last executing test programs: 11.239476593s ago: executing program 2 (id=350): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c00"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff40bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) kexec_load(0x0, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = gettid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f00000000c0)={0x31, @tick=0x40, 0x4, {0x0, 0x2}, 0xa, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000040)={0x7, 0x7, 0x6, 0x2, 0x3, 0x824b}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r4, 0x80045300, 0x0) tkill(r3, 0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0xae8}, 0x18) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2004000, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100030010651fbe347b2c2b00000c00018008000100", @ANYRES16=r6], 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000018000100001000000a0000e00000000044a5a49cbd67a5c233bf0008000000e0", @ANYRES32=r8, @ANYBLOB], 0x28}}, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000080)=@sr0, r8, &(0x7f00000001c0)='./file0\x00') r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r9) r10 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) 11.006007227s ago: executing program 2 (id=355): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300), &(0x7f0000000580)) (async) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r2, 0x6e2, 0x3900, 0x3, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x77359400}, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xd9, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x0) connect$netlink(r5, &(0x7f00000001c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc) 10.127924174s ago: executing program 2 (id=363): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000"], 0x18}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000dc0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x420, 0x248, 0x180, 0x180, 0x180, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x6, 0x0, {[{{@ip={@local, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_to_bridge\x00', 'ipvlan0\x00', {}, {0xff}, 0x67, 0x2, 0x6d}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xec}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xffffff00, 0xffffffff, 'vlan0\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0x1, 0x1, 0x2}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0xe, @private=0xa010102, 0x4e21}}}, {{@ip={@remote, @empty, 0xffffffff, 0xffffff00, 'nr0\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x0, 0x0, 0x34}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x0, 0x8], 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x34}, @multicast2, 0x0, 0xffffff00, 'ipvlan0\x00', 'ip_vti0\x00', {0xff}, {}, 0x84, 0x0, 0x30}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0xa02, 0x80, 0x1, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x1}, 0x18) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) 10.112543825s ago: executing program 2 (id=365): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000042400000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r3 = syz_open_pts(0xffffffffffffffff, 0x200000) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f00000002c0)=""/177) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRESOCT=r2, @ANYRESDEC=r1], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001d40)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xe, 0x19}}}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x2}, 0x18) r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r8, 0x108000) syz_clone(0x8000000, &(0x7f00000004c0)="49b7908c77f3c76002393df4e55981357b141335695a59794f06ea9fe1c40c4e287b0cb18eab5f04218b3bbd1362b99615840bceb0825181265af0e854dac93e82c96179", 0x44, &(0x7f0000000240), &(0x7f00000003c0), &(0x7f0000000600)="56c9eb6961dac1cb0b8158d6841634f5aa143dd90938cb013c3d0603005e5e2c9fd8671de4a5642df3954eea1e3b89627a253ecb7ecc2525942eb9d08e4a42e030c8646bd9d68aad3747f7b9469d8fa49e1d4ef895da7076fab18c95d88809d33b8c0129f7344e8263debf251f823825cadbcc4e45e9d2b0cdb446055d5d3096a17b5aed18212a3b4ce855ee0a548657") r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = io_uring_setup(0x423d, &(0x7f00000000c0)={0x0, 0x6087, 0x1040, 0x3, 0x161}) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r11}, 0x18) io_uring_register$IORING_REGISTER_RESTRICTIONS(r10, 0xb, &(0x7f00000004c0), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000), 0x4) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32, @ANYBLOB="080003"], 0x44}}, 0x0) 9.971052847s ago: executing program 2 (id=368): r0 = fsopen(&(0x7f0000000400)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001800)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0x400ff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2004, @fd=r1, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) unshare(0x28000600) r5 = syz_open_dev$loop(&(0x7f0000000940), 0x7, 0x80000) fadvise64(r5, 0xa4, 0x7, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20048054) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000a000000050004000000000010000300686173683a6970"], 0x5c}}, 0x0) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x226a, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRES16=r0, @ANYRES16=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) connect$can_bcm(r9, &(0x7f0000000140)={0x1d, r10}, 0x10) ppoll(&(0x7f0000000480)=[{r11, 0x10}, {r8, 0x40}, {}], 0x3, 0x0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0xf) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) sendmsg$can_bcm(r9, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000001000)=ANY=[@ANYBLOB="01000000020800000100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYBLOB="0300004001"], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x200060d0) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a9d00010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000a00)=ANY=[@ANYRES64=r4], &(0x7f0000000300)='syzkaller\x00', 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000009, 0x4082172, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) 9.640588593s ago: executing program 2 (id=373): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8080) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, 0x0) 9.613319934s ago: executing program 32 (id=373): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8080) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, 0x0) 2.732364477s ago: executing program 3 (id=459): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c00"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff40bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) kexec_load(0x0, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = gettid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f00000000c0)={0x31, @tick=0x40, 0x4, {0x0, 0x2}, 0xa, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000040)={0x7, 0x7, 0x6, 0x2, 0x3, 0x824b}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r4, 0x80045300, 0x0) tkill(r3, 0x7) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0xae8}, 0x18) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2004000, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100030010651fbe347b2c2b00000c00018008000100", @ANYRES16=r7], 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000018000100001000000a0000e00000000044a5a49cbd67a5c233bf0008000000e0", @ANYRES32=r9, @ANYBLOB], 0x28}}, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000080)=@sr0, r9, &(0x7f00000001c0)='./file0\x00') r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r10) r11 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) 2.615107129s ago: executing program 5 (id=464): r0 = fsopen(&(0x7f0000000400)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001800)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0x400ff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2004, @fd=r1, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) unshare(0x28000600) r5 = syz_open_dev$loop(&(0x7f0000000940), 0x7, 0x80000) fadvise64(r5, 0xa4, 0x7, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20048054) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000a000000050004000000000010000300686173683a6970"], 0x5c}}, 0x0) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x226a, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRES16=r0, @ANYRES16=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) connect$can_bcm(r9, &(0x7f0000000140)={0x1d, r10}, 0x10) ppoll(&(0x7f0000000480)=[{r11, 0x10}, {r8, 0x40}, {}], 0x3, 0x0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0xf) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000009, 0x4082172, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) 2.325727745s ago: executing program 3 (id=469): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4005, &(0x7f0000000c00)=0xb, 0x6, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) 1.848960094s ago: executing program 3 (id=482): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000007000000010001000900000001", @ANYRES16, @ANYBLOB="6ef686cf39de99e4e3fc22f4771e508a6dadbac8e565935fcd495e771cfc6b18dd7d38f364d5c4084f021682dc1f9a2428f7f6742515ddc55d2fa2c3b58f7b4909c70a318ca2bd4cdb83f1b29edbd8b311a3fe791772fc051ddf7751ce5aca7453dbad2aa3bc1868d951454e5805", @ANYRESHEX=0x0, @ANYBLOB="bec690acea0e2c52fa787d2eece1e922fb45930de3d433a219199e0ea3a13a2629c32df043e37e1a0fe057dbc370"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r4, 0x0, 0x7fffffffffffffff}, 0x18) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x468, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5ec888eb7598db49}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x2, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x8, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x2, 0x8, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63e4, 0x0, 0x8000, 0x8, 0x255, 0x6, 0x6, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0x2, 0x200, 0x1, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x3, 0x7c, 0xfffffffc, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0xe, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0xfffffff8, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x9, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x8e, 0x5, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x0, 0x955, 0x5, 0x6cdf13a0, 0x9, 0x3, 0x5, 0x10001, 0x80000001, 0x80000001, 0xed2, 0x5, 0xfffffffa, 0x2, 0x18d1, 0x0, 0xfffffffc, 0x9486, 0x80, 0x2, 0x80000000, 0xdb, 0x3, 0x80, 0xffff8000, 0x5, 0x8, 0x800007, 0x1, 0x2, 0x8, 0x2, 0x0, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x9, 0x1, 0x5, 0x283, 0xb, 0x4, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x4, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x800, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x81, 0x382ae49b, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0xfffffffb, 0x6, 0xfffffeff, 0x8dc3, 0x20000001, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x101, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x468}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, &(0x7f0000001000)={0xb}, 0x1) sendto$inet6(r7, &(0x7f0000000040)='l', 0xffe0, 0x8014, &(0x7f0000000100)={0xa, 0x4e23, 0x77, @loopback, 0x10000}, 0x1c) socket(0x2b, 0x80801, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0xfffffe81, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) gettid() r9 = socket(0xa, 0x1, 0x0) getsockopt(r9, 0x0, 0x1fcf51d8, 0x0, &(0x7f0000001ffc)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = eventfd2(0x0, 0x0) readv(r10, &(0x7f0000000500)=[{&(0x7f0000000000)=""/92, 0x5c}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x7f}, 0x10}, 0x94) 1.808023295s ago: executing program 4 (id=484): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c00"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff40bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) kexec_load(0x0, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = gettid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f00000000c0)={0x31, @tick=0x40, 0x4, {0x0, 0x2}, 0xa, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000040)={0x7, 0x7, 0x6, 0x2, 0x3, 0x824b}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r4, 0x80045300, 0x0) tkill(r3, 0x7) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0xae8}, 0x18) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2004000, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100030010651fbe347b2c2b00000c00018008000100", @ANYRES16=r7], 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000018000100001000000a0000e00000000044a5a49cbd67a5c233bf0008000000e0", @ANYRES32=r9, @ANYBLOB], 0x28}}, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000080)=@sr0, r9, &(0x7f00000001c0)='./file0\x00') r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r10) socket$can_raw(0x1d, 0x3, 0x1) 1.767777136s ago: executing program 1 (id=486): r0 = socket$nl_generic(0x10, 0x3, 0x10) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000710000009564"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='reclaim_retry_zone\x00', r2, 0x0, 0xfffffffffffffffa}, 0x18) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdb0cf81c000000180001801400020074756e6c30"], 0x2c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0900000015000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="f7ffffff000000000000000000000000000000000000000100000000"], 0x50) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYRES16=r3], 0x0, 0x0, 0xda, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x28, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINK={0x8, 0x5, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x18) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 1.749407306s ago: executing program 5 (id=487): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000007000000010001000900000001", @ANYRES16, @ANYBLOB="6ef686cf39de99e4e3fc22f4771e508a6dadbac8e565935fcd495e771cfc6b18dd7d38f364d5c4084f021682dc1f9a2428f7f6742515ddc55d2fa2c3b58f7b4909c70a318ca2bd4cdb83f1b29edbd8b311a3fe791772fc051ddf7751ce5aca7453dbad2aa3bc1868d951454e5805", @ANYRESHEX=0x0, @ANYBLOB="bec690acea0e2c52fa787d2eece1e922fb45930de3d433a219199e0ea3a13a2629c32df043e37e1a0fe057dbc370"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r4, 0x0, 0x7fffffffffffffff}, 0x18) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x440, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x414, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5ec888eb7598db49}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x2, 0x8, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63e4, 0x0, 0x8000, 0x8, 0x255, 0x6, 0x6, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0x2, 0x200, 0x1, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x3, 0x7c, 0xfffffffc, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0xe, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0xfffffff8, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x9, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x8e, 0x5, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x0, 0x955, 0x5, 0x6cdf13a0, 0x9, 0x3, 0x5, 0x10001, 0x80000001, 0x80000001, 0xed2, 0x5, 0xfffffffa, 0x2, 0x18d1, 0x0, 0xfffffffc, 0x9486, 0x80, 0x2, 0x80000000, 0xdb, 0x3, 0x80, 0xffff8000, 0x5, 0x8, 0x800007, 0x1, 0x2, 0x8, 0x2, 0x0, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x9, 0x1, 0x5, 0x283, 0xb, 0x4, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x4, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x800, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x81, 0x382ae49b, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0xfffffffb, 0x6, 0xfffffeff, 0x8dc3, 0x20000001, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x101, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x440}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, &(0x7f0000001000)={0xb}, 0x1) sendto$inet6(r7, &(0x7f0000000040)='l', 0xffe0, 0x8014, &(0x7f0000000100)={0xa, 0x4e23, 0x77, @loopback, 0x10000}, 0x1c) socket(0x2b, 0x80801, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0xfffffe81, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) gettid() socket(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = eventfd2(0x0, 0x0) readv(r9, &(0x7f0000000500)=[{&(0x7f0000000000)=""/92, 0x5c}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x7f}, 0x10}, 0x94) 1.714940777s ago: executing program 0 (id=488): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="07000000040000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, r3, 0x301, 0x70bd26, 0x25dfdbfc, {0x24}}, 0x14}}, 0x0) 1.708267287s ago: executing program 0 (id=489): ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x1, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x40010) sched_setaffinity(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c413300a1df29dfad2d72853ef4d3537a010a054df6bdcc72fc7efbe75b7c9ac6843ca0f18565b8c4b5ad08695dfdc0d54436bec96d3af05f398853a950491c7ae70c58cfb9a6e30d445d89edbc8d52b91b8cbc391a2295b87242bea76fa0ecff3162ba575d6292a124c0ddb0e24bd9063efbaf7d4f57e1542b26f5840c22c16eca1cb58ec02a0bf94fdec1cf23b725b2bbaae73e254f59e4373fc6111c4ecdb54512d14b242ea97669d7de253ae"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x0, 0x1e, &(0x7f0000000900)=ANY=[@ANYBLOB="180000007f000000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000181b0000", @ANYRES32=r3, @ANYBLOB="0000000000000000bf91000000000000b7110000000000008500000084000000b7615b8ac422cf0b95b15e5600e600ee0000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x0) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x88) r7 = socket$inet6(0xa, 0x3, 0x7) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r8}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x3, 0x7ffc1ffb}]}) r9 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r9, &(0x7f0000001200)={'#! ', './file0'}, 0xb) close(r9) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) 1.690073367s ago: executing program 1 (id=490): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) lsm_get_self_attr(0x0, &(0x7f0000000180)={0x0, 0x0, 0xba, 0x9a, ""/154}, &(0x7f00000004c0)=0xba, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 1.662318678s ago: executing program 1 (id=491): r0 = io_uring_setup(0x5594, &(0x7f0000000100)={0x0, 0x10000000, 0x1, 0x1, 0x1d2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000000000)=""/19, 0x13}, {0x0}], &(0x7f0000000200)=[0xba], 0x11a}, 0x20) syz_io_uring_setup(0x28dd, &(0x7f0000001300)={0x0, 0xa575, 0x100, 0x2, 0x28b, 0x0, r0}, &(0x7f0000001380)=0x0, &(0x7f00000013c0)) syz_io_uring_complete(r1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000007000000000000009641d350fea8740000008d3022348201f38f9408a25a9a9b27f7ae8fdc6729dcf4932f3be565464d6f53075fb98a10e8ae6ac57f5e34c894bc89c052c9cec6ee449b60235695802d79314f39e422ce91ad2941c4edb029503a0e0e5a77b6560e942f6214f0b68c607d9695f33c19292cc26767f36bab086194f7dee3879a29dc80b1f943853703fd446a4572b2108caf14f847db59ab288d9d3f55cdfbb2793b56eb26a4b3b396eccc5f3812c4728e2a7ec6c4bed3"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r4 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001c00)=@newqdisc={0x148, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x0, 0x7fff, 0x7ff, 0x19, 0x0, 0xb, 0x5}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000bc0)={0xffffffff, 0x4, 0x1, 'queue0\x00', 0x1}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000300000004"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r8}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70200000300", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r11, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r12 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r12}, 0x18) syz_emit_ethernet(0xd2, &(0x7f00000017c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa02aaaaaabb86dd69db1d84009c1100fc01000000000000000000000000004000000000000000000000ffff640101024e234e24009c90780100000003000000f1a0452613a2006f7373c111f4735715758cbff4d47b8671c8bd94adeb2cdf5f3b0124f7d92177d93f2fe63c764011faa3f74518167823dbbbfafd137ddd624580096115de5de82029e3abd4199bf79f2441db51d5bc8f9e24ed96d716e224ba0378e2e8d0af16fbf723923410bd8afb12ac4e36729d4109bc042bff7d2d4bbab92dd3c7dd9dec0bced35465"], 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r8}, &(0x7f0000000240), &(0x7f0000000440)=r10}, 0x20) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000003700)={{0x0, 0xf, 0x10001, 0x10000, 0x2, 0x3, 0x8, 0x2000, 0x1, 0x8000, 0x7, 0x59, 0x4, 0x9, 0xa9}}) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000004700)={r13, 0x1000}) socket$nl_netfilter(0x10, 0x3, 0xc) 1.488911711s ago: executing program 4 (id=492): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x88cc0, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x808, 0x0, 0xffffffffffffffff, 0x6}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1.379562653s ago: executing program 4 (id=493): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES16=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0) r5 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) read$ptp(r5, &(0x7f0000000280)=""/176, 0xb0) 1.343843104s ago: executing program 4 (id=494): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3f7, &(0x7f00000004c0)="$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") sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x34, 0xd, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8851}, 0x10) mkdir(&(0x7f0000000100)='./control\x00', 0x184) r2 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000004c0)=""/74, 0x4a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000008c0)=@newtaction={0xa0, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x8c, 0x1, [@m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4, 0xf5}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @loopback}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) r6 = syz_open_dev$loop(&(0x7f0000000180), 0x2, 0x101400) ioctl$BLKBSZGET(r6, 0x80081270, &(0x7f00000001c0)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x111080, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r7) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)={0xcc, r11, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x347}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x8000}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]]}, 0xcc}}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'veth1_to_hsr\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r10, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000a00)={0x150, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x1, 0x61}}}}, [@NL80211_ATTR_TESTDATA={0x1d, 0x45, "fd5bb4c0d1b921025b21fbce210be6d9589f79bed22db71ca9"}, @NL80211_ATTR_TESTDATA={0x75, 0x45, "5f0f19ee294fadddc63be2f3eb1795a271387acd4b9d4d3d8a9062ba10f2ed1e2181ea332f566f5aa5bfb117f68de1c375daf14e502802a6552996ed0b2b98a7241ffb8c2a7fd7322ba14181c136150fd59919b24a5fedd1eb6448c292b56799bf07f88a65f126c0bf0f5d558d731bd59d"}, @NL80211_ATTR_TESTDATA={0x8d, 0x45, "97a895420baabcd0460e2386d1bfe931b0a0c219b45c5607738813aa1bc48a132619a2348cc7f21f8de6915628886bf343cd73222ed57ea73d7e2204732dd0d00e18bf792e5536e45390fbbfc1cbdffea2800090a22b61ae9893699614ac3fc302d03712cbb13f3df2473bf9395399fd475896b6abda13d20f7535072455c328705e27deb0f53fbc84"}]}, 0x150}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r9, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r5, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x89ad, 0x62}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1000}, 0x20044810) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000240)={@id, 0x21, 0x0, '\x00', @c}) socket$inet6(0xa, 0x2, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 1.239152606s ago: executing program 1 (id=495): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1e, 0x2b, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000b00000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000ead26213a2ff91e362fac89004000000ef867314cbd3e0b46b1498be3fa1421cc662311f7c32d8ac06e65f39c043cc037c3c9a18e7aeb4f6689d5e5029465f8e9489a1cbf151bb1dd4ad2de093a762548428d4fa16988c6f4431e51936be989efe6b6f6b4a3e64ed3e4acaf8ad726555b62bbd215b00f381c17d6d4be819b8f487e39502c433a8214e7fbce72000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000007b8af8ff00000000bfa20000000027b30000070200f2a7ffffffb703000008000000b70400000000000085ddffffc200000095453a9e0000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0904000000000000000002000002540004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc0800014000000000140001800d00010073796e70726f7879000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a684238c73615e3179c45fdbd7aba232d3413a468e52e"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) io_setup(0x2007, &(0x7f0000000980)) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000340)='highspeed', 0x9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1.199133297s ago: executing program 0 (id=496): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x6}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) 1.154711278s ago: executing program 4 (id=497): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000002e45db1968ee74733017cc49815e4860000009c0000000bb2a134b2fc9bc5f30e30166270fb7b523193e1306ee5b13462917d42e329befb8fff14d51015efcf993e96222fab2b37925531ad04ef42e6f9e302"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf8}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) setreuid(0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32, @ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x1e, 0x2, 0x0) sendmsg$tipc(r5, &(0x7f0000000400)={&(0x7f00000003c0)=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4c840}, 0x4000001) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70300001c000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r7}, 0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r8) sendmsg$BATADV_CMD_GET_DAT_CACHE(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r9, 0x83625fc5352ba305}, 0x14}}, 0x2000040) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r9, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x40000000) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r10, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) setresgid(0xee01, 0x0, 0xee01) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x0) (fail_nth: 2) 1.146711218s ago: executing program 0 (id=498): r0 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000004c0), 0xfe, 0x269, &(0x7f0000000200)="$eJzs3b1rJGUcB/Df7EvWmBCiNja+gIhoIMRCEGy0UQhIEBFBhYiIlSRCTNqslY2FvUoqmyB2RkuxCTb3B+TuUuSaa8IVF+7grthjZnaPzWZDXvZljsznA7szz87ztrDfZyeQmQ2gtGYj4t2IqEbEXETUIyLprvBy/phtF7cmd5cjWq2P7yRZvbyc67SbiohmRLwdUesc29j5/ODe3gev/bRef/X3nc8mx/X+uh0e7H949NvSj38tvrlRab823d52v49hSvq8Vksinh3FYE+IpFb0DDifP6+nuX8uIl7J8l+PSjuyP69N/FePN37t327iaLzzBEah1aqn34HNFlA6lewcOKnMR0S+X6nMz+fn8DeqSXy7uvb93Der6ytfF71SAUOQNPO/e/ff/6fx91RP/m9X8/yfy1sjnikwEmn+P/lo+2a6f1QtejbAWLyQb9L8z325+XrIP5SO/EN5yT+Ul/zDFXDJ7Mo/lJf8Q3nJP1xh9c5Os+/hwfN/v/0fhJefIjBuM9mz738or578F3I9LlCM7vwDAOXSahR8ATJQmKLXHwAAAAAAAAAAAAAAAAAA4KStyd3lzmNcY/7/S8ThexFROz5+IztazX6POOKp7Pnpu0la7bEkbzaQL14asIMB/THkq6+XGherP3NruONf1LUXR9PvD8eLp97bbnMloplWXqjVTn7+k/bn70yn9v/MGQ3rX51vgGFJesrvfDre8Xs93C52/MW9iH/T9Weh3/pXieezbf/1Z7r7FsuX9N2DATsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgbB4FAAD//1eqcO0=") r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0x28}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fdatasync(0xffffffffffffffff) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r6, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0x3c, r6, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_USER_PRIO={0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x48040) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r4, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6558}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9200}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008010}, 0x4040091) r8 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet6_tcp_int(r8, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000480)=0x4) connect$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r10 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r10, &(0x7f0000000940)=[{&(0x7f0000000200)='\f7', 0x2}], 0x1) r11 = syz_clone3(0x0, 0x0) fcntl$lock(r9, 0x6, &(0x7f0000000540)={0x1, 0x4, 0x9, 0x1, r11}) listen(r2, 0x1) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10cd0e0, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 952.283972ms ago: executing program 3 (id=499): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80400) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000e4074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x18) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2b10", 0x2}], 0x1, 0x0, 0x0, 0x2c}, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r3, 0x89a2, &(0x7f0000000000)={'geneve1\x00', @ifru_addrs=@nl=@unspec}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) (fail_nth: 3) 872.722413ms ago: executing program 5 (id=500): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="07000000040000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, r3, 0x301, 0x70bd26, 0x25dfdbfc, {0x24}}, 0x14}}, 0x0) 824.774764ms ago: executing program 0 (id=501): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80400) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000e4074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x18) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2b10", 0x2}], 0x1, 0x0, 0x0, 0x2c}, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r3, 0x89a2, &(0x7f0000000000)={'geneve1\x00', @ifru_addrs=@nl=@unspec}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 824.588354ms ago: executing program 5 (id=502): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000180)=0xfffffffa, 0x4) wait4(0xffffffffffffffff, 0x0, 0x8, 0x0) ftruncate(r1, 0x5) 767.588485ms ago: executing program 4 (id=503): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='highspeed', 0x9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 555.749009ms ago: executing program 5 (id=504): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x15, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0x20) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x5}, 0x18) timer_settime(0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) 529.87926ms ago: executing program 0 (id=505): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x9, 0xa9, 0x596, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xb}, 0x700, 0x8759, 0x10, 0x7}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x8, [@typedef={0x5, 0x0, 0x0, 0x8, 0x2}, @float={0x1, 0x0, 0x0, 0x10, 0xe}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x9, [{0x6, 0x3, 0x9}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x7}}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x3, 0x2}]}, {0x0, [0x0, 0x61, 0x5f, 0x30, 0x1e, 0x0]}}, &(0x7f0000000340)=""/99, 0x78, 0x63, 0x1, 0x8, 0x10000}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x4, '\x00', r2, r3, 0x0, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[r4], 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa26593772f99d877}, 0x28) lgetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)=@random={'user.', 'ip6gre0\x00'}, &(0x7f0000000800)=""/153, 0x99) r5 = io_uring_setup(0x7b7, &(0x7f0000000080)={0x0, 0xd3b8, 0x8, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r6, 0x0, 0x0) syz_pidfd_open(r6, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x0, 0x1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="1400020000000000080008007003000000000000000000000000000025f651c18a7d8611445540b85389b6c492a288eb16086bcbe56f42c361e5109b7c6f7c69a67acd7a6c4499ebb133dd6343c995ca8222f5f2fe114a81566c22de4e58890f7f287d6bf08ae0e71e7c677cce225c83e5bb81c970906d33646077c895c76e54ce7ed7023c03f3596503d8f643991f2495f51e9a85ee34adbd53f58a2146bdb78e300411b6171d95a27d4da4aa3fe7fa1edf1a4f83e6a211437d78dd98d4da32533bc16b042121aed367a86bcacf1f3a9b"], 0x34}}, 0x0) 476.62885ms ago: executing program 33 (id=505): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x9, 0xa9, 0x596, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xb}, 0x700, 0x8759, 0x10, 0x7}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x8, [@typedef={0x5, 0x0, 0x0, 0x8, 0x2}, @float={0x1, 0x0, 0x0, 0x10, 0xe}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x9, [{0x6, 0x3, 0x9}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x7}}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x3, 0x2}]}, {0x0, [0x0, 0x61, 0x5f, 0x30, 0x1e, 0x0]}}, &(0x7f0000000340)=""/99, 0x78, 0x63, 0x1, 0x8, 0x10000}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x4, '\x00', r2, r3, 0x0, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[r4], 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa26593772f99d877}, 0x28) lgetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)=@random={'user.', 'ip6gre0\x00'}, &(0x7f0000000800)=""/153, 0x99) r5 = io_uring_setup(0x7b7, &(0x7f0000000080)={0x0, 0xd3b8, 0x8, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r6, 0x0, 0x0) syz_pidfd_open(r6, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x0, 0x1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="1400020000000000080008007003000000000000000000000000000025f651c18a7d8611445540b85389b6c492a288eb16086bcbe56f42c361e5109b7c6f7c69a67acd7a6c4499ebb133dd6343c995ca8222f5f2fe114a81566c22de4e58890f7f287d6bf08ae0e71e7c677cce225c83e5bb81c970906d33646077c895c76e54ce7ed7023c03f3596503d8f643991f2495f51e9a85ee34adbd53f58a2146bdb78e300411b6171d95a27d4da4aa3fe7fa1edf1a4f83e6a211437d78dd98d4da32533bc16b042121aed367a86bcacf1f3a9b"], 0x34}}, 0x0) 474.093521ms ago: executing program 1 (id=507): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) getitimer(0x1, &(0x7f0000000380)) 415.598931ms ago: executing program 1 (id=508): r0 = fsopen(&(0x7f0000000400)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001800)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0x400ff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2004, @fd=r1, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) unshare(0x28000600) r5 = syz_open_dev$loop(&(0x7f0000000940), 0x7, 0x80000) fadvise64(r5, 0xa4, 0x7, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20048054) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000a000000050004000000000010000300686173683a6970"], 0x5c}}, 0x0) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x226a, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRES16=r0, @ANYRES16=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000009, 0x4082172, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) 415.473122ms ago: executing program 34 (id=508): r0 = fsopen(&(0x7f0000000400)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001800)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0x400ff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2004, @fd=r1, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) unshare(0x28000600) r5 = syz_open_dev$loop(&(0x7f0000000940), 0x7, 0x80000) fadvise64(r5, 0xa4, 0x7, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20048054) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000a000000050004000000000010000300686173683a6970"], 0x5c}}, 0x0) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x226a, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRES16=r0, @ANYRES16=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000009, 0x4082172, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) 272.614665ms ago: executing program 5 (id=510): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000007000000010001000900000001", @ANYRES16, @ANYBLOB="6ef686cf39de99e4e3fc22f4771e508a6dadbac8e565935fcd495e771cfc6b18dd7d38f364d5c4084f021682dc1f9a2428f7f6742515ddc55d2fa2c3b58f7b4909c70a318ca2bd4cdb83f1b29edbd8b311a3fe791772fc051ddf7751ce5aca7453dbad2aa3bc1868d951454e5805", @ANYRESHEX=0x0, @ANYBLOB="bec690acea0e2c52fa787d2eece1e922fb45930de3d433a219199e0ea3a13a2629c32df043e37e1a0fe057dbc370"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r4, 0x0, 0x7fffffffffffffff}, 0x18) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x440, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x414, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5ec888eb7598db49}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x2, 0x8, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63e4, 0x0, 0x8000, 0x8, 0x255, 0x6, 0x6, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0x2, 0x200, 0x1, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x3, 0x7c, 0xfffffffc, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0xe, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0xfffffff8, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x9, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x8e, 0x5, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x0, 0x955, 0x5, 0x6cdf13a0, 0x9, 0x3, 0x5, 0x10001, 0x80000001, 0x80000001, 0xed2, 0x5, 0xfffffffa, 0x2, 0x18d1, 0x0, 0xfffffffc, 0x9486, 0x80, 0x2, 0x80000000, 0xdb, 0x3, 0x80, 0xffff8000, 0x5, 0x8, 0x800007, 0x1, 0x2, 0x8, 0x2, 0x0, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x9, 0x1, 0x5, 0x283, 0xb, 0x4, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x4, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x800, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x81, 0x382ae49b, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0xfffffffb, 0x6, 0xfffffeff, 0x8dc3, 0x20000001, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x101, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x440}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, &(0x7f0000001000)={0xb}, 0x1) sendto$inet6(r7, &(0x7f0000000040)='l', 0xffe0, 0x8014, &(0x7f0000000100)={0xa, 0x4e23, 0x77, @loopback, 0x10000}, 0x1c) socket(0x2b, 0x80801, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0xfffffe81, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) gettid() socket(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = eventfd2(0x0, 0x0) readv(r9, &(0x7f0000000500)=[{&(0x7f0000000000)=""/92, 0x5c}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x7f}, 0x10}, 0x94) 96.857338ms ago: executing program 3 (id=511): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1e, 0x2b, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000b00000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000ead26213a2ff91e362fac89004000000ef867314cbd3e0b46b1498be3fa1421cc662311f7c32d8ac06e65f39c043cc037c3c9a18e7aeb4f6689d5e5029465f8e9489a1cbf151bb1dd4ad2de093a762548428d4fa16988c6f4431e51936be989efe6b6f6b4a3e64ed3e4acaf8ad726555b62bbd215b00f381c17d6d4be819b8f487e39502c433a8214e7fbce72000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000007b8af8ff00000000bfa20000000027b30000070200f2a7ffffffb703000008000000b70400000000000085ddffffc200000095453a9e0000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0904000000000000000002000002540004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc0800014000000000140001800d00010073796e70726f7879000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a684238c73615e3179c45fdbd7aba232d3413a468e52e"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) io_setup(0x2007, &(0x7f0000000980)) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000340)='highspeed', 0x9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x18) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) 0s ago: executing program 3 (id=512): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1e, 0x2b, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000b00000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000ead26213a2ff91e362fac89004000000ef867314cbd3e0b46b1498be3fa1421cc662311f7c32d8ac06e65f39c043cc037c3c9a18e7aeb4f6689d5e5029465f8e9489a1cbf151bb1dd4ad2de093a762548428d4fa16988c6f4431e51936be989efe6b6f6b4a3e64ed3e4acaf8ad726555b62bbd215b00f381c17d6d4be819b8f487e39502c433a8214e7fbce72000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000007b8af8ff00000000bfa20000000027b30000070200f2a7ffffffb703000008000000b70400000000000085ddffffc200000095453a9e0000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0904000000000000000002000002540004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc0800014000000000140001800d00010073796e70726f7879000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a684238c73615e3179c45fdbd7aba232d3413a468e52e"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) io_setup(0x2007, &(0x7f0000000980)) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000340)='highspeed', 0x9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x18) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$tipc(0x1e, 0x5, 0x0) kernel console output (not intermixed with test programs): 6kB (U) 1*512kB (U) 2*1024kB (UE) 3*2048kB (UME) 1076*4096kB (M) = 4416680kB [ 42.866017][ T3627] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 42.875356][ T3627] 11072 total pagecache pages [ 42.880124][ T3627] 0 pages in swap cache [ 42.884302][ T3627] Free swap = 124996kB [ 42.888501][ T3627] Total swap = 124996kB [ 42.892692][ T3627] 2097051 pages RAM [ 42.896593][ T3627] 0 pages HighMem/MovableOnly [ 42.901297][ T3627] 80446 pages reserved [ 42.928141][ T3642] netlink: 24 bytes leftover after parsing attributes in process `syz.3.51'. [ 42.975310][ T3642] loop3: detected capacity change from 0 to 128 [ 42.983187][ T3640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.50'. [ 42.992091][ T3640] netlink: 'syz.2.50': attribute type 30 has an invalid length. [ 43.003432][ T3642] FAT-fs (loop3): bogus sectors per cluster 0 [ 43.009657][ T3642] FAT-fs (loop3): Can't find a valid FAT filesystem [ 43.029744][ T56] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.039092][ T56] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.047871][ T3640] Zero length message leads to an empty skb [ 43.059379][ T56] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.150587][ T56] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.272796][ T3652] loop2: detected capacity change from 0 to 1024 [ 43.314666][ T3652] ======================================================= [ 43.314666][ T3652] WARNING: The mand mount option has been deprecated and [ 43.314666][ T3652] and is ignored by this kernel. Remove the mand [ 43.314666][ T3652] option from the mount to silence this warning. [ 43.314666][ T3652] ======================================================= [ 43.512783][ T3652] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 43.594998][ T3652] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.708269][ T3659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.57'. [ 43.800184][ T3651] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm syz.2.55: lblock 0 mapped to illegal pblock 0 (length 1) [ 43.822607][ T3662] ALSA: seq fatal error: cannot create timer (-22) [ 43.847997][ T3651] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 43.860354][ T3651] EXT4-fs (loop2): This should not happen!! Data will be lost [ 43.860354][ T3651] [ 43.922398][ T3652] netlink: 'syz.2.55': attribute type 1 has an invalid length. [ 43.957284][ T3651] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm syz.2.55: lblock 1 mapped to illegal pblock 1 (length 3) [ 43.996356][ T3651] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117 [ 44.009623][ T3651] EXT4-fs (loop2): This should not happen!! Data will be lost [ 44.009623][ T3651] [ 44.115191][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 44.224853][ T3690] netlink: 'syz.2.67': attribute type 21 has an invalid length. [ 44.276478][ T3690] loop2: detected capacity change from 0 to 1024 [ 44.294188][ T3690] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 44.305189][ T3690] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 44.346439][ T3690] JBD2: no valid journal superblock found [ 44.352225][ T3690] EXT4-fs (loop2): Could not load journal inode [ 44.408108][ T3690] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 44.530058][ T29] kauditd_printk_skb: 640 callbacks suppressed [ 44.530079][ T29] audit: type=1326 audit(1759225458.162:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.2.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a299eec9 code=0x7ffc0000 [ 44.559631][ T29] audit: type=1326 audit(1759225458.172:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.2.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fa4a299eec9 code=0x7ffc0000 [ 44.583179][ T29] audit: type=1326 audit(1759225458.172:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.2.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a299eec9 code=0x7ffc0000 [ 44.606633][ T29] audit: type=1326 audit(1759225458.172:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.2.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a299eec9 code=0x7ffc0000 [ 44.629834][ T29] audit: type=1326 audit(1759225458.172:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.2.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa4a299eec9 code=0x7ffc0000 [ 44.654715][ T29] audit: type=1326 audit(1759225458.172:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.2.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a299eec9 code=0x7ffc0000 [ 44.678220][ T29] audit: type=1326 audit(1759225458.172:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.2.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a299eec9 code=0x7ffc0000 [ 44.701421][ T29] audit: type=1326 audit(1759225458.172:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.2.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa4a299eec9 code=0x7ffc0000 [ 44.725240][ T29] audit: type=1326 audit(1759225458.172:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.2.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a299eec9 code=0x7ffc0000 [ 44.748696][ T29] audit: type=1326 audit(1759225458.172:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.2.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa4a299eec9 code=0x7ffc0000 [ 44.810672][ T3725] loop0: detected capacity change from 0 to 512 [ 44.817915][ T3725] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 44.846646][ T3725] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 44.854727][ T3725] EXT4-fs (loop0): orphan cleanup on readonly fs [ 44.863874][ T3725] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.74: corrupted inode contents [ 44.864259][ T3733] loop1: detected capacity change from 0 to 512 [ 44.875985][ T3725] EXT4-fs (loop0): Remounting filesystem read-only [ 44.889468][ T3725] EXT4-fs (loop0): 1 truncate cleaned up [ 44.895323][ T56] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 44.905908][ T56] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 44.944066][ T56] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 44.956131][ T3733] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.974842][ T3725] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.990783][ T3725] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 44.996114][ T3740] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 45.028518][ T3733] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.127106][ T3733] __nla_validate_parse: 4 callbacks suppressed [ 45.127122][ T3733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.78'. [ 45.145914][ T3747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.168181][ T3747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.178383][ T3748] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.78: corrupted inode contents [ 45.179545][ T3747] netlink: 52 bytes leftover after parsing attributes in process `syz.2.83'. [ 45.201477][ T3747] FAULT_INJECTION: forcing a failure. [ 45.201477][ T3747] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 45.214593][ T3747] CPU: 0 UID: 0 PID: 3747 Comm: syz.2.83 Not tainted syzkaller #0 PREEMPT(voluntary) [ 45.214618][ T3747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 45.214630][ T3747] Call Trace: [ 45.214635][ T3747] [ 45.214642][ T3747] __dump_stack+0x1d/0x30 [ 45.214669][ T3747] dump_stack_lvl+0xe8/0x140 [ 45.214689][ T3747] dump_stack+0x15/0x1b [ 45.214706][ T3747] should_fail_ex+0x265/0x280 [ 45.214736][ T3747] should_fail+0xb/0x20 [ 45.214765][ T3747] should_fail_usercopy+0x1a/0x20 [ 45.214797][ T3747] _copy_from_iter+0xd2/0xe80 [ 45.214830][ T3747] ? __build_skb_around+0x1a0/0x200 [ 45.214937][ T3747] ? __alloc_skb+0x223/0x320 [ 45.215011][ T3747] netlink_sendmsg+0x471/0x6b0 [ 45.215043][ T3747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 45.215073][ T3747] __sock_sendmsg+0x145/0x180 [ 45.215138][ T3747] __sys_sendto+0x268/0x330 [ 45.215218][ T3747] __x64_sys_sendto+0x76/0x90 [ 45.215246][ T3747] x64_sys_call+0x2d05/0x2ff0 [ 45.215268][ T3747] do_syscall_64+0xd2/0x200 [ 45.215297][ T3747] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 45.215344][ T3747] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 45.215396][ T3747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.215419][ T3747] RIP: 0033:0x7fa4a299eec9 [ 45.215435][ T3747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.215454][ T3747] RSP: 002b:00007fa4a1407038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 45.215479][ T3747] RAX: ffffffffffffffda RBX: 00007fa4a2bf5fa0 RCX: 00007fa4a299eec9 [ 45.215513][ T3747] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000005 [ 45.215527][ T3747] RBP: 00007fa4a1407090 R08: 0000000000000000 R09: 0000000000000000 [ 45.215540][ T3747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.215553][ T3747] R13: 00007fa4a2bf6038 R14: 00007fa4a2bf5fa0 R15: 00007ffc99e67ea8 [ 45.215574][ T3747] [ 45.216146][ T3748] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.78: mark_inode_dirty error [ 45.429301][ T3748] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.78: corrupted inode contents [ 45.559807][ T3753] loop4: detected capacity change from 0 to 512 [ 45.578647][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.597872][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.612676][ T3753] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.628823][ T3753] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.692772][ T3763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.89'. [ 45.702379][ T3763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.710071][ T3763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.717958][ T3763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.725388][ T3763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.768768][ T3772] netlink: 132 bytes leftover after parsing attributes in process `syz.2.91'. [ 45.797762][ T3774] FAULT_INJECTION: forcing a failure. [ 45.797762][ T3774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 45.810981][ T3774] CPU: 1 UID: 0 PID: 3774 Comm: syz.2.92 Not tainted syzkaller #0 PREEMPT(voluntary) [ 45.811008][ T3774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 45.811022][ T3774] Call Trace: [ 45.811029][ T3774] [ 45.811038][ T3774] __dump_stack+0x1d/0x30 [ 45.811085][ T3774] dump_stack_lvl+0xe8/0x140 [ 45.811108][ T3774] dump_stack+0x15/0x1b [ 45.811134][ T3775] loop1: detected capacity change from 0 to 512 [ 45.811129][ T3774] should_fail_ex+0x265/0x280 [ 45.811167][ T3774] should_fail+0xb/0x20 [ 45.811195][ T3774] should_fail_usercopy+0x1a/0x20 [ 45.811315][ T3774] strncpy_from_user+0x25/0x230 [ 45.811347][ T3774] ? kmem_cache_alloc_noprof+0x186/0x310 [ 45.811491][ T3774] ? getname_flags+0x80/0x3b0 [ 45.811534][ T3774] getname_flags+0xae/0x3b0 [ 45.811634][ T3774] path_removexattrat+0xf5/0x570 [ 45.811694][ T3774] __x64_sys_lremovexattr+0x3b/0x50 [ 45.811732][ T3774] x64_sys_call+0x2e23/0x2ff0 [ 45.811765][ T3774] do_syscall_64+0xd2/0x200 [ 45.811792][ T3774] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 45.811826][ T3774] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 45.811871][ T3774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.811952][ T3774] RIP: 0033:0x7fa4a299eec9 [ 45.811972][ T3774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.811998][ T3774] RSP: 002b:00007fa4a1407038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c6 [ 45.812039][ T3774] RAX: ffffffffffffffda RBX: 00007fa4a2bf5fa0 RCX: 00007fa4a299eec9 [ 45.812057][ T3774] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000000000 [ 45.812079][ T3774] RBP: 00007fa4a1407090 R08: 0000000000000000 R09: 0000000000000000 [ 45.812096][ T3774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.812112][ T3774] R13: 00007fa4a2bf6038 R14: 00007fa4a2bf5fa0 R15: 00007ffc99e67ea8 [ 45.812140][ T3774] [ 45.946921][ T3783] loop3: detected capacity change from 0 to 128 [ 46.020569][ T3775] EXT4-fs warning (device loop1): ext4_enable_quotas:7178: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 46.060775][ T3775] EXT4-fs (loop1): mount failed [ 46.124696][ T3783] syz.3.95: attempt to access beyond end of device [ 46.124696][ T3783] loop3: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 46.157062][ T3783] syz.3.95: attempt to access beyond end of device [ 46.157062][ T3783] loop3: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 46.170587][ T3783] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 46.226054][ T3783] syz.3.95: attempt to access beyond end of device [ 46.226054][ T3783] loop3: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 46.275329][ T3783] syz.3.95: attempt to access beyond end of device [ 46.275329][ T3783] loop3: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 46.288880][ T3783] Buffer I/O error on dev loop3, logical block 84, lost async page write [ 46.297856][ T3791] loop0: detected capacity change from 0 to 512 [ 46.308557][ T3791] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.308634][ T3791] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.405384][ T3793] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 46.431608][ T3793] pim6reg1: linktype set to 776 [ 46.480184][ T3783] syz.3.95: attempt to access beyond end of device [ 46.480184][ T3783] loop3: rw=2049, sector=186, nr_sectors = 8 limit=128 [ 46.525612][ T3783] syz.3.95: attempt to access beyond end of device [ 46.525612][ T3783] loop3: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 46.539046][ T3783] Buffer I/O error on dev loop3, logical block 96, lost async page write [ 46.553668][ T3783] syz.3.95: attempt to access beyond end of device [ 46.553668][ T3783] loop3: rw=2049, sector=194, nr_sectors = 8 limit=128 [ 46.570024][ T3783] syz.3.95: attempt to access beyond end of device [ 46.570024][ T3783] loop3: rw=2049, sector=200, nr_sectors = 2 limit=128 [ 46.583411][ T3783] Buffer I/O error on dev loop3, logical block 100, lost async page write [ 46.669753][ T3783] syz.3.95: attempt to access beyond end of device [ 46.669753][ T3783] loop3: rw=2049, sector=218, nr_sectors = 8 limit=128 [ 46.722416][ T3783] syz.3.95: attempt to access beyond end of device [ 46.722416][ T3783] loop3: rw=2049, sector=224, nr_sectors = 2 limit=128 [ 46.735766][ T3783] Buffer I/O error on dev loop3, logical block 112, lost async page write [ 46.882538][ T3783] Buffer I/O error on dev loop3, logical block 116, lost async page write [ 46.898608][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.292583][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.319316][ T3810] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 47.341301][ T3812] loop4: detected capacity change from 0 to 512 [ 47.372871][ T3815] loop0: detected capacity change from 0 to 1024 [ 47.383221][ T3815] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 47.401640][ T3815] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.105: Invalid block bitmap block 0 in block_group 0 [ 47.430479][ T3815] EXT4-fs error (device loop0): ext4_acquire_dquot:6943: comm syz.0.105: Failed to acquire dquot type 0 [ 47.442769][ T3815] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.105: Freeing blocks not in datazone - block = 0, count = 4096 [ 47.456389][ T3815] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.105: Invalid inode bitmap blk 0 in block_group 0 [ 47.470990][ T3823] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 47.489454][ T315] EXT4-fs error (device loop0): ext4_release_dquot:6979: comm kworker/u8:5: Failed to release dquot type 0 [ 47.501559][ T3815] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 47.510913][ T3815] EXT4-fs (loop0): 1 orphan inode deleted [ 47.517985][ T3815] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.533843][ T3815] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.546187][ T3815] can0: slcan on ttyS3. [ 47.626466][ T3815] can0 (unregistered): slcan off ttyS3. [ 47.937501][ T3815] syz.0.105 (3815) used greatest stack depth: 9312 bytes left [ 48.198322][ T3838] FAULT_INJECTION: forcing a failure. [ 48.198322][ T3838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.211568][ T3838] CPU: 0 UID: 0 PID: 3838 Comm: syz.3.113 Not tainted syzkaller #0 PREEMPT(voluntary) [ 48.211600][ T3838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 48.211614][ T3838] Call Trace: [ 48.211662][ T3838] [ 48.211671][ T3838] __dump_stack+0x1d/0x30 [ 48.211697][ T3838] dump_stack_lvl+0xe8/0x140 [ 48.211734][ T3838] dump_stack+0x15/0x1b [ 48.211755][ T3838] should_fail_ex+0x265/0x280 [ 48.211794][ T3838] should_fail+0xb/0x20 [ 48.211826][ T3838] should_fail_usercopy+0x1a/0x20 [ 48.211864][ T3838] _copy_from_user+0x1c/0xb0 [ 48.211928][ T3838] __sys_connect+0xd0/0x2b0 [ 48.211970][ T3838] __x64_sys_connect+0x3f/0x50 [ 48.211993][ T3838] x64_sys_call+0x2c08/0x2ff0 [ 48.212099][ T3838] do_syscall_64+0xd2/0x200 [ 48.212124][ T3838] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 48.212187][ T3838] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 48.212335][ T3838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.212360][ T3838] RIP: 0033:0x7f9d6ee8eec9 [ 48.212428][ T3838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.212452][ T3838] RSP: 002b:00007f9d6d8ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 48.212476][ T3838] RAX: ffffffffffffffda RBX: 00007f9d6f0e5fa0 RCX: 00007f9d6ee8eec9 [ 48.212574][ T3838] RDX: 000000000000001e RSI: 0000200000000100 RDI: 0000000000000005 [ 48.212589][ T3838] RBP: 00007f9d6d8ef090 R08: 0000000000000000 R09: 0000000000000000 [ 48.212605][ T3838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.212620][ T3838] R13: 00007f9d6f0e6038 R14: 00007f9d6f0e5fa0 R15: 00007ffee55ea018 [ 48.212644][ T3838] [ 48.453877][ T3841] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 48.529965][ T3849] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 48.999496][ T3859] ref_ctr increment failed for inode: 0x87 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810005dc00 [ 49.015920][ T3859] uprobe: syz.2.118:3859 failed to unregister, leaking uprobe [ 49.275523][ T3879] FAULT_INJECTION: forcing a failure. [ 49.275523][ T3879] name failslab, interval 1, probability 0, space 0, times 0 [ 49.279028][ T3873] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 49.288277][ T3879] CPU: 1 UID: 0 PID: 3879 Comm: syz.2.125 Not tainted syzkaller #0 PREEMPT(voluntary) [ 49.288354][ T3879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 49.288372][ T3879] Call Trace: [ 49.288382][ T3879] [ 49.288393][ T3879] __dump_stack+0x1d/0x30 [ 49.288491][ T3879] dump_stack_lvl+0xe8/0x140 [ 49.288519][ T3879] dump_stack+0x15/0x1b [ 49.288637][ T3879] should_fail_ex+0x265/0x280 [ 49.288680][ T3879] should_failslab+0x8c/0xb0 [ 49.288717][ T3879] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 49.288760][ T3879] ? __d_alloc+0x3d/0x340 [ 49.288813][ T3879] __d_alloc+0x3d/0x340 [ 49.288846][ T3879] ? mpol_shared_policy_init+0xbd/0x4c0 [ 49.288885][ T3879] d_alloc_pseudo+0x1e/0x80 [ 49.288986][ T3879] alloc_file_pseudo+0x71/0x160 [ 49.289037][ T3879] __shmem_file_setup+0x1de/0x210 [ 49.289089][ T3879] shmem_file_setup+0x3b/0x50 [ 49.289192][ T3879] __se_sys_memfd_create+0x2c3/0x590 [ 49.289226][ T3879] __x64_sys_memfd_create+0x31/0x40 [ 49.289257][ T3879] x64_sys_call+0x2abe/0x2ff0 [ 49.289289][ T3879] do_syscall_64+0xd2/0x200 [ 49.289317][ T3879] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 49.289371][ T3879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.289402][ T3879] RIP: 0033:0x7fa4a299eec9 [ 49.289425][ T3879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.289449][ T3879] RSP: 002b:00007fa4a1406e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 49.289530][ T3879] RAX: ffffffffffffffda RBX: 0000000000000214 RCX: 00007fa4a299eec9 [ 49.289548][ T3879] RDX: 00007fa4a1406ef0 RSI: 0000000000000000 RDI: 00007fa4a2a22960 [ 49.289566][ T3879] RBP: 0000200000000840 R08: 00007fa4a1406bb7 R09: 00007fa4a1406e40 [ 49.289584][ T3879] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 49.289636][ T3879] R13: 00007fa4a1406ef0 R14: 00007fa4a1406eb0 R15: 00002000000002c0 [ 49.289667][ T3879] [ 49.488443][ T3873] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 49.496024][ T3873] vhci_hcd vhci_hcd.0: Device attached [ 49.519381][ T3878] usbip_core: unknown command [ 49.524213][ T3878] vhci_hcd: unknown pdu 0 [ 49.528616][ T3878] usbip_core: unknown command [ 49.539693][ T315] vhci_hcd: stop threads [ 49.544025][ T315] vhci_hcd: release socket [ 49.548563][ T315] vhci_hcd: disconnect device [ 49.629849][ T29] kauditd_printk_skb: 500 callbacks suppressed [ 49.629999][ T29] audit: type=1326 audit(1759225463.282:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3889 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d344eec9 code=0x7ffc0000 [ 49.723649][ T29] audit: type=1400 audit(1759225463.322:1254): avc: denied { write } for pid=3881 comm="syz.4.128" path="socket:[6536]" dev="sockfs" ino=6536 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 49.746892][ T29] audit: type=1326 audit(1759225463.332:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3889 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f22d344eec9 code=0x7ffc0000 [ 49.770240][ T29] audit: type=1326 audit(1759225463.332:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3889 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d344eec9 code=0x7ffc0000 [ 49.793823][ T29] audit: type=1326 audit(1759225463.332:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3889 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d344eec9 code=0x7ffc0000 [ 49.817183][ T29] audit: type=1326 audit(1759225463.332:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3889 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f22d344eec9 code=0x7ffc0000 [ 49.840490][ T29] audit: type=1326 audit(1759225463.332:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3889 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d344eec9 code=0x7ffc0000 [ 49.863952][ T29] audit: type=1326 audit(1759225463.332:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3889 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d344eec9 code=0x7ffc0000 [ 49.887443][ T29] audit: type=1326 audit(1759225463.332:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3889 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f22d344eec9 code=0x7ffc0000 [ 49.910823][ T29] audit: type=1326 audit(1759225463.332:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3889 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d344eec9 code=0x7ffc0000 [ 49.958595][ T3899] hub 6-0:1.0: USB hub found [ 49.963313][ T3899] hub 6-0:1.0: 8 ports detected [ 49.978139][ T3904] loop2: detected capacity change from 0 to 1024 [ 50.008644][ T3904] EXT4-fs: Ignoring removed bh option [ 50.014258][ T3904] EXT4-fs: inline encryption not supported [ 50.022840][ T3904] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 50.041361][ T3904] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 50.058230][ T3904] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.134: lblock 2 mapped to illegal pblock 2 (length 1) [ 50.090790][ T3904] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.134: lblock 0 mapped to illegal pblock 48 (length 1) [ 50.105137][ T3904] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.134: Failed to acquire dquot type 0 [ 50.140857][ T3904] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 50.151029][ T3904] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.134: mark_inode_dirty error [ 50.166464][ T3904] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 50.177555][ T3904] EXT4-fs (loop2): 1 orphan inode deleted [ 50.183779][ T3904] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.197095][ T51] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 50.212269][ T51] EXT4-fs error (device loop2): ext4_release_dquot:6979: comm kworker/u8:3: Failed to release dquot type 0 [ 50.229556][ T3926] SELinux: Context ELF is not valid (left unmapped). [ 50.240959][ T3904] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 16: comm syz.2.134: lblock 0 mapped to illegal pblock 16 (length 1) [ 50.300298][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.327544][ T3934] netlink: 10 bytes leftover after parsing attributes in process `syz.0.145'. [ 50.329069][ T3307] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 50.351378][ T3934] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10000 sclass=netlink_route_socket pid=3934 comm=syz.0.145 [ 50.427564][ T3307] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 50.442994][ T3307] EXT4-fs error (device loop2): ext4_quota_off:7227: inode #3: comm syz-executor: mark_inode_dirty error [ 50.725438][ T3963] process '' launched './file1' with NULL argv: empty string added [ 50.787655][ T3971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.799200][ T3971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.845680][ T3971] infiniband !yz!: set active [ 50.850540][ T3971] infiniband !yz!: added team_slave_0 [ 50.862261][ T3973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.875504][ T3973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.893951][ T3971] RDS/IB: !yz!: added [ 50.898178][ T3971] smc: adding ib device !yz! with port count 1 [ 50.904443][ T3971] smc: ib device !yz! port 1 has pnetid [ 50.933178][ T3976] loop3: detected capacity change from 0 to 8192 [ 50.946172][ T3976] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 51.000223][ T3976] netlink: 64 bytes leftover after parsing attributes in process `syz.3.157'. [ 51.080036][ T3982] bridge_slave_0: left allmulticast mode [ 51.085741][ T3982] bridge_slave_0: left promiscuous mode [ 51.091678][ T3982] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.103323][ T3982] bridge_slave_1: left allmulticast mode [ 51.109084][ T3982] bridge_slave_1: left promiscuous mode [ 51.114775][ T3982] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.127983][ T3982] bond0: (slave bond_slave_0): Releasing backup interface [ 51.138225][ T3982] bond0: (slave bond_slave_1): Releasing backup interface [ 51.150588][ T3982] team0: Port device team_slave_0 removed [ 51.159722][ T3982] team0: Port device team_slave_1 removed [ 51.397951][ T3986] FAULT_INJECTION: forcing a failure. [ 51.397951][ T3986] name failslab, interval 1, probability 0, space 0, times 0 [ 51.410779][ T3986] CPU: 1 UID: 0 PID: 3986 Comm: syz.1.159 Not tainted syzkaller #0 PREEMPT(voluntary) [ 51.410834][ T3986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 51.410847][ T3986] Call Trace: [ 51.410854][ T3986] [ 51.410862][ T3986] __dump_stack+0x1d/0x30 [ 51.410885][ T3986] dump_stack_lvl+0xe8/0x140 [ 51.410962][ T3986] dump_stack+0x15/0x1b [ 51.410979][ T3986] should_fail_ex+0x265/0x280 [ 51.411064][ T3986] ? copy_net_ns+0x13d/0x3b0 [ 51.411084][ T3986] should_failslab+0x8c/0xb0 [ 51.411112][ T3986] __kmalloc_cache_noprof+0x4c/0x320 [ 51.411147][ T3986] copy_net_ns+0x13d/0x3b0 [ 51.411204][ T3986] create_new_namespaces+0x20e/0x3d0 [ 51.411241][ T3986] unshare_nsproxy_namespaces+0xe8/0x120 [ 51.411276][ T3986] ksys_unshare+0x3d0/0x6d0 [ 51.411307][ T3986] ? ksys_write+0x192/0x1a0 [ 51.411352][ T3986] __x64_sys_unshare+0x1f/0x30 [ 51.411383][ T3986] x64_sys_call+0x2911/0x2ff0 [ 51.411405][ T3986] do_syscall_64+0xd2/0x200 [ 51.411458][ T3986] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 51.411485][ T3986] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 51.411520][ T3986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.411573][ T3986] RIP: 0033:0x7f22d344eec9 [ 51.411589][ T3986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.411690][ T3986] RSP: 002b:00007f22d1e96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 51.411710][ T3986] RAX: ffffffffffffffda RBX: 00007f22d36a6090 RCX: 00007f22d344eec9 [ 51.411723][ T3986] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042000000 [ 51.411736][ T3986] RBP: 00007f22d1e96090 R08: 0000000000000000 R09: 0000000000000000 [ 51.411823][ T3986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.411835][ T3986] R13: 00007f22d36a6128 R14: 00007f22d36a6090 R15: 00007ffe6cb93288 [ 51.411856][ T3986] [ 51.637549][ T3988] loop2: detected capacity change from 0 to 128 [ 51.649306][ T3988] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 51.667023][ T3988] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 51.667049][ T3988] EXT4-fs: failed to create workqueue [ 51.684923][ T3988] EXT4-fs (loop2): mount failed [ 51.815998][ T4005] loop3: detected capacity change from 0 to 1024 [ 51.835379][ T4009] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 51.854546][ T4005] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 51.866872][ T4005] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.904389][ T4005] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.167: lblock 0 mapped to illegal pblock 0 (length 1) [ 51.919305][ T4005] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 51.919342][ T4005] EXT4-fs (loop3): This should not happen!! Data will be lost [ 51.919342][ T4005] [ 51.919745][ T4005] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 1: comm syz.3.167: lblock 1 mapped to illegal pblock 1 (length 3) [ 51.919916][ T4005] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117 [ 51.919981][ T4005] EXT4-fs (loop3): This should not happen!! Data will be lost [ 51.919981][ T4005] [ 51.922755][ T4005] netlink: 'syz.3.167': attribute type 1 has an invalid length. [ 51.987160][ T4005] netlink: 224 bytes leftover after parsing attributes in process `syz.3.167'. [ 52.011764][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 52.052843][ T4020] FAULT_INJECTION: forcing a failure. [ 52.052843][ T4020] name failslab, interval 1, probability 0, space 0, times 0 [ 52.065685][ T4020] CPU: 0 UID: 0 PID: 4020 Comm: syz.3.170 Not tainted syzkaller #0 PREEMPT(voluntary) [ 52.065715][ T4020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 52.065727][ T4020] Call Trace: [ 52.065733][ T4020] [ 52.065741][ T4020] __dump_stack+0x1d/0x30 [ 52.065785][ T4020] dump_stack_lvl+0xe8/0x140 [ 52.065811][ T4020] dump_stack+0x15/0x1b [ 52.065832][ T4020] should_fail_ex+0x265/0x280 [ 52.065870][ T4020] ? tcf_block_get_ext+0x19e/0xb30 [ 52.065908][ T4020] should_failslab+0x8c/0xb0 [ 52.065973][ T4020] __kmalloc_cache_noprof+0x4c/0x320 [ 52.066009][ T4020] ? unwind_get_return_address+0x16/0x40 [ 52.066044][ T4020] tcf_block_get_ext+0x19e/0xb30 [ 52.066070][ T4020] ? filter_irq_stacks+0x1d/0x70 [ 52.066118][ T4020] ? stack_depot_save_flags+0xa93/0xb80 [ 52.066170][ T4020] tcf_block_get+0x67/0xa0 [ 52.066200][ T4020] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 52.066236][ T4020] sfq_init+0x7f/0x1290 [ 52.066261][ T4020] ? netlink_rcv_skb+0x123/0x220 [ 52.066339][ T4020] ? rtnetlink_rcv+0x1c/0x30 [ 52.066383][ T4020] ? netlink_unicast+0x5bd/0x690 [ 52.066458][ T4020] ? netlink_sendmsg+0x58b/0x6b0 [ 52.066493][ T4020] ? __sock_sendmsg+0x145/0x180 [ 52.066511][ T4020] ? ____sys_sendmsg+0x31e/0x4e0 [ 52.066545][ T4020] ? ___sys_sendmsg+0x17b/0x1d0 [ 52.066581][ T4020] ? __x64_sys_sendmsg+0xd4/0x160 [ 52.066633][ T4020] ? x64_sys_call+0x191e/0x2ff0 [ 52.066657][ T4020] ? do_syscall_64+0xd2/0x200 [ 52.066676][ T4020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.066701][ T4020] ? __pfx_sfq_dequeue+0x10/0x10 [ 52.066791][ T4020] ? qdisc_alloc+0x3c3/0x440 [ 52.066816][ T4020] ? __pfx_sfq_init+0x10/0x10 [ 52.066836][ T4020] qdisc_create+0x591/0x9e0 [ 52.066862][ T4020] tc_modify_qdisc+0xf2e/0x1420 [ 52.067031][ T4020] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 52.067073][ T4020] rtnetlink_rcv_msg+0x657/0x6d0 [ 52.067115][ T4020] netlink_rcv_skb+0x123/0x220 [ 52.067172][ T4020] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 52.067227][ T4020] rtnetlink_rcv+0x1c/0x30 [ 52.067263][ T4020] netlink_unicast+0x5bd/0x690 [ 52.067340][ T4020] netlink_sendmsg+0x58b/0x6b0 [ 52.067435][ T4020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.067474][ T4020] __sock_sendmsg+0x145/0x180 [ 52.067500][ T4020] ____sys_sendmsg+0x31e/0x4e0 [ 52.067611][ T4020] ___sys_sendmsg+0x17b/0x1d0 [ 52.067672][ T4020] __x64_sys_sendmsg+0xd4/0x160 [ 52.067715][ T4020] x64_sys_call+0x191e/0x2ff0 [ 52.067824][ T4020] do_syscall_64+0xd2/0x200 [ 52.067954][ T4020] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 52.067987][ T4020] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 52.068029][ T4020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.068059][ T4020] RIP: 0033:0x7f9d6ee8eec9 [ 52.068079][ T4020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.068145][ T4020] RSP: 002b:00007f9d6d8ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.068168][ T4020] RAX: ffffffffffffffda RBX: 00007f9d6f0e5fa0 RCX: 00007f9d6ee8eec9 [ 52.068180][ T4020] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 52.068192][ T4020] RBP: 00007f9d6d8ef090 R08: 0000000000000000 R09: 0000000000000000 [ 52.068261][ T4020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.068277][ T4020] R13: 00007f9d6f0e6038 R14: 00007f9d6f0e5fa0 R15: 00007ffee55ea018 [ 52.068305][ T4020] [ 52.535729][ T4036] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 52.543206][ T4038] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 52.821102][ T4060] loop2: detected capacity change from 0 to 512 [ 52.831109][ T4060] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 52.843275][ T4060] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 52.858445][ T4060] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #11: comm syz.2.187: corrupted inode contents [ 52.862730][ T4053] FAULT_INJECTION: forcing a failure. [ 52.862730][ T4053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.883379][ T4053] CPU: 1 UID: 0 PID: 4053 Comm: syz.4.184 Not tainted syzkaller #0 PREEMPT(voluntary) [ 52.883407][ T4053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 52.883480][ T4053] Call Trace: [ 52.883489][ T4053] [ 52.883498][ T4053] __dump_stack+0x1d/0x30 [ 52.883524][ T4053] dump_stack_lvl+0xe8/0x140 [ 52.883549][ T4053] dump_stack+0x15/0x1b [ 52.883577][ T4053] should_fail_ex+0x265/0x280 [ 52.883639][ T4053] should_fail+0xb/0x20 [ 52.883747][ T4053] should_fail_usercopy+0x1a/0x20 [ 52.883786][ T4060] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #11: comm syz.2.187: mark_inode_dirty error [ 52.883806][ T4053] copy_fpstate_to_sigframe+0x628/0x7d0 [ 52.883884][ T4053] ? copy_fpstate_to_sigframe+0xe6/0x7d0 [ 52.884016][ T4053] ? x86_task_fpu+0x36/0x60 [ 52.884056][ T4053] get_sigframe+0x34d/0x490 [ 52.884082][ T4053] ? get_signal+0xdc8/0xf70 [ 52.884161][ T4053] x64_setup_rt_frame+0xa8/0x580 [ 52.884193][ T4053] arch_do_signal_or_restart+0x27c/0x480 [ 52.884231][ T4053] exit_to_user_mode_loop+0x7a/0x100 [ 52.884263][ T4053] do_syscall_64+0x1d6/0x200 [ 52.884304][ T4053] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 52.884339][ T4053] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 52.884394][ T4053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.884424][ T4053] RIP: 0033:0x7faf015aeec7 [ 52.884443][ T4053] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 52.884460][ T4053] RSP: 002b:00007faf0000f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 52.884483][ T4053] RAX: 0000000000000000 RBX: 00007faf01805fa0 RCX: 00007faf015aeec9 [ 52.884501][ T4053] RDX: 000000000000effd RSI: 0000000000000000 RDI: 0000000000000003 [ 52.884589][ T4053] RBP: 00007faf0000f090 R08: 0000000000000000 R09: 0000000000000000 [ 52.884606][ T4053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 52.884623][ T4053] R13: 00007faf01806038 R14: 00007faf01805fa0 R15: 00007ffdf219d928 [ 52.884720][ T4053] [ 53.090115][ T4060] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.187: invalid indirect mapped block 1 (level 1) [ 53.103442][ T4060] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #11: comm syz.2.187: corrupted inode contents [ 53.116145][ T4060] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 53.124905][ T4060] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #11: comm syz.2.187: corrupted inode contents [ 53.137022][ T4060] EXT4-fs error (device loop2): ext4_truncate:4666: inode #11: comm syz.2.187: mark_inode_dirty error [ 53.148377][ T4060] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 53.158024][ T4060] EXT4-fs (loop2): 1 truncate cleaned up [ 53.164675][ T4060] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.191137][ T4074] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 53.228037][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.257155][ T4079] loop2: detected capacity change from 0 to 1024 [ 53.269230][ T4079] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 53.281795][ T4079] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.306273][ T4080] netlink: 4 bytes leftover after parsing attributes in process `syz.4.195'. [ 53.315184][ T4080] netlink: 52 bytes leftover after parsing attributes in process `syz.4.195'. [ 53.319207][ T4079] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm syz.2.194: lblock 0 mapped to illegal pblock 0 (length 1) [ 53.337500][ T4079] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 53.349961][ T4079] EXT4-fs (loop2): This should not happen!! Data will be lost [ 53.349961][ T4079] [ 53.360096][ T4079] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm syz.2.194: lblock 1 mapped to illegal pblock 1 (length 3) [ 53.376448][ T4079] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117 [ 53.388798][ T4079] EXT4-fs (loop2): This should not happen!! Data will be lost [ 53.388798][ T4079] [ 53.413618][ T4079] netlink: 'syz.2.194': attribute type 1 has an invalid length. [ 53.421460][ T4079] netlink: 224 bytes leftover after parsing attributes in process `syz.2.194'. [ 53.472927][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 53.550002][ T4109] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 53.647629][ T4116] SELinux: Context  is not valid (left unmapped). [ 53.661249][ T4116] netlink: '+}[@': attribute type 4 has an invalid length. [ 53.708501][ T3409] Process accounting resumed [ 53.713412][ T3388] Process accounting resumed [ 54.049149][ T4159] bridge0: entered promiscuous mode [ 54.054506][ T4159] macsec1: entered promiscuous mode [ 54.061134][ T4159] bridge0: port 3(macsec1) entered blocking state [ 54.067762][ T4159] bridge0: port 3(macsec1) entered disabled state [ 54.074475][ T4159] macsec1: entered allmulticast mode [ 54.079872][ T4159] bridge0: entered allmulticast mode [ 54.086014][ T4159] macsec1: left allmulticast mode [ 54.091244][ T4159] bridge0: left allmulticast mode [ 54.098175][ T4159] bridge0: left promiscuous mode [ 54.205086][ T4163] netlink: 60 bytes leftover after parsing attributes in process `syz.0.225'. [ 54.214577][ T4163] netlink: 24 bytes leftover after parsing attributes in process `syz.0.225'. [ 54.238230][ T4168] FAULT_INJECTION: forcing a failure. [ 54.238230][ T4168] name failslab, interval 1, probability 0, space 0, times 0 [ 54.251004][ T4168] CPU: 1 UID: 0 PID: 4168 Comm: syz.0.227 Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.251037][ T4168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 54.251091][ T4168] Call Trace: [ 54.251101][ T4168] [ 54.251111][ T4168] __dump_stack+0x1d/0x30 [ 54.251136][ T4168] dump_stack_lvl+0xe8/0x140 [ 54.251160][ T4168] dump_stack+0x15/0x1b [ 54.251208][ T4168] should_fail_ex+0x265/0x280 [ 54.251265][ T4168] should_failslab+0x8c/0xb0 [ 54.251299][ T4168] kmem_cache_alloc_node_noprof+0x57/0x320 [ 54.251335][ T4168] ? __alloc_skb+0x101/0x320 [ 54.251420][ T4168] ? atomic_notifier_call_chain+0x19c/0x1c0 [ 54.251455][ T4168] __alloc_skb+0x101/0x320 [ 54.251480][ T4168] rtmsg_fib+0x99/0x230 [ 54.251553][ T4168] fib_table_insert+0x78a/0xeb0 [ 54.251587][ T4168] ? try_to_wake_up+0x3e7/0x630 [ 54.251618][ T4168] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 54.251642][ T4168] ? fib_new_table+0xad/0x1c0 [ 54.251662][ T4168] fib_magic+0x19a/0x1f0 [ 54.251690][ T4168] fib_add_ifaddr+0xdb/0x320 [ 54.251721][ T4168] fib_inetaddr_event+0xb2/0x1f0 [ 54.251818][ T4168] ? inetaddr_event+0x71/0xa0 [ 54.251838][ T4168] ? __pfx_fib_inetaddr_event+0x10/0x10 [ 54.251862][ T4168] blocking_notifier_call_chain+0x98/0x1f0 [ 54.251934][ T4168] __inet_insert_ifa+0x516/0x630 [ 54.251970][ T4168] devinet_ioctl+0xa8c/0xe40 [ 54.252005][ T4168] inet_ioctl+0x2f8/0x3a0 [ 54.252065][ T4168] sock_do_ioctl+0x70/0x220 [ 54.252084][ T4168] sock_ioctl+0x41b/0x610 [ 54.252115][ T4168] ? __pfx_sock_ioctl+0x10/0x10 [ 54.252143][ T4168] __se_sys_ioctl+0xce/0x140 [ 54.252198][ T4168] __x64_sys_ioctl+0x43/0x50 [ 54.252227][ T4168] x64_sys_call+0x1816/0x2ff0 [ 54.252246][ T4168] do_syscall_64+0xd2/0x200 [ 54.252264][ T4168] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 54.252369][ T4168] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 54.252450][ T4168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.252471][ T4168] RIP: 0033:0x7f06ea21eec9 [ 54.252525][ T4168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.252540][ T4168] RSP: 002b:00007f06e8c7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.252557][ T4168] RAX: ffffffffffffffda RBX: 00007f06ea475fa0 RCX: 00007f06ea21eec9 [ 54.252568][ T4168] RDX: 0000200000000080 RSI: 0000000000008916 RDI: 0000000000000003 [ 54.252626][ T4168] RBP: 00007f06e8c7f090 R08: 0000000000000000 R09: 0000000000000000 [ 54.252673][ T4168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 54.252683][ T4168] R13: 00007f06ea476038 R14: 00007f06ea475fa0 R15: 00007ffc33041198 [ 54.252701][ T4168] [ 54.625261][ T4187] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 54.631909][ T4187] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 54.639551][ T4187] vhci_hcd vhci_hcd.0: Device attached [ 54.657808][ T29] kauditd_printk_skb: 659 callbacks suppressed [ 54.657891][ T29] audit: type=1326 audit(1759225468.312:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4191 comm="syz.1.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d344eec9 code=0x7ffc0000 [ 54.698434][ T4187] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 54.704997][ T4187] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 54.712654][ T4187] vhci_hcd vhci_hcd.0: Device attached [ 54.743291][ T29] audit: type=1326 audit(1759225468.352:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4191 comm="syz.1.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22d344eec9 code=0x7ffc0000 [ 54.766792][ T29] audit: type=1326 audit(1759225468.352:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4191 comm="syz.1.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d344eec9 code=0x7ffc0000 [ 54.790235][ T29] audit: type=1326 audit(1759225468.352:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4191 comm="syz.1.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22d344eec9 code=0x7ffc0000 [ 54.796336][ C0] hrtimer: interrupt took 25933 ns [ 54.813717][ T29] audit: type=1326 audit(1759225468.352:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4191 comm="syz.1.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d344eec9 code=0x7ffc0000 [ 54.822605][ T4187] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 54.842264][ T29] audit: type=1326 audit(1759225468.352:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4191 comm="syz.1.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f22d344eec9 code=0x7ffc0000 [ 54.873716][ T29] audit: type=1326 audit(1759225468.352:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4191 comm="syz.1.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d344eec9 code=0x7ffc0000 [ 54.885277][ T4204] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(7) [ 54.897158][ T29] audit: type=1326 audit(1759225468.352:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4191 comm="syz.1.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f22d344eec9 code=0x7ffc0000 [ 54.903603][ T4204] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 54.903879][ T4204] vhci_hcd vhci_hcd.0: Device attached [ 54.926946][ T29] audit: type=1326 audit(1759225468.352:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4191 comm="syz.1.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d344eec9 code=0x7ffc0000 [ 54.936434][ T3395] usb 1-1: new low-speed USB device number 2 using vhci_hcd [ 54.939857][ T29] audit: type=1326 audit(1759225468.372:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4130 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fa4a299eec9 code=0x7ffc0000 [ 55.047567][ T4187] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(9) [ 55.054218][ T4187] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 55.061849][ T4187] vhci_hcd vhci_hcd.0: Device attached [ 55.078432][ T4212] loop2: detected capacity change from 0 to 2048 [ 55.112487][ T4204] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(17) [ 55.119182][ T4204] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 55.126740][ T4204] vhci_hcd vhci_hcd.0: Device attached [ 55.133146][ T3291] loop2: p1 p3 p4 [ 55.142282][ T3291] loop2: p4 size 589824 extends beyond EOD, truncated [ 55.149267][ T4187] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(13) [ 55.155893][ T4187] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 55.163533][ T4187] vhci_hcd vhci_hcd.0: Device attached [ 55.176010][ T4187] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(20) [ 55.182694][ T4187] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 55.190421][ T4187] vhci_hcd vhci_hcd.0: Device attached [ 55.200122][ T4220] vhci_hcd: connection closed [ 55.200377][ T31] vhci_hcd: stop threads [ 55.203061][ T4212] loop2: p1 p3 p4 [ 55.205092][ T31] vhci_hcd: release socket [ 55.217608][ T31] vhci_hcd: disconnect device [ 55.219150][ T4212] loop2: p4 size 589824 extends beyond EOD, truncated [ 55.230643][ T4205] vhci_hcd: connection closed [ 55.230879][ T4215] vhci_hcd: connection closed [ 55.232443][ T4210] vhci_hcd: connection closed [ 55.235700][ T4188] vhci_hcd: connection reset by peer [ 55.242606][ T4196] vhci_hcd: connection closed [ 55.260971][ T31] vhci_hcd: stop threads [ 55.261806][ T4218] vhci_hcd: connection closed [ 55.265866][ T31] vhci_hcd: release socket [ 55.279393][ T31] vhci_hcd: disconnect device [ 55.313776][ T31] vhci_hcd: stop threads [ 55.318143][ T31] vhci_hcd: release socket [ 55.322577][ T31] vhci_hcd: disconnect device [ 55.351428][ T4228] loop1: detected capacity change from 0 to 512 [ 55.362464][ T31] vhci_hcd: stop threads [ 55.366922][ T31] vhci_hcd: release socket [ 55.371442][ T31] vhci_hcd: disconnect device [ 55.387016][ T4228] ext3: Unknown parameter 'audit' [ 55.406681][ T31] vhci_hcd: stop threads [ 55.410967][ T31] vhci_hcd: release socket [ 55.415526][ T31] vhci_hcd: disconnect device [ 55.426098][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 55.432911][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 55.453080][ T3678] udevd[3678]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 55.466325][ T31] vhci_hcd: stop threads [ 55.470774][ T31] vhci_hcd: release socket [ 55.475357][ T31] vhci_hcd: disconnect device [ 55.498834][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 55.498966][ T4235] udevd[4235]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 55.520351][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 55.544715][ T31] vhci_hcd: stop threads [ 55.549108][ T31] vhci_hcd: release socket [ 55.553544][ T31] vhci_hcd: disconnect device [ 55.564064][ T4239] loop2: detected capacity change from 0 to 512 [ 55.595375][ T4239] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.616751][ T4239] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.644215][ T4239] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.664231][ T4255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.254'. [ 55.673165][ T4255] netlink: 'syz.4.254': attribute type 1 has an invalid length. [ 55.770629][ T4268] Driver unsupported XDP return value 0 on prog (id 150) dev N/A, expect packet loss! [ 55.815580][ T4272] syz.0.259 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 56.092910][ T4281] loop0: detected capacity change from 0 to 512 [ 56.127601][ T4281] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.150823][ T4281] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.166315][ T4281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.263'. [ 56.217266][ T4284] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.263: corrupted inode contents [ 56.229896][ T4284] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.263: mark_inode_dirty error [ 56.241599][ T4284] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.263: corrupted inode contents [ 56.441599][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.477094][ T4288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.266'. [ 56.486082][ T4288] netlink: 'syz.3.266': attribute type 1 has an invalid length. [ 56.533313][ T4292] ref_ctr increment failed for inode: 0x151 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888103755c00 [ 56.552734][ T4292] uprobe: syz.0.267:4292 failed to unregister, leaking uprobe [ 56.624746][ T4304] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 56.659293][ T4308] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 56.739456][ T4320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.279'. [ 56.748336][ T4320] netlink: 'syz.0.279': attribute type 1 has an invalid length. [ 56.794474][ T4325] netlink: 28 bytes leftover after parsing attributes in process `syz.2.281'. [ 56.840478][ T4331] loop0: detected capacity change from 0 to 512 [ 56.850181][ T4331] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.864373][ T4331] EXT4-fs (loop0): orphan cleanup on readonly fs [ 56.872936][ T4331] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.284: bg 0: block 248: padding at end of block bitmap is not set [ 56.888304][ T4331] EXT4-fs error (device loop0): ext4_acquire_dquot:6943: comm syz.0.284: Failed to acquire dquot type 1 [ 56.903207][ T4334] FAULT_INJECTION: forcing a failure. [ 56.903207][ T4334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.903308][ T4331] EXT4-fs (loop0): 1 truncate cleaned up [ 56.916368][ T4334] CPU: 1 UID: 0 PID: 4334 Comm: syz.2.285 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.916394][ T4334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 56.916407][ T4334] Call Trace: [ 56.916414][ T4334] [ 56.916466][ T4334] __dump_stack+0x1d/0x30 [ 56.916505][ T4334] dump_stack_lvl+0xe8/0x140 [ 56.916588][ T4334] dump_stack+0x15/0x1b [ 56.916635][ T4334] should_fail_ex+0x265/0x280 [ 56.916677][ T4334] should_fail+0xb/0x20 [ 56.916733][ T4334] should_fail_usercopy+0x1a/0x20 [ 56.916778][ T4334] _copy_from_iter+0xd2/0xe80 [ 56.916824][ T4334] ? __build_skb_around+0x1a0/0x200 [ 56.916926][ T4334] ? __alloc_skb+0x223/0x320 [ 56.916964][ T4334] netlink_sendmsg+0x471/0x6b0 [ 56.917090][ T4334] ? __pfx_netlink_sendmsg+0x10/0x10 [ 56.917131][ T4334] __sock_sendmsg+0x145/0x180 [ 56.917160][ T4334] ____sys_sendmsg+0x31e/0x4e0 [ 56.917219][ T4334] ___sys_sendmsg+0x17b/0x1d0 [ 56.917282][ T4334] __x64_sys_sendmsg+0xd4/0x160 [ 56.917332][ T4334] x64_sys_call+0x191e/0x2ff0 [ 56.917373][ T4334] do_syscall_64+0xd2/0x200 [ 56.917401][ T4334] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 56.917435][ T4334] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 56.917484][ T4334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.917529][ T4334] RIP: 0033:0x7fa4a299eec9 [ 56.917551][ T4334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.917584][ T4334] RSP: 002b:00007fa4a1407038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.917611][ T4334] RAX: ffffffffffffffda RBX: 00007fa4a2bf5fa0 RCX: 00007fa4a299eec9 [ 56.917681][ T4334] RDX: 000000000000c050 RSI: 0000200000000cc0 RDI: 0000000000000003 [ 56.917699][ T4334] RBP: 00007fa4a1407090 R08: 0000000000000000 R09: 0000000000000000 [ 56.917716][ T4334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.917785][ T4334] R13: 00007fa4a2bf6038 R14: 00007fa4a2bf5fa0 R15: 00007ffc99e67ea8 [ 56.917815][ T4334] [ 56.978195][ T4338] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 56.993339][ T4331] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 57.153938][ T4331] syz.0.284 (4331) used greatest stack depth: 9280 bytes left [ 57.161944][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.221544][ T4346] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 57.402890][ T4350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.292'. [ 57.411904][ T4350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.292'. [ 57.426428][ T315] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.435436][ T315] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.444600][ T315] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.464553][ T315] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.514226][ T4358] loop3: detected capacity change from 0 to 1024 [ 57.530550][ T4358] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 57.543986][ T4358] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.577103][ T4358] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.295: lblock 0 mapped to illegal pblock 0 (length 1) [ 57.591392][ T4358] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 57.603764][ T4358] EXT4-fs (loop3): This should not happen!! Data will be lost [ 57.603764][ T4358] [ 57.614204][ T4358] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 1: comm syz.3.295: lblock 1 mapped to illegal pblock 1 (length 3) [ 57.635609][ T4358] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117 [ 57.648043][ T4358] EXT4-fs (loop3): This should not happen!! Data will be lost [ 57.648043][ T4358] [ 57.668027][ T4358] netlink: 'syz.3.295': attribute type 1 has an invalid length. [ 57.675750][ T4358] netlink: 224 bytes leftover after parsing attributes in process `syz.3.295'. [ 57.703079][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 57.740832][ T4375] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.793160][ T4381] loop4: detected capacity change from 0 to 512 [ 57.810897][ T4381] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.829552][ T4381] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.834160][ T4379] loop3: detected capacity change from 0 to 512 [ 57.843744][ T4381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.302'. [ 57.884873][ T4379] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.900299][ T4389] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.302: corrupted inode contents [ 57.914342][ T4379] ext4 filesystem being mounted at /bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.925692][ T4389] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.302: mark_inode_dirty error [ 57.926675][ T4379] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.942362][ T4391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.304'. [ 57.947175][ T4389] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.302: corrupted inode contents [ 57.967725][ T4391] loop2: detected capacity change from 0 to 512 [ 57.975262][ T4391] ext2: Unknown parameter 'smackfstransmute' [ 57.984370][ T4379] lo speed is unknown, defaulting to 1000 [ 58.004865][ T4379] lo speed is unknown, defaulting to 1000 [ 58.011133][ T4379] lo speed is unknown, defaulting to 1000 [ 58.022538][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.037224][ T4379] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 58.046718][ T4379] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 58.062124][ T4379] lo speed is unknown, defaulting to 1000 [ 58.068604][ T4379] lo speed is unknown, defaulting to 1000 [ 58.075050][ T4379] lo speed is unknown, defaulting to 1000 [ 58.078894][ T4394] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 58.089920][ T4379] lo speed is unknown, defaulting to 1000 [ 58.096049][ T4379] lo speed is unknown, defaulting to 1000 [ 58.164751][ T4401] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 58.241280][ T4403] loop3: detected capacity change from 0 to 128 [ 58.250127][ T4403] FAT-fs (loop3): Directory bread(block 162) failed [ 58.264458][ T4403] FAT-fs (loop3): Directory bread(block 163) failed [ 58.273893][ T4403] FAT-fs (loop3): Directory bread(block 164) failed [ 58.280753][ T4403] FAT-fs (loop3): Directory bread(block 165) failed [ 58.287528][ T4403] FAT-fs (loop3): Directory bread(block 166) failed [ 58.294208][ T4403] FAT-fs (loop3): Directory bread(block 167) failed [ 58.301040][ T4403] FAT-fs (loop3): Directory bread(block 168) failed [ 58.307800][ T4403] FAT-fs (loop3): Directory bread(block 169) failed [ 58.316739][ T4403] FAT-fs (loop3): Directory bread(block 162) failed [ 58.329952][ T4403] FAT-fs (loop3): Directory bread(block 163) failed [ 58.338016][ T4403] bio_check_eod: 2 callbacks suppressed [ 58.338092][ T4403] syz.3.309: attempt to access beyond end of device [ 58.338092][ T4403] loop3: rw=3, sector=226, nr_sectors = 6 limit=128 [ 58.356864][ T4403] syz.3.309: attempt to access beyond end of device [ 58.356864][ T4403] loop3: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 58.371603][ T4403] tc_dump_action: action bad kind [ 58.443716][ T4408] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4408 comm=+}[@ [ 58.524995][ T4411] FAULT_INJECTION: forcing a failure. [ 58.524995][ T4411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.538305][ T4411] CPU: 1 UID: 0 PID: 4411 Comm: wÞ£ÿ Not tainted syzkaller #0 PREEMPT(voluntary) [ 58.538346][ T4411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 58.538363][ T4411] Call Trace: [ 58.538371][ T4411] [ 58.538380][ T4411] __dump_stack+0x1d/0x30 [ 58.538476][ T4411] dump_stack_lvl+0xe8/0x140 [ 58.538502][ T4411] dump_stack+0x15/0x1b [ 58.538579][ T4411] should_fail_ex+0x265/0x280 [ 58.538616][ T4411] should_fail+0xb/0x20 [ 58.538641][ T4411] should_fail_usercopy+0x1a/0x20 [ 58.538677][ T4411] _copy_from_user+0x1c/0xb0 [ 58.538838][ T4411] ___sys_sendmsg+0xc1/0x1d0 [ 58.538896][ T4411] __x64_sys_sendmsg+0xd4/0x160 [ 58.538940][ T4411] x64_sys_call+0x191e/0x2ff0 [ 58.539046][ T4411] do_syscall_64+0xd2/0x200 [ 58.539071][ T4411] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 58.539139][ T4411] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 58.539259][ T4411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.539288][ T4411] RIP: 0033:0x7f9d6ee8eec9 [ 58.539315][ T4411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.539338][ T4411] RSP: 002b:00007f9d6d8ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.539362][ T4411] RAX: ffffffffffffffda RBX: 00007f9d6f0e5fa0 RCX: 00007f9d6ee8eec9 [ 58.539379][ T4411] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 58.539393][ T4411] RBP: 00007f9d6d8ef090 R08: 0000000000000000 R09: 0000000000000000 [ 58.539405][ T4411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.539428][ T4411] R13: 00007f9d6f0e6038 R14: 00007f9d6f0e5fa0 R15: 00007ffee55ea018 [ 58.539451][ T4411] [ 58.795402][ T4421] FAULT_INJECTION: forcing a failure. [ 58.795402][ T4421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.808562][ T4421] CPU: 0 UID: 0 PID: 4421 Comm: syz.0.316 Not tainted syzkaller #0 PREEMPT(voluntary) [ 58.808595][ T4421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 58.808611][ T4421] Call Trace: [ 58.808620][ T4421] [ 58.808630][ T4421] __dump_stack+0x1d/0x30 [ 58.808649][ T4421] dump_stack_lvl+0xe8/0x140 [ 58.808677][ T4421] dump_stack+0x15/0x1b [ 58.808692][ T4421] should_fail_ex+0x265/0x280 [ 58.808717][ T4421] should_fail+0xb/0x20 [ 58.808757][ T4421] should_fail_usercopy+0x1a/0x20 [ 58.808783][ T4421] _copy_to_user+0x20/0xa0 [ 58.808824][ T4421] copy_siginfo_to_user+0x22/0xb0 [ 58.808843][ T4421] x64_setup_rt_frame+0x2b5/0x580 [ 58.808863][ T4421] arch_do_signal_or_restart+0x27c/0x480 [ 58.808886][ T4421] exit_to_user_mode_loop+0x7a/0x100 [ 58.808951][ T4421] do_syscall_64+0x1d6/0x200 [ 58.808970][ T4421] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 58.808991][ T4421] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 58.809072][ T4421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.809092][ T4421] RIP: 0033:0x7f06ea21eec7 [ 58.809106][ T4421] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 58.809121][ T4421] RSP: 002b:00007f06e8c7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 58.809195][ T4421] RAX: 0000000000000013 RBX: 00007f06ea475fa0 RCX: 00007f06ea21eec9 [ 58.809206][ T4421] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000003 [ 58.809217][ T4421] RBP: 00007f06e8c7f090 R08: 0000000000000000 R09: 0000000000000000 [ 58.809263][ T4421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.809279][ T4421] R13: 00007f06ea476038 R14: 00007f06ea475fa0 R15: 00007ffc33041198 [ 58.809302][ T4421] [ 59.035226][ T4433] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 59.620724][ T4440] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 59.726790][ T4448] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 59.817797][ T4452] loop1: detected capacity change from 0 to 128 [ 59.824547][ T4452] EXT4-fs: Ignoring removed nobh option [ 59.880980][ T4452] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 59.898260][ T4452] ext4 filesystem being mounted at /63/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 59.920199][ T4458] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 59.930218][ T4460] ref_ctr increment failed for inode: 0x1ae offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810a54b3c0 [ 59.945385][ T4452] EXT4-fs error (device loop1): __ext4_find_entry:1626: inode #2: comm syz.1.328: checksumming directory block 0 [ 59.950421][ T4460] uprobe: syz.0.331:4460 failed to unregister, leaking uprobe [ 59.957456][ T29] kauditd_printk_skb: 1131 callbacks suppressed [ 59.957472][ T29] audit: type=1400 audit(1759225473.602:3058): avc: denied { bind } for pid=4450 comm="syz.1.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 59.994919][ T4452] EXT4-fs error (device loop1): __ext4_find_entry:1626: inode #2: comm syz.1.328: checksumming directory block 0 [ 60.007155][ T3395] usb 1-1: enqueue for inactive port 0 [ 60.012697][ T3395] usb 1-1: enqueue for inactive port 0 [ 60.024296][ T4452] EXT4-fs error (device loop1): __ext4_find_entry:1626: inode #2: comm syz.1.328: checksumming directory block 0 [ 60.051882][ T3300] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 60.086449][ T3395] vhci_hcd: vhci_device speed not set [ 60.129615][ T4468] net_ratelimit: 1 callbacks suppressed [ 60.129630][ T4468] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 60.191284][ T4475] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 60.203284][ T4477] FAULT_INJECTION: forcing a failure. [ 60.203284][ T4477] name failslab, interval 1, probability 0, space 0, times 0 [ 60.216011][ T4477] CPU: 1 UID: 0 PID: 4477 Comm: syz.1.337 Not tainted syzkaller #0 PREEMPT(voluntary) [ 60.216046][ T4477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 60.216067][ T4477] Call Trace: [ 60.216075][ T4477] [ 60.216084][ T4477] __dump_stack+0x1d/0x30 [ 60.216118][ T4477] dump_stack_lvl+0xe8/0x140 [ 60.216194][ T4477] dump_stack+0x15/0x1b [ 60.216220][ T4477] should_fail_ex+0x265/0x280 [ 60.216282][ T4477] should_failslab+0x8c/0xb0 [ 60.216312][ T4477] __kmalloc_noprof+0xa5/0x3e0 [ 60.216390][ T4477] ? ip_options_get+0x52/0x350 [ 60.216430][ T4477] ip_options_get+0x52/0x350 [ 60.216539][ T4477] ? __rcu_read_unlock+0x4f/0x70 [ 60.216569][ T4477] do_ip_setsockopt+0x19d4/0x2240 [ 60.216602][ T4477] ip_setsockopt+0x58/0x110 [ 60.216632][ T4477] raw_setsockopt+0xbd/0x150 [ 60.216668][ T4477] sock_common_setsockopt+0x66/0x80 [ 60.216705][ T4477] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 60.216729][ T4477] __sys_setsockopt+0x184/0x200 [ 60.216762][ T4477] __x64_sys_setsockopt+0x64/0x80 [ 60.216822][ T4477] x64_sys_call+0x20ec/0x2ff0 [ 60.216850][ T4477] do_syscall_64+0xd2/0x200 [ 60.216876][ T4477] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 60.216900][ T4477] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 60.216936][ T4477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.217019][ T4477] RIP: 0033:0x7f22d344eec9 [ 60.217040][ T4477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.217058][ T4477] RSP: 002b:00007f22d1eb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 60.217079][ T4477] RAX: ffffffffffffffda RBX: 00007f22d36a5fa0 RCX: 00007f22d344eec9 [ 60.217096][ T4477] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 60.217109][ T4477] RBP: 00007f22d1eb7090 R08: 0000000000000005 R09: 0000000000000000 [ 60.217121][ T4477] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.217173][ T4477] R13: 00007f22d36a6038 R14: 00007f22d36a5fa0 R15: 00007ffe6cb93288 [ 60.217204][ T4477] [ 60.673303][ T29] audit: type=1326 audit(1759225474.322:3059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4488 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6ee8eec9 code=0x7ffc0000 [ 60.697474][ T29] audit: type=1326 audit(1759225474.322:3060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4488 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6ee8eec9 code=0x7ffc0000 [ 60.720905][ T29] audit: type=1326 audit(1759225474.322:3061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4488 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f9d6ee8eec9 code=0x7ffc0000 [ 60.744441][ T29] audit: type=1326 audit(1759225474.322:3062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4488 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6ee8eec9 code=0x7ffc0000 [ 60.767869][ T29] audit: type=1326 audit(1759225474.322:3063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4488 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6ee8eec9 code=0x7ffc0000 [ 60.791465][ T29] audit: type=1326 audit(1759225474.332:3064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4488 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9d6ee8eec9 code=0x7ffc0000 [ 60.815094][ T29] audit: type=1326 audit(1759225474.332:3065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4488 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6ee8eec9 code=0x7ffc0000 [ 60.838482][ T29] audit: type=1326 audit(1759225474.332:3066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4488 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9d6ee8eec9 code=0x7ffc0000 [ 60.862114][ T29] audit: type=1326 audit(1759225474.332:3067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4488 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6ee8eec9 code=0x7ffc0000 [ 60.897605][ T4492] __nla_validate_parse: 2 callbacks suppressed [ 60.897620][ T4492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.342'. [ 61.064167][ T4503] loop2: detected capacity change from 0 to 512 [ 61.085892][ T4503] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.101414][ T4503] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.139187][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.292806][ T4524] loop0: detected capacity change from 0 to 512 [ 61.325904][ T4524] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.338812][ T4524] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.683026][ T4560] loop4: detected capacity change from 0 to 512 [ 61.690636][ T4560] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 61.713321][ T4560] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 61.728517][ T4560] EXT4-fs (loop4): 1 truncate cleaned up [ 61.734765][ T4560] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.807236][ T4623] netlink: 32 bytes leftover after parsing attributes in process `syz.4.360'. [ 61.966878][ T4627] loop3: detected capacity change from 0 to 512 [ 61.991637][ T4627] EXT4-fs: Ignoring removed orlov option [ 62.025395][ T4627] ext4: Unknown parameter 'dont_hash' [ 62.069448][ T2953] IPVS: starting estimator thread 0... [ 62.090431][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.166493][ T4629] IPVS: using max 2304 ests per chain, 115200 per kthread [ 62.235586][ T4627] lo speed is unknown, defaulting to 1000 [ 62.292080][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.334405][ T4639] loop0: detected capacity change from 0 to 512 [ 62.347895][ T4637] loop2: detected capacity change from 0 to 128 [ 62.367823][ T4639] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 62.411036][ T4639] EXT4-fs (loop0): 1 orphan inode deleted [ 62.416880][ T4639] EXT4-fs (loop0): 1 truncate cleaned up [ 62.445996][ T4639] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.461798][ T4639] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.463055][ T3307] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 62.478789][ T3307] FAT-fs (loop2): Filesystem has been set read-only [ 62.486717][ T4644] loop4: detected capacity change from 0 to 512 [ 62.526787][ T4639] loop0: detected capacity change from 0 to 2364 [ 62.544652][ T4639] iso9660: Unknown parameter 'ÿÿ0x0000000000000000' [ 62.560018][ T4644] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.593429][ T4644] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.663219][ T4659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.367'. [ 62.678508][ T4644] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.367: corrupted inode contents [ 62.693774][ T4644] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.367: mark_inode_dirty error [ 62.707450][ T4644] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.367: corrupted inode contents [ 62.732973][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.800351][ T4579] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 62.810755][ T4579] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.870382][ T4671] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 62.897217][ T4673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.377'. [ 62.916136][ T4579] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 62.926562][ T4579] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.958720][ T4677] netdevsim netdevsim0: Direct firmware load for ./file0/file1 failed with error -2 [ 62.958997][ T4572] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.985915][ T4572] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.007159][ T4579] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 63.017554][ T4579] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.131056][ T4674] lo speed is unknown, defaulting to 1000 [ 63.134946][ T4572] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.145908][ T4572] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.175249][ T4579] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 63.185745][ T4579] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.267094][ T4692] loop0: detected capacity change from 0 to 512 [ 63.347224][ T4692] lo speed is unknown, defaulting to 1000 [ 63.620609][ T4695] loop3: detected capacity change from 0 to 512 [ 63.721011][ T4579] bridge_slave_1: left allmulticast mode [ 63.726811][ T4579] bridge_slave_1: left promiscuous mode [ 63.732471][ T4579] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.823317][ T4695] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.882810][ T4695] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.894302][ T4579] bridge_slave_0: left allmulticast mode [ 63.900022][ T4579] bridge_slave_0: left promiscuous mode [ 63.905713][ T4579] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.918276][ T4695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.382'. [ 63.977180][ T4703] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.382: corrupted inode contents [ 63.989073][ T4702] loop0: detected capacity change from 0 to 8192 [ 64.029313][ T4703] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.382: mark_inode_dirty error [ 64.062881][ T4707] loop4: detected capacity change from 0 to 1024 [ 64.070013][ T4703] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.382: corrupted inode contents [ 64.119958][ T4707] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 64.132262][ T4707] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.170645][ T4579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.181932][ T4707] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm syz.4.386: lblock 0 mapped to illegal pblock 0 (length 1) [ 64.198394][ T4579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.207149][ T4707] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 64.219646][ T4707] EXT4-fs (loop4): This should not happen!! Data will be lost [ 64.219646][ T4707] [ 64.231820][ T4579] bond0 (unregistering): Released all slaves [ 64.239707][ T4719] netlink: 'syz.4.386': attribute type 1 has an invalid length. [ 64.247512][ T4719] netlink: 224 bytes leftover after parsing attributes in process `syz.4.386'. [ 64.260224][ T4707] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 1: comm syz.4.386: lblock 1 mapped to illegal pblock 1 (length 3) [ 64.281602][ T4707] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117 [ 64.293975][ T4707] EXT4-fs (loop4): This should not happen!! Data will be lost [ 64.293975][ T4707] [ 64.308252][ T4721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.389'. [ 64.317204][ T4721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.389'. [ 64.407744][ T4674] chnl_net:caif_netlink_parms(): no params data found [ 64.435991][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.453004][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 64.464711][ T4579] hsr_slave_0: left promiscuous mode [ 64.483217][ T4579] hsr_slave_1: left promiscuous mode [ 64.504301][ T4579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.511935][ T4579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.528016][ T4579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.535495][ T4579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.546953][ T4579] veth1_macvtap: left promiscuous mode [ 64.552533][ T4579] veth0_macvtap: left promiscuous mode [ 64.558592][ T4579] veth1_vlan: left promiscuous mode [ 64.568740][ T4579] veth0_vlan: left promiscuous mode [ 64.680633][ T4749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.392'. [ 64.694137][ T4579] team0 (unregistering): Port device team_slave_1 removed [ 64.707843][ T4579] team0 (unregistering): Port device team_slave_0 removed [ 64.796493][ T4674] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.803718][ T4674] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.827896][ T4754] FAULT_INJECTION: forcing a failure. [ 64.827896][ T4754] name failslab, interval 1, probability 0, space 0, times 0 [ 64.834386][ T4674] bridge_slave_0: entered allmulticast mode [ 64.840678][ T4754] CPU: 1 UID: 0 PID: 4754 Comm: syz.4.394 Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.840711][ T4754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 64.840727][ T4754] Call Trace: [ 64.840735][ T4754] [ 64.840744][ T4754] __dump_stack+0x1d/0x30 [ 64.840812][ T4754] dump_stack_lvl+0xe8/0x140 [ 64.840841][ T4754] dump_stack+0x15/0x1b [ 64.840866][ T4754] should_fail_ex+0x265/0x280 [ 64.840912][ T4754] should_failslab+0x8c/0xb0 [ 64.841006][ T4754] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 64.841052][ T4754] ? sidtab_sid2str_get+0xa0/0x130 [ 64.841089][ T4754] kmemdup_noprof+0x2b/0x70 [ 64.841130][ T4754] sidtab_sid2str_get+0xa0/0x130 [ 64.841201][ T4754] security_sid_to_context_core+0x1eb/0x2e0 [ 64.841236][ T4754] security_sid_to_context+0x27/0x40 [ 64.841268][ T4754] selinux_lsmprop_to_secctx+0x67/0xf0 [ 64.841306][ T4754] security_lsmprop_to_secctx+0x43/0x80 [ 64.841431][ T4754] audit_log_task_context+0x77/0x190 [ 64.841619][ T4754] audit_log_task+0xf4/0x250 [ 64.841672][ T4754] audit_seccomp+0x61/0x100 [ 64.841708][ T4754] ? __seccomp_filter+0x68c/0x10d0 [ 64.841780][ T4754] __seccomp_filter+0x69d/0x10d0 [ 64.841814][ T4754] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 64.841856][ T4754] ? vfs_write+0x7e8/0x960 [ 64.841888][ T4754] ? __rcu_read_unlock+0x4f/0x70 [ 64.841935][ T4754] ? __fget_files+0x184/0x1c0 [ 64.842034][ T4754] __secure_computing+0x82/0x150 [ 64.842126][ T4754] syscall_trace_enter+0xcf/0x1e0 [ 64.842227][ T4754] do_syscall_64+0xac/0x200 [ 64.842257][ T4754] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 64.842294][ T4754] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 64.842342][ T4754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.842374][ T4754] RIP: 0033:0x7faf015aeec9 [ 64.842452][ T4754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.842498][ T4754] RSP: 002b:00007faf0000f038 EFLAGS: 00000246 ORIG_RAX: 000000000000006f [ 64.842525][ T4754] RAX: ffffffffffffffda RBX: 00007faf01805fa0 RCX: 00007faf015aeec9 [ 64.842544][ T4754] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 64.842562][ T4754] RBP: 00007faf0000f090 R08: 0000000000000000 R09: 0000000000000000 [ 64.842579][ T4754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.842596][ T4754] R13: 00007faf01806038 R14: 00007faf01805fa0 R15: 00007ffdf219d928 [ 64.842624][ T4754] [ 65.043191][ T4759] loop4: detected capacity change from 0 to 2048 [ 65.051347][ T4674] bridge_slave_0: entered promiscuous mode [ 65.108970][ T4759] EXT4-fs: Ignoring removed mblk_io_submit option [ 65.147984][ T4674] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.155100][ T4674] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.177185][ T4759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.182651][ T4674] bridge_slave_1: entered allmulticast mode [ 65.206291][ T29] kauditd_printk_skb: 594 callbacks suppressed [ 65.206307][ T29] audit: type=1400 audit(1759225478.852:3661): avc: denied { bind } for pid=4757 comm="syz.4.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.233357][ T29] audit: type=1400 audit(1759225478.862:3662): avc: denied { setopt } for pid=4757 comm="syz.4.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.238262][ T4674] bridge_slave_1: entered promiscuous mode [ 65.337647][ T4674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.354297][ T4674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.388864][ T4782] netlink: 16 bytes leftover after parsing attributes in process `syz.3.397'. [ 65.400829][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.428852][ T4674] team0: Port device team_slave_0 added [ 65.430626][ T4782] loop3: detected capacity change from 0 to 512 [ 65.440673][ T4674] team0: Port device team_slave_1 added [ 65.463098][ T4782] EXT4-fs: Ignoring removed nobh option [ 65.482265][ T4782] EXT4-fs: Ignoring removed orlov option [ 65.494405][ T4782] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 65.515560][ T4782] EXT4-fs (loop3): 1 truncate cleaned up [ 65.525848][ T4674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.532915][ T4674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.558940][ T4674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.575013][ T4782] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.592552][ T4674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.599674][ T4674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.625664][ T4674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.655747][ T29] audit: type=1326 audit(1759225479.302:3663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4780 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6ee8eec9 code=0x7ffc0000 [ 65.679312][ T29] audit: type=1326 audit(1759225479.302:3664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4780 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d6ee8eec9 code=0x7ffc0000 [ 65.702783][ T29] audit: type=1326 audit(1759225479.302:3665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4780 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6ee8eec9 code=0x7ffc0000 [ 65.726165][ T29] audit: type=1326 audit(1759225479.302:3666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4780 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d6ee8eec9 code=0x7ffc0000 [ 65.749561][ T29] audit: type=1326 audit(1759225479.302:3667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4780 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6ee8eec9 code=0x7ffc0000 [ 65.773015][ T29] audit: type=1326 audit(1759225479.302:3668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4780 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d6ee8eec9 code=0x7ffc0000 [ 65.796577][ T29] audit: type=1326 audit(1759225479.302:3669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4780 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6ee8eec9 code=0x7ffc0000 [ 65.820017][ T29] audit: type=1326 audit(1759225479.302:3670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4780 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f9d6ee8eec9 code=0x7ffc0000 [ 65.864429][ T4802] netlink: 'syz.1.400': attribute type 21 has an invalid length. [ 65.908497][ T4804] loop4: detected capacity change from 0 to 512 [ 65.910508][ T4674] hsr_slave_0: entered promiscuous mode [ 65.923026][ T4674] hsr_slave_1: entered promiscuous mode [ 65.930249][ T4674] debugfs: 'hsr0' already exists in 'hsr' [ 65.936052][ T4674] Cannot create hsr debugfs directory [ 65.956838][ T4804] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.000088][ T4804] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.056031][ T4804] __nla_validate_parse: 3 callbacks suppressed [ 66.056067][ T4804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.401'. [ 66.069834][ T4819] loop0: detected capacity change from 0 to 512 [ 66.107701][ T4826] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.401: corrupted inode contents [ 66.147122][ T4826] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.401: mark_inode_dirty error [ 66.178250][ T4826] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.401: corrupted inode contents [ 66.204250][ T4835] loop0: detected capacity change from 0 to 1024 [ 66.249830][ T4835] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.262523][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.273898][ T4835] FAULT_INJECTION: forcing a failure. [ 66.273898][ T4835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.287053][ T4835] CPU: 0 UID: 0 PID: 4835 Comm: syz.0.405 Not tainted syzkaller #0 PREEMPT(voluntary) [ 66.287148][ T4835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 66.287163][ T4835] Call Trace: [ 66.287172][ T4835] [ 66.287182][ T4835] __dump_stack+0x1d/0x30 [ 66.287209][ T4835] dump_stack_lvl+0xe8/0x140 [ 66.287233][ T4835] dump_stack+0x15/0x1b [ 66.287293][ T4835] should_fail_ex+0x265/0x280 [ 66.287331][ T4835] should_fail+0xb/0x20 [ 66.287363][ T4835] should_fail_usercopy+0x1a/0x20 [ 66.287461][ T4835] _copy_to_user+0x20/0xa0 [ 66.287487][ T4835] simple_read_from_buffer+0xb5/0x130 [ 66.287517][ T4835] proc_fail_nth_read+0x10e/0x150 [ 66.287607][ T4835] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 66.287697][ T4835] vfs_read+0x1a5/0x770 [ 66.287725][ T4835] ? __rcu_read_unlock+0x4f/0x70 [ 66.287815][ T4835] ? __fget_files+0x184/0x1c0 [ 66.287843][ T4835] ksys_read+0xda/0x1a0 [ 66.287904][ T4835] __x64_sys_read+0x40/0x50 [ 66.287929][ T4835] x64_sys_call+0x27bc/0x2ff0 [ 66.288028][ T4835] do_syscall_64+0xd2/0x200 [ 66.288048][ T4835] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 66.288072][ T4835] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 66.288111][ T4835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.288146][ T4835] RIP: 0033:0x7f06ea21d8dc [ 66.288162][ T4835] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 66.288180][ T4835] RSP: 002b:00007f06e8c7f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 66.288199][ T4835] RAX: ffffffffffffffda RBX: 00007f06ea475fa0 RCX: 00007f06ea21d8dc [ 66.288211][ T4835] RDX: 000000000000000f RSI: 00007f06e8c7f0a0 RDI: 0000000000000008 [ 66.288223][ T4835] RBP: 00007f06e8c7f090 R08: 0000000000000000 R09: 0000000000000000 [ 66.288236][ T4835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.288298][ T4835] R13: 00007f06ea476038 R14: 00007f06ea475fa0 R15: 00007ffc33041198 [ 66.288324][ T4835] [ 66.499301][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.536918][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.599330][ T4846] loop4: detected capacity change from 0 to 256 [ 66.649045][ T4846] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 66.650612][ T4850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.409'. [ 66.665658][ T4674] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 66.689358][ T4850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.409'. [ 66.702293][ T4674] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 66.709554][ T4850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.409'. [ 66.732078][ T4674] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 66.745528][ T4674] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 66.759938][ T4850] loop3: detected capacity change from 0 to 128 [ 66.827189][ T4862] veth0_to_team: entered promiscuous mode [ 66.882560][ T4850] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 66.895559][ T4850] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.918192][ T4674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.930514][ T4674] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.954683][ T4602] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.961900][ T4602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.001766][ T4875] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 67.012183][ T4602] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.019275][ T4602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.046154][ T4878] bridge0: port 1(veth0_to_bridge) entered blocking state [ 67.053440][ T4878] bridge0: port 1(veth0_to_bridge) entered disabled state [ 67.079146][ T3301] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 67.079132][ T4878] veth0_to_bridge: entered allmulticast mode [ 67.079831][ T4878] veth0_to_bridge: entered promiscuous mode [ 67.123850][ T4880] loop0: detected capacity change from 0 to 512 [ 67.126333][ T4878] bridge0: port 1(veth0_to_bridge) entered blocking state [ 67.137321][ T4878] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 67.151604][ T4674] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.165122][ T4880] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.188701][ T4880] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.286622][ T4674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.427439][ T4674] veth0_vlan: entered promiscuous mode [ 67.435953][ T4674] veth1_vlan: entered promiscuous mode [ 67.478742][ T4674] veth0_macvtap: entered promiscuous mode [ 67.495902][ T4674] veth1_macvtap: entered promiscuous mode [ 67.510324][ T4674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.522770][ T4674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.541346][ T4616] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.554711][ T4616] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.580502][ T4616] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.612143][ T4616] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.652685][ T4926] veth0_to_team: entered promiscuous mode [ 67.804657][ T4929] loop5: detected capacity change from 0 to 512 [ 67.845898][ T4934] FAULT_INJECTION: forcing a failure. [ 67.845898][ T4934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.859195][ T4934] CPU: 1 UID: 0 PID: 4934 Comm: syz.3.426 Not tainted syzkaller #0 PREEMPT(voluntary) [ 67.859291][ T4934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 67.859305][ T4934] Call Trace: [ 67.859313][ T4934] [ 67.859397][ T4934] __dump_stack+0x1d/0x30 [ 67.859420][ T4934] dump_stack_lvl+0xe8/0x140 [ 67.859444][ T4934] dump_stack+0x15/0x1b [ 67.859465][ T4934] should_fail_ex+0x265/0x280 [ 67.859504][ T4934] should_fail+0xb/0x20 [ 67.859581][ T4934] should_fail_usercopy+0x1a/0x20 [ 67.859612][ T4934] _copy_from_user+0x1c/0xb0 [ 67.859634][ T4934] ___sys_sendmsg+0xc1/0x1d0 [ 67.859750][ T4934] __sys_sendmmsg+0x178/0x300 [ 67.859814][ T4934] __x64_sys_sendmmsg+0x57/0x70 [ 67.859868][ T4934] x64_sys_call+0x1c4a/0x2ff0 [ 67.859890][ T4934] do_syscall_64+0xd2/0x200 [ 67.859910][ T4934] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 67.859943][ T4934] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 67.860024][ T4934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.860054][ T4934] RIP: 0033:0x7f9d6ee8eec9 [ 67.860073][ T4934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.860097][ T4934] RSP: 002b:00007f9d6d8ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 67.860120][ T4934] RAX: ffffffffffffffda RBX: 00007f9d6f0e5fa0 RCX: 00007f9d6ee8eec9 [ 67.860197][ T4934] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 67.860212][ T4934] RBP: 00007f9d6d8ef090 R08: 0000000000000000 R09: 0000000000000000 [ 67.860227][ T4934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.860243][ T4934] R13: 00007f9d6f0e6038 R14: 00007f9d6f0e5fa0 R15: 00007ffee55ea018 [ 67.860268][ T4934] [ 67.871990][ T4929] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.070634][ T4929] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.083168][ T4941] netlink: 664 bytes leftover after parsing attributes in process `syz.3.428'. [ 68.143533][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.508673][ T4962] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 68.728784][ T4966] tipc: Started in network mode [ 68.733788][ T4966] tipc: Node identity 66ab6d1ea37d, cluster identity 4711 [ 68.741109][ T4966] tipc: Enabled bearer , priority 0 [ 68.755385][ T4965] tipc: Disabling bearer [ 68.834039][ T4970] loop4: detected capacity change from 0 to 512 [ 68.859044][ T4674] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.868232][ T4970] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.881044][ T4970] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.971885][ T4990] netlink: 'syz.5.443': attribute type 10 has an invalid length. [ 68.979863][ T4990] netlink: 40 bytes leftover after parsing attributes in process `syz.5.443'. [ 68.989750][ T4990] team0: entered promiscuous mode [ 68.994863][ T4990] team_slave_0: entered promiscuous mode [ 69.000751][ T4990] team_slave_1: entered promiscuous mode [ 69.006574][ T4990] team0: entered allmulticast mode [ 69.011685][ T4990] team_slave_0: entered allmulticast mode [ 69.017458][ T4990] team_slave_1: entered allmulticast mode [ 69.024725][ T4990] bridge0: port 3(team0) entered blocking state [ 69.031155][ T4990] bridge0: port 3(team0) entered disabled state [ 69.039550][ T4990] bridge0: port 3(team0) entered blocking state [ 69.045873][ T4990] bridge0: port 3(team0) entered forwarding state [ 69.370423][ T5012] FAULT_INJECTION: forcing a failure. [ 69.370423][ T5012] name failslab, interval 1, probability 0, space 0, times 0 [ 69.383176][ T5012] CPU: 0 UID: 0 PID: 5012 Comm: syz.0.451 Not tainted syzkaller #0 PREEMPT(voluntary) [ 69.383209][ T5012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 69.383222][ T5012] Call Trace: [ 69.383227][ T5012] [ 69.383312][ T5012] __dump_stack+0x1d/0x30 [ 69.383337][ T5012] dump_stack_lvl+0xe8/0x140 [ 69.383362][ T5012] dump_stack+0x15/0x1b [ 69.383382][ T5012] should_fail_ex+0x265/0x280 [ 69.383490][ T5012] should_failslab+0x8c/0xb0 [ 69.383554][ T5012] kmem_cache_alloc_noprof+0x50/0x310 [ 69.383590][ T5012] ? skb_clone+0x151/0x1f0 [ 69.383629][ T5012] skb_clone+0x151/0x1f0 [ 69.383665][ T5012] __netlink_deliver_tap+0x2c9/0x500 [ 69.383775][ T5012] netlink_unicast+0x66b/0x690 [ 69.383809][ T5012] netlink_sendmsg+0x58b/0x6b0 [ 69.383849][ T5012] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.383887][ T5012] __sock_sendmsg+0x145/0x180 [ 69.383985][ T5012] ____sys_sendmsg+0x31e/0x4e0 [ 69.384107][ T5012] ___sys_sendmsg+0x17b/0x1d0 [ 69.384178][ T5012] __x64_sys_sendmsg+0xd4/0x160 [ 69.384227][ T5012] x64_sys_call+0x191e/0x2ff0 [ 69.384260][ T5012] do_syscall_64+0xd2/0x200 [ 69.384291][ T5012] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 69.384341][ T5012] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 69.384396][ T5012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.384424][ T5012] RIP: 0033:0x7f06ea21eec9 [ 69.384444][ T5012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.384466][ T5012] RSP: 002b:00007f06e8c7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.384492][ T5012] RAX: ffffffffffffffda RBX: 00007f06ea475fa0 RCX: 00007f06ea21eec9 [ 69.384507][ T5012] RDX: 00000000000000a4 RSI: 00002000000003c0 RDI: 0000000000000003 [ 69.384523][ T5012] RBP: 00007f06e8c7f090 R08: 0000000000000000 R09: 0000000000000000 [ 69.384539][ T5012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.384554][ T5012] R13: 00007f06ea476038 R14: 00007f06ea475fa0 R15: 00007ffc33041198 [ 69.384620][ T5012] [ 69.689316][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.748738][ T5031] loop4: detected capacity change from 0 to 128 [ 69.791661][ T5038] netlink: 112 bytes leftover after parsing attributes in process `syz.0.463'. [ 69.842139][ T5044] FAULT_INJECTION: forcing a failure. [ 69.842139][ T5044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.855408][ T5044] CPU: 0 UID: 0 PID: 5044 Comm: syz.0.465 Not tainted syzkaller #0 PREEMPT(voluntary) [ 69.855441][ T5044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 69.855458][ T5044] Call Trace: [ 69.855466][ T5044] [ 69.855475][ T5044] __dump_stack+0x1d/0x30 [ 69.855503][ T5044] dump_stack_lvl+0xe8/0x140 [ 69.855562][ T5044] dump_stack+0x15/0x1b [ 69.855578][ T5044] should_fail_ex+0x265/0x280 [ 69.855696][ T5044] should_fail+0xb/0x20 [ 69.855721][ T5044] should_fail_usercopy+0x1a/0x20 [ 69.855758][ T5044] _copy_from_iter+0xd2/0xe80 [ 69.855813][ T5044] ? __build_skb_around+0x1a0/0x200 [ 69.855925][ T5044] ? __alloc_skb+0x223/0x320 [ 69.855953][ T5044] netlink_sendmsg+0x471/0x6b0 [ 69.855986][ T5044] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.856018][ T5044] __sock_sendmsg+0x145/0x180 [ 69.856050][ T5044] ____sys_sendmsg+0x31e/0x4e0 [ 69.856119][ T5044] ___sys_sendmsg+0x17b/0x1d0 [ 69.856250][ T5044] __x64_sys_sendmsg+0xd4/0x160 [ 69.856296][ T5044] x64_sys_call+0x191e/0x2ff0 [ 69.856343][ T5044] do_syscall_64+0xd2/0x200 [ 69.856372][ T5044] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 69.856456][ T5044] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 69.856495][ T5044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.856518][ T5044] RIP: 0033:0x7f06ea21eec9 [ 69.856616][ T5044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.856654][ T5044] RSP: 002b:00007f06e8c7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.856675][ T5044] RAX: ffffffffffffffda RBX: 00007f06ea475fa0 RCX: 00007f06ea21eec9 [ 69.856687][ T5044] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 69.856701][ T5044] RBP: 00007f06e8c7f090 R08: 0000000000000000 R09: 0000000000000000 [ 69.856758][ T5044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.856769][ T5044] R13: 00007f06ea476038 R14: 00007f06ea475fa0 R15: 00007ffc33041198 [ 69.856794][ T5044] [ 69.868708][ T5042] loop4: detected capacity change from 0 to 512 [ 69.898260][ T5031] lo speed is unknown, defaulting to 1000 [ 70.057525][ T5042] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.460: corrupted in-inode xattr: invalid ea_ino [ 70.119600][ T5058] loop3: detected capacity change from 0 to 512 [ 70.126198][ T5042] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.460: couldn't read orphan inode 15 (err -117) [ 70.171184][ T5058] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.214559][ T29] kauditd_printk_skb: 468 callbacks suppressed [ 70.214574][ T29] audit: type=1326 audit(1759225483.862:4139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.1.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d344eec9 code=0x7ffc0000 [ 70.261480][ T5069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.469'. [ 70.310813][ T29] audit: type=1326 audit(1759225483.862:4140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.1.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22d344eec9 code=0x7ffc0000 [ 70.334294][ T29] audit: type=1326 audit(1759225483.862:4141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.1.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d344eec9 code=0x7ffc0000 [ 70.357810][ T29] audit: type=1326 audit(1759225483.862:4142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.1.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22d344eec9 code=0x7ffc0000 [ 70.381611][ T29] audit: type=1326 audit(1759225483.862:4143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.1.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d344eec9 code=0x7ffc0000 [ 70.405111][ T29] audit: type=1326 audit(1759225483.882:4144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.1.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22d344eec9 code=0x7ffc0000 [ 70.428950][ T29] audit: type=1326 audit(1759225483.882:4145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.1.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d344eec9 code=0x7ffc0000 [ 70.452351][ T29] audit: type=1326 audit(1759225483.882:4146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.1.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d344eec9 code=0x7ffc0000 [ 70.476072][ T29] audit: type=1326 audit(1759225483.882:4147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.1.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f22d344eec9 code=0x7ffc0000 [ 70.486267][ T5084] netlink: 24 bytes leftover after parsing attributes in process `syz.1.475'. [ 70.499478][ T29] audit: type=1326 audit(1759225483.882:4148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.1.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d344eec9 code=0x7ffc0000 [ 70.610933][ T5096] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 70.717637][ T5112] netlink: 16 bytes leftover after parsing attributes in process `syz.0.489'. [ 70.749566][ T5112] loop0: detected capacity change from 0 to 128 [ 70.819796][ T5121] loop1: detected capacity change from 0 to 1024 [ 70.830651][ T5112] syz.0.489: attempt to access beyond end of device [ 70.830651][ T5112] loop0: rw=2049, sector=153, nr_sectors = 16 limit=128 [ 70.844293][ T5112] syz.0.489: attempt to access beyond end of device [ 70.844293][ T5112] loop0: rw=2049, sector=177, nr_sectors = 16 limit=128 [ 70.851402][ T5121] EXT4-fs: Ignoring removed bh option [ 70.858243][ T5112] syz.0.489: attempt to access beyond end of device [ 70.858243][ T5112] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 70.878782][ T5112] syz.0.489: attempt to access beyond end of device [ 70.878782][ T5112] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 70.896074][ T5121] EXT4-fs: inline encryption not supported [ 70.903262][ T5121] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 70.915705][ T5112] syz.0.489: attempt to access beyond end of device [ 70.915705][ T5112] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 70.930554][ T5121] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 70.940532][ T5112] syz.0.489: attempt to access beyond end of device [ 70.940532][ T5112] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 70.941984][ T5121] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.491: lblock 2 mapped to illegal pblock 2 (length 1) [ 70.953998][ T5112] syz.0.489: attempt to access beyond end of device [ 70.953998][ T5112] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 70.981314][ T5112] syz.0.489: attempt to access beyond end of device [ 70.981314][ T5112] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 70.993344][ T5121] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.491: lblock 0 mapped to illegal pblock 48 (length 1) [ 71.009615][ T5121] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.491: Failed to acquire dquot type 0 [ 71.010209][ T5112] syz.0.489: attempt to access beyond end of device [ 71.010209][ T5112] loop0: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 71.037815][ T5121] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 71.041471][ T5112] syz.0.489: attempt to access beyond end of device [ 71.041471][ T5112] loop0: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 71.048556][ T5121] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.491: mark_inode_dirty error [ 71.078040][ T5121] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 71.089576][ T5121] EXT4-fs (loop1): 1 orphan inode deleted [ 71.101834][ T5133] loop4: detected capacity change from 0 to 512 [ 71.108361][ T4562] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 71.125428][ T4562] EXT4-fs error (device loop1): ext4_release_dquot:6979: comm kworker/u8:8: Failed to release dquot type 0 [ 71.180558][ T3300] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 71.199242][ T3300] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 71.210433][ T5133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.494'. [ 71.220427][ T3300] EXT4-fs error (device loop1): ext4_quota_off:7227: inode #3: comm syz-executor: mark_inode_dirty error [ 71.280473][ T5143] loop0: detected capacity change from 0 to 128 [ 71.295563][ T5140] loop1: detected capacity change from 0 to 512 [ 71.321388][ T5144] FAULT_INJECTION: forcing a failure. [ 71.321388][ T5144] name failslab, interval 1, probability 0, space 0, times 0 [ 71.321827][ T5143] ext4 filesystem being mounted at /117/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 71.334080][ T5144] CPU: 1 UID: 0 PID: 5144 Comm: syz.4.497 Not tainted syzkaller #0 PREEMPT(voluntary) [ 71.334164][ T5144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 71.334181][ T5144] Call Trace: [ 71.334188][ T5144] [ 71.334236][ T5144] __dump_stack+0x1d/0x30 [ 71.334261][ T5144] dump_stack_lvl+0xe8/0x140 [ 71.334283][ T5144] dump_stack+0x15/0x1b [ 71.334305][ T5144] should_fail_ex+0x265/0x280 [ 71.334340][ T5144] should_failslab+0x8c/0xb0 [ 71.334373][ T5144] __kmalloc_noprof+0xa5/0x3e0 [ 71.334484][ T5144] ? security_prepare_creds+0x52/0x120 [ 71.334530][ T5144] security_prepare_creds+0x52/0x120 [ 71.334560][ T5144] prepare_creds+0x34a/0x4c0 [ 71.334597][ T5144] do_faccessat+0x201/0x800 [ 71.334631][ T5144] __x64_sys_faccessat2+0x51/0x60 [ 71.334739][ T5144] x64_sys_call+0x200f/0x2ff0 [ 71.334770][ T5144] do_syscall_64+0xd2/0x200 [ 71.334843][ T5144] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 71.334878][ T5144] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 71.334944][ T5144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.334975][ T5144] RIP: 0033:0x7faf015aeec9 [ 71.335051][ T5144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.335083][ T5144] RSP: 002b:00007faf0000f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b7 [ 71.335110][ T5144] RAX: ffffffffffffffda RBX: 00007faf01805fa0 RCX: 00007faf015aeec9 [ 71.335204][ T5144] RDX: 0000000000000003 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 71.335222][ T5144] RBP: 00007faf0000f090 R08: 0000000000000000 R09: 0000000000000000 [ 71.335239][ T5144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.335257][ T5144] R13: 00007faf01806038 R14: 00007faf01805fa0 R15: 00007ffdf219d928 [ 71.335352][ T5144] [ 71.415398][ T5140] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.575942][ T3304] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 71.613191][ T5156] FAULT_INJECTION: forcing a failure. [ 71.613191][ T5156] name failslab, interval 1, probability 0, space 0, times 0 [ 71.625895][ T5156] CPU: 0 UID: 0 PID: 5156 Comm: syz.3.499 Not tainted syzkaller #0 PREEMPT(voluntary) [ 71.625968][ T5156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 71.625983][ T5156] Call Trace: [ 71.625990][ T5156] [ 71.625999][ T5156] __dump_stack+0x1d/0x30 [ 71.626092][ T5156] dump_stack_lvl+0xe8/0x140 [ 71.626118][ T5156] dump_stack+0x15/0x1b [ 71.626139][ T5156] should_fail_ex+0x265/0x280 [ 71.626217][ T5156] should_failslab+0x8c/0xb0 [ 71.626252][ T5156] __kmalloc_noprof+0xa5/0x3e0 [ 71.626310][ T5156] ? security_prepare_creds+0x52/0x120 [ 71.626349][ T5156] security_prepare_creds+0x52/0x120 [ 71.626397][ T5156] prepare_creds+0x34a/0x4c0 [ 71.626430][ T5156] copy_creds+0x8f/0x3f0 [ 71.626530][ T5156] copy_process+0x658/0x2000 [ 71.626556][ T5156] ? kstrtouint+0x76/0xc0 [ 71.626599][ T5156] ? __rcu_read_unlock+0x4f/0x70 [ 71.626625][ T5156] ? 0xffffffffff600000 [ 71.626638][ T5156] kernel_clone+0x16c/0x5c0 [ 71.626664][ T5156] ? vfs_write+0x7e8/0x960 [ 71.626774][ T5156] ? 0xffffffffff600000 [ 71.626845][ T5156] __x64_sys_clone+0xe6/0x120 [ 71.626931][ T5156] ? 0xffffffffff600000 [ 71.626956][ T5156] x64_sys_call+0x119c/0x2ff0 [ 71.626984][ T5156] do_syscall_64+0xd2/0x200 [ 71.627009][ T5156] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 71.627041][ T5156] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 71.627085][ T5156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.627113][ T5156] RIP: 0033:0x7f9d6ee8eec9 [ 71.627131][ T5156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.627206][ T5156] RSP: 002b:00007f9d6d8cdfe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 71.627225][ T5156] RAX: ffffffffffffffda RBX: 00007f9d6f0e6090 RCX: 00007f9d6ee8eec9 [ 71.627287][ T5156] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c9a4080 [ 71.627302][ T5156] RBP: 00007f9d6d8ce090 R08: ffffffffff600000 R09: ffffffffff600000 [ 71.627355][ T5156] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 71.627372][ T5156] R13: 00007f9d6f0e6128 R14: 00007f9d6f0e6090 R15: 00007ffee55ea018 [ 71.627432][ T5156] ? 0xffffffffff600000 [ 71.627448][ T5156] ? 0xffffffffff600000 [ 71.627469][ T5156] [ 71.916254][ T4620] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.926864][ T4620] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.990402][ T4620] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.000990][ T4620] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.014572][ T5161] lo speed is unknown, defaulting to 1000 [ 72.050067][ T4620] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.060438][ T4620] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.111450][ T4620] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.121798][ T4620] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.217158][ T4620] bridge_slave_1: left allmulticast mode [ 72.222876][ T4620] bridge_slave_1: left promiscuous mode [ 72.228673][ T4620] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.239338][ T4620] bridge_slave_0: left allmulticast mode [ 72.245031][ T4620] bridge_slave_0: left promiscuous mode [ 72.250766][ T4620] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.350773][ T4620] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.361833][ T4620] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.372333][ T4620] bond0 (unregistering): Released all slaves [ 72.434660][ T4620] hsr_slave_0: left promiscuous mode [ 72.440477][ T4620] hsr_slave_1: left promiscuous mode [ 72.450610][ T4620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.474282][ T4620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.481885][ T4620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.498957][ T4620] veth1_macvtap: left promiscuous mode [ 72.504555][ T4620] veth0_macvtap: left promiscuous mode [ 72.510522][ T4620] veth1_vlan: left promiscuous mode [ 72.515819][ T4620] veth0_vlan: left promiscuous mode [ 72.646135][ T4620] team0 (unregistering): Port device team_slave_1 removed [ 72.656002][ T4620] team0 (unregistering): Port device team_slave_0 removed [ 72.663589][ T4576] smc: removing ib device !yz! [ 73.040818][ T4586] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.099312][ T4586] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.139556][ T4586] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.189192][ T4586] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.245827][ T4586] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.299542][ T4586] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.349250][ T4586] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.399047][ T4586] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.461210][ T3291] ================================================================== [ 73.469336][ T3291] BUG: KCSAN: data-race in set_nlink / set_nlink [ 73.475670][ T3291] [ 73.477992][ T3291] read to 0xffff888118925ac0 of 4 bytes by task 3678 on cpu 1: [ 73.485529][ T3291] set_nlink+0x29/0xb0 [ 73.489602][ T3291] kernfs_iop_permission+0x1e2/0x220 [ 73.494900][ T3291] inode_permission+0x1ca/0x310 [ 73.499775][ T3291] link_path_walk+0x162/0x900 [ 73.504488][ T3291] path_openat+0x1de/0x2170 [ 73.508994][ T3291] do_filp_open+0x109/0x230 [ 73.513498][ T3291] do_sys_openat2+0xa6/0x110 [ 73.518128][ T3291] __x64_sys_openat+0xf2/0x120 [ 73.522992][ T3291] x64_sys_call+0x2e9c/0x2ff0 [ 73.527700][ T3291] do_syscall_64+0xd2/0x200 [ 73.532205][ T3291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.538107][ T3291] [ 73.540433][ T3291] write to 0xffff888118925ac0 of 4 bytes by task 3291 on cpu 0: [ 73.548054][ T3291] set_nlink+0x99/0xb0 [ 73.552151][ T3291] kernfs_iop_permission+0x1e2/0x220 [ 73.557441][ T3291] inode_permission+0x1ca/0x310 [ 73.562308][ T3291] link_path_walk+0x162/0x900 [ 73.567016][ T3291] path_openat+0x1de/0x2170 [ 73.571524][ T3291] do_filp_open+0x109/0x230 [ 73.576054][ T3291] do_sys_openat2+0xa6/0x110 [ 73.580675][ T3291] __x64_sys_openat+0xf2/0x120 [ 73.585450][ T3291] x64_sys_call+0x2e9c/0x2ff0 [ 73.590153][ T3291] do_syscall_64+0xd2/0x200 [ 73.594657][ T3291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.600563][ T3291] [ 73.602883][ T3291] value changed: 0x00000005 -> 0x00000006 [ 73.608595][ T3291] [ 73.610921][ T3291] Reported by Kernel Concurrency Sanitizer on: [ 73.617069][ T3291] CPU: 0 UID: 0 PID: 3291 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 73.626372][ T3291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 73.636443][ T3291] ================================================================== [ 73.649300][ T4586] bridge0: port 3(team0) entered disabled state [ 73.657128][ T4586] bridge_slave_1: left allmulticast mode [ 73.662801][ T4586] bridge_slave_1: left promiscuous mode [ 73.668508][ T4586] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.676498][ T4586] bridge_slave_0: left allmulticast mode [ 73.682165][ T4586] bridge_slave_0: left promiscuous mode [ 73.687960][ T4586] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.696638][ T4586] bridge_slave_1: left allmulticast mode [ 73.702302][ T4586] bridge_slave_1: left promiscuous mode [ 73.708026][ T4586] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.715908][ T4586] bridge_slave_0: left allmulticast mode [ 73.721600][ T4586] bridge_slave_0: left promiscuous mode [ 73.727324][ T4586] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.848620][ T4586] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.858550][ T4586] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.868501][ T4586] bond0 (unregistering): Released all slaves [ 73.928671][ T4586] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.938390][ T4586] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.947830][ T4586] bond0 (unregistering): Released all slaves [ 73.993617][ T4586] hsr_slave_0: left promiscuous mode [ 73.999705][ T4586] hsr_slave_1: left promiscuous mode [ 74.005391][ T4586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.012852][ T4586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.020728][ T4586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.028265][ T4586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.037601][ T4586] hsr_slave_0: left promiscuous mode [ 74.043191][ T4586] hsr_slave_1: left promiscuous mode [ 74.049063][ T4586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.056489][ T4586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.064032][ T4586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.071462][ T4586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.083883][ T4586] veth1_macvtap: left promiscuous mode [ 74.089501][ T4586] veth0_macvtap: left promiscuous mode [ 74.095014][ T4586] veth1_vlan: left promiscuous mode [ 74.100384][ T4586] veth0_vlan: left promiscuous mode [ 74.106192][ T4586] veth1_macvtap: left promiscuous mode [ 74.111709][ T4586] veth0_macvtap: left promiscuous mode [ 74.117480][ T4586] veth1_vlan: left promiscuous mode [ 74.122706][ T4586] veth0_vlan: left promiscuous mode [ 74.216091][ T4586] team_slave_1 (unregistering): left promiscuous mode [ 74.224143][ T4586] team_slave_1 (unregistering): left allmulticast mode [ 74.231893][ T4586] team0 (unregistering): Port device team_slave_1 removed [ 74.241122][ T4586] team_slave_0 (unregistering): left promiscuous mode [ 74.248016][ T4586] team_slave_0 (unregistering): left allmulticast mode [ 74.255208][ T4586] team0 (unregistering): Port device team_slave_0 removed [ 74.309830][ T4586] team0 (unregistering): Port device team_slave_1 removed [ 74.320643][ T4586] team0 (unregistering): Port device team_slave_0 removed [ 74.353491][ T10] lo speed is unknown, defaulting to 1000 [ 74.359345][ T10] infiniband syz2: ib_query_port failed (-19) [ 74.800430][ T4586] IPVS: stop unused estimator thread 0...