last executing test programs: 4m2.183047729s ago: executing program 4 (id=647): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010002, &(0x7f0000000b40)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@uni_xlate}, {@utf8}, {@utf8no}, {@uni_xlate}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@utf8no}, {@uni_xlate}, {@uni_xlate}, {@fat=@uid}, {@numtail}], [{@fsuuid={'fsuuid', 0x3d, {[0x33, 0x31, 0x33, 0x62, 0x65, 0x31, 0x33, 0x66], 0x2d, [0x0, 0x39, 0x62, 0x61], 0x2d, [0x33, 0x38, 0x39, 0x33], 0x2d, [0x38, 0x34, 0x36, 0x37], 0x2d, [0x62, 0x62, 0x62, 0x32, 0x64, 0x63, 0x34, 0x38]}}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}, 0x1, 0x36b, &(0x7f0000000500)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000000018110000", @ANYRES32=r6, @ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x60, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m59.296328642s ago: executing program 4 (id=670): socket(0x10, 0x803, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000002080)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 3m59.001166726s ago: executing program 4 (id=671): syz_open_dev$vcsa(0x0, 0x4, 0x4600) creat(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}, {0x0, 0x0, 0x28, 0x0, @wg=@data={0x4, 0x0, 0x0, "20020000000000000000280080000000"}}}}}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) 3m58.849111138s ago: executing program 4 (id=673): syz_open_dev$vcsa(&(0x7f0000000240), 0x4, 0x4600) creat(0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}, {0x0, 0x0, 0x28, 0x0, @wg=@data={0x4, 0x0, 0x0, "20020000000000000000280080000000"}}}}}}, 0x0) 3m58.82471119s ago: executing program 4 (id=674): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x100000001, 0x48842) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='f2fs_issue_reset_zone\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) shmdt(0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200002, 0x0, 0x0, 0x0, 0xe0000000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000700)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r3}, 0x10) unshare(0x2040400) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000200000101480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c0000800800034000000002"], 0xf8}}, 0x0) r7 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r7, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000080)={0x8}) setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000000100)={0x6, &(0x7f0000000080)=[{0x2, 0x0, 0x8, 0x3ff}, {0x2, 0xb, 0x0, 0x2}, {0x1, 0xa4, 0x6, 0xffff}, {0x7, 0xf5, 0x7, 0x3}, {0x4, 0x2, 0x3, 0x6edf}, {0x7, 0x0, 0x1, 0x2}]}, 0x10) ioctl$BLKGETZONESZ(r0, 0x80041284, &(0x7f0000000280)=0x2) 3m58.719331629s ago: executing program 4 (id=676): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) 3m43.629564815s ago: executing program 32 (id=676): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) 32.523039558s ago: executing program 3 (id=3724): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./bus\x00', 0x10, &(0x7f0000000040)={[], [{@appraise_type}]}, 0x1, 0x7e0, &(0x7f0000000880)="$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") ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000370400000000ffffffff00000000", @ANYRES32=r3, @ANYBLOB="0b12050000000000240012800b00010069703667726500001400028008000100", @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x8000004) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000200)={@remote, @loopback, 0x0}, &(0x7f0000000240)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000002c0)={@private0, 0x0}, &(0x7f0000000300)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x60, 0x10, 0x403, 0x70bd28, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xf}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffe}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x8000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x29, 0x3, 0x5, 0xa, 0x20, @loopback, @private1, 0x7800, 0x8, 0x324, 0x7ff}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000480)={@private2, 0x0}, &(0x7f00000004c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb5, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x43, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000011c0)={&(0x7f0000001080)={0x120, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) r18 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200008f, &(0x7f00000003c0), 0x0, 0x554, &(0x7f0000000980)="$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") fallocate(r18, 0x0, 0x0, 0x1000f4) 32.087233954s ago: executing program 3 (id=3728): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f031c00dce0140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe", 0x47, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 32.011573089s ago: executing program 3 (id=3729): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x209d, 0x9, 0x2008, 0x7ffffff9}, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x40, 0x7800, 0x3ff, 0x8, {{0x5, 0x4, 0x2, 0x9, 0x14, 0x65, 0x0, 0xff, 0x29, 0x0, @remote, @multicast1}}}}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) bind$can_raw(r1, &(0x7f0000000000), 0x10) (fail_nth: 3) 31.624730631s ago: executing program 3 (id=3732): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0xa00010, &(0x7f00000001c0), 0x21, 0x4bf, &(0x7f00000009c0)="$eJzs3U9vVF0ZAPDn3nbon7fv26Is1KggomgIM+0AlbDCjcYQEiNx5QJqOzRNZzpNZ4q0sijfwUQSV7rwA7gwcWHCyr073bnBhQkq0VATF2PmzhQKnSlF2s6b3t8vObn33DOd5zyd3HPaM+2cAHLrXERsRcSpiLgXEZPd60m3xM1OaT/u5YtH89svHs0n0Wrd+UeStbevxa6vafuo+5yjEfGD70b8ONkbt7GxuTxXrVbWuvVSs7ZaamxsXl6qzS1WFisr5fLszOz09SvXyoeW69nab55/Z+nWD3//uy89++PWN3/a7tZEt213Hoepk3rhVZy24Yi4dRTBBmCom8+pQXeE/0saEZ+JiPPZ/T8ZQ9mrCQCcZK3WZLQmd9cBgJMuzdbAkrQYUeicp2mx2FnDOxPjabXeaF66X19fWeislU1FIb2/VK1Md9cKp6KQtOsz2fnrevmt+pWIOB0RPxsZy+rF+Xp1YZA/+ABAjn30ev7P3gv490hn/gcATrjRQXcAADh25n8AyB/zPwDkj/kfAPLH/A8A+WP+B4D8Mf8DQK58//btdmltdz//euHBxvpy/cHlhUpjuVhbny/O19dWi4v1+mL2mT21dz1ftV5fnbka6w9LzUqjWWpsbN6t1ddXmnezz/W+WykcS1YAwH5On3365yQitm6MZSV27eVgroaTLR10B4CBGRp0B4CBsdsX5Jff8YEeW/S+ofMnQmN7G54cTX+Ao3fx89b/Ia+s/0N+Wf+H/LL+D/nVaiX2/AeAnLHGDxzs/f8evP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAjk1kJUmL3b3AJyJNi8WIjyNiKgrJ/aVqZToiPomIP40URtr1mUF3GgD4QOnfku7+XxcnL0y83Xoq+c9IdoyIn/zizs8fzjWbazPt6//sXP/WWMST7vXyIPoPAHk09F6P3pmnd+bxHS9fPJrfKYffx/6ef7uzuWg77na3dFqGYzg7jkYhIsb/lXTrHcl7Z97b1uOI+Fyv/JNsbWSqu/Pp2/HbsT8+1vjpG/HTrK1zbH8vPnsIfYG8edoef272uv/SOJcde9//o9kI9eF2xr/tPeNf+mr8G+oz/p07SICxX0dc/cP3+sZ/HPGF4V7xk1fxkz7xLxwwx7988cvn+7W1fhlxMXrH3x2r1Kytlhobm5eXanOLlcXKSrk8OzM7ff3KtXIpW6Mu7axU7/X3G5c+2S//8T7xR9+R/9cOmP+v/nvvR1/ZJ/43vtr79T+zT/z2nPj1A8afG/9t3+272/EX+uT/rtf/0gHjP/vr5sIBHwoAHIPGxubyXLVaWRv0yU6HPi39ceIk1yeDHZeAo/f6ph90TwAAAAAAAAAAAAAAgH6O49+JBp0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ9f/AgAA//9gOtV4") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000140)={0xffffffffffffffff, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r2 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0xfffffffffffffffe, &(0x7f0000000140)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178c0900000000000000f39ed4b41924dc225ad4028dd63debb87d698be5c749450b350a789dcfc6b2d6a69600026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fbf057bb711116e53eb0b55667f1a28c2d6506cf26422d389b") recvfrom$rxrpc(r1, &(0x7f00000004c0)=""/182, 0xb6, 0x102, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @multicast2}}, 0x24) write$cgroup_int(r0, &(0x7f0000000200)=0x4, 0x12) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000380), 0x101bf) creat(&(0x7f0000000140)='./bus\x00', 0xa6) r6 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r6, 0x89ef, &(0x7f00000002c0)=0xe) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fcntl$setlease(r9, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r9, &(0x7f0000000040), 0x0, 0x0, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000480)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r10 = syz_open_dev$loop(&(0x7f0000000080), 0x8001, 0xa0060) ioctl$LOOP_SET_STATUS64(r10, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x0, 0x1, "0e36af76345a41499db7aac63a01edff00000000004faa2ae2c084a0ea0000000000000000002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c2063b6f4b2bde8b3a700000000000000f0fffffffff2ff00", [0x0, 0x10]}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000300)={0x0, r5, 0x0, 0x2, 0x0, 0x9}) 31.206215844s ago: executing program 3 (id=3735): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r3 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x0) ftruncate(r3, 0x7000000) r4 = dup(r3) preadv2(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x3700, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000040000020f00000005002e000100000005002f000000000008000300", @ANYRES32=r7], 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x5c, r6, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07001f40800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000010000fc00000000000000000000c98b0b05", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r11}, 0x10) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000480)="00d0954942b108d5185389ebdd8a5036c2fa43f51c5afb9821984d", 0x0, 0x0, 0x0, 0x8}, 0x31) r13 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r14 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r14, 0x4c0a, &(0x7f0000001600)={r13, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 29.961510685s ago: executing program 3 (id=3745): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x7, 0x84, 0x2, 0x5, 0x5, 0xfd, 0x0, 0x0, 0xfd, 0x2, 0x3, 0x0, 0x2}, 0xe) recvmmsg(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/28, 0x1c}, 0x1ff}], 0x1, 0x40000040, 0x0) (fail_nth: 2) 29.892079141s ago: executing program 33 (id=3745): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x7, 0x84, 0x2, 0x5, 0x5, 0xfd, 0x0, 0x0, 0xfd, 0x2, 0x3, 0x0, 0x2}, 0xe) recvmmsg(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/28, 0x1c}, 0x1ff}], 0x1, 0x40000040, 0x0) (fail_nth: 2) 7.243373836s ago: executing program 6 (id=4073): syz_read_part_table(0x593, &(0x7f00000005c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ddffffff000000000000000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000200)={0x3, 0x7ff, 0x7, 0x36cc, 0xa, "2d8a81effa6a0baad690563823677af6997619", 0xa6, 0x6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x1e80, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) msync(&(0x7f0000389000/0x3000)=nil, 0x3000, 0x1) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r9, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r3, 0x0, 0x0, 0xc80c4, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @remote}, 0x1c) sendto$inet6(r3, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) r10 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$qrtrtun(r10, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) 6.876885876s ago: executing program 6 (id=4083): r0 = socket$igmp(0x2, 0x3, 0x2) socket$pptp(0x18, 0x1, 0x2) socket$pptp(0x18, 0x1, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000740)='sched_switch\x00', r1}, 0x18) close(0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa, 0x0, 0x0, 0x0, 0x400000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1e00000000000100090000000e00000000800000073084fb736568ff99c2b8d2f3e7fa928111ba9efb98e4c8595d85168dab27c3970678568e3d72aea9916d39a7b4dfddba0f9f6000ead12b3460d91860855a5c84660fc3a93e6b65b98c7f2368fad5d5eebafed785ca469bba6ce89d7e0405542a62eee1694a267eca1e4d16b847e5ba2b8a7e9c848831eb164da8c9c883018f6264502bcc71ae51ab35f6c965ac507dac392fdc5d4c7e8c70eef12df66ca68b42b8f96d36c24150ab84ee3bb54e9ceabc90f15b51259a9ab14a40b5c5086b1f06755fc20000", @ANYRES32=0x1, @ANYBLOB="f8ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000300"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r5}, 0x18) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x88a, &(0x7f0000000080)=ANY=[@ANYBLOB='dots,nodots,nocase,dots,nodots,debug\x00\b\x00\x00s,nodots,quiet,\x00'], 0x1, 0x162, &(0x7f0000000500)="$eJzs3DGr01AUB/DTvuh76tJZHAKCOBV1clSkglhQlA46KVSXVgp2iU79KH5BQTpIB+GKprS0tEihaerr77fkkD9Jzh2Syw0k7259GvRH44+jl9O4aDQiexR5zBrRimacRWkSa87XdwAA/5NZSvEjpZTOJ3HtW6SU6u4IAKia+R8ATs8/5/+HNTUGAFTG+h8ATs/rN2+fP+52O6/y/CLi+6ToFb1yW+ZPn3U79/K/WsujpkXRO1vk98s8X82vxPV5/mBjfjXu3i7zP9mTF1ms5jeiX/noAQAA4DS084WN6/t2e0venJfL9wNr6/ssbmaHGgUAsIvxl6+D98Phh8/7KZp7Os9Bi5+pdCz97FbcOY42FJesqPvJBFRtedPX3QkAAAAAAAAAAAAAALDNIT4n2nzlX/41DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQG1+BwAA///7v1kj") r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r6}, 0x4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r7, 0x0, 0x8008000000010, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a40), r8) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r8, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)={0x3c, r9, 0x5, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dvmrp1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}]}, 0x3c}}, 0x8c0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r10}, 0x10) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48089}, 0x20000010) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r12, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="5c0000000301010300000000000000000a0000020c0019"], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1f}, 0x3c) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) 6.714167379s ago: executing program 6 (id=4088): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/12, @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xfffffefd}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x800) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2440, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r4, 0x0, 0x3}, 0x18) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r6 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x100) preadv2(r6, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 6.583595719s ago: executing program 6 (id=4091): r0 = socket$inet(0x2, 0x3, 0xd) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x40}, 0x20000000) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = eventfd2(0x0, 0x0) readv(r5, &(0x7f0000000500)=[{&(0x7f0000000000)=""/92, 0x5c}], 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0x3fffffd}, 0x18) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2208c08, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}, {&(0x7f00000009c0)=ANY=[@ANYBLOB="cc0200003100000425bd7000fddbdf25d2004b8090e985c10e41bc16c3afdfa48f5504b1be674defb8e523ca931fc47fca0761f089f12dee7390f97c1afc9919b1fe48e849ff8dfba904c78d93262ae3d33f0064ebf13671c70daa79cc0fe13e298fd364e11960d535c26097d135265e7942c4c5db720b1846c07b77ed5d954b166fd8b48c9e0f6ca471ddfcbb5f163f777786f7a3fbfa7733802ee8c4a951358fe78e1ef7f4dbe179e9502c3354b1cebef86cef6a5c32967a223845ba9396fced3f604240981e8f247067e1349e286bc6c8269ebede928867184559936b04001380000072f367e932248bbb5f84927c213d001b02bcf2d2bd5b90abb49e35b671d5cc9e8646e4ecaf6db0c14b26d2c061e2895d84e85ee2272e330857cf5816d5761dcdb9cbd0815823a9e2e08d59f3a8cac38f824e82d6a380359c14f0b327fd5004cfcb9ba79164d762baff997f2fd16507defa04591b820f92c60d5c85e8eab1cc5c87f6a6027e19ea6adec8a708b47f58365690e1", @ANYRES32=r10, @ANYBLOB="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"], 0x2cc}], 0x2, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, 0x4e23, 0x0, 0x4e24, 0x0, 0x2, 0x80, 0x0, 0x11, 0x0, r10}, {0xe61, 0x0, 0x0, 0x8, 0xb, 0x800, 0xffd, 0xffffffffffffffff}, {0x7, 0x4, 0x7fffffffffffffff, 0x7}, 0x8000, 0x6e6bb3, 0x0, 0x0, 0x2, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d3, 0x3c}, 0x2, @in6=@remote, 0x3500, 0x0, 0x0, 0x4, 0xc, 0xd0, 0x1}}, 0xe8) quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000900, r10, &(0x7f0000000100)) lchown(&(0x7f0000000040)='./file0\x00', r10, 0x0) 5.748275046s ago: executing program 6 (id=4098): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x3, 0x3, 0x3}, 0x10) socket$inet6(0xa, 0x1, 0x522a) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xa) 5.179723612s ago: executing program 6 (id=4106): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x200000000000, 0x3}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000004180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x100, 0x0, 0x1}}}}}}}, 0x0) lseek(0xffffffffffffffff, 0x7fffffff, 0x2) 5.142210195s ago: executing program 34 (id=4106): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x200000000000, 0x3}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000004180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x100, 0x0, 0x1}}}}}}}, 0x0) lseek(0xffffffffffffffff, 0x7fffffff, 0x2) 1.650701607s ago: executing program 5 (id=4147): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a1e03558545115509e1c34caab9", "59f7766d", "5e33931677e0f2d7"}, 0x28) sendto$inet6(r0, &(0x7f0000000280)='S', 0x1, 0x8000, 0x0, 0x0) close(r0) 1.604794531s ago: executing program 5 (id=4148): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x53}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") read(r2, &(0x7f0000000340), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000400007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x930, &(0x7f0000000800)) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x9c) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0xa) stat(&(0x7f0000000cc0)='./file0\x00', &(0x7f00000003c0)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00002abd7000fd05df255700000008000300", @ANYRES32=r7, @ANYBLOB="060095000300000065fc95000800000006009500a600000004009500bb3400000600950001000000"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80) ptrace$poke(0x21, r3, 0x0, 0x0) r8 = fcntl$dupfd(r1, 0x0, r1) ioctl$SCSI_IOCTL_START_UNIT(r8, 0x5) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) 1.388975718s ago: executing program 0 (id=4154): io_setup(0x8, &(0x7f0000000040)=0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r2, &(0x7f0000000240)=""/44, 0x2c) getdents(r2, &(0x7f0000000040)=""/120, 0x78) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x5, r1, &(0x7f00000000c0)="4671b09850897ee02770", 0xa, 0x7fff, 0x0, 0x1, r2}]) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700040005"], 0xfe33) io_setup(0x8, &(0x7f0000000040)) (async) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') (async) getdents64(r2, &(0x7f0000000240)=""/44, 0x2c) (async) getdents(r2, &(0x7f0000000040)=""/120, 0x78) (async) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x5, r1, &(0x7f00000000c0)="4671b09850897ee02770", 0xa, 0x7fff, 0x0, 0x1, r2}]) (async) socket$kcm(0x10, 0x2, 0x0) (async) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700040005"], 0xfe33) (async) 1.247277129s ago: executing program 0 (id=4156): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x40f00, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) mknodat$loop(0xffffffffffffff9c, 0x0, 0xc211, 0x1) sendfile(r3, r3, 0x0, 0x800000009) 1.119821599s ago: executing program 0 (id=4157): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="186500000900000000000000ff01000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703002c6d131d00b70400000200000085000000820000001800000005000000000000000010000012630001040000004f8d275c20437405be4e4b4854f86de1cd11fe2d9a83a1d331f40c040710b669a12c99ea4c56ad2362d24e60b749772da3f6bee11a8455f78da058137dbec653acb3ae175122072f315dc9fb7435327f0a2303663f02e97977e96cedc3cc9b86cb6fd157a11a9ec6e9"], &(0x7f0000000180)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x20800, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x4, 0x5, 0x18, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r0, r0, r0], 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000600)='mr_dereg\x00', r1, 0x0, 0x3}, 0x18) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0x5, &(0x7f0000000080)=0x9, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000898b37403aaf89100e32a0f6c900"/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7020002000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) fspick(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = io_uring_setup(0x7be6, &(0x7f00000001c0)={0x0, 0xe23e, 0x2, 0x1, 0x253}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001bc0)=ANY=[@ANYRES64=0x0, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0xc010}, 0x4000000) r7 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7736, 0x80, 0x0, 0x34f, 0x0, r6}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x80, &(0x7f0000000640)=0x3, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r7, 0x47bc, 0x0, 0x0, 0x0, 0x0) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) socket(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r11 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000440)=""/192, 0xc0}, {&(0x7f00000000c0)=""/254, 0xfe}], 0x2, 0xda, 0x3) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r12}, 0x10) 1.034141366s ago: executing program 2 (id=4158): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000006003051878536f1216d114000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) open(&(0x7f0000000380)='./file0\x00', 0x82ff, 0x9a) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setlease(r2, 0x400, 0x300000000000000) 983.442921ms ago: executing program 5 (id=4159): unshare(0x22020600) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000580)={[{@subsystem='hugetlb'}, {@subsystem='perf_event'}, {@subsystem='perf_event'}], [{@measure}, {@audit}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000002100050100000000000000000200000000000000010005000c001400", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB], 0x28}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8840) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000180)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af36507001ac00400020208000c000000000000000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x400c800) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x68a82, 0x1a3) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) close(r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) 977.367481ms ago: executing program 0 (id=4160): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x3}}, 0x18) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="e6322e7c7e1280247435d65639081b95ea1040e52437afb57804dab05d6a745b10bea4f33074adbe3a983e62105f34c6db43e9d794b53646d3a628c4b7c055ca49c0546c48f3fc781aee19d097a7f0a4dabcee85ea6092f1175f15407915213765db3fc90cf0ddc5ef77fb7df9397795805fb5540c998c009051bd605b80de91b2bf9547cef92ae99e56b3132e261ae32162baca7c91d5460d09f927f26a5f34a6881bc94da4d4cb3f080b5196fae80e03f815257c76b6cfc5903dab5ee9", @ANYRES16=r2, @ANYBLOB="00082cbd7000fddbdf2517000000"], 0x14}}, 0x10) r3 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x4c, &(0x7f0000000080)=0xcdb, 0x4) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000340)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 965.140552ms ago: executing program 2 (id=4161): bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000c00)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x1d, &(0x7f0000000700)=@raw=[@map_idx={0x18, 0xa, 0x5, 0x0, 0xf}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @exit, @alu={0x4, 0x1, 0x7, 0x8, 0x2, 0x7fffffffffffff63, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @map_fd={0x18, 0x7, 0x1, 0x0, r7}], &(0x7f00000001c0)='syzkaller\x00', 0x80, 0xbe, &(0x7f0000000540)=""/190, 0x41000, 0x1, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r2, 0x6, &(0x7f0000000300)=[0x1], &(0x7f0000000380)=[{0x3, 0x1, 0xd, 0xb}, {0x1, 0x5, 0xb, 0x7}, {0x0, 0x1, 0x4, 0x321231c692452430}, {0x0, 0x4, 0xc, 0x8}, {0x1, 0x1, 0x5, 0x4}, {0x4, 0x3, 0xf, 0x6}], 0x10, 0x1}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r10 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r11, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x38, 0x3, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) tgkill(r10, r10, 0x2c) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000009c0)={@ifindex, 0x27e25126bddd7bd3, 0x1, 0x6, &(0x7f00000008c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0], 0x0}, 0x40) r13 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000bc0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@cgroup=r13, r8, 0x22, 0x18, 0x0, @void, @value=r0, @void, @void, r12}, 0x20) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r14}, 0x10) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000050c0200000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000e0010380dc010080080003400000000273000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000000e14000180090001006c617374"], 0x290}}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r4, 0x1, 0x0, 0x0, 0x2}) io_uring_enter(r4, 0x4c6e, 0xc67a, 0xc, 0x0, 0x0) 826.719993ms ago: executing program 2 (id=4163): fsopen(0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x2) dup3(r3, r2, 0x0) 695.666154ms ago: executing program 1 (id=4164): fsopen(0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x2) dup3(r3, r2, 0x0) 695.390574ms ago: executing program 2 (id=4165): r0 = socket$inet(0x2, 0x80000, 0x1000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000400000095000000000000004f660a3ed7bdd89b9668e8ea0ac394ee0ba419427dd7c3604827cc0cf015f54ea78318996e89a9a7d84096b02d4a71b7e2d064975c52a8b45c80645e904ec4a5a5d981cc4da347187d7350669e7d65cc38b5b08b2f9c9edc0b9b2bdce5894842b68c8bbaa26379216e40328cf09f642f3da7392292aaa9989d981697dbf05c709c9b3a02b84a871e4b57c62e0ec2728e26853a9c4305c9ceccae"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r5, 0x0, 0x400000008000f28, 0x0) splice(r4, 0x0, r3, 0x0, 0x114, 0xe) ioctl$sock_inet_sctp_SIOCINQ(r5, 0x541b, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000cc0)) 632.582509ms ago: executing program 1 (id=4166): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x40f00, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) mknodat$loop(0xffffffffffffff9c, 0x0, 0xc211, 0x1) sendfile(r3, r3, 0x0, 0x800000009) 626.948489ms ago: executing program 5 (id=4167): r0 = socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xfffffffe, 0x599f, 0x840000}, 0x1c) syz_emit_ethernet(0x68, &(0x7f0000000340)={@broadcast, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x97e]}, {0x8, 0x88be, 0x81000004}}}}}}, 0x0) (fail_nth: 1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 551.684715ms ago: executing program 5 (id=4168): syz_clone(0x40ac8000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8000) r0 = syz_open_dev$evdev(&(0x7f00000002c0), 0xc000, 0x142) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@enum64={0x1, 0x1, 0x0, 0x13, 0x1, 0x2, [{0x5, 0x357b, 0x9}]}]}, {0x0, [0x5f, 0x5f, 0x5f, 0x61, 0x5f]}}, 0x0, 0x37, 0x0, 0x1, 0xfffffff1}, 0x28) syz_io_uring_setup(0x83d, &(0x7f0000000500)={0x0, 0x9770, 0x80, 0x2, 0x3cf}, &(0x7f0000000300)=0x0, &(0x7f0000000440)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) eventfd(0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149e82, 0x244) write$cgroup_int(r4, &(0x7f0000000000)=0xfe8e, 0x12) 550.265455ms ago: executing program 1 (id=4169): r0 = socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xfffffffe, 0x599f, 0x840000}, 0x1c) syz_emit_ethernet(0x68, &(0x7f0000000340)={@broadcast, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x97e]}, {0x8, 0x88be, 0x81000004}}}}}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 493.40038ms ago: executing program 1 (id=4170): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000006003051878536f1216d114000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) open(&(0x7f0000000380)='./file0\x00', 0x82ff, 0x9a) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setlease(r2, 0x400, 0x300000000000000) 442.088564ms ago: executing program 2 (id=4171): syz_read_part_table(0x593, &(0x7f00000005c0)="$eJzs0r1LK2kUB+A3A5c0e4lcLli4hWCwigqx0CIpRGJIY0RcsbAWLLQQLCwkEq39+AcUv0BsxD6lGEEUYiUpxXpBsUmVZdfZxmplUdnleZrhPefMHF5+E/hPi8Lv7XY7EUJoJ9//9m+nhbFS98TI5FQIiTAbQij8+stfnUQ88fdXz+NzOT6XktnG/vXo82nHTc9dPX0Yxf1aFMJaCGHh4Sj1b+/G/99Z/jK1vrFU3FzJz98XVx8H5/oKXVuFxZ2hg1xlujM3E/9Ytehz9qcbw8e37fLT7vf+b/VGK3sVz2USH7Ofr/U2/72f1Wa1Nd57sjyQ+dG8qGzHub/IHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+GBn+cvU+sZScXMlP39fXH0cnOsrdG0VFneGDnKV6c7cTPQ6V4s+Z3+6MXx82y4/7X7v/1ZvtLJX8Vwm8TH7+Vpv89/7WW1WW+O9J8sDmR/Ni8p2nPuL/AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf6gwVuqeGJmcCiERZkMIo1HH0Z/1dvK1n4jnzuNnOa6XktnG/vXo82nHTc9dPX04EddrUQhrIYSFh6PUp1+Gd/sjAAD///tch0s=") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ddffffff000000000000000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000200)={0x3, 0x7ff, 0x7, 0x36cc, 0xa, "2d8a81effa6a0baad690563823677af6997619", 0xa6, 0x6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x1e80, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) msync(&(0x7f0000389000/0x3000)=nil, 0x3000, 0x1) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r9, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r3, 0x0, 0x0, 0xc80c4, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @remote}, 0x1c) sendto$inet6(r3, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) r10 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$qrtrtun(r10, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) 419.196366ms ago: executing program 1 (id=4172): r0 = socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000005d40)=[{{&(0x7f0000000180)=@can={0x1d, r3}, 0x80, 0x0}}, {{&(0x7f00000022c0)=@can={0x1d, r3}, 0x80, 0x0}}], 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') lseek(r4, 0x80000000457, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r5 = perf_event_open(&(0x7f0000000040)={0x6, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r6, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095", @ANYRES32=r7, @ANYBLOB="1800000000000000000000000000000018110000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xfffffffe, 0x599f, 0x840000}, 0x1c) syz_emit_ethernet(0x68, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08004500005a00000000002f9078ffffffffe0000001248065580000400010000800000086dd097e080088be81000004100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 418.791566ms ago: executing program 5 (id=4173): socket$inet6(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r2, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 43.734066ms ago: executing program 0 (id=4174): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) ftruncate(0xffffffffffffffff, 0x7000000) preadv2(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x3700, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000040000020f00000005002e000100000005002f000000000008000300", @ANYRES32=r3], 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 43.500986ms ago: executing program 1 (id=4175): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="5400000010000104000000000000000100000000", @ANYRES32=0x0, @ANYBLOB="fff00000000000002c0012800e00010069703667726574617000000018000280140007002001000000000000000000000000000208000a00", @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x20081}, 0x0) signalfd4(r1, &(0x7f00000003c0)={[0x6]}, 0xfffffffffffffe68, 0x800) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) syz_usb_connect(0x3, 0x1c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x2, {0x3}}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="e6322e7c7e1280247435d65639081b95ea1040e52437afb57804dab05d6a745b10bea4f33074adbe3a983e62105f34c6db43e9d794b53646d3a628c4b7c055ca49c0546c48f3fc781aee19d097a7f0a4dabcee85ea6092f1175f15407915213765db3fc90cf0ddc5ef77fb7df9397795805fb5540c998c009051bd605b80de91b2bf9547cef92ae99e56b3132e261ae32162baca7c91d5460d09f927f26a5f34a6881bc94da4d4cb3f080b5196fae80e03f815257c76b6cfc5903dab5ee9", @ANYRES16=r6, @ANYBLOB="00082cbd7000fddbdf2517000000"], 0x14}}, 0x10) 21.001748ms ago: executing program 2 (id=4176): r0 = creat(0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX=r1, @ANYRES64=r0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r2}, &(0x7f0000000540), 0x0}, 0x20) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000100)=0x100000001) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d530494c) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0x10001}, 0x18) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000380)=@filename='./file0\x00', 0x0, &(0x7f00000003c0)='./file0\x00') setsockopt$inet_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) close(r5) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000580)='afs_flock_ev\x00', r6, 0x0, 0x2}, 0x13) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES64=r7, @ANYBLOB="04f80000000000", @ANYRESHEX=r9, @ANYBLOB="2c756e616d653dd0aedec1aa20ffd81d1bf89329217cb058a396eda2ab40a26d93dd083c0074dcab6cab21ae16c4cdf97bdc355f3b41d27b654301345cb3c4cec37953322d01beaa7257964fd30fe2d72f171da72e389f382dea3c8d91906aead5d5aeccc097ef1092ea987c2b00000000000000002c00"]) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r12 = add_key$user(&(0x7f0000001040), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000240)="de", 0x1, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r11, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r12}) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000001e80)={'syz', 0x1}, 0x0, r11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) close(r0) 0s ago: executing program 0 (id=4177): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r3, &(0x7f0000000040), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x3}, 0x18) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000140)='./file0\x00') fstat(0xffffffffffffffff, &(0x7f0000000180)) stat(&(0x7f0000000140)='./file2\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0xa6) r5 = socket$netlink(0x10, 0x3, 0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX=r4], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r6}, 0x18) r7 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x6, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r7) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000dc0)=ANY=[], 0x94, 0x1) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f00000008c0)={{0x6, 0xc00000}, 0x100, './file2\x00'}) r8 = getpid() sched_setscheduler(r8, 0x1, &(0x7f0000000200)=0x7) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000400)={'\x00', 0x4, 0x2, 0x346, 0xffffffffffffffff, 0x1}) getgid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000700)='rpc_buf_alloc\x00', r0}, 0x18) sendmsg$ETHTOOL_MSG_EEE_SET(r5, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000fc0)={0x220, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x1f4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xcc, 0x5, "3a395e34d7c3f0e3a0557fdf38148e47c9f75b3a768cd3fd8766e3476f51fb4774d79b35c840c697239bbe5c9b3a4a49095221bf847099afb9086a7c52e9851cea091b33685fe0dbe1b33779b022e927eed6534e7d848d2a1d5c037c7025423deab88576675cc5384dba9d0ce98d798253ed9384470f0d6fbe00639fdacb8c439bd831d8f57b0bec06ed6de9c8261bb3645a0e24b81b6123f7b7f704a4c52e339cff6fc2bf535bb4954aa2e1fdcced31b95b0f79d84eec8a99d06bbdd46dedcfdd9a0d466bf0c5ef"}, @ETHTOOL_A_BITSET_VALUE={0x63, 0x4, "5311c4a6bc134c2ef810141a9f4f890bc62b1552ccde076f8d643b0f4ec688b7281354f9d800f59a21acdfbec64643482aaf9e557c33c71e54e16abf076403cbe6ac98757f25069217160024a32640c45cd861372778ac4cbb2bf5c9c95fdd"}, @ETHTOOL_A_BITSET_MASK={0x77, 0x5, "f7b4334d184cd6f499d14937eb9e124ec8ca96a4efbe8a478311deb386918e7ab2a592665bb5e63648abed64f169710f2f87643d5f872f747588521a3e2f1e844cf0ecb4da364d465d563f5769f5af3a94a6f0360b815d0dc3066018524c8c9f30b0dc381d6188b0be55a5644c349bb0f7104f"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x396c}]}, 0x220}, 0x1, 0x0, 0x0, 0x2}, 0x48094) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000380)) kernel console output (not intermixed with test programs): ve bond_slave_1): Releasing backup interface [ 298.171945][ T6413] bond0 (unregistering): Released all slaves [ 298.182689][T15003] hsr_slave_0: entered promiscuous mode [ 298.188805][T15003] hsr_slave_1: entered promiscuous mode [ 298.194766][T15003] debugfs: 'hsr0' already exists in 'hsr' [ 298.200573][T15003] Cannot create hsr debugfs directory [ 298.235797][ T6413] tipc: Disabling bearer [ 298.248836][ T6413] tipc: Left network mode [ 298.248846][T15091] lo speed is unknown, defaulting to 1000 [ 298.283700][T15110] loop2: detected capacity change from 0 to 2048 [ 298.290909][T15108] loop5: detected capacity change from 0 to 2048 [ 298.321249][T15108] EXT4-fs (loop5): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.342066][T15003] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 298.350973][T15003] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 298.363952][T15003] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 298.374449][T15110] loop2: p2 p3 p7 [ 298.377866][T15108] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3784: bg 0: block 120: padding at end of block bitmap is not set [ 298.394629][T15003] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 298.421591][ T6413] hsr_slave_0: left promiscuous mode [ 298.436822][ T6090] EXT4-fs (loop5): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 298.446470][ T6413] hsr_slave_1: left promiscuous mode [ 298.452332][ T6413] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.459813][ T6413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.468459][ T6413] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.475882][ T6413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.487340][ T6413] veth1_macvtap: left promiscuous mode [ 298.492944][ T6413] veth0_macvtap: left promiscuous mode [ 298.498757][ T6413] veth1_vlan: left promiscuous mode [ 298.504098][ T6413] veth0_vlan: left promiscuous mode [ 298.558123][T15121] loop5: detected capacity change from 0 to 512 [ 298.564903][T15121] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 298.577630][T15121] EXT4-fs (loop5): 1 truncate cleaned up [ 298.583705][T15121] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.597270][ T6413] team0 (unregistering): Port device team_slave_1 removed [ 298.609487][ T6413] team0 (unregistering): Port device team_slave_0 removed [ 298.617340][ T6389] smc: removing ib device syz! [ 298.702892][T15133] tipc: Enabling of bearer rejected, already enabled [ 298.720560][T15003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.733561][T15003] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.746453][ T6388] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.753548][ T6388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.761944][T15133] netlink: 'syz.0.3790': attribute type 1 has an invalid length. [ 298.776111][T15135] loop2: detected capacity change from 0 to 512 [ 298.782671][T15003] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 298.793069][T15003] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 298.805228][T15135] EXT4-fs: Ignoring removed orlov option [ 298.810745][ T6090] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.814228][ T6388] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.827075][ T6388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.836849][T15135] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 298.849112][T15135] EXT4-fs (loop2): orphan cleanup on readonly fs [ 298.856192][T15135] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3791: bg 0: block 248: padding at end of block bitmap is not set [ 298.873639][T15135] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.3791: Failed to acquire dquot type 1 [ 298.908794][T15135] EXT4-fs (loop2): 1 truncate cleaned up [ 298.924497][T15135] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 298.963690][ T3390] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 298.971231][ T3390] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 298.978667][ T3390] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 298.986106][ T3390] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 298.993588][ T3390] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 299.001056][ T3390] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 299.008549][ T3390] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 299.015966][ T3390] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 299.023383][ T3390] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 299.030929][ T3390] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 299.044336][T14110] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.059838][T15135] EXT4-fs: Ignoring removed orlov option [ 299.065925][T15135] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 299.083544][T15135] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 299.107038][T15003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.123035][ T3390] hid-generic 0000:0000:0000.0024: hidraw0: HID v8.00 Device [syz0] on syz0 [ 299.133673][T15135] EXT4-fs error (device loop2): __ext4_remount:6740: comm syz.2.3791: Abort forced by user [ 299.149183][T15135] EXT4-fs (loop2): Remounting filesystem read-only [ 299.155800][T15135] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 299.182561][T12572] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.193253][ T6380] tipc: Subscription rejected, illegal request [ 299.298077][T15166] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 299.421203][T15179] 9pnet_fd: Insufficient options for proto=fd [ 299.518792][T15187] tipc: Enabled bearer , priority 10 [ 299.526081][T15189] loop2: detected capacity change from 0 to 1024 [ 299.537236][T15003] veth0_vlan: entered promiscuous mode [ 299.552481][T15187] netlink: 'syz.1.3802': attribute type 1 has an invalid length. [ 299.572254][T15189] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 299.585849][T15003] veth1_vlan: entered promiscuous mode [ 299.601831][T15189] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm syz.2.3803: lblock 0 mapped to illegal pblock 0 (length 6) [ 299.628475][T15003] veth0_macvtap: entered promiscuous mode [ 299.637266][T15193] loop1: detected capacity change from 0 to 128 [ 299.644112][T15193] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 299.645985][T15003] veth1_macvtap: entered promiscuous mode [ 299.667314][T15189] EXT4-fs error (device loop2): ext4_ext_remove_space:2955: inode #15: comm syz.2.3803: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 299.698413][T15003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.708840][T15193] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 299.722645][T15003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.745326][ T6384] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.765638][ T6384] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.790779][T12572] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 299.806261][ T6384] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.824884][ T6384] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.861602][T15203] FAULT_INJECTION: forcing a failure. [ 299.861602][T15203] name failslab, interval 1, probability 0, space 0, times 0 [ 299.874372][T15203] CPU: 0 UID: 0 PID: 15203 Comm: syz.6.3747 Not tainted syzkaller #0 PREEMPT(voluntary) [ 299.874406][T15203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 299.874422][T15203] Call Trace: [ 299.874429][T15203] [ 299.874477][T15203] __dump_stack+0x1d/0x30 [ 299.874502][T15203] dump_stack_lvl+0xe8/0x140 [ 299.874527][T15203] dump_stack+0x15/0x1b [ 299.874546][T15203] should_fail_ex+0x265/0x280 [ 299.874608][T15203] should_failslab+0x8c/0xb0 [ 299.874637][T15203] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 299.874669][T15203] ? __d_alloc+0x3d/0x340 [ 299.874705][T15203] __d_alloc+0x3d/0x340 [ 299.874730][T15203] ? mpol_shared_policy_init+0xbd/0x4c0 [ 299.874781][T15203] d_alloc_pseudo+0x1e/0x80 [ 299.874906][T15203] alloc_file_pseudo+0x71/0x160 [ 299.874949][T15203] __shmem_file_setup+0x1de/0x210 [ 299.874987][T15203] shmem_file_setup+0x3b/0x50 [ 299.875057][T15203] __se_sys_memfd_create+0x2c3/0x590 [ 299.875124][T15203] __x64_sys_memfd_create+0x31/0x40 [ 299.875148][T15203] x64_sys_call+0x2abe/0x2ff0 [ 299.875172][T15203] do_syscall_64+0xd2/0x200 [ 299.875201][T15203] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 299.875295][T15203] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 299.875360][T15203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.875385][T15203] RIP: 0033:0x7f7b5267ebe9 [ 299.875402][T15203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.875420][T15203] RSP: 002b:00007f7b510e6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 299.875436][T15203] RAX: ffffffffffffffda RBX: 0000000000000512 RCX: 00007f7b5267ebe9 [ 299.875483][T15203] RDX: 00007f7b510e6ef0 RSI: 0000000000000000 RDI: 00007f7b527027e8 [ 299.875494][T15203] RBP: 0000200000000380 R08: 00007f7b510e6bb7 R09: 00007f7b510e6e40 [ 299.875507][T15203] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000080 [ 299.875520][T15203] R13: 00007f7b510e6ef0 R14: 00007f7b510e6eb0 R15: 0000200000000040 [ 299.875574][T15203] [ 299.876582][ T6384] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 299.896318][T15205] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=15205 comm=syz.5.3807 [ 300.080773][T15210] netlink: 'syz.2.3806': attribute type 4 has an invalid length. [ 300.132327][T15201] SELinux: security_context_str_to_sid (仲VW廤) failed with errno=-22 [ 300.217649][T15221] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 300.412031][T15236] loop1: detected capacity change from 0 to 128 [ 300.451736][T15236] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 300.465363][T15226] FAULT_INJECTION: forcing a failure. [ 300.465363][T15226] name failslab, interval 1, probability 0, space 0, times 0 [ 300.478048][T15226] CPU: 0 UID: 0 PID: 15226 Comm: syz.2.3814 Not tainted syzkaller #0 PREEMPT(voluntary) [ 300.478082][T15226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 300.478121][T15226] Call Trace: [ 300.478128][T15226] [ 300.478136][T15226] __dump_stack+0x1d/0x30 [ 300.478162][T15226] dump_stack_lvl+0xe8/0x140 [ 300.478186][T15226] dump_stack+0x15/0x1b [ 300.478207][T15226] should_fail_ex+0x265/0x280 [ 300.478314][T15226] ? audit_log_d_path+0x8d/0x150 [ 300.478391][T15226] should_failslab+0x8c/0xb0 [ 300.478499][T15226] __kmalloc_cache_noprof+0x4c/0x320 [ 300.478538][T15226] audit_log_d_path+0x8d/0x150 [ 300.478605][T15226] audit_log_d_path_exe+0x42/0x70 [ 300.478643][T15226] audit_log_task+0x1e9/0x250 [ 300.478678][T15226] audit_seccomp+0x61/0x100 [ 300.478765][T15226] ? __seccomp_filter+0x68c/0x10d0 [ 300.478838][T15226] __seccomp_filter+0x69d/0x10d0 [ 300.478867][T15226] ? _raw_spin_unlock+0x14/0x50 [ 300.478892][T15226] ? finish_task_switch+0xb6/0x2b0 [ 300.478971][T15226] __secure_computing+0x82/0x150 [ 300.478998][T15226] syscall_trace_enter+0xcf/0x1e0 [ 300.479022][T15226] do_syscall_64+0xac/0x200 [ 300.479058][T15226] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 300.479083][T15226] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 300.479124][T15226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.479151][T15226] RIP: 0033:0x7f7e0e18d5fc [ 300.479170][T15226] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 300.479273][T15226] RSP: 002b:00007f7e0cbef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 300.479297][T15226] RAX: ffffffffffffffda RBX: 00007f7e0e3c5fa0 RCX: 00007f7e0e18d5fc [ 300.479313][T15226] RDX: 000000000000000f RSI: 00007f7e0cbef0a0 RDI: 0000000000000006 [ 300.479328][T15226] RBP: 00007f7e0cbef090 R08: 0000000000000000 R09: 0000000000000000 [ 300.479399][T15226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 300.479415][T15226] R13: 00007f7e0e3c6038 R14: 00007f7e0e3c5fa0 R15: 00007ffcb7006488 [ 300.479445][T15226] [ 300.503000][T15236] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 300.573212][T15238] netlink: 'syz.6.3819': attribute type 10 has an invalid length. [ 300.719784][T15238] __nla_validate_parse: 8 callbacks suppressed [ 300.719834][T15238] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3819'. [ 300.736850][ T10] tipc: Node number set to 1059884987 [ 300.912903][T15245] loop2: detected capacity change from 0 to 1024 [ 300.933210][ T6394] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 300.949437][T15238] dummy0: entered promiscuous mode [ 300.968382][T15245] EXT4-fs: Ignoring removed bh option [ 301.017382][T15238] bridge0: port 3(dummy0) entered blocking state [ 301.024459][T15238] bridge0: port 3(dummy0) entered disabled state [ 301.032685][T15245] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 301.075162][T15253] vhci_hcd: invalid port number 0 [ 301.081542][T15248] loop1: detected capacity change from 0 to 512 [ 301.092971][T15245] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3821'. [ 301.118449][T15238] dummy0: entered allmulticast mode [ 301.155682][T12572] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 301.184505][T15248] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 301.201650][T15248] EXT4-fs (loop1): orphan cleanup on readonly fs [ 301.220382][T15259] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3825'. [ 301.241661][T15248] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.3822: corrupted inode contents [ 301.269644][T15238] bridge0: port 3(dummy0) entered blocking state [ 301.276774][T15238] bridge0: port 3(dummy0) entered forwarding state [ 301.309460][T15248] EXT4-fs (loop1): Remounting filesystem read-only [ 301.339486][T15248] EXT4-fs (loop1): 1 truncate cleaned up [ 301.346345][ T6389] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 301.356972][ T6389] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 301.422979][ T6389] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 301.462348][T15248] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 301.600027][T15281] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 301.638343][T15285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.697138][T15285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.714205][T15287] tipc: Started in network mode [ 301.719168][T15287] tipc: Node identity a6c95ad39111, cluster identity 4711 [ 301.726646][T15287] tipc: Enabled bearer , priority 0 [ 301.770324][T15276] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3828'. [ 301.771486][T15287] syzkaller0: entered promiscuous mode [ 301.785092][T15287] syzkaller0: entered allmulticast mode [ 301.809021][T14110] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.837556][T15287] tipc: Resetting bearer [ 301.868246][T15286] tipc: Resetting bearer [ 301.891273][T15286] tipc: Disabling bearer [ 301.901644][T15294] netlink: 'syz.1.3837': attribute type 4 has an invalid length. [ 301.932664][ T6394] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.967365][T15296] loop1: detected capacity change from 0 to 2048 [ 301.998403][T15296] Alternate GPT is invalid, using primary GPT. [ 302.004760][T15296] loop1: p2 p3 p7 [ 302.044757][ T6394] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.123632][ T6394] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.183539][T15288] chnl_net:caif_netlink_parms(): no params data found [ 302.196366][ T6394] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.263972][T15288] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.271175][T15288] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.286166][T15288] bridge_slave_0: entered allmulticast mode [ 302.292637][T15288] bridge_slave_0: entered promiscuous mode [ 302.299481][T15288] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.306705][T15288] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.314033][T15288] bridge_slave_1: entered allmulticast mode [ 302.320592][T15288] bridge_slave_1: entered promiscuous mode [ 302.327430][T15317] FAULT_INJECTION: forcing a failure. [ 302.327430][T15317] name failslab, interval 1, probability 0, space 0, times 0 [ 302.340224][T15317] CPU: 1 UID: 0 PID: 15317 Comm: syz.1.3841 Not tainted syzkaller #0 PREEMPT(voluntary) [ 302.340314][T15317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 302.340326][T15317] Call Trace: [ 302.340332][T15317] [ 302.340338][T15317] __dump_stack+0x1d/0x30 [ 302.340359][T15317] dump_stack_lvl+0xe8/0x140 [ 302.340379][T15317] dump_stack+0x15/0x1b [ 302.340400][T15317] should_fail_ex+0x265/0x280 [ 302.340423][T15317] ? security_load_policy+0x66/0x890 [ 302.340503][T15317] should_failslab+0x8c/0xb0 [ 302.340527][T15317] __kmalloc_cache_noprof+0x4c/0x320 [ 302.340558][T15317] ? exc_page_fault+0x62/0xa0 [ 302.340665][T15317] security_load_policy+0x66/0x890 [ 302.340689][T15317] ? rep_movs_alternative+0x4a/0x90 [ 302.340739][T15317] sel_write_load+0x1d4/0x380 [ 302.340769][T15317] ? __pfx_sel_write_load+0x10/0x10 [ 302.340798][T15317] vfs_write+0x269/0x960 [ 302.340819][T15317] ? __rcu_read_unlock+0x4f/0x70 [ 302.340877][T15317] ? __fget_files+0x184/0x1c0 [ 302.340911][T15317] ksys_write+0xda/0x1a0 [ 302.340940][T15317] __x64_sys_write+0x40/0x50 [ 302.340969][T15317] x64_sys_call+0x27fe/0x2ff0 [ 302.340995][T15317] do_syscall_64+0xd2/0x200 [ 302.341021][T15317] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 302.341077][T15317] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 302.341171][T15317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.341195][T15317] RIP: 0033:0x7faabc1eebe9 [ 302.341222][T15317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.341241][T15317] RSP: 002b:00007faabac57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 302.341291][T15317] RAX: ffffffffffffffda RBX: 00007faabc425fa0 RCX: 00007faabc1eebe9 [ 302.341320][T15317] RDX: 00000000000044f0 RSI: 0000200000000000 RDI: 0000000000000003 [ 302.341333][T15317] RBP: 00007faabac57090 R08: 0000000000000000 R09: 0000000000000000 [ 302.341345][T15317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.341356][T15317] R13: 00007faabc426038 R14: 00007faabc425fa0 R15: 00007ffd2dd63e18 [ 302.341373][T15317] [ 302.341380][T15317] SELinux: failed to load policy [ 302.355797][ T29] kauditd_printk_skb: 676 callbacks suppressed [ 302.355816][ T29] audit: type=1326 audit(558.334:13620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15318 comm="syz.0.3842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0cdfebe9 code=0x7ffc0000 [ 302.585735][ T29] audit: type=1326 audit(558.334:13621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15318 comm="syz.0.3842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fce0cdfebe9 code=0x7ffc0000 [ 302.608743][ T29] audit: type=1326 audit(558.334:13622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15318 comm="syz.0.3842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fce0cdfec23 code=0x7ffc0000 [ 302.631721][ T29] audit: type=1326 audit(558.334:13623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15318 comm="syz.0.3842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fce0cdfec23 code=0x7ffc0000 [ 302.654516][ T29] audit: type=1326 audit(558.344:13624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15318 comm="syz.0.3842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0cdfebe9 code=0x7ffc0000 [ 302.677560][ T29] audit: type=1326 audit(558.344:13625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15318 comm="syz.0.3842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0cdfebe9 code=0x7ffc0000 [ 302.700690][ T29] audit: type=1326 audit(558.344:13626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15318 comm="syz.0.3842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0cdfebe9 code=0x7ffc0000 [ 302.723665][ T29] audit: type=1326 audit(558.344:13627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15318 comm="syz.0.3842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fce0cdfebe9 code=0x7ffc0000 [ 302.746652][ T29] audit: type=1326 audit(558.344:13628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15318 comm="syz.0.3842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0cdfebe9 code=0x7ffc0000 [ 302.769594][ T29] audit: type=1326 audit(558.344:13629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15318 comm="syz.0.3842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0cdfebe9 code=0x7ffc0000 [ 302.802727][T15324] bond1: entered promiscuous mode [ 302.807917][T15324] bond1: entered allmulticast mode [ 302.813420][T15324] 8021q: adding VLAN 0 to HW filter on device bond1 [ 302.823310][T15324] bond1 (unregistering): Released all slaves [ 302.834738][T15288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.850142][T15288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.880151][ T6394] dummy0: left allmulticast mode [ 302.886645][ T6394] bridge0: port 3(dummy0) entered disabled state [ 302.894081][ T6394] bridge_slave_1: left allmulticast mode [ 302.899766][ T6394] bridge_slave_1: left promiscuous mode [ 302.905657][ T6394] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.913628][ T6394] bridge_slave_0: left allmulticast mode [ 302.919365][ T6394] bridge_slave_0: left promiscuous mode [ 302.925219][ T6394] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.926758][T15332] FAULT_INJECTION: forcing a failure. [ 302.926758][T15332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.945330][T15332] CPU: 0 UID: 0 PID: 15332 Comm: syz.2.3845 Not tainted syzkaller #0 PREEMPT(voluntary) [ 302.945358][T15332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 302.945373][T15332] Call Trace: [ 302.945381][T15332] [ 302.945389][T15332] __dump_stack+0x1d/0x30 [ 302.945459][T15332] dump_stack_lvl+0xe8/0x140 [ 302.945483][T15332] dump_stack+0x15/0x1b [ 302.945503][T15332] should_fail_ex+0x265/0x280 [ 302.945524][T15332] should_fail+0xb/0x20 [ 302.945597][T15332] should_fail_usercopy+0x1a/0x20 [ 302.945619][T15332] _copy_to_user+0x20/0xa0 [ 302.945650][T15332] simple_read_from_buffer+0xb5/0x130 [ 302.945719][T15332] proc_fail_nth_read+0x10e/0x150 [ 302.945755][T15332] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 302.945788][T15332] vfs_read+0x1a8/0x770 [ 302.945814][T15332] ? __rcu_read_unlock+0x4f/0x70 [ 302.945864][T15332] ? __fget_files+0x184/0x1c0 [ 302.945890][T15332] ksys_read+0xda/0x1a0 [ 302.945982][T15332] __x64_sys_read+0x40/0x50 [ 302.946008][T15332] x64_sys_call+0x27bc/0x2ff0 [ 302.946034][T15332] do_syscall_64+0xd2/0x200 [ 302.946179][T15332] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 302.946311][T15332] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 302.946338][T15332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.946358][T15332] RIP: 0033:0x7f7e0e18d5fc [ 302.946376][T15332] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 302.946491][T15332] RSP: 002b:00007f7e0cbef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 302.946510][T15332] RAX: ffffffffffffffda RBX: 00007f7e0e3c5fa0 RCX: 00007f7e0e18d5fc [ 302.946524][T15332] RDX: 000000000000000f RSI: 00007f7e0cbef0a0 RDI: 000000000000000a [ 302.946573][T15332] RBP: 00007f7e0cbef090 R08: 0000000000000000 R09: 0000000000000000 [ 302.946636][T15332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.946651][T15332] R13: 00007f7e0e3c6038 R14: 00007f7e0e3c5fa0 R15: 00007ffcb7006488 [ 302.946675][T15332] [ 303.167700][T15334] SELinux: policydb version 6277 does not match my version range 15-35 [ 303.176700][T15334] SELinux: failed to load policy [ 303.213414][T15338] netlink: 'syz.0.3848': attribute type 4 has an invalid length. [ 303.221464][T15336] loop2: detected capacity change from 0 to 1024 [ 303.228435][T15336] EXT4-fs: inline encryption not supported [ 303.234445][T15336] EXT4-fs: Ignoring removed bh option [ 303.237110][T15340] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3849'. [ 303.246762][T15336] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.263882][ T6394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.266656][T15346] SELinux: security_context_str_to_sid (仲VW廤) failed with errno=-22 [ 303.283704][ T6394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.293267][T12572] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.293463][ T6394] bond0 (unregistering): Released all slaves [ 303.312981][T15288] team0: Port device team_slave_0 added [ 303.321475][T15288] team0: Port device team_slave_1 added [ 303.356076][T15349] netlink: 'syz.2.3850': attribute type 10 has an invalid length. [ 303.364663][T15349] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3850'. [ 303.375235][ T6394] tipc: Disabling bearer [ 303.381616][ T6394] tipc: Left network mode [ 303.397442][T15288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.404497][T15288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.430472][T15288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.446768][ T6394] hsr_slave_0: left promiscuous mode [ 303.459153][ T6394] hsr_slave_1: left promiscuous mode [ 303.465136][ T6394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.472520][ T6394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.480104][T15359] FAULT_INJECTION: forcing a failure. [ 303.480104][T15359] name failslab, interval 1, probability 0, space 0, times 0 [ 303.492855][T15359] CPU: 1 UID: 0 PID: 15359 Comm: syz.2.3854 Not tainted syzkaller #0 PREEMPT(voluntary) [ 303.492888][T15359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 303.492904][T15359] Call Trace: [ 303.492911][T15359] [ 303.492921][T15359] __dump_stack+0x1d/0x30 [ 303.492946][T15359] dump_stack_lvl+0xe8/0x140 [ 303.492970][T15359] dump_stack+0x15/0x1b [ 303.492991][T15359] should_fail_ex+0x265/0x280 [ 303.493018][T15359] should_failslab+0x8c/0xb0 [ 303.493050][T15359] kmem_cache_alloc_noprof+0x50/0x310 [ 303.493080][T15359] ? vm_area_alloc+0x2c/0xb0 [ 303.493119][T15359] vm_area_alloc+0x2c/0xb0 [ 303.493154][T15359] mmap_region+0xaa2/0x1630 [ 303.493199][T15359] do_mmap+0x9b3/0xbe0 [ 303.493236][T15359] vm_mmap_pgoff+0x17a/0x2e0 [ 303.493276][T15359] ksys_mmap_pgoff+0xc2/0x310 [ 303.493310][T15359] ? __x64_sys_mmap+0x49/0x70 [ 303.493332][T15359] x64_sys_call+0x14a3/0x2ff0 [ 303.493355][T15359] do_syscall_64+0xd2/0x200 [ 303.493383][T15359] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 303.493407][T15359] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 303.493438][T15359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.493458][T15359] RIP: 0033:0x7f7e0e18ec23 [ 303.493473][T15359] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 303.493490][T15359] RSP: 002b:00007f7e0cbeee18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 303.493512][T15359] RAX: ffffffffffffffda RBX: 0000000000000247 RCX: 00007f7e0e18ec23 [ 303.493528][T15359] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 303.493540][T15359] RBP: 0000200000000882 R08: 00000000ffffffff R09: 0000000000000000 [ 303.493551][T15359] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000008 [ 303.493563][T15359] R13: 00007f7e0cbeeef0 R14: 00007f7e0cbeeeb0 R15: 0000200000000080 [ 303.493581][T15359] [ 303.494718][ T6394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.636853][T15368] cgroup: Unknown subsys name 'measure' [ 303.640275][ T6394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.706593][ T6394] veth1_macvtap: left promiscuous mode [ 303.712202][ T6394] veth0_macvtap: left promiscuous mode [ 303.717862][ T6394] veth1_vlan: left promiscuous mode [ 303.723132][ T6394] veth0_vlan: left promiscuous mode [ 303.780965][T15370] netlink: 5 bytes leftover after parsing attributes in process `syz.6.3857'. [ 303.810877][T15288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.818050][T15288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.844084][T15288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.860733][T15364] wireguard0: entered promiscuous mode [ 303.866276][T15364] wireguard0: entered allmulticast mode [ 303.876500][T15369] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.883669][T15370] 0{X功: renamed from gretap0 (while UP) [ 303.891909][T15370] 0{X功: entered allmulticast mode [ 303.898175][T15370] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 303.930700][T15288] hsr_slave_0: entered promiscuous mode [ 303.937024][T15288] hsr_slave_1: entered promiscuous mode [ 303.987903][T15379] loop6: detected capacity change from 0 to 512 [ 304.007494][T15379] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.024202][T15379] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.3860: corrupted inode contents [ 304.036727][T15379] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.3860: mark_inode_dirty error [ 304.048937][T15379] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.3860: corrupted inode contents [ 304.064743][T15385] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3862'. [ 304.089483][T15003] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.112884][T15390] loop6: detected capacity change from 0 to 128 [ 304.119966][T15390] EXT4-fs (loop6): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 304.157173][T15399] tipc: Enabled bearer , priority 0 [ 304.164741][T15399] syzkaller0: entered promiscuous mode [ 304.170348][T15399] syzkaller0: entered allmulticast mode [ 304.184664][T15399] tipc: Resetting bearer [ 304.191559][T15398] tipc: Resetting bearer [ 304.210495][T15398] tipc: Disabling bearer [ 304.240542][T15406] loop2: detected capacity change from 0 to 1024 [ 304.247707][T15406] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 304.258672][T15406] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 304.271018][T15406] JBD2: no valid journal superblock found [ 304.276944][T15406] EXT4-fs (loop2): Could not load journal inode [ 304.329899][T15406] FAULT_INJECTION: forcing a failure. [ 304.329899][T15406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.343089][T15406] CPU: 1 UID: 0 PID: 15406 Comm: syz.2.3869 Not tainted syzkaller #0 PREEMPT(voluntary) [ 304.343123][T15406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 304.343154][T15406] Call Trace: [ 304.343162][T15406] [ 304.343171][T15406] __dump_stack+0x1d/0x30 [ 304.343197][T15406] dump_stack_lvl+0xe8/0x140 [ 304.343221][T15406] dump_stack+0x15/0x1b [ 304.343238][T15406] should_fail_ex+0x265/0x280 [ 304.343261][T15406] should_fail+0xb/0x20 [ 304.343320][T15406] should_fail_usercopy+0x1a/0x20 [ 304.343420][T15406] _copy_from_user+0x1c/0xb0 [ 304.343451][T15406] __se_sys_mount+0x10d/0x2e0 [ 304.343474][T15406] ? fput+0x8f/0xc0 [ 304.343504][T15406] ? ksys_write+0x192/0x1a0 [ 304.343545][T15406] __x64_sys_mount+0x67/0x80 [ 304.343568][T15406] x64_sys_call+0x2b4d/0x2ff0 [ 304.343590][T15406] do_syscall_64+0xd2/0x200 [ 304.343658][T15406] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 304.343745][T15406] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 304.343792][T15406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.343814][T15406] RIP: 0033:0x7f7e0e18ebe9 [ 304.343830][T15406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.343849][T15406] RSP: 002b:00007f7e0cbef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 304.343893][T15406] RAX: ffffffffffffffda RBX: 00007f7e0e3c5fa0 RCX: 00007f7e0e18ebe9 [ 304.343906][T15406] RDX: 00002000000000c0 RSI: 0000200000000240 RDI: 0000000000000000 [ 304.343919][T15406] RBP: 00007f7e0cbef090 R08: 0000200000000000 R09: 0000000000000000 [ 304.344011][T15406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.344023][T15406] R13: 00007f7e0e3c6038 R14: 00007f7e0e3c5fa0 R15: 00007ffcb7006488 [ 304.344042][T15406] [ 304.344707][T15406] SELinux: security_context_str_to_sid (-歑軜7.H\ %簎@) failed with errno=-22 [ 304.371613][T15409] loop1: detected capacity change from 0 to 1024 [ 304.541698][T15412] netlink: 'w蓿': attribute type 4 has an invalid length. [ 304.554347][T15409] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 304.565357][T15409] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 304.594082][T15415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3868'. [ 304.603114][T15415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3868'. [ 304.789026][T15418] SELinux: security_context_str_to_sid (仲VW廤) failed with errno=-22 [ 304.810902][T15288] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 304.818802][T15409] JBD2: no valid journal superblock found [ 304.824548][T15409] EXT4-fs (loop1): Could not load journal inode [ 304.840735][T15288] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 304.892006][T15288] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 304.904816][T15288] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 304.981576][T15288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.994512][T15288] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.001899][T15409] loop1: detected capacity change from 0 to 256 [ 305.009709][ T6384] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.016873][ T6384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.029228][ T6384] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.036368][ T6384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.271519][T15288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.580800][T15288] veth0_vlan: entered promiscuous mode [ 305.596713][T15288] veth1_vlan: entered promiscuous mode [ 305.623493][T15288] veth0_macvtap: entered promiscuous mode [ 305.637820][T15288] veth1_macvtap: entered promiscuous mode [ 305.648284][T15288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.658483][T15288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.672287][ T6388] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.683882][ T6388] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.696114][ T6388] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.713064][ T6388] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.020768][T15488] loop6: detected capacity change from 0 to 512 [ 306.032820][T15488] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 306.041625][T15488] EXT4-fs (loop6): orphan cleanup on readonly fs [ 306.055096][T15488] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.3888: bad orphan inode 13 [ 306.072341][T15488] ext4_test_bit(bit=12, block=18) = 1 [ 306.077873][T15488] is_bad_inode(inode)=0 [ 306.082042][T15488] NEXT_ORPHAN(inode)=2130706432 [ 306.086950][T15488] max_ino=32 [ 306.090188][T15488] i_nlink=1 [ 306.093844][T15488] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 306.107518][T15488] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 306.127780][T15492] loop1: detected capacity change from 0 to 512 [ 306.134749][T15003] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.138118][T15492] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 306.192211][T15497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3891'. [ 306.212912][T15485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3887'. [ 306.264394][T15502] loop1: detected capacity change from 0 to 2048 [ 306.288769][T15502] loop1: p2 p3 p7 [ 306.318929][T15505] FAULT_INJECTION: forcing a failure. [ 306.318929][T15505] name failslab, interval 1, probability 0, space 0, times 0 [ 306.331720][T15505] CPU: 1 UID: 0 PID: 15505 Comm: syz.1.3893 Not tainted syzkaller #0 PREEMPT(voluntary) [ 306.331744][T15505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 306.331812][T15505] Call Trace: [ 306.331817][T15505] [ 306.331823][T15505] __dump_stack+0x1d/0x30 [ 306.331842][T15505] dump_stack_lvl+0xe8/0x140 [ 306.331859][T15505] dump_stack+0x15/0x1b [ 306.331944][T15505] should_fail_ex+0x265/0x280 [ 306.331999][T15505] ? alloc_fs_context+0x44/0x4e0 [ 306.332018][T15505] should_failslab+0x8c/0xb0 [ 306.332039][T15505] __kmalloc_cache_noprof+0x4c/0x320 [ 306.332102][T15505] alloc_fs_context+0x44/0x4e0 [ 306.332148][T15505] fs_context_for_mount+0x22/0x30 [ 306.332167][T15505] do_new_mount+0xe9/0x5e0 [ 306.332186][T15505] ? security_capable+0x83/0x90 [ 306.332209][T15505] path_mount+0x4a4/0xb20 [ 306.332302][T15505] ? user_path_at+0x109/0x130 [ 306.332333][T15505] __se_sys_mount+0x28f/0x2e0 [ 306.332362][T15505] ? fput+0x8f/0xc0 [ 306.332390][T15505] __x64_sys_mount+0x67/0x80 [ 306.332483][T15505] x64_sys_call+0x2b4d/0x2ff0 [ 306.332502][T15505] do_syscall_64+0xd2/0x200 [ 306.332528][T15505] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 306.332555][T15505] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 306.332578][T15505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.332633][T15505] RIP: 0033:0x7faabc1eebe9 [ 306.332677][T15505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.332692][T15505] RSP: 002b:00007faabac57038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 306.332709][T15505] RAX: ffffffffffffffda RBX: 00007faabc425fa0 RCX: 00007faabc1eebe9 [ 306.332720][T15505] RDX: 0000200000001440 RSI: 0000200000001400 RDI: 0000000000000000 [ 306.332730][T15505] RBP: 00007faabac57090 R08: 0000200000000080 R09: 0000000000000000 [ 306.332741][T15505] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 306.332752][T15505] R13: 00007faabc426038 R14: 00007faabc425fa0 R15: 00007ffd2dd63e18 [ 306.332816][T15505] [ 306.382510][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a7c1600: rx timeout, send abort [ 306.545282][ C0] vcan0: j1939_tp_rxtimer: 0xffff88810a95a200: rx timeout, send abort [ 306.553554][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a7c1600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 306.567893][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88810a95a200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 306.686909][T15514] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 306.697448][T15520] loop5: detected capacity change from 0 to 1024 [ 306.704358][T15520] EXT4-fs: inline encryption not supported [ 306.711595][T15520] EXT4-fs: Ignoring removed bh option [ 306.736234][T15524] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002 [ 306.743008][T15525] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 306.756009][T15525] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 306.765560][T15520] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.785122][T15525] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 306.799618][T15525] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 306.821308][T15525] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 306.844838][T15525] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 306.868701][T15525] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 306.889946][T15525] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 306.937343][T15525] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 306.961166][T15525] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 306.968660][T15288] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.975559][T15525] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 306.997446][T15525] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 307.013955][T15525] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 307.021258][T15525] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 307.031135][T15525] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 307.039863][T15533] block device autoloading is deprecated and will be removed. [ 307.056739][T15533] FAULT_INJECTION: forcing a failure. [ 307.056739][T15533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.069876][T15533] CPU: 1 UID: 0 PID: 15533 Comm: syz.0.3902 Not tainted syzkaller #0 PREEMPT(voluntary) [ 307.069908][T15533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 307.069920][T15533] Call Trace: [ 307.069927][T15533] [ 307.069935][T15533] __dump_stack+0x1d/0x30 [ 307.069972][T15533] dump_stack_lvl+0xe8/0x140 [ 307.069997][T15533] dump_stack+0x15/0x1b [ 307.070018][T15533] should_fail_ex+0x265/0x280 [ 307.070044][T15533] should_fail+0xb/0x20 [ 307.070142][T15533] should_fail_usercopy+0x1a/0x20 [ 307.070170][T15533] _copy_to_user+0x20/0xa0 [ 307.070206][T15533] simple_read_from_buffer+0xb5/0x130 [ 307.070234][T15533] proc_fail_nth_read+0x10e/0x150 [ 307.070266][T15533] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 307.070374][T15533] vfs_read+0x1a8/0x770 [ 307.070394][T15533] ? __rcu_read_unlock+0x4f/0x70 [ 307.070414][T15533] ? __fget_files+0x184/0x1c0 [ 307.070442][T15533] ksys_read+0xda/0x1a0 [ 307.070479][T15533] __x64_sys_read+0x40/0x50 [ 307.070529][T15533] x64_sys_call+0x27bc/0x2ff0 [ 307.070555][T15533] do_syscall_64+0xd2/0x200 [ 307.070584][T15533] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 307.070681][T15533] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 307.070715][T15533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.070739][T15533] RIP: 0033:0x7fce0cdfd5fc [ 307.070757][T15533] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 307.070795][T15533] RSP: 002b:00007fce0b85f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 307.070818][T15533] RAX: ffffffffffffffda RBX: 00007fce0d035fa0 RCX: 00007fce0cdfd5fc [ 307.070833][T15533] RDX: 000000000000000f RSI: 00007fce0b85f0a0 RDI: 0000000000000004 [ 307.070844][T15533] RBP: 00007fce0b85f090 R08: 0000000000000000 R09: 0000000000000000 [ 307.070908][T15533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.070920][T15533] R13: 00007fce0d036038 R14: 00007fce0d035fa0 R15: 00007ffdbef61e48 [ 307.070938][T15533] [ 307.282979][T15536] loop5: detected capacity change from 0 to 128 [ 307.332597][T15536] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 307.382915][ T29] kauditd_printk_skb: 542 callbacks suppressed [ 307.382934][ T29] audit: type=1326 audit(563.354:14172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15541 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0cdfebe9 code=0x7ffc0000 [ 307.413058][T15542] SELinux: security_context_str_to_sid (仲VW廤) failed with errno=-22 [ 307.423373][T15288] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 307.434409][T15546] FAULT_INJECTION: forcing a failure. [ 307.434409][T15546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.442703][ T29] audit: type=1326 audit(563.384:14173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15541 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0cdfebe9 code=0x7ffc0000 [ 307.447592][T15546] CPU: 1 UID: 0 PID: 15546 Comm: syz.2.3907 Not tainted syzkaller #0 PREEMPT(voluntary) [ 307.447631][T15546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 307.447649][T15546] Call Trace: [ 307.447657][T15546] [ 307.447667][T15546] __dump_stack+0x1d/0x30 [ 307.447695][T15546] dump_stack_lvl+0xe8/0x140 [ 307.447747][T15546] dump_stack+0x15/0x1b [ 307.447826][T15546] should_fail_ex+0x265/0x280 [ 307.447908][T15546] should_fail+0xb/0x20 [ 307.447962][T15546] should_fail_usercopy+0x1a/0x20 [ 307.447993][T15546] _copy_from_user+0x1c/0xb0 [ 307.448031][T15546] __copy_msghdr+0x244/0x300 [ 307.448063][T15546] ___sys_sendmsg+0x109/0x1d0 [ 307.448113][T15546] __x64_sys_sendmsg+0xd4/0x160 [ 307.448199][T15546] x64_sys_call+0x191e/0x2ff0 [ 307.448227][T15546] do_syscall_64+0xd2/0x200 [ 307.448328][T15546] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 307.448359][T15546] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 307.448394][T15546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.448501][T15546] RIP: 0033:0x7f7e0e18ebe9 [ 307.448520][T15546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.448544][T15546] RSP: 002b:00007f7e0cbef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.448627][T15546] RAX: ffffffffffffffda RBX: 00007f7e0e3c5fa0 RCX: 00007f7e0e18ebe9 [ 307.448717][T15546] RDX: 0000000004004814 RSI: 0000200000000600 RDI: 0000000000000006 [ 307.448733][T15546] RBP: 00007f7e0cbef090 R08: 0000000000000000 R09: 0000000000000000 [ 307.448827][T15546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.448896][T15546] R13: 00007f7e0e3c6038 R14: 00007f7e0e3c5fa0 R15: 00007ffcb7006488 [ 307.448922][T15546] [ 307.645268][ T29] audit: type=1326 audit(563.384:14174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15541 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce0cdfebe9 code=0x7ffc0000 [ 307.668420][ T29] audit: type=1326 audit(563.384:14175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15541 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0cdfebe9 code=0x7ffc0000 [ 307.691427][ T29] audit: type=1326 audit(563.384:14176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15541 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fce0cdfebe9 code=0x7ffc0000 [ 307.714393][ T29] audit: type=1326 audit(563.404:14177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15541 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0cdfebe9 code=0x7ffc0000 [ 307.737388][ T29] audit: type=1326 audit(563.404:14178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15541 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0cdfebe9 code=0x7ffc0000 [ 307.825999][T15554] loop1: detected capacity change from 0 to 2048 [ 307.833226][T15556] loop5: detected capacity change from 0 to 512 [ 307.842641][T15558] 9pnet_fd: p9_fd_create_tcp (15558): problem connecting socket to 127.0.0.1 [ 307.851591][ T29] audit: type=1400 audit(563.814:14179): avc: denied { mounton } for pid=15557 comm="syz.2.3913" path="/syzcgroup/cpu/syz2/cgroup.procs" dev="cgroup" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 307.901659][T15554] loop1: p2 p3 p7 [ 307.908882][T15570] loop2: detected capacity change from 0 to 128 [ 307.915596][T15556] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.928376][ T29] audit: type=1326 audit(563.894:14180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15553 comm="syz.1.3911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faabc1eebe9 code=0x7ffc0000 [ 307.951455][ T29] audit: type=1326 audit(563.894:14181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15553 comm="syz.1.3911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faabc1eebe9 code=0x7ffc0000 [ 307.978648][T15556] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.3912: corrupted inode contents [ 307.991236][T15556] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.3912: mark_inode_dirty error [ 308.003211][T15556] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.3912: corrupted inode contents [ 308.018344][T15570] FAT-fs (loop2): Directory bread(block 32) failed [ 308.024874][T15570] FAT-fs (loop2): Directory bread(block 33) failed [ 308.035220][T15570] FAT-fs (loop2): Directory bread(block 34) failed [ 308.041873][T15570] FAT-fs (loop2): Directory bread(block 35) failed [ 308.048677][T15570] FAT-fs (loop2): Directory bread(block 36) failed [ 308.055330][T15570] FAT-fs (loop2): Directory bread(block 37) failed [ 308.061881][T15570] FAT-fs (loop2): Directory bread(block 38) failed [ 308.066102][T15573] loop6: detected capacity change from 0 to 164 [ 308.068513][T15556] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.3912: mark_inode_dirty error [ 308.087083][T15573] ISOFS: unable to read i-node block [ 308.092440][T15573] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 308.101665][T15570] FAT-fs (loop2): Directory bread(block 39) failed [ 308.109306][T15570] FAT-fs (loop2): Directory bread(block 40) failed [ 308.116101][T15570] FAT-fs (loop2): Directory bread(block 41) failed [ 308.128252][T15576] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15576 comm=syz.0.3918 [ 308.150791][T15576] 9pnet_fd: p9_fd_create_tcp (15576): problem connecting socket to 127.0.0.1 [ 308.153602][T15570] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 308.168218][T15570] FAT-fs (loop2): Filesystem has been set read-only [ 308.178990][T15580] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15580 comm=syz.6.3919 [ 308.194342][T15570] syz.2.3916: attempt to access beyond end of device [ 308.194342][T15570] loop2: rw=2049, sector=4184, nr_sectors = 16 limit=128 [ 308.207466][T15582] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3920'. [ 308.218635][T15570] syz.2.3916: attempt to access beyond end of device [ 308.218635][T15570] loop2: rw=2049, sector=4208, nr_sectors = 4 limit=128 [ 308.232178][T15570] Buffer I/O error on dev loop2, logical block 1052, lost async page write [ 308.242640][T15570] syz.2.3916: attempt to access beyond end of device [ 308.242640][T15570] loop2: rw=2049, sector=4216, nr_sectors = 4 limit=128 [ 308.256243][T15570] Buffer I/O error on dev loop2, logical block 1054, lost async page write [ 308.266308][T15585] FAULT_INJECTION: forcing a failure. [ 308.266308][T15585] name failslab, interval 1, probability 0, space 0, times 0 [ 308.278985][T15585] CPU: 1 UID: 0 PID: 15585 Comm: syz.6.3919 Not tainted syzkaller #0 PREEMPT(voluntary) [ 308.279018][T15585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 308.279059][T15585] Call Trace: [ 308.279066][T15585] [ 308.279074][T15585] __dump_stack+0x1d/0x30 [ 308.279101][T15585] dump_stack_lvl+0xe8/0x140 [ 308.279120][T15585] dump_stack+0x15/0x1b [ 308.279137][T15585] should_fail_ex+0x265/0x280 [ 308.279165][T15585] should_failslab+0x8c/0xb0 [ 308.279191][T15585] kmem_cache_alloc_node_noprof+0x57/0x320 [ 308.279226][T15585] ? __alloc_skb+0x101/0x320 [ 308.279246][T15585] __alloc_skb+0x101/0x320 [ 308.279265][T15585] tcp_send_active_reset+0x5f/0x390 [ 308.279339][T15585] ? inet_put_port+0x21/0x3b0 [ 308.279359][T15585] tcp_disconnect+0x313/0xe30 [ 308.279393][T15585] inet_child_forget+0x43/0x180 [ 308.279454][T15585] inet_csk_listen_stop+0x293/0x920 [ 308.279484][T15585] ? inet_csk_listen_stop+0xf7/0x920 [ 308.279519][T15585] __tcp_close+0x3a0/0x10c0 [ 308.279630][T15585] ? __rcu_read_unlock+0x4f/0x70 [ 308.279653][T15585] tcp_close+0x28/0xd0 [ 308.279685][T15585] inet_release+0xce/0xf0 [ 308.279776][T15585] inet6_release+0x3e/0x60 [ 308.279808][T15585] sock_close+0x68/0x150 [ 308.279875][T15585] ? __pfx_sock_close+0x10/0x10 [ 308.279901][T15585] __fput+0x298/0x650 [ 308.279941][T15585] ____fput+0x1c/0x30 [ 308.280007][T15585] task_work_run+0x131/0x1a0 [ 308.280038][T15585] exit_to_user_mode_loop+0xe4/0x100 [ 308.280060][T15585] do_syscall_64+0x1d6/0x200 [ 308.280156][T15585] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 308.280260][T15585] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 308.280287][T15585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.280308][T15585] RIP: 0033:0x7f7b5267ebe9 [ 308.280324][T15585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.280357][T15585] RSP: 002b:00007f7b510c6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 308.280375][T15585] RAX: 0000000000000000 RBX: 00007f7b528b6090 RCX: 00007f7b5267ebe9 [ 308.280388][T15585] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000009 [ 308.280401][T15585] RBP: 00007f7b510c6090 R08: 0000000000000000 R09: 0000000000000000 [ 308.280414][T15585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.280425][T15585] R13: 00007f7b528b6128 R14: 00007f7b528b6090 R15: 00007ffdd08b81b8 [ 308.280444][T15585] [ 308.292460][T15570] syz.2.3916: attempt to access beyond end of device [ 308.292460][T15570] loop2: rw=2049, sector=4228, nr_sectors = 4 limit=128 [ 308.292492][T15570] Buffer I/O error on dev loop2, logical block 1057, lost async page write [ 308.292550][T15570] syz.2.3916: attempt to access beyond end of device [ 308.292550][T15570] loop2: rw=2049, sector=4236, nr_sectors = 4 limit=128 [ 308.292574][T15570] Buffer I/O error on dev loop2, logical block 1059, lost async page write [ 308.292613][T15570] syz.2.3916: attempt to access beyond end of device [ 308.292613][T15570] loop2: rw=2049, sector=4240, nr_sectors = 4 limit=128 [ 308.360777][T15589] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3922'. [ 308.599174][T15593] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3922'. [ 308.622391][T15596] loop2: detected capacity change from 0 to 256 [ 308.633308][T15596] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3923'. [ 308.669889][T15288] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.694818][T15604] loop5: detected capacity change from 0 to 1024 [ 308.708978][T15604] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.721253][T15606] loop1: detected capacity change from 0 to 2048 [ 308.729521][T15604] usb usb1: check_ctrlrecip: process 15604 (+}[@) requesting ep 01 but needs 81 [ 308.738827][T15604] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 308.746095][T15610] loop2: detected capacity change from 0 to 512 [ 308.750176][T15604] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 1: comm +}[@: lblock 1 mapped to illegal pblock 1 (length 15) [ 308.766704][T15604] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 308.779277][T15604] EXT4-fs (loop5): This should not happen!! Data will be lost [ 308.779277][T15604] [ 308.782169][T15610] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 308.798165][T15610] EXT4-fs (loop2): orphan cleanup on readonly fs [ 308.802526][T15606] loop1: p2 p3 p7 [ 308.810812][T15610] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.3927: corrupted inode contents [ 308.836378][T15610] EXT4-fs (loop2): Remounting filesystem read-only [ 308.843123][T15610] EXT4-fs (loop2): 1 truncate cleaned up [ 308.854713][ T6380] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 308.865323][ T6380] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 308.878797][ T6380] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 308.897606][T15610] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 308.992697][T15288] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.084337][T15631] pimreg: entered allmulticast mode [ 309.090339][T15631] pimreg: left allmulticast mode [ 309.124109][T15634] loop5: detected capacity change from 0 to 1024 [ 309.136762][T15634] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.155694][T15631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3935'. [ 309.164523][T15634] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 309.187775][T15639] FAULT_INJECTION: forcing a failure. [ 309.187775][T15639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.200925][T15639] CPU: 1 UID: 0 PID: 15639 Comm: syz.0.3937 Not tainted syzkaller #0 PREEMPT(voluntary) [ 309.201003][T15639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 309.201020][T15639] Call Trace: [ 309.201026][T15639] [ 309.201033][T15639] __dump_stack+0x1d/0x30 [ 309.201058][T15639] dump_stack_lvl+0xe8/0x140 [ 309.201083][T15639] dump_stack+0x15/0x1b [ 309.201107][T15639] should_fail_ex+0x265/0x280 [ 309.201131][T15639] should_fail+0xb/0x20 [ 309.201149][T15639] should_fail_usercopy+0x1a/0x20 [ 309.201177][T15639] _copy_from_iter+0xd2/0xe80 [ 309.201260][T15639] ? __build_skb_around+0x1a0/0x200 [ 309.201301][T15639] ? __alloc_skb+0x223/0x320 [ 309.201321][T15639] netlink_sendmsg+0x471/0x6b0 [ 309.201426][T15639] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.201463][T15639] __sock_sendmsg+0x145/0x180 [ 309.201519][T15639] ____sys_sendmsg+0x31e/0x4e0 [ 309.201557][T15641] loop1: detected capacity change from 0 to 1024 [ 309.201554][T15639] ___sys_sendmsg+0x17b/0x1d0 [ 309.201636][T15639] __x64_sys_sendmsg+0xd4/0x160 [ 309.201675][T15639] x64_sys_call+0x191e/0x2ff0 [ 309.201759][T15639] do_syscall_64+0xd2/0x200 [ 309.201799][T15639] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 309.201832][T15639] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 309.201889][T15639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.201984][T15639] RIP: 0033:0x7fce0cdfebe9 [ 309.202005][T15639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.202030][T15639] RSP: 002b:00007fce0b83e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 309.202056][T15639] RAX: ffffffffffffffda RBX: 00007fce0d036090 RCX: 00007fce0cdfebe9 [ 309.202074][T15639] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000004 [ 309.202136][T15639] RBP: 00007fce0b83e090 R08: 0000000000000000 R09: 0000000000000000 [ 309.202153][T15639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.202170][T15639] R13: 00007fce0d036128 R14: 00007fce0d036090 R15: 00007ffdbef61e48 [ 309.202197][T15639] [ 309.408531][T15288] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.426617][T15641] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 309.441194][T15641] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: comm syz.1.3938: lblock 0 mapped to illegal pblock 0 (length 6) [ 309.455879][T15641] EXT4-fs error (device loop1): ext4_ext_remove_space:2955: inode #15: comm syz.1.3938: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 309.485085][T14110] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 309.532130][T12572] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.560432][T15657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.568861][T15658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.569043][T15657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.585269][T15658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.593833][T15661] loop5: detected capacity change from 0 to 128 [ 309.620337][T15661] syz.5.3943: attempt to access beyond end of device [ 309.620337][T15661] loop5: rw=0, sector=121, nr_sectors = 920 limit=128 [ 309.635406][T15661] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3943'. [ 309.644980][T15661] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3943'. [ 309.653938][T15661] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3943'. [ 310.231777][T15682] loop6: detected capacity change from 0 to 512 [ 310.243222][T15682] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 310.257147][T15682] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c098, mo2=0002] [ 310.265399][T15682] System zones: 0-2, 18-18, 34-34 [ 310.271689][T15682] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.312818][T15003] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.340946][T15691] FAULT_INJECTION: forcing a failure. [ 310.340946][T15691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.354242][T15691] CPU: 1 UID: 0 PID: 15691 Comm: syz.6.3956 Not tainted syzkaller #0 PREEMPT(voluntary) [ 310.354267][T15691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 310.354291][T15691] Call Trace: [ 310.354296][T15691] [ 310.354303][T15691] __dump_stack+0x1d/0x30 [ 310.354322][T15691] dump_stack_lvl+0xe8/0x140 [ 310.354338][T15691] dump_stack+0x15/0x1b [ 310.354428][T15691] should_fail_ex+0x265/0x280 [ 310.354447][T15691] should_fail+0xb/0x20 [ 310.354536][T15691] should_fail_usercopy+0x1a/0x20 [ 310.354557][T15691] _copy_from_user+0x1c/0xb0 [ 310.354621][T15691] ___sys_sendmsg+0xc1/0x1d0 [ 310.354656][T15691] __x64_sys_sendmsg+0xd4/0x160 [ 310.354680][T15691] x64_sys_call+0x191e/0x2ff0 [ 310.354700][T15691] do_syscall_64+0xd2/0x200 [ 310.354762][T15691] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 310.354783][T15691] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 310.354808][T15691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.354826][T15691] RIP: 0033:0x7f7b5267ebe9 [ 310.354839][T15691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.354854][T15691] RSP: 002b:00007f7b510e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.354870][T15691] RAX: ffffffffffffffda RBX: 00007f7b528b5fa0 RCX: 00007f7b5267ebe9 [ 310.354882][T15691] RDX: 0000000000004804 RSI: 0000200000000540 RDI: 0000000000000005 [ 310.354955][T15691] RBP: 00007f7b510e7090 R08: 0000000000000000 R09: 0000000000000000 [ 310.354965][T15691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.354976][T15691] R13: 00007f7b528b6038 R14: 00007f7b528b5fa0 R15: 00007ffdd08b81b8 [ 310.354992][T15691] [ 310.549497][T15697] FAULT_INJECTION: forcing a failure. [ 310.549497][T15697] name failslab, interval 1, probability 0, space 0, times 0 [ 310.562490][T15697] CPU: 0 UID: 0 PID: 15697 Comm: syz.6.3958 Not tainted syzkaller #0 PREEMPT(voluntary) [ 310.562524][T15697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 310.562560][T15697] Call Trace: [ 310.562568][T15697] [ 310.562577][T15697] __dump_stack+0x1d/0x30 [ 310.562603][T15697] dump_stack_lvl+0xe8/0x140 [ 310.562669][T15697] dump_stack+0x15/0x1b [ 310.562696][T15697] should_fail_ex+0x265/0x280 [ 310.562722][T15697] ? __se_sys_memfd_create+0x1cc/0x590 [ 310.562749][T15697] should_failslab+0x8c/0xb0 [ 310.562780][T15697] __kmalloc_cache_noprof+0x4c/0x320 [ 310.562837][T15697] ? fput+0x8f/0xc0 [ 310.562875][T15697] __se_sys_memfd_create+0x1cc/0x590 [ 310.562903][T15697] __x64_sys_memfd_create+0x31/0x40 [ 310.562990][T15697] x64_sys_call+0x2abe/0x2ff0 [ 310.563018][T15697] do_syscall_64+0xd2/0x200 [ 310.563086][T15697] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 310.563116][T15697] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 310.563150][T15697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.563233][T15697] RIP: 0033:0x7f7b5267ebe9 [ 310.563251][T15697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.563274][T15697] RSP: 002b:00007f7b510e6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 310.563359][T15697] RAX: ffffffffffffffda RBX: 0000000000000571 RCX: 00007f7b5267ebe9 [ 310.563375][T15697] RDX: 00007f7b510e6ef0 RSI: 0000000000000000 RDI: 00007f7b527027e8 [ 310.563390][T15697] RBP: 0000200000000780 R08: 00007f7b510e6bb7 R09: 00007f7b510e6e40 [ 310.563406][T15697] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040 [ 310.563421][T15697] R13: 00007f7b510e6ef0 R14: 00007f7b510e6eb0 R15: 00002000000000c0 [ 310.563496][T15697] [ 310.749026][T15699] loop1: detected capacity change from 0 to 512 [ 310.767322][T15700] 9pnet: Could not find request transport: r [ 310.777952][T15699] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.805827][T14110] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.894969][T15707] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 310.919362][T15716] netlink: 'syz.1.3964': attribute type 1 has an invalid length. [ 310.943315][T15722] loop5: detected capacity change from 0 to 512 [ 311.777851][T15744] __nla_validate_parse: 4 callbacks suppressed [ 311.777867][T15744] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3970'. [ 311.806295][T15744] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.3970'. [ 311.889406][T15748] loop6: detected capacity change from 0 to 8192 [ 311.962715][T15752] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 312.038357][T15766] loop2: detected capacity change from 0 to 1024 [ 312.053608][T15768] loop1: detected capacity change from 0 to 2048 [ 312.069497][T15766] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.091706][T15759] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 312.112774][T15768] loop1: p2 p3 p7 [ 312.194517][T15775] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3980'. [ 312.229985][T15779] FAULT_INJECTION: forcing a failure. [ 312.229985][T15779] name failslab, interval 1, probability 0, space 0, times 0 [ 312.242755][T15779] CPU: 0 UID: 0 PID: 15779 Comm: syz.6.3981 Not tainted syzkaller #0 PREEMPT(voluntary) [ 312.242782][T15779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 312.242794][T15779] Call Trace: [ 312.242819][T15779] [ 312.242826][T15779] __dump_stack+0x1d/0x30 [ 312.242846][T15779] dump_stack_lvl+0xe8/0x140 [ 312.242867][T15779] dump_stack+0x15/0x1b [ 312.242959][T15779] should_fail_ex+0x265/0x280 [ 312.242985][T15779] should_failslab+0x8c/0xb0 [ 312.243113][T15779] kmem_cache_alloc_noprof+0x50/0x310 [ 312.243279][T15779] ? getname_flags+0x80/0x3b0 [ 312.243307][T15779] getname_flags+0x80/0x3b0 [ 312.243341][T15779] user_path_at+0x28/0x130 [ 312.243435][T15779] __se_sys_mount+0x25b/0x2e0 [ 312.243474][T15779] ? fput+0x8f/0xc0 [ 312.243509][T15779] __x64_sys_mount+0x67/0x80 [ 312.243661][T15779] x64_sys_call+0x2b4d/0x2ff0 [ 312.243688][T15779] do_syscall_64+0xd2/0x200 [ 312.243722][T15779] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 312.243766][T15779] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 312.243799][T15779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.243819][T15779] RIP: 0033:0x7f7b5267ebe9 [ 312.243869][T15779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.243949][T15779] RSP: 002b:00007f7b510e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 312.243973][T15779] RAX: ffffffffffffffda RBX: 00007f7b528b5fa0 RCX: 00007f7b5267ebe9 [ 312.243986][T15779] RDX: 0000200000001440 RSI: 0000200000001400 RDI: 00002000000013c0 [ 312.243999][T15779] RBP: 00007f7b510e7090 R08: 0000200000000080 R09: 0000000000000000 [ 312.244014][T15779] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 312.244029][T15779] R13: 00007f7b528b6038 R14: 00007f7b528b5fa0 R15: 00007ffdd08b81b8 [ 312.244052][T15779] [ 312.447721][T15784] bond_slave_1: entered promiscuous mode [ 312.454749][T15784] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3982'. [ 312.487001][T15784] bond0: (slave bond_slave_1): Releasing backup interface [ 312.495773][T15784] bond_slave_1 (unregistering): left promiscuous mode [ 312.961245][ T29] kauditd_printk_skb: 695 callbacks suppressed [ 312.961274][ T29] audit: type=1326 audit(568.934:14871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15792 comm="syz.0.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0cdfebe9 code=0x50000 [ 312.991510][ T29] audit: type=1326 audit(568.934:14872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15792 comm="syz.0.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0cdfebe9 code=0x50000 [ 313.014288][ T29] audit: type=1326 audit(568.934:14873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15792 comm="syz.0.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0cdfebe9 code=0x50000 [ 313.037235][ T29] audit: type=1326 audit(568.934:14874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15792 comm="syz.0.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0cdfebe9 code=0x50000 [ 313.060143][ T29] audit: type=1326 audit(568.934:14875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15792 comm="syz.0.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0cdfebe9 code=0x50000 [ 313.082888][ T29] audit: type=1326 audit(568.934:14876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15792 comm="syz.0.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0cdfebe9 code=0x50000 [ 313.105660][ T29] audit: type=1326 audit(568.934:14877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15792 comm="syz.0.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0cdfebe9 code=0x50000 [ 313.128541][ T29] audit: type=1326 audit(568.934:14878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15792 comm="syz.0.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0cdfebe9 code=0x50000 [ 313.151268][ T29] audit: type=1326 audit(568.934:14879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15792 comm="syz.0.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0cdfebe9 code=0x50000 [ 313.174008][ T29] audit: type=1326 audit(568.934:14880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15792 comm="syz.0.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0cdfebe9 code=0x50000 [ 313.293881][T15803] FAULT_INJECTION: forcing a failure. [ 313.293881][T15803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.307057][T15803] CPU: 1 UID: 0 PID: 15803 Comm: syz.6.3988 Not tainted syzkaller #0 PREEMPT(voluntary) [ 313.307089][T15803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 313.307132][T15803] Call Trace: [ 313.307140][T15803] [ 313.307183][T15803] __dump_stack+0x1d/0x30 [ 313.307208][T15803] dump_stack_lvl+0xe8/0x140 [ 313.307287][T15803] dump_stack+0x15/0x1b [ 313.307321][T15803] should_fail_ex+0x265/0x280 [ 313.307345][T15803] should_fail+0xb/0x20 [ 313.307364][T15803] should_fail_usercopy+0x1a/0x20 [ 313.307389][T15803] _copy_to_user+0x20/0xa0 [ 313.307421][T15803] simple_read_from_buffer+0xb5/0x130 [ 313.307484][T15803] proc_fail_nth_read+0x10e/0x150 [ 313.307590][T15803] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 313.307651][T15803] vfs_read+0x1a8/0x770 [ 313.307728][T15803] ? __rcu_read_unlock+0x4f/0x70 [ 313.307752][T15803] ? __fget_files+0x184/0x1c0 [ 313.307842][T15803] ksys_read+0xda/0x1a0 [ 313.307870][T15803] __x64_sys_read+0x40/0x50 [ 313.307894][T15803] x64_sys_call+0x27bc/0x2ff0 [ 313.307917][T15803] do_syscall_64+0xd2/0x200 [ 313.308005][T15803] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 313.308031][T15803] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 313.308060][T15803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.308083][T15803] RIP: 0033:0x7f7b5267d5fc [ 313.308100][T15803] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 313.308204][T15803] RSP: 002b:00007f7b510e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 313.308227][T15803] RAX: ffffffffffffffda RBX: 00007f7b528b5fa0 RCX: 00007f7b5267d5fc [ 313.308316][T15803] RDX: 000000000000000f RSI: 00007f7b510e70a0 RDI: 0000000000000006 [ 313.308329][T15803] RBP: 00007f7b510e7090 R08: 0000000000000000 R09: 0000000000000000 [ 313.308343][T15803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.308356][T15803] R13: 00007f7b528b6038 R14: 00007f7b528b5fa0 R15: 00007ffdd08b81b8 [ 313.308376][T15803] [ 313.327377][T15802] vhci_hcd: invalid port number 96 [ 313.519065][T15802] vhci_hcd: default hub control req: 1f10 vfffa i0060 l0 [ 313.554264][T15806] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3989'. [ 313.589065][T15808] loop6: detected capacity change from 0 to 2048 [ 313.636867][T15810] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3991'. [ 313.651347][T15808] loop6: p2 p3 p7 [ 313.686648][T15812] cgroup: Unknown subsys name 'measure' [ 313.703392][T15812] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.717234][T15812] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3992'. [ 313.727953][T15812] 0{X功: renamed from gretap0 (while UP) [ 313.728458][T15814] skbuff: bad partial csum: csum=65506/2 headroom=146 headlen=65526 [ 313.743424][T15812] 0{X功: entered allmulticast mode [ 313.752980][T15814] loop6: detected capacity change from 0 to 512 [ 313.755213][T15812] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 313.937334][T15838] loop6: detected capacity change from 0 to 512 [ 313.946711][T15825] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 313.954349][T15838] EXT4-fs: Ignoring removed nobh option [ 313.979582][T15838] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #3: comm syz.6.3997: corrupted inode contents [ 313.995516][T15838] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #3: comm syz.6.3997: mark_inode_dirty error [ 314.007058][T15846] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4002'. [ 314.023369][T15838] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #3: comm syz.6.3997: corrupted inode contents [ 314.044985][T15838] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.3997: mark_inode_dirty error [ 314.066231][T15838] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.3997: Failed to acquire dquot type 0 [ 314.074127][T15850] loop0: detected capacity change from 0 to 2048 [ 314.093154][T15838] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.3997: corrupted inode contents [ 314.114822][T15838] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #16: comm syz.6.3997: mark_inode_dirty error [ 314.132612][T15855] futex_wake_op: syz.1.4004 tries to shift op by -1; fix this program [ 314.144430][T15838] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.3997: corrupted inode contents [ 314.170260][T15850] loop0: p2 p3 p7 [ 314.182598][T15838] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.3997: mark_inode_dirty error [ 314.204158][T15838] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.3997: corrupted inode contents [ 314.242290][T15838] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 314.261649][T15838] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.3997: corrupted inode contents [ 314.282284][T15865] cgroup: Unknown subsys name 'measure' [ 314.289433][T15838] EXT4-fs error (device loop6): ext4_truncate:4666: inode #16: comm syz.6.3997: mark_inode_dirty error [ 314.309449][T15865] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.317715][T15838] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 314.331547][T15865] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4006'. [ 314.341424][T15865] 0{X功: renamed from gretap0 (while UP) [ 314.347729][T15838] EXT4-fs (loop6): 1 truncate cleaned up [ 314.349394][T15865] 0{X功: entered allmulticast mode [ 314.357390][T15838] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.364970][T15865] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 314.373354][T15838] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.403470][T15863] loop0: detected capacity change from 0 to 1024 [ 314.412368][T15863] EXT4-fs: Ignoring removed orlov option [ 314.421018][T15863] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.461450][T12839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.860481][T15886] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 314.950706][T12572] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.961486][T15893] loop5: detected capacity change from 0 to 1024 [ 314.993607][T15893] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.028558][T15901] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.4016'. [ 315.060184][T15893] usb usb1: check_ctrlrecip: process 15893 (+}[@) requesting ep 01 but needs 81 [ 315.110268][T15893] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 315.140502][T15902] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 1: comm syz.5.4015: lblock 1 mapped to illegal pblock 1 (length 15) [ 315.161434][T15904] loop2: detected capacity change from 0 to 1024 [ 315.206322][T15902] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 315.218864][T15902] EXT4-fs (loop5): This should not happen!! Data will be lost [ 315.218864][T15902] [ 315.234731][T15904] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.427715][T15912] sctp: [Deprecated]: syz.1.4020 (pid 15912) Use of struct sctp_assoc_value in delayed_ack socket option. [ 315.427715][T15912] Use struct sctp_sack_info instead [ 315.633176][T15933] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 315.660168][T15932] netlink: 'syz.6.4027': attribute type 298 has an invalid length. [ 315.706735][T15939] loop6: detected capacity change from 0 to 512 [ 315.738534][T15939] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 315.755215][T15939] EXT4-fs (loop6): orphan cleanup on readonly fs [ 315.769959][T15939] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.4029: corrupted inode contents [ 315.803466][T15945] FAULT_INJECTION: forcing a failure. [ 315.803466][T15945] name failslab, interval 1, probability 0, space 0, times 0 [ 315.807715][T15939] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #16: comm syz.6.4029: mark_inode_dirty error [ 315.816349][T15945] CPU: 1 UID: 0 PID: 15945 Comm: syz.1.4030 Not tainted syzkaller #0 PREEMPT(voluntary) [ 315.816384][T15945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 315.816401][T15945] Call Trace: [ 315.816411][T15945] [ 315.816444][T15945] __dump_stack+0x1d/0x30 [ 315.816473][T15945] dump_stack_lvl+0xe8/0x140 [ 315.816499][T15945] dump_stack+0x15/0x1b [ 315.816522][T15945] should_fail_ex+0x265/0x280 [ 315.816568][T15945] should_failslab+0x8c/0xb0 [ 315.816637][T15945] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 315.816717][T15945] ? shmem_alloc_inode+0x34/0x50 [ 315.816748][T15945] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 315.816778][T15945] shmem_alloc_inode+0x34/0x50 [ 315.816806][T15945] alloc_inode+0x40/0x170 [ 315.816852][T15945] new_inode+0x1d/0xe0 [ 315.816885][T15945] shmem_get_inode+0x244/0x750 [ 315.816916][T15945] ? __se_sys_memfd_create+0x1cc/0x590 [ 315.816947][T15945] __shmem_file_setup+0x113/0x210 [ 315.816994][T15945] shmem_file_setup+0x3b/0x50 [ 315.817081][T15945] __se_sys_memfd_create+0x2c3/0x590 [ 315.817176][T15945] __x64_sys_memfd_create+0x31/0x40 [ 315.817205][T15945] x64_sys_call+0x2abe/0x2ff0 [ 315.817241][T15945] do_syscall_64+0xd2/0x200 [ 315.817282][T15945] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 315.817354][T15945] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 315.817389][T15945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.817417][T15945] RIP: 0033:0x7faabc1eebe9 [ 315.817436][T15945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.817461][T15945] RSP: 002b:00007faabac56e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 315.817546][T15945] RAX: ffffffffffffffda RBX: 0000000000000512 RCX: 00007faabc1eebe9 [ 315.817563][T15945] RDX: 00007faabac56ef0 RSI: 0000000000000000 RDI: 00007faabc2727e8 [ 315.817580][T15945] RBP: 0000200000000380 R08: 00007faabac56bb7 R09: 00007faabac56e40 [ 315.817597][T15945] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000080 [ 315.817657][T15945] R13: 00007faabac56ef0 R14: 00007faabac56eb0 R15: 0000200000000040 [ 315.817681][T15945] [ 316.065150][T15939] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.4029: corrupted inode contents [ 316.110907][T15939] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.4029: mark_inode_dirty error [ 316.140865][T15939] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.4029: corrupted inode contents [ 316.256368][T15939] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 316.273086][T15939] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.4029: corrupted inode contents [ 316.382790][T15969] loop5: detected capacity change from 0 to 1024 [ 316.506152][T15976] cgroup: Unknown subsys name 'measure' [ 316.536542][T15969] usb usb1: check_ctrlrecip: process 15969 (+}[@) requesting ep 01 but needs 81 [ 316.567562][T15976] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.592856][T15969] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 316.611321][T15980] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 1: comm syz.5.4039: lblock 1 mapped to illegal pblock 1 (length 15) [ 316.636286][T15976] 0{X功: renamed from gretap0 (while UP) [ 316.671971][T15976] 0{X功: entered allmulticast mode [ 316.713923][T15976] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 316.753291][T15980] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 316.765916][T15980] EXT4-fs (loop5): This should not happen!! Data will be lost [ 316.765916][T15980] [ 316.782612][T15939] EXT4-fs error (device loop6): ext4_truncate:4666: inode #16: comm syz.6.4029: mark_inode_dirty error [ 316.800707][T15939] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 316.817457][T15939] EXT4-fs (loop6): 1 truncate cleaned up [ 316.823422][ T6389] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:25: Failed to release dquot type 1 [ 316.918079][T15988] loop6: detected capacity change from 0 to 128 [ 316.927943][T15986] loop2: detected capacity change from 0 to 2048 [ 316.940965][T15989] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 316.946817][T15988] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 317.011614][T15988] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 317.035718][T12572] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 317.092877][T12572] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 317.115384][T15994] netlink: 'syz.0.4045': attribute type 1 has an invalid length. [ 317.211964][ T6380] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 317.227873][T15999] loop2: detected capacity change from 0 to 2048 [ 317.255417][T15996] netlink: 'syz.1.4046': attribute type 21 has an invalid length. [ 317.263267][T15996] __nla_validate_parse: 4 callbacks suppressed [ 317.263284][T15996] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4046'. [ 317.289398][T16008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4049'. [ 317.308858][T15999] loop2: p2 p3 p7 [ 317.322535][T16009] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.325411][T16008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4049'. [ 317.365513][T15996] netlink: 'syz.1.4046': attribute type 4 has an invalid length. [ 317.373328][T15996] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4046'. [ 317.438178][T16009] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.502719][T16009] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.531716][T16018] cgroup: Unknown subsys name 'measure' [ 317.556482][T16018] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.569925][T16009] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.593538][T16018] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4053'. [ 317.600812][T16014] loop0: detected capacity change from 0 to 8192 [ 317.610029][T16018] 1{X功: renamed from 30{X功 (while UP) [ 317.639875][T16014] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 317.641504][T16018] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 317.671927][T16020] IPVS: stopping master sync thread 16023 ... [ 317.674941][T16023] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 317.698886][ T6388] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.723461][ T6388] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.741918][ T6388] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.762231][T16020] loop2: detected capacity change from 0 to 2048 [ 317.769566][ T6388] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.833694][T16030] tipc: Enabling of bearer rejected, already enabled [ 317.864913][T16030] netlink: 'syz.1.4058': attribute type 1 has an invalid length. [ 317.946865][T16020] loop2: unable to read partition table [ 317.963815][T16020] loop2: partition table beyond EOD, truncated [ 317.970070][T16020] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 317.989945][ T29] kauditd_printk_skb: 553 callbacks suppressed [ 317.989961][ T29] audit: type=1400 audit(573.964:15431): avc: denied { ioctl } for pid=16019 comm="syz.2.4054" path="socket:[53356]" dev="sockfs" ino=53356 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 318.037785][T16047] netlink: 'syz.5.4056': attribute type 1 has an invalid length. [ 318.111998][ T29] audit: type=1326 audit(574.044:15432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16041 comm="syz.1.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faabc1eebe9 code=0x7ffc0000 [ 318.135300][ T29] audit: type=1326 audit(574.044:15433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16041 comm="syz.1.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faabc1eebe9 code=0x7ffc0000 [ 318.158325][ T29] audit: type=1326 audit(574.054:15434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16041 comm="syz.1.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faabc1eebe9 code=0x7ffc0000 [ 318.181399][ T29] audit: type=1326 audit(574.054:15435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16041 comm="syz.1.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faabc1eebe9 code=0x7ffc0000 [ 318.204506][ T29] audit: type=1326 audit(574.054:15436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16041 comm="syz.1.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faabc1eebe9 code=0x7ffc0000 [ 318.210156][T16047] 8021q: adding VLAN 0 to HW filter on device bond1 [ 318.227550][ T29] audit: type=1326 audit(574.054:15437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16041 comm="syz.1.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faabc1eebe9 code=0x7ffc0000 [ 318.257200][ T29] audit: type=1326 audit(574.054:15438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16041 comm="syz.1.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faabc1eebe9 code=0x7ffc0000 [ 318.258534][T16044] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4062'. [ 318.280282][ T29] audit: type=1326 audit(574.054:15439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16041 comm="syz.1.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faabc1eebe9 code=0x7ffc0000 [ 318.410583][T16062] loop2: detected capacity change from 0 to 512 [ 318.421399][ T29] audit: type=1400 audit(574.344:15440): avc: denied { shutdown } for pid=16053 comm="syz.6.4064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 318.472879][T16062] EXT4-fs (loop2): orphan cleanup on readonly fs [ 318.536322][T16062] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.4067: bad orphan inode 13 [ 318.594922][T16062] ext4_test_bit(bit=12, block=18) = 1 [ 318.600414][T16062] is_bad_inode(inode)=0 [ 318.604877][T16062] NEXT_ORPHAN(inode)=2130706432 [ 318.609811][T16062] max_ino=32 [ 318.613028][T16062] i_nlink=1 [ 318.637083][T16065] loop1: detected capacity change from 0 to 8192 [ 318.643971][T16062] EXT4-fs mount: 8 callbacks suppressed [ 318.644017][T16062] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 318.665091][T16065] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 318.686439][T16062] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 318.706567][T16072] tipc: Enabling of bearer rejected, already enabled [ 318.726989][T16062] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 318.728171][T16074] loop5: detected capacity change from 0 to 2048 [ 318.742376][T16072] netlink: 'syz.0.4070': attribute type 1 has an invalid length. [ 318.781367][T16079] loop6: detected capacity change from 0 to 2048 [ 318.802112][T16081] FAULT_INJECTION: forcing a failure. [ 318.802112][T16081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.815332][T16081] CPU: 1 UID: 0 PID: 16081 Comm: syz.0.4074 Not tainted syzkaller #0 PREEMPT(voluntary) [ 318.815367][T16081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 318.815394][T16081] Call Trace: [ 318.815401][T16081] [ 318.815409][T16081] __dump_stack+0x1d/0x30 [ 318.815435][T16081] dump_stack_lvl+0xe8/0x140 [ 318.815474][T16081] dump_stack+0x15/0x1b [ 318.815564][T16081] should_fail_ex+0x265/0x280 [ 318.815590][T16081] should_fail+0xb/0x20 [ 318.815611][T16081] should_fail_usercopy+0x1a/0x20 [ 318.815635][T16081] _copy_from_user+0x1c/0xb0 [ 318.815704][T16081] ___sys_sendmsg+0xc1/0x1d0 [ 318.815747][T16081] __x64_sys_sendmsg+0xd4/0x160 [ 318.815794][T16081] x64_sys_call+0x191e/0x2ff0 [ 318.815820][T16081] do_syscall_64+0xd2/0x200 [ 318.815883][T16081] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 318.815914][T16081] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 318.815945][T16081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.815966][T16081] RIP: 0033:0x7fce0cdfebe9 [ 318.816063][T16081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.816084][T16081] RSP: 002b:00007fce0b85f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.816103][T16081] RAX: ffffffffffffffda RBX: 00007fce0d035fa0 RCX: 00007fce0cdfebe9 [ 318.816115][T16081] RDX: 0000000020000804 RSI: 0000200000000600 RDI: 0000000000000004 [ 318.816127][T16081] RBP: 00007fce0b85f090 R08: 0000000000000000 R09: 0000000000000000 [ 318.816138][T16081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.816183][T16081] R13: 00007fce0d036038 R14: 00007fce0d035fa0 R15: 00007ffdbef61e48 [ 318.816207][T16081] [ 318.829883][T16062] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4067'. [ 318.945911][T16079] loop6: p2 p3 p7 [ 319.073741][T12572] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.116119][T16103] netlink: 'syz.1.4081': attribute type 4 has an invalid length. [ 319.166435][T16103] netlink: 'syz.1.4081': attribute type 4 has an invalid length. [ 319.177945][T16107] loop6: detected capacity change from 0 to 128 [ 319.211725][T16107] siw: device registration error -23 [ 319.226735][T16107] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4083'. [ 319.259058][T16113] tipc: Enabling of bearer rejected, already enabled [ 319.284293][T16113] netlink: 'syz.1.4085': attribute type 1 has an invalid length. [ 319.360949][T16120] loop2: detected capacity change from 0 to 2048 [ 319.392269][T16125] loop6: detected capacity change from 0 to 1024 [ 319.399177][T16125] EXT4-fs: Ignoring removed bh option [ 319.421543][T16120] loop2: p2 p3 p7 [ 319.429118][T16125] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 319.446586][T16106] FAULT_INJECTION: forcing a failure. [ 319.446586][T16106] name failslab, interval 1, probability 0, space 0, times 0 [ 319.459248][T16106] CPU: 1 UID: 0 PID: 16106 Comm: syz.0.4082 Not tainted syzkaller #0 PREEMPT(voluntary) [ 319.459275][T16106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 319.459346][T16106] Call Trace: [ 319.459355][T16106] [ 319.459364][T16106] __dump_stack+0x1d/0x30 [ 319.459388][T16106] dump_stack_lvl+0xe8/0x140 [ 319.459429][T16106] dump_stack+0x15/0x1b [ 319.459494][T16106] should_fail_ex+0x265/0x280 [ 319.459519][T16106] should_failslab+0x8c/0xb0 [ 319.459585][T16106] __kvmalloc_node_noprof+0x123/0x4e0 [ 319.459621][T16106] ? proc_sys_call_handler+0x243/0x4a0 [ 319.459734][T16106] proc_sys_call_handler+0x243/0x4a0 [ 319.459774][T16106] proc_sys_write+0x22/0x30 [ 319.459809][T16106] iter_file_splice_write+0x663/0xa60 [ 319.459926][T16106] ? __pfx_iter_file_splice_write+0x10/0x10 [ 319.459973][T16106] direct_splice_actor+0x153/0x2a0 [ 319.459999][T16106] splice_direct_to_actor+0x30f/0x680 [ 319.460029][T16106] ? __pfx_direct_splice_actor+0x10/0x10 [ 319.460082][T16106] do_splice_direct+0xda/0x150 [ 319.460102][T16106] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 319.460217][T16106] do_sendfile+0x380/0x650 [ 319.460256][T16106] __x64_sys_sendfile64+0x105/0x150 [ 319.460354][T16106] x64_sys_call+0x2bb0/0x2ff0 [ 319.460377][T16106] do_syscall_64+0xd2/0x200 [ 319.460410][T16106] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 319.460437][T16106] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 319.460517][T16106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.460543][T16106] RIP: 0033:0x7fce0cdfebe9 [ 319.460561][T16106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.460583][T16106] RSP: 002b:00007fce0b85f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 319.460606][T16106] RAX: ffffffffffffffda RBX: 00007fce0d035fa0 RCX: 00007fce0cdfebe9 [ 319.460621][T16106] RDX: 0000000000000000 RSI: 000000000000000d RDI: 000000000000000d [ 319.460632][T16106] RBP: 00007fce0b85f090 R08: 0000000000000000 R09: 0000000000000000 [ 319.460653][T16106] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 319.460666][T16106] R13: 00007fce0d036038 R14: 00007fce0d035fa0 R15: 00007ffdbef61e48 [ 319.460687][T16106] [ 319.462271][T16127] team0: Cannot enslave team device to itself [ 319.602047][T16132] netlink: 'syz.6.4091': attribute type 1 has an invalid length. [ 319.606341][T16127] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 319.711277][T16132] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4091'. [ 319.722564][T16134] loop2: detected capacity change from 0 to 512 [ 319.730708][T16134] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 319.757311][T16134] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.771148][T16134] netlink: 14 bytes leftover after parsing attributes in process `+}[@'. [ 319.810535][T16134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.821020][T16134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.832395][T16134] bond0 (unregistering): Released all slaves [ 319.875968][T16139] FAULT_INJECTION: forcing a failure. [ 319.875968][T16139] name failslab, interval 1, probability 0, space 0, times 0 [ 319.888614][T16139] CPU: 0 UID: 0 PID: 16139 Comm: syz.5.4093 Not tainted syzkaller #0 PREEMPT(voluntary) [ 319.888643][T16139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 319.888656][T16139] Call Trace: [ 319.888662][T16139] [ 319.888670][T16139] __dump_stack+0x1d/0x30 [ 319.888692][T16139] dump_stack_lvl+0xe8/0x140 [ 319.888713][T16139] dump_stack+0x15/0x1b [ 319.888733][T16139] should_fail_ex+0x265/0x280 [ 319.888758][T16139] should_failslab+0x8c/0xb0 [ 319.888785][T16139] kmem_cache_alloc_noprof+0x50/0x310 [ 319.888816][T16139] ? mas_alloc_nodes+0x265/0x520 [ 319.888851][T16139] mas_alloc_nodes+0x265/0x520 [ 319.888886][T16139] mas_preallocate+0x33e/0x520 [ 319.888924][T16139] __split_vma+0x240/0x650 [ 319.888956][T16139] ? mas_find+0x5d5/0x700 [ 319.888991][T16139] vms_gather_munmap_vmas+0x2b2/0x7b0 [ 319.889021][T16139] mmap_region+0x53f/0x1630 [ 319.889049][T16139] ? security_compute_sid+0x11da/0x1290 [ 319.889070][T16139] ? __traceiter_kfree+0x2e/0x50 [ 319.889092][T16139] ? security_compute_sid+0x11da/0x1290 [ 319.889112][T16139] ? kfree+0x27b/0x320 [ 319.889157][T16139] do_mmap+0x9b3/0xbe0 [ 319.889193][T16139] vm_mmap_pgoff+0x17a/0x2e0 [ 319.889227][T16139] ksys_mmap_pgoff+0x2d0/0x310 [ 319.889262][T16139] x64_sys_call+0x14a3/0x2ff0 [ 319.889288][T16139] do_syscall_64+0xd2/0x200 [ 319.889322][T16139] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 319.889352][T16139] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 319.889384][T16139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.889411][T16139] RIP: 0033:0x7fb1726cebe9 [ 319.889428][T16139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.889450][T16139] RSP: 002b:00007fb17112f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 319.889473][T16139] RAX: ffffffffffffffda RBX: 00007fb172905fa0 RCX: 00007fb1726cebe9 [ 319.889489][T16139] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000200000000000 [ 319.889505][T16139] RBP: 00007fb17112f090 R08: ffffffffffffffff R09: 0000000000000000 [ 319.889520][T16139] R10: 0000000000042073 R11: 0000000000000246 R12: 0000000000000001 [ 319.889535][T16139] R13: 00007fb172906038 R14: 00007fb172905fa0 R15: 00007ffe71290968 [ 319.889560][T16139] [ 320.116553][T12572] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.267232][T16150] loop5: detected capacity change from 0 to 256 [ 320.274781][T16149] cgroup: Unknown subsys name 'measure' [ 320.295595][T16149] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.371306][T16153] loop5: detected capacity change from 0 to 512 [ 320.392943][T16158] loop0: detected capacity change from 0 to 2048 [ 320.401420][T16159] FAULT_INJECTION: forcing a failure. [ 320.401420][T16159] name failslab, interval 1, probability 0, space 0, times 0 [ 320.414082][T16159] CPU: 1 UID: 0 PID: 16159 Comm: syz.2.4096 Not tainted syzkaller #0 PREEMPT(voluntary) [ 320.414114][T16159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 320.414131][T16159] Call Trace: [ 320.414140][T16159] [ 320.414149][T16159] __dump_stack+0x1d/0x30 [ 320.414176][T16159] dump_stack_lvl+0xe8/0x140 [ 320.414202][T16159] dump_stack+0x15/0x1b [ 320.414223][T16159] should_fail_ex+0x265/0x280 [ 320.414260][T16159] should_failslab+0x8c/0xb0 [ 320.414289][T16159] kmem_cache_alloc_noprof+0x50/0x310 [ 320.414317][T16159] ? vm_area_alloc+0x2c/0xb0 [ 320.414364][T16159] vm_area_alloc+0x2c/0xb0 [ 320.414409][T16159] mmap_region+0xaa2/0x1630 [ 320.414487][T16159] do_mmap+0x9b3/0xbe0 [ 320.414548][T16159] vm_mmap_pgoff+0x17a/0x2e0 [ 320.414591][T16159] ksys_mmap_pgoff+0xc2/0x310 [ 320.414630][T16159] ? __x64_sys_mmap+0x49/0x70 [ 320.414659][T16159] x64_sys_call+0x14a3/0x2ff0 [ 320.414680][T16159] do_syscall_64+0xd2/0x200 [ 320.414707][T16159] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 320.414737][T16159] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 320.414769][T16159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.414796][T16159] RIP: 0033:0x7f7e0e18ec23 [ 320.414815][T16159] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 320.414837][T16159] RSP: 002b:00007f7e0cbace18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 320.414861][T16159] RAX: ffffffffffffffda RBX: 000000000000055c RCX: 00007f7e0e18ec23 [ 320.414876][T16159] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 320.414890][T16159] RBP: 0000200000000a82 R08: 00000000ffffffff R09: 0000000000000000 [ 320.414906][T16159] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000009 [ 320.414920][T16159] R13: 00007f7e0cbacef0 R14: 00007f7e0cbaceb0 R15: 0000200000000a40 [ 320.414944][T16159] [ 320.607886][T16153] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.629631][T16158] loop0: p2 p3 p7 [ 320.709835][T15003] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 320.737812][ T6384] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.751868][T15288] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.765747][T16168] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 320.836637][ T6384] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.888726][T16180] cgroup: Unknown subsys name 'measure' [ 320.906926][T16180] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.958614][ T6384] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.126143][ T6384] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.301720][T16178] loop1: detected capacity change from 0 to 32768 [ 321.352355][T16178] loop1: p1 p2 p3 < p5 p6 p7 > [ 321.393188][T16178] loop1: p2 size 16775168 extends beyond EOD, truncated [ 321.422211][ T6384] dummy0: left allmulticast mode [ 321.450295][ T6384] bridge0: port 3(dummy0) entered disabled state [ 321.461192][T16178] loop1: p5 start 4294970168 is beyond EOD, truncated [ 321.487034][ T6384] bridge_slave_1: left allmulticast mode [ 321.492733][ T6384] bridge_slave_1: left promiscuous mode [ 321.498502][ T6384] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.559424][ T6384] bridge_slave_0: left allmulticast mode [ 321.565231][ T6384] bridge_slave_0: left promiscuous mode [ 321.570987][ T6384] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.640357][T16198] loop0: detected capacity change from 0 to 1024 [ 321.676304][T16198] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.837905][T16203] loop5: detected capacity change from 0 to 2048 [ 321.869293][ T6384] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.887186][ T6384] bond0 (unregistering): Released all slaves [ 321.930460][T16203] loop5: p2 p3 p7 [ 321.976732][ T6384] tipc: Left network mode [ 321.988538][ T6380] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 1: comm kworker/u8:17: lblock 1 mapped to illegal pblock 1 (length 15) [ 322.008056][ T6384] hsr_slave_0: left promiscuous mode [ 322.049156][ T6384] hsr_slave_1: left promiscuous mode [ 322.054968][ T6384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.062455][ T6384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.076237][ T6380] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 322.088741][ T6380] EXT4-fs (loop0): This should not happen!! Data will be lost [ 322.088741][ T6380] [ 322.108000][ T6384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.115578][ T6384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.125107][T12839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.160472][ T6384] veth1_macvtap: left promiscuous mode [ 322.171557][ T6384] veth0_macvtap: left promiscuous mode [ 322.182613][ T6384] veth1_vlan: left promiscuous mode [ 322.194231][ T6384] veth0_vlan: left promiscuous mode [ 322.277441][T16219] loop0: detected capacity change from 0 to 2048 [ 322.333046][ T6384] team0 (unregistering): Port device team_slave_1 removed [ 322.343099][ T6384] team0 (unregistering): Port device team_slave_0 removed [ 322.374256][T16222] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 322.388823][T16209] __nla_validate_parse: 4 callbacks suppressed [ 322.388840][T16209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4114'. [ 322.404071][T16209] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4114'. [ 322.413076][T16209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4114'. [ 322.424852][T16209] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4114'. [ 322.433872][T16209] netlink: 'syz.1.4114': attribute type 6 has an invalid length. [ 322.483949][T16224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4119'. [ 322.531797][T16232] cgroup: Unknown subsys name 'measure' [ 322.567982][T16232] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.570576][T16234] loop1: detected capacity change from 0 to 2048 [ 322.592122][T16234] EXT4-fs: inline encryption not supported [ 322.612356][T16234] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.624343][T16184] chnl_net:caif_netlink_parms(): no params data found [ 322.647293][T16234] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.4122: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 322.713995][T16242] loop0: detected capacity change from 0 to 512 [ 322.758489][T16242] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.771596][T14110] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.814663][T16242] FAULT_INJECTION: forcing a failure. [ 322.814663][T16242] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 322.828111][T16242] CPU: 0 UID: 0 PID: 16242 Comm: syz.0.4124 Not tainted syzkaller #0 PREEMPT(voluntary) [ 322.828207][T16242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 322.828220][T16242] Call Trace: [ 322.828227][T16242] [ 322.828235][T16242] __dump_stack+0x1d/0x30 [ 322.828261][T16242] dump_stack_lvl+0xe8/0x140 [ 322.828306][T16242] dump_stack+0x15/0x1b [ 322.828382][T16242] should_fail_ex+0x265/0x280 [ 322.828409][T16242] should_fail_alloc_page+0xf2/0x100 [ 322.828444][T16242] __alloc_frozen_pages_noprof+0xff/0x360 [ 322.828509][T16242] alloc_pages_mpol+0xb3/0x250 [ 322.828604][T16242] folio_alloc_noprof+0x97/0x150 [ 322.828635][T16242] filemap_alloc_folio_noprof+0x66/0x210 [ 322.828724][T16242] __filemap_get_folio+0x28f/0x6b0 [ 322.828872][T16242] ? ext4_chunk_trans_extent+0x178/0x1a0 [ 322.828916][T16242] ext4_write_begin+0x2fe/0xeb0 [ 322.829014][T16242] ext4_da_write_begin+0x1fb/0x6e0 [ 322.829045][T16242] ? balance_dirty_pages_ratelimited_flags+0x40b/0x5e0 [ 322.829120][T16242] generic_perform_write+0x184/0x490 [ 322.829155][T16242] ext4_buffered_write_iter+0x1ee/0x3c0 [ 322.829192][T16242] ext4_file_write_iter+0x383/0xf00 [ 322.829302][T16242] ? path_openat+0x1bf8/0x2170 [ 322.829360][T16242] ? _parse_integer_limit+0x170/0x190 [ 322.829392][T16242] do_iter_readv_writev+0x499/0x540 [ 322.829500][T16242] vfs_writev+0x2df/0x8b0 [ 322.829539][T16242] __se_sys_pwritev2+0xfc/0x1c0 [ 322.829630][T16242] __x64_sys_pwritev2+0x67/0x80 [ 322.829724][T16242] x64_sys_call+0x2c55/0x2ff0 [ 322.829751][T16242] do_syscall_64+0xd2/0x200 [ 322.829787][T16242] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 322.829821][T16242] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 322.829862][T16242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.829906][T16242] RIP: 0033:0x7fce0cdfebe9 [ 322.829922][T16242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.829945][T16242] RSP: 002b:00007fce0b85f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 322.829963][T16242] RAX: ffffffffffffffda RBX: 00007fce0d035fa0 RCX: 00007fce0cdfebe9 [ 322.829979][T16242] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000008 [ 322.829993][T16242] RBP: 00007fce0b85f090 R08: 0000000000000000 R09: 0000000000000000 [ 322.830009][T16242] R10: 0000000000005405 R11: 0000000000000246 R12: 0000000000000002 [ 322.830029][T16242] R13: 00007fce0d036038 R14: 00007fce0d035fa0 R15: 00007ffdbef61e48 [ 322.830052][T16242] [ 322.830846][T16184] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.851170][T16257] IPVS: set_ctl: invalid protocol: 12 10.1.1.0:20001 [ 322.854184][T16184] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.100344][T12839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.130921][T16184] bridge_slave_0: entered allmulticast mode [ 323.147818][T16184] bridge_slave_0: entered promiscuous mode [ 323.169418][ T29] kauditd_printk_skb: 1128 callbacks suppressed [ 323.169492][ T29] audit: type=1326 audit(579.144:16569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16261 comm="syz.5.4129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1726cebe9 code=0x7ffc0000 [ 323.210761][T16184] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.217983][T16184] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.235181][ T29] audit: type=1326 audit(579.144:16570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16261 comm="syz.5.4129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1726cebe9 code=0x7ffc0000 [ 323.258218][ T29] audit: type=1326 audit(579.174:16571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16261 comm="syz.5.4129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1726cebe9 code=0x7ffc0000 [ 323.281351][ T29] audit: type=1326 audit(579.174:16572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16261 comm="syz.5.4129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1726cebe9 code=0x7ffc0000 [ 323.284897][T16184] bridge_slave_1: entered allmulticast mode [ 323.304647][ T29] audit: type=1326 audit(579.174:16573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16261 comm="syz.5.4129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1726cebe9 code=0x7ffc0000 [ 323.333551][ T29] audit: type=1326 audit(579.174:16574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16261 comm="syz.5.4129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fb1726cebe9 code=0x7ffc0000 [ 323.352816][T16184] bridge_slave_1: entered promiscuous mode [ 323.356579][ T29] audit: type=1326 audit(579.174:16575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16261 comm="syz.5.4129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1726cebe9 code=0x7ffc0000 [ 323.385693][ T29] audit: type=1326 audit(579.174:16576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16261 comm="syz.5.4129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1726cebe9 code=0x7ffc0000 [ 323.409753][ T29] audit: type=1326 audit(579.184:16577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16261 comm="syz.5.4129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fb1726cebe9 code=0x7ffc0000 [ 323.432767][ T29] audit: type=1326 audit(579.184:16578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16261 comm="syz.5.4129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1726cebe9 code=0x7ffc0000 [ 323.477040][T16184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.498160][T16273] loop1: detected capacity change from 0 to 512 [ 323.508852][T16264] tipc: Enabled bearer , priority 0 [ 323.527904][T16273] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.555260][T16273] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #2: block 3: comm syz.1.4130: lblock 8 mapped to illegal pblock 3 (length 26) [ 323.570967][T16184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.587476][T16273] EXT4-fs (loop1): Remounting filesystem read-only [ 323.607593][T16271] tipc: Resetting bearer [ 323.641733][T16263] tipc: Resetting bearer [ 323.685693][T16263] tipc: Disabling bearer [ 323.706757][T16184] team0: Port device team_slave_0 added [ 323.729449][T16184] team0: Port device team_slave_1 added [ 323.762413][T16281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4131'. [ 323.794282][T16184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.801328][T16184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.827326][T16184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.871703][T16184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.878824][T16184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.894966][T16289] cgroup: Unknown subsys name 'measure' [ 323.904844][T16184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.972306][T14110] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.984685][T16289] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.998133][T16184] hsr_slave_0: entered promiscuous mode [ 323.998381][T16291] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 324.028231][T16184] hsr_slave_1: entered promiscuous mode [ 324.049197][T16184] debugfs: 'hsr0' already exists in 'hsr' [ 324.054983][T16184] Cannot create hsr debugfs directory [ 324.157441][T16306] loop2: detected capacity change from 0 to 2048 [ 324.178922][T16309] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 324.290953][T16320] cgroup: Unknown subsys name 'measure' [ 324.305587][T16317] loop0: detected capacity change from 0 to 2048 [ 324.336551][T16320] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.358860][T16320] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4146'. [ 324.389026][T16320] 1{X功: renamed from 30{X功 (while UP) [ 324.409726][T16317] loop0: p2 p3 p7 [ 324.419044][T16320] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 324.452793][T16184] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 324.481846][T16184] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 324.505421][T16184] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 324.528721][T16331] loop5: detected capacity change from 0 to 2048 [ 324.538182][T16184] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 324.557231][T16331] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.616949][T16349] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4154'. [ 324.667167][T16184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.725338][T16355] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 324.776397][T16184] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.800128][ T6384] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.807271][ T6384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.851664][ T6393] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.858848][ T6393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.940799][T16184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 324.951211][T16184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 324.984449][T15288] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 325.069934][T15288] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 325.092804][T16370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4161'. [ 325.101749][T16370] netlink: 348 bytes leftover after parsing attributes in process `syz.2.4161'. [ 325.123353][T15288] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.191964][T16381] cgroup: Unknown subsys name 'measure' [ 325.204512][T16184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.228255][T16381] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.273793][T16381] 0{X功: renamed from 31{X功 (while UP) [ 325.301655][T16381] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 325.513366][T16410] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 325.607283][T16184] veth0_vlan: entered promiscuous mode [ 325.630086][T16419] loop2: detected capacity change from 0 to 2048 [ 325.900386][T16419] loop2: p2 p3 p7 [ 325.924435][T16184] veth1_vlan: entered promiscuous mode [ 325.937279][T16184] veth0_macvtap: entered promiscuous mode [ 325.944465][T16184] veth1_macvtap: entered promiscuous mode [ 325.955382][T16184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.963965][T16184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.029044][ T6413] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.029132][T16431] ================================================================== [ 326.029171][T16431] BUG: KCSAN: data-race in data_alloc / prb_reserve [ 326.052478][T16431] [ 326.054830][T16431] write to 0xffffffff8687e940 of 8 bytes by task 6413 on cpu 0: [ 326.062470][T16431] data_alloc+0x27d/0x2b0 [ 326.066829][T16431] prb_reserve+0x808/0xaf0 [ 326.071264][T16431] vprintk_store+0x56d/0x860 [ 326.075888][T16431] vprintk_emit+0x178/0x650 [ 326.080403][T16431] dev_vprintk_emit+0x242/0x2a0 [ 326.085262][T16431] dev_printk_emit+0x84/0xb0 [ 326.089861][T16431] __netdev_printk+0x35c/0x3e0 [ 326.094638][T16431] netdev_info+0x9b/0xd0 [ 326.098890][T16431] nsim_udp_tunnel_set_port+0x13b/0x160 [ 326.104441][T16431] __udp_tunnel_nic_device_sync+0x567/0x9c0 [ 326.110358][T16431] udp_tunnel_nic_device_sync_work+0x5d/0x5f0 [ 326.116446][T16431] process_scheduled_works+0x4ce/0x9d0 [ 326.121927][T16431] worker_thread+0x582/0x770 [ 326.126535][T16431] kthread+0x486/0x510 [ 326.130611][T16431] ret_from_fork+0xda/0x150 [ 326.135123][T16431] ret_from_fork_asm+0x1a/0x30 [ 326.139893][T16431] [ 326.142221][T16431] read to 0xffffffff8687e940 of 8 bytes by task 16431 on cpu 1: [ 326.149849][T16431] prb_reserve+0x221/0xaf0 [ 326.154280][T16431] vprintk_store+0x56d/0x860 [ 326.158894][T16431] vprintk_emit+0x178/0x650 [ 326.163420][T16431] vprintk_default+0x26/0x30 [ 326.168019][T16431] vprintk+0x1d/0x30 [ 326.171925][T16431] _printk+0x79/0xa0 [ 326.175833][T16431] p9_fd_create+0x20c/0x280 [ 326.180350][T16431] p9_client_create+0x60b/0xbc0 [ 326.185207][T16431] v9fs_session_init+0xf7/0xde0 [ 326.190066][T16431] v9fs_mount+0x67/0x5c0 [ 326.194328][T16431] legacy_get_tree+0x75/0xd0 [ 326.198927][T16431] vfs_get_tree+0x54/0x1d0 [ 326.203353][T16431] do_new_mount+0x207/0x5e0 [ 326.207867][T16431] path_mount+0x4a4/0xb20 [ 326.212200][T16431] __se_sys_mount+0x28f/0x2e0 [ 326.216888][T16431] __x64_sys_mount+0x67/0x80 [ 326.221484][T16431] x64_sys_call+0x2b4d/0x2ff0 [ 326.226170][T16431] do_syscall_64+0xd2/0x200 [ 326.230699][T16431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.236609][T16431] [ 326.238943][T16431] value changed: 0x0000000000006d30 -> 0x00000000000af170 [ 326.246055][T16431] [ 326.248381][T16431] Reported by Kernel Concurrency Sanitizer on: [ 326.254534][T16431] CPU: 1 UID: 0 PID: 16431 Comm: syz.2.4176 Not tainted syzkaller #0 PREEMPT(voluntary) [ 326.264355][T16431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 326.274417][T16431] ================================================================== [ 326.029021][T16431] 9pnet_fd: Insufficient options for proto=fd [ 326.290771][T16433] lo speed is unknown, defaulting to 1000 [ 326.366904][T16433] lo speed is unknown, defaulting to 1000 [ 326.373757][T16433] lo speed is unknown, defaulting to 1000 [ 326.384218][ T6413] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.409059][T16433] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 326.428549][ T6413] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.459302][ T6413] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.478062][T16433] lo speed is unknown, defaulting to 1000 [ 326.484354][T16433] lo speed is unknown, defaulting to 1000 [ 326.512052][T16433] lo speed is unknown, defaulting to 1000 [ 326.542319][T16433] lo speed is unknown, defaulting to 1000 [ 326.557186][T16433] lo speed is unknown, defaulting to 1000 [ 326.571186][T16433] lo speed is unknown, defaulting to 1000 [ 326.584047][T16433] lo speed is unknown, defaulting to 1000 [ 326.633154][T16433] lo speed is unknown, defaulting to 1000 [ 326.656788][T16433] lo speed is unknown, defaulting to 1000 [ 326.678808][T16433] lo speed is unknown, defaulting to 1000