ T29] audit: type=1326 audit(1768009789.438:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3936 comm="syz.3.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93c7bcf749 code=0x7ffc0000 [ 50.455835][ T3946] netlink: 'syz.2.116': attribute type 1 has an invalid length. [ 50.463606][ T3946] netlink: 'syz.2.116': attribute type 1 has an invalid length. [ 50.471326][ T3946] netlink: 'syz.2.116': attribute type 1 has an invalid length. [ 50.498464][ T3947] bridge0: entered promiscuous mode [ 50.505032][ T3947] bridge0: left promiscuous mode [ 50.547257][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.704993][ T3950] FAULT_INJECTION: forcing a failure. [ 50.704993][ T3950] name failslab, interval 1, probability 0, space 0, times 0 [ 50.717987][ T3950] CPU: 1 UID: 0 PID: 3950 Comm: syz.0.117 Not tainted syzkaller #0 PREEMPT(voluntary) [ 50.718021][ T3950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 50.718032][ T3950] Call Trace: [ 50.718039][ T3950] [ 50.718047][ T3950] __dump_stack+0x1d/0x30 [ 50.718076][ T3950] dump_stack_lvl+0x95/0xd0 [ 50.718174][ T3950] dump_stack+0x15/0x1b [ 50.718193][ T3950] should_fail_ex+0x265/0x280 [ 50.718290][ T3950] should_failslab+0x8c/0xb0 [ 50.718356][ T3950] kmem_cache_alloc_noprof+0x69/0x4b0 [ 50.718420][ T3950] ? __kernfs_iattrs+0x69/0x1a0 [ 50.718446][ T3950] __kernfs_iattrs+0x69/0x1a0 [ 50.718478][ T3950] kernfs_vfs_xattr_set+0x47/0xb0 [ 50.718510][ T3950] ? __pfx_kernfs_vfs_xattr_set+0x10/0x10 [ 50.718571][ T3950] __vfs_removexattr+0x2c7/0x2f0 [ 50.718596][ T3950] __vfs_removexattr_locked+0x181/0x1c0 [ 50.718628][ T3950] vfs_removexattr+0x75/0x170 [ 50.718658][ T3950] path_removexattrat+0x2c6/0x570 [ 50.718734][ T3950] __x64_sys_removexattr+0x38/0x50 [ 50.718875][ T3950] x64_sys_call+0x1d14/0x3000 [ 50.718902][ T3950] do_syscall_64+0xca/0x2b0 [ 50.719031][ T3950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.719059][ T3950] RIP: 0033:0x7fe2c9ccf749 [ 50.719076][ T3950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.719093][ T3950] RSP: 002b:00007fe2c872f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c5 [ 50.719150][ T3950] RAX: ffffffffffffffda RBX: 00007fe2c9f25fa0 RCX: 00007fe2c9ccf749 [ 50.719162][ T3950] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 00002000000002c0 [ 50.719174][ T3950] RBP: 00007fe2c872f090 R08: 0000000000000000 R09: 0000000000000000 [ 50.719187][ T3950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.719203][ T3950] R13: 00007fe2c9f26038 R14: 00007fe2c9f25fa0 R15: 00007ffcda318e78 [ 50.719226][ T3950] [ 50.925452][ T3937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.057956][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.068690][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.083413][ T3956] loop0: detected capacity change from 0 to 512 [ 51.095953][ T3954] loop2: detected capacity change from 0 to 128 [ 51.125524][ T3956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.203749][ T3956] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.237801][ T3969] __nla_validate_parse: 7 callbacks suppressed [ 51.237820][ T3969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.119'. [ 51.271677][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.291496][ T3972] xt_TCPMSS: Only works on TCP SYN packets [ 51.412396][ T3954] syz.2.118: attempt to access beyond end of device [ 51.412396][ T3954] loop2: rw=2049, sector=169, nr_sectors = 24 limit=128 [ 51.427719][ T3975] loop0: detected capacity change from 0 to 512 [ 51.456585][ T3954] syz.2.118: attempt to access beyond end of device [ 51.456585][ T3954] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 51.480942][ T3975] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 51.494032][ T3975] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 51.504010][ T3975] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 51.544830][ T3954] syz.2.118: attempt to access beyond end of device [ 51.544830][ T3954] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 51.576933][ T3954] syz.2.118: attempt to access beyond end of device [ 51.576933][ T3954] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 51.612394][ T3954] syz.2.118: attempt to access beyond end of device [ 51.612394][ T3954] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 51.656508][ T3954] syz.2.118: attempt to access beyond end of device [ 51.656508][ T3954] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 51.685792][ T3954] syz.2.118: attempt to access beyond end of device [ 51.685792][ T3954] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 51.718176][ T3954] syz.2.118: attempt to access beyond end of device [ 51.718176][ T3954] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 51.884870][ T3954] syz.2.118: attempt to access beyond end of device [ 51.884870][ T3954] loop2: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 51.913481][ T3987] loop0: detected capacity change from 0 to 1024 [ 51.940671][ T3987] EXT4-fs: Ignoring removed orlov option [ 51.959971][ T3987] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.985131][ T3954] syz.2.118: attempt to access beyond end of device [ 51.985131][ T3954] loop2: rw=2049, sector=329, nr_sectors = 8 limit=128 [ 52.005475][ T3987] 9pnet_fd: Insufficient options for proto=fd [ 52.024886][ T3991] loop3: detected capacity change from 0 to 128 [ 52.064041][ T3992] netlink: 28 bytes leftover after parsing attributes in process `syz.0.128'. [ 52.073066][ T3992] netlink: 28 bytes leftover after parsing attributes in process `syz.0.128'. [ 52.273866][ T3967] EXT4-fs: Ignoring removed bh option [ 52.283154][ T3967] ext4: Unknown parameter 'smackfsroot' [ 52.316959][ T3996] Zero length message leads to an empty skb [ 52.406162][ T4002] vhci_hcd vhci_hcd.3: default hub control req: 4003 v0017 i0001 l0 [ 52.560770][ T4007] FAULT_INJECTION: forcing a failure. [ 52.560770][ T4007] name failslab, interval 1, probability 0, space 0, times 0 [ 52.573589][ T4007] CPU: 1 UID: 0 PID: 4007 Comm: syz.1.132 Not tainted syzkaller #0 PREEMPT(voluntary) [ 52.573619][ T4007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 52.573635][ T4007] Call Trace: [ 52.573642][ T4007] [ 52.573649][ T4007] __dump_stack+0x1d/0x30 [ 52.573756][ T4007] dump_stack_lvl+0x95/0xd0 [ 52.573780][ T4007] dump_stack+0x15/0x1b [ 52.573799][ T4007] should_fail_ex+0x265/0x280 [ 52.573821][ T4007] should_failslab+0x8c/0xb0 [ 52.573909][ T4007] kmem_cache_alloc_noprof+0x69/0x4b0 [ 52.573937][ T4007] ? security_inode_alloc+0x37/0x100 [ 52.574023][ T4007] security_inode_alloc+0x37/0x100 [ 52.574047][ T4007] inode_init_always_gfp+0x4b7/0x500 [ 52.574069][ T4007] ? __pfx_sock_alloc_inode+0x10/0x10 [ 52.574161][ T4007] alloc_inode+0x58/0x170 [ 52.574179][ T4007] __sock_create+0x120/0x580 [ 52.574199][ T4007] ? mutex_unlock+0x4f/0x90 [ 52.574226][ T4007] ? fput+0x8f/0xc0 [ 52.574266][ T4007] __sys_socket+0xb0/0x180 [ 52.574294][ T4007] __x64_sys_socket+0x3f/0x50 [ 52.574322][ T4007] x64_sys_call+0x127b/0x3000 [ 52.574384][ T4007] do_syscall_64+0xca/0x2b0 [ 52.574419][ T4007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.574511][ T4007] RIP: 0033:0x7f428c95f749 [ 52.574528][ T4007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.574551][ T4007] RSP: 002b:00007f428b3c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 52.574574][ T4007] RAX: ffffffffffffffda RBX: 00007f428cbb5fa0 RCX: 00007f428c95f749 [ 52.574591][ T4007] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 52.574652][ T4007] RBP: 00007f428b3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 52.574663][ T4007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.574679][ T4007] R13: 00007f428cbb6038 R14: 00007f428cbb5fa0 R15: 00007ffd0693efc8 [ 52.574739][ T4007] [ 52.767079][ T4007] socket: no more sockets [ 52.947979][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.991916][ T4013] tmpfs: Bad value for 'mpol' [ 53.050760][ T4018] EXT4-fs: Ignoring removed orlov option [ 53.067461][ T4018] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.081837][ T4013] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.095848][ T4018] 9pnet_fd: Insufficient options for proto=fd [ 53.103790][ T4018] netlink: 28 bytes leftover after parsing attributes in process `syz.3.136'. [ 53.112752][ T4018] netlink: 60 bytes leftover after parsing attributes in process `syz.3.136'. [ 53.127581][ T4013] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.164537][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.224031][ T4025] xt_l2tp: v2 doesn't support IP mode [ 53.238131][ T4019] pim6reg: entered allmulticast mode [ 53.266371][ T4025] gtp0: entered promiscuous mode [ 53.294018][ T4019] SELinux: Context system_u:object_r:kvm_device_t:s0 is not valid (left unmapped). [ 53.353601][ T4013] pim6reg: left allmulticast mode [ 53.448657][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.520683][ T4045] EXT4-fs: Ignoring removed orlov option [ 53.541194][ T4045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.652855][ T4045] 9pnet_fd: Insufficient options for proto=fd [ 53.786087][ T4054] netlink: 28 bytes leftover after parsing attributes in process `syz.2.143'. [ 53.795201][ T4054] netlink: 28 bytes leftover after parsing attributes in process `syz.2.143'. [ 54.317638][ T4058] set_capacity_and_notify: 5 callbacks suppressed [ 54.317659][ T4058] loop0: detected capacity change from 0 to 512 [ 54.353445][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.458402][ T4058] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 54.470865][ T4058] EXT4-fs (loop0): orphan cleanup on readonly fs [ 54.502618][ T4058] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 54.540260][ T4058] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 54.720579][ T4058] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #13: comm syz.0.144: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 54.881654][ T4058] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.144: couldn't read orphan inode 13 (err -117) [ 54.897171][ T4042] loop1: detected capacity change from 0 to 1024 [ 55.139402][ T4058] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 55.153740][ T4042] EXT4-fs: Ignoring removed bh option [ 55.293583][ T4042] ext4: Unknown parameter 'smackfsroot' [ 55.359890][ T4075] loop3: detected capacity change from 0 to 128 [ 55.492997][ T4058] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 55.561651][ T4058] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 55.680410][ T4078] loop1: detected capacity change from 0 to 1024 [ 55.729105][ T4078] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 55.746013][ T4058] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 55.806866][ T4078] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.142: Invalid block bitmap block 0 in block_group 0 [ 56.001748][ T4078] __quota_error: 287 callbacks suppressed [ 56.001764][ T4078] Quota error (device loop1): write_blk: dquota write failed [ 56.015025][ T4078] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 56.036369][ T4090] gtp0: entered promiscuous mode [ 56.275491][ T4078] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.142: Failed to acquire dquot type 0 [ 56.289375][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.315647][ T4078] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.142: Freeing blocks not in datazone - block = 0, count = 4096 [ 56.329307][ T4078] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.142: Invalid inode bitmap blk 0 in block_group 0 [ 56.342205][ T53] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-7 [ 56.351237][ T53] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 0 [ 56.356796][ T4078] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 56.386555][ T4078] EXT4-fs (loop1): 1 orphan inode deleted [ 56.392852][ T4078] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.423964][ T4096] netlink: 'syz.2.153': attribute type 21 has an invalid length. [ 56.440553][ T29] audit: type=1400 audit(1768009795.658:615): avc: denied { create } for pid=4097 comm="syz.0.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 56.464942][ T29] audit: type=1400 audit(1768009795.658:616): avc: denied { ioctl } for pid=4097 comm="syz.0.152" path="socket:[6384]" dev="sockfs" ino=6384 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 56.489362][ T29] audit: type=1400 audit(1768009795.658:617): avc: denied { write } for pid=4097 comm="syz.0.152" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 56.499016][ T4100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.152'. [ 56.508841][ T29] audit: type=1400 audit(1768009795.668:618): avc: denied { read } for pid=4097 comm="syz.0.152" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 56.531897][ T4042] vhci_hcd vhci_hcd.3: default hub control req: 4003 v0017 i0001 l0 [ 56.547975][ T4100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.555420][ T4100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.563190][ T4100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.570684][ T4100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.579787][ T4100] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 56.586916][ T4100] batman_adv: batadv0: Removing interface: veth1_vlan [ 56.600939][ T29] audit: type=1400 audit(1768009795.818:619): avc: denied { sys_admin } for pid=4097 comm="syz.0.152" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 56.628707][ T4102] loop4: detected capacity change from 0 to 512 [ 56.676445][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.687853][ T4102] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.702970][ T4102] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.959954][ T29] audit: type=1400 audit(1768009796.178:620): avc: denied { mount } for pid=4118 comm="syz.1.157" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.056951][ T4116] vlan0: entered promiscuous mode [ 57.062146][ T4116] macvtap0: entered promiscuous mode [ 57.162029][ T4123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.393436][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.578369][ T29] audit: type=1326 audit(1768009796.768:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4126 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94713ef749 code=0x7ffc0000 [ 57.691640][ T4129] loop4: detected capacity change from 0 to 1024 [ 57.762751][ T4129] EXT4-fs: Ignoring removed orlov option [ 57.807476][ T4129] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.822812][ T4129] 9pnet_fd: Insufficient options for proto=fd [ 57.880776][ T4123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.022682][ T4138] netlink: 28 bytes leftover after parsing attributes in process `syz.4.161'. [ 58.031646][ T4138] netlink: 28 bytes leftover after parsing attributes in process `syz.4.161'. [ 58.079034][ T4138] ip6gretap0: entered promiscuous mode [ 58.132401][ T4138] syz_tun: entered promiscuous mode [ 58.145573][ T4142] loop0: detected capacity change from 0 to 1024 [ 58.162114][ T4138] debugfs: 'hsr1' already exists in 'hsr' [ 58.168186][ T4138] Cannot create hsr debugfs directory [ 58.203210][ T4142] EXT4-fs: Ignoring removed orlov option [ 58.248718][ T4142] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.310873][ T4142] 9pnet_fd: Insufficient options for proto=fd [ 58.444387][ T4144] netlink: 28 bytes leftover after parsing attributes in process `syz.0.165'. [ 58.453672][ T4144] netlink: 28 bytes leftover after parsing attributes in process `syz.0.165'. [ 58.495874][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.633122][ T4149] loop3: detected capacity change from 0 to 128 [ 58.664764][ T4150] loop2: detected capacity change from 0 to 1024 [ 58.679070][ T4150] EXT4-fs: Ignoring removed orlov option [ 58.689835][ T4146] hub 2-0:1.0: USB hub found [ 58.694650][ T4146] hub 2-0:1.0: 8 ports detected [ 58.721862][ T4150] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.739585][ T4150] 9pnet_fd: Insufficient options for proto=fd [ 58.819477][ T4154] loop4: detected capacity change from 0 to 4096 [ 58.835465][ T4154] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.849307][ T4157] netlink: 28 bytes leftover after parsing attributes in process `syz.2.167'. [ 58.858309][ T4157] netlink: 28 bytes leftover after parsing attributes in process `syz.2.167'. [ 58.871392][ T4157] bridge0: entered promiscuous mode [ 58.878440][ T4157] ip6gretap0: entered promiscuous mode [ 58.885711][ T4157] debugfs: 'hsr1' already exists in 'hsr' [ 58.891497][ T4157] Cannot create hsr debugfs directory [ 58.986114][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.066375][ T4161] netlink: 14 bytes leftover after parsing attributes in process `syz.4.169'. [ 59.119339][ T4161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.167911][ T4161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 59.206534][ T4161] bond0 (unregistering): Released all slaves [ 59.313269][ T4163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.170'. [ 59.329222][ T4163] netlink: 'syz.0.170': attribute type 1 has an invalid length. [ 59.336967][ T4163] netlink: 'syz.0.170': attribute type 1 has an invalid length. [ 59.344642][ T4163] netlink: 'syz.0.170': attribute type 1 has an invalid length. [ 59.382339][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.394920][ T4165] random: crng reseeded on system resumption [ 59.424954][ T4165] ip6gre1: entered promiscuous mode [ 59.463678][ T4170] netlink: 12 bytes leftover after parsing attributes in process `syz.4.171'. [ 59.495708][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.558940][ T4170] netlink: 'syz.4.171': attribute type 1 has an invalid length. [ 59.566773][ T4170] netlink: 'syz.4.171': attribute type 1 has an invalid length. [ 59.574482][ T4170] netlink: 'syz.4.171': attribute type 1 has an invalid length. [ 59.624610][ T4185] ipt_REJECT: TCP_RESET invalid for non-tcp [ 59.656576][ T4191] loop2: detected capacity change from 0 to 1024 [ 59.663378][ T4191] EXT4-fs: Ignoring removed orlov option [ 59.672415][ T4191] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.690343][ T4191] 9pnet_fd: Insufficient options for proto=fd [ 59.763953][ T4198] netlink: 'syz.0.182': attribute type 13 has an invalid length. [ 59.781293][ T4195] bridge0: port 3(batadv1) entered blocking state [ 59.787976][ T4195] bridge0: port 3(batadv1) entered disabled state [ 59.798807][ T4195] batadv1: entered allmulticast mode [ 59.805164][ T4195] batadv1: entered promiscuous mode [ 59.818744][ T4201] netlink: 'syz.0.183': attribute type 1 has an invalid length. [ 59.826632][ T4201] netlink: 'syz.0.183': attribute type 1 has an invalid length. [ 59.872836][ T4208] loop4: detected capacity change from 0 to 1024 [ 59.880927][ T4208] EXT4-fs: Ignoring removed orlov option [ 59.899207][ T4210] loop0: detected capacity change from 0 to 1024 [ 59.906106][ T4210] EXT4-fs: Ignoring removed orlov option [ 59.912115][ T4208] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.918003][ T4210] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.938904][ T4210] 9pnet_fd: Insufficient options for proto=fd [ 59.947085][ T4208] 9pnet_fd: Insufficient options for proto=fd [ 59.966158][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.986732][ T4214] loop4: detected capacity change from 0 to 128 [ 60.100943][ T4215] bridge0: entered promiscuous mode [ 60.107715][ T4215] ip6gretap0: entered promiscuous mode [ 60.114904][ T4215] debugfs: 'hsr1' already exists in 'hsr' [ 60.120681][ T4215] Cannot create hsr debugfs directory [ 60.284754][ T53] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 60.294072][ T53] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 60.646428][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.814966][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.936835][ T4236] FAULT_INJECTION: forcing a failure. [ 60.936835][ T4236] name failslab, interval 1, probability 0, space 0, times 0 [ 60.949605][ T4236] CPU: 0 UID: 0 PID: 4236 Comm: syz.4.197 Not tainted syzkaller #0 PREEMPT(voluntary) [ 60.949631][ T4236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 60.949643][ T4236] Call Trace: [ 60.949648][ T4236] [ 60.949655][ T4236] __dump_stack+0x1d/0x30 [ 60.949684][ T4236] dump_stack_lvl+0x95/0xd0 [ 60.949711][ T4236] dump_stack+0x15/0x1b [ 60.949787][ T4236] should_fail_ex+0x265/0x280 [ 60.949841][ T4236] should_failslab+0x8c/0xb0 [ 60.949875][ T4236] __kmalloc_cache_noprof+0x65/0x4c0 [ 60.949906][ T4236] ? nfnetlink_rcv+0x555/0x16c0 [ 60.949942][ T4236] nfnetlink_rcv+0x555/0x16c0 [ 60.950018][ T4236] ? __kfree_skb+0x109/0x150 [ 60.950044][ T4236] ? consume_skb+0x49/0x150 [ 60.950072][ T4236] ? nlmon_xmit+0x4f/0x60 [ 60.950092][ T4236] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 60.950202][ T4236] ? __dev_queue_xmit+0x13a6/0x1ee0 [ 60.950240][ T4236] ? __dev_queue_xmit+0x148/0x1ee0 [ 60.950281][ T4236] ? ref_tracker_free+0x37d/0x3e0 [ 60.950328][ T4236] netlink_unicast+0x5c0/0x690 [ 60.950434][ T4236] netlink_sendmsg+0x58b/0x6b0 [ 60.950477][ T4236] ? __pfx_netlink_sendmsg+0x10/0x10 [ 60.950517][ T4236] __sock_sendmsg+0x145/0x180 [ 60.950544][ T4236] ____sys_sendmsg+0x31e/0x4a0 [ 60.950658][ T4236] ___sys_sendmsg+0x17b/0x1d0 [ 60.950711][ T4236] __x64_sys_sendmsg+0xd4/0x160 [ 60.950864][ T4236] x64_sys_call+0x17ba/0x3000 [ 60.950972][ T4236] do_syscall_64+0xca/0x2b0 [ 60.951017][ T4236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.951044][ T4236] RIP: 0033:0x7fd03c96f749 [ 60.951138][ T4236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.951162][ T4236] RSP: 002b:00007fd03b3d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.951187][ T4236] RAX: ffffffffffffffda RBX: 00007fd03cbc5fa0 RCX: 00007fd03c96f749 [ 60.951227][ T4236] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 60.951243][ T4236] RBP: 00007fd03b3d7090 R08: 0000000000000000 R09: 0000000000000000 [ 60.951259][ T4236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.951274][ T4236] R13: 00007fd03cbc6038 R14: 00007fd03cbc5fa0 R15: 00007ffd59dc7858 [ 60.951299][ T4236] [ 61.191162][ T4240] loop0: detected capacity change from 0 to 512 [ 61.193947][ T4233] bridge0: port 3(batadv1) entered blocking state [ 61.204746][ T4233] bridge0: port 3(batadv1) entered disabled state [ 61.216990][ T4233] batadv1: entered allmulticast mode [ 61.223903][ T4233] batadv1: entered promiscuous mode [ 61.234771][ T4240] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 61.251599][ T4243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.268748][ T4240] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.196: inode has both inline data and extents flags [ 61.284576][ T4243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.296337][ T4240] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.196: couldn't read orphan inode 15 (err -117) [ 61.314112][ T4243] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.330324][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 61.330337][ T29] audit: type=1326 audit(1768009800.548:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4244 comm="syz.4.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd03c96f749 code=0x7ffc0000 [ 61.395155][ T4240] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.413128][ T4254] loop1: detected capacity change from 0 to 512 [ 61.430403][ T29] audit: type=1326 audit(1768009800.588:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94713ef749 code=0x7ffc0000 [ 61.453788][ T29] audit: type=1326 audit(1768009800.588:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94713ef749 code=0x7ffc0000 [ 61.463243][ T4247] SELinux: failed to load policy [ 61.477201][ T29] audit: type=1326 audit(1768009800.588:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94713ef749 code=0x7ffc0000 [ 61.505608][ T29] audit: type=1326 audit(1768009800.598:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94713ef749 code=0x7ffc0000 [ 61.529027][ T29] audit: type=1326 audit(1768009800.598:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94713ef749 code=0x7ffc0000 [ 61.553054][ T29] audit: type=1326 audit(1768009800.598:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94713ef749 code=0x7ffc0000 [ 61.576445][ T29] audit: type=1326 audit(1768009800.598:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94713ef749 code=0x7ffc0000 [ 61.599894][ T29] audit: type=1326 audit(1768009800.598:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94713ef749 code=0x7ffc0000 [ 61.623158][ T29] audit: type=1326 audit(1768009800.598:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94713ef749 code=0x7ffc0000 [ 61.631007][ T4254] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.659109][ T4254] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.675430][ T4260] Cannot find del_set index 286 as target [ 61.702842][ T1726] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 61.712158][ T1726] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 61.741321][ T4271] loop3: detected capacity change from 0 to 512 [ 61.797731][ T4271] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.859631][ T4277] loop0: detected capacity change from 0 to 128 [ 62.038811][ T4284] loop3: detected capacity change from 0 to 1024 [ 62.047984][ T4284] EXT4-fs: Ignoring removed orlov option [ 62.074015][ T4284] 9pnet_fd: Insufficient options for proto=fd [ 62.424297][ T4295] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4295 comm=syz.4.210 [ 62.776722][ T4301] loop4: detected capacity change from 0 to 8192 [ 62.937403][ T4315] __nla_validate_parse: 15 callbacks suppressed [ 62.937421][ T4315] netlink: 48 bytes leftover after parsing attributes in process `syz.4.216'. [ 62.955191][ T4311] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.073364][ T4325] EXT4-fs: Ignoring removed orlov option [ 63.255678][ T4292] EXT4-fs: Ignoring removed bh option [ 63.266330][ T4292] ext4: Unknown parameter 'smackfsroot' [ 64.048545][ T4343] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 64.093356][ T4343] EXT4-fs (loop1): orphan cleanup on readonly fs [ 64.126258][ T4343] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 64.147620][ T4292] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 64.166712][ T4343] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 64.173805][ T4343] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #13: comm syz.1.222: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 64.192825][ T4343] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.222: couldn't read orphan inode 13 (err -117) [ 64.214866][ T4292] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.209: Invalid block bitmap block 0 in block_group 0 [ 64.242067][ T4343] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 64.252394][ T4292] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.209: Failed to acquire dquot type 0 [ 64.265847][ T4343] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 64.283388][ T4292] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm syz.2.209: Freeing blocks not in datazone - block = 0, count = 4096 [ 64.299875][ T4343] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 64.337352][ T4292] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.209: Invalid inode bitmap blk 0 in block_group 0 [ 64.355364][ T360] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 0 [ 64.375362][ T4292] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 64.388517][ T4292] EXT4-fs (loop2): 1 orphan inode deleted [ 64.425751][ T4355] EXT4-fs: Ignoring removed orlov option [ 64.436241][ T4355] 9pnet_fd: Insufficient options for proto=fd [ 64.458506][ T4292] vhci_hcd vhci_hcd.3: default hub control req: 4003 v0017 i0001 l0 [ 64.549546][ T4361] netlink: 28 bytes leftover after parsing attributes in process `syz.1.225'. [ 64.558838][ T4361] netlink: 20 bytes leftover after parsing attributes in process `syz.1.225'. [ 64.619686][ T4365] netlink: 28 bytes leftover after parsing attributes in process `syz.2.228'. [ 64.922608][ T4378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.231'. [ 64.937785][ T4378] validate_nla: 1 callbacks suppressed [ 64.937801][ T4378] netlink: 'syz.0.231': attribute type 1 has an invalid length. [ 64.951090][ T4378] netlink: 'syz.0.231': attribute type 1 has an invalid length. [ 64.958822][ T4378] netlink: 'syz.0.231': attribute type 1 has an invalid length. [ 65.181161][ T4385] set_capacity_and_notify: 6 callbacks suppressed [ 65.181205][ T4385] loop0: detected capacity change from 0 to 1024 [ 65.194591][ T4385] EXT4-fs: Ignoring removed orlov option [ 65.200413][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 65.205091][ T3558] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 65.248877][ T4388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.234'. [ 65.284337][ T4388] netlink: 'syz.4.234': attribute type 1 has an invalid length. [ 65.292191][ T4388] netlink: 'syz.4.234': attribute type 1 has an invalid length. [ 65.299921][ T4388] netlink: 'syz.4.234': attribute type 1 has an invalid length. [ 65.318704][ T4388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.234'. [ 65.538429][ T4398] loop1: detected capacity change from 0 to 512 [ 65.552418][ T4398] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 65.580966][ T4398] EXT4-fs (loop1): orphan cleanup on readonly fs [ 65.596572][ T4398] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 65.736006][ T4398] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 65.774890][ T4398] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #13: comm syz.1.236: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 65.825491][ T4398] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.236: couldn't read orphan inode 13 (err -117) [ 65.885060][ T4393] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 65.955322][ T4393] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 65.986966][ T4393] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 66.133950][ T4415] loop0: detected capacity change from 0 to 2048 [ 66.185167][ T3704] loop0: p1 p2 [ 66.192591][ T4415] loop0: p1 p2 [ 66.255273][ T4417] loop1: detected capacity change from 0 to 1024 [ 66.262973][ T4417] EXT4-fs: Ignoring removed orlov option [ 66.279592][ T4417] 9pnet_fd: Insufficient options for proto=fd [ 66.281202][ T3704] udevd[3704]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 66.297808][ T3670] udevd[3670]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 66.344257][ T4420] loop0: detected capacity change from 0 to 128 [ 66.361594][ T4420] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 66.380817][ T4422] netlink: 28 bytes leftover after parsing attributes in process `syz.1.245'. [ 66.389919][ T4422] netlink: 20 bytes leftover after parsing attributes in process `syz.1.245'. [ 66.402426][ T4420] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 66.430628][ T4426] netlink: 12 bytes leftover after parsing attributes in process `syz.4.248'. [ 66.443004][ T4420] IPv6: NLM_F_CREATE should be specified when creating new route [ 66.452192][ T4426] netlink: 'syz.4.248': attribute type 1 has an invalid length. [ 66.459943][ T4426] netlink: 'syz.4.248': attribute type 1 has an invalid length. [ 66.467762][ T4426] netlink: 'syz.4.248': attribute type 1 has an invalid length. [ 66.469672][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 66.469730][ T29] audit: type=1326 audit(1768009805.688:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4418 comm="syz.0.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c9ccf749 code=0x7ffc0000 [ 66.513504][ T29] audit: type=1326 audit(1768009805.728:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4418 comm="syz.0.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe2c9ccf749 code=0x7ffc0000 [ 66.536948][ T29] audit: type=1326 audit(1768009805.728:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4418 comm="syz.0.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe2c9ccf783 code=0x7ffc0000 [ 66.560090][ T29] audit: type=1326 audit(1768009805.728:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4418 comm="syz.0.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe2c9cce1ff code=0x7ffc0000 [ 66.583236][ T29] audit: type=1326 audit(1768009805.728:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4418 comm="syz.0.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe2c9ccf7d7 code=0x7ffc0000 [ 66.606513][ T29] audit: type=1326 audit(1768009805.728:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4418 comm="syz.0.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe2c9ccdf90 code=0x7ffc0000 [ 66.629903][ T29] audit: type=1326 audit(1768009805.728:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4418 comm="syz.0.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe2c9cce3aa code=0x7ffc0000 [ 66.671957][ T29] audit: type=1326 audit(1768009805.738:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4418 comm="syz.0.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c9ccf749 code=0x7ffc0000 [ 66.695502][ T29] audit: type=1326 audit(1768009805.748:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4418 comm="syz.0.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c9ccf749 code=0x7ffc0000 [ 66.718895][ T29] audit: type=1326 audit(1768009805.758:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4418 comm="syz.0.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe2c9ccf749 code=0x7ffc0000 [ 66.940916][ T4435] loop4: detected capacity change from 0 to 512 [ 66.949257][ T4435] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 66.995585][ T4435] loop4: detected capacity change from 0 to 512 [ 67.004974][ T4435] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 67.016898][ T4435] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 67.026726][ T4435] block device autoloading is deprecated and will be removed. [ 67.034523][ T4435] EXT4-fs (loop4): couldn't read superblock of external journal [ 67.070146][ T4435] hsr_slave_0: left promiscuous mode [ 67.091383][ T4435] hsr_slave_1: left promiscuous mode [ 67.153845][ T4438] loop1: detected capacity change from 0 to 2048 [ 67.193308][ T4438] lo speed is unknown, defaulting to 1000 [ 67.221340][ T4438] lo speed is unknown, defaulting to 1000 [ 67.264507][ T4438] lo speed is unknown, defaulting to 1000 [ 67.278319][ T12] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 67.323300][ T4442] loop1: detected capacity change from 0 to 512 [ 67.323321][ T4444] loop4: detected capacity change from 0 to 1024 [ 67.358061][ T4442] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.375275][ T4444] EXT4-fs: Ignoring removed orlov option [ 67.479144][ T4451] EXT4-fs: Ignoring removed orlov option [ 67.488386][ T4438] infiniband syz1: set active [ 67.493122][ T4438] infiniband syz1: added lo [ 67.498021][ T23] lo speed is unknown, defaulting to 1000 [ 67.513407][ T4439] SELinux: Context @ is not valid (left unmapped). [ 67.531846][ T4441] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 67.550409][ T4441] EXT4-fs (loop0): orphan cleanup on readonly fs [ 67.561200][ T4444] 9pnet_fd: Insufficient options for proto=fd [ 67.575923][ T4438] RDS/IB: syz1: added [ 67.584899][ T4438] smc: adding ib device syz1 with port count 1 [ 67.592931][ T4438] smc: ib device syz1 port 1 has no pnetid [ 67.599370][ T23] lo speed is unknown, defaulting to 1000 [ 67.605367][ T4438] lo speed is unknown, defaulting to 1000 [ 67.702158][ T4441] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 67.726424][ T4441] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 67.743039][ T4441] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #13: comm syz.0.253: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 67.761976][ T4441] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.253: couldn't read orphan inode 13 (err -117) [ 67.774233][ T4438] lo speed is unknown, defaulting to 1000 [ 67.812997][ T4438] lo speed is unknown, defaulting to 1000 [ 67.828441][ T4441] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 67.839654][ T4441] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 67.862897][ T4438] lo speed is unknown, defaulting to 1000 [ 67.905255][ T4441] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 67.946178][ T4438] lo speed is unknown, defaulting to 1000 [ 68.410341][ T4470] IPVS: Error connecting to the multicast addr [ 68.604348][ T4459] EXT4-fs: Ignoring removed bh option [ 68.621439][ T4459] ext4: Unknown parameter 'smackfsroot' [ 68.927626][ T4481] EXT4-fs: Ignoring removed orlov option [ 68.938970][ T4481] 9pnet_fd: Insufficient options for proto=fd [ 68.982115][ T4480] Falling back ldisc for ptm1. [ 69.124772][ T4489] __nla_validate_parse: 5 callbacks suppressed [ 69.124788][ T4489] netlink: 28 bytes leftover after parsing attributes in process `syz.2.261'. [ 69.140003][ T4489] netlink: 20 bytes leftover after parsing attributes in process `syz.2.261'. [ 69.285035][ T4505] netlink: 12 bytes leftover after parsing attributes in process `syz.4.267'. [ 69.342073][ T4505] netlink: 'syz.4.267': attribute type 1 has an invalid length. [ 69.389685][ T3704] Alternate GPT is invalid, using primary GPT. [ 69.396159][ T3704] loop3: p2 p3 p7 [ 69.423170][ T4459] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 69.449479][ T4494] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 69.458905][ T4494] EXT4-fs (loop1): orphan cleanup on readonly fs [ 69.468635][ T4494] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 69.486389][ T4516] EXT4-fs: Ignoring removed orlov option [ 69.496586][ T4494] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 69.511440][ T4506] Alternate GPT is invalid, using primary GPT. [ 69.517833][ T4506] loop3: p2 p3 p7 [ 69.525032][ T4494] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #13: comm syz.1.265: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 69.561175][ T4494] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.265: couldn't read orphan inode 13 (err -117) [ 69.563846][ T4516] EXT4-fs mount: 31 callbacks suppressed [ 69.563897][ T4516] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.597415][ T4494] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.611763][ T4459] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.255: Invalid block bitmap block 0 in block_group 0 [ 69.633256][ T4516] 9pnet_fd: Insufficient options for proto=fd [ 69.681802][ T4459] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.255: Failed to acquire dquot type 0 [ 69.700605][ T4494] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 69.710537][ T4494] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 69.730858][ T4459] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.255: Freeing blocks not in datazone - block = 0, count = 4096 [ 69.745804][ T4526] netlink: 28 bytes leftover after parsing attributes in process `syz.4.268'. [ 69.754806][ T4526] netlink: 28 bytes leftover after parsing attributes in process `syz.4.268'. [ 69.792997][ T4494] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 69.827014][ T4459] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.255: Invalid inode bitmap blk 0 in block_group 0 [ 69.841845][ T12] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 0 [ 69.864499][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.884311][ T4459] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 69.918375][ T4459] EXT4-fs (loop0): 1 orphan inode deleted [ 69.937422][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.980337][ T4537] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 69.993022][ T4459] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.018052][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 70.021462][ T4537] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 70.057431][ T4459] vhci_hcd vhci_hcd.3: default hub control req: 4003 v0017 i0001 l0 [ 70.186849][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.280606][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.418841][ T4555] process 'syz.0.274' launched './file0' with NULL argv: empty string added [ 70.573237][ T4564] SELinux: policydb string S does not match my string SE Linux [ 70.581369][ T4564] SELinux: failed to load policy [ 70.717524][ T4559] sd 0:0:1:0: device reset [ 70.724648][ T4568] FAULT_INJECTION: forcing a failure. [ 70.724648][ T4568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.737827][ T4568] CPU: 0 UID: 0 PID: 4568 Comm: syz.0.280 Not tainted syzkaller #0 PREEMPT(voluntary) [ 70.737886][ T4568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 70.737901][ T4568] Call Trace: [ 70.737909][ T4568] [ 70.737920][ T4568] __dump_stack+0x1d/0x30 [ 70.737947][ T4568] dump_stack_lvl+0x95/0xd0 [ 70.737972][ T4568] dump_stack+0x15/0x1b [ 70.737993][ T4568] should_fail_ex+0x265/0x280 [ 70.738021][ T4568] should_fail+0xb/0x20 [ 70.738046][ T4568] should_fail_usercopy+0x1a/0x20 [ 70.738077][ T4568] strncpy_from_user+0x27/0x260 [ 70.738200][ T4568] __se_sys_memfd_create+0x206/0x6b0 [ 70.738248][ T4568] __x64_sys_memfd_create+0x31/0x40 [ 70.738289][ T4568] x64_sys_call+0x28cb/0x3000 [ 70.738387][ T4568] do_syscall_64+0xca/0x2b0 [ 70.738422][ T4568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.738448][ T4568] RIP: 0033:0x7fe2c9ccf749 [ 70.738467][ T4568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.738490][ T4568] RSP: 002b:00007fe2c872ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 70.738515][ T4568] RAX: ffffffffffffffda RBX: 0000000000000512 RCX: 00007fe2c9ccf749 [ 70.738536][ T4568] RDX: 00007fe2c872eef0 RSI: 0000000000000000 RDI: 00007fe2c9d54960 [ 70.738609][ T4568] RBP: 0000200000000380 R08: 00007fe2c872ebb7 R09: 00007fe2c872ee40 [ 70.738623][ T4568] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000080 [ 70.738635][ T4568] R13: 00007fe2c872eef0 R14: 00007fe2c872eeb0 R15: 0000200000000340 [ 70.738729][ T4568] [ 70.822223][ T1726] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 70.847171][ T4572] set_capacity_and_notify: 10 callbacks suppressed [ 70.847216][ T4572] loop4: detected capacity change from 0 to 512 [ 70.972675][ T4566] netlink: 24 bytes leftover after parsing attributes in process `syz.3.279'. [ 71.000956][ T4572] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 71.045162][ T4572] EXT4-fs (loop4): orphan cleanup on readonly fs [ 71.055045][ T4578] loop2: detected capacity change from 0 to 512 [ 71.062203][ T4572] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.281: Allocating blocks 41-42 which overlap fs metadata [ 71.077975][ T4572] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.281: Allocating blocks 41-42 which overlap fs metadata [ 71.093036][ T4578] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 71.101455][ T4578] EXT4-fs (loop2): orphan cleanup on readonly fs [ 71.109690][ T4572] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.281: Failed to acquire dquot type 1 [ 71.118058][ T4578] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.283: corrupted inode contents [ 71.132931][ T4572] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 71.133066][ T4578] EXT4-fs (loop2): Remounting filesystem read-only [ 71.154639][ T4578] EXT4-fs (loop2): 1 truncate cleaned up [ 71.160626][ T4572] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.281: corrupted inode contents [ 71.160644][ T1726] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 71.160672][ T1726] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 71.160699][ T1726] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 71.204018][ T4572] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.281: mark_inode_dirty error [ 71.216126][ T4572] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.281: corrupted inode contents [ 71.228088][ T4578] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.228726][ T4572] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.281: mark_inode_dirty error [ 71.252479][ T4572] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.281: corrupted inode contents [ 71.264883][ T4572] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 71.273720][ T4572] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.281: corrupted inode contents [ 71.286447][ T4572] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.281: mark_inode_dirty error [ 71.299259][ T4572] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 71.308731][ T4572] EXT4-fs (loop4): 1 truncate cleaned up [ 71.315285][ T4572] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.334555][ T4572] vlan2: entered allmulticast mode [ 71.347218][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.484998][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.540203][ T4589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.552811][ T4589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.593745][ T4585] loop2: detected capacity change from 0 to 512 [ 71.605623][ T4585] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 71.632470][ T4585] EXT4-fs (loop2): 1 truncate cleaned up [ 71.646927][ T4585] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.735909][ T4594] netlink: 20 bytes leftover after parsing attributes in process `syz.0.287'. [ 71.865503][ T4598] loop3: detected capacity change from 0 to 2048 [ 71.936267][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.139890][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 72.139912][ T29] audit: type=1400 audit(1768009811.198:1064): avc: denied { wake_alarm } for pid=4601 comm="syz.2.290" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 72.165476][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 72.179841][ T3558] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 72.187700][ T29] audit: type=1400 audit(1768009811.378:1065): avc: denied { read write } for pid=4601 comm="syz.2.290" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 72.211452][ T29] audit: type=1400 audit(1768009811.378:1066): avc: denied { open } for pid=4601 comm="syz.2.290" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 72.243236][ T29] audit: type=1326 audit(1768009811.458:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4601 comm="syz.2.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94713ef749 code=0x7ffc0000 [ 72.283937][ T4598] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.296484][ T29] audit: type=1326 audit(1768009811.488:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4601 comm="syz.2.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94713ef749 code=0x7ffc0000 [ 72.319971][ T29] audit: type=1326 audit(1768009811.488:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4601 comm="syz.2.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94713ef749 code=0x7ffc0000 [ 72.343432][ T29] audit: type=1326 audit(1768009811.488:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4601 comm="syz.2.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94713ef749 code=0x7ffc0000 [ 72.366996][ T29] audit: type=1326 audit(1768009811.488:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4601 comm="syz.2.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94713ef749 code=0x7ffc0000 [ 72.390334][ T29] audit: type=1326 audit(1768009811.488:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4601 comm="syz.2.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94713ef749 code=0x7ffc0000 [ 72.413826][ T29] audit: type=1326 audit(1768009811.488:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4601 comm="syz.2.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94713ef749 code=0x7ffc0000 [ 72.450749][ T4598] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 72.471676][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.916172][ T4620] FAULT_INJECTION: forcing a failure. [ 72.916172][ T4620] name failslab, interval 1, probability 0, space 0, times 0 [ 72.929043][ T4620] CPU: 0 UID: 0 PID: 4620 Comm: syz.1.295 Not tainted syzkaller #0 PREEMPT(voluntary) [ 72.929135][ T4620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 72.929151][ T4620] Call Trace: [ 72.929159][ T4620] [ 72.929169][ T4620] __dump_stack+0x1d/0x30 [ 72.929240][ T4620] dump_stack_lvl+0x95/0xd0 [ 72.929261][ T4620] dump_stack+0x15/0x1b [ 72.929280][ T4620] should_fail_ex+0x265/0x280 [ 72.929308][ T4620] should_failslab+0x8c/0xb0 [ 72.929335][ T4620] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 72.929454][ T4620] ? __alloc_skb+0x2ff/0x4b0 [ 72.929484][ T4620] __alloc_skb+0x2ff/0x4b0 [ 72.929581][ T4620] ? __alloc_skb+0x228/0x4b0 [ 72.929677][ T4620] netlink_alloc_large_skb+0xbf/0xf0 [ 72.929714][ T4620] netlink_sendmsg+0x3cf/0x6b0 [ 72.929757][ T4620] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.929826][ T4620] __sock_sendmsg+0x145/0x180 [ 72.929881][ T4620] ____sys_sendmsg+0x31e/0x4a0 [ 72.929980][ T4620] ___sys_sendmsg+0x17b/0x1d0 [ 72.930090][ T4620] __x64_sys_sendmsg+0xd4/0x160 [ 72.930143][ T4620] x64_sys_call+0x17ba/0x3000 [ 72.930173][ T4620] do_syscall_64+0xca/0x2b0 [ 72.930234][ T4620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.930325][ T4620] RIP: 0033:0x7f428c95f749 [ 72.930343][ T4620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.930365][ T4620] RSP: 002b:00007f428b3c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.930389][ T4620] RAX: ffffffffffffffda RBX: 00007f428cbb5fa0 RCX: 00007f428c95f749 [ 72.930405][ T4620] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 72.930421][ T4620] RBP: 00007f428b3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 72.930437][ T4620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.930451][ T4620] R13: 00007f428cbb6038 R14: 00007f428cbb5fa0 R15: 00007ffd0693efc8 [ 72.930547][ T4620] [ 73.154833][ T4623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.163659][ T4623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.172982][ T4623] validate_nla: 2 callbacks suppressed [ 73.172997][ T4623] netlink: 'syz.1.296': attribute type 13 has an invalid length. [ 73.228722][ T4623] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.229035][ T4624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.296'. [ 73.236064][ T4623] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.281544][ T4627] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4627 comm=syz.1.296 [ 73.283911][ T4626] loop4: detected capacity change from 0 to 1024 [ 73.307144][ T4626] EXT4-fs: inline encryption not supported [ 73.323979][ T4627] 9p: Bad value for 'rfdno' [ 73.333033][ T4626] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.350763][ T4627] loop1: detected capacity change from 0 to 512 [ 73.361816][ T4623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.373678][ T4623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.399723][ T4623] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 73.416786][ T4627] EXT4-fs (loop1): ea_inode feature is not supported for Hurd [ 73.477702][ T3395] lo speed is unknown, defaulting to 1000 [ 73.483545][ T3395] syz1: Port: 1 Link DOWN [ 73.484273][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.489322][ T4093] lo speed is unknown, defaulting to 1000 [ 73.497793][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.526885][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.536275][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.556283][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.566424][ T4635] loop3: detected capacity change from 0 to 1024 [ 73.573043][ T4635] EXT4-fs: Ignoring removed orlov option [ 73.614025][ T4642] loop2: detected capacity change from 0 to 1024 [ 73.624702][ T4635] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.649544][ T4642] EXT4-fs: Ignoring removed orlov option [ 73.657113][ T4635] 9pnet_fd: Insufficient options for proto=fd [ 73.665497][ T4642] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.710139][ T4639] loop0: detected capacity change from 0 to 512 [ 73.719732][ T4639] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 73.728123][ T4642] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 73.734825][ T4642] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 73.743188][ T4642] vhci_hcd vhci_hcd.0: Device attached [ 73.756040][ T4639] EXT4-fs (loop0): orphan cleanup on readonly fs [ 73.762833][ T4639] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 73.770531][ T4652] netlink: 28 bytes leftover after parsing attributes in process `syz.3.299'. [ 73.786454][ T4652] netlink: 28 bytes leftover after parsing attributes in process `syz.3.299'. [ 73.793262][ T4648] vhci_hcd: connection closed [ 73.795849][ T12] vhci_hcd vhci_hcd.2: stop threads [ 73.805881][ T12] vhci_hcd vhci_hcd.2: release socket [ 73.811290][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 73.836293][ T4652] syz_tun: entered promiscuous mode [ 73.841947][ T4639] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 73.849864][ T4639] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #13: comm syz.0.302: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 73.868098][ T4639] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.302: couldn't read orphan inode 13 (err -117) [ 73.880864][ T4639] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.895405][ T4652] syz_tun: left promiscuous mode [ 73.913181][ T4639] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 73.922982][ T4639] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 73.936622][ T4639] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 73.988457][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.162058][ T1726] Bluetooth: hci0: Frame reassembly failed (-84) [ 74.198789][ T4670] tc_dump_action: action bad kind [ 74.323502][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.362205][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.459685][ T4681] loop4: detected capacity change from 0 to 512 [ 74.477088][ T4681] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.510805][ T4681] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.539835][ T4689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.314'. [ 74.544991][ T4686] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 145: padding at end of block bitmap is not set [ 74.562655][ T4689] netlink: 'syz.2.314': attribute type 1 has an invalid length. [ 74.570966][ T4689] netlink: 'syz.2.314': attribute type 1 has an invalid length. [ 74.578920][ T4689] netlink: 'syz.2.314': attribute type 1 has an invalid length. [ 74.588131][ T4689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.314'. [ 74.717555][ T4693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.315'. [ 74.729503][ T4693] hsr_slave_0: left promiscuous mode [ 74.738924][ T4693] hsr_slave_1: left promiscuous mode [ 74.807607][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.851093][ T4696] EXT4-fs: Ignoring removed orlov option [ 74.866099][ T4696] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.880107][ T4696] 9pnet_fd: Insufficient options for proto=fd [ 74.888025][ T4696] netlink: 112 bytes leftover after parsing attributes in process `syz.2.317'. [ 74.908771][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.044605][ T4704] EXT4-fs: Ignoring removed orlov option [ 75.156379][ T4704] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.403044][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.443322][ T4708] netlink: 24 bytes leftover after parsing attributes in process `syz.2.318'. [ 75.457297][ T4709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.320'. [ 75.473361][ T4709] syzkaller1: entered promiscuous mode [ 75.478941][ T4709] syzkaller1: entered allmulticast mode [ 75.488765][ T4711] gtp0: entered promiscuous mode [ 75.494278][ T4709] netlink: 24 bytes leftover after parsing attributes in process `syz.3.320'. [ 75.561240][ T4720] FAULT_INJECTION: forcing a failure. [ 75.561240][ T4720] name failslab, interval 1, probability 0, space 0, times 0 [ 75.574060][ T4720] CPU: 1 UID: 0 PID: 4720 Comm: syz.1.324 Not tainted syzkaller #0 PREEMPT(voluntary) [ 75.574141][ T4720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 75.574154][ T4720] Call Trace: [ 75.574159][ T4720] [ 75.574167][ T4720] __dump_stack+0x1d/0x30 [ 75.574211][ T4720] dump_stack_lvl+0x95/0xd0 [ 75.574238][ T4720] dump_stack+0x15/0x1b [ 75.574264][ T4720] should_fail_ex+0x265/0x280 [ 75.574294][ T4720] should_failslab+0x8c/0xb0 [ 75.574319][ T4720] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 75.574380][ T4720] ? perf_event_alloc+0x159/0x18d0 [ 75.574422][ T4720] perf_event_alloc+0x159/0x18d0 [ 75.574525][ T4720] ? __fget_files+0x184/0x1c0 [ 75.574598][ T4720] __se_sys_perf_event_open+0x603/0x1210 [ 75.574634][ T4720] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 75.574676][ T4720] __x64_sys_perf_event_open+0x67/0x80 [ 75.574730][ T4720] x64_sys_call+0x78c/0x3000 [ 75.574771][ T4720] do_syscall_64+0xca/0x2b0 [ 75.574817][ T4720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.574871][ T4720] RIP: 0033:0x7f428c95f749 [ 75.574891][ T4720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.574913][ T4720] RSP: 002b:00007f428b3c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 75.574935][ T4720] RAX: ffffffffffffffda RBX: 00007f428cbb5fa0 RCX: 00007f428c95f749 [ 75.574947][ T4720] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000000 [ 75.574958][ T4720] RBP: 00007f428b3c7090 R08: 0000000000000008 R09: 0000000000000000 [ 75.574974][ T4720] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 75.574996][ T4720] R13: 00007f428cbb6038 R14: 00007f428cbb5fa0 R15: 00007ffd0693efc8 [ 75.575022][ T4720] [ 75.820313][ T4728] FAULT_INJECTION: forcing a failure. [ 75.820313][ T4728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.833556][ T4728] CPU: 1 UID: 0 PID: 4728 Comm: syz.4.327 Not tainted syzkaller #0 PREEMPT(voluntary) [ 75.833591][ T4728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 75.833607][ T4728] Call Trace: [ 75.833615][ T4728] [ 75.833625][ T4728] __dump_stack+0x1d/0x30 [ 75.833656][ T4728] dump_stack_lvl+0x95/0xd0 [ 75.833706][ T4728] dump_stack+0x15/0x1b [ 75.833732][ T4728] should_fail_ex+0x265/0x280 [ 75.833768][ T4728] should_fail+0xb/0x20 [ 75.833792][ T4728] should_fail_usercopy+0x1a/0x20 [ 75.833888][ T4728] strncpy_from_user+0x27/0x260 [ 75.833929][ T4728] getname_flags+0xae/0x3b0 [ 75.833960][ T4728] __x64_sys_unlinkat+0x70/0xb0 [ 75.833987][ T4728] x64_sys_call+0x2b49/0x3000 [ 75.834019][ T4728] do_syscall_64+0xca/0x2b0 [ 75.834062][ T4728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.834086][ T4728] RIP: 0033:0x7fd03c96f749 [ 75.834110][ T4728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.834161][ T4728] RSP: 002b:00007fd03b3d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 75.834183][ T4728] RAX: ffffffffffffffda RBX: 00007fd03cbc5fa0 RCX: 00007fd03c96f749 [ 75.834198][ T4728] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 75.834212][ T4728] RBP: 00007fd03b3d7090 R08: 0000000000000000 R09: 0000000000000000 [ 75.834230][ T4728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.834245][ T4728] R13: 00007fd03cbc6038 R14: 00007fd03cbc5fa0 R15: 00007ffd59dc7858 [ 75.834266][ T4728] [ 76.085523][ T4735] set_capacity_and_notify: 3 callbacks suppressed [ 76.085542][ T4735] loop4: detected capacity change from 0 to 1024 [ 76.101034][ T4735] EXT4-fs: Ignoring removed orlov option [ 76.113046][ T4735] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.127170][ T4735] 9pnet_fd: Insufficient options for proto=fd [ 76.220013][ T4742] loop2: detected capacity change from 0 to 128 [ 76.226827][ T4742] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 76.239051][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 76.245114][ T3558] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 76.252036][ T4742] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 76.262147][ T4743] netlink: 96 bytes leftover after parsing attributes in process `syz.4.330'. [ 76.336526][ T4742] ================================================================== [ 76.344680][ T4742] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 76.352658][ T4742] [ 76.355000][ T4742] write to 0xffff88811a532914 of 4 bytes by task 4744 on cpu 1: [ 76.362652][ T4742] xas_set_mark+0x12b/0x140 [ 76.367230][ T4742] __folio_start_writeback+0x155/0x340 [ 76.372751][ T4742] mpage_writepages+0xd18/0x1250 [ 76.377763][ T4742] fat_writepages+0x24/0x30 [ 76.382286][ T4742] do_writepages+0x1c6/0x310 [ 76.386935][ T4742] file_write_and_wait_range+0x156/0x2c0 [ 76.392604][ T4742] __generic_file_fsync+0x46/0x160 [ 76.397741][ T4742] fat_file_fsync+0x49/0x100 [ 76.402354][ T4742] vfs_fsync_range+0x10d/0x130 [ 76.407145][ T4742] generic_file_write_iter+0x1b8/0x2f0 [ 76.412632][ T4742] iter_file_splice_write+0x66b/0xa20 [ 76.418023][ T4742] direct_splice_actor+0x156/0x2a0 [ 76.423156][ T4742] splice_direct_to_actor+0x312/0x680 [ 76.428556][ T4742] do_splice_direct+0xda/0x150 [ 76.433341][ T4742] do_sendfile+0x380/0x650 [ 76.437784][ T4742] __x64_sys_sendfile64+0x105/0x150 [ 76.443019][ T4742] x64_sys_call+0x2db1/0x3000 [ 76.447746][ T4742] do_syscall_64+0xca/0x2b0 [ 76.452289][ T4742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.458204][ T4742] [ 76.460540][ T4742] read to 0xffff88811a532914 of 4 bytes by task 4742 on cpu 0: [ 76.468097][ T4742] __writeback_single_inode+0x201/0x7c0 [ 76.473768][ T4742] writeback_single_inode+0x16d/0x3f0 [ 76.479180][ T4742] sync_inode_metadata+0x5b/0x90 [ 76.484176][ T4742] __generic_file_fsync+0x109/0x160 [ 76.489394][ T4742] fat_file_fsync+0x49/0x100 [ 76.494013][ T4742] vfs_fsync_range+0x10d/0x130 [ 76.498799][ T4742] generic_file_write_iter+0x1b8/0x2f0 [ 76.504372][ T4742] iter_file_splice_write+0x66b/0xa20 [ 76.509761][ T4742] direct_splice_actor+0x156/0x2a0 [ 76.514891][ T4742] splice_direct_to_actor+0x312/0x680 [ 76.520282][ T4742] do_splice_direct+0xda/0x150 [ 76.525063][ T4742] do_sendfile+0x380/0x650 [ 76.529500][ T4742] __x64_sys_sendfile64+0x105/0x150 [ 76.534719][ T4742] x64_sys_call+0x2db1/0x3000 [ 76.539430][ T4742] do_syscall_64+0xca/0x2b0 [ 76.543965][ T4742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.549873][ T4742] [ 76.552209][ T4742] value changed: 0x0a000021 -> 0x04000021 [ 76.558377][ T4742] [ 76.560711][ T4742] Reported by Kernel Concurrency Sanitizer on: [ 76.566872][ T4742] CPU: 0 UID: 0 PID: 4742 Comm: syz.2.332 Not tainted syzkaller #0 PREEMPT(voluntary) [ 76.576530][ T4742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 76.586608][ T4742] ================================================================== [ 76.943727][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.064813][ T66] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)