last executing test programs: 3.570330638s ago: executing program 1 (id=972): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) shutdown(r0, 0x1) 3.500706838s ago: executing program 1 (id=973): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0xc0001480, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000003800010827bd7000ffdbdf2503000000977d619d876c2093166a6d9936facd815b8ed5de909b53d68cac6dbee30871d19dd78e22f189bf1e5465507ea1e54397c9bc4069c50e7323bccd614d80339652f3ada306568062926892b17ffa25dbd50cfbf7a3d19e9a7e12bb584ec3f94feefd929e994a079fa1d6c5c30a"], 0x18}, 0x1, 0x0, 0x0, 0x24004050}, 0x4008040) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x28, r2, 0xc4fc9e906872338b, 0x70bd2a, 0x0, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x28}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000280)={0x0, &(0x7f0000000580)}) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xff, 0x5, 0xc, 0x7f, 0x0, 0x0, 0x20010, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x4, @perf_config_ext={0x40, 0x2}, 0x2002, 0xfffffffffffffffd, 0x9, 0x3, 0x80, 0x5, 0x1, 0x0, 0x3, 0x0, 0x7}, 0x0, 0xe, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x3b, 0xc9000000}}, @ip_tos_u8={{0x38, 0x29, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000001980)=""/179, 0xb3) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000d2adb4ca366af1e3999b5925e8254cf405fe9029afc134385c41a2425f374f1ab2689d5077a0bce8fc978d5f89773aa9c0540", @ANYRES32=0x0, @ANYBLOB='\x00'/24], 0x48) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a400014001000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a001000730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd409d6e4edef3d93452a92954b43370e970161ed7875e585d924ed43df459cab16", 0xd8}], 0x1}, 0x0) 3.28303647s ago: executing program 1 (id=977): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="01015675ee6f90e83f17f97bfbb340a0c8c92e63f85aa7e692fcd0e62e09192f0be43d1712c889dfde5ae988d20733320e9fa572453015870d9433a0136b886b1408fbebcd8a31fb5cc93902452de58685def969f3e7a66df817bab4584a818b0dae62d4862eabffe0f643f561d5301e5d5e599b91bd5c3ce5445aa0e9732230", @ANYRES16=r1, @ANYBLOB="020025bd7000fddbdf250200000005000400020000000900030073797a3200000000"], 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x4040040) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000611200000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000400)={[{@init_itable_val={'init_itable', 0x3d, 0x3}}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r7, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000001380)=ANY=[@ANYBLOB="0100000000200000fb00000000000000040000000000008005000000000000000800000000000000018000000000000068000000000000000000000000000000000000000000000000010000000000000000000000000008000000000000000001800000000000001e0500000000000000000000000000000000000000000000022000000000000000000000000000000300000000000000030000000000000001000000000000800000000000000000000000000000000000040000000000000000000000000000020000000000000070000000000000000700000000000000000000000000000000000000000000000001000000000000000000000000000009000000000000007e0e0000000000000100"/287]) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="40000000100001040044d797dcdaba56ee8a0220c148670b8963b588ca9b0ef49272224978234d88520d5e062d000000000000000000000000000011b538534d6aa28fb5ae359300202d05ad7dade4955bed69810225928430de9a9f5f4f0e4fe439411b66971e679933f7ccac55d43fe369da63426cf6b001c9501a1bca5d84ffec3d6b8034ebf86e133cdf2794f435", @ANYBLOB="21000000000000002000128008000100687372001400028008000100", @ANYRES32=r5, @ANYBLOB="08000200", @ANYRES32=r8, @ANYBLOB], 0x40}}, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000080)) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x18f0, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0xf2ff, 0x0, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x18bc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x1}, @TCA_FW_CLASSID={0x8, 0x1, {0x9, 0x5}}, @TCA_FW_CLASSID={0x8, 0x1, {0x3, 0x8}}, @TCA_FW_INDEV={0x14, 0x3, 'erspan0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0xf}}, @TCA_FW_CLASSID={0x8, 0x1, {0xe, 0xdd68e4aa5c42f819}}, @TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0x3}}, @TCA_FW_POLICE={0x1874, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4cc832b5, 0x4, 0xfffffffc, 0x81, 0x5, 0x7, 0x8, 0x3, 0x80, 0x3, 0x3, 0x3, 0x6, 0x0, 0xa, 0x2, 0x9, 0x8, 0xfff, 0x0, 0xc, 0xfffffff8, 0x8, 0xfffffffc, 0x0, 0x6, 0x80000001, 0x9, 0x3, 0x5, 0x3, 0x6, 0x7, 0xc90, 0x2, 0x9, 0xa589, 0x526e1a98, 0x400, 0x1, 0xffff, 0x4, 0x8001, 0x2, 0x8000, 0x8, 0x58, 0x400, 0x4, 0x1ff, 0x5, 0x4, 0x4, 0x1, 0x7, 0x2, 0x0, 0x769, 0x9, 0xd, 0x3, 0x8, 0x5, 0x5, 0x6, 0x3ff, 0x371f, 0x16900, 0xe1b, 0x9, 0x40, 0x81, 0xceb4aa3e, 0x5, 0x10001, 0x7fff, 0x7ff, 0x4, 0x8, 0x1, 0x8, 0xdd, 0x7, 0xc, 0x10001, 0x3, 0x9, 0x1, 0x2, 0x9, 0x8, 0x800, 0xffffffff, 0x4, 0x0, 0x61, 0x5, 0x8, 0x6, 0x1, 0xb, 0x8, 0x9, 0x6, 0x8, 0xffff, 0x32b, 0x0, 0x7f, 0x2, 0x401, 0x4, 0x1ff, 0x2, 0x3, 0xfffffe01, 0x1, 0x4, 0x428, 0xffff, 0x3, 0x7, 0x0, 0x7f, 0x800, 0x8, 0x8, 0xa1, 0x1, 0x1, 0xb9d, 0x5, 0x100, 0x8, 0x3, 0xfffffffa, 0x10000, 0x7f, 0x4, 0x6, 0x7, 0x2, 0x7fff, 0x7, 0x2, 0x1, 0x4, 0x768, 0x1, 0xfff, 0x7, 0xd, 0x2, 0x80, 0x6, 0x8, 0x2, 0x5, 0x7, 0x3, 0x10, 0xfff, 0x4, 0x401, 0x15c, 0x7fffffff, 0xfffff2ab, 0x1cd043be, 0x8, 0x0, 0x5, 0x1, 0x1, 0x8000, 0x7, 0x6, 0xf80, 0x7, 0xf, 0x0, 0x800, 0x4, 0x2, 0xfb4, 0x7fff, 0x3ff, 0x40, 0x2, 0x5, 0x9, 0x582e, 0xf8, 0x4, 0x8, 0x1, 0x3, 0x2, 0x8, 0x7, 0x4fd23b05, 0x4, 0x4, 0x5, 0x5, 0x1, 0x2, 0x0, 0xfffffff1, 0x3, 0x4, 0x4, 0xbc, 0xa2, 0x1, 0x6, 0x7fffffff, 0x4, 0x0, 0x2, 0x5, 0x5, 0x0, 0x6, 0x100, 0x4, 0x3, 0x1650d91c, 0x0, 0x6, 0x4, 0x800, 0x5, 0xfffffff8, 0xff, 0x6, 0x4, 0x2, 0x4, 0x8, 0x5b64, 0x4a4, 0x6, 0x64, 0x8000, 0x9, 0xa, 0x4, 0x6, 0x4, 0x5, 0x1ff, 0x9a, 0x4, 0x5, 0x0, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xcc, 0x69b, 0xffff, 0x5, 0xc, 0x4, 0x8, 0xc4e0, 0x7, 0xf, 0x8c8f, 0x8, 0x9, 0x3, 0x1, 0x1, 0x1, 0x80, 0x54, 0x9, 0x2, 0x200, 0xd5ca, 0x73, 0x5, 0x7, 0x80000000, 0x8, 0x8, 0x136, 0x9, 0x37, 0x10, 0x5, 0xf, 0x80000001, 0x9, 0xd, 0x5aa48085, 0xff, 0x80000000, 0x7, 0x7, 0x40, 0xf, 0x6, 0x5, 0x8, 0x6, 0x9, 0x100, 0x988, 0x3a, 0xc98b, 0x3, 0xc, 0x6, 0xfffffff7, 0x7fff, 0x9, 0x6, 0x4, 0xffffffff, 0x7, 0x1, 0x9, 0xc, 0x3, 0x7, 0x3, 0x7, 0x3, 0x24865a93, 0x2, 0x4, 0x7f, 0x200, 0x8, 0xfffffffd, 0x2, 0x7, 0xd, 0xb, 0xc, 0x8cb, 0x7fffffff, 0x0, 0xe8, 0x5, 0x1000, 0x6, 0x2, 0x2, 0x4, 0x7fff, 0xa, 0x7fffffff, 0xffffff80, 0x3041, 0x5, 0x98, 0x7, 0x0, 0x40, 0x9, 0x4, 0x5, 0x0, 0x2, 0x5, 0x8, 0x400, 0xa, 0x4, 0x200, 0x7, 0xffff, 0xffff, 0x3, 0x2, 0xd49c, 0x3, 0xfffffffa, 0xc949bd43, 0x48, 0x5, 0xffffb5a2, 0x485f, 0xdae6, 0xde, 0x8, 0x8, 0xca, 0xffffafee, 0x7f, 0x4, 0x0, 0x0, 0x9, 0xc1, 0xfffffaed, 0x2, 0x7, 0x80, 0x6, 0x10000, 0x0, 0x3, 0x80000001, 0x1, 0xfffffc00, 0x9, 0x1, 0x2, 0x0, 0x6, 0x7, 0x5, 0x5, 0x6, 0x8, 0x129f, 0x101, 0x9, 0xfffffff7, 0x8, 0x18000000, 0xfffffffd, 0x9, 0x1, 0x8, 0x0, 0xffff3cca, 0x4, 0xfffffffb, 0xfff, 0x5, 0x6000000, 0x1, 0x9a9b, 0x880b, 0x4, 0xaa1, 0x37bb7e78, 0x6, 0x9, 0x6, 0xe9c, 0x0, 0x3, 0x8, 0x5, 0x9a2, 0x7fffffff, 0x8000, 0x8, 0x2, 0xbe61, 0x8000, 0x6, 0xca8, 0x5, 0xffffffff, 0x7, 0x7f, 0x0, 0x10001, 0x5, 0x9, 0x3, 0xef1d, 0xa, 0xfffffffc, 0x40, 0x49a8, 0xd14, 0x80000000, 0x3ff, 0x1, 0x1, 0x3, 0x3a8f1fb0, 0x40, 0x2746, 0xe, 0x6d, 0x4, 0x2, 0xb, 0x40, 0x2, 0xfffffffd, 0x4b, 0x2, 0xcad, 0x6, 0x7, 0x1, 0x95, 0x2, 0x5, 0x2, 0x7fff, 0x1, 0x9998, 0x7ff, 0x2dd6, 0x2, 0x3ff, 0x0, 0x3, 0x1000, 0xe, 0x400, 0x3ff, 0xff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x3, 0x200000, 0x9, 0x3cfaea4e, 0x1, 0xfffffff8, 0xfffffffb, 0xacb, 0x5, 0x5, 0x6, 0x3, 0x8, 0x0, 0x4fa8, 0x8, 0x9, 0x6, 0x200, 0x800, 0x6b4, 0x4, 0x3, 0x5, 0xffffff7f, 0x9, 0x9a, 0x1, 0x10, 0x7fb, 0x6, 0x5, 0xa13, 0x8000, 0x2, 0x5, 0x0, 0xfff, 0x8001, 0x9, 0x8, 0x6, 0xff, 0xae, 0x9, 0xffffffff, 0x10000, 0x0, 0x1, 0x8, 0x0, 0x0, 0x49, 0xe, 0x2, 0x4, 0x1, 0x80000000, 0x5, 0x3, 0x7, 0x2, 0xffff, 0x96c, 0x5, 0x446, 0xff, 0xc, 0x7, 0xc2, 0x0, 0x4, 0xb80d, 0x8c48, 0x7, 0xfff, 0x10001, 0x2, 0xfbb, 0x3, 0x2, 0x5, 0x6c, 0x3e, 0x80000000, 0x10000, 0x9, 0x5, 0x9, 0x300, 0x10000, 0x1, 0x0, 0x1bbc, 0x1, 0xffff6752, 0x0, 0x1ff, 0x3, 0x8000, 0x7, 0x7, 0x3ff, 0x8, 0x3e, 0xd8a, 0x222, 0x6, 0x6, 0x1e4, 0xe, 0x3, 0x4, 0x3, 0x4, 0x5, 0x4, 0x400, 0xfffff435, 0xffff, 0x4, 0x1ff, 0x3, 0x7, 0x9, 0x80, 0x9, 0xfff, 0x7, 0x2, 0x3, 0x0, 0x4, 0x3ff, 0x0, 0x8, 0x3, 0xd799, 0x1, 0x2, 0xb3df, 0x6, 0x6, 0x7, 0x38ee, 0xfffffffd, 0x1000, 0x800, 0x7, 0xff, 0xab0, 0x0, 0x2, 0x0, 0x3, 0x7, 0x9, 0x0, 0xef29, 0x8, 0x1, 0x6, 0xc0, 0x5, 0x0, 0x7, 0x9, 0xa12e, 0xc1, 0x9, 0x7, 0x1, 0x0, 0x2, 0x69, 0x8, 0xf4e7, 0x7f, 0x5, 0x7fffffff, 0x7, 0x2, 0x400, 0x9, 0xfff, 0x0, 0x7, 0x8000, 0xebf5, 0x9, 0x0, 0x1ed, 0x4, 0x3, 0x3, 0x0, 0xc, 0x8, 0x8, 0xd, 0x9, 0x4, 0x4, 0xd, 0x7ff, 0x5, 0xffffffff, 0x5, 0xafc, 0x8, 0x10, 0x2, 0x1d52e54b, 0x200, 0x8, 0x28, 0x0, 0x96e6, 0x4, 0x5, 0xb, 0x81, 0x4eb645d0, 0x9, 0x10000, 0xfffffff8, 0x101, 0x6, 0x5a7a, 0xce6, 0x2, 0xcb5, 0x3ff, 0xffffff7f, 0xfffffffe, 0x6, 0x2, 0x1, 0x1, 0xffff0001, 0x7ec4de05, 0xfffffffc, 0x9, 0x5, 0x1a51, 0xe, 0xc63, 0x1c000, 0x6, 0x5, 0x80, 0x366f61fa, 0x6, 0x5, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xbc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0xffffffeb, 0x293a, 0x1804, {0xfe, 0x2, 0x9, 0x9, 0x4, 0x4}, {0x4, 0x2, 0x3905, 0x3, 0x6, 0x767a}, 0x5, 0x5, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0xde, 0xfffffff9, 0x2, 0x1ff, 0x4, 0x4, 0x2bd004c0, 0x6, 0x0, 0x3, 0x3104, 0x5, 0x6, 0x0, 0x3, 0x6, 0x6, 0x0, 0x1, 0x9, 0x8000, 0x5, 0x40, 0x4, 0x8, 0x7, 0xb2, 0x780, 0xcd, 0xfc000000, 0x4, 0x8, 0x81, 0xfffffffa, 0x5, 0x4, 0x6, 0x2, 0x1, 0xd, 0x80000001, 0x5, 0x13, 0xffffffff, 0x8, 0x100, 0xb, 0x3, 0x3, 0x1, 0x400, 0x3d7, 0x0, 0x6, 0x5, 0x2, 0x7a, 0x69, 0x4, 0xb50, 0x3, 0x80, 0x4, 0x7fffffff, 0x6, 0x0, 0x36cbfde4, 0x5, 0x2, 0x9, 0x7, 0xd, 0x91, 0x7f19, 0x5, 0x8, 0x4, 0x1, 0x401, 0x3, 0xff, 0x5066, 0x0, 0x57b, 0x5000000, 0xfffff001, 0x1, 0x400, 0xec6, 0xfffffff2, 0x9, 0x35c82b9b, 0x200, 0x6, 0x168, 0x1, 0xc, 0x7ff, 0x6, 0x8, 0xc, 0x0, 0x2, 0x1, 0x1, 0x9, 0x9, 0x8, 0x3b9f773b, 0x5f, 0x200, 0x81, 0xc0000000, 0x2, 0x2, 0x2, 0x10, 0xd4, 0x6, 0xffffff62, 0x21d, 0x3, 0x401, 0xfff, 0x0, 0x0, 0x0, 0xfffffff1, 0x2, 0x5, 0xc, 0x21ea, 0x10, 0xf17e, 0x7, 0x2, 0x2, 0x9, 0xdeaf, 0xfffffffc, 0x0, 0x6, 0x8001, 0x6, 0x200, 0x401, 0x2a, 0x5, 0x8, 0x9, 0x800, 0x6, 0xc554, 0x401, 0x7fff, 0x9, 0x6, 0xe, 0x1, 0xe, 0x8, 0x8f74, 0x9, 0x2, 0x5, 0x40, 0x7, 0xb5, 0x401, 0xffff, 0x47b0b0c8, 0x3, 0x8, 0xd66b, 0x6, 0x3, 0x2, 0x80, 0x26, 0x8, 0x2, 0x66, 0x6, 0x7, 0xc15, 0x5, 0x8, 0x4, 0xfffffffc, 0x8, 0x5, 0x7fff, 0xb, 0xfffffb22, 0x9abe, 0x5, 0x6, 0x0, 0x4, 0x4, 0x8, 0x5, 0x0, 0xa, 0x80000001, 0x3, 0xb1a, 0x100, 0x7f, 0x6, 0x4, 0x80000000, 0x8, 0x7, 0x2, 0xe04d, 0x6d21, 0x4, 0x6, 0x2, 0x5, 0x2, 0x5, 0x0, 0x3, 0x8, 0x8, 0x3ff, 0x3ff, 0x5, 0x9dae, 0x2, 0x2, 0x78b, 0xd, 0x53, 0x1, 0x7ff, 0x807e, 0x9, 0x400, 0x5, 0x2, 0xb, 0x40, 0x10000, 0xffff, 0x3ff, 0x8000, 0x3, 0x2, 0x6b, 0x7f, 0x3, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x401, 0x6, 0x6, 0x3, 0x8, 0x4, 0x1, 0x8, 0xa50a, 0xffff, 0x0, 0xbd, 0xe9d, 0x80000001, 0x127, 0x4, 0x1, 0x3, 0xffffffc0, 0x2, 0x200, 0x2, 0x4, 0x7, 0x3, 0xfffffeff, 0x4, 0x4, 0x8, 0x5, 0x5, 0x80, 0x757, 0x3, 0x4, 0x0, 0x3, 0x3, 0x3, 0x4, 0x5, 0x5, 0x4, 0x3, 0x4, 0x7, 0xcc9, 0x227, 0x99, 0x7, 0x731, 0x3c0, 0x0, 0x14e, 0x1, 0x4, 0x1ff, 0x6, 0x5fd, 0x5, 0x7, 0x6, 0x6, 0x1, 0x3, 0xc3f, 0x7, 0xefb, 0x37d2, 0x8, 0x9, 0x3, 0x8, 0x0, 0x6, 0x40, 0x12b9, 0x9, 0x5, 0x8, 0x200, 0x88cb, 0x8, 0x400, 0x1, 0x4, 0x3bc, 0x349, 0x2fb, 0x101, 0x41457fbf, 0xfffffc30, 0x2, 0xb, 0xc8, 0x7, 0x7fffffff, 0x7, 0x9, 0x7ff, 0x4, 0x221a, 0x6, 0x871, 0x2, 0x5, 0x0, 0x101, 0x6, 0x95, 0x5c, 0xe7, 0x6, 0x9, 0x7ff, 0x1, 0x2, 0x0, 0x40, 0x0, 0x8, 0xc0000000, 0xfffffffd, 0x5, 0x8000, 0x8, 0x2ae, 0x7, 0x7, 0xb, 0x8000, 0x4, 0x37, 0x7, 0x81, 0x101, 0x0, 0x4, 0x2, 0xfffffffa, 0x9, 0x5c33015f, 0xa, 0xa384, 0x1000, 0x5, 0x252c, 0x4000, 0x800, 0x4, 0x9d, 0x6, 0x0, 0x0, 0x1, 0x2, 0x71d14033, 0x1, 0x9, 0x0, 0x4, 0x6, 0x4, 0x0, 0x9, 0x0, 0x2, 0x49, 0x100, 0x7, 0x8, 0x10000, 0x5, 0x10000, 0x7, 0x7, 0xffffffff, 0x7, 0x7, 0x6, 0xe5, 0x100, 0x9, 0x400, 0x1, 0x3, 0xff, 0x10000, 0x3, 0x8000, 0x1ff, 0x6891bda5, 0x10e, 0x9, 0x7f, 0x5a, 0x9, 0x7, 0x8, 0xfffffff9, 0x0, 0x0, 0x101, 0x6, 0x5, 0x54, 0x1ff, 0x8, 0x9, 0x10, 0x14e4, 0x6, 0x6, 0x7f, 0x81, 0x8, 0x1ff, 0x6, 0x2, 0x7, 0xc97, 0x80, 0x0, 0x7, 0x8, 0x6, 0x6, 0x4, 0x6, 0x9, 0x7, 0xfffffffb, 0xd73, 0x9, 0x4, 0x3, 0xa08, 0x3, 0x81df, 0x93, 0xfffff937, 0x2, 0x1e58, 0x56986dd, 0x915, 0x9, 0x8, 0x3, 0xfffffffe, 0x1, 0x7, 0xffffcf17, 0x3, 0x7, 0x4]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7, 0x4c97, 0xfffffff5, 0x5, 0xffff, 0x8, 0x7, 0xaa, 0x78000000, 0x1, 0x44c, 0x7, 0x200, 0x9, 0x9, 0x2, 0xe8, 0x3, 0x1, 0x2, 0x1, 0x9, 0x10001, 0xfff, 0xa9, 0xfffffff7, 0x100, 0xfffffff8, 0x0, 0x6, 0x2, 0x6, 0x2, 0x4, 0x7, 0x3e29, 0x3, 0x5, 0x1, 0x9e05, 0x7, 0x9, 0x9, 0xa, 0x6, 0x9, 0x2, 0x3, 0x9, 0x0, 0x400, 0x7f, 0x4, 0x7, 0x3, 0x6, 0x1, 0x7, 0x3ef, 0x101, 0x8000, 0x4, 0x81, 0x7, 0x8000, 0x1, 0x100, 0x8, 0x400, 0x2, 0xffff7fff, 0x6, 0x7, 0x9, 0x6, 0xb60, 0x7f, 0x7fffffff, 0x80, 0x1b, 0x7, 0x5, 0x9, 0x8001, 0x1, 0x1, 0x101, 0x8, 0x5, 0x7, 0x8, 0x9, 0x22d8e0b3, 0xfff, 0x81, 0x10, 0x7fffffff, 0x5, 0xffff, 0x5, 0x100, 0x7, 0x8, 0xbfd, 0xe00000, 0x0, 0x6, 0x4, 0x2e13, 0x9, 0x2, 0x8dd2, 0x6, 0xcea, 0x5, 0x5, 0x0, 0x5, 0x0, 0x387, 0x9, 0x5fa08cc7, 0x3, 0x7fff, 0xa, 0x0, 0x5, 0x7, 0x0, 0x81, 0xfffffffd, 0x3, 0x26, 0x6, 0xfffffffc, 0x8, 0x4, 0x3, 0x3, 0xc, 0x197, 0x9, 0x2, 0x6, 0x7, 0x4, 0xda, 0x2, 0x5, 0xf5a0, 0x9, 0xffff, 0x8, 0x2, 0x33, 0xc, 0xc2, 0x40, 0x40, 0x9, 0x4, 0xbd, 0x7, 0x7, 0x49f8, 0x5, 0x7, 0x6, 0x5, 0x1, 0x1, 0xffffffff, 0x8, 0x8000, 0x0, 0x5, 0x0, 0x8, 0x9, 0x4, 0x8, 0x941, 0x0, 0x8, 0x7ff, 0x8, 0xa, 0x9, 0x1000, 0x1, 0x3, 0x3, 0x7, 0x7ed, 0x100, 0x1, 0x80000001, 0x8, 0x7, 0x2, 0x2, 0x9d0b, 0x246, 0x6, 0x200, 0x0, 0x5, 0x2, 0x401, 0x9, 0x8, 0x5, 0x1, 0x7, 0x3, 0x10001, 0x998, 0x8, 0x2, 0x2, 0xff, 0x6, 0x800, 0x998, 0x0, 0x19e8, 0x7, 0x1, 0x3, 0x56c, 0x0, 0xfffffffc, 0x1, 0x5, 0x10, 0x5, 0x1, 0xf, 0x5, 0x4, 0xf0, 0xdb2, 0x6, 0x2, 0x6, 0xf654, 0x6, 0x711, 0x0, 0x2, 0x9, 0x3, 0x4, 0x6, 0x5]}]}]}}, @TCA_RATE={0x6, 0x5, {0xf0, 0x8}}]}, 0x18f0}, 0x1, 0x0, 0x0, 0x8848}, 0x80) ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1.373927692s ago: executing program 0 (id=1018): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x2) r2 = dup2(r0, r0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf57fa42241e77702, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x1b, 0x0, 0x41000, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f00000017c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x1}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)="a7", 0x1}], 0x1e}}], 0x2, 0x0) r6 = socket$inet(0x2, 0x80000, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="48000000680001002dbd70000000008000000200000000000c00088008000600ffff0000240002000100000005000000000000008000000002"], 0x48}}, 0x44010) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000003c0)={r8, 0x0, 0x20}, 0xc) sendmsg$inet_sctp(r2, &(0x7f00000007c0)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x6138, @local, 0x6}, 0x1c, &(0x7f00000006c0)=[{&(0x7f00000001c0)="b9d3b162be7dedb743af2c32996117", 0xf}, {&(0x7f0000000a00)="92efa2ee8bc0db87c9c9b87d4093561e1b61afa2c7b2e384185938a56238e7b4b877bb3a19e7b65cbf170c33f20cae7671421493e0a5bb20c6b520d43958212be5cff43aec9aa91ac0d7c0e20e4c6bb75202ddd4809cd24dd0a122536c1fb6439d68980c1be4f2e56c3c0609386ce1d1bd2eb02c1eb3cd6b5774c88c77d4ed0ae975743c73ed50a9c7d911ba6d7fd0ef59288810db2fc0ed8961caf53fc52800767739f8be13d30616e835e3d5e6a7896d40da287848c311b59df4da49b15fcea196963e913377491f30f9843130565e2a9376bf2697e23631c75ac331ba80547b26aa1b2d0a39d2249a031b720209f08fc886d691d943b3b57269745cce9351de7ffa3df3acaf4cd65f6a551f502ba26ad37dd318418c5d7021f1e8d2eb179fd4c430df92edd83cb16e9ffdc3370a2c83152414cabb0effb1c00970466b04dcbd02784d5d697ad0138f1e66c22b29137893bb429d1b13763cec0d6e2a96164506da09742169af48b15bb2370703d2f26018005348aa5378a2177559797f8f379a715da8f7eb2812bf90a8a8ee2d46d1ae4e5493262cc9eb8d8561165fc2e2e2a8bdf2e5796d2965eddb315674b37665210a42676bf60d16c250b95c0c2a35dd8a1426afb64e366e58b1513c165cc047bd025b2232449f0c6d1ba63f6af7ddcbaaae728318a65111a8065a5c8fb7ef2560af6555d84bc454241d0d2926162627e1c914272469ed0d4080492d6e1a6340de23e56424f9d1e86dec170c693ba7dc3a8a2636675dcd00d1920bb5ab067885941e1458f27099dd901bae9673745624861fe4e2d7bb9d335e0072cc7f003fb53e7b806504a019a702adf136f96fcfbc031b81470279a3dd40f56a4e0181b532a7b57cd12604eec8a1ea01156feeb88b6a1b53193bff071290af4b686527f60179ae053e4db20befc8e064e20010592ca0a289412ed04789c24d686f62ca7935e4869272824bbbfa070f2f9d752bf714ceb9165e4b5ddb7a52c859f1c8eefbf30b3b41456284b98de2213ec9110367aabd313ecf0f82ee67e57ed513bf3ae637f432be4eb3d994da7372fb9a21b8b7669d99a82368ab51da3d5901e210cda09468bbf28c6fe77aa2aa355a93decde904d6756276979c43f0186670483cbf99d270b14a4ccd4a94ffc82b553d702b5af3ab3e3941632c42be78933720997d64e5ed0cf575bb1b6e53a6c775cf9a13511d3439b97312b3ecef066c02108725123a8f80ef99888fd713ff32de3d39192189f6d8950ebeff419f3741e7c44c791a3ba08e301ed449feb8d3991f92d46904b303f2fc62a8c8821f7ee746260d2a23d2bf5ce4265d42478376d0bb92067810800fedfab3dc32936d56ba4636a1481e582dce0d5f099ed67e92c821d3715825966568e338308b96791d8ac92cf658d415f812c565fcd86e7bec479435d6a11d8ef5e61837bbdd3e81b6a4c9704e981dd870e000131a76c1142bf6b50e0c45ab2aa98f6aa8dba655d354fc7170ef9f15a606329794ba37a8b00cbea6db401a8a4480e23562f31e5b3c052388e5f46051bba31194128d288066db85bc5d36bfa445af013319dea829afd3f0f4e3e9fd533041199edd6ce39b5adb1e796c4c2e024dc5b6b756f75690a8a60ae88944b29eb5a70a31887e57ddd1bbe5d75a38a39ea05b857007d9727d5db945659f92131f432f83570002c16f85cc6f1d4095dde627ed40a3e79f00208779e11fbd14bbaab8368cbe20b8cafb355757cfb52559d3887381e7485f10b1662ddd3187fa68599f456aa630eb3c7a5f5a826dca3d508474b88153f435436231c855b7f7ff4fd6011587599b8377d84590e6423f9c45adec92873e4c71f6f014dc84e87efc0838b765ead4cd2c953337f492c583735649d2d84502a617a99e8e2fe2d2651626527f773f30e83b87f9cfaf01bda99eacc7ee544b35fdbddf02bdbfdc67cc2bd7530c00a18ea301594bd3e42d83d3b1d2022aa5a3903679b0d4b4c04b67b62ce60072ff0f0384a08c5559d4fc4759b49fa649f4e14c95b4c1155564f20670d79c898bad50fa2c2348c623242e1500b2e330547ce9f76ab3efb076f2cf80a466a81876a8dcda2c7776131fba581e59d63545a190cc9b7d1ff96a32763e1b1c2f40957417a49fbc915ec885ff4d7005f1ff1c5d9141cc4ef96e5bf946a1a87bf4612243d19da8b1377cc6d80284e7bd6f10d0e6ef0f3a35ce17e42effd71ce387ba9ddaba9fe748eb477582dcfe5759d6219e9d2048230558c30f51c2bebfbcdb476c41e49daafe7f86248bd6c317a80733b547658f77ecc67909b07478720b42bb8537cf545f4f737ff32db475ea7411d701fc9c6b496949562d9fd0569e7372c678095d3c384b6d2260e1726727a7d0b72a81553471f6a3fcc85b7c5ce23cba065a495b88f3d9bd3527f1da20503d2f7ce1388ce069d9d54cf799131912fefe0614716e1bc6644d4f498b946b3bccd368f5dd2d5f33d283071fba2aa3e1620b74ebecacc1541ad5fcca26184d9954c0cde0f0f987ac792f0fbb82ca65ec031811424be1e941ce0f68f3286963e23e58db880f84758447b1570440b92141fc791ac80672ae30f200c94c3c85cf8d423d5b43115ba2e746589cada2600d8652c22fc1e407c6790f42d32269d32f88fc0c60bc24c33892e041e1b7ede08dba17f8de34cacebe2bfa649ebf9996b6b70e51efa717bf0ea1d0466393d0b29df3e77c4a8e67e7713876ff7d8e223196d911cabb99514e5fe34ff40cb18fc345cd3dcd2236a1c0851dac7e9dcc785d390680e981f4ae949085b1b8bff3e7ce42ed7b148389e2da1b836b332020dcc797ecc3d10030b914fe51401422030ad7fb2168b3d3dbf4ec30e4d45ed960f4b672fc9602b1bedfcdf85608dbeb522e191fbd71f049598d41f4b4cfc1f532dfb0e0659fe64965bf34d853f5bec0dee5f8e90848e6715230ec5ea1fcbec577be98d87b1731bebc59d20e2b4fec6bfcc27ba0ecbc82d2d05ab6fb5f79a42121adf0d0137751de8c5225d415727d9dcc690a7caa7d5d2ea38dc16be9c95c08bab971c84b2a27c9c423da09f4f91149ccbf71b39a3fc9efca62b6a6568c17bbe670ce0af6c9091be8aeb00b7691390ece51e0f053b55936fd7deff95e62d519978753dbeed47083699b313772e326874d40f0cf45483b6fb9c403f3e0f930abeda75cb9b6ff531680254d2485cdc160bff032650a5f8a4a098ef64c4abe6375037671fea2f21fdd5530285e2787d12635dd5198aeb79c5cfa1968c1d2143d03dc2c4f695dededd282e66eabce891bb98f46f9c3df63a5fbbad3dafb3ca144074c735134b6dbb1db4f7f8f20302504de7fa2627a3b868c1cab681b2728004cb691140f14f5ac8a63c2c9e162748f8860a3ec13ddd32b88932a6e3b67a325db70c635ccedba0358e63e270246b29a21604974dbb3c4c545f0cf37d20afbf5c35e85518ffef5d79a0c0126059eedae29c55e467e555cb9f9cafff075291ab9645c78a28068ec6015165ac0b681d99f448d0677150ef2e7b2a54d385a5c32d782e621e4f7a8de9738e38678d2a4c3265cc47ba04450a03349e17d6796869a844a5083f1870b77d41b239b58edd99c3eca1405c7bc3f3c7015557e16b6460ba6259d9f921757199838910a8faaed728bd331ebaa6f3ce5717177b55c01f21601aa3c9557dee687b064d6b4cfd22b3c50c34812236e739c69af8ccf3caf73f58efe65d236145f113d384afc7961723004eb9fe5ab34cd86e5f6e4f003be95323684bb4054cd797dba74ee525e468f5c61e6ba56be1fd535a175ab162b86a4427160991fe14c57caf684024aa245fd5ae861bf2000f27bbb78aa6a66b721641792d04b734e1791ccad97861c25c48a9c985631c6831f2be64a8eb9a41c2ba04b36a8fe46784061391ab077c928414f5644204ea6929792e8a88702463d1e2831dbe243354aaa3b1aa94f328f2d720d18d49219a163e2dac1d10a18a18a514b3c7257629c58a2aa14adf37ff1af4e292a322e73de90625ca05407f1550e838ae7a336c1d84863263b3888f19c038186bfd762692cc8bce84511fb6d64aa1c1cea9fc5c7be84221165bb4704bdf89ad7fbc6b5334223cfc316ae9a3364643a34866e07c8cb341491bb73b878ca5fae8d1f4ef014013918acdd22b52fc12c5a8230a169322da7f2d5b0e77cc42aa64bb6ca474fdf3b825c88de57132f6b65ca6dfea79ef3d33015e72845db6d34481a96f39ff27438862ceabc5541c1f4588c67b078091d669370da2f3f30cde0a663de3b6d97f172222b04267e0b80ae9b323d4519a2a6a035918d6a83b489284bdc0bd75ba04089b39f07f413734f2204578dc67d310bbc22cccf3ad6e765d8580c2beb81ff5edab2679592c75241b74c0c8000ac184f57d53841f4d8388e6927b347b14368b2621d9804598519055833891b0b0928e55bb4d434bc603596c55284b85bb5b4cb8e7ac35f817a10c51b743fa67d216454c6597be85b4f3fa4c20e52adbf5a9ff3733b71fa022ceb6dd5cc51c58ec98a856bdf1f9f5c41f96aff945897d3f3e97b569c1a8e3f5f744c00da1a4145c9ac22154fe16dc616a10fa9ccd7fa71e946849e07fd9bcd1e29cc71f3de4ccc785a32c805ffa9a5314394203ae7e9c896325fdb8568a57ba4ea47f9664ba64f9b06b6d2bf79f5faaa815522f3998c25a6d8c3a693b14c0514ee1a414aaff39da7a6148fa0446cb58c999074e68ff4251daef78edb4eb219c98f8b8204f85761938046d61a13a0af423e1b69f89b63c520fbbee2ee6721e97bda7ecb8850e42293879dfd0c59b2ada9b7a933cb41a2f09e23ca493d8e9505c779d721179ec12ab21750233125d70c74f90175699d69d8ab9442e428b61b3d624195b346993950f61c773bd661ad328b1d88705653119df133b74e28c865b057af5d151bb0423699bba80078ad8049866431459bb21607fafdee46e412f81b60490674e3015e6879b212b9b298b80f8597f42b2080fd9abc8c5c6ce0b2dccc5a6105c07bbd188a32c86007cd5b188df86915ee451d16ed9f7b41392e48584c0edaecbaed609733c499acf3bc7bd992e08123635be0a392901bdf9abc8b01c1f64d8ee9014e406c2e3a148afeb67df24a977032e5e233c4f884f368011f391fbac2ecb79b36e07c67c69cf4737bd1a59d0503caa894273fc3d410519c134ec621f8d9ae8a58071f22a9dfec160cc96bed2d512f2d4289422a11f1028ac6b79e5eb5b14e82ea9d16f0fbeb181d6aaaf375f0abbd668d4a7db9a87e95d4dbbb324c9076bbfa725e1ac5d78e6b225c85c5e6ee74af99d40bf7eb644922c3d82efa5a4c7fa584412f376b4fc347c2cc6e475b050c14c791c0b8076c254d2aac9be4faf26cc07ce50fc62442f83c8c7f0e1ec5c560991912900c74ae1ffd225c9b78014569f0098662df99c290911a9c0e6eee1d83b992e7d281794837b4f15749f8bcacf31741a8ad1cedc3e4e59a653033058a6dc8d1ea17d79f8d169af2a43221dc9190d77e8b32cfcaaf57b2e2f719e4a010e5df50285b87552a6d30a5bf81e693b8464d7a9b32cfe6d764b19609c9da60b16dc03e7f7d25cd1937bb3ac92692fa78b0562884a31dc370e70b162b76fadd7a1eaae9e5afbe12afddda7f3f5326cef4bc330d4aafde0456a68aee878864e9f6c441fd9c63fc3e8f21ccf9b7624d3ebd0f8c4e5bffbe0e3c887a489be4a2f45cc2e843ee19dbcbae34ecfddd0ad088f0b852ad01e1b6d47fa8fcaed7df26028262c313", 0x1000}, {&(0x7f00000003c0)="fa", 0x1}, {&(0x7f0000000400)="04f13066cd23da7b495b482ac71cae98aaa2a522dc338b05a2208e5ddc870975a4", 0x21}, {&(0x7f00000004c0)="b8f49267baf1504c338c01ea4ca967cf90b0d713973e426aa9492fc59777328b940a4be886e97449a00095e3f60b312b8af280d5f49479d24a0ce886fb3a4428bf8ccbd340e75c1f21011d29ac7f516168b71ba12e1d2ec2ebc672213c97cbbf27ee9b6e0f7eebac60e2a43572b7", 0x6e}, {&(0x7f0000000580)="6aab96385b499ca2b6d9e92a504a31bdc932bae0ca621685afa3515551e4f12bd1be64c7358a73b315", 0x29}], 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="2000000000000000840000000200000007000000fa00000000080000", @ANYRES32=r8, @ANYBLOB="180000000000000084000000050000000000000007850000"], 0x38, 0x20000010}, 0x8001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) socket(0x1, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) memfd_secret(0x80000) fchownat(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r11 = dup2(r10, r10) ioctl$BLKTRACESETUP(r11, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r11, 0x1276, 0x0) 1.334348012s ago: executing program 2 (id=1021): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) 1.312117292s ago: executing program 2 (id=1023): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$unix(0x1, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) sendto$inet6(r5, &(0x7f0000000040)="be", 0x1, 0x4008014, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7}, 0x1c) shutdown(r5, 0x1) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0xc0, r7, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r8}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c7085919e1a1ab287797ba2391d67ab4d3b618c2a0b91726"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'netdevsim0\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_team\x00'}]}, 0xc0}, 0x1, 0x0, 0x0, 0x44}, 0x44084) r9 = socket$unix(0x1, 0x5, 0x0) connect$unix(r9, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r2, 0x0, 0x0) 1.219693553s ago: executing program 2 (id=1024): r0 = inotify_init1(0x80800) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0xa4000021) close(r0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000700)={'#! ', './file0', [], 0xa, "f68f8b23"}, 0xf) perf_event_open(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) memfd_create(0x0, 0x6) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x320, 0x190, 0x8, 0xfa04, 0x190, 0x6c02, 0x288, 0x194, 0x194, 0x288, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0xff000000, 0xff000000, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6, 0x2, 0xc}, 0x0, 0x168, 0x190, 0x0, {0x0, 0x74020000}, [@common=@inet=@recent0={{0xf8}, {0x1, 0x3, 0x8, 0x1, 'syz1\x00', 0x3}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xfbff}}}, {{@ip={@initdev={0xac, 0x1e, 0xfc, 0x0}, @dev, 0xffffffff, 0xff000000, 'pim6reg1\x00', 'tunl0\x00', {}, {}, 0x21, 0x0, 0x23}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6e5ee54426ce7f2f}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x3, 0x2, 0x3, 0x7, 0xc, 0x4], 0x0, 0x7}, {0x3, [0x3, 0x0, 0x0, 0x0, 0x0, 0x1], 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0x1, 0x4) vmsplice(r10, &(0x7f00000003c0)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000200)='\b', 0x1}, {&(0x7f00000001c0)="8c39fc017771edeed3d61ea58a0caa", 0xf}, {&(0x7f00000002c0)='@', 0x1}, {&(0x7f0000000440)="15", 0x1}, {&(0x7f0000003040)="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", 0xfc1}, {&(0x7f0000000b00)="376864c1cdb39f764a81", 0xa}], 0x7, 0x0) ioctl$sock_inet_udp_SIOCINQ(r10, 0x541b, 0x0) write(r8, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r11 = socket$rds(0x15, 0x5, 0x0) bind$rds(r11, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) 1.129281663s ago: executing program 0 (id=1025): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) shutdown(r0, 0x1) 1.128298563s ago: executing program 0 (id=1026): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r5, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x12024, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x9}}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000003c0)="8df5863a27", 0x8600}], 0x1, 0x7a00, 0x0, 0x3) 1.093023883s ago: executing program 3 (id=1027): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) 1.076990443s ago: executing program 3 (id=1028): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x2, 0x0, 0x0, 0x0, 0xee01, 0x100, 0xd}, 0x0, 0x0, 0x1a7, 0x7fff, 0x5, 0x40, 0x9, 0x8, 0xfff0, 0xe, 0xffffffffffffffff}) 1.057727883s ago: executing program 3 (id=1029): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000030000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_clone(0x63081180, 0x0, 0x0, 0x0, 0x0, 0x0) 899.892104ms ago: executing program 2 (id=1030): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) 899.440535ms ago: executing program 2 (id=1031): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) shutdown(r0, 0x1) 898.951195ms ago: executing program 0 (id=1032): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xd, 0x0, &(0x7f0000000000)="219a53f271a76d2608004c6588", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd25, 0x0, {{@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80, 0x3c, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802000000000000}, {0x0, 0x800}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}}, 0x0) 541.309197ms ago: executing program 0 (id=1033): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000085000000500000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000001580)=ANY=[@ANYRES32=r0, @ANYRES8=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001540)='syzkaller\x00', 0xe7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x0) r6 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=ANY=[], 0x122}, 0x1, 0x0, 0x0, 0x40}, 0x40) r7 = syz_io_uring_setup(0x20049a, &(0x7f0000000400)={0x0, 0x79af, 0x2, 0x3, 0x18c}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x44, 0x0, r7, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(0xffffffffffffffff, 0x625, 0x4c1, 0xc8, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x7, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xfc431, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b5e, 0x0, @perf_bp={0x0, 0xc}, 0x9092, 0x0, 0x43a1bd73, 0x6, 0x9, 0x6, 0x49, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="fa", 0x1}], 0x1}}], 0x1, 0x24040890) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='mm_collapse_huge_page_swapin\x00', r10, 0x0, 0x7}, 0x18) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000001480)={0x100, 0x1, 0x2, 0x2, r5}, 0x10) 540.493097ms ago: executing program 2 (id=1034): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) gettid() r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_clone(0x80308400, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) read$ptp(r0, 0x0, 0x4000) mq_notify(0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) chmod(0x0, 0x60) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 469.728067ms ago: executing program 0 (id=1036): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 333.374538ms ago: executing program 1 (id=1039): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x2, 0x0, 0x0, 0x0, 0xee01, 0x100, 0xd}, 0x0, 0x0, 0x1a7, 0x7fff, 0x5, 0x40, 0x9, 0x8, 0xfff0, 0xe, 0xffffffffffffffff}) 313.917729ms ago: executing program 4 (id=1040): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) memfd_create(0x0, 0x6) 307.071328ms ago: executing program 1 (id=1041): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x4) write$cgroup_int(r0, &(0x7f0000000000)=0xfe8e, 0x12) 278.370669ms ago: executing program 1 (id=1042): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r3, &(0x7f00000001c0)="49bda8f11851b8436bebb2", 0xb) sendfile(r3, r2, 0x0, 0x3ffff) pipe(&(0x7f0000000080)) sendfile(r3, r2, 0x0, 0x7ffffffffffffffd) r4 = syz_open_procfs(0x0, &(0x7f0000000540)='attr/fscreate\x00') r5 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getresgid(&(0x7f0000005d00), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000180)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@mblk_io_submit}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4d1, &(0x7f0000000b80)="$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") timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f000001fa80), 0x8}, 0x94) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) syz_io_uring_setup(0x2e3b, &(0x7f0000000240)={0x0, 0x69e5, 0x10000, 0x0, 0x295, 0x0, r4}, &(0x7f00000003c0)=0x0, &(0x7f0000001040)=0x0) socket$inet(0x2, 0x80000, 0x6) syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/9, 0x9}], 0x1}) ioctl$sock_bt_hci(r4, 0x800448f0, &(0x7f0000000240)="aa09795f0e7751f1b6c471fe55468899adb16f7cabf1018f08724bab19c580c1f209507756dabeda070c19a7470be9f26543f736a1d7779986f5d25a753a2966551a6abc9b2448a8220c49e29022cc2dcfaba95435a2121f5767f6121d8d6b29901a7c717790451dc0c7754439b9af2a11c3d417a9469180d051dbcb7f0a55425685edc901552dc551f720c29f090108b3c89d3be747e817fa374aab7e359995f935cfabebee1b69ba49ff87d4f67a5c95d8157daedfee0634e48ac04e6042aaa442fb84ecafce4f4e78e570e4c29e7ac30e2ab78c1b58ef177372d47745") socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") 225.154529ms ago: executing program 4 (id=1043): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) 224.779379ms ago: executing program 4 (id=1044): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xd, 0x0, &(0x7f0000000000)="219a53f271a76d2608004c6588", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd25, 0x0, {{@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80, 0x3c, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802000000000000}, {0x0, 0x800}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}}, 0x0) 222.550179ms ago: executing program 4 (id=1045): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) shutdown(r0, 0x1) 158.530549ms ago: executing program 3 (id=1046): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000085000000500000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000001580)=ANY=[@ANYRES32=r0, @ANYRES8=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001540)='syzkaller\x00', 0xe7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x0) r6 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=ANY=[], 0x122}, 0x1, 0x0, 0x0, 0x40}, 0x40) r7 = syz_io_uring_setup(0x20049a, &(0x7f0000000400)={0x0, 0x79af, 0x2, 0x3, 0x18c}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x44, 0x0, r7, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(0xffffffffffffffff, 0x625, 0x4c1, 0xc8, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x7, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xfc431, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b5e, 0x0, @perf_bp={0x0, 0xc}, 0x9092, 0x0, 0x43a1bd73, 0x6, 0x9, 0x6, 0x49, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="fa", 0x1}], 0x1}}], 0x1, 0x24040890) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='mm_collapse_huge_page_swapin\x00', r10, 0x0, 0x7}, 0x18) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000001480)={0x100, 0x1, 0x2, 0x2, r5}, 0x10) 155.652269ms ago: executing program 4 (id=1047): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) 127.934519ms ago: executing program 4 (id=1048): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x34, r1, 0x1, 0x3, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r2, @ANYBLOB="00e40cefc074bc9300808af8ff00000000bfa200000000000007020000f8ffffffb7000000606b16000004000000000000850000005700000095abbe2aa714283e8834bf529515f02c6204c9a2cf43a2bbed84ce380000f89f4202", @ANYRES32=r1], 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7fff}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) 99.00548ms ago: executing program 3 (id=1049): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003980)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000040)=@generic={0x3, 0x200000000000, 0x5}) 0s ago: executing program 3 (id=1050): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) kernel console output (not intermixed with test programs): ermissive=1 [ 54.318867][ T29] audit: type=1400 audit(1761895453.534:2331): avc: denied { open } for pid=4433 comm="syz.2.279" path="/dev/input/event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 54.342926][ T29] audit: type=1326 audit(1761895453.534:2332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.3.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467daaefc9 code=0x7ffc0000 [ 54.375947][ T4428] IPv6: NLM_F_CREATE should be specified when creating new route [ 54.384413][ T29] audit: type=1326 audit(1761895453.694:2333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.3.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f467daaefc9 code=0x7ffc0000 [ 54.407806][ T29] audit: type=1326 audit(1761895453.694:2334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.3.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467daaefc9 code=0x7ffc0000 [ 54.431168][ T29] audit: type=1326 audit(1761895453.694:2335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.3.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467daaefc9 code=0x7ffc0000 [ 54.534213][ T4453] loop2: detected capacity change from 0 to 164 [ 54.541931][ T4453] ISOFS: unable to read i-node block [ 54.553785][ T4460] loop3: detected capacity change from 0 to 256 [ 54.560906][ T4453] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 54.631259][ T4468] FAULT_INJECTION: forcing a failure. [ 54.631259][ T4468] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.644400][ T4468] CPU: 0 UID: 0 PID: 4468 Comm: syz.2.293 Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.644448][ T4468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 54.644464][ T4468] Call Trace: [ 54.644470][ T4468] [ 54.644479][ T4468] __dump_stack+0x1d/0x30 [ 54.644505][ T4468] dump_stack_lvl+0xe8/0x140 [ 54.644529][ T4468] dump_stack+0x15/0x1b [ 54.644551][ T4468] should_fail_ex+0x265/0x280 [ 54.644611][ T4468] should_fail+0xb/0x20 [ 54.644631][ T4468] should_fail_usercopy+0x1a/0x20 [ 54.644683][ T4468] _copy_from_user+0x1c/0xb0 [ 54.644714][ T4468] ___sys_sendmsg+0xc1/0x1d0 [ 54.644799][ T4468] __x64_sys_sendmsg+0xd4/0x160 [ 54.644897][ T4468] x64_sys_call+0x191e/0x3000 [ 54.644925][ T4468] do_syscall_64+0xd2/0x200 [ 54.644948][ T4468] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 54.645012][ T4468] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 54.645051][ T4468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.645145][ T4468] RIP: 0033:0x7fde4345efc9 [ 54.645162][ T4468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.645183][ T4468] RSP: 002b:00007fde41ebf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.645205][ T4468] RAX: ffffffffffffffda RBX: 00007fde436b5fa0 RCX: 00007fde4345efc9 [ 54.645220][ T4468] RDX: 0000000000000004 RSI: 0000200000000440 RDI: 0000000000000003 [ 54.645235][ T4468] RBP: 00007fde41ebf090 R08: 0000000000000000 R09: 0000000000000000 [ 54.645323][ T4468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.645338][ T4468] R13: 00007fde436b6038 R14: 00007fde436b5fa0 R15: 00007ffff1cee658 [ 54.645424][ T4468] [ 54.907310][ T4487] loop3: detected capacity change from 0 to 256 [ 54.936356][ T4492] loop2: detected capacity change from 0 to 256 [ 54.954538][ T4490] loop4: detected capacity change from 0 to 164 [ 54.964434][ T4490] ISOFS: unable to read i-node block [ 54.981778][ T4490] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 55.063180][ T4498] loop3: detected capacity change from 0 to 512 [ 55.115957][ T4498] EXT4-fs (loop3): 1 truncate cleaned up [ 55.133443][ T4512] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 55.171558][ T4502] loop4: detected capacity change from 0 to 512 [ 55.200365][ T4502] EXT4-fs (loop4): 1 truncate cleaned up [ 55.238228][ T4519] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.257727][ T4523] loop2: detected capacity change from 0 to 256 [ 55.376559][ T4532] loop2: detected capacity change from 0 to 2048 [ 55.412695][ T4542] loop4: detected capacity change from 0 to 256 [ 55.429863][ T4544] loop1: detected capacity change from 0 to 164 [ 55.466626][ T4548] loop1: detected capacity change from 0 to 164 [ 55.473061][ T4548] iso9660: Unknown parameter 'unhYde' [ 55.479248][ T4551] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9086 sclass=netlink_route_socket pid=4551 comm=syz.3.317 [ 55.548881][ T4546] loop2: detected capacity change from 0 to 512 [ 55.571472][ T4546] EXT4-fs (loop2): 1 truncate cleaned up [ 55.683596][ T4565] lo speed is unknown, defaulting to 1000 [ 55.690652][ T4565] lo speed is unknown, defaulting to 1000 [ 55.696636][ T4565] lo speed is unknown, defaulting to 1000 [ 55.705258][ T4565] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 55.723268][ T4565] lo speed is unknown, defaulting to 1000 [ 55.730424][ T4565] lo speed is unknown, defaulting to 1000 [ 55.737895][ T4565] lo speed is unknown, defaulting to 1000 [ 55.780873][ T4565] lo speed is unknown, defaulting to 1000 [ 55.787336][ T4565] lo speed is unknown, defaulting to 1000 [ 55.983020][ T4578] loop1: detected capacity change from 0 to 512 [ 56.015986][ T4578] EXT4-fs (loop1): 1 truncate cleaned up [ 56.075620][ T4588] loop4: detected capacity change from 0 to 164 [ 56.092485][ T4588] iso9660: Unknown parameter 'unhYde' [ 56.229673][ T4601] loop4: detected capacity change from 0 to 512 [ 56.230399][ T4599] loop1: detected capacity change from 0 to 1024 [ 56.242915][ T4599] EXT4-fs: Ignoring removed orlov option [ 56.267672][ T4601] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 56.283204][ T4591] loop2: detected capacity change from 0 to 512 [ 56.309255][ T4591] EXT4-fs (loop2): 1 truncate cleaned up [ 56.432558][ T4610] loop4: detected capacity change from 0 to 512 [ 56.445792][ T4618] lo speed is unknown, defaulting to 1000 [ 56.454820][ T4620] loop3: detected capacity change from 0 to 256 [ 56.475518][ T4610] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.486243][ T4622] lo speed is unknown, defaulting to 1000 [ 56.494425][ T4626] loop0: detected capacity change from 0 to 512 [ 56.505514][ T4626] EXT4-fs (loop0): too many log groups per flexible block group [ 56.513403][ T4626] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 56.521477][ T4632] netlink: 'syz.1.354': attribute type 21 has an invalid length. [ 56.537768][ T4626] EXT4-fs (loop0): mount failed [ 56.571882][ T4610] netlink: 32 bytes leftover after parsing attributes in process `syz.4.350'. [ 56.601443][ T4618] netlink: 'syz.0.352': attribute type 21 has an invalid length. [ 56.621512][ T3331] Bluetooth: hci0: Frame reassembly failed (-84) [ 56.636808][ T4640] loop3: detected capacity change from 0 to 256 [ 56.650609][ T4642] loop1: detected capacity change from 0 to 512 [ 56.657806][ T4642] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 56.808450][ T4662] loop0: detected capacity change from 0 to 256 [ 56.833816][ T4659] FAULT_INJECTION: forcing a failure. [ 56.833816][ T4659] name failslab, interval 1, probability 0, space 0, times 0 [ 56.846611][ T4659] CPU: 0 UID: 0 PID: 4659 Comm: syz.3.368 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.846705][ T4659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 56.846717][ T4659] Call Trace: [ 56.846723][ T4659] [ 56.846730][ T4659] __dump_stack+0x1d/0x30 [ 56.846751][ T4659] dump_stack_lvl+0xe8/0x140 [ 56.846771][ T4659] dump_stack+0x15/0x1b [ 56.846788][ T4659] should_fail_ex+0x265/0x280 [ 56.846839][ T4659] should_failslab+0x8c/0xb0 [ 56.846868][ T4659] kmem_cache_alloc_noprof+0x50/0x480 [ 56.846959][ T4659] ? prepare_creds+0x37/0x4c0 [ 56.846986][ T4659] prepare_creds+0x37/0x4c0 [ 56.847012][ T4659] selinux_lsm_setattr+0x1a4/0x660 [ 56.847045][ T4659] selinux_setprocattr+0x4f/0x70 [ 56.847142][ T4659] security_setprocattr+0x1a7/0x1d0 [ 56.847222][ T4659] proc_pid_attr_write+0x1eb/0x220 [ 56.847252][ T4659] vfs_writev+0x406/0x8b0 [ 56.847283][ T4659] ? __pfx_proc_pid_attr_write+0x10/0x10 [ 56.847374][ T4659] ? mutex_lock+0xd/0x30 [ 56.847402][ T4659] do_writev+0xe7/0x210 [ 56.847433][ T4659] __x64_sys_writev+0x45/0x50 [ 56.847540][ T4659] x64_sys_call+0x1e9a/0x3000 [ 56.847560][ T4659] do_syscall_64+0xd2/0x200 [ 56.847577][ T4659] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 56.847623][ T4659] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 56.847651][ T4659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.847670][ T4659] RIP: 0033:0x7f467daaefc9 [ 56.847718][ T4659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.847733][ T4659] RSP: 002b:00007f467c50f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 56.847750][ T4659] RAX: ffffffffffffffda RBX: 00007f467dd05fa0 RCX: 00007f467daaefc9 [ 56.847761][ T4659] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000005 [ 56.847772][ T4659] RBP: 00007f467c50f090 R08: 0000000000000000 R09: 0000000000000000 [ 56.847798][ T4659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.847808][ T4659] R13: 00007f467dd06038 R14: 00007f467dd05fa0 R15: 00007ffe9d0e38a8 [ 56.847825][ T4659] [ 56.849567][ T4664] mmap: syz.0.369 (4664) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 56.896929][ T4646] loop2: detected capacity change from 0 to 512 [ 57.069364][ T4666] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9086 sclass=netlink_route_socket pid=4666 comm=syz.1.363 [ 57.127118][ T4646] EXT4-fs (loop2): 1 truncate cleaned up [ 57.214939][ T4677] loop3: detected capacity change from 0 to 256 [ 57.257829][ T4668] loop0: detected capacity change from 0 to 512 [ 57.317763][ T4668] EXT4-fs (loop0): 1 truncate cleaned up [ 57.409666][ T4692] loop3: detected capacity change from 0 to 2048 [ 57.419373][ T4690] loop2: detected capacity change from 0 to 2048 [ 57.437043][ T4692] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.450296][ T4690] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.726250][ T4707] loop0: detected capacity change from 0 to 512 [ 57.760750][ T4707] EXT4-fs (loop0): 1 truncate cleaned up [ 57.893340][ T4714] loop1: detected capacity change from 0 to 512 [ 57.921840][ T4714] EXT4-fs (loop1): too many log groups per flexible block group [ 57.933646][ T4714] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 57.963983][ T4714] EXT4-fs (loop1): mount failed [ 58.015972][ T4713] netlink: 'syz.1.386': attribute type 21 has an invalid length. [ 58.074974][ T4722] loop0: detected capacity change from 0 to 164 [ 58.082504][ T4722] ISOFS: unable to read i-node block [ 58.088259][ T4722] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 58.098966][ T37] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set [ 58.118664][ T37] EXT4-fs (loop2): Remounting filesystem read-only [ 58.125304][ T3331] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 58.260816][ T4738] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.316245][ T4738] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.376275][ T4738] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.446823][ T4738] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.492491][ T4754] loop2: detected capacity change from 0 to 512 [ 58.506504][ T3331] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.508305][ T4754] EXT4-fs (loop2): 1 truncate cleaned up [ 58.525818][ T3331] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.539943][ T3331] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.548308][ T3331] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.655501][ T4772] loop3: detected capacity change from 0 to 512 [ 58.662292][ T4772] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 58.674098][ T3743] Bluetooth: hci0: command 0x1003 tx timeout [ 58.674237][ T3519] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 58.742548][ T4777] siw: device registration error -23 [ 58.805088][ T4783] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.835625][ T4783] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.875440][ T4783] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.945731][ T4783] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.050761][ T37] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.066368][ T37] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.077061][ T37] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.089198][ T57] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.119123][ T4795] loop2: detected capacity change from 0 to 164 [ 59.125918][ T4795] iso9660: Unknown parameter 'unhYde' [ 59.185850][ T4796] lo speed is unknown, defaulting to 1000 [ 59.265881][ T29] kauditd_printk_skb: 387 callbacks suppressed [ 59.265897][ T29] audit: type=1326 audit(1761895458.454:2721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4794 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4345efc9 code=0x7ffc0000 [ 59.265937][ T29] audit: type=1326 audit(1761895458.454:2722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4794 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4345efc9 code=0x7ffc0000 [ 59.265963][ T29] audit: type=1326 audit(1761895458.454:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4794 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde4345efc9 code=0x7ffc0000 [ 59.265990][ T29] audit: type=1326 audit(1761895458.454:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4794 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4345efc9 code=0x7ffc0000 [ 59.266019][ T29] audit: type=1326 audit(1761895458.454:2725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4794 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4345efc9 code=0x7ffc0000 [ 59.266115][ T29] audit: type=1326 audit(1761895458.454:2726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4794 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fde4345efc9 code=0x7ffc0000 [ 59.266144][ T29] audit: type=1326 audit(1761895458.454:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4794 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4345efc9 code=0x7ffc0000 [ 59.266210][ T29] audit: type=1326 audit(1761895458.454:2728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4794 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4345efc9 code=0x7ffc0000 [ 59.266288][ T29] audit: type=1326 audit(1761895458.454:2729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4794 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde4345efc9 code=0x7ffc0000 [ 59.266392][ T29] audit: type=1326 audit(1761895458.454:2730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4794 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4345efc9 code=0x7ffc0000 [ 59.390067][ T4803] loop3: detected capacity change from 0 to 128 [ 59.393396][ T4803] syz.3.411: attempt to access beyond end of device [ 59.393396][ T4803] loop3: rw=2051, sector=128, nr_sectors = 913 limit=128 [ 59.397055][ T4803] netlink: 'syz.3.411': attribute type 4 has an invalid length. [ 59.484748][ T4805] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.562283][ T4805] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.808793][ T4805] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.916784][ T4825] loop4: detected capacity change from 0 to 2048 [ 59.943439][ T4830] lo speed is unknown, defaulting to 1000 [ 60.081551][ T4805] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.111838][ T4825] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.186360][ T3331] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.205780][ T3331] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.250661][ T3331] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.258995][ T3331] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.326016][ T4845] netlink: 'syz.0.433': attribute type 39 has an invalid length. [ 60.326458][ T4843] loop4: detected capacity change from 0 to 164 [ 60.460022][ T4852] loop4: detected capacity change from 0 to 164 [ 60.466633][ T4852] iso9660: Unknown parameter 'unhYde' [ 60.511501][ T4854] loop4: detected capacity change from 0 to 512 [ 60.518190][ T4854] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 60.595644][ T4860] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.619874][ T3331] Bluetooth: hci0: Frame reassembly failed (-84) [ 60.635520][ T4860] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.746887][ T4860] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.762595][ T4872] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4872 comm=+}[@ [ 60.774667][ T4872] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4872 comm=+}[@ [ 60.806195][ T4876] loop1: detected capacity change from 0 to 164 [ 60.812900][ T4876] iso9660: Unknown parameter 'unhYde' [ 60.825835][ T4860] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.859373][ T4878] loop2: detected capacity change from 0 to 512 [ 60.866142][ T4878] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 60.992884][ T4886] loop1: detected capacity change from 0 to 512 [ 61.009739][ T4886] EXT4-fs (loop1): 1 truncate cleaned up [ 61.072040][ T4889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9086 sclass=netlink_route_socket pid=4889 comm=syz.2.450 [ 61.117882][ T4897] loop1: detected capacity change from 0 to 512 [ 61.135813][ T4897] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.171976][ T4897] netlink: 32 bytes leftover after parsing attributes in process `syz.1.455'. [ 62.664113][ T3519] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 62.898886][ T57] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.910318][ T57] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.921059][ T57] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.932042][ T57] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.097284][ T4910] loop3: detected capacity change from 0 to 164 [ 63.103771][ T4910] iso9660: Unknown parameter 'unhYde' [ 63.126522][ T4911] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9086 sclass=netlink_route_socket pid=4911 comm=syz.2.467 [ 63.157830][ T4913] loop3: detected capacity change from 0 to 512 [ 63.164516][ T4913] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 63.230531][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 63.236588][ T3743] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 63.282785][ T4919] lo speed is unknown, defaulting to 1000 [ 63.306471][ T4924] loop3: detected capacity change from 0 to 512 [ 63.335841][ T4921] loop4: detected capacity change from 0 to 512 [ 63.364686][ T4921] EXT4-fs (loop4): 1 truncate cleaned up [ 63.370949][ T4924] EXT4-fs (loop3): too many log groups per flexible block group [ 63.380233][ T4924] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 63.387271][ T4924] EXT4-fs (loop3): mount failed [ 63.436329][ T4919] netlink: 'syz.3.462': attribute type 21 has an invalid length. [ 63.532566][ T4937] loop4: detected capacity change from 0 to 512 [ 63.549220][ T4943] loop3: detected capacity change from 0 to 164 [ 63.555866][ T4943] iso9660: Unknown parameter 'unhYde' [ 63.573716][ T4937] EXT4-fs (loop4): 1 truncate cleaned up [ 63.654508][ T4948] lo speed is unknown, defaulting to 1000 [ 63.714256][ T4950] loop4: detected capacity change from 0 to 512 [ 63.732142][ T4954] loop2: detected capacity change from 0 to 512 [ 63.739569][ T4954] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 63.752295][ T4950] EXT4-fs (loop4): too many log groups per flexible block group [ 63.763650][ T4950] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 63.770624][ T4950] EXT4-fs (loop4): mount failed [ 63.807465][ T4948] netlink: 'syz.4.472': attribute type 21 has an invalid length. [ 63.864973][ T4963] lo speed is unknown, defaulting to 1000 [ 63.913286][ T4967] loop4: detected capacity change from 0 to 512 [ 63.927653][ T4959] loop2: detected capacity change from 0 to 512 [ 63.941951][ T4967] EXT4-fs (loop4): too many log groups per flexible block group [ 63.960029][ T4967] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 63.967051][ T4967] EXT4-fs (loop4): mount failed [ 63.976826][ T4959] EXT4-fs (loop2): 1 truncate cleaned up [ 64.013676][ T4978] loop3: detected capacity change from 0 to 512 [ 64.031608][ T4978] EXT4-fs (loop3): 1 truncate cleaned up [ 64.048734][ T4963] netlink: 'syz.4.476': attribute type 21 has an invalid length. [ 64.082710][ T4984] loop3: detected capacity change from 0 to 164 [ 64.090812][ T4984] iso9660: Unknown parameter 'unhYde' [ 64.098909][ T4987] loop1: detected capacity change from 0 to 164 [ 64.137638][ T4992] loop1: detected capacity change from 0 to 512 [ 64.144361][ T4992] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 64.164969][ T4989] loop4: detected capacity change from 0 to 512 [ 64.192406][ T4989] EXT4-fs (loop4): 1 truncate cleaned up [ 64.210981][ T4996] loop3: detected capacity change from 0 to 2048 [ 64.236106][ T4996] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.252541][ T5003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.490'. [ 64.274111][ T29] kauditd_printk_skb: 414 callbacks suppressed [ 64.274127][ T29] audit: type=1326 audit(1761895463.584:3145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5001 comm="syz.4.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d733efc9 code=0x7ffc0000 [ 64.288494][ T5003] FAULT_INJECTION: forcing a failure. [ 64.288494][ T5003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.303712][ T29] audit: type=1326 audit(1761895463.584:3146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5001 comm="syz.4.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb8d733efc9 code=0x7ffc0000 [ 64.316789][ T5003] CPU: 1 UID: 0 PID: 5003 Comm: syz.2.490 Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.316824][ T5003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 64.316840][ T5003] Call Trace: [ 64.316847][ T5003] [ 64.316858][ T5003] __dump_stack+0x1d/0x30 [ 64.316964][ T5003] dump_stack_lvl+0xe8/0x140 [ 64.316991][ T5003] dump_stack+0x15/0x1b [ 64.317015][ T5003] should_fail_ex+0x265/0x280 [ 64.317041][ T5003] should_fail+0xb/0x20 [ 64.317121][ T5003] should_fail_usercopy+0x1a/0x20 [ 64.317149][ T5003] _copy_from_user+0x1c/0xb0 [ 64.317183][ T5003] ___sys_sendmsg+0xc1/0x1d0 [ 64.317247][ T5003] __x64_sys_sendmsg+0xd4/0x160 [ 64.317319][ T5003] x64_sys_call+0x191e/0x3000 [ 64.317347][ T5003] do_syscall_64+0xd2/0x200 [ 64.317372][ T5003] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 64.317471][ T5003] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 64.317521][ T5003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.317548][ T5003] RIP: 0033:0x7fde4345efc9 [ 64.317565][ T5003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.317659][ T5003] RSP: 002b:00007fde41ebf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.317680][ T5003] RAX: ffffffffffffffda RBX: 00007fde436b5fa0 RCX: 00007fde4345efc9 [ 64.317695][ T5003] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 64.317710][ T5003] RBP: 00007fde41ebf090 R08: 0000000000000000 R09: 0000000000000000 [ 64.317725][ T5003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.317739][ T5003] R13: 00007fde436b6038 R14: 00007fde436b5fa0 R15: 00007ffff1cee658 [ 64.317799][ T5003] [ 64.433530][ T5014] siw: device registration error -23 [ 64.434872][ T29] audit: type=1326 audit(1761895463.584:3147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5001 comm="syz.4.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d733efc9 code=0x7ffc0000 [ 64.464552][ T5012] loop2: detected capacity change from 0 to 512 [ 64.467535][ T29] audit: type=1326 audit(1761895463.584:3148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5001 comm="syz.4.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb8d733efc9 code=0x7ffc0000 [ 64.484888][ T5012] EXT4-fs (loop2): 1 truncate cleaned up [ 64.491482][ T29] audit: type=1326 audit(1761895463.584:3149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5001 comm="syz.4.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d733efc9 code=0x7ffc0000 [ 64.597843][ T29] audit: type=1326 audit(1761895463.584:3150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5001 comm="syz.4.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb8d733efc9 code=0x7ffc0000 [ 64.621163][ T29] audit: type=1326 audit(1761895463.584:3151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5001 comm="syz.4.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d733efc9 code=0x7ffc0000 [ 64.644497][ T29] audit: type=1326 audit(1761895463.584:3152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5001 comm="syz.4.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb8d733efc9 code=0x7ffc0000 [ 64.667800][ T29] audit: type=1326 audit(1761895463.584:3153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5001 comm="syz.4.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d733efc9 code=0x7ffc0000 [ 64.691133][ T29] audit: type=1326 audit(1761895463.584:3154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5001 comm="syz.4.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb8d733efc9 code=0x7ffc0000 [ 64.787689][ T5021] loop4: detected capacity change from 0 to 164 [ 64.804698][ T5021] iso9660: Unknown parameter 'unhYde' [ 64.930297][ T5025] lo speed is unknown, defaulting to 1000 [ 65.132549][ T5029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.187249][ T5029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.228578][ T3331] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 345: padding at end of block bitmap is not set [ 65.370997][ T3331] EXT4-fs (loop3): Remounting filesystem read-only [ 65.377606][ T31] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 65.401700][ T5035] loop2: detected capacity change from 0 to 512 [ 65.417435][ T5035] EXT4-fs (loop2): 1 truncate cleaned up [ 65.504643][ T5039] batadv_slave_1: entered promiscuous mode [ 65.514045][ T5039] veth0: entered promiscuous mode [ 65.702068][ T5043] lo speed is unknown, defaulting to 1000 [ 65.767690][ T5044] loop1: detected capacity change from 0 to 512 [ 65.835579][ T5044] EXT4-fs (loop1): too many log groups per flexible block group [ 65.854942][ T5044] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 65.869183][ T5044] EXT4-fs (loop1): mount failed [ 65.906720][ T5059] lo speed is unknown, defaulting to 1000 [ 65.918964][ T5043] netlink: 'syz.1.504': attribute type 21 has an invalid length. [ 65.955123][ T5064] loop2: detected capacity change from 0 to 512 [ 65.982842][ T5064] EXT4-fs (loop2): too many log groups per flexible block group [ 65.991460][ T5049] loop0: detected capacity change from 0 to 512 [ 65.995103][ T5064] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 66.006184][ T5064] EXT4-fs (loop2): mount failed [ 66.021840][ T5049] EXT4-fs (loop0): 1 truncate cleaned up [ 66.046617][ T5059] netlink: 'syz.2.508': attribute type 21 has an invalid length. [ 66.089226][ T5070] loop3: detected capacity change from 0 to 512 [ 66.101149][ T5076] loop1: detected capacity change from 0 to 512 [ 66.124353][ T5076] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 66.139813][ T5070] EXT4-fs (loop3): 1 truncate cleaned up [ 66.195063][ T5074] loop2: detected capacity change from 0 to 512 [ 66.212925][ T5083] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.229564][ T5085] loop1: detected capacity change from 0 to 164 [ 66.239541][ T5074] EXT4-fs (loop2): 1 truncate cleaned up [ 66.247134][ T5085] iso9660: Unknown parameter 'unhYde' [ 66.253599][ T5083] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.326149][ T5083] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.350919][ T5097] macvtap0: refused to change device tx_queue_len [ 66.360312][ T5098] lo speed is unknown, defaulting to 1000 [ 66.387054][ T5083] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.404520][ T5102] loop2: detected capacity change from 0 to 512 [ 66.429465][ T5102] EXT4-fs (loop2): too many log groups per flexible block group [ 66.438655][ T5102] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 66.445607][ T5102] EXT4-fs (loop2): mount failed [ 66.467387][ T5111] loop0: detected capacity change from 0 to 164 [ 66.470896][ T5098] netlink: 'syz.2.521': attribute type 21 has an invalid length. [ 66.481826][ T5111] ISOFS: unable to read i-node block [ 66.487720][ T5111] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 66.529410][ T5115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.527'. [ 66.610921][ T5119] loop1: detected capacity change from 0 to 512 [ 66.630311][ T5119] EXT4-fs (loop1): 1 truncate cleaned up [ 66.638815][ T5129] Zero length message leads to an empty skb [ 66.697940][ T3331] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.706586][ T5130] loop0: detected capacity change from 0 to 2048 [ 66.713653][ T5130] EXT4-fs: Ignoring removed bh option [ 66.720496][ T3331] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.739312][ T3331] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.747714][ T3331] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.836346][ T5141] lo speed is unknown, defaulting to 1000 [ 66.883790][ T5146] loop0: detected capacity change from 0 to 512 [ 66.910318][ T5150] loop1: detected capacity change from 0 to 164 [ 66.921113][ T5146] EXT4-fs (loop0): too many log groups per flexible block group [ 66.953985][ T5150] ISOFS: unable to read i-node block [ 66.966582][ T5146] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 66.977748][ T5150] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 66.991004][ T5146] EXT4-fs (loop0): mount failed [ 67.026982][ T5141] netlink: 'syz.0.537': attribute type 21 has an invalid length. [ 67.102083][ T5152] FAULT_INJECTION: forcing a failure. [ 67.102083][ T5152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.115321][ T5152] CPU: 1 UID: 0 PID: 5152 Comm: syz.1.540 Not tainted syzkaller #0 PREEMPT(voluntary) [ 67.115352][ T5152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 67.115401][ T5152] Call Trace: [ 67.115407][ T5152] [ 67.115414][ T5152] __dump_stack+0x1d/0x30 [ 67.115437][ T5152] dump_stack_lvl+0xe8/0x140 [ 67.115456][ T5152] dump_stack+0x15/0x1b [ 67.115471][ T5152] should_fail_ex+0x265/0x280 [ 67.115489][ T5152] should_fail+0xb/0x20 [ 67.115508][ T5152] should_fail_usercopy+0x1a/0x20 [ 67.115531][ T5152] _copy_from_user+0x1c/0xb0 [ 67.115561][ T5152] ___sys_sendmsg+0xc1/0x1d0 [ 67.115633][ T5152] __x64_sys_sendmsg+0xd4/0x160 [ 67.115660][ T5152] x64_sys_call+0x191e/0x3000 [ 67.115681][ T5152] do_syscall_64+0xd2/0x200 [ 67.115698][ T5152] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 67.115807][ T5152] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 67.115839][ T5152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.115870][ T5152] RIP: 0033:0x7fafb6a2efc9 [ 67.115887][ T5152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.115906][ T5152] RSP: 002b:00007fafb5497038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.115923][ T5152] RAX: ffffffffffffffda RBX: 00007fafb6c85fa0 RCX: 00007fafb6a2efc9 [ 67.115934][ T5152] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000005 [ 67.116006][ T5152] RBP: 00007fafb5497090 R08: 0000000000000000 R09: 0000000000000000 [ 67.116019][ T5152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.116030][ T5152] R13: 00007fafb6c86038 R14: 00007fafb6c85fa0 R15: 00007ffe91156c78 [ 67.116049][ T5152] [ 67.119246][ T5158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.544'. [ 67.246576][ T5160] loop1: detected capacity change from 0 to 2048 [ 67.310074][ T5160] EXT4-fs: Ignoring removed bh option [ 67.385710][ T5172] loop1: detected capacity change from 0 to 164 [ 67.402537][ T5172] iso9660: Unknown parameter 'unhYde' [ 67.479402][ T5174] lo speed is unknown, defaulting to 1000 [ 67.513297][ T5176] loop1: detected capacity change from 0 to 512 [ 67.564934][ T5176] EXT4-fs (loop1): too many log groups per flexible block group [ 67.586048][ T5181] loop0: detected capacity change from 0 to 164 [ 67.594117][ T5176] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 67.600975][ T5176] EXT4-fs (loop1): mount failed [ 67.606506][ T5181] iso9660: Unknown parameter 'unhYde' [ 67.630707][ T5174] netlink: 'syz.1.549': attribute type 21 has an invalid length. [ 67.737740][ T5189] loop0: detected capacity change from 0 to 512 [ 67.763790][ T5189] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.793234][ T5195] loop1: detected capacity change from 0 to 2048 [ 67.803419][ T5195] EXT4-fs: Ignoring removed bh option [ 67.808698][ T5189] netlink: 32 bytes leftover after parsing attributes in process `syz.0.555'. [ 67.819143][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 67.836134][ T5195] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 67.851143][ T5195] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 67.863537][ T5195] EXT4-fs (loop1): This should not happen!! Data will be lost [ 67.863537][ T5195] [ 67.873296][ T5195] EXT4-fs (loop1): Total free blocks count 0 [ 67.879345][ T5195] EXT4-fs (loop1): Free/Dirty block details [ 67.885272][ T5195] EXT4-fs (loop1): free_blocks=2415919104 [ 67.891021][ T5195] EXT4-fs (loop1): dirty_blocks=32 [ 67.896169][ T5195] EXT4-fs (loop1): Block reservation details [ 67.902146][ T5195] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 67.919262][ T57] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 67.931486][ T57] EXT4-fs (loop1): This should not happen!! Data will be lost [ 67.931486][ T57] [ 67.971385][ T5204] loop3: detected capacity change from 0 to 512 [ 67.985788][ T5204] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.035855][ T5204] netlink: 'syz.3.547': attribute type 4 has an invalid length. [ 68.087997][ T5210] loop1: detected capacity change from 0 to 164 [ 68.131101][ T5210] iso9660: Unknown parameter 'unhYde' [ 68.149369][ T5208] lo speed is unknown, defaulting to 1000 [ 68.215773][ T5037] veth0: left promiscuous mode [ 68.220842][ T5037] batadv_slave_1: left promiscuous mode [ 68.371436][ T5218] loop1: detected capacity change from 0 to 512 [ 68.388769][ T3312] EXT4-fs unmount: 92 callbacks suppressed [ 68.388786][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.408608][ T5218] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.562: inode has both inline data and extents flags [ 68.421940][ T5218] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.562: couldn't read orphan inode 15 (err -117) [ 68.435145][ T5218] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.439419][ T5216] loop4: detected capacity change from 0 to 512 [ 68.473029][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.474936][ T5223] can0: slcan on ttyS3. [ 68.489903][ T5223] netlink: 16 bytes leftover after parsing attributes in process `syz.3.563'. [ 68.499248][ T5216] EXT4-fs (loop4): 1 truncate cleaned up [ 68.522572][ T5216] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.557565][ T5228] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5228 comm=syz.3.563 [ 68.614819][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.645801][ T5236] lo speed is unknown, defaulting to 1000 [ 68.674229][ T5222] can0 (unregistered): slcan off ttyS3. [ 68.699742][ T5236] loop1: detected capacity change from 0 to 512 [ 68.725511][ T5241] loop2: detected capacity change from 0 to 164 [ 68.732745][ T5241] ISOFS: unable to read i-node block [ 68.738697][ T5241] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 68.751912][ T5236] EXT4-fs (loop1): too many log groups per flexible block group [ 68.760584][ T5236] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 68.767564][ T5236] EXT4-fs (loop1): mount failed [ 68.804577][ T5236] netlink: 'syz.1.569': attribute type 21 has an invalid length. [ 69.236794][ T5272] lo speed is unknown, defaulting to 1000 [ 69.360040][ T5252] smc: net device ip_vti0 applied user defined pnetid SYZ0 [ 69.427754][ T5270] loop1: detected capacity change from 0 to 512 [ 69.512622][ T29] kauditd_printk_skb: 551 callbacks suppressed [ 69.512636][ T29] audit: type=1326 audit(1761895468.824:3706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5274 comm="syz.3.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467daaefc9 code=0x7ffc0000 [ 69.570586][ T5277] siw: device registration error -23 [ 69.608615][ T29] audit: type=1326 audit(1761895468.854:3707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5274 comm="syz.3.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467daaefc9 code=0x7ffc0000 [ 69.632219][ T29] audit: type=1326 audit(1761895468.854:3708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5274 comm="syz.3.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f467daaefc9 code=0x7ffc0000 [ 69.655610][ T29] audit: type=1326 audit(1761895468.854:3709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5274 comm="syz.3.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467daaefc9 code=0x7ffc0000 [ 69.678980][ T29] audit: type=1326 audit(1761895468.854:3710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5274 comm="syz.3.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f467daaefc9 code=0x7ffc0000 [ 69.702308][ T29] audit: type=1326 audit(1761895468.854:3711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5274 comm="syz.3.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467daaefc9 code=0x7ffc0000 [ 69.725664][ T29] audit: type=1326 audit(1761895468.854:3712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5274 comm="syz.3.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467daaefc9 code=0x7ffc0000 [ 69.730335][ T5285] loop3: detected capacity change from 0 to 164 [ 69.751173][ T29] audit: type=1326 audit(1761895469.004:3713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5281 comm="syz.3.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467daaefc9 code=0x7ffc0000 [ 69.766494][ T5270] EXT4-fs (loop1): 1 truncate cleaned up [ 69.778700][ T29] audit: type=1326 audit(1761895469.004:3714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5281 comm="syz.3.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f467daaefc9 code=0x7ffc0000 [ 69.778749][ T29] audit: type=1326 audit(1761895469.004:3715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5281 comm="syz.3.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467daaefc9 code=0x7ffc0000 [ 69.838729][ T5270] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.864152][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 69.878746][ T3743] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 69.925024][ T5296] loop2: detected capacity change from 0 to 164 [ 69.944449][ T5296] iso9660: Unknown parameter 'unhYde' [ 69.955894][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.013327][ T5293] loop4: detected capacity change from 0 to 512 [ 70.040514][ T5307] siw: device registration error -23 [ 70.050282][ T5293] EXT4-fs (loop4): 1 truncate cleaned up [ 70.066107][ T5293] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.103453][ T5317] loop3: detected capacity change from 0 to 164 [ 70.143550][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.404354][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.420400][ T5330] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9086 sclass=netlink_route_socket pid=5330 comm=syz.3.605 [ 70.516958][ T5332] loop0: detected capacity change from 0 to 512 [ 70.532546][ T5332] EXT4-fs (loop0): 1 truncate cleaned up [ 70.541334][ T5332] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.574535][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.592290][ T5337] loop2: detected capacity change from 0 to 164 [ 70.598990][ T5337] iso9660: Unknown parameter 'unhYde' [ 70.639524][ T5339] loop0: detected capacity change from 0 to 512 [ 70.667749][ T5339] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.680484][ T5339] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.740524][ T5344] loop4: detected capacity change from 0 to 512 [ 70.775819][ T5345] netlink: 32 bytes leftover after parsing attributes in process `syz.0.609'. [ 70.805881][ T5344] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.819935][ T5344] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.856685][ T5351] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.859017][ T5353] loop1: detected capacity change from 0 to 164 [ 70.890510][ T5344] netlink: 'syz.4.603': attribute type 4 has an invalid length. [ 70.904944][ T5351] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.918849][ T5355] loop1: detected capacity change from 0 to 512 [ 70.931306][ T5355] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 70.955685][ T5351] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.989143][ T5358] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.027193][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.038008][ T5351] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.076272][ T5358] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.116443][ T57] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.140381][ T57] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.150324][ T5358] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.164190][ T57] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.172494][ T57] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.215821][ T5358] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.261401][ T5365] loop4: detected capacity change from 0 to 512 [ 71.273645][ T5371] loop3: detected capacity change from 0 to 164 [ 71.286833][ T5365] EXT4-fs (loop4): 1 truncate cleaned up [ 71.295400][ T31] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.296834][ T5371] iso9660: Unknown parameter 'unhYde' [ 71.303652][ T31] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.325116][ T31] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.333444][ T31] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.349961][ T5365] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.381692][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.416768][ T5377] siw: device registration error -23 [ 71.425577][ T5369] loop2: detected capacity change from 0 to 512 [ 71.479409][ T5385] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.500877][ T5369] EXT4-fs (loop2): 1 truncate cleaned up [ 71.511413][ T5369] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.546359][ T5385] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.597903][ T5389] loop3: detected capacity change from 0 to 512 [ 71.615794][ T5385] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.628629][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.648129][ T5389] EXT4-fs (loop3): 1 truncate cleaned up [ 71.665310][ T5389] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.698587][ T5385] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.711101][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.752852][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.764743][ T31] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.785510][ T31] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.793967][ T31] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.829271][ T5410] loop4: detected capacity change from 0 to 164 [ 71.839340][ T5410] ISOFS: unable to read i-node block [ 71.855865][ T5410] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 71.879644][ T5400] loop2: detected capacity change from 0 to 512 [ 71.886188][ T5416] loop1: detected capacity change from 0 to 512 [ 71.892469][ T5415] lo speed is unknown, defaulting to 1000 [ 71.899030][ T5416] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 71.963670][ T5420] loop3: detected capacity change from 0 to 512 [ 71.963699][ T5425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.642'. [ 71.973917][ T5400] EXT4-fs (loop2): 1 truncate cleaned up [ 71.991187][ T5400] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.008464][ T5423] loop4: detected capacity change from 0 to 2048 [ 72.017320][ T5420] EXT4-fs (loop3): too many log groups per flexible block group [ 72.027109][ T5420] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 72.028109][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.035869][ T5420] EXT4-fs (loop3): mount failed [ 72.046694][ T5423] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.067457][ T5423] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.084559][ T5432] loop2: detected capacity change from 0 to 128 [ 72.091300][ T5432] FAT-fs (loop2): bogus number of FAT structure [ 72.097669][ T5432] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 72.107071][ T5432] FAT-fs (loop2): Can't find a valid FAT filesystem [ 72.114624][ T5415] netlink: 'syz.3.640': attribute type 21 has an invalid length. [ 72.162289][ T5440] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.184469][ T5433] lo speed is unknown, defaulting to 1000 [ 72.254022][ T5440] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.356149][ T5440] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.381176][ T12] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set [ 72.396134][ T12] EXT4-fs (loop4): Remounting filesystem read-only [ 72.402718][ T3437] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 72.422194][ T5455] loop2: detected capacity change from 0 to 512 [ 72.435876][ T5440] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.474403][ T5455] EXT4-fs (loop2): 1 truncate cleaned up [ 72.478080][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.490962][ T5455] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.534083][ T57] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.555339][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.561537][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.563751][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.581392][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.626662][ T5467] loop2: detected capacity change from 0 to 512 [ 72.651171][ T5469] loop3: detected capacity change from 0 to 512 [ 72.666890][ T5467] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.689671][ T5469] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 72.706895][ T5467] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.763413][ T5467] netlink: 32 bytes leftover after parsing attributes in process `syz.2.658'. [ 72.845693][ T5481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9086 sclass=netlink_route_socket pid=5481 comm=syz.4.657 [ 72.913352][ T3743] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 73.349216][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.420819][ T5486] loop2: detected capacity change from 0 to 164 [ 73.445236][ T5486] ISOFS: unable to read i-node block [ 73.454610][ T5486] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 73.485873][ T5490] FAULT_INJECTION: forcing a failure. [ 73.485873][ T5490] name failslab, interval 1, probability 0, space 0, times 0 [ 73.498576][ T5490] CPU: 0 UID: 0 PID: 5490 Comm: syz.4.665 Not tainted syzkaller #0 PREEMPT(voluntary) [ 73.498630][ T5490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 73.498642][ T5490] Call Trace: [ 73.498650][ T5490] [ 73.498657][ T5490] __dump_stack+0x1d/0x30 [ 73.498681][ T5490] dump_stack_lvl+0xe8/0x140 [ 73.498703][ T5490] dump_stack+0x15/0x1b [ 73.498752][ T5490] should_fail_ex+0x265/0x280 [ 73.498772][ T5490] should_failslab+0x8c/0xb0 [ 73.498803][ T5490] kmem_cache_alloc_noprof+0x50/0x480 [ 73.498830][ T5490] ? getname_flags+0x80/0x3b0 [ 73.498880][ T5490] ? kstrtoull+0x111/0x140 [ 73.498910][ T5490] getname_flags+0x80/0x3b0 [ 73.499018][ T5490] vfs_fstatat+0x43/0x170 [ 73.499053][ T5490] __se_sys_newfstatat+0x55/0x260 [ 73.499095][ T5490] ? __fget_files+0x184/0x1c0 [ 73.499192][ T5490] ? fput+0x8f/0xc0 [ 73.499211][ T5490] ? ksys_write+0x192/0x1a0 [ 73.499237][ T5490] __x64_sys_newfstatat+0x55/0x70 [ 73.499405][ T5490] x64_sys_call+0x135a/0x3000 [ 73.499431][ T5490] do_syscall_64+0xd2/0x200 [ 73.499452][ T5490] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 73.499478][ T5490] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 73.499525][ T5490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.499635][ T5490] RIP: 0033:0x7fb8d733efc9 [ 73.499648][ T5490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.499663][ T5490] RSP: 002b:00007fb8d5da7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 73.499680][ T5490] RAX: ffffffffffffffda RBX: 00007fb8d7595fa0 RCX: 00007fb8d733efc9 [ 73.499762][ T5490] RDX: 0000200000000100 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 73.499776][ T5490] RBP: 00007fb8d5da7090 R08: 0000000000000000 R09: 0000000000000000 [ 73.499807][ T5490] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001 [ 73.499821][ T5490] R13: 00007fb8d7596038 R14: 00007fb8d7595fa0 R15: 00007fffd78e2b68 [ 73.499841][ T5490] [ 73.712884][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.802357][ T5499] lo speed is unknown, defaulting to 1000 [ 73.828826][ T5505] siw: device registration error -23 [ 73.859936][ T5494] loop2: detected capacity change from 0 to 512 [ 73.879925][ T5508] loop3: detected capacity change from 0 to 512 [ 73.908313][ T5494] EXT4-fs (loop2): 1 truncate cleaned up [ 73.919893][ T5494] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.948711][ T5508] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.982801][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.994227][ T5508] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.085239][ T5523] FAULT_INJECTION: forcing a failure. [ 74.085239][ T5523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.088177][ T5478] syz.1.661 (5478) used greatest stack depth: 6184 bytes left [ 74.098363][ T5523] CPU: 0 UID: 0 PID: 5523 Comm: syz.0.679 Not tainted syzkaller #0 PREEMPT(voluntary) [ 74.098393][ T5523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 74.098409][ T5523] Call Trace: [ 74.098469][ T5523] [ 74.098478][ T5523] __dump_stack+0x1d/0x30 [ 74.098509][ T5523] dump_stack_lvl+0xe8/0x140 [ 74.098542][ T5523] dump_stack+0x15/0x1b [ 74.098566][ T5523] should_fail_ex+0x265/0x280 [ 74.098659][ T5523] should_fail+0xb/0x20 [ 74.098679][ T5523] should_fail_usercopy+0x1a/0x20 [ 74.098705][ T5523] _copy_from_user+0x1c/0xb0 [ 74.098787][ T5523] ___sys_sendmsg+0xc1/0x1d0 [ 74.098848][ T5523] __x64_sys_sendmsg+0xd4/0x160 [ 74.098877][ T5523] x64_sys_call+0x191e/0x3000 [ 74.098907][ T5523] do_syscall_64+0xd2/0x200 [ 74.098961][ T5523] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 74.099058][ T5523] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 74.099142][ T5523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.099169][ T5523] RIP: 0033:0x7f9d25b3efc9 [ 74.099189][ T5523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.099212][ T5523] RSP: 002b:00007f9d2459f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.099276][ T5523] RAX: ffffffffffffffda RBX: 00007f9d25d95fa0 RCX: 00007f9d25b3efc9 [ 74.099292][ T5523] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 74.099306][ T5523] RBP: 00007f9d2459f090 R08: 0000000000000000 R09: 0000000000000000 [ 74.099322][ T5523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.099337][ T5523] R13: 00007f9d25d96038 R14: 00007f9d25d95fa0 R15: 00007ffd02e1d558 [ 74.099360][ T5523] [ 74.127083][ T5528] loop2: detected capacity change from 0 to 512 [ 74.264996][ T5508] netlink: 32 bytes leftover after parsing attributes in process `syz.3.673'. [ 74.350385][ T5524] loop4: detected capacity change from 0 to 512 [ 74.356181][ T5528] EXT4-fs (loop2): 1 orphan inode deleted [ 74.365181][ T5528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.379336][ T5545] netlink: 'syz.0.686': attribute type 4 has an invalid length. [ 74.387152][ T3437] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:7: Failed to release dquot type 1 [ 74.403764][ T5545] netlink: 'syz.0.686': attribute type 4 has an invalid length. [ 74.415450][ T5524] EXT4-fs (loop4): 1 truncate cleaned up [ 74.471020][ T5524] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.498114][ T5528] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.529777][ T29] kauditd_printk_skb: 288 callbacks suppressed [ 74.529793][ T29] audit: type=1326 audit(1761895473.844:4001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5522 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d733efc9 code=0x7ffc0000 [ 74.559451][ T29] audit: type=1326 audit(1761895473.844:4002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5522 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb8d733efc9 code=0x7ffc0000 [ 74.582929][ T29] audit: type=1326 audit(1761895473.844:4003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5522 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d733efc9 code=0x7ffc0000 [ 74.606305][ T29] audit: type=1326 audit(1761895473.844:4004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5522 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb8d733efc9 code=0x7ffc0000 [ 74.629529][ T29] audit: type=1326 audit(1761895473.844:4005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5522 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d733efc9 code=0x7ffc0000 [ 74.652837][ T29] audit: type=1326 audit(1761895473.854:4006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5522 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d733efc9 code=0x7ffc0000 [ 74.655586][ T5553] loop1: detected capacity change from 0 to 512 [ 74.676159][ T29] audit: type=1326 audit(1761895473.854:4007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5522 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb8d733efc9 code=0x7ffc0000 [ 74.705607][ T29] audit: type=1326 audit(1761895473.854:4008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5522 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d733efc9 code=0x7ffc0000 [ 74.728963][ T29] audit: type=1326 audit(1761895473.914:4009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5522 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d733efc9 code=0x7ffc0000 [ 74.754748][ T5553] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 74.773962][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.800508][ T5528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.680'. [ 74.825538][ T5528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.680'. [ 74.864366][ T29] audit: type=1400 audit(1761895474.154:4010): avc: denied { setcurrent } for pid=5554 comm="syz.4.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 74.947060][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.987986][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.025813][ T5568] loop0: detected capacity change from 0 to 512 [ 75.032480][ T5568] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 75.131285][ T5563] loop3: detected capacity change from 0 to 512 [ 75.135563][ T5581] loop2: detected capacity change from 0 to 512 [ 75.161791][ T5581] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.180784][ T5590] loop4: detected capacity change from 0 to 512 [ 75.182460][ T5581] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.200244][ T5591] loop1: detected capacity change from 0 to 512 [ 75.202401][ T5563] EXT4-fs (loop3): 1 truncate cleaned up [ 75.217928][ T5563] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.234675][ T5590] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 75.254957][ T5591] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.258724][ T5593] loop0: detected capacity change from 0 to 2048 [ 75.279260][ T5591] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.296493][ T5591] netlink: 'syz.1.701': attribute type 4 has an invalid length. [ 75.307394][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.308763][ T5581] netlink: 32 bytes leftover after parsing attributes in process `syz.2.700'. [ 75.327279][ T5593] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.341759][ T5593] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.358515][ T5600] loop3: detected capacity change from 0 to 164 [ 75.361299][ T5602] FAULT_INJECTION: forcing a failure. [ 75.361299][ T5602] name failslab, interval 1, probability 0, space 0, times 0 [ 75.365369][ T5600] iso9660: Unknown parameter 'unhYde' [ 75.377450][ T5602] CPU: 0 UID: 0 PID: 5602 Comm: syz.4.706 Not tainted syzkaller #0 PREEMPT(voluntary) [ 75.377493][ T5602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 75.377522][ T5602] Call Trace: [ 75.377531][ T5602] [ 75.377541][ T5602] __dump_stack+0x1d/0x30 [ 75.377664][ T5602] dump_stack_lvl+0xe8/0x140 [ 75.377710][ T5602] dump_stack+0x15/0x1b [ 75.377748][ T5602] should_fail_ex+0x265/0x280 [ 75.377776][ T5602] should_failslab+0x8c/0xb0 [ 75.377813][ T5602] kmem_cache_alloc_noprof+0x50/0x480 [ 75.377851][ T5602] ? audit_log_start+0x342/0x720 [ 75.377879][ T5602] audit_log_start+0x342/0x720 [ 75.377986][ T5602] ? kstrtouint+0x76/0xc0 [ 75.378028][ T5602] audit_seccomp+0x48/0x100 [ 75.378069][ T5602] ? __seccomp_filter+0x82d/0x1250 [ 75.378150][ T5602] __seccomp_filter+0x83e/0x1250 [ 75.378186][ T5602] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 75.378238][ T5602] ? vfs_write+0x7e8/0x960 [ 75.378269][ T5602] ? __rcu_read_unlock+0x4f/0x70 [ 75.378303][ T5602] ? __fget_files+0x184/0x1c0 [ 75.378351][ T5602] __secure_computing+0x82/0x150 [ 75.378386][ T5602] syscall_trace_enter+0xcf/0x1e0 [ 75.378445][ T5602] do_syscall_64+0xac/0x200 [ 75.378513][ T5602] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 75.378549][ T5602] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 75.378608][ T5602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.378635][ T5602] RIP: 0033:0x7fb8d733efc9 [ 75.378653][ T5602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.378677][ T5602] RSP: 002b:00007fb8d5da7038 EFLAGS: 00000246 ORIG_RAX: 000000000000004a [ 75.378701][ T5602] RAX: ffffffffffffffda RBX: 00007fb8d7595fa0 RCX: 00007fb8d733efc9 [ 75.378717][ T5602] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 75.378732][ T5602] RBP: 00007fb8d5da7090 R08: 0000000000000000 R09: 0000000000000000 [ 75.378748][ T5602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.378813][ T5602] R13: 00007fb8d7596038 R14: 00007fb8d7595fa0 R15: 00007fffd78e2b68 [ 75.378837][ T5602] [ 75.551415][ T5604] loop4: detected capacity change from 0 to 512 [ 75.618941][ T5604] EXT4-fs (loop4): 1 truncate cleaned up [ 75.635356][ T5604] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.667749][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.770738][ T12] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set [ 75.786146][ T12] EXT4-fs (loop0): Remounting filesystem read-only [ 75.792826][ T5212] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 75.808929][ T5617] IPv6: Can't replace route, no match found [ 75.817750][ T5615] loop3: detected capacity change from 0 to 512 [ 75.848858][ T5615] EXT4-fs (loop3): 1 truncate cleaned up [ 75.848981][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.868542][ T5615] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.993269][ T5628] loop0: detected capacity change from 0 to 2048 [ 76.006554][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.026521][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.051032][ T5628] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.132495][ T5635] lo speed is unknown, defaulting to 1000 [ 76.235695][ T5628] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.308319][ T5640] loop1: detected capacity change from 0 to 512 [ 76.357044][ T5632] lo speed is unknown, defaulting to 1000 [ 76.461790][ T5640] EXT4-fs (loop1): too many log groups per flexible block group [ 76.510070][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.544392][ T5640] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 76.578937][ T5640] EXT4-fs (loop1): mount failed [ 76.623135][ T5632] netlink: 'syz.1.717': attribute type 21 has an invalid length. [ 76.670744][ T5648] loop0: detected capacity change from 0 to 512 [ 76.709536][ T5648] EXT4-fs (loop0): 1 truncate cleaned up [ 76.727701][ T5648] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.828094][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.864305][ T5662] netlink: 24 bytes leftover after parsing attributes in process `syz.1.729'. [ 76.904320][ T5662] netlink: 24 bytes leftover after parsing attributes in process `syz.1.729'. [ 76.921118][ T5668] loop3: detected capacity change from 0 to 164 [ 76.928067][ T5668] iso9660: Unknown parameter 'unhYde' [ 76.945682][ T5667] siw: device registration error -23 [ 77.004325][ T5673] loop0: detected capacity change from 0 to 512 [ 77.243684][ T5678] loop3: detected capacity change from 0 to 512 [ 77.253066][ T5686] SELinux: policydb version 1508061898 does not match my version range 15-35 [ 77.262173][ T5686] SELinux: failed to load policy [ 77.349867][ T5695] loop4: detected capacity change from 0 to 4096 [ 77.362484][ T5698] FAULT_INJECTION: forcing a failure. [ 77.362484][ T5698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.375592][ T5698] CPU: 1 UID: 0 PID: 5698 Comm: syz.1.741 Not tainted syzkaller #0 PREEMPT(voluntary) [ 77.375649][ T5698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 77.375664][ T5698] Call Trace: [ 77.375672][ T5698] [ 77.375682][ T5698] __dump_stack+0x1d/0x30 [ 77.375717][ T5698] dump_stack_lvl+0xe8/0x140 [ 77.375746][ T5698] dump_stack+0x15/0x1b [ 77.375766][ T5698] should_fail_ex+0x265/0x280 [ 77.375793][ T5698] should_fail+0xb/0x20 [ 77.375829][ T5698] should_fail_usercopy+0x1a/0x20 [ 77.375853][ T5698] _copy_from_user+0x1c/0xb0 [ 77.375882][ T5698] ___sys_sendmsg+0xc1/0x1d0 [ 77.376000][ T5698] __x64_sys_sendmsg+0xd4/0x160 [ 77.376025][ T5698] x64_sys_call+0x191e/0x3000 [ 77.376096][ T5698] do_syscall_64+0xd2/0x200 [ 77.376117][ T5698] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 77.376150][ T5698] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 77.376186][ T5698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.376285][ T5698] RIP: 0033:0x7fafb6a2efc9 [ 77.376310][ T5698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.376330][ T5698] RSP: 002b:00007fafb5497038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.376352][ T5698] RAX: ffffffffffffffda RBX: 00007fafb6c85fa0 RCX: 00007fafb6a2efc9 [ 77.376440][ T5698] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 77.376454][ T5698] RBP: 00007fafb5497090 R08: 0000000000000000 R09: 0000000000000000 [ 77.376524][ T5698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.376538][ T5698] R13: 00007fafb6c86038 R14: 00007fafb6c85fa0 R15: 00007ffe91156c78 [ 77.376632][ T5698] [ 77.387343][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 77.394173][ T3743] Bluetooth: hci0: command 0x1003 tx timeout [ 77.410407][ T5678] EXT4-fs (loop3): 1 truncate cleaned up [ 77.415172][ T5695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.432892][ T5678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.514965][ T5702] loop1: detected capacity change from 0 to 512 [ 77.624575][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.642017][ T5701] lo speed is unknown, defaulting to 1000 [ 77.663540][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.673867][ T5702] EXT4-fs (loop1): too many log groups per flexible block group [ 77.687324][ T5702] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 77.711251][ T5711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.743'. [ 77.722864][ T5712] loop3: detected capacity change from 0 to 512 [ 77.734719][ T5702] EXT4-fs (loop1): mount failed [ 77.749482][ T5712] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 77.750571][ T5711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.743'. [ 77.790395][ T5701] netlink: 'syz.1.742': attribute type 21 has an invalid length. [ 77.866725][ T5732] loop3: detected capacity change from 0 to 512 [ 77.877650][ T5732] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 77.900786][ T5736] loop1: detected capacity change from 0 to 512 [ 77.950966][ T5736] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.963756][ T5736] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.987311][ T5736] netlink: 'syz.1.755': attribute type 4 has an invalid length. [ 78.005770][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.093142][ T5761] loop1: detected capacity change from 0 to 512 [ 78.125919][ T5761] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 78.181702][ T5757] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9086 sclass=netlink_route_socket pid=5757 comm=syz.4.765 [ 78.200796][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.216376][ T5763] loop1: detected capacity change from 0 to 512 [ 78.236012][ T5763] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 78.271924][ T5767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.768'. [ 78.285909][ T5767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.768'. [ 78.300971][ T5771] FAULT_INJECTION: forcing a failure. [ 78.300971][ T5771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.314061][ T5771] CPU: 1 UID: 0 PID: 5771 Comm: syz.0.771 Not tainted syzkaller #0 PREEMPT(voluntary) [ 78.314135][ T5771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 78.314150][ T5771] Call Trace: [ 78.314157][ T5771] [ 78.314164][ T5771] __dump_stack+0x1d/0x30 [ 78.314188][ T5771] dump_stack_lvl+0xe8/0x140 [ 78.314264][ T5771] dump_stack+0x15/0x1b [ 78.314286][ T5771] should_fail_ex+0x265/0x280 [ 78.314304][ T5771] should_fail+0xb/0x20 [ 78.314319][ T5771] should_fail_usercopy+0x1a/0x20 [ 78.314428][ T5771] _copy_from_user+0x1c/0xb0 [ 78.314459][ T5771] vmemdup_user+0x5e/0xd0 [ 78.314493][ T5771] path_setxattrat+0x1b6/0x310 [ 78.314545][ T5771] __x64_sys_fsetxattr+0x6b/0x80 [ 78.314584][ T5771] x64_sys_call+0x1ced/0x3000 [ 78.314612][ T5771] do_syscall_64+0xd2/0x200 [ 78.314634][ T5771] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 78.314705][ T5771] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 78.314789][ T5771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.314884][ T5771] RIP: 0033:0x7f9d25b3efc9 [ 78.314898][ T5771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.314914][ T5771] RSP: 002b:00007f9d2459f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 78.314994][ T5771] RAX: ffffffffffffffda RBX: 00007f9d25d95fa0 RCX: 00007f9d25b3efc9 [ 78.315011][ T5771] RDX: 00002000000004c0 RSI: 0000200000000480 RDI: 0000000000000003 [ 78.315026][ T5771] RBP: 00007f9d2459f090 R08: 0000000000000000 R09: 0000000000000000 [ 78.315040][ T5771] R10: 000000000000001a R11: 0000000000000246 R12: 0000000000000001 [ 78.315054][ T5771] R13: 00007f9d25d96038 R14: 00007f9d25d95fa0 R15: 00007ffd02e1d558 [ 78.315075][ T5771] [ 78.517989][ T5778] xt_connbytes: Forcing CT accounting to be enabled [ 78.538565][ T5784] loop1: detected capacity change from 0 to 164 [ 78.545788][ T5784] ISOFS: unable to read i-node block [ 78.551914][ T5784] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 78.555347][ T5778] ------------[ cut here ]------------ [ 78.566378][ T5778] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x0, 0x7800000000] s64=[0x0, 0xffffffffffffffff] u32=[0x80000000, 0x0] s32=[0x0, 0xffffffff] var_off=(0x0, 0x7800000000) [ 78.586312][ T5778] WARNING: CPU: 0 PID: 5778 at kernel/bpf/verifier.c:2721 reg_bounds_sanity_check+0x673/0x680 [ 78.596750][ T5778] Modules linked in: [ 78.596782][ T5778] CPU: 0 UID: 0 PID: 5778 Comm: syz.4.775 Not tainted syzkaller #0 PREEMPT(voluntary) [ 78.596813][ T5778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 78.620624][ T5778] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 78.626920][ T5778] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 c2 f7 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 78.646570][ T5778] RSP: 0018:ffffc90000f1b408 EFLAGS: 00010282 [ 78.652657][ T5778] RAX: 8553d24049432f00 RBX: ffff88811aae6040 RCX: 0000000000080000 [ 78.660672][ T5778] RDX: ffffc90005a77000 RSI: 0000000000026d13 RDI: 0000000000026d14 [ 78.668681][ T5778] RBP: 0000000000000000 R08: 0001c90000f1b257 R09: 0000000000000000 [ 78.668882][ T5787] loop4: detected capacity change from 0 to 2048 [ 78.676717][ T5778] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88811aae6000 [ 78.676737][ T5778] R13: ffff888109518000 R14: ffff888109518000 R15: ffff88811aae6038 [ 78.676755][ T5778] FS: 00007fb8d5da76c0(0000) GS:ffff8882aee13000(0000) knlGS:0000000000000000 [ 78.699180][ T5788] loop3: detected capacity change from 0 to 1024 [ 78.708013][ T5778] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.714702][ T5788] EXT4-fs: inline encryption not supported [ 78.720970][ T5778] CR2: 00002000000054c0 CR3: 00000001039e0000 CR4: 00000000003506f0 [ 78.726891][ T5788] EXT4-fs: Ignoring removed nobh option [ 78.734796][ T5778] Call Trace: [ 78.734806][ T5778] [ 78.734819][ T5778] reg_set_min_max+0x1eb/0x260 [ 78.740415][ T5788] EXT4-fs: Ignoring removed bh option [ 78.743682][ T5778] check_cond_jmp_op+0x1370/0x19e0 [ 78.748966][ T5787] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.751461][ T5778] do_check+0x3363/0x8460 [ 78.757128][ T5787] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.761974][ T5778] do_check_common+0xc5e/0x12b0 [ 78.762002][ T5778] bpf_check+0xaaae/0xd9d0 [ 78.762061][ T5778] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 78.802999][ T5788] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.804308][ T5778] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 78.822662][ T5778] ? pcpu_block_update+0x24e/0x3b0 [ 78.827875][ T5778] ? pcpu_block_refresh_hint+0x157/0x170 [ 78.833508][ T5778] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 78.839759][ T5778] ? css_rstat_updated+0xb7/0x240 [ 78.844826][ T5778] ? __rcu_read_unlock+0x4f/0x70 [ 78.849840][ T5778] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 78.855686][ T5778] ? bpf_prog_alloc+0x5b/0x150 [ 78.860491][ T5778] ? pcpu_alloc_noprof+0xd29/0x1250 [ 78.865701][ T5778] ? should_fail_ex+0x30/0x280 [ 78.870467][ T5778] ? should_failslab+0x8c/0xb0 [ 78.875247][ T5778] ? __kmalloc_noprof+0x2a2/0x570 [ 78.880378][ T5778] ? security_bpf_prog_load+0x60/0x140 [ 78.885858][ T5778] ? selinux_bpf_prog_load+0xad/0xd0 [ 78.891185][ T5778] ? security_bpf_prog_load+0x9e/0x140 [ 78.896866][ T5778] bpf_prog_load+0xf6e/0x1100 [ 78.901551][ T5778] ? security_bpf+0x2b/0x90 [ 78.906081][ T5778] __sys_bpf+0x469/0x7c0 [ 78.910426][ T5778] __x64_sys_bpf+0x41/0x50 [ 78.914935][ T5778] x64_sys_call+0x2aee/0x3000 [ 78.919611][ T5778] do_syscall_64+0xd2/0x200 [ 78.924159][ T5778] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 78.930251][ T5778] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 78.936084][ T5778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.941989][ T5778] RIP: 0033:0x7fb8d733efc9 [ 78.946422][ T5778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.966117][ T5778] RSP: 002b:00007fb8d5da7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 78.974538][ T5778] RAX: ffffffffffffffda RBX: 00007fb8d7595fa0 RCX: 00007fb8d733efc9 [ 78.982503][ T5778] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 78.990523][ T5778] RBP: 00007fb8d73c1f91 R08: 0000000000000000 R09: 0000000000000000 [ 78.998517][ T5778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.006535][ T5778] R13: 00007fb8d7596038 R14: 00007fb8d7595fa0 R15: 00007fffd78e2b68 [ 79.014540][ T5778] [ 79.017563][ T5778] ---[ end trace 0000000000000000 ]--- [ 79.024844][ T5775] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.043515][ T5782] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.055706][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.080097][ T5797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9086 sclass=netlink_route_socket pid=5797 comm=syz.2.780 [ 79.094307][ T5795] loop1: detected capacity change from 0 to 512 [ 79.094527][ T5775] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.115695][ T5795] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.130092][ T5795] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.130924][ T5782] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.159383][ T5799] loop4: detected capacity change from 0 to 512 [ 79.175642][ T5775] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.188088][ T5799] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.202516][ T5809] loop2: detected capacity change from 0 to 512 [ 79.203601][ T5795] netlink: 32 bytes leftover after parsing attributes in process `syz.1.778'. [ 79.219211][ T5782] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.224288][ T5809] EXT4-fs (loop2): 1 truncate cleaned up [ 79.237323][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 79.258636][ T5799] netlink: 32 bytes leftover after parsing attributes in process `syz.4.779'. [ 79.268890][ T31] Bluetooth: hci1: Frame reassembly failed (-84) [ 79.277012][ T5775] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.290909][ T5814] loop2: detected capacity change from 0 to 512 [ 79.297559][ T5814] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 79.310604][ T5782] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.341113][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.359580][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.374336][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.388337][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.399392][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.412740][ T5822] loop2: detected capacity change from 0 to 512 [ 79.421842][ T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.423576][ T5822] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.788: invalid block [ 79.430548][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.461940][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.472088][ T5822] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.788: invalid indirect mapped block 4294967295 (level 1) [ 79.486222][ T5822] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.788: invalid indirect mapped block 4294967295 (level 1) [ 79.500496][ T5822] EXT4-fs (loop2): 2 truncates cleaned up [ 79.512549][ T5822] SELinux: security_context_str_to_sid (jڒA$ĻՃWB'x41$pLkfwf-tv~>vߛٙ޾yo۝aJZDlB F*Oo^sTK$nL؜EF O5_8=9;;3|8p%G>tȋ/PMKuk's{v7zyj蔑ig:Xm ']iu艕*9ZT*^],5l J9) failed with errno=-22 [ 79.549644][ T29] kauditd_printk_skb: 322 callbacks suppressed [ 79.549672][ T29] audit: type=1326 audit(1761895478.864:4329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5831 comm="syz.0.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d25b3efc9 code=0x7ffc0000 [ 79.606854][ T29] audit: type=1326 audit(1761895478.864:4330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5831 comm="syz.0.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d25b3efc9 code=0x7ffc0000 [ 79.609822][ T5838] loop0: detected capacity change from 0 to 512 [ 79.630328][ T29] audit: type=1326 audit(1761895478.864:4331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5831 comm="syz.0.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d25b3efc9 code=0x7ffc0000 [ 79.655386][ T5838] EXT4-fs (loop0): 1 truncate cleaned up [ 79.659773][ T29] audit: type=1326 audit(1761895478.864:4332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5831 comm="syz.0.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d25b3efc9 code=0x7ffc0000 [ 79.688696][ T29] audit: type=1326 audit(1761895478.864:4333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5831 comm="syz.0.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d25b3efc9 code=0x7ffc0000 [ 79.712027][ T29] audit: type=1326 audit(1761895478.864:4334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5831 comm="syz.0.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d25b3efc9 code=0x7ffc0000 [ 79.735429][ T29] audit: type=1326 audit(1761895478.864:4335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5831 comm="syz.0.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d25b3efc9 code=0x7ffc0000 [ 79.758719][ T29] audit: type=1326 audit(1761895478.864:4336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5831 comm="syz.0.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d25b3efc9 code=0x7ffc0000 [ 79.782076][ T29] audit: type=1326 audit(1761895478.864:4337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5831 comm="syz.0.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d25b3efc9 code=0x7ffc0000 [ 79.805373][ T29] audit: type=1326 audit(1761895478.864:4338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5831 comm="syz.0.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d25b3efc9 code=0x7ffc0000 [ 79.855971][ T5843] loop3: detected capacity change from 0 to 512 [ 79.862724][ T5843] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 79.968305][ T5855] siw: device registration error -23 [ 80.061109][ T5858] lo speed is unknown, defaulting to 1000 [ 80.572738][ T5870] SELinux: Context system_u:object_r:udev_var_run_t:s0 is not valid (left unmapped). [ 80.600215][ T5870] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.615259][ T5870] bond0: (slave bond1): Enslaving as an active interface with an up link [ 80.638905][ T5870] loop3: detected capacity change from 0 to 512 [ 80.666100][ T5870] EXT4-fs error (device loop3): __ext4_fill_super:5512: inode #2: comm syz.3.806: inode has both inline data and extents flags [ 80.680329][ T5879] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9086 sclass=netlink_route_socket pid=5879 comm=syz.2.810 [ 80.684947][ T5870] EXT4-fs (loop3): get root inode failed [ 80.698643][ T5870] EXT4-fs (loop3): mount failed [ 80.837730][ T5893] siw: device registration error -23 [ 80.901555][ T5901] loop3: detected capacity change from 0 to 512 [ 80.917366][ T5901] EXT4-fs (loop3): 1 truncate cleaned up [ 80.989681][ T5910] loop3: detected capacity change from 0 to 164 [ 81.017848][ T5912] loop0: detected capacity change from 0 to 512 [ 81.024433][ T5910] iso9660: Unknown parameter 'unhYde' [ 81.031690][ T5912] EXT4-fs (loop0): 1 truncate cleaned up [ 81.038679][ T5920] loop2: detected capacity change from 0 to 512 [ 81.065800][ T5920] ext4 filesystem being mounted at /173/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.067634][ T5922] siw: device registration error -23 [ 81.209566][ T5940] loop3: detected capacity change from 0 to 512 [ 81.233091][ T5940] EXT4-fs (loop3): 1 truncate cleaned up [ 81.310948][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 81.314159][ T3743] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 81.317115][ T3519] Bluetooth: hci1: command 0x1003 tx timeout [ 81.356328][ T5956] siw: device registration error -23 [ 81.397886][ T5964] loop0: detected capacity change from 0 to 512 [ 81.432283][ T5964] EXT4-fs (loop0): 1 orphan inode deleted [ 81.439208][ T5964] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.450154][ T3437] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:7: Failed to release dquot type 1 [ 81.464531][ T5964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.845'. [ 81.479968][ T5974] loop2: detected capacity change from 0 to 512 [ 81.487729][ T5964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.845'. [ 81.500343][ T5974] EXT4-fs (loop2): 1 truncate cleaned up [ 81.645662][ T5984] lo speed is unknown, defaulting to 1000 [ 81.684239][ T5984] loop2: detected capacity change from 0 to 512 [ 81.695164][ T5984] EXT4-fs (loop2): too many log groups per flexible block group [ 81.703135][ T5984] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 81.710046][ T5984] EXT4-fs (loop2): mount failed [ 81.721351][ T5984] netlink: 'syz.2.851': attribute type 21 has an invalid length. [ 81.748956][ T5989] loop2: detected capacity change from 0 to 512 [ 81.765740][ T5989] ext4 filesystem being mounted at /187/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 81.798476][ T5989] netlink: 12 bytes leftover after parsing attributes in process `syz.2.852'. [ 81.812759][ T5989] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 18: comm syz.2.852: lblock 23 mapped to illegal pblock 18 (length 1) [ 81.827245][ T5989] EXT4-fs (loop2): Remounting filesystem read-only [ 81.969837][ T6012] loop1: detected capacity change from 0 to 512 [ 81.985103][ T6012] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 81.998724][ T6012] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 82.015791][ T6017] loop4: detected capacity change from 0 to 4096 [ 82.019793][ T6012] EXT4-fs (loop1): 1 truncate cleaned up [ 82.088801][ T6024] lo speed is unknown, defaulting to 1000 [ 82.092986][ T6026] loop2: detected capacity change from 0 to 2048 [ 82.119330][ T6026] Alternate GPT is invalid, using primary GPT. [ 82.125758][ T6026] loop2: p1 p2 p3 [ 82.129486][ T6026] loop2: partition table partially beyond EOD, truncated [ 82.129731][ T6027] loop4: detected capacity change from 0 to 512 [ 82.190704][ T6027] EXT4-fs (loop4): too many log groups per flexible block group [ 82.201373][ T6027] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 82.208459][ T6027] EXT4-fs (loop4): mount failed [ 82.209740][ T6035] siw: device registration error -23 [ 82.247989][ T6024] netlink: 'syz.4.863': attribute type 21 has an invalid length. [ 82.322466][ T6044] loop3: detected capacity change from 0 to 164 [ 82.329026][ T6044] iso9660: Unknown parameter 'unhYde' [ 82.351157][ T6049] loop4: detected capacity change from 0 to 512 [ 82.368232][ T6049] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 82.388142][ T6041] netlink: 24 bytes leftover after parsing attributes in process `syz.2.865'. [ 82.397459][ T6053] loop3: detected capacity change from 0 to 2048 [ 82.404638][ T6049] EXT4-fs (loop4): 1 truncate cleaned up [ 82.424712][ T6049] lo speed is unknown, defaulting to 1000 [ 82.432084][ T6051] loop1: detected capacity change from 0 to 512 [ 82.445366][ T6051] EXT4-fs (loop1): 1 truncate cleaned up [ 82.455128][ T6053] Alternate GPT is invalid, using primary GPT. [ 82.461497][ T6053] loop3: p1 p2 p3 [ 82.465242][ T6053] loop3: partition table partially beyond EOD, truncated [ 82.697729][ T6073] loop4: detected capacity change from 0 to 512 [ 82.726589][ T6073] EXT4-fs (loop4): 1 orphan inode deleted [ 82.733230][ T6073] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.747345][ T6073] __nla_validate_parse: 1 callbacks suppressed [ 82.747413][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.881'. [ 82.762966][ T37] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:2: Failed to release dquot type 1 [ 83.015698][ T6086] lo speed is unknown, defaulting to 1000 [ 83.322895][ T6092] SELinux: failed to load policy [ 83.360983][ T6096] lo speed is unknown, defaulting to 1000 [ 83.397667][ T6096] loop2: detected capacity change from 0 to 512 [ 83.415006][ T6096] EXT4-fs (loop2): too many log groups per flexible block group [ 83.422816][ T6096] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 83.429780][ T6096] EXT4-fs (loop2): mount failed [ 83.439474][ T6096] netlink: 'syz.2.889': attribute type 21 has an invalid length. [ 83.525042][ T6104] lo speed is unknown, defaulting to 1000 [ 83.648592][ T6109] capability: warning: `syz.1.893' uses deprecated v2 capabilities in a way that may be insecure [ 83.710202][ T6109] loop1: detected capacity change from 0 to 512 [ 83.719185][ T6109] ext4: Unknown parameter 'oldalloc"data' [ 83.791737][ T6120] lo speed is unknown, defaulting to 1000 [ 83.831982][ T6120] loop4: detected capacity change from 0 to 512 [ 83.859876][ T6124] lo speed is unknown, defaulting to 1000 [ 83.866264][ T6120] EXT4-fs (loop4): too many log groups per flexible block group [ 83.873992][ T6120] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 83.894133][ T6120] EXT4-fs (loop4): mount failed [ 83.905800][ T6120] netlink: 'syz.4.898': attribute type 21 has an invalid length. [ 83.947821][ T6124] loop1: detected capacity change from 0 to 512 [ 83.960047][ T6131] loop2: detected capacity change from 0 to 512 [ 83.972287][ T6124] EXT4-fs (loop1): too many log groups per flexible block group [ 83.979255][ T6131] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.980105][ T6124] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 83.991164][ T6133] lo speed is unknown, defaulting to 1000 [ 84.006681][ T6124] EXT4-fs (loop1): mount failed [ 84.014160][ T6131] netlink: 'syz.2.900': attribute type 4 has an invalid length. [ 84.022578][ T6138] loop4: detected capacity change from 0 to 512 [ 84.047813][ T6124] netlink: 'syz.1.899': attribute type 21 has an invalid length. [ 84.056503][ T6138] EXT4-fs (loop4): too many log groups per flexible block group [ 84.064631][ T6138] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 84.093262][ T6138] EXT4-fs (loop4): mount failed [ 84.123984][ T6133] netlink: 'syz.4.902': attribute type 21 has an invalid length. [ 84.195622][ T6156] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 84.203067][ T6156] FAULT_INJECTION: forcing a failure. [ 84.203067][ T6156] name failslab, interval 1, probability 0, space 0, times 0 [ 84.215729][ T6156] CPU: 0 UID: 0 PID: 6156 Comm: syz.4.908 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 84.215761][ T6156] Tainted: [W]=WARN [ 84.215769][ T6156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 84.215784][ T6156] Call Trace: [ 84.215791][ T6156] [ 84.215799][ T6156] __dump_stack+0x1d/0x30 [ 84.215827][ T6156] dump_stack_lvl+0xe8/0x140 [ 84.215932][ T6156] dump_stack+0x15/0x1b [ 84.215953][ T6156] should_fail_ex+0x265/0x280 [ 84.215975][ T6156] ? fifo_create_dflt+0xe8/0x1a0 [ 84.215998][ T6156] should_failslab+0x8c/0xb0 [ 84.216032][ T6156] __kmalloc_cache_noprof+0x4c/0x4a0 [ 84.216085][ T6156] ? qdisc_create_dflt+0x1c0/0x2d0 [ 84.216124][ T6156] fifo_create_dflt+0xe8/0x1a0 [ 84.216181][ T6156] tbf_change+0x636/0xcd0 [ 84.216227][ T6156] ? __list_add_valid_or_report+0x38/0xe0 [ 84.216263][ T6156] ? rtnetlink_rcv+0x1c/0x30 [ 84.216288][ T6156] ? netlink_unicast+0x5c0/0x690 [ 84.216323][ T6156] ? netlink_sendmsg+0x58b/0x6b0 [ 84.216415][ T6156] ? __sock_sendmsg+0x145/0x180 [ 84.216448][ T6156] ? read_tsc+0x9/0x20 [ 84.216465][ T6156] ? __pfx_tbf_init+0x10/0x10 [ 84.216492][ T6156] tbf_init+0x72/0x90 [ 84.216557][ T6156] qdisc_create+0x591/0x9e0 [ 84.216583][ T6156] tc_modify_qdisc+0xf2e/0x1420 [ 84.216616][ T6156] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 84.216645][ T6156] rtnetlink_rcv_msg+0x65a/0x6d0 [ 84.216766][ T6156] netlink_rcv_skb+0x123/0x220 [ 84.216797][ T6156] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 84.216834][ T6156] rtnetlink_rcv+0x1c/0x30 [ 84.216861][ T6156] netlink_unicast+0x5c0/0x690 [ 84.216946][ T6156] netlink_sendmsg+0x58b/0x6b0 [ 84.216966][ T6156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 84.216986][ T6156] __sock_sendmsg+0x145/0x180 [ 84.217041][ T6156] ____sys_sendmsg+0x31e/0x4e0 [ 84.217084][ T6156] ___sys_sendmsg+0x17b/0x1d0 [ 84.217185][ T6156] __x64_sys_sendmsg+0xd4/0x160 [ 84.217213][ T6156] x64_sys_call+0x191e/0x3000 [ 84.217243][ T6156] do_syscall_64+0xd2/0x200 [ 84.217343][ T6156] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 84.217379][ T6156] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 84.217476][ T6156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.217502][ T6156] RIP: 0033:0x7fb8d733efc9 [ 84.217519][ T6156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.217542][ T6156] RSP: 002b:00007fb8d5da7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.217565][ T6156] RAX: ffffffffffffffda RBX: 00007fb8d7595fa0 RCX: 00007fb8d733efc9 [ 84.217580][ T6156] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000003 [ 84.217662][ T6156] RBP: 00007fb8d5da7090 R08: 0000000000000000 R09: 0000000000000000 [ 84.217676][ T6156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.217690][ T6156] R13: 00007fb8d7596038 R14: 00007fb8d7595fa0 R15: 00007fffd78e2b68 [ 84.217713][ T6156] [ 84.551002][ T6146] geneve0: entered promiscuous mode [ 84.563267][ T6146] batman_adv: batadv0: Adding interface: macsec1 [ 84.569766][ T6146] batman_adv: batadv0: The MTU of interface macsec1 is too small (1418) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.609704][ T6146] batman_adv: batadv0: Interface activated: macsec1 [ 84.636590][ T29] kauditd_printk_skb: 414 callbacks suppressed [ 84.636608][ T29] audit: type=1326 audit(1761895483.944:4749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.1.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb6a2efc9 code=0x7ffc0000 [ 84.666223][ T29] audit: type=1326 audit(1761895483.944:4750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.1.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb6a2efc9 code=0x7ffc0000 [ 84.712556][ T6167] lo speed is unknown, defaulting to 1000 [ 84.846501][ T6172] usb usb8: usbfs: process 6172 (syz.4.910) did not claim interface 0 before use [ 84.890708][ T6174] siw: device registration error -23 [ 85.061859][ T29] audit: type=1326 audit(1761895484.004:4751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467daaefc9 code=0x7ffc0000 [ 85.085298][ T29] audit: type=1326 audit(1761895484.004:4752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467daaefc9 code=0x7ffc0000 [ 85.108614][ T29] audit: type=1326 audit(1761895484.004:4753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f467daaefc9 code=0x7ffc0000 [ 85.131992][ T29] audit: type=1326 audit(1761895484.004:4754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467daaefc9 code=0x7ffc0000 [ 85.155369][ T29] audit: type=1326 audit(1761895484.004:4755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467daaefc9 code=0x7ffc0000 [ 85.178677][ T29] audit: type=1326 audit(1761895484.014:4756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f467daaefc9 code=0x7ffc0000 [ 85.180824][ T6177] loop4: detected capacity change from 0 to 512 [ 85.202072][ T29] audit: type=1326 audit(1761895484.014:4757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467daaefc9 code=0x7ffc0000 [ 85.202108][ T29] audit: type=1326 audit(1761895484.014:4758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467daaefc9 code=0x7ffc0000 [ 85.286169][ T6189] netlink: 'syz.2.918': attribute type 4 has an invalid length. [ 85.294528][ T6177] EXT4-fs (loop4): 1 truncate cleaned up [ 85.308654][ T23] lo speed is unknown, defaulting to 1000 [ 85.314636][ T23] syz2: Port: 1 Link DOWN [ 85.343572][ T6189] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 85.343572][ T6189] program syz.2.918 not setting count and/or reply_len properly [ 85.379513][ T6189] netlink: 'syz.2.918': attribute type 4 has an invalid length. [ 85.390105][ T9] lo speed is unknown, defaulting to 1000 [ 85.395961][ T9] syz2: Port: 1 Link ACTIVE [ 85.416923][ T6204] loop0: detected capacity change from 0 to 164 [ 85.424167][ T6204] ISOFS: unable to read i-node block [ 85.429550][ T6204] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 85.499149][ T6210] siw: device registration error -23 [ 85.531109][ T6215] loop0: detected capacity change from 0 to 1024 [ 85.549751][ T6215] EXT4-fs: inline encryption not supported [ 85.608400][ T6219] loop1: detected capacity change from 0 to 512 [ 85.658423][ T6219] EXT4-fs (loop1): 1 orphan inode deleted [ 85.665307][ T6226] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9086 sclass=netlink_route_socket pid=6226 comm=syz.4.923 [ 85.678085][ T37] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:2: Failed to release dquot type 1 [ 85.710009][ T6219] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.738350][ T6219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.930'. [ 85.770504][ T6219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.930'. [ 85.847542][ T6232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9086 sclass=netlink_route_socket pid=6232 comm=syz.2.927 [ 85.936497][ T6221] loop3: detected capacity change from 0 to 32768 [ 86.176655][ T6240] loop1: detected capacity change from 0 to 512 [ 86.237293][ T6240] EXT4-fs (loop1): 1 truncate cleaned up [ 86.503071][ T6254] FAULT_INJECTION: forcing a failure. [ 86.503071][ T6254] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 86.516522][ T6254] CPU: 1 UID: 0 PID: 6254 Comm: syz.0.939 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 86.516611][ T6254] Tainted: [W]=WARN [ 86.516621][ T6254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 86.516635][ T6254] Call Trace: [ 86.516643][ T6254] [ 86.516653][ T6254] __dump_stack+0x1d/0x30 [ 86.516683][ T6254] dump_stack_lvl+0xe8/0x140 [ 86.516709][ T6254] dump_stack+0x15/0x1b [ 86.516726][ T6254] should_fail_ex+0x265/0x280 [ 86.516781][ T6254] should_fail_alloc_page+0xf2/0x100 [ 86.516815][ T6254] __alloc_frozen_pages_noprof+0xff/0x360 [ 86.516854][ T6254] alloc_pages_mpol+0xb3/0x260 [ 86.516878][ T6254] alloc_pages_noprof+0x90/0x130 [ 86.516915][ T6254] get_free_pages_noprof+0xc/0x40 [ 86.516995][ T6254] selinux_genfs_get_sid+0x33/0x180 [ 86.517020][ T6254] inode_doinit_with_dentry+0x5fe/0x7a0 [ 86.517053][ T6254] selinux_d_instantiate+0x27/0x40 [ 86.517119][ T6254] security_d_instantiate+0x7a/0xa0 [ 86.517140][ T6254] d_instantiate+0x3f/0x80 [ 86.517202][ T6254] __debugfs_create_file+0x1c1/0x330 [ 86.517234][ T6254] debugfs_create_file_full+0x3f/0x60 [ 86.517260][ T6254] ? __pfx_ipgre_tunnel_setup+0x10/0x10 [ 86.517289][ T6254] ref_tracker_dir_debugfs+0x100/0x1e0 [ 86.517369][ T6254] alloc_netdev_mqs+0x1a7/0xa50 [ 86.517395][ T6254] ? sized_strscpy+0x157/0x1a0 [ 86.517416][ T6254] __ip_tunnel_create+0x2bc/0x450 [ 86.517463][ T6254] ? ip_tunnel_find+0x144/0x300 [ 86.517514][ T6254] ip_tunnel_ctl+0x38f/0x750 [ 86.517543][ T6254] ipgre_tunnel_ctl+0x22f/0x560 [ 86.517649][ T6254] ip_tunnel_siocdevprivate+0x77/0xe0 [ 86.517689][ T6254] dev_ifsioc+0x8f8/0xaa0 [ 86.517715][ T6254] dev_ioctl+0x78d/0x960 [ 86.517736][ T6254] sock_ioctl+0x593/0x610 [ 86.517774][ T6254] ? __pfx_sock_ioctl+0x10/0x10 [ 86.517808][ T6254] __se_sys_ioctl+0xce/0x140 [ 86.517836][ T6254] __x64_sys_ioctl+0x43/0x50 [ 86.517854][ T6254] x64_sys_call+0x1816/0x3000 [ 86.517880][ T6254] do_syscall_64+0xd2/0x200 [ 86.517955][ T6254] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 86.517989][ T6254] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 86.518022][ T6254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.518046][ T6254] RIP: 0033:0x7f9d25b3efc9 [ 86.518068][ T6254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.518090][ T6254] RSP: 002b:00007f9d2459f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.518109][ T6254] RAX: ffffffffffffffda RBX: 00007f9d25d95fa0 RCX: 00007f9d25b3efc9 [ 86.518120][ T6254] RDX: 0000200000001040 RSI: 00000000000089f1 RDI: 0000000000000005 [ 86.518131][ T6254] RBP: 00007f9d2459f090 R08: 0000000000000000 R09: 0000000000000000 [ 86.518142][ T6254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.518214][ T6254] R13: 00007f9d25d96038 R14: 00007f9d25d95fa0 R15: 00007ffd02e1d558 [ 86.518236][ T6254] [ 86.873851][ T6258] siw: device registration error -23 [ 87.113067][ T6260] loop3: detected capacity change from 0 to 512 [ 87.142359][ T6260] EXT4-fs (loop3): 1 truncate cleaned up [ 87.160615][ T6284] loop4: detected capacity change from 0 to 512 [ 87.176224][ T6284] EXT4-fs (loop4): 1 orphan inode deleted [ 87.182595][ T6284] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.193366][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 1 [ 87.239444][ T6284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.950'. [ 87.294218][ T6290] lo speed is unknown, defaulting to 1000 [ 87.323394][ T6294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.951'. [ 87.333500][ T6294] netlink: 7 bytes leftover after parsing attributes in process `syz.1.951'. [ 87.350153][ T6294] netlink: 7 bytes leftover after parsing attributes in process `syz.1.951'. [ 87.396018][ T6284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.950'. [ 87.408980][ T6297] FAULT_INJECTION: forcing a failure. [ 87.408980][ T6297] name failslab, interval 1, probability 0, space 0, times 0 [ 87.421699][ T6297] CPU: 0 UID: 0 PID: 6297 Comm: syz.0.954 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 87.421738][ T6297] Tainted: [W]=WARN [ 87.421746][ T6297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 87.421767][ T6297] Call Trace: [ 87.421824][ T6297] [ 87.421831][ T6297] __dump_stack+0x1d/0x30 [ 87.421858][ T6297] dump_stack_lvl+0xe8/0x140 [ 87.421884][ T6297] dump_stack+0x15/0x1b [ 87.421905][ T6297] should_fail_ex+0x265/0x280 [ 87.422031][ T6297] should_failslab+0x8c/0xb0 [ 87.422059][ T6297] __kmalloc_noprof+0xa5/0x570 [ 87.422093][ T6297] ? copy_splice_read+0xc2/0x660 [ 87.422122][ T6297] copy_splice_read+0xc2/0x660 [ 87.422154][ T6297] ? __pfx_copy_splice_read+0x10/0x10 [ 87.422180][ T6297] splice_direct_to_actor+0x26f/0x680 [ 87.422269][ T6297] ? __pfx_direct_splice_actor+0x10/0x10 [ 87.422317][ T6297] do_splice_direct+0xda/0x150 [ 87.422345][ T6297] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 87.422420][ T6297] do_sendfile+0x380/0x650 [ 87.422463][ T6297] __x64_sys_sendfile64+0x105/0x150 [ 87.422581][ T6297] x64_sys_call+0x2bb4/0x3000 [ 87.422608][ T6297] do_syscall_64+0xd2/0x200 [ 87.422661][ T6297] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 87.422688][ T6297] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 87.422717][ T6297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.422765][ T6297] RIP: 0033:0x7f9d25b3efc9 [ 87.422779][ T6297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.422797][ T6297] RSP: 002b:00007f9d2459f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 87.422818][ T6297] RAX: ffffffffffffffda RBX: 00007f9d25d95fa0 RCX: 00007f9d25b3efc9 [ 87.422834][ T6297] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 87.422880][ T6297] RBP: 00007f9d2459f090 R08: 0000000000000000 R09: 0000000000000000 [ 87.422895][ T6297] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 87.422909][ T6297] R13: 00007f9d25d96038 R14: 00007f9d25d95fa0 R15: 00007ffd02e1d558 [ 87.422929][ T6297] [ 87.640493][ T6291] loop2: detected capacity change from 0 to 4096 [ 87.873669][ T6309] loop3: detected capacity change from 0 to 164 [ 87.906432][ T6309] ISOFS: unable to read i-node block [ 87.917696][ T6309] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 88.104252][ T6313] loop3: detected capacity change from 0 to 512 [ 88.118758][ T6313] EXT4-fs (loop3): 1 truncate cleaned up [ 88.317968][ T6331] netlink: 3 bytes leftover after parsing attributes in process `syz.4.965'. [ 88.327137][ T6331] 0X: renamed from caif0 [ 88.333595][ T6331] 0X: entered allmulticast mode [ 88.338951][ T6331] net_ratelimit: 6 callbacks suppressed [ 88.338967][ T6331] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 88.363099][ T6331] loop4: detected capacity change from 0 to 128 [ 88.371607][ T6331] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.395104][ T6331] netlink: 'syz.4.965': attribute type 10 has an invalid length. [ 88.449635][ T6331] team0 (unregistering): Port device team_slave_0 removed [ 88.465843][ T6331] team0 (unregistering): Port device team_slave_1 removed [ 88.488633][ T6333] syz.4.965 uses obsolete (PF_INET,SOCK_PACKET) [ 88.920508][ T6343] loop0: detected capacity change from 0 to 512 [ 89.064778][ T6343] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.114894][ T6343] netlink: 'syz.0.964': attribute type 4 has an invalid length. [ 89.242951][ T6357] lo speed is unknown, defaulting to 1000 [ 89.284268][ T6360] loop1: detected capacity change from 0 to 512 [ 89.315152][ T6359] usb usb8: usbfs: process 6359 (syz.0.974) did not claim interface 0 before use [ 89.352011][ T6360] EXT4-fs (loop1): too many log groups per flexible block group [ 89.364132][ T6360] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 89.386094][ T6360] EXT4-fs (loop1): mount failed [ 89.417241][ T6357] netlink: 'syz.1.973': attribute type 21 has an invalid length. [ 89.484882][ T6367] loop0: detected capacity change from 0 to 164 [ 89.493699][ T6367] iso9660: Unknown parameter 'unhYde' [ 89.533798][ T6371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.978'. [ 89.552179][ T6370] loop1: detected capacity change from 0 to 512 [ 89.559760][ T6371] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.573525][ T6370] ext4 filesystem being mounted at /203/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.618821][ T6371] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.627296][ T6370] netlink: 32 bytes leftover after parsing attributes in process `syz.1.977'. [ 89.653240][ T3437] Bluetooth: hci0: Frame reassembly failed (-84) [ 89.686240][ T6371] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.736755][ T6371] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.784805][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.805694][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.820375][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.828818][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.854653][ T6387] lo speed is unknown, defaulting to 1000 [ 89.891245][ T6387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.899850][ T6387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.912728][ T29] kauditd_printk_skb: 238 callbacks suppressed [ 89.912739][ T29] audit: type=1326 audit(1761895489.234:4995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6386 comm="syz.2.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4345efc9 code=0x7ffc0000 [ 89.943257][ T29] audit: type=1326 audit(1761895489.264:4996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6386 comm="syz.2.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fde4345efc9 code=0x7ffc0000 [ 89.966976][ T29] audit: type=1326 audit(1761895489.264:4997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6386 comm="syz.2.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4345efc9 code=0x7ffc0000 [ 89.981339][ T6389] loop0: detected capacity change from 0 to 2048 [ 89.990622][ T29] audit: type=1326 audit(1761895489.264:4998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6386 comm="syz.2.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fde4345efc9 code=0x7ffc0000 [ 90.019910][ T29] audit: type=1326 audit(1761895489.264:4999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6386 comm="syz.2.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4345efc9 code=0x7ffc0000 [ 90.043226][ T29] audit: type=1326 audit(1761895489.264:5000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6386 comm="syz.2.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fde4345efc9 code=0x7ffc0000 [ 90.051380][ T6389] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.066524][ T29] audit: type=1326 audit(1761895489.264:5001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6386 comm="syz.2.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4345efc9 code=0x7ffc0000 [ 90.100234][ T29] audit: type=1326 audit(1761895489.264:5002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6386 comm="syz.2.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4345efc9 code=0x7ffc0000 [ 90.146752][ T29] audit: type=1326 audit(1761895489.464:5003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6394 comm="syz.0.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d25b3efc9 code=0x7ffc0000 [ 90.171179][ T6393] usb usb8: usbfs: process 6393 (syz.3.985) did not claim interface 0 before use [ 90.175320][ T29] audit: type=1326 audit(1761895489.464:5004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6394 comm="syz.0.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d25b3efc9 code=0x7ffc0000 [ 90.321243][ T6412] loop3: detected capacity change from 0 to 512 [ 90.329485][ T6412] EXT4-fs (loop3): 1 truncate cleaned up [ 90.365954][ T6416] loop3: detected capacity change from 0 to 2048 [ 90.388645][ T6416] ext4 filesystem being mounted at /227/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.436043][ T6420] netlink: 'syz.4.995': attribute type 4 has an invalid length. [ 90.526539][ T6424] usb usb8: usbfs: process 6424 (syz.3.997) did not claim interface 0 before use [ 90.652258][ T6443] loop4: detected capacity change from 0 to 8192 [ 90.758654][ T6449] loop3: detected capacity change from 0 to 512 [ 90.829199][ T6449] EXT4-fs (loop3): 1 truncate cleaned up [ 90.983948][ T6456] FAULT_INJECTION: forcing a failure. [ 90.983948][ T6456] name failslab, interval 1, probability 0, space 0, times 0 [ 90.996690][ T6456] CPU: 1 UID: 0 PID: 6456 Comm: syz.3.1009 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 90.996763][ T6456] Tainted: [W]=WARN [ 90.996770][ T6456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 90.996785][ T6456] Call Trace: [ 90.996792][ T6456] [ 90.996799][ T6456] __dump_stack+0x1d/0x30 [ 90.996825][ T6456] dump_stack_lvl+0xe8/0x140 [ 90.996905][ T6456] dump_stack+0x15/0x1b [ 90.996921][ T6456] should_fail_ex+0x265/0x280 [ 90.996958][ T6456] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 90.996986][ T6456] should_failslab+0x8c/0xb0 [ 90.997021][ T6456] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 90.997052][ T6456] ? shmem_alloc_inode+0x34/0x50 [ 90.997103][ T6456] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 90.997130][ T6456] shmem_alloc_inode+0x34/0x50 [ 90.997155][ T6456] alloc_inode+0x40/0x170 [ 90.997185][ T6456] new_inode+0x1d/0xe0 [ 90.997217][ T6456] shmem_get_inode+0x244/0x750 [ 90.997252][ T6456] __shmem_file_setup+0x113/0x210 [ 90.997270][ T6456] shmem_file_setup+0x3b/0x50 [ 90.997289][ T6456] __se_sys_memfd_create+0x2c3/0x590 [ 90.997319][ T6456] __x64_sys_memfd_create+0x31/0x40 [ 90.997402][ T6456] x64_sys_call+0x2ac2/0x3000 [ 90.997433][ T6456] do_syscall_64+0xd2/0x200 [ 90.997452][ T6456] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 90.997544][ T6456] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 90.997603][ T6456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.997623][ T6456] RIP: 0033:0x7f467daaefc9 [ 90.997636][ T6456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.997699][ T6456] RSP: 002b:00007f467c50ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 90.997720][ T6456] RAX: ffffffffffffffda RBX: 00000000000005fd RCX: 00007f467daaefc9 [ 90.997735][ T6456] RDX: 00007f467c50eef0 RSI: 0000000000000000 RDI: 00007f467db32960 [ 90.997750][ T6456] RBP: 0000200000000c00 R08: 00007f467c50ebb7 R09: 00007f467c50ee40 [ 90.997764][ T6456] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000480 [ 90.997779][ T6456] R13: 00007f467c50eef0 R14: 00007f467c50eeb0 R15: 00002000000002c0 [ 90.997923][ T6456] [ 91.606189][ T6498] loop0: detected capacity change from 0 to 512 [ 91.645867][ T6498] EXT4-fs (loop0): 1 orphan inode deleted [ 91.652388][ T6498] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.666500][ T6498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1026'. [ 91.675709][ T31] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 1 [ 91.685650][ T6498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1026'. [ 91.714180][ T3743] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 91.900735][ T6518] lo speed is unknown, defaulting to 1000 [ 92.216721][ T6524] loop4: detected capacity change from 0 to 512 [ 92.222379][ T6523] siw: device registration error -23 [ 92.236017][ T6524] EXT4-fs (loop4): 1 orphan inode deleted [ 92.242418][ T6524] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.256465][ T37] Bluetooth: hci0: Frame reassembly failed (-84) [ 92.263281][ T6524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1035'. [ 92.264198][ T37] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:2: Failed to release dquot type 1 [ 92.331151][ T6534] netlink: 'syz.4.1037': attribute type 4 has an invalid length. [ 92.339396][ T6534] netlink: 'syz.4.1037': attribute type 4 has an invalid length. [ 92.380559][ T6536] loop4: detected capacity change from 0 to 4096 [ 92.423711][ T6543] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 92.450263][ T6545] loop1: detected capacity change from 0 to 128 [ 92.581761][ T6555] siw: device registration error -23 [ 92.610212][ T6559] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.644974][ T10] kernel read not supported for file /530/attr/fscreate (pid: 10 comm: kworker/0:1) [ 92.697162][ T6559] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.729217][ T6569] netlink: 'syz.3.1050': attribute type 4 has an invalid length. [ 92.740748][ T6569] netlink: 'syz.3.1050': attribute type 4 has an invalid length. [ 92.752382][ T6552] ================================================================== [ 92.760597][ T6552] BUG: KCSAN: data-race in __mark_inode_dirty / __mark_inode_dirty [ 92.768559][ T6552] [ 92.770954][ T6552] write to 0xffff88811ac82e28 of 4 bytes by task 6545 on cpu 1: [ 92.778597][ T6552] __mark_inode_dirty+0x248/0x750 [ 92.783650][ T6552] mark_buffer_dirty+0x133/0x210 [ 92.788609][ T6552] block_write_end+0x12d/0x210 [ 92.793405][ T6552] generic_write_end+0x56/0x150 [ 92.798281][ T6552] fat_write_end+0x4f/0x160 [ 92.802809][ T6552] generic_perform_write+0x312/0x490 [ 92.808119][ T6552] __generic_file_write_iter+0x9e/0x120 [ 92.813684][ T6552] generic_file_write_iter+0x8d/0x2f0 [ 92.819094][ T6552] iter_file_splice_write+0x666/0xa60 [ 92.824574][ T6552] direct_splice_actor+0x156/0x2a0 [ 92.829703][ T6552] splice_direct_to_actor+0x312/0x680 [ 92.835095][ T6552] do_splice_direct+0xda/0x150 [ 92.839880][ T6552] do_sendfile+0x380/0x650 [ 92.844417][ T6552] __x64_sys_sendfile64+0x105/0x150 [ 92.849629][ T6552] x64_sys_call+0x2bb4/0x3000 [ 92.854320][ T6552] do_syscall_64+0xd2/0x200 [ 92.858834][ T6552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.864740][ T6552] [ 92.867066][ T6552] read to 0xffff88811ac82e28 of 4 bytes by task 6552 on cpu 0: [ 92.874615][ T6552] __mark_inode_dirty+0x191/0x750 [ 92.879665][ T6552] fat_update_time+0x1ec/0x200 [ 92.884446][ T6552] touch_atime+0x148/0x340 [ 92.888889][ T6552] filemap_splice_read+0x6ba/0x740 [ 92.894034][ T6552] splice_direct_to_actor+0x26f/0x680 [ 92.899417][ T6552] do_splice_direct+0xda/0x150 [ 92.904198][ T6552] do_sendfile+0x380/0x650 [ 92.908643][ T6552] __x64_sys_sendfile64+0x105/0x150 [ 92.913878][ T6552] x64_sys_call+0x2bb4/0x3000 [ 92.915667][ T6545] syz.1.1042: attempt to access beyond end of device [ 92.915667][ T6545] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 92.918561][ T6552] do_syscall_64+0xd2/0x200 [ 92.931972][ T6545] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 92.936394][ T6552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.936422][ T6552] [ 92.953203][ T6552] value changed: 0x00000010 -> 0x00000070 [ 92.958907][ T6552] [ 92.961232][ T6552] Reported by Kernel Concurrency Sanitizer on: [ 92.967384][ T6552] CPU: 0 UID: 0 PID: 6552 Comm: syz.1.1042 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 92.976525][ T6571] loop3: detected capacity change from 0 to 4096 [ 92.978770][ T6552] Tainted: [W]=WARN [ 92.978781][ T6552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 92.998966][ T6552] ================================================================== [ 93.019135][ T6552] syz.1.1042: attempt to access beyond end of device [ 93.019135][ T6552] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 93.032743][ T6552] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 93.050927][ T6559] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.095657][ T6559] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.153656][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.164656][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.176200][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.187204][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.264069][ T3743] Bluetooth: hci0: command 0x1003 tx timeout [ 94.264069][ T3519] Bluetooth: hci0: Opcode 0x1003 failed: -110