last executing test programs: 5.968847744s ago: executing program 3 (id=610): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e0000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000200000000000000000000008500000041000000850000001100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES32, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$eJzs3c9rI2UYwPEnaZpMumyTgygK0ge96GVoq2c1yC6IAZfuRtwVhNntREPGpMyESERsPXkVb/4DgsseFzwsqP9AL97WixdP9iIIuog4Mr/SJJ00aTZL0/b7gTZP8r7PzPvmF88byJuD9776uFn3zLrVkayhkhEReSRSlqwkMtFFXlLsycuX/nz4/PWbt96uVKtXtlSvVm68sqmqq2s/fPJZMe72oCD75Q8OxPht/+n9Zw/+u/FRw9OGp612Ry293f61Y912bN1ueE1T9ZpjW56tjZZnu1F7O2qvO+2dnZ5are3LKzuu7XlqtXratHvaaWvH7an1odVoqWmaenklbbjnmDFDTu3u1pZVmfGEd2bMw7z94/v+Mc2uW7GWRMzikZba3Sc6LgAAsJBG6v9vkhqhLNl+QZmJ1wL5MB5eBgT1fxKH9X+wWDis/++98FPn0rv3V+P6/0E+rf5/9Zcof6j+D84+9/r/u5HrRyuiM2/3JJ0fq/7HYlgbfkX+frhijwX1f/Bq6K/ov3j/3noYUP8DAAAAAAAAAAAAAAAAAAAAAHAWPPL9ku/7peQy+Tv8CkF8Pbl23BeNceaMe/wL8Y4C/ecDzqXrN2+JEX5xL7cq4nzZrXVr0WXcnnRcl5L8Gz4fYtGGE3thowbK8qOz260txwlL4f+KiIojtmxIScpD+WF89a3qlQ2NRPnh+Xe7tUxuJcivSyPM35SSPJWev5man5eXXhzIN6UkP9+RtjiyHb+PJfmfb6i++U51JL8Y9kvz+pN9SAAAAAAAmDtT1YiXz+Xh9W+0fjdN1bT2YC0vg+vzo58P9NfX66nr81zpudzpzh0AAAAAgIvCy3/atBzHdr3e2KAok/oU4qONNOVkwpGDIDdFn6HgYRgsH9dnaWCG0x45H/+CxrTDcL2eTD3mJPirIKl3ZrKF61CTkX6vThkk85+is3HSh8D1siefu+16a8F4dKbpDATJx0bj+si1WY88Lkh2zp3U+Zmvv/17tlNk4l17B5teu29MmGkYZEZu2ZvwpP3D9yeOZzn93eL7WX5kBgAAAMCCSIr+opfc8sbpDggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAtortukjQlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAovg/AAD//5h69bA=") munmap(&(0x7f0000006000/0x4000)=nil, 0x4000) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) recvfrom(r5, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) io_setup(0x5ff, &(0x7f0000000400)=0x0) io_submit(r9, 0x1ffffff0, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="96", 0xffffff20}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff}]) 5.071954542s ago: executing program 3 (id=623): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYRES16=r1, @ANYRESDEC=r0, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x78}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r2], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r3}, 0x10) sync() socket$can_raw(0x1d, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f4a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x40814}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r7) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x0, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) 4.372500275s ago: executing program 0 (id=631): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000000)=0x1) 4.336566296s ago: executing program 0 (id=633): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e0000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000200000000000000000000008500000041000000850000001100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES32, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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") munmap(&(0x7f0000006000/0x4000)=nil, 0x4000) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) recvfrom(r5, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) io_setup(0x5ff, &(0x7f0000000400)=0x0) io_submit(r7, 0x1ffffff0, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="96", 0xffffff20}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff}]) 4.0888389s ago: executing program 3 (id=636): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x4c080) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3], 0x14}}, 0x0) 4.072254021s ago: executing program 3 (id=637): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000240), &(0x7f0000000280)=r6}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree\x00', r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="19"], 0x48) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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") r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000040)={[{0x2d, 'pids'}, {0x2d, 'cpu'}]}, 0xb) write$binfmt_register(r7, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0xe4ff, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffff4, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x4000000}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x4000000, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x5, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {0x0, 0x2000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {0x20, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x2, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x3ff, 0x40000000}, {}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0xffffffff, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x7fff, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0xffffffff, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x3}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x5}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {0x2}, {0x0, 0x1}, {}, {0x4}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2, 0x1}, {0x2}, {}, {}, {0x3}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x2}, {}, {0x0, 0x1}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 3.979684053s ago: executing program 3 (id=638): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) nanosleep(&(0x7f0000000240), 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400"], 0x5c}, 0x1, 0x0, 0x0, 0x801}, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f00000001c0)=0xa3f1f719967b8a37, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r8, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r8, 0x1) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10, 0x0, 0x2}, 0x18) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r11, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r12, 0x2000000a}}, 0x10) recvfrom(r8, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) 3.888784384s ago: executing program 3 (id=642): bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0x1, {0x0, 0xf0, 0x2}}, 0x18) sendmsg$nl_xfrm(r5, &(0x7f00000008c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0x18, &(0x7f0000000880)={0x0, 0x440}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbdb0cf81c000000180001801400020074756e6c30", @ANYRES64], 0x2c}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_setup(0x3f, 0x0) 3.888326514s ago: executing program 32 (id=642): bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0x1, {0x0, 0xf0, 0x2}}, 0x18) sendmsg$nl_xfrm(r5, &(0x7f00000008c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0x18, &(0x7f0000000880)={0x0, 0x440}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbdb0cf81c000000180001801400020074756e6c30", @ANYRES64], 0x2c}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_setup(0x3f, 0x0) 3.356104035s ago: executing program 0 (id=649): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007", @ANYRES32=r0, @ANYRES32], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010300000000fbdbdf251c1000001800018014000200626f6e6430"], 0x2c}}, 0x40006) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="fe1aabbbd51159573bf94b897a189f5103b5455043ccf51d0f9ef59f0026faff8f0b51dda9257a13b1d96ea73bf81e8732c81a63840ccae6887755c729565901e2599c5985af0536f725fb0790f194d37c32f7983e976d3254d8ca379ac48ee2408892fb781970e4b5fd29bc227c9deab192a5e82b1f359deeb771a575566def34de9d57cceff9cbdecd7343e5d56b78064677d2171d20dec0b3de361e1fbe16f5be5936", @ANYBLOB="0b00000000cf1c7b1808d17e7dffff5377c495fdf065b435ffb579e8e3e96b31c509530400c4af"], 0x48) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_SET_OP_GET_BYNAME(r5, 0x1, 0x53, &(0x7f0000000200)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000300)=0x28) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6(0xa, 0x800, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_usbip_server_init(0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b0000000000000040000000008000000000000010dc052d2f1ec03c7b34a6b214e9af193091a7f373bbacdf0e2bc63bac5c7fdb4ec856c11d9a2acba893c1862817c8000afc6c7942c35ca63623", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) 2.699784727s ago: executing program 4 (id=657): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000940)={0x114, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x40000000}, {0xc, 0x90, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc, 0x90, 0x80000000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8000000000000001}, {0xc, 0x90, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x10001}, {0xc, 0x90, 0x3}}]}, 0x114}, 0x1, 0x0, 0x0, 0x8840}, 0x800) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r3}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x4000) socket$inet_udp(0x2, 0x2, 0x0) pipe(0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x14}, [@FRA_DST={0x8, 0x1, @loopback}, @FRA_FLOW={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004041}, 0x80d4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000002c0)={[{@norecovery}, {@max_batch_time={'max_batch_time', 0x3d, 0xfffffffffffffff9}}]}, 0xee, 0x474, &(0x7f00000004c0)="$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") pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)=0x0) timer_settime(r9, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r6, 0x0, r7, 0x0, 0x7, 0x0) 2.55057837s ago: executing program 5 (id=643): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000000)=0x1) 2.502170091s ago: executing program 0 (id=658): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e0000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000200000000000000000000008500000041000000850000001100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES32, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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") munmap(&(0x7f0000006000/0x4000)=nil, 0x4000) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) recvfrom(r5, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) io_setup(0x5ff, &(0x7f0000000400)=0x0) io_submit(r9, 0x1ffffff0, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="96", 0xffffff20}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff}]) 2.353534054s ago: executing program 2 (id=659): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="8b33000000000000000005"], 0x28}}, 0x0) 2.352201994s ago: executing program 2 (id=660): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r1, 0x1, &(0x7f0000001c00)=[&(0x7f0000000400)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) 2.269676116s ago: executing program 2 (id=661): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x54, 0x24, 0x3fe3aa0262d8c583, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xb2}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x54}}, 0x20000490) 1.994353951s ago: executing program 1 (id=663): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) nanosleep(&(0x7f0000000240), 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400"], 0x5c}, 0x1, 0x0, 0x0, 0x801}, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f00000001c0)=0xa3f1f719967b8a37, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r8, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r8, 0x1) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10, 0x0, 0x2}, 0x18) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x106, 0x8}}, 0x20) close_range(r11, r11, 0x0) recvfrom(r8, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) 1.905498153s ago: executing program 1 (id=664): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) ppoll(&(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) timerfd_create(0x8, 0x80800) mount(&(0x7f0000000100), &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x2a0}) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000900)={0x14, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20024810}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4c}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000640)={0xa, 0xfca7, 0x1e9b, @mcast1, 0x1ff}, 0x1c) r8 = socket(0x10, 0x3, 0x0) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0xffffffff}, 0xc) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001540)=@newtaction={0x18, 0x31, 0x829, 0x70bd25, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8041}, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) 1.848709434s ago: executing program 4 (id=665): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x1, 0x0, 0x1, 0xa, 0x21005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, r3, 0xb}}, 0x48) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000340)={0x7ff, r1, 'id1\x00'}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000640)={'batadv_slave_1\x00'}) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x34, r5, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x38000000}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x18) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x1c9441, 0x0) pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r7, 0x5, 0x3) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000f80)={0x1, 0xe, 0xfa00, {&(0x7f0000000300), r3}}, 0x18) socket$tipc(0x1e, 0x5, 0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r8, &(0x7f0000000180)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x2, {{0x0, 0x4}}}, 0x10, 0x0}, 0x0) 1.566258619s ago: executing program 0 (id=666): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYRES16=r1, @ANYRESDEC=r0, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x78}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r2], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r3}, 0x10) sync() socket$can_raw(0x1d, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f4a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x40814}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r7) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x0, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) 1.55653433s ago: executing program 4 (id=667): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x18) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.324896594s ago: executing program 2 (id=668): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYRES32], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010300000000fbdbdf251c1000001800018014000200626f6e6430"], 0x2c}}, 0x40006) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="fe1aabbbd51159573bf94b897a189f5103b5455043ccf51d0f9ef59f0026faff8f0b51dda9257a13b1d96ea73bf81e8732c81a63840ccae6887755c729565901e2599c5985af0536f725fb0790f194d37c32f7983e976d3254d8ca379ac48ee2408892fb781970e4b5fd29bc227c9deab192a5e82b1f359deeb771a575566def34de9d57cceff9cbdecd7343e5d56b78064677d2171d20dec0b3de361e1fbe16f5be5936", @ANYBLOB="0b00000000cf1c7b1808d17e7dffff5377c495fdf065b435ffb579e8e3e96b31c509530400c4"], 0x48) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_SET_OP_GET_BYNAME(r5, 0x1, 0x53, &(0x7f0000000200)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000300)=0x28) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6(0xa, 0x800, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_usbip_server_init(0x1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b0000000000000040000000008000000000000010dc052d2f1ec03c7b34a6b214e9af193091a7f373bbacdf0e2bc63bac5c7fdb4ec856c11d9a2acba893c1862817c8000afc6c7942c35ca63623", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) 873.866513ms ago: executing program 1 (id=669): r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x100, 0xe6, 0x1, 0x0, 0xa, "5664fc80adca15ef"}) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000000c0)=0x3bfd, 0x4) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0xff) ptrace$ARCH_GET_FS(0x1e, 0x0, &(0x7f0000000180), 0x1003) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r3, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0xc1) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x163, 0x163, 0x6, [@func={0x7, 0x0, 0x0, 0xc, 0x4}, @enum64={0xd, 0x6, 0x0, 0x13, 0x1, 0xb, [{0xf, 0x7fff, 0x20ec}, {0x6, 0x6, 0xc8}, {0x2, 0x3, 0x8}, {0x10, 0x4, 0xfff}, {0x3, 0x8001, 0xfffffff3}, {0x8, 0x4}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0xd}}, @ptr={0x3, 0x0, 0x0, 0x2, 0x4}, @struct={0x3, 0x3, 0x0, 0x4, 0x1, 0xde49, [{0x7, 0x2, 0x6}, {0xa, 0x3, 0x6b}, {0x3, 0x0, 0x377}]}, @enum={0x10, 0x5, 0x0, 0x6, 0x4, [{0x1, 0x3}, {0x2, 0x7}, {0xa, 0x4}, {0x0, 0x2}, {0xe, 0x9}]}, @enum64={0xc, 0x1, 0x0, 0x13, 0x0, 0x0, [{0x8, 0x4, 0x100}]}, @struct={0x5, 0x2, 0x0, 0x4, 0x1, 0xffffffff, [{0x2, 0x3, 0x7}, {0x3, 0x0, 0xe8}]}, @datasec={0x1, 0x4, 0x0, 0xf, 0x3, [{0x4, 0x4, 0xfff}, {0x2, 0xffffffff, 0x6}, {0x1, 0x6, 0x1}, {0x2, 0xfff, 0x7}], "0fad32"}]}, {0x0, [0x2e, 0x2e, 0x2e, 0x13]}}, &(0x7f0000000640)=""/235, 0x182, 0xeb, 0x1, 0xffff}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001840)={r5, 0x20, &(0x7f0000001800)={&(0x7f0000000780)=""/125, 0x7d, 0x0, &(0x7f0000000800)=""/4096, 0x1000}}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r6, &(0x7f0000004540)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000004500)={&(0x7f00000018c0)={0x2c34, r3, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}]}, @NL80211_ATTR_NAN_FUNC={0x384, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x1}, @NL80211_NAN_FUNC_SRF={0x36c, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x34, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_NAN_SRF_MAC_ADDRS={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_MAC_ADDRS={0x1c, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "624a1d348619ac16c4e949ec48b4d272a78d5904bcd815b9d198847f92c8f016a3bd8160600455a0994beb8e1c235d3888b9235cfe532aed00ef4204a07da592e3653f6566cf9eb940486ae1bd961d0ec53b9b28fc3be91d4c8d2093c8f6b8275d4d3b8dad53c07b4d327081ee3508d736f2bdd25152d1564deb888138e3a58a72bf893cefcf67932e5b1788e24b520baf32fba46d378c564f87e0ecc7ce2bdcf7d328a5facbea072c6ab0ee726fe1c4877ca4ec5db3c0a97e447a73186bcaf21d5822e42da160eb27b673123955919fa768097833d894c2ee966a86db77d830ebbb177394f227c274a440db99f32e2fcf588aa909c87c5e360757945c532c"}]}]}, @NL80211_ATTR_NAN_FUNC={0x12e8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x8}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x1008, 0xd, 0x0, 0x1, [{0x1004, 0x0, "33e5013cddba05ee9fb8f47e6a671e8b4c9cf7ff68c0b13fdfc8628324a26abccfb595fd31593dfa33e59c3cf499d559f9071716867afbca52c19c4096722a7b4a1a450262b9a45b85b44cf30340bc4acf8654ad0ade14b716e2be7f578e89e2deb22cb0e8699ebd95cca149a615c6a4a0fef73398854aa340b57cc4d3cb238b9e699295f6e5b266b74809da932d70a93c49eb27cd2954d918b89f701b01861bf4dbf45ace60947bf4c1e3bd41cc3297fc3575c438570f19adccede009392a3215dcb189376c1069dc8267fad055e3b9928875b4529e5c04a296b74701b82ad2c4279fb49ebcf6d88e7f545d04b0adb3ffc12940be3a5d899ae54ac5464f478f1ad8bfcbeaf05dfa7e71fedcc87590b339be37584bbef7de75a8b19821c26451a3267f3440b0c985de04dbf743fb7b33092ed0d2d192f03554f26dc8882cfd6da05fbba9b91c7af2b4b40bba751d8cd7910e038fefab6d77cd2d42a6f7bf18d204a01fd82c9da705ceba9f40e0b892df8278fe183f048dfbf61e86c5a5a468f091a1ed39383902f035231abb2a3a9bc245dfb1fc77b37cd0747d84a50390695ac688d70bba95200c017506dbfec8554796410e65dbbd959d532bb4a08f931e03ee4a20fe46703ab4a4208b771df80891c54438c91219b763758bb5639e3e8c700fe20f55a01a6c88e19a6ae0edfb8414daf0914fa2112bd89c15fbf94961636e5c7d06a4b4d6a6277bb73e6ca974f1a77b418e32dd2446ee9a25d90855fc4e24762754a2de2735d00f6064c90cb5b58c1318cac00fd9a4f8b5ae5c65a14dc4f791403527672ee51df5edf506ec7696cce0c389abcff9d6788b238079002a61bfbc934be049f5990c30c2acac0d164a656efba08799dddc87ce303ec4e24b756294187530717cfec0e0925a7b5e7bfd61f7a8b874b4330455b1d264b02e54b5e5dc8ae214b51b0e0284c17087e6bfdb38e01a35e2eacf4c37efc0f55e6a87aa34fac2f2f6ce797a2a6af4745ab65537bf02e57eb98390147a6a20e45f434084a7fa58d92eafc57f6fab7f6649900fe7c9b9fb09dc7ff4f38441810a85e2731678f0ce4b60b0378d20997fd33dc57cf960a3d2423efbc4f054f4699847a5d3a607842dcac59fed8d2271021faa5d38b5e0adebdca6413b2bd866c7a86682368879b4b3cc697c05b133780a0b61164f00c3b9bb80f462c5b77f023fb33c563306b0a4a08e749c2df454ea8a0049ef90dd9b7ef4ec979f41d30fb5e15bcd6f7267ee8bee2fe0386363bb8ba92882bf5e7e7e9165eb46c261b253b34e5be3a75ce89ec0b35271902e25b80abd8dd9cdbb2b47f4e01ad1bf2293dc30c6676846ff92dfd800f3627f92d51af18e00d516fd672dacf8da31fb5c747049f0b91afe1f46c860f01fb6f38681499e84dc0e99de03c986ac5450e12c95f3ec2f2469daf96aae519007c472a001f4fa475d094e37bbadb9ff33261d45d5e04b4e2062d0e480e7aac4d089af357994747fe0b540ae656c4bbcf6ddde575003ad2765bee9eaa8c4c2bc417cc0adc40d72d0a79561064b626a45026f7aa8dd4e49730355c27abd5d41bf5f35cb08ed333740ab5db047db81f232d36b98e21c8e7ac49255453eb554c3d297cabed511e3701aab688324ff7b0656ae3fbadd5b1969e80fc9cf83550fbec68d5275a77fa741a954475a3e28c9624a5f226a67a7b1db8b378d032f7be8db3fc163c6592ec39edc73757e916401db79878d405c19a34b3053e3218b5ffc4521294baefa1c5503a36b1895fc813e711965d4eaf7dc321c03350b634fc3e05468c00a6cef2e1ab55db60b29b5324bc98773f194bfd7f0b4efa6c791f96cb56facf602a097703fd5c0a8d7b807a383cc297d541ac3b0e3b459de24f6c45560c425eba5a25dc6fc821471f6ced0b362bfcc99c171b431058e7d568909787e3c31b5a6b2a608c977ce1cb1c9d1bbda603084fe5af9bb5de19dcf885131574f5faebdf8725926058d909a6ef08dfa1e623f9f79d806eaad78aa18802d9f0b9eb32ed3bf2b446b10d32475492618d0470ecb3fbbf0172c2781e7f4e5ab7b60eecc69f0befb4f5ebb913bdcd4271ee1cbf9dcc7d660a59a68e4a5faaae2e8e680efef0b59c0f0a317a44c73b212419f0af0623068ebad604ed0a35e8713747d9b42f2c38af6020fb0e6f0a9dd03c68f96b7c06e3a802cffcb5ee11dc5fd0abb940b4bbde9f28369dac97fb5c5bcc4f82718ae4addf25e1508b92f8edaa7f6ffcf0473ecdf71db9b0d4f6890677802f98ddb0d1976ccd23851b32ca77d4bf0397e05f3c6900c6273a92c4deb86a5c0c425383b65dcc3f87be815c5ee7f81ad52a38524000dad90734fd1607e85c8ff96c39b1ca49ad6caaa29b3b5f55957da36bfe11f811c3a85caf7204851aee233ea6e09f931433ad422ba5a4727ca0ca0d62d88ce2a7486f904605fc2925196f357e1e0ff3c5c57de6bec3556ce311965d4358ecc73929535b67ed8fe50622d07e86186459e4a149d4cbd808d5c3d819696afc8b7ef83dd932d088f79f7a6e2519d47fd8c51e6f55daac08c712736e032417772f782d201d95bc26a3b5492438f6ebc7084d34a294f9d0c25f9d298e64824f56d3ad7968bec7b6a0b5d9ba76fa4773d411dd8c0ca69b8cd29529d9bcbc7c6d9e144cd23e2bc00520610e3b2a6002284478c66b825cb39635d1bf3b2179f2c7a95e431687d5b68bbbdd56ec6388851d56fafa25527704156032a3fa27b8c54f688c0074a3d3491a7acc726ec27288e997eaeb9438deeb7d0859d9fdbb75bb2269fbe9fe4e9429d9a8876f8f19cc87b365d0dcc856e4156e6fd2f4be482ed42b7909df7afb67de3f97dd0c4bebf138436752d454c997fe32e28f17e7d0139a59b905a05c98f7fae20e1f5d7835651dea57a0773df9b0abbafef845ea322423f69b1ee4b4d3553183cfc68464e54c2fe3b5339cee2779b423f6764e6377b290f5dab7bde933bcd66425999ace5d9855214579ea3c344ec3b4b0d6ae5ae1ced3fba2f05a8cfc3d9199fbed32fa0625a5e7e9a4f7e4e4fe2885f3323d6e0bd61952dcf0576593c8ea503e212e1b07710c64528e0c123c7926322ea4caf15bc375856485c8f1331c37e90bf9492b8a474193003a137d41c758544d3544472dc60a7938c453fc5a50097e31d7124449b7c81eb62059b63dd652bb26076f5799eee6b015b5e1a7916e19127467bb413e319b1ddd33438ce7961a696af73291c99f6d26556f64a80d1637603777aa061b1eca7ae95c29d409eb23a086809c0e3232c7f6773a57bf9d8a06a1b7282d5f59679242068ed4aa22ba1404e92cb9a5fb329f88c07c7cc63182e1a1b3db7c7133e638b96a34ac5f231888be6cfb5d72d7c70351bcc4621815771f5cac50511c7ffb9343d4681eb9d2c6d9aa611e50a10d3a4d1d0751c217f28aba4f39b87b619702b1e05b1a34fa0a8d99acbfdb5abc7f99b05338000764d1042fc6f7f86f41fba34749973211c597ce990a8e35c2f5d7f6b4efb74d1c419901dc78c55b607eb72fee5ee20f3fe6491df64f5ff10243be4c8f616cf946d18be4521e888cf3c2d02f0c4dab1fdb442ea58379552861d2fa03810399edb7f75020a08535dd65f5145278f51131039d76e8934fca1175557bc6413476d34a687833b4dc27f61fa5dab9f63dc743f2ae93b2f86684abd6658e2d830b4be609d011f0e9abe1e57895973385f6dba4d1465e2fc5d420cbc35c84de4fe1cf0a8135472e0a86cdca6382d7f5a16af223f26bd8b1220e54f23a8340a3f23e52b92ce20f145a9970f57345fd3d1df250a43ff991b6aea0b5781be31437f89ca808f368b6d0e1bf464a99a854d4bb05cd123c4ba3a4c8e0ada6434100cf9eea49e1cf1e03296884e7b13fd92b8dde9e94bf22014fb197cfab02b97c44d072bb5f4964d3bf236e24708e0c19b4caa0e1ff691b834ab22670b3538e5f9655a460d374011e50568e9f629e43ec2a4ba6914dad6b09cea884fdba7a2483bb2ecbb1b9752d5ded8066c516dc55bf1d33d4f754c099883edaeeead3975db994c16a1be3b8fb941cbcd56cde3ffd14a7193b604e9f72e1762c6a549314873234f469db66404cde6c958ffd4bdad1de7b4f49293de8ee9b207ace811769d8a5c5affc189549e39ff5ef62e926725183ead2e608cd37635fac131943b62a9b7e888cb5ee7edd6a618c7358628c31e94fd95cf152c1446816813f9f5ebaa3cd717f582677da3f3a41b2c2f17530feb2b33ca4037352589b91d4dcd3d99348523d1368aae5f056d7248bfa00c1882664507ef6b0ddd584336f5148d02dffcb3a7ba3751de8e1f6ddfc977a792e79229579f2ed9f3ba2f53998ece9610cc535942be2ef3b5dde69ff041b9b214a492ae8dbb3a97dbdb0f96b766bd3cfc6b62920140baca541f09ba2256c90e97777d75a3dd8910f152bcefd2a3990262a954012f728282cc55e0696c31226b19031f9199b84ade98b1c69edc3c6ffd55a1ec1304da4cc83c00c885156cee546e687271fa35fcbddc36c97f88752ee45f784fcd7dfb17dee31eec717855095cefb392ec032a20e8381834013b8914247893e4f9e7e1e193eb06d5289bf448bc66d292e36957710b3289bdc9b1302d4c146677b71f3573ed2662c8f4a9aa62f7644cf069e5f6a315b0b8a305068db3aaac64994198888678358d6d8fcfa404308167899738f506e7aeb0b2e328191506b16c4bc63a63991d7e91d62034cc2557e58cdf51ebfb9c17dc01d006b4ec5a36adc5d02972dac3664ccf725cd1a99da084044c242d4debc8e94bb1c1eecd79311accaf626f0837d01d2893cdd4d70c82f98c8e93c3d32ceb96a72b910557b97147c1a568cc4ba506fa30049c7db443dc4fc2664704d8189c3d880a6009021add02a7dd4d0a464c9e7b17c582c1534285b242782118ef8fcee3cd161b88da1baea521fb06105271be9e9d1d02e805e114f9354002e19cd67427ca94bedaa2a031cddc6f1c3fc35633958728f6c90f275cde7c8b90f6cd64d379fad9fdee6bdcf632c7f6a7516dc201fd9d8f491dcdc339d270832e3f2d589ca54ad3eff7e29efa1c2ca360ae2e786d6452a456ff54492c5ac15877fa04a4d052a31b8f3d819a62f11a12032222854a77e26e434f748c674e2f2b15306246d043a512a951e6379f8080b8f3de649fc95709b9918b66740b19acf506019ee22b8a4c7c2c5ca36e1d4f4de6d151f1c7e2c97c471bd2bf09ce16d96f332307e380e209c6bb033bf13f48b1556888bfa36dbc47432cb7d211b1547f1d802b94573df0380797255a56a52e0644a7939a715c23c436824caa4535b1c5b295bf5b310970653bf93f570237b5e54945dd2d641275f04faa2ac8f60f99404d6a523c8133695e06b06bf7f386d42e4a088b0eac48f1666b5152f7c7cba9c5b4f9d27255fb1a329fcbd232f23bcdb7696a1020c143a37a726ee3409f04ccae0f0cb8203aaaf7211c55872da05e92d17878ad6df1ca321a98c43aa078ffafe183f7fac63835031ae774d0021e38cbe871c49eb7da7c5db134e24e5617b9070a18f1e9e54c4e7a09ede1aba06c2677647230699abb60bc606cb0f981fb54a92e9ed2ccee09a3e39a83fb072df6b693e702e20de66d2f4f55659865a1db764494d582b673888cb86d0931f930042b7e03e18d88636475658406db6f31dd4f31bc99077bc08608034f553bda061c8cf6562e7fe064612c3a7402b8ae823451fa1c2d4d1df5caa29b7f5158ac45a5f9b6768e58b19edafd4a2ee1"}]}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x2d4, 0xd, 0x0, 0x1, [{0xfc, 0x0, "1bdc90150881f42c6ea56deda5ccc44c4330f498383487d0b446ec710dba4a06e695e90e37394c1183726de03ccb4fd00f53d0311f18e564ae897fda1d626f4612406bc50c1886301697abc6a589d565bcc835d392640542943cf1a84e16b0f2f65480c631a02cc5ec5033e5aa6ac7206152b0a01e60ec35f4ccc7e7cfdc6d340d6a0d04d7f0aa3293e4ec6ebc31c1f45238808651ddd26f949445e6bffc334454b6b1d462feb77f9c415cf6fc88b4e7553ddf9671ff94986e3b1dd7740ae32b6a8eeec1e2b0627fde4f2c9d178eebf943a250844a6b27fbe3d4336666895186c3e44335013005f3a0c17c034f84b50dc06286e9deab082b"}, {0xd8, 0x0, "f6b9ed08dbcb3551c606225a53abad0df5e3fd6a7700544b8acd9f72a457339f3a8b1f7e4da05ad33174dfd3ebfcd1ba5297786bf90ad95de2631508920cad2ea71d8b5242bc2e38d084dc58355eae2426ee7df25a32d1315d6a7df8e240717b9f5c47bbb7e267725d373834cf09a912b926d1b33af7fa38a0836d64f01de2f4b723e75a0b4ad2bd74e719d5535f9860488ada26d89d289c9c2a4aaa9293cef1b42b872c883c9b6dc6add48ecd5f2d58849aea1fd0146309444d0d965648660fee719933a4b7e98353aa340494b3824aa4737ee6"}, {0x96, 0x0, "aae47a32f85b3bea5ad903e686ea08467255f19a681a68489738f4f333999b9996a6cf160511d9d13a29954d1bf4f210a53930e975fe5a617f1c517d414f3b2d363800aa8568471570a383727b4fa98764d3bbff9bae611e1bef80aa87155d8ce0f61325e618ff08708d430d95892bb68ea9bb0149823b8758bb664f8ceb0f00d43259fffeabfe871f095982703a522589d9"}, {0x41, 0x0, "3feba077b04f1a9cfa2eeb7f214116645dc00c669d482f3385b107dfd1d15aad4388323a2a3d6aeba2d996a3552d7dfbd08e9d1a919eaa4022cd41e156"}, {0x1d, 0x0, "e84f615bceff730842117f75ae430876913f9f97460335093a"}]}]}, @NL80211_ATTR_NAN_FUNC={0x14a8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x128c, 0xe, 0x0, 0x1, [{0xbb, 0x0, "d881e8f4ce233fd9c53ec866a0b58dfcdead12846cd7c7dab507e9368128179b8deceea6c89698531932e82b0d02998db9906675e48df387a813754dc0e9083d8de9ab403f23009dad14872d479cf6320fb346d4f7c6bad18348a8ef650138b3a5ded4c4e08946628080b89028359db51530f0c9f6733533e14ca0b5791d79f57460963284deb216232e8604ac0ca0e28489805ad6bcc520c4fb7d7a996f20c95e69ed180a234c10d901d77bf2fc69fcd62b067076a611"}, {0xef, 0x0, "7e0001cbcfda74f759753a6f7f32cc010352a4e94d80f84d62cf07ab9fc52422c8d4d8b40ed59f32c9ce2c36ab3d111b29886769d92acb379acfe686a36d2a7cad30aaf4be69dd36b6024b318a5df26064ddcbe991fe5a861d6ac06a2370d05c359269b9840a354f1fda9d75af43d44963d9acb286adbd0309d1dae561af8930921cf00a26ec351d5e67e09dbbada828d00b8d7cbb73b4f68f6db6ab82284680888286510c129accbeff0c2d2674e3110acd4ad0ec99d2085d7c22dc094f97bea10106d7deab7e0bbee984db6d113515b3d37ff912c5ded782c00ce84f24d80b6df321118508fcfca98044"}, {0x1004, 0x0, "28fb8d3bb9df14752e67af2c07ed26bd94f204d98919389bfaa15ca04056bbe36eba875986352901e369760fa2d831caac02d9c3f3a7036887b4f49184c32bf4090513c4548585ef4d66c85a222a5e53318de5277640c71467cd55988d823ffcd65b733226f9931ba0a1a424c72db220de60ad5a87ac90f8315d8d8dac05c62a968d5982a1d36c901e1f4da6b7c0c34af7a7e22343c64c54490c07e41fbf7ac42363f3ffdd12d07af4a7d8683cbd7925ac2fc266fda468831acf467be94b8fe735157f65fe1f9707a385dac23410ab64392169d7bcda409b9ef6cf3c0ef17ba4c13b8fbf6844206299b1702defe25ff6febc100ce3bd061dfb825ebafcd7511fa8632630c5ccdcf4c26452c7739c6f601a60ae321a8da4f4fe74ca30adbf7e4ff331a71a0a7ae22f0f30d53eede00c3400e8b0fbba1d67aee095809a3d28ddddd74de45e4d7301da244cd5b98d013dc46329ce722d429e90129976a25bfaa6514f9b89bb537cb03eba7865f052276ebefcd826420d9bf0ed90db112457932eb6728249fbdb7ff9f2c738092d53d0288efe6f4167584005365f4a55f9e4c9dbedd25f10bc4d0ffde6243093aa514a3c28f4cd57b168bb49877d3fd863c62f1ede0278195465582b85eeda396aebbaa8c47a9fce0370336eb6e141fb890609590f3ee6d3f08479de496d79db30ec98220dc1b146b6ac9d627eca794f2cda970b2f018b38cc7f97b4958bb12ee0e24358d9a22fb532435f989bf4ce92793c56ae792d64309acced9502702150d480447d2051f90985c58885a119930b425023f5c0087fe1c2c198f4e96eec7dd0be16334bd1f95e6a664a70ab5b6976c939881a66c0f064875241b7ccf8c2c67e9082b83a44547413d58c18abdf1719a6470d0add788331ad78379cd35607eab3fc895edbb84c453da2dee781a7bcca8df07fc43194123395eddd2f529c28a57823431c0d7ab88786fc142464b479c8212d9147138368ff7eaafcd6ea292264a090794ffc3eb0d2a000f5505ce37b68e670b2e43e51d3226fd7ddc48cd62fe8b249ca5351b6210917b7d1cd2756745dfbf0665c4571b4b123c97d185626a3e28ce954bdb75ec4f23670e81acf65d22d172b712a8eef2294b352da673c20ce91c689e7bbe79a973ced750c8834f83f5d5fc6fbe93f5be0b972cae6eb1e5389c0fa25af19f47c198bc480c7b6f06ccda67aa70f36dcaef7292336433e3210ad30e965a8e834c66f237f15f736b640c2f2743d0ed1ab6ceb6e7e8db7bb27dbb555068653420bc5297feccadfe57c69d7a128dcda6735289cab93b0a4b80cce7c75588f2e43275b628560d88c6d42ec13cb0172ca946ca80473da03ad52dedd1a6a1b489b4f43ebaaab0d199be966c53b46bb33bf2fc17e88abad1ffae81895eca8bcb69840e3ad923b7ab0dc1324d72b29cc7b25b725b0c6dd5727b5b8f158ea1faf462c8f5112c86619df12049596ff06a8bb0733c0307719578e9b6d09aa9f3d18d1d335a42dbd2505e7c091497e1b5797d0e3f6face6e88c1665456f5add46f49f7e809aaf0a296660f2c64b698a2b69b9230df1b80b4e50b5c355d41a19aad89bd00e9d90b63296d83cede3301a2276d4014221699f70aef6cabfaa6d7909773b9bb2e22a5757134071359d4bbe6f8a6297c134a8ba7eb4085bec95469e7a75f3f0f25382e860712dd215014754445aee0aa940418bfead7a28f586504b3915b832b04d8c01d1848661b5832f6f7c0b1295379c8c71d572344b56f406eafee4344929ae80ec4c54e8c077b8fd55f7a993b7bcad5f5e0282957e02fb04c7ca34d0f983331dd374dda6b4b1a6d6b200b4d408d3f13ba12471115b5fc2eb8fb9f96220a04717002181a4cdff851841285adcab61287784f2dfce2ac4d687966cea1612334ad1bd7863f93347cad6a0ad05fb0542e7a5fa2c65fe328838b597b2f9fef50e83de072eb56f37704c214cfb2d9fae78ed8fba0177c48eb0bff019269b154fcfbbcaed5e480fcf4dff2e635ef5d6ea2fa89025fe83b1bf232ac5e7ce11d5543719063176c6c073baf362110614f6f75ecd42f58aa3d551b5360c2a62eab57c9df5a733b3fffcfd8469928f728cf6955d671c42f9ba600224333e84cfe47056b5f3ef1460a21032932d8170fd8ca1eabc8c285b95776f34513490c4ab80ac77fa225387a4100b6c5221cc4177d1617a404db3651125187be2af788d53c54e98fd12bbd651f60acff1cc169feb7d35552cc83fa1bb0371434f88d3e2dce3b460b99bf1ab4c9ded9f6d12493a2334ac71849e574f82fadf54b26d4978ab9168c3fa54043c5bba571e7be1a8a5f23eba7221018b5f9c979f16180ae6151e784ad308cbc9621a5ff3cda34891b592939954bf6ca2b37974bd452ea8cc7567fe646784ceb2c99c5f76880a9cb4e1417744e345ff1454922c9a1647d51d0cf991e4f584ff73859c62e0c344e5402e9136fbf79df78527d2aabaac97f1d29c06ae18b97777ce63564a2b95af7ff1ae0f228c419b6eae6dd868fe0cd7e9bbfbf6e17da43e4f7498ccb34974359898e51f998b45b83bbe52252e4900e2a27cf567201411b7dc4f84e9a786ddff120ef488665a762589849158964161c3f8a715741fc65f03adb48c06a3c3e90c4cdedb8c60ab710e18ea042dd21be09a71da137ef42e2fa4a271dc1d29af80fb991f5a2d7f9a4cc5360538ad6d15a6e1676152af646f5ac94801bcd131659eab305c1e6feb23abfb7040bc41e87ac8a42adefe9fb8b5cc9f911a2b2772a8050ff549797b62f3b74f3ab8df2f8a820ec0b02467eb407c436724064309f1640a626912083a89406de314a9750d50f19183350e76b9b686bbb368e4e37fd26a08abc6553191ed98386217adbce717f95eb06557bfbfd476b35a91a0153498eca8f03a0ab210edd8dc618134ff4ca2150eba41b30bdfd506293b6f6f6242222bdd6a8531ff826dc56188c41f394f49b9ab013d96ced908bd006a149df53378c8e48f456994a225fa82eb3c095a0375d8152dad018a5c38d895a361909e14394e6e1256b351e4e06e7e6d580792f1359592207416731f6c08975f710c573eb83d076307f74ccfd4c98c2308f9ccc05284b5277f132902244bed47ed2b8d5a2f87e7daed64f2233c2a3a5af6d0ad15f6c75a62596de50ad426fe0b5367149976a90de0696626a695c2ad44f283a2daa9178c15587e2080755c4929ac76c3c4f12e94ea14eaa10a430b4618561c5e582d1798a1683bbd2006452d0724d14a0c6d9ff3eb7556a926f4c7ccb27ee63241cebf247e0d470453f5e36dcbe506d1623d7559f40a604442dbcc9410c087321d0cdeb3cf4d2138ad9b173ce9473775836aef692af2db95e1554a487f1872766e2185a0ce4b4150861fda38c25fd4c61d5cfa1dbdc6922113e78e80c151b3b5cc6d4a21108f5c2a820902264abcecf14a880394a43f68aee969e22e20e40264fd7019f1000a1d7b6c8633cd39d7850060844b90f1f65aaf89ad9559f631f1496f76001259a500e3f6515bceecdcc2edc6c587b2f381a39b54a510ec24108c0481bf2d9a7541bc058b05f09bf556bf54d44047b2bc6166ee1ba42157c96a68b8bc4fb9c2cfc9138a69c01faad7327133c0f032279deae1a72013bd8457c00400d49e7c50b41fdd31f9a3482ef0c8b1f033b5d9119d9015718d9463c672755a042253def89f02712a0ac9878ffcf5a3f70487057a7a247eb31645d3895496f42e8d7cc9afce72b29b7a6818a4ea1f2da70f4aca75dad90d624e6eec3bba075f1178225ba45f60d271f61a00c9f020b405e7e83aa4b6428ede88476a8afa59f62c4af43314c23b0e31a7a67a5c42ced945ddb654a94669aecfa167091f093331887648a9693e0370a6d8623338bb86c01582add422691d06e5d454cfc926e46fc4136c57b8270a04b2f76d4c706d3077caccbeb690926c9e7bda54921394ef137fb768f56f21df8a790267916934e4f7c2d8342784b034bb46b683fa7a91a7df873a885aa4710bcfec8b4711c8e7bee49d878dac5cca1a3673c7cc408d21746b9c994b41ee7a1bb095f6e9ed8d72f9492f0550f8b91d89b38b7d060fafe61953fc242c1fa6e2b5e1aec96b62eaae35d1009c2d60b515152bd9903234db23d0517f75ce7f488321dd515821ccb810c0d8b15efd8c5fbebfb5154dc2ae218a7762c102b6ac09f1d78b2c69af8453c231cf79972a5d5e179dd0ef96f1fee964b5353767536722f497ca24df7bafdb6ede094ee57056573fd024949e56e2f48a7f4c9c72dcdee4a1b53788fed68b0a8613e5aa4c2700fbe79fa8ee1ce98b6d547f95653ae6bfb6aabfe80b021e21cbfb19ff8403f2f9f7658c7f141697b1879b263e6738e8468139b128b1981252d7476495a64cc23b4e2614972491ac3335d973c3665ca51811ae761fc179b85835e3d0d93fdcd0fe0e4fe0f9cc3a1831b6f7ebb1f56ecf13c87221041d4b8cb0e6e2575d14fc5653ad81c46d01c276ffbaaaa236a5af088e14c4e247258cd8612593d5c085254ee01cd8a8936af5bbf84f2d7ac50b152de62b622fe9bfded5429b272e7e77480821163e708aa1623d28d8eac6504ce660da2bd0ca394b57afa6d908826c448231d931fbf1fa1883cbb769d2cdff81614124a5c802421aaeaf10e3254e753474bd8185373083cfc0595175548c3030ae8f3bc336e5c150849735de3c3db5731b9f8ff620497f89721b3d2b0f2ca265ccbd6c37fae623577659d07d1e6b4bc1051d0abf9e40a6fd1667eb89cbb738a912a47a62583ad79e81ee2c9066413e80150345aa8e3cf1fa160bdbed24f75080a8c2402fddda5a0c33cb7176abefbe9a299653d3fd3d67caa135f7428ec1ee879d56fac4b951b0f858d44fd7798f4fbe234b65482efb561ee1cd6592a9ff6269d0772d5a28993e9a54e3497b3866a9da5c1dd6f3a515ab56c5ee8538a47b2aa29367af13dc201f540cc517d70ebbc6fc7a5715ef30fca3c98d9c7acaa95a01e202f18a6c53d953523a5073d82aab7f4e7efd90d3657d179fed4cc0ab5a981f77eb10b7735cc25cfd7f54ad23a723f5d75b0bdd436107d5684283709a8361651cd682c2849dfa7e5ef511e6ac09186b87d62304ac081f7ac1ae695e5aec6af7be9de401bc74d5c995c39162719db15184d013a061f20118f4781d4b71000ba67976d4c9e05a6647f40837d7d707147b548392b9a5ac4cee70a3e5531cacea46f77270278d9525ef0fed041d4eb714683b49d89520e9408642a48c1a294b3cf59c634b6d03ce4ebcdfd73a034963733f3f3ace757d3b226578a2869a3166ea5c08997fd65924b922e6d376c5778ff1801708f71530d83931d1cb0c8fc279356165f4f87bdac188122091fec21e9079ef3720e30e5304f734491e329fa142ffb6947c6518f2f35f2cf6753fe7f7c9d90f57701c36f5e3e773cf3aa82d97ea0770ec382527ae1d9a533d07e95c792cffa5f75eafb4be768813021abc7bb969f899dcc90ad8ccae5a3a1960cf4c83a9619f7c6c2f6948ed08a599ff2516c6fddde1f0041be6d757c351ad8badeb87aeb57ec218f6cafa39c9ffba1f4552e6f3b98a4801efcaa48bdfa464da74626187e8bb5c048d3fb5de3c130567c88de8f5efcd8adfc43afd6bc0ef1820c11c706a89cd1aafb8e5eb40b038d2ebb3272830c403d8018afe4357953e9944240d4621157485aeed53d3868c73d42cdab944397e892d6e03bbce8289218aa61ad3f951b8f394b15a40aad627a703edf7816c0e02d"}, {0xd7, 0x0, "6ec3381893c57adc817ecca12a24358ce189ea5e2e4fa689c72f48ba2cf2f300316033b8094527f3c43a0f3eb435e1468aab153d0d982a405d32ed1b8e8d91c1897d9da4d529e849664e94708da69de3e49c5ea1766316aa71bb8d98a9d2392c60b49f614eeac48cdfae3b54d0bd15f57df3d2b94210c387ee913d25544db8b58f4b818e4dbf5e15bff6f31606b169bd2c3f69152ce28df5ecc8fa759301649a49b97d1e696da4a2b9a57649d9e80262cfe84b557357c422c8c10f333ef69a9404188b4410ab38a3e3cbc18977acb20aa90461"}]}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x14}, @NL80211_NAN_FUNC_SRF={0xb0, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa}]}, @NL80211_NAN_SRF_MAC_ADDRS={0x40, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_MAC_ADDRS={0x34, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_NAN_SRF_MAC_ADDRS={0x28, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}]}]}, @NL80211_NAN_FUNC_SRF={0x148, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_MAC_ADDRS={0x1c, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}]}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "175603359b15"}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x20, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x8}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xe2}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x6}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x38, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x7}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xd6}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xc0}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x4}]}, @NL80211_ATTR_NAN_FUNC={0x94, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0x87, 0xb, "3a32b877919363fd5483a350437cdea17e0f6e311ce7381cd76c4c3cb19cd6dff152b555688d94fccbfac37415eb8f64b3773736096bb93463dc18a901eba26f769337a6987a8d74d12472e0f7abbdf45a8964bf7ec8d93673d10fa269cccfac1fb7d33d94b559053cde6cc19d6b13353a1f515feb13e45e6ec9961f0183c519779f0d"}, @NL80211_NAN_FUNC_TTL={0x8}]}]}, 0x2c34}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r7, &(0x7f0000004580)={0x24, @short={0x2, 0x3, 0xaaa0}}, 0x14) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000004600), r6) sendmsg$IPVS_CMD_GET_DAEMON(r6, &(0x7f00000046c0)={&(0x7f00000045c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000004680)={&(0x7f0000004640)={0x1c, r8, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x11) sendmsg$IPVS_CMD_DEL_DEST(r6, &(0x7f0000004800)={&(0x7f0000004700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000047c0)={&(0x7f0000004740)={0x68, r8, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xbf}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x81}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x40080) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000004880), r6) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r9, &(0x7f0000004a40)={&(0x7f0000004840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000004a00)={&(0x7f00000048c0)={0x140, r10, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x140}}, 0x404c010) write$UHID_INPUT(r7, &(0x7f0000004a80)={0x8, {"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", 0x1000}}, 0x1006) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005b40)={{}, &(0x7f0000005ac0), &(0x7f0000005b00)}, 0x20) 849.773334ms ago: executing program 1 (id=670): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) bind$inet(r2, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x15, 0x88, 0xc000067}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee1, 0x80, 0x2, 0x8b4}, &(0x7f0000000000)=0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000004c0)=@int=0x9, 0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) 796.113375ms ago: executing program 1 (id=671): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r1, 0x1, &(0x7f0000001c00)=[&(0x7f0000000400)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) 739.843026ms ago: executing program 1 (id=672): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000002c0)='./file0\x00', 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) rt_sigaction(0x7, &(0x7f0000000240)={&(0x7f00000003c0)="66362666460faef40f2c549604de7d9af2a605feefffff0f18d6c4e1fd10510ac46f76de11d1c4217928da69ac363e3e3e67f20f2c17", 0x10000000, &(0x7f0000000500)="f0285039417000c403957abff40000004d656666430f71e607430f1c81c6ed0000672ed97e000f01ddc403697bb7378eb9005a5029fefec13d664d0f", {[0x200000001]}}, &(0x7f0000000380)={&(0x7f0000000280)="cf440f18f9c4825d03d3c4427d19d60f73d104c4e1c6581e660fd5ae00000080c401e96caee6922b510f15c2410feddf", 0x0, &(0x7f0000000540)="400fae38c42185613664f34b0fc7885e9f000066420f76d40f75146126f30f6fdbf2f0102fc46105ec1ac483497a5ff80f8f68109e98f2000000b6"}, 0x8, &(0x7f0000000340)) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f00000004c0)={[{@grpquota}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") memfd_create(0x0, 0x20) r4 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x45, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000f80)=ANY=[@ANYBLOB="020300030d0000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006ec540162e7c4720979754c73f3202968000000000002004e22ac1414bb0000000039712f4c02000100000000000000070c00000080030005000000000002004e22ac14140a0000000000000000"], 0x68}, 0x1, 0x7}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 654.627237ms ago: executing program 0 (id=673): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000180)='jbd2_checkpoint\x00', r1, 0x0, 0xcf0c}, 0x18) add_key(&(0x7f0000000000)='ceph\x00', 0x0, &(0x7f0000000080)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, 0xfffffffffffffffb) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x208008, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES16, @ANYBLOB="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"], 0x41, 0x314, &(0x7f0000000700)="$eJzs3M9LG2kYwPEnMSYxoslhWdhdFl92L7uXQbP3hbAoLBvYYk3pDyiMZtKGTJOQCZaUUuOp1/4bDR69FKG1f4CX3nrqpfTipdCLtLVTJjPRiSYaU020fj+g75N53yczk0mGZwbm3b7+5F4hZ2k5vSrBqJKgSF12RRJO5FmaEJGABKTZhN2FUbepy5/jH17/qkQklU7Pzis1l1r4K6mUmpx6fv/h2m+b1fFr65MbEdlK3N5+n3y79ePWT9tfFu7mLZW3VLFUVbpaLL2p6oumobJ5q6ApdcU0dMtQ+aJlVNz+UtVbrZTLNaUXsxOxcsWwLKUXa6pg1FS1pKqVmtLv6Pmi0jRNTcTk8tiZajblk+ZlGvPzeqrPlS71mYdTt3lkb6XS+vG8tNt7Mo2z2yYAAHBeter/iL/+32mv/wNeG/TX/5661J36/+qNm//1UP9vhLvU/6VD9X9UZGxvLa3+nFmi/u9X9PCiTGPErf9t27aHsU0YgMqYSGNN9n/Rq7fWppsB9T8AAAAAAAAAAAAAAAAAAAAAABfBjm3HbduOO21Q3Nj5i3gPjLReu6M/2q5hbzVOi//426tOHHKOepfjj++N78G9qIj5eDmznHFbtz+Vk7yYYsi0xOWz+6BY6xzg/J/7Nz0bUE0JeWGuePkry5mR9vwZiUuic/6Mm6/a80cl5s9PSlx+6Jyf7Jgflj9+9+VrEpdXS1ISU7LN7/V+/qMZpf75P30gf0yyHZ6YAwAAAADgItLUno7X75rWrd/N7+X+wHTH6/OQ/Bwa7r4DAAAAAHBZWLUHBd00jcqxwVMv49jB77yBPb/ztwajJ9iLXoNnzSDQ7Z2jJ/roziBozcns6xqVg4NbEyi3pXu3Z1aGuPH9BlNDWXvI+dL7lsS6Dp4c6fSBHxVEvFmZnSW79oExf6//8mkAO9jlVDCoMxAAAACAQTl8GQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbtVGYRCx8929+w9xEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4L74GAAD//1VSGjs=") r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) lseek(r3, 0x9, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000b00)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='xprtrdma_decode_seg\x00', r4, 0x0, 0xa55c}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000280)='rxrpc_skb\x00', r4, 0x0, 0x5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(r6, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3000046, &(0x7f00000002c0)={[{@errors_continue}, {@data_err_abort}, {@nomblk_io_submit}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b0}}, {@noblock_validity}, {@grpquota}, {@nobh}, {@user_xattr}, {@inode_readahead_blks}, {@dioread_nolock}]}, 0x21, 0x553, &(0x7f0000000a40)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$eJzs28tvG0UYAPBv105KX8RU5dEHECiIikfSpKX0wAEQSBxAQoJDOYYkrUrdBjVBolUFBaFyRJW4I45I/AWc4IKAExJX4IwqVSiXFk5Ga+82jmunSbDrEP9+0tYzu+POfJ4de3YnG8DAGs3+SSJ2RMRvETHSyC4vMNp4ubF4cfrvxYvTSdRqb/6V1MtdX7w4XRQt3re9yJQj0k+T2Nem3vnzF05PVauz5/L8+MKZ98bnz1945tSZqZOzJ2fPTh47duTwxHNHJ5/tSpxZXNf3fji3f8+rb195ffr4lXd++iYp4m+Jo0tG2+4tN14er9W6XF1/7WxKJ+U+NoQ1KeWn5FB9/I9EKZY6byRe+aSvjQN6qlar1e7rfPhSDdjEkuh3C4D+KH7os+vfYrtDU48N4dqLjQugLO4b+dY4Uo40LzPUcn3bTaMRcfzSP19mW7Teh9jao0oBgIH2XTb/ebrd/C+N5vtCd+drKJWIuCcidkXE0YjYHRH3RtTL3h8RD6yx/tZFklvnn+nVdQW2Stn87/l8bWv5/K+Y/UWllOd21uMfSk6cqs4eyj+TgzG0JctPrFDH9y//+nmnY83zv2zL6i/mgnk7rpa3LH/PzNTC1H+Judm1jyP2ltvFn9xcCUgiYk9EvLDOOk49+fX+Tsc6xD+8qv+4C+tMta8inmj0/6Voib+QrLw+OX5XVGcPjRdnxa1+/uXyG53qv33/91bW/9vanv9F/H9Ukub12vm113H59886XlOu9/wfTt5atu+DqYWFcxMRw8lr9Xylef9kS7nJpfJZ/AcPtB//u2Lpk9gXEdlJ/GBEPBQRD+dtfyQiHo2IAyvE/+NLj727/vh7K4t/ZsX+j5b+X0oMR+ue9onS6R++XVZpZS3xZ/1/pJ46mO9Zzfffatq1vrMZAAAA/n/SiNgRSTp2M52mY2ONv+HfHdvS6tz8wlMn5t4/O9N4RqASQ2lxp2uk6X7oRH5ZX+QnW/KH8/vGX5S21vNj03PVmX4HDwNue4fxn/mz1O/WAT3neS0YXMY/DC7jHwaX8Q+Dq8349+gZDIh2v/8f9aEdwJ3XMv5XXPYzMYDNxfU/DC7jHwaX8Q8DaX5r3P4h+c2RSCNiAzRjsyQi3RDNkOhRot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xbwAAAP//ynflmQ==") r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r8, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a42", 0x23) sendfile(r8, r7, 0x0, 0x3ffff) sendfile(r8, r7, 0x0, 0x7fffeffd) fallocate(0xffffffffffffffff, 0x0, 0xa20, 0x8000c64) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000140), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r5) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) 599.492468ms ago: executing program 4 (id=674): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000003a81a3c6d000a09f5a7500000000a201", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfffffd9d) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000007000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000300000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x80, &(0x7f0000000140), 0x1, 0x4e0, &(0x7f0000000e40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0x42, 0x1ef) write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c4600020000ff7f00000000000003003e00ecfffbff94020000000000004000000000000000b9e503100000000000000000002c8f3800010002000180000003000000970f000001000000000000000d00000000000000c801000000000000e000000000000000010000000000000005000000000000"], 0x78) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x79af, 0x10, 0x8000, 0x400252, 0x0, r2}, 0x0, 0x0) lremovexattr(&(0x7f0000000280)='./file1\x00', &(0x7f0000000400)=ANY=[@ANYBLOB='osxr\x00']) 453.193371ms ago: executing program 2 (id=675): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee1, 0x80, 0x2, 0x8b4}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 211.222966ms ago: executing program 2 (id=676): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e0000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000200000000000000000000008500000041000000850000001100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES32, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$eJzs3c9rI2UYwPEnaZpMumyTgygK0ge96GVoq2c1yC6IAZfuRtwVhNntREPGpMyESERsPXkVb/4DgsseFzwsqP9AL97WixdP9iIIuog4Mr/SJJ00aTZL0/b7gTZP8r7PzPvmF88byJuD9776uFn3zLrVkayhkhEReSRSlqwkMtFFXlLsycuX/nz4/PWbt96uVKtXtlSvVm68sqmqq2s/fPJZMe72oCD75Q8OxPht/+n9Zw/+u/FRw9OGp612Ry293f61Y912bN1ueE1T9ZpjW56tjZZnu1F7O2qvO+2dnZ5are3LKzuu7XlqtXratHvaaWvH7an1odVoqWmaenklbbjnmDFDTu3u1pZVmfGEd2bMw7z94/v+Mc2uW7GWRMzikZba3Sc6LgAAsJBG6v9vkhqhLNl+QZmJ1wL5MB5eBgT1fxKH9X+wWDis/++98FPn0rv3V+P6/0E+rf5/9Zcof6j+D84+9/r/u5HrRyuiM2/3JJ0fq/7HYlgbfkX+frhijwX1f/Bq6K/ov3j/3noYUP8DAAAAAAAAAAAAAAAAAAAAAHAWPPL9ku/7peQy+Tv8CkF8Pbl23BeNceaMe/wL8Y4C/ecDzqXrN2+JEX5xL7cq4nzZrXVr0WXcnnRcl5L8Gz4fYtGGE3thowbK8qOz260txwlL4f+KiIojtmxIScpD+WF89a3qlQ2NRPnh+Xe7tUxuJcivSyPM35SSPJWev5man5eXXhzIN6UkP9+RtjiyHb+PJfmfb6i++U51JL8Y9kvz+pN9SAAAAAAAmDtT1YiXz+Xh9W+0fjdN1bT2YC0vg+vzo58P9NfX66nr81zpudzpzh0AAAAAgIvCy3/atBzHdr3e2KAok/oU4qONNOVkwpGDIDdFn6HgYRgsH9dnaWCG0x45H/+CxrTDcL2eTD3mJPirIKl3ZrKF61CTkX6vThkk85+is3HSh8D1siefu+16a8F4dKbpDATJx0bj+si1WY88Lkh2zp3U+Zmvv/17tlNk4l17B5teu29MmGkYZEZu2ZvwpP3D9yeOZzn93eL7WX5kBgAAAMCCSIr+opfc8sbpDggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAtortukjQlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAovg/AAD//5h69bA=") munmap(&(0x7f0000006000/0x4000)=nil, 0x4000) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) recvfrom(r5, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) io_setup(0x5ff, &(0x7f0000000400)=0x0) io_submit(r9, 0x1ffffff0, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="96", 0xffffff20}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff}]) 113.122898ms ago: executing program 4 (id=677): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x1c, 0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = fcntl$dupfd(r1, 0x406, r1) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000180)='sys_enter\x00', r5, 0x0, 0x10000000000000}, 0x18) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x4000000000]}, 0x8, 0x0) faccessat2(r6, &(0x7f0000000040)='\x00', 0x2, 0x1200) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) 0s ago: executing program 4 (id=678): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0xfffffffffffffff7}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) kernel console output (not intermixed with test programs): 954] __dump_stack+0x1d/0x30 [ 57.322861][ T3954] dump_stack_lvl+0xe8/0x140 [ 57.322884][ T3954] dump_stack+0x15/0x1b [ 57.322947][ T3954] should_fail_ex+0x265/0x280 [ 57.323020][ T3954] should_failslab+0x8c/0xb0 [ 57.323053][ T3954] __kmalloc_noprof+0xa5/0x3e0 [ 57.323133][ T3954] ? io_cache_alloc_new+0x2a/0xb0 [ 57.323160][ T3954] io_cache_alloc_new+0x2a/0xb0 [ 57.323183][ T3954] io_send_zc_prep+0x30e/0x5d0 [ 57.323226][ T3954] io_submit_sqes+0x5ef/0x1060 [ 57.323276][ T3954] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 57.323312][ T3954] ? 0xffffffff81000000 [ 57.323328][ T3954] ? __rcu_read_unlock+0x4f/0x70 [ 57.323355][ T3954] ? get_pid_task+0x96/0xd0 [ 57.323380][ T3954] ? proc_fail_nth_write+0x13b/0x160 [ 57.323469][ T3954] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 57.323500][ T3954] ? vfs_write+0x7e8/0x960 [ 57.323542][ T3954] ? __rcu_read_unlock+0x4f/0x70 [ 57.323563][ T3954] ? __fget_files+0x184/0x1c0 [ 57.323589][ T3954] ? fput+0x8f/0xc0 [ 57.323621][ T3954] __x64_sys_io_uring_enter+0x78/0x90 [ 57.323656][ T3954] x64_sys_call+0x2de1/0x2ff0 [ 57.323734][ T3954] do_syscall_64+0xd2/0x200 [ 57.323820][ T3954] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 57.323851][ T3954] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 57.323905][ T3954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.323930][ T3954] RIP: 0033:0x7fe25994eec9 [ 57.323945][ T3954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.323962][ T3954] RSP: 002b:00007fe2583b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 57.323984][ T3954] RAX: ffffffffffffffda RBX: 00007fe259ba5fa0 RCX: 00007fe25994eec9 [ 57.323998][ T3954] RDX: 0000000000000004 RSI: 000000000000749f RDI: 0000000000000003 [ 57.324058][ T3954] RBP: 00007fe2583b7090 R08: 0000000000000000 R09: fffffffffffffef5 [ 57.324073][ T3954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.324085][ T3954] R13: 00007fe259ba6038 R14: 00007fe259ba5fa0 R15: 00007ffe1a4f79b8 [ 57.324103][ T3954] [ 57.603967][ T29] audit: type=1326 audit(1759264049.010:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3955 comm="syz.3.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9823cceec9 code=0x7ffc0000 [ 57.648760][ T3956] loop3: detected capacity change from 0 to 128 [ 57.668544][ T3961] FAULT_INJECTION: forcing a failure. [ 57.668544][ T3961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.684089][ T3961] CPU: 1 UID: 0 PID: 3961 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) [ 57.684275][ T3961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 57.684343][ T3961] Call Trace: [ 57.684384][ T3961] [ 57.684417][ T3961] __dump_stack+0x1d/0x30 [ 57.684820][ T3961] dump_stack_lvl+0xe8/0x140 [ 57.684936][ T3961] dump_stack+0x15/0x1b [ 57.684999][ T3961] should_fail_ex+0x265/0x280 [ 57.685060][ T3961] should_fail+0xb/0x20 [ 57.685141][ T3961] should_fail_usercopy+0x1a/0x20 [ 57.685396][ T3961] _copy_from_user+0x1c/0xb0 [ 57.685446][ T3961] memdup_user+0x5e/0xd0 [ 57.685554][ T3961] strndup_user+0x68/0xb0 [ 57.685589][ T3961] __se_sys_request_key+0xea/0x290 [ 57.685625][ T3961] __x64_sys_request_key+0x55/0x70 [ 57.685653][ T3961] x64_sys_call+0x1d98/0x2ff0 [ 57.685891][ T3961] do_syscall_64+0xd2/0x200 [ 57.685989][ T3961] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 57.686150][ T3961] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 57.686414][ T3961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.686459][ T3961] RIP: 0033:0x7fe25994eec9 [ 57.686477][ T3961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.686496][ T3961] RSP: 002b:00007fe2583b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 57.686519][ T3961] RAX: ffffffffffffffda RBX: 00007fe259ba5fa0 RCX: 00007fe25994eec9 [ 57.686535][ T3961] RDX: 0000200000000500 RSI: 0000200000000480 RDI: 0000200000000440 [ 57.686552][ T3961] RBP: 00007fe2583b7090 R08: 0000000000000000 R09: 0000000000000000 [ 57.686566][ T3961] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 57.686579][ T3961] R13: 00007fe259ba6038 R14: 00007fe259ba5fa0 R15: 00007ffe1a4f79b8 [ 57.686609][ T3961] [ 57.927381][ T3976] FAULT_INJECTION: forcing a failure. [ 57.927381][ T3976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.940732][ T3976] CPU: 0 UID: 0 PID: 3976 Comm: syz.2.158 Not tainted syzkaller #0 PREEMPT(voluntary) [ 57.940765][ T3976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 57.940777][ T3976] Call Trace: [ 57.940784][ T3976] [ 57.940859][ T3976] __dump_stack+0x1d/0x30 [ 57.940888][ T3976] dump_stack_lvl+0xe8/0x140 [ 57.940914][ T3976] dump_stack+0x15/0x1b [ 57.940936][ T3976] should_fail_ex+0x265/0x280 [ 57.940968][ T3976] should_fail+0xb/0x20 [ 57.940994][ T3976] should_fail_usercopy+0x1a/0x20 [ 57.941085][ T3976] _copy_from_user+0x1c/0xb0 [ 57.941128][ T3976] kstrtouint_from_user+0x69/0xf0 [ 57.941191][ T3976] ? 0xffffffff81000000 [ 57.941208][ T3976] ? selinux_file_permission+0x1e4/0x320 [ 57.941246][ T3976] proc_fail_nth_write+0x50/0x160 [ 57.941275][ T3976] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 57.941315][ T3976] vfs_write+0x266/0x960 [ 57.941401][ T3976] ? __rcu_read_unlock+0x4f/0x70 [ 57.941484][ T3976] ? __fget_files+0x184/0x1c0 [ 57.941549][ T3976] ksys_write+0xda/0x1a0 [ 57.941576][ T3976] __x64_sys_write+0x40/0x50 [ 57.941599][ T3976] x64_sys_call+0x27fe/0x2ff0 [ 57.941673][ T3976] do_syscall_64+0xd2/0x200 [ 57.941698][ T3976] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 57.941819][ T3976] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 57.941858][ T3976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.941940][ T3976] RIP: 0033:0x7fe25994d97f [ 57.941955][ T3976] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 57.942018][ T3976] RSP: 002b:00007fe2583b7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 57.942041][ T3976] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe25994d97f [ 57.942056][ T3976] RDX: 0000000000000001 RSI: 00007fe2583b70a0 RDI: 0000000000000007 [ 57.942069][ T3976] RBP: 00007fe2583b7090 R08: 0000000000000000 R09: 0000000000000000 [ 57.942083][ T3976] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 57.942097][ T3976] R13: 00007fe259ba6038 R14: 00007fe259ba5fa0 R15: 00007ffe1a4f79b8 [ 57.942121][ T3976] [ 57.962650][ T3978] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.159' sets config #1 [ 58.168689][ T3980] netlink: 24 bytes leftover after parsing attributes in process `syz.2.160'. [ 58.168771][ T3980] netlink: 24 bytes leftover after parsing attributes in process `syz.2.160'. [ 58.238711][ T3984] loop1: detected capacity change from 0 to 2048 [ 58.253559][ T3985] loop2: detected capacity change from 0 to 512 [ 58.263124][ T3984] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.277242][ T3984] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.291457][ T3985] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.161: couldn't read orphan inode 26 (err -116) [ 58.322285][ T3985] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.377286][ T3985] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.390041][ T3985] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.161: iget: bad i_size value: 360287970189639690 [ 58.405012][ T3985] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.161: iget: bad i_size value: 360287970189639690 [ 58.421403][ T3985] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.161: iget: bad i_size value: 360287970189639690 [ 58.434947][ T3999] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 58.441593][ T3999] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 58.449381][ T3999] vhci_hcd vhci_hcd.0: Device attached [ 58.458783][ T3994] loop1: detected capacity change from 0 to 128 [ 58.514773][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.515640][ T4003] netlink: 72 bytes leftover after parsing attributes in process `syz.4.166'. [ 58.651070][ T4014] loop2: detected capacity change from 0 to 1024 [ 58.658299][ T4014] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 58.669511][ T4014] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 58.679946][ T4014] JBD2: no valid journal superblock found [ 58.685843][ T4014] EXT4-fs (loop2): Could not load journal inode [ 58.696640][ T23] usb 7-1: new low-speed USB device number 2 using vhci_hcd [ 58.730268][ T4017] loop2: detected capacity change from 0 to 2048 [ 58.759457][ T4017] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.791341][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.815566][ T4021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.172'. [ 58.824534][ T4021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.172'. [ 58.886078][ T4000] vhci_hcd: connection reset by peer [ 58.900222][ T31] vhci_hcd: stop threads [ 58.904624][ T31] vhci_hcd: release socket [ 58.909933][ T31] vhci_hcd: disconnect device [ 58.910191][ T4024] loop2: detected capacity change from 0 to 512 [ 58.948851][ T4024] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.173: couldn't read orphan inode 26 (err -116) [ 58.961666][ T4024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.974953][ T4024] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.988700][ T4024] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.173: iget: bad i_size value: 360287970189639690 [ 59.002130][ T4024] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.173: iget: bad i_size value: 360287970189639690 [ 59.017228][ T4024] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.173: iget: bad i_size value: 360287970189639690 [ 59.078695][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.187962][ T36] IPVS: starting estimator thread 0... [ 59.266365][ T4031] binfmt_misc: register: failed to install interpreter file ./file2 [ 59.290280][ T4033] FAULT_INJECTION: forcing a failure. [ 59.290280][ T4033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.303520][ T4033] CPU: 1 UID: 0 PID: 4033 Comm: syz.2.176 Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.303549][ T4033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 59.303578][ T4033] Call Trace: [ 59.303587][ T4033] [ 59.303597][ T4033] __dump_stack+0x1d/0x30 [ 59.303624][ T4033] dump_stack_lvl+0xe8/0x140 [ 59.303650][ T4033] dump_stack+0x15/0x1b [ 59.303671][ T4033] should_fail_ex+0x265/0x280 [ 59.303709][ T4033] should_fail+0xb/0x20 [ 59.303806][ T4033] should_fail_usercopy+0x1a/0x20 [ 59.303846][ T4033] strncpy_from_user+0x25/0x230 [ 59.303875][ T4033] ? __fget_files+0x184/0x1c0 [ 59.303981][ T4033] __se_sys_request_key+0x57/0x290 [ 59.304010][ T4033] ? fput+0x8f/0xc0 [ 59.304053][ T4033] __x64_sys_request_key+0x55/0x70 [ 59.304158][ T4033] x64_sys_call+0x1d98/0x2ff0 [ 59.304186][ T4033] do_syscall_64+0xd2/0x200 [ 59.304212][ T4033] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 59.304244][ T4033] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 59.304343][ T4033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.304369][ T4033] RIP: 0033:0x7fe25994eec9 [ 59.304389][ T4033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.304457][ T4033] RSP: 002b:00007fe2583b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 59.304485][ T4033] RAX: ffffffffffffffda RBX: 00007fe259ba5fa0 RCX: 00007fe25994eec9 [ 59.304501][ T4033] RDX: 00002000000007c0 RSI: 0000200000001ffb RDI: 0000200000000040 [ 59.304556][ T4033] RBP: 00007fe2583b7090 R08: 0000000000000000 R09: 0000000000000000 [ 59.304572][ T4033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.304588][ T4033] R13: 00007fe259ba6038 R14: 00007fe259ba5fa0 R15: 00007ffe1a4f79b8 [ 59.304611][ T4033] [ 59.304906][ T4029] IPVS: using max 2112 ests per chain, 105600 per kthread [ 59.397748][ T4037] netlink: 'gtp': attribute type 29 has an invalid length. [ 59.505236][ T4043] netlink: 'syz.1.177': attribute type 29 has an invalid length. [ 59.518827][ T4037] netlink: 500 bytes leftover after parsing attributes in process `gtp'. [ 59.534351][ T4037] loop1: detected capacity change from 0 to 1024 [ 59.547745][ T4037] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 59.560326][ T4037] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.587996][ T4053] FAULT_INJECTION: forcing a failure. [ 59.587996][ T4053] name failslab, interval 1, probability 0, space 0, times 0 [ 59.588279][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 59.600872][ T4053] CPU: 1 UID: 0 PID: 4053 Comm: syz.4.181 Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.600904][ T4053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 59.600937][ T4053] Call Trace: [ 59.600948][ T4053] [ 59.600959][ T4053] __dump_stack+0x1d/0x30 [ 59.600991][ T4053] dump_stack_lvl+0xe8/0x140 [ 59.601023][ T4053] dump_stack+0x15/0x1b [ 59.601048][ T4053] should_fail_ex+0x265/0x280 [ 59.601167][ T4053] should_failslab+0x8c/0xb0 [ 59.601204][ T4053] kmem_cache_alloc_noprof+0x50/0x310 [ 59.601280][ T4053] ? fcntl_getlk+0x3d/0x6e0 [ 59.601317][ T4053] fcntl_getlk+0x3d/0x6e0 [ 59.601349][ T4053] ? should_fail_ex+0xdb/0x280 [ 59.601433][ T4053] do_fcntl+0x6d5/0xdf0 [ 59.601478][ T4053] ? selinux_file_fcntl+0x1cb/0x1e0 [ 59.601525][ T4053] __se_sys_fcntl+0xb1/0x120 [ 59.601600][ T4053] __x64_sys_fcntl+0x43/0x50 [ 59.601643][ T4053] x64_sys_call+0x29a0/0x2ff0 [ 59.601673][ T4053] do_syscall_64+0xd2/0x200 [ 59.601703][ T4053] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 59.601774][ T4053] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 59.601862][ T4053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.601893][ T4053] RIP: 0033:0x7f1a5f4beec9 [ 59.601914][ T4053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.601940][ T4053] RSP: 002b:00007f1a5defe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 59.601999][ T4053] RAX: ffffffffffffffda RBX: 00007f1a5f716090 RCX: 00007f1a5f4beec9 [ 59.602016][ T4053] RDX: 00002000000000c0 RSI: 0000000000000024 RDI: 0000000000000007 [ 59.602034][ T4053] RBP: 00007f1a5defe090 R08: 0000000000000000 R09: 0000000000000000 [ 59.602051][ T4053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.602123][ T4053] R13: 00007f1a5f716128 R14: 00007f1a5f716090 R15: 00007ffef91ff1d8 [ 59.602149][ T4053] [ 59.648807][ T4056] loop3: detected capacity change from 0 to 2048 [ 59.818071][ T4056] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.845832][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.890736][ T4065] 9pnet_virtio: no channels available for device [ 59.890736][ T4065] [ 59.908710][ T4065] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.927664][ T4066] loop3: detected capacity change from 0 to 512 [ 59.937782][ T4066] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.185: couldn't read orphan inode 26 (err -116) [ 59.951398][ T4066] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.964171][ T4066] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.975864][ T4066] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.185: iget: bad i_size value: 360287970189639690 [ 59.976679][ T4065] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.989405][ T4066] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.185: iget: bad i_size value: 360287970189639690 [ 60.014668][ T4066] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.185: iget: bad i_size value: 360287970189639690 [ 60.059518][ T4065] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.087808][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.118380][ T4065] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.178311][ T31] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.189893][ T31] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.201915][ T31] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.220634][ T31] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.262164][ T4074] loop3: detected capacity change from 0 to 128 [ 60.721873][ T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.734789][ T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.745004][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.755828][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.801965][ T4103] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 60.808647][ T4103] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 60.816226][ T4103] vhci_hcd vhci_hcd.0: Device attached [ 60.924242][ T4107] vhci_hcd: connection closed [ 60.943946][ T31] vhci_hcd: stop threads [ 60.953289][ T31] vhci_hcd: release socket [ 60.957787][ T31] vhci_hcd: disconnect device [ 61.084861][ T4111] lo speed is unknown, defaulting to 1000 [ 61.436925][ T3381] vhci_hcd: vhci_device speed not set [ 61.472566][ T4116] loop4: detected capacity change from 0 to 128 [ 61.490630][ T4116] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 61.500711][ T4116] EXT4-fs (loop4): group descriptors corrupted! [ 61.510924][ T4116] __nla_validate_parse: 6 callbacks suppressed [ 61.510939][ T4116] netlink: 9004 bytes leftover after parsing attributes in process `syz.4.201'. [ 61.526168][ T4119] loop2: detected capacity change from 0 to 128 [ 61.538223][ T4119] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 61.540746][ T4120] netlink: 'syz.3.203': attribute type 10 has an invalid length. [ 61.548213][ T4119] EXT4-fs (loop2): group descriptors corrupted! [ 61.580676][ T4116] hub 8-0:1.0: USB hub found [ 61.593033][ T4116] hub 8-0:1.0: 8 ports detected [ 61.604931][ T4120] team0: Device hsr_slave_0 failed to register rx_handler [ 61.620851][ T4119] netlink: 9004 bytes leftover after parsing attributes in process `syz.2.202'. [ 61.651271][ T4125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.204'. [ 61.660927][ T4125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.204'. [ 61.725215][ T4119] hub 8-0:1.0: USB hub found [ 61.730122][ T4119] hub 8-0:1.0: 8 ports detected [ 61.750409][ T4127] loop0: detected capacity change from 0 to 128 [ 61.791965][ T4127] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 61.793007][ T29] kauditd_printk_skb: 1345 callbacks suppressed [ 61.793023][ T29] audit: type=1326 audit(1759264053.180:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4121 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9a2a51af79 code=0x7ffc0000 [ 61.802084][ T4127] EXT4-fs (loop0): group descriptors corrupted! [ 61.808705][ T29] audit: type=1326 audit(1759264053.180:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4121 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2a57eec9 code=0x7ffc0000 [ 61.863448][ T29] audit: type=1326 audit(1759264053.180:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4121 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9a2a575d67 code=0x7ffc0000 [ 61.887583][ T29] audit: type=1326 audit(1759264053.180:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4121 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9a2a51af79 code=0x7ffc0000 [ 61.911550][ T29] audit: type=1326 audit(1759264053.180:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4121 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2a57eec9 code=0x7ffc0000 [ 61.935391][ T29] audit: type=1326 audit(1759264053.180:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4121 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9a2a575d67 code=0x7ffc0000 [ 61.958695][ T29] audit: type=1326 audit(1759264053.180:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4121 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9a2a51af79 code=0x7ffc0000 [ 61.982394][ T29] audit: type=1326 audit(1759264053.180:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4121 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2a57eec9 code=0x7ffc0000 [ 62.005989][ T29] audit: type=1326 audit(1759264053.180:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4121 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9a2a575d67 code=0x7ffc0000 [ 62.029922][ T29] audit: type=1326 audit(1759264053.180:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4121 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9a2a51af79 code=0x7ffc0000 [ 62.075490][ T4127] netlink: 9004 bytes leftover after parsing attributes in process `syz.0.205'. [ 62.115572][ T4127] hub 8-0:1.0: USB hub found [ 62.126388][ T4127] hub 8-0:1.0: 8 ports detected [ 63.105520][ T4134] usb usb8: usbfs: process 4134 (syz.2.207) did not claim interface 0 before use [ 63.191178][ T4140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.211'. [ 63.200463][ T4140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.211'. [ 63.422137][ T4149] loop0: detected capacity change from 0 to 512 [ 63.497340][ T4152] lo speed is unknown, defaulting to 1000 [ 63.692797][ T4149] ext3: Bad value for 'max_batch_time' [ 63.777101][ T23] usb 7-1: enqueue for inactive port 0 [ 63.832570][ T23] usb 7-1: enqueue for inactive port 0 [ 63.892745][ T4158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.906425][ T4158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.922582][ T4138] siw: device registration error -23 [ 63.931393][ T4159] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 63.938196][ T4159] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 63.945826][ T4159] vhci_hcd vhci_hcd.0: Device attached [ 63.947210][ T23] vhci_hcd: vhci_device speed not set [ 63.998412][ T4163] vhci_hcd: connection closed [ 63.998780][ T1093] vhci_hcd: stop threads [ 64.008051][ T1093] vhci_hcd: release socket [ 64.012597][ T1093] vhci_hcd: disconnect device [ 64.153340][ T4166] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 64.160162][ T4166] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 64.167859][ T4166] vhci_hcd vhci_hcd.0: Device attached [ 64.292756][ T4180] loop0: detected capacity change from 0 to 512 [ 64.302202][ T4180] EXT4-fs error (device loop0): __ext4_iget:5464: inode #11: block 1: comm syz.0.222: invalid block [ 64.316906][ T4180] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.222: couldn't read orphan inode 11 (err -117) [ 64.322774][ T4171] vhci_hcd: connection closed [ 64.329861][ T4180] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.330965][ T1093] vhci_hcd: stop threads [ 64.337028][ T4180] EXT4-fs error (device loop0): ext4_add_entry:2417: inode #2: comm syz.0.222: Directory hole found for htree leaf block 0 [ 64.346779][ T1093] vhci_hcd: release socket [ 64.368368][ T1093] vhci_hcd: disconnect device [ 64.384981][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.406424][ T3381] usb 3-1: new low-speed USB device number 3 using vhci_hcd [ 64.423836][ T3381] usb 3-1: enqueue for inactive port 0 [ 64.430020][ T3381] usb 3-1: enqueue for inactive port 0 [ 64.440036][ T3381] usb 3-1: enqueue for inactive port 0 [ 64.517085][ T3381] vhci_hcd: vhci_device speed not set [ 64.625492][ T4197] lo speed is unknown, defaulting to 1000 [ 64.990484][ T4199] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.027288][ T4201] binfmt_misc: register: failed to install interpreter file ./file2 [ 65.056051][ T4205] netlink: 9 bytes leftover after parsing attributes in process `syz.4.231'. [ 65.065691][ T4205] gretap0: entered promiscuous mode [ 65.089401][ T4205] netlink: 'syz.4.231': attribute type 1 has an invalid length. [ 65.099235][ T4199] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.130500][ T4208] loop1: detected capacity change from 0 to 2048 [ 65.159647][ T4208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.180201][ T4199] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.311439][ T4213] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 65.313549][ T4199] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.320868][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.400807][ T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.412295][ T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.425859][ T31] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.440831][ T4226] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 65.449801][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.474002][ T4226] vhci_hcd: invalid port number 253 [ 65.479477][ T4226] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 65.607797][ T4246] FAULT_INJECTION: forcing a failure. [ 65.607797][ T4246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.620998][ T4246] CPU: 1 UID: 0 PID: 4246 Comm: syz.2.243 Not tainted syzkaller #0 PREEMPT(voluntary) [ 65.621037][ T4246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 65.621055][ T4246] Call Trace: [ 65.621063][ T4246] [ 65.621073][ T4246] __dump_stack+0x1d/0x30 [ 65.621100][ T4246] dump_stack_lvl+0xe8/0x140 [ 65.621139][ T4246] dump_stack+0x15/0x1b [ 65.621161][ T4246] should_fail_ex+0x265/0x280 [ 65.621214][ T4246] should_fail+0xb/0x20 [ 65.621250][ T4246] should_fail_usercopy+0x1a/0x20 [ 65.621292][ T4246] _copy_from_user+0x1c/0xb0 [ 65.621354][ T4246] __se_sys_add_key+0x209/0x350 [ 65.621390][ T4246] __x64_sys_add_key+0x67/0x80 [ 65.621424][ T4246] x64_sys_call+0x28c4/0x2ff0 [ 65.621475][ T4246] do_syscall_64+0xd2/0x200 [ 65.621581][ T4246] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 65.621615][ T4246] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 65.621679][ T4246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.621775][ T4246] RIP: 0033:0x7fe25994eec9 [ 65.621796][ T4246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.621820][ T4246] RSP: 002b:00007fe2583b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 65.621847][ T4246] RAX: ffffffffffffffda RBX: 00007fe259ba5fa0 RCX: 00007fe25994eec9 [ 65.621928][ T4246] RDX: 0000200000000300 RSI: 0000000000000000 RDI: 0000200000000040 [ 65.621945][ T4246] RBP: 00007fe2583b7090 R08: 0000000021709939 R09: 0000000000000000 [ 65.621962][ T4246] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 65.621977][ T4246] R13: 00007fe259ba6038 R14: 00007fe259ba5fa0 R15: 00007ffe1a4f79b8 [ 65.622049][ T4246] [ 65.999688][ T4252] loop2: detected capacity change from 0 to 512 [ 66.054853][ T4254] loop0: detected capacity change from 0 to 2048 [ 66.059158][ T4252] ext3: Bad value for 'max_batch_time' [ 66.089181][ T4254] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.175928][ T4258] loop1: detected capacity change from 0 to 1024 [ 66.183217][ T4258] ext4: Unknown parameter 'uid<00000000000000000000' [ 66.206964][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.295845][ T4265] 9pnet_virtio: no channels available for device [ 66.295845][ T4265] [ 66.360568][ T4265] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.430353][ T4268] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 66.445355][ T4265] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.512425][ T4265] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.592866][ T4280] lo speed is unknown, defaulting to 1000 [ 66.658839][ T4265] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.945545][ T51] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.958753][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.974842][ T29] kauditd_printk_skb: 640 callbacks suppressed [ 66.974858][ T29] audit: type=1326 audit(1759264058.380:2987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4282 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe25994eec9 code=0x7ffc0000 [ 66.975347][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.998019][ T29] audit: type=1326 audit(1759264058.400:2988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4282 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7fe25994eec9 code=0x7ffc0000 [ 67.039069][ T29] audit: type=1326 audit(1759264058.450:2989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4282 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe25994eec9 code=0x7ffc0000 [ 67.062655][ T29] audit: type=1326 audit(1759264058.450:2990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4282 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe25994eec9 code=0x7ffc0000 [ 67.127406][ T4288] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.154085][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.203216][ T4288] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.290088][ T4288] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.359789][ T4288] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.414927][ T4302] siw: device registration error -23 [ 67.453097][ T37] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.483093][ T37] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.502125][ T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.516663][ T31] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.570853][ T29] audit: type=1400 audit(1759264058.980:2991): avc: denied { setopt } for pid=4305 comm="syz.3.260" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.692464][ T4313] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.263' sets config #1 [ 67.877214][ T4329] 9pnet_virtio: no channels available for device [ 67.877214][ T4329] [ 67.897713][ T4328] loop2: detected capacity change from 0 to 2048 [ 67.911078][ T4324] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.943716][ T4332] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 67.950381][ T4332] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 67.958166][ T4332] vhci_hcd vhci_hcd.0: Device attached [ 67.963536][ T4340] netlink: 9 bytes leftover after parsing attributes in process `syz.2.271'. [ 67.974827][ T4324] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.990544][ T4340] gretap0: entered promiscuous mode [ 68.047440][ T4341] lo speed is unknown, defaulting to 1000 [ 68.107629][ T4324] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.144800][ T4340] netlink: 'syz.2.271': attribute type 1 has an invalid length. [ 68.157149][ T29] audit: type=1326 audit(1759264059.570:2992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4339 comm="syz.2.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe25994eec9 code=0x7ffc0000 [ 68.239039][ T4324] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.275819][ T29] audit: type=1326 audit(1759264059.590:2993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4339 comm="syz.2.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe25994eec9 code=0x7ffc0000 [ 68.299267][ T29] audit: type=1326 audit(1759264059.590:2994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4339 comm="syz.2.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe25994eec9 code=0x7ffc0000 [ 68.322880][ T29] audit: type=1326 audit(1759264059.590:2995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4339 comm="syz.2.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe25994eec9 code=0x7ffc0000 [ 68.346620][ T29] audit: type=1326 audit(1759264059.590:2996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4339 comm="syz.2.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe25994eec9 code=0x7ffc0000 [ 68.477847][ T1037] usb 1-1: new low-speed USB device number 2 using vhci_hcd [ 68.485409][ T4337] vhci_hcd: connection closed [ 68.485888][ T31] vhci_hcd: stop threads [ 68.495153][ T31] vhci_hcd: release socket [ 68.499661][ T31] vhci_hcd: disconnect device [ 68.508516][ T1037] usb 1-1: enqueue for inactive port 0 [ 68.517302][ T4349] loop4: detected capacity change from 0 to 128 [ 68.526326][ T1037] usb 1-1: enqueue for inactive port 0 [ 68.544885][ T1037] usb 1-1: enqueue for inactive port 0 [ 68.629233][ T1037] vhci_hcd: vhci_device speed not set [ 68.748947][ T4355] 9pnet: Could not find request transport: rd [ 68.854326][ T4364] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.895509][ T4360] loop1: detected capacity change from 0 to 512 [ 68.902437][ T4360] EXT4-fs: Ignoring removed nomblk_io_submit option [ 68.903555][ T4364] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.910720][ T4360] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8857e02c, mo2=0002] [ 68.927713][ T4360] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.278: invalid indirect mapped block 2683928664 (level 1) [ 68.942780][ T4360] EXT4-fs (loop1): Remounting filesystem read-only [ 68.950354][ T4360] EXT4-fs (loop1): 1 truncate cleaned up [ 68.968064][ T4364] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.003989][ T4369] FAULT_INJECTION: forcing a failure. [ 69.003989][ T4369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.017252][ T4369] CPU: 0 UID: 0 PID: 4369 Comm: syz.0.279 Not tainted syzkaller #0 PREEMPT(voluntary) [ 69.017289][ T4369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 69.017306][ T4369] Call Trace: [ 69.017314][ T4369] [ 69.017323][ T4369] __dump_stack+0x1d/0x30 [ 69.017349][ T4369] dump_stack_lvl+0xe8/0x140 [ 69.017405][ T4369] dump_stack+0x15/0x1b [ 69.017419][ T4369] should_fail_ex+0x265/0x280 [ 69.017446][ T4369] should_fail+0xb/0x20 [ 69.017554][ T4369] should_fail_usercopy+0x1a/0x20 [ 69.017581][ T4369] strncpy_from_user+0x25/0x230 [ 69.017601][ T4369] ? kmem_cache_alloc_noprof+0x186/0x310 [ 69.017627][ T4369] ? getname_flags+0x80/0x3b0 [ 69.017681][ T4369] getname_flags+0xae/0x3b0 [ 69.017707][ T4369] __x64_sys_rename+0x33/0x70 [ 69.017731][ T4369] x64_sys_call+0x1f9/0x2ff0 [ 69.017750][ T4369] do_syscall_64+0xd2/0x200 [ 69.017795][ T4369] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 69.017873][ T4369] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 69.017903][ T4369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.017923][ T4369] RIP: 0033:0x7f1e4759eec9 [ 69.018059][ T4369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.018075][ T4369] RSP: 002b:00007f1e46007038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 69.018092][ T4369] RAX: ffffffffffffffda RBX: 00007f1e477f5fa0 RCX: 00007f1e4759eec9 [ 69.018103][ T4369] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 69.018113][ T4369] RBP: 00007f1e46007090 R08: 0000000000000000 R09: 0000000000000000 [ 69.018123][ T4369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.018134][ T4369] R13: 00007f1e477f6038 R14: 00007f1e477f5fa0 R15: 00007ffe9799a0e8 [ 69.018151][ T4369] [ 69.212532][ T4364] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.231893][ T4371] loop1: detected capacity change from 0 to 128 [ 69.505741][ T4390] loop0: detected capacity change from 0 to 2048 [ 70.221965][ T4405] siw: device registration error -23 [ 70.290807][ T4409] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 70.318040][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.338258][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.359756][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.373377][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.447990][ T4419] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 70.454680][ T4419] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 70.462330][ T4419] vhci_hcd vhci_hcd.0: Device attached [ 70.492309][ T4420] vhci_hcd: connection closed [ 70.492449][ T51] vhci_hcd: stop threads [ 70.501574][ T51] vhci_hcd: release socket [ 70.506295][ T51] vhci_hcd: disconnect device [ 70.727361][ T4428] FAULT_INJECTION: forcing a failure. [ 70.727361][ T4428] name failslab, interval 1, probability 0, space 0, times 0 [ 70.740353][ T4428] CPU: 0 UID: 0 PID: 4428 Comm: syz.1.296 Not tainted syzkaller #0 PREEMPT(voluntary) [ 70.740423][ T4428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 70.740439][ T4428] Call Trace: [ 70.740447][ T4428] [ 70.740456][ T4428] __dump_stack+0x1d/0x30 [ 70.740489][ T4428] dump_stack_lvl+0xe8/0x140 [ 70.740547][ T4428] dump_stack+0x15/0x1b [ 70.740562][ T4428] should_fail_ex+0x265/0x280 [ 70.740590][ T4428] should_failslab+0x8c/0xb0 [ 70.740612][ T4428] kmem_cache_alloc_noprof+0x50/0x310 [ 70.740783][ T4428] ? getname_flags+0x80/0x3b0 [ 70.740809][ T4428] getname_flags+0x80/0x3b0 [ 70.740900][ T4428] user_path_at+0x28/0x130 [ 70.740930][ T4428] __x64_sys_umount+0x85/0xe0 [ 70.740948][ T4428] x64_sys_call+0xdd2/0x2ff0 [ 70.740967][ T4428] do_syscall_64+0xd2/0x200 [ 70.741040][ T4428] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 70.741061][ T4428] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 70.741119][ T4428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.741138][ T4428] RIP: 0033:0x7f9a2a57eec9 [ 70.741152][ T4428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.741212][ T4428] RSP: 002b:00007f9a28fe7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 70.741231][ T4428] RAX: ffffffffffffffda RBX: 00007f9a2a7d5fa0 RCX: 00007f9a2a57eec9 [ 70.741244][ T4428] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000000 [ 70.741257][ T4428] RBP: 00007f9a28fe7090 R08: 0000000000000000 R09: 0000000000000000 [ 70.741270][ T4428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.741281][ T4428] R13: 00007f9a2a7d6038 R14: 00007f9a2a7d5fa0 R15: 00007fff0c9d61b8 [ 70.741299][ T4428] [ 70.999988][ T4432] loop4: detected capacity change from 0 to 2048 [ 71.027420][ T4434] binfmt_misc: register: failed to install interpreter file ./file2 [ 71.124043][ T4442] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 71.194340][ T4451] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.304' sets config #1 [ 71.211603][ T4453] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.268708][ T4439] netlink: 20 bytes leftover after parsing attributes in process `syz.1.301'. [ 71.300323][ T4455] loop1: detected capacity change from 0 to 512 [ 71.327358][ T4453] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.357941][ T4455] EXT4-fs: old and new quota format mixing [ 71.379251][ T4453] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.397867][ T4458] loop0: detected capacity change from 0 to 512 [ 71.420615][ T4458] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.306: couldn't read orphan inode 26 (err -116) [ 71.438230][ T4453] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.506765][ T4458] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.527611][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.538999][ T4458] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.306: iget: bad i_size value: 360287970189639690 [ 71.545569][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.566525][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.575021][ T51] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.595042][ T4462] 9pnet: Could not find request transport: rdm [ 71.621800][ T4458] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.306: iget: bad i_size value: 360287970189639690 [ 71.652064][ T4458] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.306: iget: bad i_size value: 360287970189639690 [ 71.683799][ T4469] loop4: detected capacity change from 0 to 2048 [ 71.723744][ T4473] loop1: detected capacity change from 0 to 128 [ 71.751609][ T4478] binfmt_misc: register: failed to install interpreter file ./file2 [ 71.766560][ T4476] loop3: detected capacity change from 0 to 128 [ 71.800039][ T3300] EXT4-fs unmount: 11 callbacks suppressed [ 71.800055][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.808659][ T4480] netlink: '+}[@': attribute type 10 has an invalid length. [ 71.838363][ T4480] team0 (unregistering): Port device team_slave_0 removed [ 71.854089][ T4480] team0 (unregistering): Port device team_slave_1 removed [ 71.885869][ T4485] loop0: detected capacity change from 0 to 128 [ 71.960973][ T4488] loop4: detected capacity change from 0 to 2048 [ 71.978351][ T4488] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.992006][ T4488] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.352377][ T4496] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 72.367583][ T4496] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.407865][ T4496] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.436811][ T4503] 9pnet_virtio: no channels available for device [ 72.436811][ T4503] [ 72.451211][ T4503] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.464740][ T4496] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.508136][ T4503] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.547954][ T4496] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.591104][ T4506] loop3: detected capacity change from 0 to 512 [ 72.599426][ T4503] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.601175][ T4506] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 72.619376][ T4506] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 72.662301][ T4512] loop3: detected capacity change from 0 to 2048 [ 72.668122][ T51] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.688198][ T4503] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.703199][ T4513] loop1: detected capacity change from 0 to 512 [ 72.709892][ T51] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.727763][ T51] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.728777][ T4512] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.748993][ T51] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.761937][ T4517] loop4: detected capacity change from 0 to 1024 [ 72.778292][ T51] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.792458][ T4517] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.805313][ T4513] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.322: couldn't read orphan inode 26 (err -116) [ 72.810357][ T51] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.826239][ T51] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.835459][ T4513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.842307][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.848594][ T4513] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.871137][ T4513] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.322: iget: bad i_size value: 360287970189639690 [ 72.872082][ T4517] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.908368][ T29] kauditd_printk_skb: 309 callbacks suppressed [ 72.908382][ T29] audit: type=1400 audit(1759264064.320:3306): avc: denied { setattr } for pid=4516 comm="syz.4.324" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 72.938056][ T4513] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.322: iget: bad i_size value: 360287970189639690 [ 72.937986][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.960690][ T4517] FAULT_INJECTION: forcing a failure. [ 72.960690][ T4517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.974682][ T4517] CPU: 0 UID: 0 PID: 4517 Comm: syz.4.324 Not tainted syzkaller #0 PREEMPT(voluntary) [ 72.974738][ T4517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 72.974754][ T4517] Call Trace: [ 72.974761][ T4517] [ 72.974771][ T4517] __dump_stack+0x1d/0x30 [ 72.974797][ T4517] dump_stack_lvl+0xe8/0x140 [ 72.974816][ T4517] dump_stack+0x15/0x1b [ 72.974833][ T4517] should_fail_ex+0x265/0x280 [ 72.974936][ T4517] should_fail+0xb/0x20 [ 72.974962][ T4517] should_fail_usercopy+0x1a/0x20 [ 72.975074][ T4517] _copy_from_user+0x1c/0xb0 [ 72.975098][ T4517] vmemdup_user+0x59/0xd0 [ 72.975133][ T4517] path_setxattrat+0x1b6/0x310 [ 72.975231][ T4517] __x64_sys_lsetxattr+0x71/0x90 [ 72.975292][ T4517] x64_sys_call+0x2877/0x2ff0 [ 72.975318][ T4517] do_syscall_64+0xd2/0x200 [ 72.975343][ T4517] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 72.975401][ T4517] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 72.975438][ T4517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.975466][ T4517] RIP: 0033:0x7f1a5f4beec9 [ 72.975538][ T4517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.975564][ T4517] RSP: 002b:00007f1a5df1f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 72.975588][ T4517] RAX: ffffffffffffffda RBX: 00007f1a5f715fa0 RCX: 00007f1a5f4beec9 [ 72.975608][ T4517] RDX: 0000200000000540 RSI: 00002000000003c0 RDI: 0000200000000000 [ 72.975623][ T4517] RBP: 00007f1a5df1f090 R08: 0000000000000000 R09: 0000000000000000 [ 72.975635][ T4517] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000001 [ 72.975647][ T4517] R13: 00007f1a5f716038 R14: 00007f1a5f715fa0 R15: 00007ffef91ff1d8 [ 72.975667][ T4517] [ 72.977521][ T4513] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.322: iget: bad i_size value: 360287970189639690 [ 73.021992][ T4523] binfmt_misc: register: failed to install interpreter file ./file2 [ 73.026843][ T29] audit: type=1400 audit(1759264064.440:3307): avc: denied { remove_name } for pid=4516 comm="syz.4.324" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.196060][ T29] audit: type=1400 audit(1759264064.440:3308): avc: denied { unlink } for pid=4516 comm="syz.4.324" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 73.220418][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.231580][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.248929][ T4532] FAULT_INJECTION: forcing a failure. [ 73.248929][ T4532] name failslab, interval 1, probability 0, space 0, times 0 [ 73.261775][ T4532] CPU: 0 UID: 0 PID: 4532 Comm: syz.0.331 Not tainted syzkaller #0 PREEMPT(voluntary) [ 73.261808][ T4532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 73.261821][ T4532] Call Trace: [ 73.261827][ T4532] [ 73.261835][ T4532] __dump_stack+0x1d/0x30 [ 73.261860][ T4532] dump_stack_lvl+0xe8/0x140 [ 73.261934][ T4532] dump_stack+0x15/0x1b [ 73.261950][ T4532] should_fail_ex+0x265/0x280 [ 73.261989][ T4532] ? xfrm_policy_alloc+0x62/0x1b0 [ 73.262025][ T4532] should_failslab+0x8c/0xb0 [ 73.262058][ T4532] __kmalloc_cache_noprof+0x4c/0x320 [ 73.262195][ T4532] xfrm_policy_alloc+0x62/0x1b0 [ 73.262224][ T4532] pfkey_compile_policy+0x193/0x410 [ 73.262290][ T4532] ? xfrm_compile_policy+0x106/0x240 [ 73.262325][ T4532] ? __pfx_pfkey_compile_policy+0x10/0x10 [ 73.262363][ T4532] xfrm_user_policy+0x297/0x540 [ 73.262446][ T4532] do_ipv6_setsockopt+0x1266/0x2160 [ 73.262483][ T4532] ? kstrtoull+0x111/0x140 [ 73.262517][ T4532] ? __rcu_read_unlock+0x4f/0x70 [ 73.262544][ T4532] ? avc_has_perm_noaudit+0x1b1/0x200 [ 73.262580][ T4532] ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0 [ 73.262708][ T4532] ipv6_setsockopt+0x59/0x130 [ 73.262741][ T4532] rawv6_setsockopt+0x1d2/0x420 [ 73.262769][ T4532] sock_common_setsockopt+0x66/0x80 [ 73.262801][ T4532] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 73.262828][ T4532] __sys_setsockopt+0x184/0x200 [ 73.262864][ T4532] __x64_sys_setsockopt+0x64/0x80 [ 73.262933][ T4532] x64_sys_call+0x20ec/0x2ff0 [ 73.263027][ T4532] do_syscall_64+0xd2/0x200 [ 73.263053][ T4532] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 73.263115][ T4532] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 73.263154][ T4532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.263238][ T4532] RIP: 0033:0x7f1e4759eec9 [ 73.263258][ T4532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.263281][ T4532] RSP: 002b:00007f1e46007038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 73.263305][ T4532] RAX: ffffffffffffffda RBX: 00007f1e477f5fa0 RCX: 00007f1e4759eec9 [ 73.263321][ T4532] RDX: 0000000000000022 RSI: 0000000000000029 RDI: 0000000000000004 [ 73.263395][ T4532] RBP: 00007f1e46007090 R08: 000000000000005c R09: 0000000000000000 [ 73.263411][ T4532] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.263425][ T4532] R13: 00007f1e477f6038 R14: 00007f1e477f5fa0 R15: 00007ffe9799a0e8 [ 73.263443][ T4532] [ 73.521667][ T4530] loop3: detected capacity change from 0 to 512 [ 73.567502][ T4530] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.330: couldn't read orphan inode 26 (err -116) [ 73.581271][ T4530] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.594089][ T4530] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.661840][ T4547] loop0: detected capacity change from 0 to 512 [ 73.764907][ T4547] EXT4-fs (loop0): orphan cleanup on readonly fs [ 73.771487][ T4529] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.330: iget: bad i_size value: 360287970189639690 [ 73.784878][ T4547] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.333: bad orphan inode 13 [ 73.799631][ T4550] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 73.808789][ T4529] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.330: iget: bad i_size value: 360287970189639690 [ 73.822706][ T4547] ext4_test_bit(bit=12, block=18) = 1 [ 73.828147][ T4547] is_bad_inode(inode)=0 [ 73.832391][ T4547] NEXT_ORPHAN(inode)=2130706432 [ 73.837448][ T4547] max_ino=32 [ 73.840816][ T4547] i_nlink=1 [ 73.847045][ T4547] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.860296][ T4547] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.862806][ T4529] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.330: iget: bad i_size value: 360287970189639690 [ 73.902207][ T4547] bridge0: port 3(syz_tun) entered blocking state [ 73.903839][ T4556] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.335' sets config #1 [ 73.908956][ T4547] bridge0: port 3(syz_tun) entered disabled state [ 73.938836][ T4547] syz_tun: entered allmulticast mode [ 73.946539][ T4547] syz_tun: entered promiscuous mode [ 73.947727][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.952454][ T4547] bridge0: port 3(syz_tun) entered blocking state [ 73.967565][ T4547] bridge0: port 3(syz_tun) entered forwarding state [ 74.066759][ T4558] loop1: detected capacity change from 0 to 2048 [ 74.097976][ T4558] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.121113][ T4558] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.142130][ T4569] loop0: detected capacity change from 0 to 512 [ 74.151246][ T4567] random: crng reseeded on system resumption [ 74.159325][ T29] audit: type=1400 audit(1759264065.570:3309): avc: denied { write } for pid=4565 comm="syz.4.340" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 74.193527][ T4569] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.339: couldn't read orphan inode 26 (err -116) [ 74.208293][ T4568] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 74.215178][ T4568] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 74.222921][ T4568] vhci_hcd vhci_hcd.0: Device attached [ 74.260800][ T4567] loop4: detected capacity change from 0 to 1024 [ 74.267271][ T4574] vhci_hcd: connection closed [ 74.267448][ T37] vhci_hcd: stop threads [ 74.276651][ T37] vhci_hcd: release socket [ 74.281451][ T37] vhci_hcd: disconnect device [ 74.292073][ T4567] EXT4-fs: Ignoring removed orlov option [ 74.298480][ T4567] EXT4-fs: Ignoring removed nobh option [ 74.304259][ T4567] EXT4-fs: Ignoring removed bh option [ 74.311893][ T4569] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.325221][ T4569] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.337246][ T4569] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.339: iget: bad i_size value: 360287970189639690 [ 74.355303][ T4567] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.368647][ T4569] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.339: iget: bad i_size value: 360287970189639690 [ 74.389962][ T4560] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.339: iget: bad i_size value: 360287970189639690 [ 74.418092][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.437555][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.512203][ T4587] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 74.543100][ T51] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.573430][ T51] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.585734][ T51] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.600894][ T51] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.613203][ T4597] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.348' sets config #1 [ 74.624145][ T29] audit: type=1326 audit(1759264066.030:3310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4596 comm="syz.0.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4759eec9 code=0x7ffc0000 [ 74.647670][ T29] audit: type=1326 audit(1759264066.030:3311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4596 comm="syz.0.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4759eec9 code=0x7ffc0000 [ 74.651419][ T4601] binfmt_misc: register: failed to install interpreter file ./file2 [ 74.673398][ T29] audit: type=1326 audit(1759264066.090:3312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4596 comm="syz.0.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e4759eec9 code=0x7ffc0000 [ 74.704806][ T29] audit: type=1326 audit(1759264066.120:3313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4596 comm="syz.0.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4759eec9 code=0x7ffc0000 [ 74.728852][ T29] audit: type=1326 audit(1759264066.120:3314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4596 comm="syz.0.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4759eec9 code=0x7ffc0000 [ 74.752579][ T4598] loop0: detected capacity change from 0 to 128 [ 74.754380][ T29] audit: type=1326 audit(1759264066.150:3315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4596 comm="syz.0.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1e4759eec9 code=0x7ffc0000 [ 74.800230][ T4599] loop1: detected capacity change from 0 to 512 [ 74.886838][ T4599] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.346: couldn't read orphan inode 26 (err -116) [ 74.925402][ T4615] loop3: detected capacity change from 0 to 512 [ 75.024648][ T4599] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.042378][ T4599] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.128127][ T4592] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.346: iget: bad i_size value: 360287970189639690 [ 75.148928][ T4599] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.346: iget: bad i_size value: 360287970189639690 [ 75.185250][ T4592] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.346: iget: bad i_size value: 360287970189639690 [ 75.209809][ T4619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4619 comm=syz.2.355 [ 75.252862][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.264096][ T4615] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.353: couldn't read orphan inode 26 (err -116) [ 75.328352][ T4615] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.490716][ T4615] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.569317][ T4609] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.353: iget: bad i_size value: 360287970189639690 [ 75.599231][ T4609] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.353: iget: bad i_size value: 360287970189639690 [ 75.641282][ T4609] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.353: iget: bad i_size value: 360287970189639690 [ 75.703942][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.861978][ T4635] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.360' sets config #1 [ 75.950532][ T4643] netlink: 'syz.4.362': attribute type 1 has an invalid length. [ 75.958442][ T4643] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.362'. [ 75.998935][ T4645] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 76.005594][ T4645] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 76.013677][ T4645] vhci_hcd vhci_hcd.0: Device attached [ 76.064556][ T4655] loop4: detected capacity change from 0 to 128 [ 76.134041][ T4658] binfmt_misc: register: failed to install interpreter file ./file2 [ 76.191062][ T4653] netlink: 20 bytes leftover after parsing attributes in process `syz.3.365'. [ 76.230741][ T4663] loop2: detected capacity change from 0 to 128 [ 76.256302][ T3395] usb 3-1: new low-speed USB device number 4 using vhci_hcd [ 76.303931][ T4669] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.372' sets config #1 [ 76.385174][ T4673] loop3: detected capacity change from 0 to 512 [ 76.403897][ T4673] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.373: couldn't read orphan inode 26 (err -116) [ 76.418279][ T4673] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.431242][ T4673] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.443568][ T4673] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.373: iget: bad i_size value: 360287970189639690 [ 76.457241][ T4673] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.373: iget: bad i_size value: 360287970189639690 [ 76.472884][ T4673] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.373: iget: bad i_size value: 360287970189639690 [ 76.528243][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.630172][ T4681] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.651743][ T4686] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.688314][ T4681] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.700509][ T4686] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.748088][ T4681] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.788015][ T4686] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.807945][ T4650] vhci_hcd: connection reset by peer [ 76.814289][ T31] vhci_hcd: stop threads [ 76.818948][ T31] vhci_hcd: release socket [ 76.823539][ T31] vhci_hcd: disconnect device [ 76.849157][ T4681] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.867650][ T4686] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.922334][ T51] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.934960][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.956501][ T51] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.969069][ T51] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.991246][ T4693] netlink: 9 bytes leftover after parsing attributes in process `syz.4.378'. [ 77.013106][ T4693] netlink: 'syz.4.378': attribute type 1 has an invalid length. [ 77.109044][ T4703] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 77.115797][ T4703] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 77.123545][ T4703] vhci_hcd vhci_hcd.0: Device attached [ 77.165799][ T4713] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.383' sets config #1 [ 77.248482][ T4718] capability: warning: `syz.2.384' uses 32-bit capabilities (legacy support in use) [ 77.354891][ T4725] loop1: detected capacity change from 0 to 128 [ 77.376343][ T10] usb 9-1: new low-speed USB device number 2 using vhci_hcd [ 77.399994][ T4723] siw: device registration error -23 [ 77.712725][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.725302][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.738735][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.752303][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.784689][ T4730] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.817987][ T4730] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.877933][ T4730] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.917851][ T4707] vhci_hcd: connection reset by peer [ 77.921438][ T4730] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.923768][ T12] vhci_hcd: stop threads [ 77.937404][ T12] vhci_hcd: release socket [ 77.941906][ T12] vhci_hcd: disconnect device [ 78.078600][ T4738] netlink: 9 bytes leftover after parsing attributes in process `syz.2.391'. [ 78.093729][ T4738] netlink: 'syz.2.391': attribute type 1 has an invalid length. [ 78.120617][ T29] kauditd_printk_skb: 174 callbacks suppressed [ 78.120634][ T29] audit: type=1400 audit(1759264069.530:3490): avc: denied { create } for pid=4739 comm="syz.2.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 78.167801][ T4742] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 78.178211][ T29] audit: type=1326 audit(1759264069.590:3491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4724 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2a57eec9 code=0x7ffc0000 [ 78.201823][ T29] audit: type=1326 audit(1759264069.590:3492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4724 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2a57eec9 code=0x7ffc0000 [ 78.257284][ T4749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.395'. [ 78.268347][ T29] audit: type=1400 audit(1759264069.680:3493): avc: denied { connect } for pid=4748 comm="syz.3.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 78.276540][ T4747] loop2: detected capacity change from 0 to 128 [ 78.327272][ T4751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.335748][ T4751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.343939][ T4755] FAULT_INJECTION: forcing a failure. [ 78.343939][ T4755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.357504][ T4755] CPU: 0 UID: 0 PID: 4755 Comm: syz.1.397 Not tainted syzkaller #0 PREEMPT(voluntary) [ 78.357637][ T4755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 78.357654][ T4755] Call Trace: [ 78.357662][ T4755] [ 78.357673][ T4755] __dump_stack+0x1d/0x30 [ 78.357701][ T4755] dump_stack_lvl+0xe8/0x140 [ 78.357726][ T4755] dump_stack+0x15/0x1b [ 78.357746][ T4755] should_fail_ex+0x265/0x280 [ 78.357807][ T4755] should_fail+0xb/0x20 [ 78.357838][ T4755] should_fail_usercopy+0x1a/0x20 [ 78.357870][ T4755] _copy_from_user+0x1c/0xb0 [ 78.357889][ T4755] ___sys_sendmsg+0xc1/0x1d0 [ 78.357962][ T4755] __x64_sys_sendmsg+0xd4/0x160 [ 78.358035][ T4755] x64_sys_call+0x191e/0x2ff0 [ 78.358062][ T4755] do_syscall_64+0xd2/0x200 [ 78.358087][ T4755] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 78.358162][ T4755] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 78.358206][ T4755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.358235][ T4755] RIP: 0033:0x7f9a2a57eec9 [ 78.358251][ T4755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.358269][ T4755] RSP: 002b:00007f9a28fe7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.358291][ T4755] RAX: ffffffffffffffda RBX: 00007f9a2a7d5fa0 RCX: 00007f9a2a57eec9 [ 78.358344][ T4755] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000004 [ 78.358356][ T4755] RBP: 00007f9a28fe7090 R08: 0000000000000000 R09: 0000000000000000 [ 78.358382][ T4755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.358397][ T4755] R13: 00007f9a2a7d6038 R14: 00007f9a2a7d5fa0 R15: 00007fff0c9d61b8 [ 78.358422][ T4755] [ 78.599435][ T29] audit: type=1326 audit(1759264070.010:3494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4761 comm="syz.4.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a5f4beec9 code=0x7ffc0000 [ 78.636231][ T29] audit: type=1326 audit(1759264070.040:3495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4761 comm="syz.4.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f1a5f4beec9 code=0x7ffc0000 [ 78.660078][ T29] audit: type=1326 audit(1759264070.040:3496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4761 comm="syz.4.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a5f4beec9 code=0x7ffc0000 [ 78.688600][ T29] audit: type=1400 audit(1759264070.100:3497): avc: denied { write } for pid=4769 comm="syz.1.402" name="ip_mr_vif" dev="proc" ino=4026532756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 78.724194][ T4773] netlink: 9 bytes leftover after parsing attributes in process `syz.1.403'. [ 78.734737][ T4773] gretap0: entered promiscuous mode [ 78.751062][ T4773] netlink: 'syz.1.403': attribute type 1 has an invalid length. [ 78.965524][ T29] audit: type=1326 audit(1759264070.370:3498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4781 comm="syz.4.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a5f4beec9 code=0x7ffc0000 [ 78.990253][ T29] audit: type=1326 audit(1759264070.370:3499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4781 comm="syz.4.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a5f4beec9 code=0x7ffc0000 [ 79.024117][ T4782] loop4: detected capacity change from 0 to 128 [ 79.199535][ T4798] loop2: detected capacity change from 0 to 2048 [ 79.218411][ T4802] netlink: 9 bytes leftover after parsing attributes in process `syz.1.416'. [ 79.219306][ T4798] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.237415][ T4802] netlink: 'syz.1.416': attribute type 1 has an invalid length. [ 79.260231][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.285810][ C0] hrtimer: interrupt took 37068 ns [ 79.329890][ T4809] loop2: detected capacity change from 0 to 512 [ 79.349026][ T4809] EXT4-fs (loop2): too many log groups per flexible block group [ 79.357988][ T4809] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 79.365256][ T4809] EXT4-fs (loop2): mount failed [ 79.411233][ T4815] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 79.417897][ T4815] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 79.425670][ T4815] vhci_hcd vhci_hcd.0: Device attached [ 79.619121][ T4828] loop2: detected capacity change from 0 to 128 [ 80.000013][ T4818] vhci_hcd: connection closed [ 80.000464][ T37] vhci_hcd: stop threads [ 80.009671][ T37] vhci_hcd: release socket [ 80.014134][ T37] vhci_hcd: disconnect device [ 80.033805][ T4837] loop4: detected capacity change from 0 to 512 [ 80.042976][ T4837] ext3: Bad value for 'max_batch_time' [ 80.558046][ T4839] loop1: detected capacity change from 0 to 2048 [ 80.568285][ T4839] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.601648][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.767274][ T4854] binfmt_misc: register: failed to install interpreter file ./file2 [ 80.783694][ T4856] netlink: 20 bytes leftover after parsing attributes in process `syz.1.435'. [ 80.869687][ T4869] netlink: 9 bytes leftover after parsing attributes in process `syz.1.440'. [ 80.870660][ T4865] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 80.885196][ T4865] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 80.893111][ T4865] vhci_hcd vhci_hcd.0: Device attached [ 80.941700][ T4876] veth2: entered promiscuous mode [ 81.010619][ T4863] siw: device registration error -23 [ 81.040664][ T4870] vhci_hcd: connection closed [ 81.040893][ T31] vhci_hcd: stop threads [ 81.049914][ T31] vhci_hcd: release socket [ 81.054778][ T31] vhci_hcd: disconnect device [ 81.086297][ T1037] vhci_hcd: vhci_device speed not set [ 81.193785][ T4881] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 81.200589][ T4881] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 81.208188][ T4881] vhci_hcd vhci_hcd.0: Device attached [ 81.448748][ T4890] loop3: detected capacity change from 0 to 512 [ 81.468047][ T4890] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.446: couldn't read orphan inode 26 (err -116) [ 81.481674][ T4890] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.494658][ T4890] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.509405][ T4890] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.446: iget: bad i_size value: 360287970189639690 [ 81.531277][ T4890] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.446: iget: bad i_size value: 360287970189639690 [ 81.582438][ T4894] loop2: detected capacity change from 0 to 1024 [ 81.590615][ T4894] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.611270][ T4894] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.625811][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.651209][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.708590][ T4900] loop3: detected capacity change from 0 to 512 [ 81.727646][ T4904] netlink: 9 bytes leftover after parsing attributes in process `syz.2.451'. [ 81.758359][ T4900] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.775155][ T4900] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.800635][ T4912] loop4: detected capacity change from 0 to 128 [ 81.832883][ T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.855119][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.894047][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.923148][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.001892][ T4914] lo speed is unknown, defaulting to 1000 [ 82.011085][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.021416][ T4884] vhci_hcd: connection reset by peer [ 82.036941][ T4922] loop0: detected capacity change from 0 to 512 [ 82.045587][ T51] vhci_hcd: stop threads [ 82.049996][ T51] vhci_hcd: release socket [ 82.054738][ T51] vhci_hcd: disconnect device [ 82.101798][ T4922] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.456: couldn't read orphan inode 26 (err -116) [ 82.120535][ T4924] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 82.127260][ T4924] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 82.134872][ T4924] vhci_hcd vhci_hcd.0: Device attached [ 82.165057][ T4929] vhci_hcd: connection closed [ 82.165598][ T374] vhci_hcd: stop threads [ 82.174797][ T374] vhci_hcd: release socket [ 82.179286][ T374] vhci_hcd: disconnect device [ 82.225037][ T4922] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.246592][ T4922] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.272059][ T4922] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.456: iget: bad i_size value: 360287970189639690 [ 82.301702][ T4922] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.456: iget: bad i_size value: 360287970189639690 [ 82.332786][ T4922] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.456: iget: bad i_size value: 360287970189639690 [ 82.396644][ T10] usb 9-1: enqueue for inactive port 0 [ 82.403607][ T10] usb 9-1: enqueue for inactive port 0 [ 82.410754][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.496275][ T10] vhci_hcd: vhci_device speed not set [ 82.649616][ T4937] lo speed is unknown, defaulting to 1000 [ 82.827747][ T4959] binfmt_misc: register: failed to install interpreter file ./file2 [ 82.867574][ T4962] netlink: 9 bytes leftover after parsing attributes in process `syz.1.470'. [ 82.897400][ T4960] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.008337][ T4960] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.130287][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 83.130348][ T29] audit: type=1326 audit(1759264074.540:3661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9823cceec9 code=0x7ffc0000 [ 83.160563][ T29] audit: type=1326 audit(1759264074.540:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9823cceec9 code=0x7ffc0000 [ 83.162370][ T4981] loop3: detected capacity change from 0 to 128 [ 83.184651][ T29] audit: type=1326 audit(1759264074.540:3663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9823cceec9 code=0x7ffc0000 [ 83.214480][ T29] audit: type=1326 audit(1759264074.540:3664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9823ccef03 code=0x7ffc0000 [ 83.237955][ T29] audit: type=1326 audit(1759264074.540:3665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9823ccd97f code=0x7ffc0000 [ 83.261099][ T29] audit: type=1326 audit(1759264074.540:3666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f9823ccef57 code=0x7ffc0000 [ 83.284686][ T29] audit: type=1326 audit(1759264074.580:3667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9823ccd710 code=0x7ffc0000 [ 83.308460][ T29] audit: type=1326 audit(1759264074.580:3668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9823cceacb code=0x7ffc0000 [ 83.519896][ T4960] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.620423][ T29] audit: type=1326 audit(1759264074.760:3669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9823ccdb2a code=0x7ffc0000 [ 83.644114][ T29] audit: type=1326 audit(1759264074.760:3670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9823ccdb2a code=0x7ffc0000 [ 83.678018][ T4982] lo speed is unknown, defaulting to 1000 [ 83.710871][ T4960] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.740447][ T4987] loop0: detected capacity change from 0 to 2048 [ 83.759444][ T4987] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.773779][ T4987] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.793989][ T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.812763][ T4994] loop0: detected capacity change from 0 to 512 [ 83.837653][ T4997] binfmt_misc: register: failed to install interpreter file ./file2 [ 83.846135][ T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.908929][ T4998] loop4: detected capacity change from 0 to 2048 [ 83.908963][ T31] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.925787][ T31] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.935989][ T5000] netlink: 9 bytes leftover after parsing attributes in process `syz.2.483'. [ 83.955213][ T4998] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.970181][ T4998] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.033062][ T5006] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 84.039833][ T5006] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 84.047548][ T5006] vhci_hcd vhci_hcd.0: Device attached [ 84.068832][ T5017] 9pnet_virtio: no channels available for device [ 84.068832][ T5017] [ 84.083846][ T5016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.489'. [ 84.095996][ T5016] netlink: zone id is out of range [ 84.101306][ T5016] netlink: zone id is out of range [ 84.106564][ T5016] netlink: zone id is out of range [ 84.107762][ T5017] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.111864][ T5016] netlink: zone id is out of range [ 84.127175][ T5016] netlink: zone id is out of range [ 84.132348][ T5016] netlink: zone id is out of range [ 84.137564][ T5016] netlink: zone id is out of range [ 84.142808][ T5016] netlink: zone id is out of range [ 84.147948][ T5022] 9pnet_virtio: no channels available for device [ 84.147948][ T5022] [ 84.157092][ T5016] netlink: zone id is out of range [ 84.162428][ T5016] netlink: zone id is out of range [ 84.174009][ T5022] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.174851][ T5013] vhci_hcd: connection reset by peer [ 84.191441][ T374] vhci_hcd: stop threads [ 84.195904][ T374] vhci_hcd: release socket [ 84.200530][ T374] vhci_hcd: disconnect device [ 84.208908][ T5026] netlink: 'syz.4.491': attribute type 13 has an invalid length. [ 84.218508][ T5017] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.264359][ T5028] loop0: detected capacity change from 0 to 2048 [ 84.279001][ T5028] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.292456][ T5028] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.302662][ T5022] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.315948][ T5031] ip6tnl0: Caught tx_queue_len zero misconfig [ 84.327576][ T5017] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.357838][ T5022] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.388191][ T5017] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.449105][ T5022] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.479678][ T5037] loop0: detected capacity change from 0 to 128 [ 84.565406][ T37] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.584871][ T37] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.599603][ T37] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.609513][ T37] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.781203][ T5044] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 84.787871][ T5044] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 84.795621][ T5044] vhci_hcd vhci_hcd.0: Device attached [ 85.053649][ T5055] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 85.060395][ T5055] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 85.068196][ T5055] vhci_hcd vhci_hcd.0: Device attached [ 85.198566][ T5047] vhci_hcd: connection closed [ 85.198826][ T37] vhci_hcd: stop threads [ 85.208250][ T37] vhci_hcd: release socket [ 85.212964][ T37] vhci_hcd: disconnect device [ 85.218149][ T5058] vhci_hcd: connection closed [ 85.218541][ T37] vhci_hcd: stop threads [ 85.227699][ T37] vhci_hcd: release socket [ 85.232156][ T37] vhci_hcd: disconnect device [ 85.256378][ T23] vhci_hcd: vhci_device speed not set [ 85.427694][ T5063] loop4: detected capacity change from 0 to 2048 [ 85.456736][ T5063] loop4: p1 < > p4 [ 85.461707][ T5063] loop4: p4 size 8388608 extends beyond EOD, truncated [ 85.471259][ T5063] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 85.477802][ T5063] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 85.485964][ T5063] vhci_hcd vhci_hcd.0: Device attached [ 85.565131][ T5067] loop0: detected capacity change from 0 to 2048 [ 85.577722][ T5067] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.592441][ T5067] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.597123][ T5064] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 1 [ 85.609161][ T31] vhci_hcd: stop threads [ 85.613540][ T31] vhci_hcd: release socket [ 85.613559][ T31] vhci_hcd: disconnect device [ 85.666359][ T10] vhci_hcd: vhci_device speed not set [ 85.800765][ T5079] loop3: detected capacity change from 0 to 512 [ 85.823049][ T5079] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.506: couldn't read orphan inode 26 (err -116) [ 85.838030][ T5079] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.888657][ T5079] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.925719][ T5092] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.957628][ T5079] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.506: iget: bad i_size value: 360287970189639690 [ 85.992442][ T5074] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.506: iget: bad i_size value: 360287970189639690 [ 86.007440][ T5074] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.506: iget: bad i_size value: 360287970189639690 [ 86.033594][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.090800][ T5097] netlink: 20 bytes leftover after parsing attributes in process `syz.3.513'. [ 86.116061][ T5100] binfmt_misc: register: failed to install interpreter file ./file2 [ 86.444277][ T5114] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5114 comm=syz.4.521 [ 86.458321][ T5114] lo: Caught tx_queue_len zero misconfig [ 86.464173][ T5114] netlink: 'syz.4.521': attribute type 5 has an invalid length. [ 86.495299][ T5123] FAULT_INJECTION: forcing a failure. [ 86.495299][ T5123] name failslab, interval 1, probability 0, space 0, times 0 [ 86.508393][ T5123] CPU: 1 UID: 0 PID: 5123 Comm: syz.4.522 Not tainted syzkaller #0 PREEMPT(voluntary) [ 86.508493][ T5123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 86.508510][ T5123] Call Trace: [ 86.508527][ T5123] [ 86.508545][ T5123] __dump_stack+0x1d/0x30 [ 86.508632][ T5123] dump_stack_lvl+0xe8/0x140 [ 86.508679][ T5123] dump_stack+0x15/0x1b [ 86.508698][ T5123] should_fail_ex+0x265/0x280 [ 86.508733][ T5123] should_failslab+0x8c/0xb0 [ 86.508765][ T5123] kmem_cache_alloc_noprof+0x50/0x310 [ 86.508855][ T5123] ? skb_clone+0x151/0x1f0 [ 86.508894][ T5123] skb_clone+0x151/0x1f0 [ 86.508922][ T5123] __netlink_deliver_tap+0x2c9/0x500 [ 86.509048][ T5123] netlink_unicast+0x66b/0x690 [ 86.509118][ T5123] netlink_sendmsg+0x58b/0x6b0 [ 86.509203][ T5123] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.509333][ T5123] __sock_sendmsg+0x145/0x180 [ 86.509383][ T5123] ____sys_sendmsg+0x31e/0x4e0 [ 86.509465][ T5123] ___sys_sendmsg+0x17b/0x1d0 [ 86.509517][ T5123] __x64_sys_sendmsg+0xd4/0x160 [ 86.509560][ T5123] x64_sys_call+0x191e/0x2ff0 [ 86.509588][ T5123] do_syscall_64+0xd2/0x200 [ 86.509693][ T5123] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 86.509816][ T5123] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 86.509957][ T5123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.510009][ T5123] RIP: 0033:0x7f1a5f4beec9 [ 86.510025][ T5123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.510049][ T5123] RSP: 002b:00007f1a5df1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.510073][ T5123] RAX: ffffffffffffffda RBX: 00007f1a5f715fa0 RCX: 00007f1a5f4beec9 [ 86.510088][ T5123] RDX: 0000000000048000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 86.510104][ T5123] RBP: 00007f1a5df1f090 R08: 0000000000000000 R09: 0000000000000000 [ 86.510121][ T5123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.510136][ T5123] R13: 00007f1a5f716038 R14: 00007f1a5f715fa0 R15: 00007ffef91ff1d8 [ 86.510158][ T5123] [ 86.786556][ T5131] binfmt_misc: register: failed to install interpreter file ./file2 [ 86.813309][ T5133] netlink: 9 bytes leftover after parsing attributes in process `syz.4.527'. [ 86.981605][ T5146] lo speed is unknown, defaulting to 1000 [ 87.093355][ T5145] loop0: detected capacity change from 0 to 2048 [ 87.116316][ T3395] usb 3-1: enqueue for inactive port 0 [ 87.137368][ T5140] loop3: detected capacity change from 0 to 2048 [ 87.190771][ T5140] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.203954][ T3395] vhci_hcd: vhci_device speed not set [ 87.232996][ T5145] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.304229][ T5140] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.323998][ T5145] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.438929][ T5162] netlink: 72 bytes leftover after parsing attributes in process `syz.3.535'. [ 87.482315][ T5164] netlink: 72 bytes leftover after parsing attributes in process `syz.3.536'. [ 87.629190][ T5177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.658934][ T5177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.684100][ T5180] loop4: detected capacity change from 0 to 512 [ 87.721723][ T5180] ext3: Bad value for 'max_batch_time' [ 87.748704][ T5179] loop1: detected capacity change from 0 to 2048 [ 87.780541][ T5172] siw: device registration error -23 [ 87.787864][ T5179] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.801372][ T5179] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.152090][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.164129][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.176051][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.187936][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.211670][ T5186] FAULT_INJECTION: forcing a failure. [ 88.211670][ T5186] name failslab, interval 1, probability 0, space 0, times 0 [ 88.224625][ T5186] CPU: 1 UID: 0 PID: 5186 Comm: syz.2.544 Not tainted syzkaller #0 PREEMPT(voluntary) [ 88.224661][ T5186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 88.224677][ T5186] Call Trace: [ 88.224694][ T5186] [ 88.224703][ T5186] __dump_stack+0x1d/0x30 [ 88.224753][ T5186] dump_stack_lvl+0xe8/0x140 [ 88.224771][ T5186] dump_stack+0x15/0x1b [ 88.224790][ T5186] should_fail_ex+0x265/0x280 [ 88.224876][ T5186] should_failslab+0x8c/0xb0 [ 88.224917][ T5186] kmem_cache_alloc_noprof+0x50/0x310 [ 88.224942][ T5186] ? skb_clone+0x151/0x1f0 [ 88.224993][ T5186] skb_clone+0x151/0x1f0 [ 88.225019][ T5186] __netlink_deliver_tap+0x2c9/0x500 [ 88.225050][ T5186] netlink_unicast+0x66b/0x690 [ 88.225088][ T5186] netlink_sendmsg+0x58b/0x6b0 [ 88.225116][ T5186] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.225161][ T5186] __sock_sendmsg+0x145/0x180 [ 88.225179][ T5186] ____sys_sendmsg+0x31e/0x4e0 [ 88.225216][ T5186] ___sys_sendmsg+0x17b/0x1d0 [ 88.225289][ T5186] __x64_sys_sendmsg+0xd4/0x160 [ 88.225319][ T5186] x64_sys_call+0x191e/0x2ff0 [ 88.225339][ T5186] do_syscall_64+0xd2/0x200 [ 88.225372][ T5186] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 88.225416][ T5186] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 88.225561][ T5186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.225626][ T5186] RIP: 0033:0x7fe25994eec9 [ 88.225643][ T5186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.225667][ T5186] RSP: 002b:00007fe2583b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.225691][ T5186] RAX: ffffffffffffffda RBX: 00007fe259ba5fa0 RCX: 00007fe25994eec9 [ 88.225756][ T5186] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 88.225767][ T5186] RBP: 00007fe2583b7090 R08: 0000000000000000 R09: 0000000000000000 [ 88.225777][ T5186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.225788][ T5186] R13: 00007fe259ba6038 R14: 00007fe259ba5fa0 R15: 00007ffe1a4f79b8 [ 88.225805][ T5186] [ 88.471691][ T29] kauditd_printk_skb: 308 callbacks suppressed [ 88.471709][ T29] audit: type=1326 audit(1759264079.880:3979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5189 comm="syz.2.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe25994eec9 code=0x7ffc0000 [ 88.506083][ T29] audit: type=1326 audit(1759264079.920:3980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5189 comm="syz.2.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe25994eec9 code=0x7ffc0000 [ 88.529681][ T29] audit: type=1326 audit(1759264079.920:3981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5189 comm="syz.2.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe25994eec9 code=0x7ffc0000 [ 88.553906][ T29] audit: type=1326 audit(1759264079.920:3982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5189 comm="syz.2.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe25994eec9 code=0x7ffc0000 [ 88.579672][ T29] audit: type=1326 audit(1759264079.920:3983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5191 comm="syz.4.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a5f4beec9 code=0x7ffc0000 [ 88.604267][ T29] audit: type=1326 audit(1759264079.920:3984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5191 comm="syz.4.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a5f4beec9 code=0x7ffc0000 [ 88.627964][ T29] audit: type=1326 audit(1759264079.920:3985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5191 comm="syz.4.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a5f4beec9 code=0x7ffc0000 [ 88.652826][ T29] audit: type=1326 audit(1759264079.920:3986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5191 comm="syz.4.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a5f4beec9 code=0x7ffc0000 [ 88.677124][ T29] audit: type=1326 audit(1759264079.920:3987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5191 comm="syz.4.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a5f4beec9 code=0x7ffc0000 [ 88.690001][ T5192] netlink: 72 bytes leftover after parsing attributes in process `syz.4.547'. [ 88.701051][ T29] audit: type=1326 audit(1759264079.920:3988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5191 comm="syz.4.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a5f4beec9 code=0x7ffc0000 [ 88.749549][ T5190] netlink: 72 bytes leftover after parsing attributes in process `syz.2.546'. [ 88.804826][ T5204] loop4: detected capacity change from 0 to 512 [ 88.842126][ T5204] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.858274][ T5204] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.881865][ T5211] netlink: 20 bytes leftover after parsing attributes in process `syz.0.553'. [ 88.915461][ T5204] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.552: corrupted inode contents [ 88.936103][ T5204] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.552: mark_inode_dirty error [ 88.948728][ T5204] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.552: corrupted inode contents [ 88.972674][ T5204] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.552: mark_inode_dirty error [ 89.017420][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.031073][ T5222] loop2: detected capacity change from 0 to 128 [ 89.067872][ T5224] loop1: detected capacity change from 0 to 128 [ 89.116874][ T5232] loop3: detected capacity change from 0 to 128 [ 89.967665][ T5247] netlink: 14 bytes leftover after parsing attributes in process `syz.1.568'. [ 90.259324][ T5261] lo speed is unknown, defaulting to 1000 [ 90.703802][ T5269] loop1: detected capacity change from 0 to 2048 [ 90.738815][ T5269] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.762565][ T5254] lo speed is unknown, defaulting to 1000 [ 90.770428][ T5269] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.988445][ T5284] loop2: detected capacity change from 0 to 128 [ 91.254676][ T5291] Invalid ELF header magic: != ELF [ 91.266813][ T5293] netlink: 20 bytes leftover after parsing attributes in process `syz.1.582'. [ 91.417634][ T5307] netlink: 'syz.1.588': attribute type 29 has an invalid length. [ 91.426596][ T5307] FAULT_INJECTION: forcing a failure. [ 91.426596][ T5307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.439800][ T5307] CPU: 0 UID: 0 PID: 5307 Comm: syz.1.588 Not tainted syzkaller #0 PREEMPT(voluntary) [ 91.439853][ T5307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 91.439869][ T5307] Call Trace: [ 91.439878][ T5307] [ 91.439886][ T5307] __dump_stack+0x1d/0x30 [ 91.439911][ T5307] dump_stack_lvl+0xe8/0x140 [ 91.439936][ T5307] dump_stack+0x15/0x1b [ 91.440021][ T5307] should_fail_ex+0x265/0x280 [ 91.440058][ T5307] should_fail+0xb/0x20 [ 91.440090][ T5307] should_fail_usercopy+0x1a/0x20 [ 91.440129][ T5307] _copy_from_user+0x1c/0xb0 [ 91.440214][ T5307] ___sys_recvmsg+0xaa/0x370 [ 91.440252][ T5307] ? 0xffffffff81000000 [ 91.440269][ T5307] ? __rcu_read_unlock+0x4f/0x70 [ 91.440385][ T5307] __x64_sys_recvmsg+0xd1/0x160 [ 91.440433][ T5307] x64_sys_call+0x2b42/0x2ff0 [ 91.440457][ T5307] do_syscall_64+0xd2/0x200 [ 91.440479][ T5307] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 91.440581][ T5307] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 91.440659][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.440687][ T5307] RIP: 0033:0x7f9a2a57eec9 [ 91.440760][ T5307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.440783][ T5307] RSP: 002b:00007f9a28fe7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 91.440807][ T5307] RAX: ffffffffffffffda RBX: 00007f9a2a7d5fa0 RCX: 00007f9a2a57eec9 [ 91.440822][ T5307] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 91.440837][ T5307] RBP: 00007f9a28fe7090 R08: 0000000000000000 R09: 0000000000000000 [ 91.440857][ T5307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.440872][ T5307] R13: 00007f9a2a7d6038 R14: 00007f9a2a7d5fa0 R15: 00007fff0c9d61b8 [ 91.440897][ T5307] [ 91.770559][ T5320] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 91.777279][ T5320] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 91.784966][ T5320] vhci_hcd vhci_hcd.0: Device attached [ 91.785120][ T5325] loop3: detected capacity change from 0 to 512 [ 91.953898][ T5325] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.592: couldn't read orphan inode 26 (err -116) [ 92.012493][ T5325] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.026217][ T3512] usb 9-1: new low-speed USB device number 4 using vhci_hcd [ 92.026803][ T5325] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.054934][ T5318] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.592: iget: bad i_size value: 360287970189639690 [ 92.077534][ T5318] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.592: iget: bad i_size value: 360287970189639690 [ 92.096412][ T5318] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.592: iget: bad i_size value: 360287970189639690 [ 92.199804][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.218240][ T5353] siw: device registration error -23 [ 92.323940][ T5361] loop1: detected capacity change from 0 to 128 [ 92.450230][ T5371] loop3: detected capacity change from 0 to 128 [ 92.578064][ T5323] vhci_hcd: connection reset by peer [ 92.583536][ T51] vhci_hcd: stop threads [ 92.587962][ T51] vhci_hcd: release socket [ 92.592440][ T51] vhci_hcd: disconnect device [ 92.988048][ T5384] FAULT_INJECTION: forcing a failure. [ 92.988048][ T5384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.001371][ T5384] CPU: 0 UID: 0 PID: 5384 Comm: syz.0.616 Not tainted syzkaller #0 PREEMPT(voluntary) [ 93.001447][ T5384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 93.001464][ T5384] Call Trace: [ 93.001485][ T5384] [ 93.001495][ T5384] __dump_stack+0x1d/0x30 [ 93.001522][ T5384] dump_stack_lvl+0xe8/0x140 [ 93.001548][ T5384] dump_stack+0x15/0x1b [ 93.001569][ T5384] should_fail_ex+0x265/0x280 [ 93.001647][ T5384] should_fail+0xb/0x20 [ 93.001718][ T5384] should_fail_usercopy+0x1a/0x20 [ 93.001759][ T5384] _copy_from_user+0x1c/0xb0 [ 93.001784][ T5384] ___sys_sendmsg+0xc1/0x1d0 [ 93.001908][ T5384] __x64_sys_sendmsg+0xd4/0x160 [ 93.001950][ T5384] x64_sys_call+0x191e/0x2ff0 [ 93.002028][ T5384] do_syscall_64+0xd2/0x200 [ 93.002101][ T5384] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 93.002130][ T5384] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 93.002160][ T5384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.002242][ T5384] RIP: 0033:0x7f1e4759eec9 [ 93.002257][ T5384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.002279][ T5384] RSP: 002b:00007f1e46007038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.002296][ T5384] RAX: ffffffffffffffda RBX: 00007f1e477f5fa0 RCX: 00007f1e4759eec9 [ 93.002307][ T5384] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000006 [ 93.002318][ T5384] RBP: 00007f1e46007090 R08: 0000000000000000 R09: 0000000000000000 [ 93.002373][ T5384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.002383][ T5384] R13: 00007f1e477f6038 R14: 00007f1e477f5fa0 R15: 00007ffe9799a0e8 [ 93.002467][ T5384] [ 93.241768][ T5391] loop2: detected capacity change from 0 to 512 [ 93.343237][ T5391] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.617: couldn't read orphan inode 26 (err -116) [ 93.417223][ T5391] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.435976][ T5404] netlink: 72 bytes leftover after parsing attributes in process `syz.1.624'. [ 93.525836][ T29] kauditd_printk_skb: 669 callbacks suppressed [ 93.525851][ T29] audit: type=1326 audit(1759264084.930:4658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5403 comm="syz.1.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2a57eec9 code=0x7ffc0000 [ 93.566862][ T5391] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.590483][ T5408] FAULT_INJECTION: forcing a failure. [ 93.590483][ T5408] name failslab, interval 1, probability 0, space 0, times 0 [ 93.601535][ T29] audit: type=1326 audit(1759264084.930:4659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5403 comm="syz.1.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2a57eec9 code=0x7ffc0000 [ 93.603702][ T5408] CPU: 0 UID: 0 PID: 5408 Comm: syz.1.625 Not tainted syzkaller #0 PREEMPT(voluntary) [ 93.603784][ T5408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 93.603800][ T5408] Call Trace: [ 93.603809][ T5408] [ 93.603819][ T5408] __dump_stack+0x1d/0x30 [ 93.603849][ T5408] dump_stack_lvl+0xe8/0x140 [ 93.603877][ T5408] dump_stack+0x15/0x1b [ 93.603902][ T5408] should_fail_ex+0x265/0x280 [ 93.603951][ T5408] ? alloc_pipe_info+0xae/0x350 [ 93.604056][ T5408] should_failslab+0x8c/0xb0 [ 93.604145][ T5408] __kmalloc_cache_noprof+0x4c/0x320 [ 93.604202][ T5408] alloc_pipe_info+0xae/0x350 [ 93.604237][ T5408] splice_direct_to_actor+0x592/0x680 [ 93.604268][ T5408] ? kstrtouint_from_user+0x9f/0xf0 [ 93.604311][ T5408] ? __pfx_direct_splice_actor+0x10/0x10 [ 93.604356][ T5408] ? __rcu_read_unlock+0x4f/0x70 [ 93.604388][ T5408] ? get_pid_task+0x96/0xd0 [ 93.604415][ T5408] ? avc_policy_seqno+0x15/0x30 [ 93.604530][ T5408] ? selinux_file_permission+0x1e4/0x320 [ 93.604565][ T5408] do_splice_direct+0xda/0x150 [ 93.604670][ T5408] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 93.604783][ T5408] do_sendfile+0x380/0x650 [ 93.604829][ T5408] __x64_sys_sendfile64+0x105/0x150 [ 93.604912][ T5408] x64_sys_call+0x2bb0/0x2ff0 [ 93.604944][ T5408] do_syscall_64+0xd2/0x200 [ 93.604972][ T5408] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 93.605007][ T5408] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 93.605124][ T5408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.605155][ T5408] RIP: 0033:0x7f9a2a57eec9 [ 93.605178][ T5408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.605247][ T5408] RSP: 002b:00007f9a28fe7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 93.605276][ T5408] RAX: ffffffffffffffda RBX: 00007f9a2a7d5fa0 RCX: 00007f9a2a57eec9 [ 93.605293][ T5408] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 93.605311][ T5408] RBP: 00007f9a28fe7090 R08: 0000000000000000 R09: 0000000000000000 [ 93.605331][ T5408] R10: 000000040000f63c R11: 0000000000000246 R12: 0000000000000001 [ 93.605349][ T5408] R13: 00007f9a2a7d6038 R14: 00007f9a2a7d5fa0 R15: 00007fff0c9d61b8 [ 93.605375][ T5408] [ 93.646764][ T5402] siw: device registration error -23 [ 93.842690][ T5386] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.617: iget: bad i_size value: 360287970189639690 [ 93.869365][ T5417] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 93.878999][ T5391] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.617: iget: bad i_size value: 360287970189639690 [ 93.884123][ T5417] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 93.904266][ T5417] vhci_hcd vhci_hcd.0: Device attached [ 93.916745][ T5420] vhci_hcd: connection closed [ 93.917451][ T51] vhci_hcd: stop threads [ 93.917634][ T5386] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.617: iget: bad i_size value: 360287970189639690 [ 93.922405][ T51] vhci_hcd: release socket [ 93.943955][ T51] vhci_hcd: disconnect device [ 93.963171][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.973299][ T29] audit: type=1326 audit(1759264085.370:4660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5422 comm="syz.0.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4759eec9 code=0x7ffc0000 [ 93.997436][ T29] audit: type=1326 audit(1759264085.370:4661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5422 comm="syz.0.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f1e4759eec9 code=0x7ffc0000 [ 94.021580][ T29] audit: type=1326 audit(1759264085.370:4662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5422 comm="syz.0.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4759eec9 code=0x7ffc0000 [ 94.041286][ T5425] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.631' sets config #1 [ 94.070460][ T5427] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.632' sets config #1 [ 94.100255][ T29] audit: type=1326 audit(1759264085.510:4663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5430 comm="syz.1.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2a57eec9 code=0x7ffc0000 [ 94.124185][ T29] audit: type=1326 audit(1759264085.510:4664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5430 comm="syz.1.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2a57eec9 code=0x7ffc0000 [ 94.149935][ T29] audit: type=1326 audit(1759264085.560:4665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5430 comm="syz.1.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f9a2a57eec9 code=0x7ffc0000 [ 94.173370][ T29] audit: type=1326 audit(1759264085.560:4666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5430 comm="syz.1.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2a57eec9 code=0x7ffc0000 [ 94.197658][ T29] audit: type=1326 audit(1759264085.560:4667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5430 comm="syz.1.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2a57eec9 code=0x7ffc0000 [ 94.224030][ T5433] loop1: detected capacity change from 0 to 128 [ 94.231304][ T5432] loop0: detected capacity change from 0 to 128 [ 94.259824][ T5435] netlink: 72 bytes leftover after parsing attributes in process `syz.2.630'. [ 94.344989][ T5441] loop3: detected capacity change from 0 to 512 [ 94.353830][ T5441] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 94.372749][ T5443] netlink: 'syz.2.635': attribute type 13 has an invalid length. [ 94.381810][ T3314] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz-executor: path /112/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 94.491760][ T5450] netlink: 20 bytes leftover after parsing attributes in process `syz.4.641'. [ 94.650087][ T5454] lo speed is unknown, defaulting to 1000 [ 94.667674][ T5466] binfmt_misc: register: failed to install interpreter file ./file2 [ 94.717254][ T5454] chnl_net:caif_netlink_parms(): no params data found [ 94.758371][ T5454] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.765803][ T5454] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.773367][ T5454] bridge_slave_0: entered allmulticast mode [ 94.780081][ T5454] bridge_slave_0: entered promiscuous mode [ 94.787372][ T5454] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.794454][ T5454] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.801975][ T5454] bridge_slave_1: entered allmulticast mode [ 94.809327][ T5454] bridge_slave_1: entered promiscuous mode [ 94.829741][ T5454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.841236][ T5454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.854012][ T5468] siw: device registration error -23 [ 94.867315][ T5454] team0: Port device team_slave_0 added [ 94.874223][ T5454] team0: Port device team_slave_1 added [ 94.892647][ T5454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.899723][ T5454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.926055][ T5454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.938439][ T5454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.945431][ T5454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.971517][ T5454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.999381][ T5454] hsr_slave_0: entered promiscuous mode [ 95.005526][ T5454] hsr_slave_1: entered promiscuous mode [ 95.011662][ T5454] debugfs: 'hsr0' already exists in 'hsr' [ 95.017421][ T5454] Cannot create hsr debugfs directory [ 95.083629][ T5480] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 95.090430][ T5480] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 95.098049][ T5480] vhci_hcd vhci_hcd.0: Device attached [ 95.131857][ T5454] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 95.141246][ T5454] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 95.150245][ T5454] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 95.160134][ T5454] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 95.187022][ T5494] vcan0 speed is unknown, defaulting to 1000 [ 95.196299][ T5454] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.203428][ T5454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.203473][ T5498] netlink: 72 bytes leftover after parsing attributes in process `syz.1.652'. [ 95.210864][ T5454] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.210898][ T5454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.235545][ T5454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.253025][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.261323][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.271524][ T5494] vcan0 speed is unknown, defaulting to 1000 [ 95.273368][ T5454] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.287698][ T5494] vcan0 speed is unknown, defaulting to 1000 [ 95.295723][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.302936][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.314231][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.321441][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.355227][ T5454] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.366824][ T10] usb 1-1: new low-speed USB device number 3 using vhci_hcd [ 95.368474][ T5483] vhci_hcd: connection closed [ 95.376011][ T5484] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 95.401162][ T5494] infiniband syz1: set active [ 95.406017][ T5494] infiniband syz1: added vcan0 [ 95.411728][ T3395] vcan0 speed is unknown, defaulting to 1000 [ 95.423194][ T5494] RDS/IB: syz1: added [ 95.427380][ T5494] smc: adding ib device syz1 with port count 1 [ 95.452659][ T5494] smc: ib device syz1 port 1 has pnetid [ 95.452985][ T5454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.469516][ T3395] vcan0 speed is unknown, defaulting to 1000 [ 95.478318][ T31] vhci_hcd: stop threads [ 95.482820][ T31] vhci_hcd: release socket [ 95.487526][ T31] vhci_hcd: disconnect device [ 95.513961][ T5494] vcan0 speed is unknown, defaulting to 1000 [ 95.575538][ T5514] loop1: detected capacity change from 0 to 2048 [ 95.613996][ T5454] veth0_vlan: entered promiscuous mode [ 95.622897][ T5454] veth1_vlan: entered promiscuous mode [ 95.635519][ T5528] binfmt_misc: register: failed to install interpreter file ./file2 [ 95.650337][ T5494] vcan0 speed is unknown, defaulting to 1000 [ 95.651048][ T5454] veth0_macvtap: entered promiscuous mode [ 95.662810][ T5514] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.682671][ T5514] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.693404][ T5454] veth1_macvtap: entered promiscuous mode [ 95.715132][ T5454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.725968][ T5494] vcan0 speed is unknown, defaulting to 1000 [ 95.733581][ T5454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.749150][ T31] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.778717][ T31] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.798101][ T31] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.813343][ T31] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.826222][ T5534] loop4: detected capacity change from 0 to 512 [ 95.832875][ T5534] ext3: Bad value for 'max_batch_time' [ 95.855110][ T5494] vcan0 speed is unknown, defaulting to 1000 [ 95.909301][ T5494] vcan0 speed is unknown, defaulting to 1000 [ 95.928586][ T5539] loop0: detected capacity change from 0 to 128 [ 95.971125][ T5494] vcan0 speed is unknown, defaulting to 1000 [ 96.031619][ T5543] netlink: 20 bytes leftover after parsing attributes in process `syz.2.659'. [ 96.192839][ T5548] netlink: 'syz.2.661': attribute type 13 has an invalid length. [ 96.231509][ T3402] vcan0 speed is unknown, defaulting to 1000 [ 96.328606][ T5550] netlink: 72 bytes leftover after parsing attributes in process `syz.1.662'. [ 96.422890][ T5553] netlink: 72 bytes leftover after parsing attributes in process `syz.1.663'. [ 96.556995][ T5557] 9pnet_virtio: no channels available for device [ 96.571116][ T5557] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.608221][ T5557] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.668305][ T5557] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.718465][ T5557] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.778307][ T3427] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.791175][ T37] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.803660][ T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.817477][ T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.036332][ T3512] usb 9-1: enqueue for inactive port 0 [ 97.046450][ T3512] usb 9-1: enqueue for inactive port 0 [ 97.059741][ T5570] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 97.066525][ T5570] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 97.074277][ T5570] vhci_hcd vhci_hcd.0: Device attached [ 97.152834][ T5575] lo speed is unknown, defaulting to 1000 [ 97.159943][ T5575] vcan0 speed is unknown, defaulting to 1000 [ 97.381868][ T5573] vhci_hcd: connection closed [ 97.406462][ T37] vhci_hcd: stop threads [ 97.416248][ T37] vhci_hcd: release socket [ 97.420885][ T37] vhci_hcd: disconnect device [ 97.535154][ T3512] vhci_hcd: vhci_device speed not set [ 97.706831][ T5584] loop1: detected capacity change from 0 to 2048 [ 97.811976][ T5596] loop0: detected capacity change from 0 to 128 [ 97.820691][ T5596] vfat: Unknown parameter '017777777777777777777770000000000000000000000018446744073709551615{i:A- yWn8v4blb_;5 93dAU]^LtDxJ' [ 97.865072][ T5589] loop0: detected capacity change from 0 to 1024 [ 97.872460][ T5589] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.879636][ T5589] EXT4-fs: Ignoring removed nobh option [ 97.886586][ T5603] loop4: detected capacity change from 0 to 512 [ 97.977858][ T5603] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.674: couldn't read orphan inode 26 (err -116) [ 98.086989][ T5603] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.203700][ T5599] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.674: iget: bad i_size value: 360287970189639690 [ 98.222430][ T5599] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.674: iget: bad i_size value: 360287970189639690 [ 98.224807][ T5612] loop2: detected capacity change from 0 to 128 [ 98.259198][ T5599] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.674: iget: bad i_size value: 360287970189639690 [ 98.372834][ T5596] ================================================================== [ 98.380976][ T5596] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 98.389233][ T5596] [ 98.391580][ T5596] write to 0xffff888119c620f4 of 4 bytes by task 5589 on cpu 0: [ 98.399331][ T5596] xas_set_mark+0x12b/0x140 [ 98.403881][ T5596] tag_pages_for_writeback+0xc2/0x290 [ 98.409399][ T5596] ext4_do_writepages+0x6b2/0x2750 [ 98.414654][ T5596] ext4_writepages+0x176/0x300 [ 98.419449][ T5596] do_writepages+0x1c3/0x310 [ 98.424095][ T5596] filemap_write_and_wait_range+0x144/0x340 [ 98.430237][ T5596] filemap_invalidate_pages+0xa4/0x1a0 [ 98.436169][ T5596] kiocb_invalidate_pages+0x6e/0x80 [ 98.441493][ T5596] __iomap_dio_rw+0x5d1/0x1240 [ 98.446388][ T5596] iomap_dio_rw+0x40/0x90 [ 98.450822][ T5596] ext4_file_write_iter+0xad9/0xf00 [ 98.456273][ T5596] iter_file_splice_write+0x663/0xa60 [ 98.461686][ T5596] direct_splice_actor+0x153/0x2a0 [ 98.466845][ T5596] splice_direct_to_actor+0x30f/0x680 [ 98.472629][ T5596] do_splice_direct+0xda/0x150 [ 98.477516][ T5596] do_sendfile+0x380/0x650 [ 98.482122][ T5596] __x64_sys_sendfile64+0x105/0x150 [ 98.487550][ T5596] x64_sys_call+0x2bb0/0x2ff0 [ 98.492368][ T5596] do_syscall_64+0xd2/0x200 [ 98.497408][ T5596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.501130][ T5589] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.673: Allocating blocks 1-17 which overlap fs metadata [ 98.503345][ T5596] [ 98.503355][ T5596] read to 0xffff888119c620f4 of 4 bytes by task 5596 on cpu 1: [ 98.503376][ T5596] file_write_and_wait_range+0x10e/0x2c0 [ 98.533259][ T5596] generic_buffers_fsync_noflush+0x45/0x120 [ 98.539302][ T5596] ext4_sync_file+0x1ab/0x690 [ 98.544093][ T5596] vfs_fsync_range+0x10d/0x130 [ 98.548988][ T5596] ext4_buffered_write_iter+0x34f/0x3c0 [ 98.554764][ T5596] ext4_file_write_iter+0xdbf/0xf00 [ 98.560293][ T5596] iter_file_splice_write+0x663/0xa60 [ 98.565929][ T5596] direct_splice_actor+0x153/0x2a0 [ 98.571242][ T5596] splice_direct_to_actor+0x30f/0x680 [ 98.577091][ T5596] do_splice_direct+0xda/0x150 [ 98.582285][ T5596] do_sendfile+0x380/0x650 [ 98.586732][ T5596] __x64_sys_sendfile64+0x105/0x150 [ 98.592086][ T5596] x64_sys_call+0x2bb0/0x2ff0 [ 98.597174][ T5596] do_syscall_64+0xd2/0x200 [ 98.602006][ T5596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.608103][ T5596] [ 98.610460][ T5596] value changed: 0x02000021 -> 0x0e000021 [ 98.616285][ T5596] [ 98.618628][ T5596] Reported by Kernel Concurrency Sanitizer on: [ 98.624793][ T5596] CPU: 1 UID: 0 PID: 5596 Comm: syz.0.673 Not tainted syzkaller #0 PREEMPT(voluntary) [ 98.634793][ T5596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 98.645050][ T5596] ================================================================== [ 98.677015][ T5596] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.673: Allocating blocks 1-17 which overlap fs metadata [ 98.700855][ T5596] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.673: Allocating blocks 1-17 which overlap fs metadata [ 99.033494][ T29] kauditd_printk_skb: 454 callbacks suppressed [ 99.033510][ T29] audit: type=1326 audit(1759264090.440:5122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5611 comm="syz.2.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe25994eec9 code=0x7ffc0000 [ 99.063370][ T29] audit: type=1326 audit(1759264090.440:5123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5611 comm="syz.2.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe25994eec9 code=0x7ffc0000 [ 100.396421][ T10] usb 1-1: enqueue for inactive port 0 [ 100.402056][ T10] usb 1-1: enqueue for inactive port 0 [ 100.477146][ T10] vhci_hcd: vhci_device speed not set