last executing test programs: 1.286274535s ago: executing program 4 (id=739): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x800, 0x0, 0x2, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)) socket$inet(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x331e5c6805043cda) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x1, 0x0, 0x1, 0xa, 0x21005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_NAME(0xf, &(0x7f0000000880)='+}[@\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6, 0x0, 0xfffffffff7ffffe9}, 0x18) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x4}, 0x4) close(r7) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r8, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) 1.047041754s ago: executing program 0 (id=743): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[], 0x15) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) writev(r6, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1c, 0x18, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffe7}, @alu={0x4, 0x1, 0xa76eea3da39b1a70, 0x5, 0x0, 0x30, 0x10}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', r5, @fallback=0x7, r6, 0x8, &(0x7f0000000400)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x3, 0x4, 0x1000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000500)=[{0x1, 0x1, 0x8, 0x4}, {0x3, 0x5, 0x9, 0x9}, {0x1, 0x2, 0x4, 0xb}, {0x1, 0x2, 0x7, 0xa}], 0x10, 0xd0}, 0x94) request_key(0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='netlink_extack\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, 0x0, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=@ipv6_newnexthop={0x30, 0x68, 0x5fb9a818fb7378eb, 0x70bd28, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_GATEWAY={0x14, 0x6, @ip4=@loopback}]}, 0x30}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010328bd7000fedbdf251c"], 0x20}}, 0x10) lchown(&(0x7f0000000700)='./file0\x00', 0x0, 0x0) 1.037232545s ago: executing program 1 (id=744): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000480)={0xa, 0x4e24, 0x8000, @local, 0x2}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000640)="c9c59e6712f9caa1ef0232f298fa18228fbad10390c1c8a75b69ff281d3009fef67b45548d5a35554a053ebff3ec3e7afa1b05efd2d0ca6b21f9f5234a5cced22eaa1fd9ee05c2c4177fbf5a9d2edf", 0x4f}, {&(0x7f0000000900)="2bc6555380752e35ae5f6a3beb33178a8d4319027266798da626c66401848523493688f34b3c651710dc8abc7c6bf1c97c5aec68adc95afa598618ecd834732f33076278215a00acdfeec6a5dae50305cbb5e2db9754892dbdf330f158318318dbfaa0b6735bd1336dcce199f22cdba739b37abb07810ea22c21e397af4cf956d7bae23f6323603a54a529dab4638e1212faa16a2a594d326f9111ab8f881fd3aa55a8bd917bc34102ae678345868df9f957901305f0cd2bfd234756ad409a59e65fa5aab399f2e7c3529fa9cdfcdd635b2eb9179fd81cbb8276fa8cfe93", 0xde}, {&(0x7f0000000a00)="b31281dbef1a2e5cda5fcdc816db952461b388042ac341ae1f0802b7730d8305dce70273b925c9aed4ce7e3c0497af8473f2ec835b786f5a1879e5ebff482feb11faa182d6ab56da92ae21e82f1105f182bf0c6f64f2c56fd0d395adfa5d4a136ba9633c97a14b0dc95081a9e335ed8998d228b4d731a6fb3512ffa9873583b8c52cecfa2106f6cb9b6ace19fb9dfe90821d78ee9fb0484e7290f5d05b00f3984403096479e9c02af9ccb53abaf19ce9cace7cc863ac956f746fac35676b7906f86390ef4e", 0xc5}], 0x3, &(0x7f0000000380)=ANY=[@ANYRES16=r1, @ANYRESHEX=r0, @ANYRES16=0x0], 0x58}, 0x20000080) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0d00000006000000040000000100000000000000", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000019b33a56a77cc579a940b7b52e3d6254b8009b0aaaace79ad66dac755e6eea642ce156713f591417b69b8f17a5ae3813ebc34871577eaeead3fa"], 0x50) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r5}, 0x9) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000001000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000780090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) 991.110159ms ago: executing program 0 (id=747): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x2}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r2, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, r1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r3, 0x0) read(r3, &(0x7f0000000000)=""/114, 0x72) r4 = inotify_init1(0x800) r5 = accept4$llc(r2, 0x0, &(0x7f0000000100), 0x80000) getsockname$packet(r1, &(0x7f0000000cc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000c80)={0x0, 0x2000}, 0x4) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x40, 0x0, 0x0, 0x100}, {0x6, 0x9, 0x0, 0x10001}]}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400"], 0xfdef) sendmsg$sock(r5, &(0x7f0000000c40)={&(0x7f0000000600)=@ll={0x11, 0xfa, r6, 0x1, 0x10, 0x6, @random="dd01c253fb25"}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000680)="762834301da64d384aae99e75709db0bb32428ac24460e22c9e468f81a1a291e2e9ad24849fe26b69435a05896c22c55b1ae541b4c180c7d1aac43328a76d0cf9b609b65af61c423fe1e430c9ea6ebf95f4965a610e0ddd6ced06cfbb8230fd041ecd6b6184a60944dcb963baf0436d305d0eac5c8bd2241baca7145a628579385fdf5cadaa580e7275fee045e2b2135a960d5cf05adec35198a3b60881e8a9893c76facbf75094fb9e83cab9136008a3b27da702700560b1440b00181f3d20e81f0fd3adc96585644b8bb9a7ca988f231d7b39613fbaa92581c5bfa88686b", 0xdf}, {&(0x7f0000000780)="6649bd9ef58f7ecd89cbd8bc6729a252b669ad98ce2ef64576f1f1191a6ddab2f615e677ea5ca19e4e866d23847215522bd5796d65f59fa8fad09abf6f4ef40e23133d34073280fe90d89cd0e7695ceb565a3775461713297b785aca6944a83af2ba8194342a6f06ca1ff4beff4cec8cf202f8ef7ade1a7a8f6f0a09275b12c669122afd18b68669fed5781de32540b9cbd0d5df67bafd202fe6b6df346d9077393f7bf253511833741d9fd12ad345ff21461016306d122e44752456e7896fc6060dfad49f4e4989f283a46109cc2e969d93c918067b4afbb60717da0557a1", 0xdf}, {&(0x7f0000000880)="d1f0e00c25eadadd17fc010f4187da8251af7957d91333f01631908b6cff83cd8a8db40614e65be19608712bf87f808969a148b93fdf2c0d73cb2e9aeebddd8545935a352320aa98d8384a37d1322a73eff7f915966a2dcd938ee03e5823c9513e0b819ddade07dcaf95ac7c5edf8725931afdd1923fdc0daebb5d2056bb9b89373836c602d4e6b6b53a6a091878c2cfbc44e73050c78c91f6af9d757420bd10a84527c48cb361e778e614db803b738d593920e29bef6118f0a23b12bf120114cefb95fbf09e78c5a8e334e61be492855887706efd5b66fe9370a1c633e064d0a8d43a2e8c563ae21b105047d3d56c16eed8aa6e1eb684aba6b331", 0xfb}, {&(0x7f0000000980)="4db5de29ac", 0x5}, {&(0x7f00000009c0)="36650b4ead0a278b6d48b8f3319bd6963081056e8f870c3751b428d296a1b6c817921b38673aeb42ce897b77c2ce914f47e30020a104f2682b3ffe73f001a27c8abe44735669c2c92e04859c9f6f76d3222b8cab46cb28ce6d0609484e3ece5204aa771c8011150bb9dd4de89ed9ba35d88f451a76445cc42944c389a97c9e1c0ab5ca15e5ff720d25492205672d0c78c6d8d0cfa845bc0e8da847a7a089ce9e4efab57b22b3c8a0f6367e0d3bc76d8684fca6e83409e9a44eb0c2616ba0e12bc7fee8d80b97fd166d388a1513a8246c16d3901127dd200d9f131a8db2df74c87b", 0xe1}], 0x5, &(0x7f0000000ac0)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0x30}, 0x4041) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x2a67, &(0x7f0000006680)) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r10, 0x10001, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000276e48333a4f53f11e537ea8f5630000000000000000000000954d210000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r11, 0x0, 0x0}, 0x10) inotify_add_watch(r4, &(0x7f00000000c0)='./control/file0\x00', 0x20000579) memfd_create(&(0x7f00000002c0)='-&:\n-\xb2];\x0f`\xbf\xe6\xa96&\xb8=\x94Z}\xfaW~\xae\x87\x88\xea\xde\xd9=-s\xf0\xd6\xd1=\x1d\x00l\xd5\xc3DZ\xbc0\x8e\xac\xf2\xf2#\xebI\xab\xf6\xab}\xa5\x18 \x8a\x8aG:\xacD-\x99JD/~\xd6\xb5m\xac\x8d\x1d\x1c\xe9\x80\xe5<\xfcP)E\xc1\x9f\xeb\xc9\x158Mq\x01\xe1\xf6-\xc3\xaa\x9a\x9be\xcd\xf2\xde\xccx\x1f\x0fne\xe8C\xe4Y\xc9\vR2MY\x8e\x9d\x97 \x00\x00\x00\x00\xe8W\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe5>6Wf\xdb\xddb\xd2\xa2*ZcA\x83\xb1:\x94\xc6\xfa\x15*\xf0\x02\x00\x00\x00\xf7[\x9ds\xa9\xbf\xd4\xa2+R\xb7Y\x1e\xb7rOp\x1b\xec@04\x14\xcc\xda\x8dM\xe1\x056,v\x88\xa6\x13\xa7\xcf\xffI\x99\xbcv\xb0\xc3\x8a\x16b\xa6\xbcm\x99\n\x84\xd3=m\xb5:8\x98\x19\x06D\xa4\x9d>/j\xa5Z\x12\x05\x9f\x89\xf7\x11\xb6\xe0\xb8\x1bOSd~/p\x11\xa0\x858\x03\xcaHrz\x01\xe3bb\xa2\x1e\xa1\xa9Y\x99\xecQ1UpgC\xfdx\x983}~\xa4\x9ca\xc6\x12=8\x80e\xb5o}\xe0\xae\n\x8cK`\xea~t\xba\xb8\x97K\x9f?\xd8\xb5\x7f\xe8M~\x19\xfb\xaflX\bA\xbd\xb7\bU\a%\x0e\xc8\xeb\xde\xda\xdf\xe3\x97\x0e_\xfe\xdb`\xac\x02\xfe\xc8_\x00\x8b )\x9d\x0f\x9fD\x1fw)\xf9\xb9\xbd,\x8c\xee\xf8r.\xa9\x95fz\xadLFz3;\x8f\xde\xbb\xb9\xa8\x8a\x06\x1b\x95\xbf\x18\xd9\xe6\xb2\x8a\xb2G\x9c\xf0h\x0f\xfa\xd1\xb6\b\x10[\x87\xe3x\xc2&d\xad\xef\xfd\x9f\xaa\xa1|\x1c*\x18\x103=\x03M\xe5n\x8c\xe1\xa5\xf6\x80&\xc3\xc4B\xe5\xd8\a\xf9\x91\n\x15\x1a\xc9\n\xfce\xf1-5\xc5\x8b0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb76\xdb\x02\xa0HO\xbe\xa8g^K7\xb3gfr\xe8Z\xff\xeb\x91\x10\xc0$]4\xabo\xa3\xb6\xcc?=\xbd\xbb\x88\xee,H\xf1\\\x94E\xd7\x023', 0x2) 953.266112ms ago: executing program 1 (id=750): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000040), 0x10) sendmsg(r3, &(0x7f0000000380)={&(0x7f0000000440)=@ethernet={0x1, @remote}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="751edb18dbf46e8f09d97e5bbd402d11fea33f21e2", 0x15}, {&(0x7f00000001c0)="da", 0x1}, {&(0x7f0000000240)="6d5f67af894fc09d550067b675507cd5556770418b1b34525a6becaa1a13b103508a04d5cd215b761cd584cddde2539d4d275745d349805bf16f7bd8010d7104086c0e743d76d4de754ad1714e562adea566098cbd4bb4b351de0ed58f1361f6920b4598be11b9f546e6ba23ba5075072ef9d7362c255f7797866066f2697c324aa5dc055389df4d7725ef8f4e391c9bcbc80b7a9397f3f484ddc09076e854b1ee0569277a48abb91df8c3d57555dd4ed07a395e7c78444c971401bb04a219d661d01158a497c68330c7a8878ad272b2fd9915717c58efd568017a16947f3145cc2d", 0xe2}], 0x3}, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newtfilter={0x30, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x10000840) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) 876.855378ms ago: executing program 1 (id=753): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x4000000}, 0x1c) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000000008010100000000000000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 772.667887ms ago: executing program 4 (id=755): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000) socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x15, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYBLOB="0000004000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x37, 0x9d, 0x62}, 0x2c) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000010c0)={0x0, 0x6}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x3, 0x675d}, 0x8) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x19, &(0x7f0000000240)=@framed={{}, [@generic={0x0, 0x2, 0x3, 0x5, 0x2}, @ldst={0x1, 0x0, 0x2, 0x2, 0xa, 0x30}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @tail_call, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0xffffffffffffffc3, 0x10, &(0x7f00000004c0)={0x3}, 0x10, 0x0, 0x0, 0x23}, 0x94) 748.073919ms ago: executing program 0 (id=756): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000) socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa1000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x15, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x37, 0x9d, 0x62}, 0x2c) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000010c0)={0x0, 0x6}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x3, 0x675d}, 0x8) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x19, &(0x7f0000000240)=@framed={{}, [@generic={0x0, 0x2, 0x3, 0x5, 0x2}, @ldst={0x1, 0x0, 0x2, 0x2, 0xa, 0x30}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @tail_call, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0xffffffffffffffc3, 0x10, &(0x7f00000004c0)={0x3}, 0x10, 0x0, 0x0, 0x23}, 0x94) 743.780869ms ago: executing program 4 (id=757): name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@ocfs2={0xc}, 0x0, 0x1200) 720.284831ms ago: executing program 0 (id=758): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r7], 0x54}}, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104, 0x780}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0xa0}}}}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000c80)={[{@discard}, {@bh}, {@noblock_validity}]}, 0x2c, 0x52c, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00'}, 0x18) close(0xffffffffffffffff) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000002cc0)={{}, {0x1, 0x7}, [], {}, [], {0x10, 0x6}}, 0x24, 0x3) 694.385013ms ago: executing program 4 (id=759): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 630.832948ms ago: executing program 3 (id=762): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) alarm(0x10001) 630.065098ms ago: executing program 1 (id=763): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000040), 0x10) sendmsg(r3, &(0x7f0000000380)={&(0x7f0000000440)=@ethernet={0x1, @remote}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="751edb18dbf46e8f09d97e5bbd402d11fea33f21e2", 0x15}, {&(0x7f00000001c0)="da", 0x1}, {&(0x7f0000000240)="6d5f67af894fc09d550067b675507cd5556770418b1b34525a6becaa1a13b103508a04d5cd215b761cd584cddde2539d4d275745d349805bf16f7bd8010d7104086c0e743d76d4de754ad1714e562adea566098cbd4bb4b351de0ed58f1361f6920b4598be11b9f546e6ba23ba5075072ef9d7362c255f7797866066f2697c324aa5dc055389df4d7725ef8f4e391c9bcbc80b7a9397f3f484ddc09076e854b1ee0569277a48abb91df8c3d57555dd4ed07a395e7c78444c971401bb04a219d661d01158a497c68330c7a8878ad272b2fd9915717c58efd568017a16947f3145cc2d", 0xe2}], 0x3}, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newtfilter={0x30, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x10000840) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) 619.270079ms ago: executing program 3 (id=764): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 596.413951ms ago: executing program 4 (id=766): syz_emit_ethernet(0x6a, &(0x7f0000000440)={@local, @remote, @val={@void, {0x8100, 0x2, 0x1, 0x3}}, {@ipv6={0x86dd, @icmpv6={0xe, 0x6, "6c3d9b", 0x30, 0x3a, 0x1, @remote, @private2, {[@srh={0x87, 0x0, 0x4, 0x0, 0x80, 0x50, 0x6}, @hopopts={0x73}, @routing={0x0, 0x0, 0x2, 0x2}, @fragment={0x2f, 0x0, 0x6, 0x1, 0x0, 0x9, 0x68}], @ni={0x8c, 0x0, 0x0, 0x1, 0x5, 0x6}}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="000000000048b200b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300001e000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_dev$loop(&(0x7f0000000000), 0xd, 0x1) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000040)) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 495.799639ms ago: executing program 3 (id=767): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r4, 0x1, 0x70bd2c, 0x25dbdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x54) 490.63478ms ago: executing program 4 (id=768): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x4008, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r4, &(0x7f0000000340)={{0x107, 0x3, 0x7, 0x357, 0x85, 0x8, 0x1e8, 0x5}, "78d5c09c9efd4734ee08d1e0172085bead3fc1b5dff8f5d121abadb9f696aeef69665dea3eff792e936277c462e4fb54b5797cb611ca398376e0e6e4950e6ba320be32bb0da1043cec3aac3ad7dc5224626c80de786e7a665b474d379b9be0f1c66410af9ef48ae2edf5cc5cbc7ca41a5baad7ea3a280cd593bc1eaaddbd616b5d3728aa1fc143cdc93ba16993f720d13933e2abbc8a08ed"}, 0xb8) waitid(0x0, r3, 0x0, 0x4, 0x0) r5 = syz_pidfd_open(r3, 0x0) pidfd_send_signal(r5, 0x2, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="25390000290003"], 0x33fe0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x80002, 0x187) write(r8, &(0x7f0000004200)='t', 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') sendfile(r8, r7, 0x0, 0x3ffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) sendfile(r8, r7, 0x0, 0x7ffff000) 450.487323ms ago: executing program 1 (id=769): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYRESHEX=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x3) r4 = socket(0x10, 0x3, 0x6) r5 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) 449.777553ms ago: executing program 3 (id=770): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x30, 0x3, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) 403.481047ms ago: executing program 0 (id=771): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3001046, &(0x7f0000000a40), 0x1, 0x565, &(0x7f0000001600)="$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") r0 = socket(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe64, 0x1ff, @empty, 0x2}, 0x1c) r3 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe64, 0x3, @empty, 0x2}, 0x1c) connect$unix(r3, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 402.773887ms ago: executing program 2 (id=772): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x10, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xff, 0x1, 0x8001}, {0x8, 0x6a6, 0xffff, 0x5, 0x2, 0x2}}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}, 'S'}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 402.072877ms ago: executing program 1 (id=773): open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="18", 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x4006, &(0x7f0000000380)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@quota}, {@resuid}, {@lazytime}]}, 0x1, 0x443, &(0x7f0000001040)="$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") r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f00000004c0)=ANY=[@ANYRES64, @ANYRESHEX], &(0x7f0000000440)='GPL\x00', 0xd6c3, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200, 0x400000]}) 400.641277ms ago: executing program 3 (id=774): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x4000000}, 0x1c) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000000008010100000000000000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 358.465631ms ago: executing program 0 (id=775): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f0000000500)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000f40)=ANY=[@ANYBLOB], 0x210) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r4, &(0x7f0000000580)=[{&(0x7f0000000040)=""/103, 0x67}], 0x1000000000000212, 0xc002a0, 0xcbea) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd2, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x5, 0x4, 0x2, 0x7fffffff, 0x3f8}, 0x0, 0x0) 308.834545ms ago: executing program 3 (id=776): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x4008, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r4, &(0x7f0000000340)={{0x107, 0x3, 0x7, 0x357, 0x85, 0x8, 0x1e8, 0x5}, "78d5c09c9efd4734ee08d1e0172085bead3fc1b5dff8f5d121abadb9f696aeef69665dea3eff792e936277c462e4fb54b5797cb611ca398376e0e6e4950e6ba320be32bb0da1043cec3aac3ad7dc5224626c80de786e7a665b474d379b9be0f1c66410af9ef48ae2edf5cc5cbc7ca41a5baad7ea3a280cd593bc1eaaddbd616b5d3728aa1fc143cdc93ba16993f720d13933e2abbc8a08ed"}, 0xb8) waitid(0x0, r3, 0x0, 0x4, 0x0) r5 = syz_pidfd_open(r3, 0x0) pidfd_send_signal(r5, 0x2, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="25390000290003"], 0x33fe0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x80002, 0x187) write(r8, &(0x7f0000004200)='t', 0x1) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') preadv(r9, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0xfffffffffffffe15}], 0x1, 0x3fe, 0x6) sendfile(r8, r7, 0x0, 0x3ffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) sendfile(r8, r7, 0x0, 0x7ffff000) 292.197906ms ago: executing program 2 (id=777): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) unshare(0x2c020400) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) unshare(0x10020000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x803, 0x0) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c000000140001000000000000c300d92d"], 0x5c}}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x39) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) r1 = socket(0x2, 0x80805, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmmsg$inet(r1, &(0x7f0000000900)=[{{&(0x7f0000000080)={0x2, 0x4, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000ac0)="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", 0x2a1}], 0x1}}], 0x2, 0x0) 174.533506ms ago: executing program 2 (id=778): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 96.461232ms ago: executing program 2 (id=779): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3e3, &(0x7f00000004c0)="$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") r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xeb, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1, 0x0, 0x0, 0x20}, 0x0) 45.514386ms ago: executing program 2 (id=780): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15460100ef0000001c0012800b0001006d616373656300000c00028005000300080000000800050022dd8d92957725ddcfde5ffb8d9a4e42e66b4e3e28e0ec9dd4a1ee59edd858b6ff7146431446f28008d7b2f813e661a9df7e378594000ca362b442854a150315601c55100c357080951d473ebb346530af5ac6cf6690718acdbe1b6891ce911367b127ed97edc3bc63af7e93521f7be6ad0853dc90116ea59b91ec1c14d171ff629e14061b6a994e8c63187fb760ffb32cd0314c2613930244", @ANYRES32=r1, @ANYBLOB], 0x44}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', r1, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) socket$unix(0x1, 0x5, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000000040)="780b862f") bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000000010000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r6, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r10 = inotify_init1(0x800) inotify_add_watch(r10, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') close_range(r9, 0xffffffffffffffff, 0x400000000000000) 0s ago: executing program 2 (id=781): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000040), 0x10) sendmsg(r3, &(0x7f0000000380)={&(0x7f0000000440)=@ethernet={0x1, @remote}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="751edb18dbf46e8f09d97e5bbd402d11fea33f21e2", 0x15}, {&(0x7f00000001c0)="da", 0x1}, {&(0x7f0000000240)="6d5f67af894fc09d550067b675507cd5556770418b1b34525a6becaa1a13b103508a04d5cd215b761cd584cddde2539d4d275745d349805bf16f7bd8010d7104086c0e743d76d4de754ad1714e562adea566098cbd4bb4b351de0ed58f1361f6920b4598be11b9f546e6ba23ba5075072ef9d7362c255f7797866066f2697c324aa5dc055389df4d7725ef8f4e391c9bcbc80b7a9397f3f484ddc09076e854b1ee0569277a48abb91df8c3d57555dd4ed07a395e7c78444c971401bb04a219d661d01158a497c68330c7a8878ad272b2fd9915717c58efd568017a16947f3145cc2d", 0xe2}], 0x3}, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newtfilter={0x30, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x10000840) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) kernel console output (not intermixed with test programs): own parameter 'appraise' [ 39.947979][ T4075] loop3: detected capacity change from 0 to 1024 [ 39.949785][ T4073] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 40.031266][ T4078] netlink: 'syz.0.177': attribute type 1 has an invalid length. [ 40.197005][ T4091] loop3: detected capacity change from 0 to 128 [ 41.091660][ T29] kauditd_printk_skb: 530 callbacks suppressed [ 41.091678][ T29] audit: type=1400 audit(1755875537.484:2138): avc: denied { setopt } for pid=4090 comm=77DEA305FF07 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 41.156779][ T29] audit: type=1326 audit(1755875538.384:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4097 comm="syz.4.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbb99975ba7 code=0x7ffc0000 [ 41.180480][ T29] audit: type=1326 audit(1755875538.384:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4097 comm="syz.4.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb9991ade9 code=0x7ffc0000 [ 41.204220][ T29] audit: type=1326 audit(1755875538.384:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4097 comm="syz.4.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbb99975ba7 code=0x7ffc0000 [ 41.228193][ T29] audit: type=1326 audit(1755875538.384:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4097 comm="syz.4.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb9991ade9 code=0x7ffc0000 [ 41.251643][ T29] audit: type=1326 audit(1755875538.384:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4097 comm="syz.4.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbb99975ba7 code=0x7ffc0000 [ 41.275338][ T29] audit: type=1326 audit(1755875538.384:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4097 comm="syz.4.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb9991ade9 code=0x7ffc0000 [ 41.298762][ T29] audit: type=1326 audit(1755875538.384:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4097 comm="syz.4.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbb99975ba7 code=0x7ffc0000 [ 41.322357][ T29] audit: type=1326 audit(1755875538.384:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4097 comm="syz.4.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb9991ade9 code=0x7ffc0000 [ 41.346136][ T29] audit: type=1326 audit(1755875538.384:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4097 comm="syz.4.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbb99975ba7 code=0x7ffc0000 [ 41.444278][ T4123] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 41.451273][ T4123] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 41.459228][ T4123] vhci_hcd vhci_hcd.0: Device attached [ 41.510630][ T4123] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(9) [ 41.517318][ T4123] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 41.525270][ T4123] vhci_hcd vhci_hcd.0: Device attached [ 41.546714][ T4130] vhci_hcd: connection closed [ 41.547422][ T4124] vhci_hcd: connection closed [ 41.554517][ T339] vhci_hcd: stop threads [ 41.563437][ T339] vhci_hcd: release socket [ 41.568083][ T339] vhci_hcd: disconnect device [ 41.574266][ T339] vhci_hcd: stop threads [ 41.578666][ T339] vhci_hcd: release socket [ 41.583111][ T339] vhci_hcd: disconnect device [ 41.725465][ T4145] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 41.761515][ T4149] loop3: detected capacity change from 0 to 1024 [ 41.838359][ T4163] FAULT_INJECTION: forcing a failure. [ 41.838359][ T4163] name failslab, interval 1, probability 0, space 0, times 0 [ 41.851331][ T4163] CPU: 0 UID: 0 PID: 4163 Comm: syz.3.206 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.851358][ T4163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 41.851370][ T4163] Call Trace: [ 41.851377][ T4163] [ 41.851386][ T4163] __dump_stack+0x1d/0x30 [ 41.851409][ T4163] dump_stack_lvl+0xe8/0x140 [ 41.851488][ T4163] dump_stack+0x15/0x1b [ 41.851505][ T4163] should_fail_ex+0x265/0x280 [ 41.851528][ T4163] should_failslab+0x8c/0xb0 [ 41.851554][ T4163] kmem_cache_alloc_node_noprof+0x57/0x320 [ 41.851582][ T4163] ? __alloc_skb+0x101/0x320 [ 41.851687][ T4163] ? tipc_node_distr_xmit+0x4c/0x200 [ 41.851707][ T4163] __alloc_skb+0x101/0x320 [ 41.851737][ T4163] tipc_msg_build+0xbe/0x840 [ 41.851812][ T4163] ? sk_backlog_rcv+0x87/0x190 [ 41.851843][ T4163] __tipc_sendstream+0x668/0xb30 [ 41.851875][ T4163] ? __pfx_woken_wake_function+0x10/0x10 [ 41.851894][ T4163] tipc_sendstream+0x3e/0x60 [ 41.851976][ T4163] ? __pfx_tipc_sendstream+0x10/0x10 [ 41.852003][ T4163] __sock_sendmsg+0x145/0x180 [ 41.852031][ T4163] ____sys_sendmsg+0x31e/0x4e0 [ 41.852054][ T4163] ___sys_sendmsg+0x17b/0x1d0 [ 41.852157][ T4163] __x64_sys_sendmsg+0xd4/0x160 [ 41.852177][ T4163] x64_sys_call+0x191e/0x2ff0 [ 41.852269][ T4163] do_syscall_64+0xd2/0x200 [ 41.852292][ T4163] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 41.852377][ T4163] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 41.852468][ T4163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.852486][ T4163] RIP: 0033:0x7fe5be00ebe9 [ 41.852501][ T4163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.852545][ T4163] RSP: 002b:00007fe5bca4e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 41.852564][ T4163] RAX: ffffffffffffffda RBX: 00007fe5be236090 RCX: 00007fe5be00ebe9 [ 41.852577][ T4163] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 41.852590][ T4163] RBP: 00007fe5bca4e090 R08: 0000000000000000 R09: 0000000000000000 [ 41.852601][ T4163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.852611][ T4163] R13: 00007fe5be236128 R14: 00007fe5be236090 R15: 00007ffd7e1d7a48 [ 41.852630][ T4163] [ 42.208905][ T4168] __nla_validate_parse: 26 callbacks suppressed [ 42.208922][ T4168] netlink: 96 bytes leftover after parsing attributes in process `syz.1.210'. [ 42.265672][ T4174] loop2: detected capacity change from 0 to 1024 [ 42.517625][ T4211] loop0: detected capacity change from 0 to 1024 [ 42.542745][ T4213] loop0: detected capacity change from 0 to 1024 [ 42.587209][ T4219] loop0: detected capacity change from 0 to 512 [ 42.594362][ T4219] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 42.603517][ T4219] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 42.649387][ T4219] FAT-fs (loop0): FAT read failed (blocknr 128) [ 42.680678][ T31] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 42.761401][ T4229] FAULT_INJECTION: forcing a failure. [ 42.761401][ T4229] name failslab, interval 1, probability 0, space 0, times 0 [ 42.774200][ T4229] CPU: 1 UID: 0 PID: 4229 Comm: wÞ£ÿ Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.774223][ T4229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 42.774233][ T4229] Call Trace: [ 42.774239][ T4229] [ 42.774315][ T4229] __dump_stack+0x1d/0x30 [ 42.774335][ T4229] dump_stack_lvl+0xe8/0x140 [ 42.774355][ T4229] dump_stack+0x15/0x1b [ 42.774373][ T4229] should_fail_ex+0x265/0x280 [ 42.774450][ T4229] should_failslab+0x8c/0xb0 [ 42.774503][ T4229] kmem_cache_alloc_noprof+0x50/0x310 [ 42.774526][ T4229] ? security_inode_alloc+0x37/0x100 [ 42.774556][ T4229] security_inode_alloc+0x37/0x100 [ 42.774580][ T4229] inode_init_always_gfp+0x4b7/0x500 [ 42.774677][ T4229] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 42.774706][ T4229] alloc_inode+0x58/0x170 [ 42.774793][ T4229] new_inode+0x1d/0xe0 [ 42.774856][ T4229] hugetlbfs_get_inode+0x7b/0x370 [ 42.774878][ T4229] hugetlb_file_setup+0x192/0x3d0 [ 42.774947][ T4229] ksys_mmap_pgoff+0x157/0x310 [ 42.774981][ T4229] x64_sys_call+0x14a3/0x2ff0 [ 42.775002][ T4229] do_syscall_64+0xd2/0x200 [ 42.775023][ T4229] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 42.775046][ T4229] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 42.775065][ T4229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.775128][ T4229] RIP: 0033:0x7fe5be00ebe9 [ 42.775149][ T4229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.775163][ T4229] RSP: 002b:00007fe5bca2d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 42.775180][ T4229] RAX: ffffffffffffffda RBX: 00007fe5be236180 RCX: 00007fe5be00ebe9 [ 42.775192][ T4229] RDX: 0000000000000002 RSI: 0000000000800000 RDI: 0000200000800000 [ 42.775202][ T4229] RBP: 00007fe5bca2d090 R08: ffffffffffffffff R09: 0000000000000000 [ 42.775277][ T4229] R10: 0000000000042032 R11: 0000000000000246 R12: 0000000000000001 [ 42.775341][ T4229] R13: 00007fe5be236218 R14: 00007fe5be236180 R15: 00007ffd7e1d7a48 [ 42.775356][ T4229] [ 43.684110][ T4244] loop2: detected capacity change from 0 to 1024 [ 43.811923][ T4246] loop1: detected capacity change from 0 to 1024 [ 43.985209][ T4252] sctp: [Deprecated]: syz.3.240 (pid 4252) Use of int in max_burst socket option deprecated. [ 43.985209][ T4252] Use struct sctp_assoc_value instead [ 44.010488][ T4254] hub 8-0:1.0: USB hub found [ 44.016012][ T4254] hub 8-0:1.0: 8 ports detected [ 44.126074][ T4268] FAULT_INJECTION: forcing a failure. [ 44.126074][ T4268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.139672][ T4268] CPU: 0 UID: 0 PID: 4268 Comm: syz.0.246 Not tainted syzkaller #0 PREEMPT(voluntary) [ 44.139776][ T4268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 44.139786][ T4268] Call Trace: [ 44.139791][ T4268] [ 44.139798][ T4268] __dump_stack+0x1d/0x30 [ 44.139907][ T4268] dump_stack_lvl+0xe8/0x140 [ 44.139926][ T4268] dump_stack+0x15/0x1b [ 44.139943][ T4268] should_fail_ex+0x265/0x280 [ 44.140011][ T4268] should_fail+0xb/0x20 [ 44.140027][ T4268] should_fail_usercopy+0x1a/0x20 [ 44.140050][ T4268] _copy_to_user+0x20/0xa0 [ 44.140074][ T4268] simple_read_from_buffer+0xb5/0x130 [ 44.140095][ T4268] proc_fail_nth_read+0x10e/0x150 [ 44.140124][ T4268] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 44.140166][ T4268] vfs_read+0x1a8/0x770 [ 44.140184][ T4268] ? __rcu_read_unlock+0x4f/0x70 [ 44.140202][ T4268] ? __fget_files+0x184/0x1c0 [ 44.140224][ T4268] ksys_read+0xda/0x1a0 [ 44.140261][ T4268] __x64_sys_read+0x40/0x50 [ 44.140278][ T4268] x64_sys_call+0x27bc/0x2ff0 [ 44.140375][ T4268] do_syscall_64+0xd2/0x200 [ 44.140397][ T4268] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 44.140448][ T4268] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 44.140469][ T4268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.140486][ T4268] RIP: 0033:0x7f084afbd5fc [ 44.140517][ T4268] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 44.140533][ T4268] RSP: 002b:00007f0849a1f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 44.140553][ T4268] RAX: ffffffffffffffda RBX: 00007f084b1e5fa0 RCX: 00007f084afbd5fc [ 44.140563][ T4268] RDX: 000000000000000f RSI: 00007f0849a1f0a0 RDI: 0000000000000004 [ 44.140574][ T4268] RBP: 00007f0849a1f090 R08: 0000000000000000 R09: 0000000000000000 [ 44.140584][ T4268] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 44.140594][ T4268] R13: 00007f084b1e6038 R14: 00007f084b1e5fa0 R15: 00007ffdc8079568 [ 44.140666][ T4268] [ 44.370233][ T4273] loop3: detected capacity change from 0 to 1024 [ 44.378107][ T4273] EXT4-fs: Ignoring removed bh option [ 44.383898][ T4273] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 44.442903][ T3382] IPVS: starting estimator thread 0... [ 44.454554][ T4273] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.505080][ T4290] loop1: detected capacity change from 0 to 512 [ 44.512510][ T4290] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 44.522664][ T4291] loop2: detected capacity change from 0 to 1024 [ 44.523856][ T4273] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.546122][ T4282] IPVS: using max 2784 ests per chain, 139200 per kthread [ 44.559111][ T4290] EXT4-fs (loop1): 1 truncate cleaned up [ 44.562034][ T4294] serio: Serial port ptm0 [ 44.567794][ T4290] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.588791][ T4296] loop2: detected capacity change from 0 to 512 [ 44.600486][ T4290] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.612480][ T4296] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.255: missing EA_INODE flag [ 44.625486][ T4296] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.255: error while reading EA inode 11 err=-117 [ 44.641035][ T4296] EXT4-fs (loop2): 1 orphan inode deleted [ 44.656658][ T4296] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.675830][ T4302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.257'. [ 44.684784][ T4290] loop1: detected capacity change from 512 to 64 [ 44.776051][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.945826][ T4322] loop2: detected capacity change from 0 to 1024 [ 44.952863][ T4322] EXT4-fs: Ignoring removed bh option [ 44.958902][ T4322] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 44.976277][ T4322] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.003635][ T4322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.022067][ T4329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.032459][ T4329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.349826][ T4332] netlink: 44 bytes leftover after parsing attributes in process `syz.0.267'. [ 45.359837][ T4331] netlink: 44 bytes leftover after parsing attributes in process `syz.0.267'. [ 45.461271][ T4332] hub 8-0:1.0: USB hub found [ 45.466166][ T4332] hub 8-0:1.0: 8 ports detected [ 45.575265][ T4341] FAULT_INJECTION: forcing a failure. [ 45.575265][ T4341] name failslab, interval 1, probability 0, space 0, times 0 [ 45.588414][ T4341] CPU: 0 UID: 0 PID: 4341 Comm: syz.3.271 Not tainted syzkaller #0 PREEMPT(voluntary) [ 45.588444][ T4341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 45.588457][ T4341] Call Trace: [ 45.588463][ T4341] [ 45.588472][ T4341] __dump_stack+0x1d/0x30 [ 45.588534][ T4341] dump_stack_lvl+0xe8/0x140 [ 45.588554][ T4341] dump_stack+0x15/0x1b [ 45.588572][ T4341] should_fail_ex+0x265/0x280 [ 45.588595][ T4341] should_failslab+0x8c/0xb0 [ 45.588627][ T4341] kmem_cache_alloc_noprof+0x50/0x310 [ 45.588715][ T4341] ? audit_log_start+0x365/0x6c0 [ 45.588746][ T4341] audit_log_start+0x365/0x6c0 [ 45.588778][ T4341] audit_seccomp+0x48/0x100 [ 45.588852][ T4341] ? __seccomp_filter+0x68c/0x10d0 [ 45.588874][ T4341] __seccomp_filter+0x69d/0x10d0 [ 45.588896][ T4341] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 45.588925][ T4341] ? vfs_write+0x7e8/0x960 [ 45.588953][ T4341] ? _raw_spin_unlock+0x26/0x50 [ 45.588984][ T4341] ? do_prlimit+0x271/0x2c0 [ 45.589061][ T4341] __secure_computing+0x82/0x150 [ 45.589080][ T4341] syscall_trace_enter+0xcf/0x1e0 [ 45.589105][ T4341] do_syscall_64+0xac/0x200 [ 45.589167][ T4341] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 45.589187][ T4341] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 45.589281][ T4341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.589300][ T4341] RIP: 0033:0x7fe5be00d5fc [ 45.589314][ T4341] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 45.589328][ T4341] RSP: 002b:00007fe5bca6f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 45.589377][ T4341] RAX: ffffffffffffffda RBX: 00007fe5be235fa0 RCX: 00007fe5be00d5fc [ 45.589387][ T4341] RDX: 000000000000000f RSI: 00007fe5bca6f0a0 RDI: 0000000000000006 [ 45.589398][ T4341] RBP: 00007fe5bca6f090 R08: 0000000000000000 R09: 0000000000000000 [ 45.589408][ T4341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.589423][ T4341] R13: 00007fe5be236038 R14: 00007fe5be235fa0 R15: 00007ffd7e1d7a48 [ 45.589438][ T4341] [ 45.592270][ T4343] FAULT_INJECTION: forcing a failure. [ 45.592270][ T4343] name failslab, interval 1, probability 0, space 0, times 0 [ 45.813947][ T4343] CPU: 0 UID: 0 PID: 4343 Comm: syz.2.272 Not tainted syzkaller #0 PREEMPT(voluntary) [ 45.813966][ T4343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 45.813974][ T4343] Call Trace: [ 45.814002][ T4343] [ 45.814009][ T4343] __dump_stack+0x1d/0x30 [ 45.814024][ T4343] dump_stack_lvl+0xe8/0x140 [ 45.814035][ T4343] dump_stack+0x15/0x1b [ 45.814044][ T4343] should_fail_ex+0x265/0x280 [ 45.814058][ T4343] should_failslab+0x8c/0xb0 [ 45.814073][ T4343] __kmalloc_node_noprof+0xa9/0x410 [ 45.814120][ T4343] ? __vmalloc_node_range_noprof+0x3f9/0xe00 [ 45.814139][ T4343] __vmalloc_node_range_noprof+0x3f9/0xe00 [ 45.814162][ T4343] ? cred_has_capability+0x210/0x280 [ 45.814176][ T4343] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 45.814193][ T4343] __vmalloc_noprof+0x83/0xc0 [ 45.814266][ T4343] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 45.814365][ T4343] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 45.814379][ T4343] ? bpf_prog_alloc+0x2a/0x150 [ 45.814405][ T4343] bpf_prog_alloc+0x3c/0x150 [ 45.814427][ T4343] bpf_prog_load+0x514/0x1070 [ 45.814517][ T4343] ? security_bpf+0x2b/0x90 [ 45.814543][ T4343] __sys_bpf+0x462/0x7b0 [ 45.814571][ T4343] __x64_sys_bpf+0x41/0x50 [ 45.814627][ T4343] x64_sys_call+0x2aea/0x2ff0 [ 45.814644][ T4343] do_syscall_64+0xd2/0x200 [ 45.814668][ T4343] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 45.814698][ T4343] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 45.814718][ T4343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.814737][ T4343] RIP: 0033:0x7fe31e8aebe9 [ 45.814828][ T4343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.814842][ T4343] RSP: 002b:00007fe31d30f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 45.814863][ T4343] RAX: ffffffffffffffda RBX: 00007fe31ead5fa0 RCX: 00007fe31e8aebe9 [ 45.814876][ T4343] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 45.814889][ T4343] RBP: 00007fe31d30f090 R08: 0000000000000000 R09: 0000000000000000 [ 45.814952][ T4343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.814963][ T4343] R13: 00007fe31ead6038 R14: 00007fe31ead5fa0 R15: 00007ffe90dcdcd8 [ 45.815054][ T4343] [ 46.040400][ T4343] syz.2.272: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 46.057983][ T4343] CPU: 0 UID: 0 PID: 4343 Comm: syz.2.272 Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.058014][ T4343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 46.058065][ T4343] Call Trace: [ 46.058072][ T4343] [ 46.058082][ T4343] __dump_stack+0x1d/0x30 [ 46.058152][ T4343] dump_stack_lvl+0xe8/0x140 [ 46.058175][ T4343] dump_stack+0x15/0x1b [ 46.058192][ T4343] warn_alloc+0x12b/0x1a0 [ 46.058223][ T4343] ? should_failslab+0x8c/0xb0 [ 46.058320][ T4343] __vmalloc_node_range_noprof+0x497/0xe00 [ 46.058355][ T4343] ? cred_has_capability+0x210/0x280 [ 46.058375][ T4343] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 46.058398][ T4343] __vmalloc_noprof+0x83/0xc0 [ 46.058502][ T4343] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 46.058562][ T4343] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 46.058594][ T4343] ? bpf_prog_alloc+0x2a/0x150 [ 46.058615][ T4343] bpf_prog_alloc+0x3c/0x150 [ 46.058636][ T4343] bpf_prog_load+0x514/0x1070 [ 46.058698][ T4343] ? security_bpf+0x2b/0x90 [ 46.058750][ T4343] __sys_bpf+0x462/0x7b0 [ 46.058776][ T4343] __x64_sys_bpf+0x41/0x50 [ 46.058795][ T4343] x64_sys_call+0x2aea/0x2ff0 [ 46.058812][ T4343] do_syscall_64+0xd2/0x200 [ 46.058911][ T4343] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 46.058967][ T4343] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 46.058986][ T4343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.059141][ T4343] RIP: 0033:0x7fe31e8aebe9 [ 46.059155][ T4343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.059168][ T4343] RSP: 002b:00007fe31d30f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 46.059206][ T4343] RAX: ffffffffffffffda RBX: 00007fe31ead5fa0 RCX: 00007fe31e8aebe9 [ 46.059217][ T4343] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 46.059227][ T4343] RBP: 00007fe31d30f090 R08: 0000000000000000 R09: 0000000000000000 [ 46.059237][ T4343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.059248][ T4343] R13: 00007fe31ead6038 R14: 00007fe31ead5fa0 R15: 00007ffe90dcdcd8 [ 46.059262][ T4343] [ 46.117576][ T4351] loop4: detected capacity change from 0 to 1024 [ 46.120158][ T4343] Mem-Info: [ 46.126452][ T4351] EXT4-fs: Ignoring removed bh option [ 46.130627][ T4343] active_anon:3392 inactive_anon:0 isolated_anon:0 [ 46.130627][ T4343] active_file:9209 inactive_file:2186 isolated_file:0 [ 46.130627][ T4343] unevictable:0 dirty:599 writeback:0 [ 46.130627][ T4343] slab_reclaimable:3135 slab_unreclaimable:14243 [ 46.130627][ T4343] mapped:29325 shmem:357 pagetables:894 [ 46.130627][ T4343] sec_pagetables:0 bounce:0 [ 46.130627][ T4343] kernel_misc_reclaimable:0 [ 46.130627][ T4343] free:1881498 free_pcp:26806 free_cma:0 [ 46.130681][ T4343] Node 0 active_anon:13568kB inactive_anon:0kB active_file:36836kB inactive_file:8744kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117300kB dirty:2396kB writeback:0kB shmem:1428kB kernel_stack:3152kB pagetables:3576kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 46.138826][ T4351] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 46.142178][ T4343] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 46.156947][ T4351] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.161289][ T4343] lowmem_reserve[]: 0 2883 7862 7862 [ 46.418170][ T4343] Node 0 DMA32 free:2949308kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952840kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 46.449045][ T4343] lowmem_reserve[]: 0 0 4978 4978 [ 46.454253][ T4343] Node 0 Normal free:4561324kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13568kB inactive_anon:0kB active_file:36836kB inactive_file:8744kB unevictable:0kB writepending:2396kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:103752kB local_pcp:79296kB free_cma:0kB [ 46.486422][ T4343] lowmem_reserve[]: 0 0 0 0 [ 46.491084][ T4343] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 46.504099][ T4343] Node 0 DMA32: 5*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949308kB [ 46.520104][ T4343] Node 0 Normal: 349*4kB (UME) 135*8kB (UME) 8*16kB (M) 32*32kB (UME) 18*64kB (M) 2*128kB (ME) 2*256kB (UE) 2*512kB (U) 6*1024kB (U) 17*2048kB (UME) 1102*4096kB (UM) = 4561324kB [ 46.537898][ T4343] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 46.547203][ T4343] 11753 total pagecache pages [ 46.551994][ T4343] 5 pages in swap cache [ 46.556347][ T4343] Free swap = 124976kB [ 46.561097][ T4343] Total swap = 124996kB [ 46.565468][ T4343] 2097051 pages RAM [ 46.569255][ T4343] 0 pages HighMem/MovableOnly [ 46.574147][ T4343] 80441 pages reserved [ 46.582224][ T4351] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.672445][ T4366] netlink: 'syz.4.280': attribute type 1 has an invalid length. [ 46.687045][ T4366] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.701532][ T29] kauditd_printk_skb: 1123 callbacks suppressed [ 46.701596][ T29] audit: type=1400 audit(1755875543.944:3269): avc: denied { bind } for pid=4370 comm="syz.2.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.730881][ T4366] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.738236][ T4366] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 46.749943][ T4366] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 46.781627][ T4376] loop0: detected capacity change from 0 to 128 [ 46.795836][ T4377] bond2: entered promiscuous mode [ 46.801070][ T4361] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.277'. [ 46.890615][ T29] audit: type=1400 audit(1755875544.134:3270): avc: denied { wake_alarm } for pid=4373 comm="syz.3.283" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 47.483491][ T29] audit: type=1400 audit(1755875544.724:3271): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 47.536411][ T4443] FAULT_INJECTION: forcing a failure. [ 47.536411][ T4443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.550071][ T4443] CPU: 1 UID: 0 PID: 4443 Comm: syz.4.286 Not tainted syzkaller #0 PREEMPT(voluntary) [ 47.550153][ T4443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 47.550165][ T4443] Call Trace: [ 47.550172][ T4443] [ 47.550205][ T4443] __dump_stack+0x1d/0x30 [ 47.550229][ T4443] dump_stack_lvl+0xe8/0x140 [ 47.550250][ T4443] dump_stack+0x15/0x1b [ 47.550267][ T4443] should_fail_ex+0x265/0x280 [ 47.550289][ T4443] should_fail+0xb/0x20 [ 47.550341][ T4443] should_fail_usercopy+0x1a/0x20 [ 47.550363][ T4443] _copy_to_user+0x20/0xa0 [ 47.550391][ T4443] simple_read_from_buffer+0xb5/0x130 [ 47.550415][ T4443] proc_fail_nth_read+0x10e/0x150 [ 47.550569][ T4443] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 47.550594][ T4443] vfs_read+0x1a8/0x770 [ 47.550614][ T4443] ? __rcu_read_unlock+0x4f/0x70 [ 47.550633][ T4443] ? __fget_files+0x184/0x1c0 [ 47.550667][ T4443] ksys_read+0xda/0x1a0 [ 47.550685][ T4443] __x64_sys_read+0x40/0x50 [ 47.550703][ T4443] x64_sys_call+0x27bc/0x2ff0 [ 47.550723][ T4443] do_syscall_64+0xd2/0x200 [ 47.550808][ T4443] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 47.550834][ T4443] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 47.550858][ T4443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.550880][ T4443] RIP: 0033:0x7fbb9997d5fc [ 47.550936][ T4443] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 47.551007][ T4443] RSP: 002b:00007fbb983e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 47.551093][ T4443] RAX: ffffffffffffffda RBX: 00007fbb99ba5fa0 RCX: 00007fbb9997d5fc [ 47.551106][ T4443] RDX: 000000000000000f RSI: 00007fbb983e70a0 RDI: 0000000000000006 [ 47.551118][ T4443] RBP: 00007fbb983e7090 R08: 0000000000000000 R09: 0000000000000000 [ 47.551149][ T4443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.551160][ T4443] R13: 00007fbb99ba6038 R14: 00007fbb99ba5fa0 R15: 00007ffff0791538 [ 47.551185][ T4443] [ 47.786997][ T29] audit: type=1400 audit(1755875545.034:3272): avc: denied { read } for pid=4446 comm="syz.2.287" dev="nsfs" ino=4026532384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.808338][ T29] audit: type=1400 audit(1755875545.034:3273): avc: denied { open } for pid=4446 comm="syz.2.287" path="net:[4026532384]" dev="nsfs" ino=4026532384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.835339][ T4447] loop2: detected capacity change from 0 to 512 [ 47.841946][ T4447] msdos: Unknown parameter 'üïÿ}' [ 47.874747][ T29] audit: type=1400 audit(1755875545.114:3274): avc: denied { ioctl } for pid=4446 comm="syz.2.287" path="socket:[7917]" dev="sockfs" ino=7917 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.030571][ T4470] loop2: detected capacity change from 0 to 512 [ 48.046435][ T4470] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.297: bg 0: block 16: invalid block bitmap [ 48.075272][ T4475] netlink: 48 bytes leftover after parsing attributes in process `syz.0.294'. [ 48.084374][ T4475] netlink: 48 bytes leftover after parsing attributes in process `syz.0.294'. [ 48.105092][ T4470] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 48.117825][ T4470] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.297: invalid indirect mapped block 5 (level 0) [ 48.147125][ T29] audit: type=1400 audit(1755875545.384:3275): avc: denied { read write } for pid=4476 comm="syz.4.299" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 48.172129][ T29] audit: type=1400 audit(1755875545.384:3276): avc: denied { open } for pid=4476 comm="syz.4.299" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 48.173739][ T4456] loop1: detected capacity change from 0 to 2048 [ 48.199877][ T4470] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.297: invalid indirect mapped block 4294967295 (level 1) [ 48.226085][ T29] audit: type=1400 audit(1755875545.474:3277): avc: denied { create } for pid=4478 comm="syz.3.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 48.249063][ T4470] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.297: invalid indirect mapped block 4294967295 (level 2) [ 48.256548][ T4456] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.275979][ T29] audit: type=1400 audit(1755875545.494:3278): avc: denied { setopt } for pid=4478 comm="syz.3.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 48.299340][ T4470] EXT4-fs (loop2): 1 truncate cleaned up [ 48.305888][ T4470] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.357596][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.385991][ T4494] loop9: detected capacity change from 0 to 7 [ 48.400696][ T4496] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 48.408810][ T4494] Buffer I/O error on dev loop9, logical block 0, async page read [ 48.432786][ T4494] Buffer I/O error on dev loop9, logical block 0, async page read [ 48.440748][ T4494] loop9: unable to read partition table [ 48.447609][ T4494] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 48.447609][ T4494] ) failed (rc=-5) [ 48.585383][ T4510] loop3: detected capacity change from 0 to 1024 [ 48.703058][ T4520] FAULT_INJECTION: forcing a failure. [ 48.703058][ T4520] name failslab, interval 1, probability 0, space 0, times 0 [ 48.715918][ T4520] CPU: 0 UID: 0 PID: 4520 Comm: syz.3.314 Not tainted syzkaller #0 PREEMPT(voluntary) [ 48.716154][ T4520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 48.716164][ T4520] Call Trace: [ 48.716171][ T4520] [ 48.716179][ T4520] __dump_stack+0x1d/0x30 [ 48.716208][ T4520] dump_stack_lvl+0xe8/0x140 [ 48.716249][ T4520] dump_stack+0x15/0x1b [ 48.716266][ T4520] should_fail_ex+0x265/0x280 [ 48.716366][ T4520] should_failslab+0x8c/0xb0 [ 48.716386][ T4520] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 48.716411][ T4520] ? sidtab_sid2str_get+0xa0/0x130 [ 48.716432][ T4520] kmemdup_noprof+0x2b/0x70 [ 48.716461][ T4520] sidtab_sid2str_get+0xa0/0x130 [ 48.716481][ T4520] security_sid_to_context_core+0x1eb/0x2e0 [ 48.716503][ T4520] security_sid_to_context+0x27/0x40 [ 48.716560][ T4520] selinux_lsmprop_to_secctx+0x67/0xf0 [ 48.716578][ T4520] security_lsmprop_to_secctx+0x43/0x80 [ 48.716601][ T4520] audit_log_task_context+0x77/0x190 [ 48.716711][ T4520] audit_log_task+0xf4/0x250 [ 48.716738][ T4520] audit_seccomp+0x61/0x100 [ 48.716814][ T4520] ? __seccomp_filter+0x68c/0x10d0 [ 48.716880][ T4520] __seccomp_filter+0x69d/0x10d0 [ 48.716903][ T4520] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 48.716928][ T4520] ? vfs_write+0x7e8/0x960 [ 48.716999][ T4520] ? __rcu_read_unlock+0x4f/0x70 [ 48.717017][ T4520] ? __fget_files+0x184/0x1c0 [ 48.717039][ T4520] __secure_computing+0x82/0x150 [ 48.717059][ T4520] syscall_trace_enter+0xcf/0x1e0 [ 48.717211][ T4520] do_syscall_64+0xac/0x200 [ 48.717252][ T4520] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 48.717275][ T4520] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 48.717297][ T4520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.717327][ T4520] RIP: 0033:0x7fe5be00ebe9 [ 48.717389][ T4520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.717405][ T4520] RSP: 002b:00007fe5bca6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000008c [ 48.717425][ T4520] RAX: ffffffffffffffda RBX: 00007fe5be235fa0 RCX: 00007fe5be00ebe9 [ 48.717438][ T4520] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 48.717449][ T4520] RBP: 00007fe5bca6f090 R08: 0000000000000000 R09: 0000000000000000 [ 48.717530][ T4520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.717540][ T4520] R13: 00007fe5be236038 R14: 00007fe5be235fa0 R15: 00007ffd7e1d7a48 [ 48.717559][ T4520] [ 49.065096][ T4537] FAULT_INJECTION: forcing a failure. [ 49.065096][ T4537] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 49.078460][ T4537] CPU: 1 UID: 0 PID: 4537 Comm: syz.2.320 Not tainted syzkaller #0 PREEMPT(voluntary) [ 49.078529][ T4537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 49.078539][ T4537] Call Trace: [ 49.078545][ T4537] [ 49.078552][ T4537] __dump_stack+0x1d/0x30 [ 49.078570][ T4537] dump_stack_lvl+0xe8/0x140 [ 49.078586][ T4537] dump_stack+0x15/0x1b [ 49.078601][ T4537] should_fail_ex+0x265/0x280 [ 49.078671][ T4537] should_fail_alloc_page+0xf2/0x100 [ 49.078692][ T4537] __alloc_frozen_pages_noprof+0xff/0x360 [ 49.078724][ T4537] alloc_pages_mpol+0xb3/0x250 [ 49.078828][ T4537] alloc_pages_noprof+0x90/0x130 [ 49.078858][ T4537] get_zeroed_page_noprof+0x1a/0x40 [ 49.078884][ T4537] rds_cong_from_addr+0x97/0x2c0 [ 49.078941][ T4537] rds_cong_get_maps+0x36/0x70 [ 49.078972][ T4537] __rds_conn_create+0x536/0x1040 [ 49.078996][ T4537] rds_conn_create_outgoing+0x43/0x60 [ 49.079019][ T4537] rds_sendmsg+0xbd2/0x14a0 [ 49.079097][ T4537] ? __pfx_rds_sendmsg+0x10/0x10 [ 49.079179][ T4537] __sock_sendmsg+0x145/0x180 [ 49.079205][ T4537] __sys_sendto+0x268/0x330 [ 49.079246][ T4537] __x64_sys_sendto+0x76/0x90 [ 49.079265][ T4537] x64_sys_call+0x2d05/0x2ff0 [ 49.079298][ T4537] do_syscall_64+0xd2/0x200 [ 49.079320][ T4537] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 49.079394][ T4537] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 49.079419][ T4537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.079440][ T4537] RIP: 0033:0x7fe31e8aebe9 [ 49.079454][ T4537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.079543][ T4537] RSP: 002b:00007fe31d30f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 49.079559][ T4537] RAX: ffffffffffffffda RBX: 00007fe31ead5fa0 RCX: 00007fe31e8aebe9 [ 49.079570][ T4537] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 49.079580][ T4537] RBP: 00007fe31d30f090 R08: 0000000000000000 R09: 0000000000000000 [ 49.079590][ T4537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.079601][ T4537] R13: 00007fe31ead6038 R14: 00007fe31ead5fa0 R15: 00007ffe90dcdcd8 [ 49.079620][ T4537] [ 49.305335][ T4539] loop3: detected capacity change from 0 to 512 [ 49.326657][ T4539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.336719][ T4547] loop4: detected capacity change from 0 to 1024 [ 49.365453][ T4539] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.422440][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.464811][ T4568] FAULT_INJECTION: forcing a failure. [ 49.464811][ T4568] name failslab, interval 1, probability 0, space 0, times 0 [ 49.477872][ T4568] CPU: 1 UID: 0 PID: 4568 Comm: syz.1.327 Not tainted syzkaller #0 PREEMPT(voluntary) [ 49.477896][ T4568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 49.477928][ T4568] Call Trace: [ 49.477934][ T4568] [ 49.477941][ T4568] __dump_stack+0x1d/0x30 [ 49.477962][ T4568] dump_stack_lvl+0xe8/0x140 [ 49.477981][ T4568] dump_stack+0x15/0x1b [ 49.477997][ T4568] should_fail_ex+0x265/0x280 [ 49.478097][ T4568] should_failslab+0x8c/0xb0 [ 49.478122][ T4568] kmem_cache_alloc_noprof+0x50/0x310 [ 49.478188][ T4568] ? security_file_alloc+0x32/0x100 [ 49.478296][ T4568] security_file_alloc+0x32/0x100 [ 49.478319][ T4568] init_file+0x5c/0x1d0 [ 49.478344][ T4568] alloc_empty_file+0x8b/0x200 [ 49.478374][ T4568] alloc_file_pseudo+0xc6/0x160 [ 49.478403][ T4568] hugetlb_file_setup+0x2a6/0x3d0 [ 49.478425][ T4568] ksys_mmap_pgoff+0x157/0x310 [ 49.478481][ T4568] x64_sys_call+0x14a3/0x2ff0 [ 49.478501][ T4568] do_syscall_64+0xd2/0x200 [ 49.478573][ T4568] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 49.478615][ T4568] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 49.478637][ T4568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.478657][ T4568] RIP: 0033:0x7f18ae7bebe9 [ 49.478670][ T4568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.478684][ T4568] RSP: 002b:00007f18ad21f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 49.478811][ T4568] RAX: ffffffffffffffda RBX: 00007f18ae9e5fa0 RCX: 00007f18ae7bebe9 [ 49.478823][ T4568] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 49.478836][ T4568] RBP: 00007f18ad21f090 R08: ffffffffffffffff R09: 0000000000000000 [ 49.478848][ T4568] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000001 [ 49.478860][ T4568] R13: 00007f18ae9e6038 R14: 00007f18ae9e5fa0 R15: 00007fffd1807938 [ 49.478878][ T4568] [ 49.479805][ T4569] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.687367][ T4580] mmap: syz.1.332 (4580) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 49.701099][ T4585] FAULT_INJECTION: forcing a failure. [ 49.701099][ T4585] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 49.714832][ T4585] CPU: 0 UID: 0 PID: 4585 Comm: syz.2.333 Not tainted syzkaller #0 PREEMPT(voluntary) [ 49.714859][ T4585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 49.714869][ T4585] Call Trace: [ 49.714875][ T4585] [ 49.714882][ T4585] __dump_stack+0x1d/0x30 [ 49.714904][ T4585] dump_stack_lvl+0xe8/0x140 [ 49.714942][ T4585] dump_stack+0x15/0x1b [ 49.714958][ T4585] should_fail_ex+0x265/0x280 [ 49.714979][ T4585] should_fail_alloc_page+0xf2/0x100 [ 49.715005][ T4585] __alloc_frozen_pages_noprof+0xff/0x360 [ 49.715044][ T4585] alloc_pages_mpol+0xb3/0x250 [ 49.715115][ T4585] vma_alloc_folio_noprof+0x1aa/0x300 [ 49.715144][ T4585] handle_mm_fault+0xec2/0x2c20 [ 49.715255][ T4585] do_user_addr_fault+0x636/0x1090 [ 49.715288][ T4585] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 49.715321][ T4585] exc_page_fault+0x62/0xa0 [ 49.715425][ T4585] asm_exc_page_fault+0x26/0x30 [ 49.715442][ T4585] RIP: 0033:0x7fe31e770ba3 [ 49.715456][ T4585] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 49.715471][ T4585] RSP: 002b:00007fe31d30e4a0 EFLAGS: 00010202 [ 49.715488][ T4585] RAX: 000000000000a000 RBX: 00007fe31d30e540 RCX: 00007fe314eef000 [ 49.715502][ T4585] RDX: 00007fe31d30e6e0 RSI: 0000000000000000 RDI: 00007fe31d30e5e0 [ 49.715531][ T4585] RBP: 00000000000000d9 R08: 0000000000000006 R09: 000000000000000c [ 49.715541][ T4585] R10: 000000000000001a R11: 00007fe31d30e540 R12: 0000000000000001 [ 49.715551][ T4585] R13: 00007fe31e94da20 R14: 0000000000000001 R15: 00007fe31d30e5e0 [ 49.715566][ T4585] [ 49.715575][ T4585] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 49.891168][ T4585] loop2: detected capacity change from 0 to 164 [ 49.898134][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.928747][ T4594] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.338'. [ 49.930037][ T4592] loop3: detected capacity change from 0 to 1024 [ 49.949848][ T4596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65082 sclass=netlink_route_socket pid=4596 comm=syz.4.335 [ 49.990437][ T4603] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 50.015625][ T4609] loop4: detected capacity change from 0 to 512 [ 50.023492][ T4611] netlink: 'syz.2.344': attribute type 10 has an invalid length. [ 50.025609][ T4609] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.031782][ T4611] netlink: 55 bytes leftover after parsing attributes in process `syz.2.344'. [ 50.044244][ T4609] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.056196][ T4616] netlink: 52 bytes leftover after parsing attributes in process `syz.1.341'. [ 50.072662][ T4616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.341'. [ 50.081561][ T4616] netlink: 52 bytes leftover after parsing attributes in process `syz.1.341'. [ 50.090547][ T4616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.341'. [ 50.099677][ T4616] netlink: 52 bytes leftover after parsing attributes in process `syz.1.341'. [ 50.143102][ T4605] vhci_hcd: invalid port number 96 [ 50.148526][ T4605] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 50.197456][ T4626] netlink: '¢}ÂÔ û|XÅi': attribute type 30 has an invalid length. [ 50.276201][ T4633] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 50.321307][ T4636] FAULT_INJECTION: forcing a failure. [ 50.321307][ T4636] name failslab, interval 1, probability 0, space 0, times 0 [ 50.334087][ T4636] CPU: 1 UID: 0 PID: 4636 Comm: syz.2.352 Not tainted syzkaller #0 PREEMPT(voluntary) [ 50.334116][ T4636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 50.334129][ T4636] Call Trace: [ 50.334136][ T4636] [ 50.334145][ T4636] __dump_stack+0x1d/0x30 [ 50.334167][ T4636] dump_stack_lvl+0xe8/0x140 [ 50.334213][ T4636] dump_stack+0x15/0x1b [ 50.334227][ T4636] should_fail_ex+0x265/0x280 [ 50.334252][ T4636] should_failslab+0x8c/0xb0 [ 50.334328][ T4636] kmem_cache_alloc_noprof+0x50/0x310 [ 50.334376][ T4636] ? p9_client_prepare_req+0xef/0x820 [ 50.334405][ T4636] ? obj_cgroup_charge_account+0x122/0x1a0 [ 50.334516][ T4636] p9_client_prepare_req+0xef/0x820 [ 50.334541][ T4636] ? __list_del_entry_valid_or_report+0x65/0x130 [ 50.334622][ T4636] ? get_partial_node+0x2e0/0x320 [ 50.334641][ T4636] ? delete_node+0x218/0x5e0 [ 50.334662][ T4636] ? freeze_slab+0x5c/0x80 [ 50.334692][ T4636] p9_client_rpc+0xdf/0x6c0 [ 50.334821][ T4636] ? radix_tree_iter_tag_clear+0x105/0x180 [ 50.334849][ T4636] ? _raw_spin_unlock_irq+0x26/0x50 [ 50.334917][ T4636] p9_client_walk+0x102/0x4c0 [ 50.334968][ T4636] v9fs_file_open+0x159/0x560 [ 50.334991][ T4636] do_dentry_open+0x646/0xa20 [ 50.335015][ T4636] ? __pfx_v9fs_file_open+0x10/0x10 [ 50.335032][ T4636] vfs_open+0x37/0x1e0 [ 50.335057][ T4636] path_openat+0x1c5e/0x2170 [ 50.335080][ T4636] ? _parse_integer_limit+0x170/0x190 [ 50.335177][ T4636] ? _parse_integer+0x27/0x40 [ 50.335203][ T4636] do_filp_open+0x109/0x230 [ 50.335231][ T4636] do_sys_openat2+0xa6/0x110 [ 50.335324][ T4636] __x64_sys_creat+0x65/0x90 [ 50.335351][ T4636] x64_sys_call+0x2d94/0x2ff0 [ 50.335370][ T4636] do_syscall_64+0xd2/0x200 [ 50.335393][ T4636] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 50.335455][ T4636] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 50.335538][ T4636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.335559][ T4636] RIP: 0033:0x7fe31e8aebe9 [ 50.335574][ T4636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.335588][ T4636] RSP: 002b:00007fe31d30f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 50.335610][ T4636] RAX: ffffffffffffffda RBX: 00007fe31ead5fa0 RCX: 00007fe31e8aebe9 [ 50.335623][ T4636] RDX: 0000000000000000 RSI: 0000000000000036 RDI: 00002000000003c0 [ 50.335636][ T4636] RBP: 00007fe31d30f090 R08: 0000000000000000 R09: 0000000000000000 [ 50.335657][ T4636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.335669][ T4636] R13: 00007fe31ead6038 R14: 00007fe31ead5fa0 R15: 00007ffe90dcdcd8 [ 50.335733][ T4636] [ 50.633365][ T4646] capability: warning: `syz.0.356' uses 32-bit capabilities (legacy support in use) [ 50.693498][ T4653] loop1: detected capacity change from 0 to 164 [ 50.742142][ T4662] vlan0: entered promiscuous mode [ 50.747253][ T4662] gretap0: entered promiscuous mode [ 50.801905][ T4671] binfmt_misc: register: failed to install interpreter file ./file0 [ 50.817302][ T4671] netlink: 'syz.3.365': attribute type 6 has an invalid length. [ 50.872126][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.914198][ T4686] No source specified [ 50.963571][ T4694] FAULT_INJECTION: forcing a failure. [ 50.963571][ T4694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.976856][ T4694] CPU: 0 UID: 0 PID: 4694 Comm: syz.3.373 Not tainted syzkaller #0 PREEMPT(voluntary) [ 50.976884][ T4694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 50.976894][ T4694] Call Trace: [ 50.976900][ T4694] [ 50.976942][ T4694] __dump_stack+0x1d/0x30 [ 50.976962][ T4694] dump_stack_lvl+0xe8/0x140 [ 50.976982][ T4694] dump_stack+0x15/0x1b [ 50.976999][ T4694] should_fail_ex+0x265/0x280 [ 50.977101][ T4694] should_fail+0xb/0x20 [ 50.977119][ T4694] should_fail_usercopy+0x1a/0x20 [ 50.977141][ T4694] strncpy_from_user+0x25/0x230 [ 50.977170][ T4694] strncpy_from_user_nofault+0x68/0xf0 [ 50.977223][ T4694] bpf_probe_read_compat_str+0xb4/0x130 [ 50.977284][ T4694] bpf_prog_d73d3bb03d5a037f+0x3e/0x44 [ 50.977302][ T4694] bpf_trace_run2+0x104/0x1c0 [ 50.977326][ T4694] ? resume_store+0x27f/0x3d0 [ 50.977408][ T4694] ? resume_store+0x27f/0x3d0 [ 50.977426][ T4694] __traceiter_kfree+0x2b/0x50 [ 50.977447][ T4694] ? resume_store+0x27f/0x3d0 [ 50.977464][ T4694] kfree+0x27b/0x320 [ 50.977483][ T4694] ? simple_strtoull+0x28/0x40 [ 50.977534][ T4694] resume_store+0x27f/0x3d0 [ 50.977552][ T4694] ? __pfx_resume_store+0x10/0x10 [ 50.977576][ T4694] kobj_attr_store+0x4a/0x70 [ 50.977605][ T4694] ? __pfx_kobj_attr_store+0x10/0x10 [ 50.977686][ T4694] sysfs_kf_write+0xfb/0x120 [ 50.977704][ T4694] ? __pfx_sysfs_kf_write+0x10/0x10 [ 50.977719][ T4694] kernfs_fop_write_iter+0x1be/0x2d0 [ 50.977750][ T4694] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 50.977802][ T4694] vfs_write+0x52a/0x960 [ 50.977905][ T4694] ksys_write+0xda/0x1a0 [ 50.977938][ T4694] __x64_sys_write+0x40/0x50 [ 50.977956][ T4694] x64_sys_call+0x27fe/0x2ff0 [ 50.977977][ T4694] do_syscall_64+0xd2/0x200 [ 50.978002][ T4694] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 50.978054][ T4694] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 50.978075][ T4694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.978093][ T4694] RIP: 0033:0x7fe5be00ebe9 [ 50.978116][ T4694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.978132][ T4694] RSP: 002b:00007fe5bca6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 50.978152][ T4694] RAX: ffffffffffffffda RBX: 00007fe5be235fa0 RCX: 00007fe5be00ebe9 [ 50.978165][ T4694] RDX: 00000000fffffd65 RSI: 0000200000000000 RDI: 0000000000000003 [ 50.978178][ T4694] RBP: 00007fe5bca6f090 R08: 0000000000000000 R09: 0000000000000000 [ 50.978194][ T4694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.978205][ T4694] R13: 00007fe5be236038 R14: 00007fe5be235fa0 R15: 00007ffd7e1d7a48 [ 50.978232][ T4694] [ 50.983297][ T4694] syz.3.373: attempt to access beyond end of device [ 50.983297][ T4694] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 51.315826][ T4698] vhci_hcd: invalid port number 96 [ 51.321060][ T4698] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 51.342275][ T4705] loop3: detected capacity change from 0 to 256 [ 51.360433][ T4710] FAULT_INJECTION: forcing a failure. [ 51.360433][ T4710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.373803][ T4710] CPU: 1 UID: 0 PID: 4710 Comm: syz.2.379 Not tainted syzkaller #0 PREEMPT(voluntary) [ 51.373831][ T4710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 51.373899][ T4710] Call Trace: [ 51.373906][ T4710] [ 51.373912][ T4710] __dump_stack+0x1d/0x30 [ 51.373954][ T4710] dump_stack_lvl+0xe8/0x140 [ 51.373974][ T4710] dump_stack+0x15/0x1b [ 51.373992][ T4710] should_fail_ex+0x265/0x280 [ 51.374014][ T4710] should_fail+0xb/0x20 [ 51.374028][ T4710] should_fail_usercopy+0x1a/0x20 [ 51.374076][ T4710] strncpy_from_user+0x25/0x230 [ 51.374117][ T4710] ? kmem_cache_alloc_noprof+0x186/0x310 [ 51.374245][ T4710] ? getname_flags+0x80/0x3b0 [ 51.374330][ T4710] getname_flags+0xae/0x3b0 [ 51.374352][ T4710] user_path_at+0x28/0x130 [ 51.374382][ T4710] __se_sys_mount+0x25b/0x2e0 [ 51.374404][ T4710] ? fput+0x8f/0xc0 [ 51.374506][ T4710] __x64_sys_mount+0x67/0x80 [ 51.374568][ T4710] x64_sys_call+0x2b4d/0x2ff0 [ 51.374588][ T4710] do_syscall_64+0xd2/0x200 [ 51.374613][ T4710] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 51.374664][ T4710] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 51.374684][ T4710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.374712][ T4710] RIP: 0033:0x7fe31e8aebe9 [ 51.374740][ T4710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.374756][ T4710] RSP: 002b:00007fe31d2ee038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 51.374772][ T4710] RAX: ffffffffffffffda RBX: 00007fe31ead6090 RCX: 00007fe31e8aebe9 [ 51.374782][ T4710] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 0000000000000000 [ 51.374793][ T4710] RBP: 00007fe31d2ee090 R08: 0000200000000080 R09: 0000000000000000 [ 51.374805][ T4710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.374818][ T4710] R13: 00007fe31ead6128 R14: 00007fe31ead6090 R15: 00007ffe90dcdcd8 [ 51.374833][ T4710] [ 51.597371][ T4712] loop1: detected capacity change from 0 to 1024 [ 51.615796][ T4705] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 51.633214][ T4712] EXT4-fs: test_dummy_encryption option not supported [ 51.723909][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 51.723922][ T29] audit: type=1326 audit(1755875548.964:3445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4726 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5be00ebe9 code=0x7ffc0000 [ 51.755258][ T4728] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 51.766764][ T4727] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 51.774896][ T4728] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(24) [ 51.781517][ T4728] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 51.789284][ T4728] vhci_hcd vhci_hcd.0: Device attached [ 51.801263][ T29] audit: type=1326 audit(1755875549.004:3446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4726 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe5be00ebe9 code=0x7ffc0000 [ 51.824742][ T29] audit: type=1326 audit(1755875549.004:3447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4726 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5be00ebe9 code=0x7ffc0000 [ 51.848512][ T29] audit: type=1326 audit(1755875549.004:3448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4726 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe5be00ebe9 code=0x7ffc0000 [ 51.871932][ T29] audit: type=1326 audit(1755875549.014:3449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4726 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5be00ebe9 code=0x7ffc0000 [ 51.895794][ T29] audit: type=1326 audit(1755875549.014:3450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4726 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fe5be00ebe9 code=0x7ffc0000 [ 51.905871][ T4712] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(16) [ 51.919344][ T29] audit: type=1326 audit(1755875549.014:3451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4726 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5be00ebe9 code=0x7ffc0000 [ 51.926006][ T4712] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 51.926113][ T4712] vhci_hcd vhci_hcd.0: Device attached [ 51.949469][ T29] audit: type=1326 audit(1755875549.014:3452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4726 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fe5be00ebe9 code=0x7ffc0000 [ 51.958462][ T4728] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 51.962566][ T29] audit: type=1326 audit(1755875549.014:3453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4726 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5be00ebe9 code=0x7ffc0000 [ 52.017506][ T29] audit: type=1326 audit(1755875549.014:3454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4726 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe5be00ebe9 code=0x7ffc0000 [ 52.026048][ T4733] loop0: detected capacity change from 0 to 1024 [ 52.046587][ T4720] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(19) [ 52.054368][ T4720] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 52.054765][ T4733] EXT4-fs: Ignoring removed bh option [ 52.061916][ T4720] vhci_hcd vhci_hcd.0: Device attached [ 52.075976][ T4731] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(18) [ 52.082669][ T4731] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 52.090349][ T4731] vhci_hcd vhci_hcd.0: Device attached [ 52.102300][ T4733] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 52.105320][ T4728] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(28) [ 52.118923][ T4728] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 52.126707][ T4728] vhci_hcd vhci_hcd.0: Device attached [ 52.142073][ T4741] loop2: detected capacity change from 0 to 1024 [ 52.147791][ T4723] vhci_hcd: connection closed [ 52.149106][ T4729] vhci_hcd: connection closed [ 52.149106][ T31] vhci_hcd: stop threads [ 52.158213][ T4735] vhci_hcd: connection closed [ 52.158513][ T31] vhci_hcd: release socket [ 52.163006][ T4724] vhci_hcd: connection closed [ 52.167586][ T31] vhci_hcd: disconnect device [ 52.176452][ T4733] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.179031][ T31] vhci_hcd: stop threads [ 52.194669][ T3402] usb 3-4: new high-speed USB device number 2 using vhci_hcd [ 52.198166][ T31] vhci_hcd: release socket [ 52.209944][ T31] vhci_hcd: disconnect device [ 52.209995][ T3402] usb 3-4: enqueue for inactive port 3 [ 52.210013][ T3402] usb 3-4: enqueue for inactive port 3 [ 52.210028][ T3402] usb 3-4: enqueue for inactive port 3 [ 52.230796][ T31] vhci_hcd: stop threads [ 52.230979][ T31] vhci_hcd: release socket [ 52.231058][ T31] vhci_hcd: disconnect device [ 52.231126][ T31] vhci_hcd: stop threads [ 52.231132][ T31] vhci_hcd: release socket [ 52.231141][ T31] vhci_hcd: disconnect device [ 52.274481][ T3402] vhci_hcd: vhci_device speed not set [ 52.286125][ T4733] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.575447][ T4771] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 52.614808][ T4774] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 52.807788][ T4736] vhci_hcd: connection closed [ 52.823754][ T4782] loop1: detected capacity change from 0 to 1024 [ 52.953179][ T4788] loop3: detected capacity change from 0 to 1024 [ 52.977963][ T4788] EXT4-fs: Ignoring removed bh option [ 53.166226][ T41] vhci_hcd: stop threads [ 53.170527][ T41] vhci_hcd: release socket [ 53.178128][ T41] vhci_hcd: disconnect device [ 53.191243][ T4788] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 53.257219][ T4796] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 53.265465][ T4796] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 53.354888][ T4788] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.458871][ T4788] __nla_validate_parse: 25 callbacks suppressed [ 53.458920][ T4788] netlink: 68 bytes leftover after parsing attributes in process `syz.3.404'. [ 53.485082][ T4817] netlink: 52 bytes leftover after parsing attributes in process `syz.2.411'. [ 53.494798][ T4812] loop1: detected capacity change from 0 to 1024 [ 53.515174][ T4788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.526698][ T4812] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.539035][ T4812] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.543463][ T4823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.414'. [ 53.633482][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.644235][ T3375] IPVS: starting estimator thread 0... [ 53.686711][ T4840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.417'. [ 53.711979][ T4845] loop3: detected capacity change from 0 to 512 [ 53.730351][ T4845] lo speed is unknown, defaulting to 1000 [ 53.736419][ T4845] lo speed is unknown, defaulting to 1000 [ 53.738898][ T4832] IPVS: using max 2784 ests per chain, 139200 per kthread [ 53.742658][ T4845] lo speed is unknown, defaulting to 1000 [ 53.755950][ T4845] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 53.787932][ T4845] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 53.803025][ T4845] lo speed is unknown, defaulting to 1000 [ 53.809394][ T4856] loop3: detected capacity change from 0 to 164 [ 53.810259][ T4845] lo speed is unknown, defaulting to 1000 [ 53.829786][ T4845] lo speed is unknown, defaulting to 1000 [ 53.837293][ T4845] lo speed is unknown, defaulting to 1000 [ 53.849116][ T4845] lo speed is unknown, defaulting to 1000 [ 53.849876][ T4862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.863890][ T4862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.875049][ T4864] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 53.930101][ T4866] siw: device registration error -23 [ 54.024274][ T4870] bond_slave_0: entered promiscuous mode [ 54.030253][ T4870] bond_slave_1: entered promiscuous mode [ 54.345054][ T4888] loop1: detected capacity change from 0 to 2048 [ 54.375109][ T4888] loop1: p1 < > p4 [ 54.379945][ T4888] loop1: p4 size 8388608 extends beyond EOD, truncated [ 54.409826][ T4890] loop4: detected capacity change from 0 to 1024 [ 54.433626][ T4892] netlink: 48 bytes leftover after parsing attributes in process `syz.4.440'. [ 54.471886][ T4900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.442'. [ 54.483887][ T4900] bridge0: entered promiscuous mode [ 54.489573][ T4900] macsec1: entered allmulticast mode [ 54.495041][ T4900] bridge0: entered allmulticast mode [ 54.501800][ T4900] bridge0: port 3(macsec1) entered blocking state [ 54.508524][ T4900] bridge0: port 3(macsec1) entered disabled state [ 54.516289][ T4900] bridge0: left allmulticast mode [ 54.521536][ T4900] bridge0: left promiscuous mode [ 54.698790][ T4908] loop2: detected capacity change from 0 to 512 [ 54.705511][ T4908] EXT4-fs: Ignoring removed nobh option [ 54.713029][ T4908] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 54.722308][ T4908] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.444: attempt to clear invalid blocks 1 len 1 [ 54.737143][ T4908] EXT4-fs (loop2): Remounting filesystem read-only [ 54.744224][ T4908] EXT4-fs (loop2): 1 truncate cleaned up [ 54.752109][ T4908] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.765313][ T4908] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.775467][ T4915] loop0: detected capacity change from 0 to 1024 [ 54.795938][ T4915] EXT4-fs: Ignoring removed bh option [ 54.811397][ T4911] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 54.830534][ T4915] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 54.858249][ T4915] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.882976][ T4915] netlink: 68 bytes leftover after parsing attributes in process `syz.0.446'. [ 54.907214][ T4915] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.009433][ T4943] loop0: detected capacity change from 0 to 1024 [ 55.017131][ T4943] EXT4-fs: Ignoring removed bh option [ 55.025795][ T4943] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 55.047788][ T4943] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.067582][ T4943] netlink: 68 bytes leftover after parsing attributes in process `syz.0.457'. [ 55.102343][ T4943] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.124849][ T4951] loop0: detected capacity change from 0 to 128 [ 55.132190][ T4951] /dev/loop0: Can't open blockdev [ 55.142403][ T4951] SELinux: security_context_str_to_sid (Ö$iªßþqrãðï埋A³?U·±<{ט'Ó5?}}ÓwõÖÿüÎzë¯-&½×“\k·OßÅáýwv7ÿÍñÎócø—Šû?5Ùú'ý¶QoýÙäÓÁüsmÔüSæ¶ázôüÓ=þËgôʯcž) failed with errno=-22 [ 55.201041][ T4955] SELinux: policydb version 97793603 does not match my version range 15-35 [ 55.211000][ T4955] SELinux: failed to load policy [ 55.251023][ T4957] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=4957 comm=syz.0.461 [ 55.302979][ T4963] FAULT_INJECTION: forcing a failure. [ 55.302979][ T4963] name failslab, interval 1, probability 0, space 0, times 0 [ 55.316276][ T4963] CPU: 0 UID: 0 PID: 4963 Comm: syz.1.463 Not tainted syzkaller #0 PREEMPT(voluntary) [ 55.316303][ T4963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 55.316375][ T4963] Call Trace: [ 55.316383][ T4963] [ 55.316391][ T4963] __dump_stack+0x1d/0x30 [ 55.316412][ T4963] dump_stack_lvl+0xe8/0x140 [ 55.316454][ T4963] dump_stack+0x15/0x1b [ 55.316467][ T4963] should_fail_ex+0x265/0x280 [ 55.316486][ T4963] should_failslab+0x8c/0xb0 [ 55.316619][ T4963] kmem_cache_alloc_node_noprof+0x57/0x320 [ 55.316649][ T4963] ? __alloc_skb+0x101/0x320 [ 55.316678][ T4963] __alloc_skb+0x101/0x320 [ 55.316704][ T4963] netlink_ack+0xfd/0x500 [ 55.316724][ T4963] netlink_rcv_skb+0x192/0x220 [ 55.316800][ T4963] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 55.316846][ T4963] rtnetlink_rcv+0x1c/0x30 [ 55.316915][ T4963] netlink_unicast+0x5c0/0x690 [ 55.316949][ T4963] netlink_sendmsg+0x58b/0x6b0 [ 55.316968][ T4963] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.317050][ T4963] __sock_sendmsg+0x145/0x180 [ 55.317075][ T4963] ____sys_sendmsg+0x31e/0x4e0 [ 55.317172][ T4963] ___sys_sendmsg+0x17b/0x1d0 [ 55.317200][ T4963] __x64_sys_sendmsg+0xd4/0x160 [ 55.317252][ T4963] x64_sys_call+0x191e/0x2ff0 [ 55.317273][ T4963] do_syscall_64+0xd2/0x200 [ 55.317299][ T4963] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 55.317377][ T4963] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 55.317400][ T4963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.317422][ T4963] RIP: 0033:0x7f18ae7bebe9 [ 55.317475][ T4963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.317489][ T4963] RSP: 002b:00007f18ad21f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.317507][ T4963] RAX: ffffffffffffffda RBX: 00007f18ae9e5fa0 RCX: 00007f18ae7bebe9 [ 55.317541][ T4963] RDX: 0000000020000800 RSI: 0000200000000900 RDI: 0000000000000007 [ 55.317635][ T4963] RBP: 00007f18ad21f090 R08: 0000000000000000 R09: 0000000000000000 [ 55.317647][ T4963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.317660][ T4963] R13: 00007f18ae9e6038 R14: 00007f18ae9e5fa0 R15: 00007fffd1807938 [ 55.317679][ T4963] [ 55.579762][ T4967] loop1: detected capacity change from 0 to 1024 [ 55.589693][ T4967] EXT4-fs: Ignoring removed bh option [ 55.596908][ T4967] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 55.617082][ T4967] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.624817][ T4971] netlink: 52 bytes leftover after parsing attributes in process `syz.0.465'. [ 55.650133][ T4967] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.701753][ T4984] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 55.753428][ T4986] loop0: detected capacity change from 0 to 1024 [ 55.767379][ T4991] loop3: detected capacity change from 0 to 512 [ 55.787317][ T4991] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.800833][ T4991] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.861057][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.917718][ T5010] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 56.043818][ T5023] loop4: detected capacity change from 0 to 512 [ 56.052080][ T5023] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.485: Unrecognised inode hash code 15 [ 56.063730][ T5023] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.485: Corrupt directory, running e2fsck is recommended [ 56.077806][ T5023] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 56.087624][ T5023] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.485: corrupted in-inode xattr: invalid ea_ino [ 56.101515][ T5023] EXT4-fs (loop4): Remounting filesystem read-only [ 56.111332][ T5023] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.124669][ T5023] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.192241][ T5037] loop0: detected capacity change from 0 to 1024 [ 56.206093][ T5037] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.219668][ T5037] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.256807][ T5041] loop4: detected capacity change from 0 to 1024 [ 56.265971][ T5041] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.278298][ T5041] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.295672][ T5041] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 1: comm syz.4.492: lblock 1 mapped to illegal pblock 1 (length 15) [ 56.310457][ T5041] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 56.323079][ T5041] EXT4-fs (loop4): This should not happen!! Data will be lost [ 56.323079][ T5041] [ 56.448388][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.511715][ T5008] netlink: 'syz.2.475': attribute type 1 has an invalid length. [ 56.538030][ T5051] loop4: detected capacity change from 0 to 1024 [ 56.546440][ T5051] EXT4-fs: Ignoring removed orlov option [ 56.558846][ T5051] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.568087][ T5055] loop1: detected capacity change from 0 to 128 [ 56.579217][ T5055] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 56.591700][ T5055] ext4 filesystem being mounted at /91/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 56.631391][ T5048] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.494: bg 0: block 88: padding at end of block bitmap is not set [ 56.717621][ T3300] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.722966][ T5048] lo speed is unknown, defaulting to 1000 [ 56.739669][ T5062] loop2: detected capacity change from 0 to 128 [ 56.809465][ T5066] loop1: detected capacity change from 0 to 128 [ 56.823822][ T5068] loop3: detected capacity change from 0 to 512 [ 56.833389][ T5066] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 56.846515][ T5066] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.864090][ T5068] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.908645][ T5066] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.931954][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.944767][ T29] kauditd_printk_skb: 1037 callbacks suppressed [ 56.944782][ T29] audit: type=1400 audit(1755875554.184:4490): avc: denied { bind } for pid=5067 comm="syz.3.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 56.974766][ T29] audit: type=1400 audit(1755875554.214:4491): avc: denied { write } for pid=5067 comm="syz.3.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 57.005709][ T29] audit: type=1400 audit(1755875554.254:4492): avc: denied { compute_member } for pid=5065 comm="syz.1.500" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 57.028993][ T29] audit: type=1400 audit(1755875554.274:4493): avc: denied { create } for pid=5067 comm="syz.3.501" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 57.051865][ T29] audit: type=1400 audit(1755875554.274:4494): avc: denied { write } for pid=5067 comm="syz.3.501" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 57.072928][ T29] audit: type=1400 audit(1755875554.274:4495): avc: denied { nlmsg_read } for pid=5067 comm="syz.3.501" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 57.102882][ T5074] IPVS: stopping master sync thread 5076 ... [ 57.103259][ T5076] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 2, id = 0 [ 57.163926][ T4801] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 15) [ 57.184247][ T4801] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 57.196862][ T4801] EXT4-fs (loop0): This should not happen!! Data will be lost [ 57.196862][ T4801] [ 57.207961][ T5080] FAULT_INJECTION: forcing a failure. [ 57.207961][ T5080] name failslab, interval 1, probability 0, space 0, times 0 [ 57.220908][ T5080] CPU: 0 UID: 0 PID: 5080 Comm: syz.4.505 Not tainted syzkaller #0 PREEMPT(voluntary) [ 57.220932][ T5080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 57.220944][ T5080] Call Trace: [ 57.220950][ T5080] [ 57.220957][ T5080] __dump_stack+0x1d/0x30 [ 57.220981][ T5080] dump_stack_lvl+0xe8/0x140 [ 57.221001][ T5080] dump_stack+0x15/0x1b [ 57.221057][ T5080] should_fail_ex+0x265/0x280 [ 57.221080][ T5080] should_failslab+0x8c/0xb0 [ 57.221135][ T5080] kmem_cache_alloc_noprof+0x50/0x310 [ 57.221161][ T5080] ? skb_clone+0x151/0x1f0 [ 57.221185][ T5080] skb_clone+0x151/0x1f0 [ 57.221207][ T5080] nfnetlink_rcv+0x305/0x1690 [ 57.221272][ T5080] ? nlmon_xmit+0x4f/0x60 [ 57.221292][ T5080] ? consume_skb+0x49/0x150 [ 57.221307][ T5080] ? nlmon_xmit+0x4f/0x60 [ 57.221330][ T5080] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 57.221428][ T5080] ? __dev_queue_xmit+0x1200/0x2000 [ 57.221470][ T5080] ? __dev_queue_xmit+0x182/0x2000 [ 57.221488][ T5080] ? ref_tracker_free+0x37d/0x3e0 [ 57.221515][ T5080] netlink_unicast+0x5c0/0x690 [ 57.221552][ T5080] netlink_sendmsg+0x58b/0x6b0 [ 57.221636][ T5080] ? __pfx_netlink_sendmsg+0x10/0x10 [ 57.221655][ T5080] __sock_sendmsg+0x145/0x180 [ 57.221678][ T5080] ____sys_sendmsg+0x31e/0x4e0 [ 57.221700][ T5080] ___sys_sendmsg+0x17b/0x1d0 [ 57.221732][ T5080] __x64_sys_sendmsg+0xd4/0x160 [ 57.221758][ T5080] x64_sys_call+0x191e/0x2ff0 [ 57.221883][ T5080] do_syscall_64+0xd2/0x200 [ 57.221910][ T5080] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 57.221934][ T5080] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 57.221959][ T5080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.222048][ T5080] RIP: 0033:0x7fbb9997ebe9 [ 57.222061][ T5080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.222075][ T5080] RSP: 002b:00007fbb983e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 57.222091][ T5080] RAX: ffffffffffffffda RBX: 00007fbb99ba5fa0 RCX: 00007fbb9997ebe9 [ 57.222102][ T5080] RDX: 0000000020008000 RSI: 0000200000000500 RDI: 0000000000000006 [ 57.222116][ T5080] RBP: 00007fbb983e7090 R08: 0000000000000000 R09: 0000000000000000 [ 57.222200][ T5080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.222211][ T5080] R13: 00007fbb99ba6038 R14: 00007fbb99ba5fa0 R15: 00007ffff0791538 [ 57.222226][ T5080] [ 57.473222][ T4801] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 57.496451][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.517289][ T4801] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2052 with max blocks 2048 with error 28 [ 57.530543][ T4801] EXT4-fs (loop0): This should not happen!! Data will be lost [ 57.530543][ T4801] [ 57.540557][ T4801] EXT4-fs (loop0): Total free blocks count 0 [ 57.547012][ T4801] EXT4-fs (loop0): Free/Dirty block details [ 57.553306][ T4801] EXT4-fs (loop0): free_blocks=4293918720 [ 57.559407][ T4801] EXT4-fs (loop0): dirty_blocks=14352 [ 57.565166][ T4801] EXT4-fs (loop0): Block reservation details [ 57.568016][ T5086] loop4: detected capacity change from 0 to 256 [ 57.613384][ T5092] pim6reg: entered allmulticast mode [ 57.619796][ T5092] pim6reg: left allmulticast mode [ 57.640278][ T5094] loop3: detected capacity change from 0 to 1024 [ 57.656226][ T5094] EXT4-fs: Ignoring removed bh option [ 57.662227][ T5094] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 57.677306][ T5099] loop2: detected capacity change from 0 to 1024 [ 57.684278][ T5099] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 57.697475][ T5094] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.734948][ T29] audit: type=1326 audit(1755875554.984:4496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5109 comm="syz.2.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31e8aebe9 code=0x7ffc0000 [ 57.767005][ T5094] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.773019][ T29] audit: type=1326 audit(1755875555.004:4497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5109 comm="syz.2.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fe31e8aebe9 code=0x7ffc0000 [ 57.800730][ T29] audit: type=1326 audit(1755875555.004:4498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5109 comm="syz.2.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31e8aebe9 code=0x7ffc0000 [ 57.824678][ T29] audit: type=1326 audit(1755875555.004:4499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5109 comm="syz.2.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe31e8aebe9 code=0x7ffc0000 [ 57.855215][ T5122] loop0: detected capacity change from 0 to 512 [ 57.861918][ T5122] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 57.873987][ T5122] EXT4-fs (loop0): 1 truncate cleaned up [ 57.881307][ T5122] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.895853][ T5122] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.964672][ T5122] loop0: detected capacity change from 512 to 64 [ 58.043865][ T5138] FAULT_INJECTION: forcing a failure. [ 58.043865][ T5138] name failslab, interval 1, probability 0, space 0, times 0 [ 58.056681][ T5138] CPU: 0 UID: 0 PID: 5138 Comm: syz.3.524 Not tainted syzkaller #0 PREEMPT(voluntary) [ 58.056737][ T5138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 58.056758][ T5138] Call Trace: [ 58.056766][ T5138] [ 58.056775][ T5138] __dump_stack+0x1d/0x30 [ 58.056814][ T5138] dump_stack_lvl+0xe8/0x140 [ 58.056834][ T5138] dump_stack+0x15/0x1b [ 58.056851][ T5138] should_fail_ex+0x265/0x280 [ 58.056971][ T5138] should_failslab+0x8c/0xb0 [ 58.057133][ T5138] kmem_cache_alloc_noprof+0x50/0x310 [ 58.057156][ T5138] ? skb_clone+0x151/0x1f0 [ 58.057175][ T5138] skb_clone+0x151/0x1f0 [ 58.057195][ T5138] nfnetlink_rcv+0x305/0x1690 [ 58.057278][ T5138] ? nlmon_xmit+0x4f/0x60 [ 58.057301][ T5138] ? consume_skb+0x49/0x150 [ 58.057319][ T5138] ? nlmon_xmit+0x4f/0x60 [ 58.057413][ T5138] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 58.057427][ T5138] ? __dev_queue_xmit+0x1200/0x2000 [ 58.057438][ T5138] ? __dev_queue_xmit+0x182/0x2000 [ 58.057450][ T5138] ? ref_tracker_free+0x37d/0x3e0 [ 58.057502][ T5138] netlink_unicast+0x5c0/0x690 [ 58.057523][ T5138] netlink_sendmsg+0x58b/0x6b0 [ 58.057591][ T5138] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.057603][ T5138] __sock_sendmsg+0x145/0x180 [ 58.057618][ T5138] ____sys_sendmsg+0x31e/0x4e0 [ 58.057711][ T5138] ___sys_sendmsg+0x17b/0x1d0 [ 58.057736][ T5138] __x64_sys_sendmsg+0xd4/0x160 [ 58.057750][ T5138] x64_sys_call+0x191e/0x2ff0 [ 58.057766][ T5138] do_syscall_64+0xd2/0x200 [ 58.057782][ T5138] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 58.057797][ T5138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.057884][ T5138] RIP: 0033:0x7fe5be00ebe9 [ 58.057900][ T5138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.057941][ T5138] RSP: 002b:00007fe5bca6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.057956][ T5138] RAX: ffffffffffffffda RBX: 00007fe5be235fa0 RCX: 00007fe5be00ebe9 [ 58.057963][ T5138] RDX: 0000000020008000 RSI: 0000200000000500 RDI: 0000000000000006 [ 58.057971][ T5138] RBP: 00007fe5bca6f090 R08: 0000000000000000 R09: 0000000000000000 [ 58.057978][ T5138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.058054][ T5138] R13: 00007fe5be236038 R14: 00007fe5be235fa0 R15: 00007ffd7e1d7a48 [ 58.058064][ T5138] [ 58.356422][ T5146] loop3: detected capacity change from 0 to 1024 [ 58.363462][ T5146] EXT4-fs: Ignoring removed bh option [ 58.369593][ T5146] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 58.387088][ T5146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.413614][ T5146] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.558922][ T5164] __nla_validate_parse: 23 callbacks suppressed [ 58.558941][ T5164] netlink: 52 bytes leftover after parsing attributes in process `syz.1.534'. [ 58.574830][ T5164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.534'. [ 58.583845][ T5164] netlink: 52 bytes leftover after parsing attributes in process `syz.1.534'. [ 58.592827][ T5164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.534'. [ 58.601824][ T5164] netlink: 52 bytes leftover after parsing attributes in process `syz.1.534'. [ 58.621255][ T5165] lo speed is unknown, defaulting to 1000 [ 58.653570][ T5165] loop3: detected capacity change from 0 to 1024 [ 58.660693][ T5165] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 58.672722][ T5165] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 58.683525][ T5165] JBD2: no valid journal superblock found [ 58.689485][ T5165] EXT4-fs (loop3): Could not load journal inode [ 58.690438][ T5171] loop1: detected capacity change from 0 to 1024 [ 58.706475][ T5165] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 58.707314][ T5171] EXT4-fs: inline encryption not supported [ 58.723216][ T5171] EXT4-fs: Ignoring removed i_version option [ 58.733650][ T5171] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 58.746049][ T5171] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.536: lblock 2 mapped to illegal pblock 2 (length 1) [ 58.760776][ T5171] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.536: lblock 0 mapped to illegal pblock 48 (length 1) [ 58.771991][ T5173] lo speed is unknown, defaulting to 1000 [ 58.775614][ T5171] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.536: Failed to acquire dquot type 0 [ 58.792568][ T5171] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 58.806016][ T5171] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.536: mark_inode_dirty error [ 58.817592][ T5171] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 58.828420][ T5171] EXT4-fs (loop1): 1 orphan inode deleted [ 58.845193][ T12] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 58.860120][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:0: Failed to release dquot type 0 [ 58.894936][ T5181] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.536' sets config #3 [ 58.906777][ T5181] hub 9-0:1.0: USB hub found [ 58.911482][ T5181] hub 9-0:1.0: 8 ports detected [ 58.943645][ T5183] loop2: detected capacity change from 0 to 1024 [ 58.950777][ T5183] EXT4-fs: Ignoring removed bh option [ 58.957980][ T5183] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 58.978749][ T5183] netlink: 68 bytes leftover after parsing attributes in process `syz.2.540'. [ 59.292116][ T5192] loop4: detected capacity change from 0 to 256 [ 59.302849][ T5192] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 59.311712][ T5192] FAT-fs (loop4): Filesystem has been set read-only [ 59.325630][ T5194] FAULT_INJECTION: forcing a failure. [ 59.325630][ T5194] name failslab, interval 1, probability 0, space 0, times 0 [ 59.338618][ T5194] CPU: 1 UID: 0 PID: 5194 Comm: syz.3.543 Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.338728][ T5194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 59.338740][ T5194] Call Trace: [ 59.338749][ T5194] [ 59.338758][ T5194] __dump_stack+0x1d/0x30 [ 59.338779][ T5194] dump_stack_lvl+0xe8/0x140 [ 59.338799][ T5194] dump_stack+0x15/0x1b [ 59.338815][ T5194] should_fail_ex+0x265/0x280 [ 59.338842][ T5194] should_failslab+0x8c/0xb0 [ 59.338879][ T5194] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 59.338903][ T5194] ? __d_alloc+0x3d/0x340 [ 59.338927][ T5194] __d_alloc+0x3d/0x340 [ 59.338951][ T5194] d_alloc+0x2e/0x100 [ 59.338978][ T5194] lookup_one_qstr_excl+0x99/0x250 [ 59.339010][ T5194] do_renameat2+0x3c4/0xa10 [ 59.339187][ T5194] __x64_sys_rename+0x58/0x70 [ 59.339207][ T5194] x64_sys_call+0x1f9/0x2ff0 [ 59.339226][ T5194] do_syscall_64+0xd2/0x200 [ 59.339249][ T5194] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 59.339322][ T5194] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 59.339386][ T5194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.339407][ T5194] RIP: 0033:0x7fe5be00ebe9 [ 59.339424][ T5194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.339508][ T5194] RSP: 002b:00007fe5bca6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 59.339528][ T5194] RAX: ffffffffffffffda RBX: 00007fe5be235fa0 RCX: 00007fe5be00ebe9 [ 59.339538][ T5194] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000080 [ 59.339550][ T5194] RBP: 00007fe5bca6f090 R08: 0000000000000000 R09: 0000000000000000 [ 59.339636][ T5194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 59.339647][ T5194] R13: 00007fe5be236038 R14: 00007fe5be235fa0 R15: 00007ffd7e1d7a48 [ 59.339665][ T5194] [ 59.535845][ T5196] loop4: detected capacity change from 0 to 1024 [ 59.546418][ T3300] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 59.560096][ T5196] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.562141][ T3300] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 59.573158][ T5196] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 3: comm syz.4.544: lblock 3 mapped to illegal pblock 3 (length 3) [ 59.582036][ T3300] EXT4-fs error (device loop1): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 59.595677][ T5196] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 59.619480][ T5196] EXT4-fs (loop4): This should not happen!! Data will be lost [ 59.619480][ T5196] [ 59.630016][ T5196] EXT4-fs error (device loop4): ext4_ext_remove_space:2955: inode #15: comm syz.4.544: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 59.649091][ T5196] EXT4-fs error (device loop4) in ext4_setattr:6071: Corrupt filesystem [ 59.667617][ T5200] netlink: 52 bytes leftover after parsing attributes in process `syz.3.546'. [ 59.668005][ T5202] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 59.676658][ T5200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.546'. [ 59.692725][ T5200] netlink: 52 bytes leftover after parsing attributes in process `syz.3.546'. [ 59.702112][ T5200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.546'. [ 59.740766][ T5207] netlink: 'syz.4.547': attribute type 1 has an invalid length. [ 59.757980][ T5207] 8021q: adding VLAN 0 to HW filter on device bond3 [ 59.786016][ T5211] FAULT_INJECTION: forcing a failure. [ 59.786016][ T5211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.796962][ T5207] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 59.799523][ T5211] CPU: 1 UID: 0 PID: 5211 Comm: syz.3.549 Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.799551][ T5211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 59.799564][ T5211] Call Trace: [ 59.799639][ T5211] [ 59.799664][ T5211] __dump_stack+0x1d/0x30 [ 59.799690][ T5211] dump_stack_lvl+0xe8/0x140 [ 59.799789][ T5211] dump_stack+0x15/0x1b [ 59.799805][ T5211] should_fail_ex+0x265/0x280 [ 59.799828][ T5211] should_fail+0xb/0x20 [ 59.799936][ T5211] should_fail_usercopy+0x1a/0x20 [ 59.799959][ T5211] _copy_from_user+0x1c/0xb0 [ 59.799988][ T5211] ___sys_sendmsg+0xc1/0x1d0 [ 59.800024][ T5211] __x64_sys_sendmsg+0xd4/0x160 [ 59.800165][ T5211] x64_sys_call+0x191e/0x2ff0 [ 59.800187][ T5211] do_syscall_64+0xd2/0x200 [ 59.800215][ T5211] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 59.800278][ T5211] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 59.800304][ T5211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.800325][ T5211] RIP: 0033:0x7fe5be00ebe9 [ 59.800342][ T5211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.800357][ T5211] RSP: 002b:00007fe5bca6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.800430][ T5211] RAX: ffffffffffffffda RBX: 00007fe5be235fa0 RCX: 00007fe5be00ebe9 [ 59.800443][ T5211] RDX: 0000000000040010 RSI: 0000200000006040 RDI: 0000000000000003 [ 59.800456][ T5211] RBP: 00007fe5bca6f090 R08: 0000000000000000 R09: 0000000000000000 [ 59.800468][ T5211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.800480][ T5211] R13: 00007fe5be236038 R14: 00007fe5be235fa0 R15: 00007ffd7e1d7a48 [ 59.800550][ T5211] [ 59.984630][ T5207] bond3: (slave batadv1): making interface the new active one [ 59.985665][ T5207] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 60.009064][ T5222] pim6reg: entered allmulticast mode [ 60.012455][ T5222] pim6reg: left allmulticast mode [ 60.031287][ T5230] loop4: detected capacity change from 0 to 128 [ 60.041041][ T5230] ext4 filesystem being mounted at /112/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 60.079590][ T5232] loop1: detected capacity change from 0 to 1024 [ 60.086956][ T5232] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 60.119450][ T5238] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 60.174743][ T5245] loop2: detected capacity change from 0 to 1024 [ 60.187234][ T5245] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.198468][ T5250] loop1: detected capacity change from 0 to 1024 [ 60.207269][ T5245] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm syz.2.561: lblock 1 mapped to illegal pblock 1 (length 15) [ 60.222914][ T5245] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 60.228181][ T5253] loop1: detected capacity change from 0 to 512 [ 60.235563][ T5245] EXT4-fs (loop2): This should not happen!! Data will be lost [ 60.235563][ T5245] [ 60.274913][ T5257] loop1: detected capacity change from 0 to 1024 [ 60.305186][ T5261] FAULT_INJECTION: forcing a failure. [ 60.305186][ T5261] name failslab, interval 1, probability 0, space 0, times 0 [ 60.318143][ T5261] CPU: 0 UID: 0 PID: 5261 Comm: syz.2.565 Not tainted syzkaller #0 PREEMPT(voluntary) [ 60.318168][ T5261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 60.318179][ T5261] Call Trace: [ 60.318186][ T5261] [ 60.318261][ T5261] __dump_stack+0x1d/0x30 [ 60.318283][ T5261] dump_stack_lvl+0xe8/0x140 [ 60.318302][ T5261] dump_stack+0x15/0x1b [ 60.318386][ T5261] should_fail_ex+0x265/0x280 [ 60.318408][ T5261] should_failslab+0x8c/0xb0 [ 60.318430][ T5261] kmem_cache_alloc_noprof+0x50/0x310 [ 60.318537][ T5261] ? sk_prot_alloc+0x3f/0x190 [ 60.318557][ T5261] ? should_failslab+0x8c/0xb0 [ 60.318581][ T5261] sk_prot_alloc+0x3f/0x190 [ 60.318612][ T5261] sk_alloc+0x34/0x360 [ 60.318627][ T5261] inet6_create+0x3bd/0x870 [ 60.318655][ T5261] __sock_create+0x2ec/0x5b0 [ 60.318713][ T5261] sock_create_kern+0x38/0x50 [ 60.318740][ T5261] udp_sock_create6+0x68/0x3d0 [ 60.318811][ T5261] fou_nl_add_doit+0xd8/0x410 [ 60.318846][ T5261] genl_family_rcv_msg_doit+0x143/0x1b0 [ 60.318920][ T5261] genl_rcv_msg+0x422/0x460 [ 60.319014][ T5261] ? __pfx_fou_nl_add_doit+0x10/0x10 [ 60.319047][ T5261] netlink_rcv_skb+0x120/0x220 [ 60.319117][ T5261] ? __pfx_genl_rcv_msg+0x10/0x10 [ 60.319181][ T5261] genl_rcv+0x28/0x40 [ 60.319202][ T5261] netlink_unicast+0x5c0/0x690 [ 60.319300][ T5261] netlink_sendmsg+0x58b/0x6b0 [ 60.319352][ T5261] ? __pfx_netlink_sendmsg+0x10/0x10 [ 60.319374][ T5261] __sock_sendmsg+0x145/0x180 [ 60.319487][ T5261] ____sys_sendmsg+0x31e/0x4e0 [ 60.319584][ T5261] ___sys_sendmsg+0x17b/0x1d0 [ 60.319615][ T5261] __x64_sys_sendmsg+0xd4/0x160 [ 60.319639][ T5261] x64_sys_call+0x191e/0x2ff0 [ 60.319661][ T5261] do_syscall_64+0xd2/0x200 [ 60.319693][ T5261] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 60.319715][ T5261] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 60.319760][ T5261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.319781][ T5261] RIP: 0033:0x7fe31e8aebe9 [ 60.319797][ T5261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.319813][ T5261] RSP: 002b:00007fe31d30f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.319833][ T5261] RAX: ffffffffffffffda RBX: 00007fe31ead5fa0 RCX: 00007fe31e8aebe9 [ 60.319846][ T5261] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 60.319859][ T5261] RBP: 00007fe31d30f090 R08: 0000000000000000 R09: 0000000000000000 [ 60.319873][ T5261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.319885][ T5261] R13: 00007fe31ead6038 R14: 00007fe31ead5fa0 R15: 00007ffe90dcdcd8 [ 60.319904][ T5261] [ 60.611405][ T5264] loop3: detected capacity change from 0 to 1024 [ 60.618505][ T5264] EXT4-fs: Ignoring removed bh option [ 60.624723][ T5264] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 60.672877][ T5272] loop1: detected capacity change from 0 to 512 [ 60.690776][ T5272] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.823403][ T5283] loop3: detected capacity change from 0 to 128 [ 60.839174][ T5285] pim6reg: entered allmulticast mode [ 60.889304][ T5285] pim6reg: left allmulticast mode [ 60.953918][ T5288] loop0: detected capacity change from 0 to 1024 [ 60.968132][ T5290] loop1: detected capacity change from 0 to 512 [ 60.986358][ T5288] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 61.115183][ T5294] loop4: detected capacity change from 0 to 1024 [ 61.136035][ T5294] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.362600][ T5306] loop1: detected capacity change from 0 to 1024 [ 61.374036][ T5306] EXT4-fs: Ignoring removed bh option [ 61.385127][ T5306] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 61.528107][ T5317] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 61.659837][ T5325] FAULT_INJECTION: forcing a failure. [ 61.659837][ T5325] name failslab, interval 1, probability 0, space 0, times 0 [ 61.661835][ T5323] loop4: detected capacity change from 0 to 512 [ 61.672817][ T5325] CPU: 0 UID: 0 PID: 5325 Comm: syz.3.588 Not tainted syzkaller #0 PREEMPT(voluntary) [ 61.672841][ T5325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 61.672851][ T5325] Call Trace: [ 61.672856][ T5325] [ 61.672864][ T5325] __dump_stack+0x1d/0x30 [ 61.672885][ T5325] dump_stack_lvl+0xe8/0x140 [ 61.672902][ T5325] dump_stack+0x15/0x1b [ 61.672929][ T5325] should_fail_ex+0x265/0x280 [ 61.673025][ T5325] should_failslab+0x8c/0xb0 [ 61.673049][ T5325] kmem_cache_alloc_noprof+0x50/0x310 [ 61.673073][ T5325] ? alloc_empty_file+0x76/0x200 [ 61.673127][ T5325] alloc_empty_file+0x76/0x200 [ 61.673154][ T5325] alloc_file_pseudo+0xc6/0x160 [ 61.673222][ T5325] anon_inode_getfd+0xc1/0x150 [ 61.673253][ T5325] btf_new_fd+0x652/0x790 [ 61.673274][ T5325] bpf_btf_load+0x112/0x130 [ 61.673302][ T5325] __sys_bpf+0x352/0x7b0 [ 61.673394][ T5325] __x64_sys_bpf+0x41/0x50 [ 61.673416][ T5325] x64_sys_call+0x2aea/0x2ff0 [ 61.673457][ T5325] do_syscall_64+0xd2/0x200 [ 61.673489][ T5325] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 61.673513][ T5325] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 61.673537][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.673564][ T5325] RIP: 0033:0x7fe5be00ebe9 [ 61.673644][ T5325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.673659][ T5325] RSP: 002b:00007fe5bca6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 61.673760][ T5325] RAX: ffffffffffffffda RBX: 00007fe5be235fa0 RCX: 00007fe5be00ebe9 [ 61.673781][ T5325] RDX: 0000000000000028 RSI: 00002000000001c0 RDI: 0000000000000012 [ 61.673799][ T5325] RBP: 00007fe5bca6f090 R08: 0000000000000000 R09: 0000000000000000 [ 61.673818][ T5325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 61.673842][ T5325] R13: 00007fe5be236038 R14: 00007fe5be235fa0 R15: 00007ffd7e1d7a48 [ 61.673859][ T5325] [ 61.890211][ T5331] tmpfs: Bad value for 'mpol' [ 62.019565][ T5341] loop3: detected capacity change from 0 to 1024 [ 62.027659][ T5341] EXT4-fs: Ignoring removed bh option [ 62.031691][ T5337] loop1: detected capacity change from 0 to 1024 [ 62.033204][ T5341] /dev/loop3: Can't open blockdev [ 62.081484][ T5337] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.178581][ T5354] loop2: detected capacity change from 0 to 1024 [ 62.209841][ T5355] loop4: detected capacity change from 0 to 512 [ 62.236944][ T5355] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.260847][ T5307] Set syz1 is full, maxelem 65536 reached [ 62.273718][ T5350] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.593: corrupted xattr block 32: bad e_name length [ 62.299643][ T5350] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 62.311592][ T5350] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.593: corrupted xattr block 32: bad e_name length [ 62.326555][ T5350] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 62.335654][ T29] kauditd_printk_skb: 500 callbacks suppressed [ 62.335662][ T5350] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.593: corrupted xattr block 32: bad e_name length [ 62.335667][ T29] audit: type=1400 audit(1755875559.584:4997): avc: denied { read } for pid=5348 comm="syz.4.593" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.382883][ T5350] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 62.393433][ T5350] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 62.404002][ T5350] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 62.414186][ T5350] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.593: Failed to acquire dquot type 1 [ 62.414268][ T5366] loop1: detected capacity change from 0 to 1024 [ 62.498266][ T5350] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.593: corrupted xattr block 32: bad e_name length [ 62.517369][ T5377] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 62.525677][ T5350] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 62.535465][ T29] audit: type=1400 audit(1755875559.784:4998): avc: denied { remove_name } for pid=5348 comm="syz.4.593" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.536028][ T5350] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 62.558659][ T29] audit: type=1400 audit(1755875559.784:4999): avc: denied { unlink } for pid=5348 comm="syz.4.593" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.564883][ T5381] loop2: detected capacity change from 0 to 128 [ 62.569576][ T5350] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 62.608958][ T5350] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.593: Failed to acquire dquot type 1 [ 62.715434][ T5386] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 62.740490][ T29] audit: type=1326 audit(1755875559.984:5000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5387 comm="syz.4.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9997ebe9 code=0x7ffc0000 [ 62.764137][ T29] audit: type=1326 audit(1755875559.984:5001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5387 comm="syz.4.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9997ebe9 code=0x7ffc0000 [ 62.789188][ T29] audit: type=1326 audit(1755875559.984:5002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5387 comm="syz.4.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb9997ebe9 code=0x7ffc0000 [ 62.859661][ T5388] bond0 (unregistering): Released all slaves [ 62.900321][ T5393] FAULT_INJECTION: forcing a failure. [ 62.900321][ T5393] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 62.914011][ T5393] CPU: 1 UID: 0 PID: 5393 Comm: syz.1.611 Not tainted syzkaller #0 PREEMPT(voluntary) [ 62.914095][ T5393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 62.914107][ T5393] Call Trace: [ 62.914114][ T5393] [ 62.914122][ T5393] __dump_stack+0x1d/0x30 [ 62.914143][ T5393] dump_stack_lvl+0xe8/0x140 [ 62.914162][ T5393] dump_stack+0x15/0x1b [ 62.914205][ T5393] should_fail_ex+0x265/0x280 [ 62.914226][ T5393] should_fail_alloc_page+0xf2/0x100 [ 62.914253][ T5393] __alloc_frozen_pages_noprof+0xff/0x360 [ 62.914285][ T5393] alloc_pages_mpol+0xb3/0x250 [ 62.914369][ T5393] folio_alloc_mpol_noprof+0x39/0x80 [ 62.914438][ T5393] shmem_get_folio_gfp+0x3cf/0xd60 [ 62.914539][ T5393] shmem_fault+0xf6/0x250 [ 62.914606][ T5393] __do_fault+0xbc/0x200 [ 62.914625][ T5393] handle_mm_fault+0xd69/0x2c20 [ 62.914660][ T5393] ? __rcu_read_lock+0x37/0x50 [ 62.914681][ T5393] ? __pte_offset_map_lock+0x1d4/0x230 [ 62.914713][ T5393] __get_user_pages+0x102e/0x1fa0 [ 62.914825][ T5393] faultin_page_range+0x107/0x4e0 [ 62.914850][ T5393] madvise_do_behavior+0x197/0x970 [ 62.914935][ T5393] ? 0xffffffff81000000 [ 62.914952][ T5393] ? __rcu_read_unlock+0x4f/0x70 [ 62.914977][ T5393] do_madvise+0x10e/0x190 [ 62.915009][ T5393] __x64_sys_madvise+0x64/0x80 [ 62.915031][ T5393] x64_sys_call+0x1f1a/0x2ff0 [ 62.915062][ T5393] do_syscall_64+0xd2/0x200 [ 62.915110][ T5393] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 62.915129][ T5393] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 62.915206][ T5393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.915225][ T5393] RIP: 0033:0x7f18ae7bebe9 [ 62.915241][ T5393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.915255][ T5393] RSP: 002b:00007f18ad1fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 62.915271][ T5393] RAX: ffffffffffffffda RBX: 00007f18ae9e6090 RCX: 00007f18ae7bebe9 [ 62.915348][ T5393] RDX: 0000000000000017 RSI: 0000000000800000 RDI: 00002000000ec000 [ 62.915425][ T5393] RBP: 00007f18ad1fe090 R08: 0000000000000000 R09: 0000000000000000 [ 62.915466][ T5393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 62.915476][ T5393] R13: 00007f18ae9e6128 R14: 00007f18ae9e6090 R15: 00007fffd1807938 [ 62.915493][ T5393] [ 63.175867][ T5395] loop0: detected capacity change from 0 to 1024 [ 63.196874][ T5395] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.441749][ T5413] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 63.503255][ T5411] lo speed is unknown, defaulting to 1000 [ 63.554992][ T5423] loop3: detected capacity change from 0 to 2048 [ 63.614102][ T5423] loop3: p1 < > p4 < > [ 63.722562][ T5425] __nla_validate_parse: 18 callbacks suppressed [ 63.722575][ T5425] netlink: 40 bytes leftover after parsing attributes in process `syz.2.624'. [ 63.744857][ T5438] loop0: detected capacity change from 0 to 1024 [ 63.755356][ T5438] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 63.790407][ T5440] loop3: detected capacity change from 0 to 512 [ 63.876260][ T5448] loop0: detected capacity change from 0 to 1024 [ 63.895996][ T5451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.633'. [ 63.905536][ T5451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.633'. [ 63.931643][ T5451] loop1: detected capacity change from 0 to 512 [ 63.953641][ T5455] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 63.977309][ T5451] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.001417][ T5451] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.633: corrupted xattr block 32: bad e_name length [ 64.015250][ T5459] bond3: (slave batadv1): Releasing active interface [ 64.015824][ T5451] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 64.023143][ T5467] netlink: 'syz.4.636': attribute type 1 has an invalid length. [ 64.033032][ T5451] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.633: corrupted xattr block 32: bad e_name length [ 64.048141][ T5462] netlink: 44 bytes leftover after parsing attributes in process `syz.3.632'. [ 64.063316][ T5453] netlink: 44 bytes leftover after parsing attributes in process `syz.3.632'. [ 64.082077][ T5470] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.633: corrupted xattr block 32: bad e_name length [ 64.096653][ T5451] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 64.113076][ T5451] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.633: corrupted xattr block 32: bad e_name length [ 64.142141][ T5453] hub 8-0:1.0: USB hub found [ 64.147031][ T5453] hub 8-0:1.0: 8 ports detected [ 64.160941][ T5478] loop4: detected capacity change from 0 to 512 [ 64.170890][ T5478] msdos: Unknown parameter 'üïÿ}' [ 64.171874][ T5480] loop0: detected capacity change from 0 to 512 [ 64.182574][ T5451] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 64.192261][ T5470] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 64.209166][ T5451] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.633: Failed to acquire dquot type 1 [ 64.220779][ T5470] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.633: Failed to acquire dquot type 1 [ 64.252817][ T5486] loop0: detected capacity change from 0 to 1024 [ 64.255934][ T5488] netlink: 24 bytes leftover after parsing attributes in process `syz.4.646'. [ 64.318692][ T5490] netlink: 52 bytes leftover after parsing attributes in process `syz.2.647'. [ 64.327807][ T5490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.647'. [ 64.336815][ T5490] netlink: 52 bytes leftover after parsing attributes in process `syz.2.647'. [ 64.345517][ T5492] loop0: detected capacity change from 0 to 1024 [ 64.345839][ T5490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.647'. [ 64.378564][ T5495] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 64.407559][ T5501] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 64.442922][ T5505] loop0: detected capacity change from 0 to 512 [ 64.449936][ T5505] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 64.461479][ T5505] EXT4-fs (loop0): 1 truncate cleaned up [ 64.487192][ T5511] loop2: detected capacity change from 0 to 128 [ 64.504600][ T5505] loop0: detected capacity change from 512 to 64 [ 64.568591][ T5517] loop1: detected capacity change from 0 to 1024 [ 64.575915][ T5517] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 64.673974][ T5525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.682772][ T5525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.728552][ T5527] lo speed is unknown, defaulting to 1000 [ 64.788648][ T5530] loop3: detected capacity change from 0 to 1024 [ 64.798885][ T5530] EXT4-fs: Ignoring removed bh option [ 64.804767][ T5530] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 65.023151][ T5557] loop1: detected capacity change from 0 to 128 [ 65.193411][ T5567] loop4: detected capacity change from 0 to 1024 [ 65.210964][ T5567] EXT4-fs: Ignoring removed bh option [ 65.216761][ T5567] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 65.259688][ T5569] bridge_slave_0: left allmulticast mode [ 65.265453][ T5569] bridge_slave_0: left promiscuous mode [ 65.271231][ T5569] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.290926][ T5569] bridge_slave_1: left allmulticast mode [ 65.296966][ T5569] bridge_slave_1: left promiscuous mode [ 65.302715][ T5569] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.311323][ T5578] netlink: 'syz.2.679': attribute type 1 has an invalid length. [ 65.322831][ T5569] bond0: (slave bond_slave_0): Releasing backup interface [ 65.346677][ T5569] bond0: (slave bond_slave_1): Releasing backup interface [ 65.359771][ T5569] team0: Port device team_slave_0 removed [ 65.374238][ T5569] team0: Port device team_slave_1 removed [ 65.560057][ T5595] loop4: detected capacity change from 0 to 128 [ 66.181123][ T5606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.195527][ T5606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.283321][ T5608] loop4: detected capacity change from 0 to 1024 [ 66.326190][ T5610] loop4: detected capacity change from 0 to 512 [ 66.337293][ T5610] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.350680][ T5610] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.692: corrupted xattr block 32: bad e_name length [ 66.357309][ T5612] netlink: 'syz.2.693': attribute type 1 has an invalid length. [ 66.365878][ T5610] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 66.381882][ T5610] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.692: corrupted xattr block 32: bad e_name length [ 66.396835][ T5610] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 66.406160][ T5610] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.692: corrupted xattr block 32: bad e_name length [ 66.421054][ T5610] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 66.432598][ T5610] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.692: Failed to acquire dquot type 1 [ 66.675668][ T5635] loop4: detected capacity change from 0 to 512 [ 66.686283][ T5635] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.698106][ T5635] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.703: corrupted xattr block 32: bad e_name length [ 66.712372][ T5635] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 66.721694][ T5635] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.703: corrupted xattr block 32: bad e_name length [ 66.735687][ T5635] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 66.744868][ T5635] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.703: corrupted xattr block 32: bad e_name length [ 66.759043][ T5635] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 66.769538][ T5635] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.703: Failed to acquire dquot type 1 [ 66.838202][ T3382] lo speed is unknown, defaulting to 1000 [ 66.842670][ T5641] netlink: 'syz.3.705': attribute type 1 has an invalid length. [ 66.955422][ T5663] loop4: detected capacity change from 0 to 1024 [ 66.962388][ T5663] EXT4-fs: Ignoring removed bh option [ 66.968556][ T5663] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 67.052219][ T5679] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 67.111497][ T5681] netlink: 'syz.3.720': attribute type 1 has an invalid length. [ 67.237964][ T5693] loop3: detected capacity change from 0 to 512 [ 67.267209][ T5696] loop3: detected capacity change from 0 to 1024 [ 67.274382][ T5696] EXT4-fs: Ignoring removed bh option [ 67.281123][ T5696] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 67.333888][ T5705] loop4: detected capacity change from 0 to 512 [ 67.350193][ T5705] EXT4-fs mount: 52 callbacks suppressed [ 67.350204][ T5705] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.369376][ T5705] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.381824][ T5705] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.729: corrupted xattr block 32: bad e_name length [ 67.395756][ T5711] loop3: detected capacity change from 0 to 1024 [ 67.402612][ T5711] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 67.417222][ T5705] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 67.427519][ T5705] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.729: corrupted xattr block 32: bad e_name length [ 67.443782][ T5705] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 67.453411][ T5705] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.729: corrupted xattr block 32: bad e_name length [ 67.468100][ T5705] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 67.483955][ T5705] __quota_error: 845 callbacks suppressed [ 67.483974][ T5705] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 67.500962][ T5705] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 67.510592][ T5705] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.729: Failed to acquire dquot type 1 [ 67.552607][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.579177][ T29] audit: type=1326 audit(1755875564.824:5840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5728 comm="syz.3.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5be00ebe9 code=0x7ffc0000 [ 67.603865][ T29] audit: type=1326 audit(1755875564.824:5841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5728 comm="syz.3.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5be00ebe9 code=0x7ffc0000 [ 67.628547][ T29] audit: type=1326 audit(1755875564.824:5842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5728 comm="syz.3.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5be00ebe9 code=0x7ffc0000 [ 67.653737][ T29] audit: type=1326 audit(1755875564.824:5843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5728 comm="syz.3.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5be00ebe9 code=0x7ffc0000 [ 67.677581][ T29] audit: type=1326 audit(1755875564.824:5844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5728 comm="syz.3.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5be00ebe9 code=0x7ffc0000 [ 67.701697][ T29] audit: type=1326 audit(1755875564.824:5845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5728 comm="syz.3.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5be00ebe9 code=0x7ffc0000 [ 67.725539][ T29] audit: type=1326 audit(1755875564.824:5846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5728 comm="syz.3.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fe5be00ebe9 code=0x7ffc0000 [ 67.749121][ T29] audit: type=1326 audit(1755875564.824:5847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5728 comm="syz.3.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5be00ebe9 code=0x7ffc0000 [ 67.840408][ T5744] loop2: detected capacity change from 0 to 1024 [ 67.847324][ T5744] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 67.866380][ T5729] IPVS: stopping master sync thread 5747 ... [ 67.872810][ T5747] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 67.988871][ T5759] bridge_slave_0: left allmulticast mode [ 67.994593][ T5759] bridge_slave_0: left promiscuous mode [ 68.000742][ T5759] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.015527][ T5759] bridge_slave_1: left allmulticast mode [ 68.021444][ T5759] bridge_slave_1: left promiscuous mode [ 68.027430][ T5759] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.035769][ T5766] netlink: 'syz.1.753': attribute type 1 has an invalid length. [ 68.044136][ T5759] bond0: (slave bond_slave_0): Releasing backup interface [ 68.053092][ T5759] bond_slave_0: left promiscuous mode [ 68.058826][ T5765] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 68.067362][ T5759] bond0: (slave bond_slave_1): Releasing backup interface [ 68.076604][ T5759] bond_slave_1: left promiscuous mode [ 68.092835][ T5768] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 68.101883][ T5759] team0: Port device team_slave_0 removed [ 68.112121][ T5759] team0: Port device team_slave_1 removed [ 68.119360][ T5759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.124124][ T5772] netlink: 'syz.0.758': attribute type 1 has an invalid length. [ 68.127094][ T5759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.145369][ T5759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.153231][ T5759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.255186][ T5772] veth3: entered promiscuous mode [ 68.262226][ T5772] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 68.274137][ T5772] loop0: detected capacity change from 0 to 512 [ 68.281495][ T5772] EXT4-fs: Ignoring removed bh option [ 68.281880][ T5788] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 68.296254][ T5772] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 68.305548][ T5772] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 68.308158][ T5772] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 68.323547][ T5772] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 68.342106][ T5772] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.359912][ T5772] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.758: bg 0: block 353: padding at end of block bitmap is not set [ 68.424174][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.458238][ T5807] loop0: detected capacity change from 0 to 1024 [ 68.493221][ T5811] loop4: detected capacity change from 0 to 128 [ 68.497903][ T5812] loop1: detected capacity change from 0 to 512 [ 68.507921][ T5808] netlink: 'syz.3.774': attribute type 1 has an invalid length. [ 68.511050][ T5812] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 68.551498][ T5812] EXT4-fs (loop1): 1 truncate cleaned up [ 68.557026][ T5817] loop2: detected capacity change from 0 to 1024 [ 68.564339][ T5817] EXT4-fs: Ignoring removed bh option [ 68.570560][ T5817] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 68.585827][ T5812] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.602785][ T5817] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.625208][ T5812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.646064][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.679897][ T5826] loop3: detected capacity change from 0 to 128 [ 68.705985][ T5812] loop1: detected capacity change from 512 to 64 [ 68.748939][ T5828] loop2: detected capacity change from 0 to 512 [ 68.759656][ T5828] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.794330][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.845469][ T5833] __nla_validate_parse: 59 callbacks suppressed [ 68.845485][ T5833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.781'. [ 68.862792][ T5833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.781'. [ 68.932460][ T5815] ================================================================== [ 68.940671][ T5815] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 68.948016][ T5815] [ 68.950358][ T5815] write to 0xffff888104868e14 of 4 bytes by task 5826 on cpu 0: [ 68.958079][ T5815] xas_set_mark+0x12b/0x140 [ 68.962779][ T5815] __folio_start_writeback+0x1dd/0x440 [ 68.968356][ T5815] mpage_writepages+0xd18/0x1250 [ 68.973312][ T5815] fat_writepages+0x24/0x30 [ 68.977824][ T5815] do_writepages+0x1c3/0x310 [ 68.982593][ T5815] file_write_and_wait_range+0x156/0x2c0 [ 68.988326][ T5815] __generic_file_fsync+0x46/0x140 [ 68.993543][ T5815] fat_file_fsync+0x49/0x100 [ 68.998231][ T5815] vfs_fsync_range+0x10d/0x130 [ 69.003002][ T5815] generic_file_write_iter+0x1b8/0x2f0 [ 69.008464][ T5815] iter_file_splice_write+0x663/0xa60 [ 69.014024][ T5815] direct_splice_actor+0x153/0x2a0 [ 69.019407][ T5815] splice_direct_to_actor+0x30f/0x680 [ 69.024784][ T5815] do_splice_direct+0xda/0x150 [ 69.029555][ T5815] do_sendfile+0x380/0x650 [ 69.034076][ T5815] __x64_sys_sendfile64+0x105/0x150 [ 69.039363][ T5815] x64_sys_call+0x2bb0/0x2ff0 [ 69.044037][ T5815] do_syscall_64+0xd2/0x200 [ 69.048639][ T5815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.054538][ T5815] [ 69.056885][ T5815] read to 0xffff888104868e14 of 4 bytes by task 5815 on cpu 1: [ 69.064509][ T5815] xas_find_marked+0x5dc/0x620 [ 69.069395][ T5815] find_get_entry+0x5d/0x380 [ 69.074203][ T5815] filemap_get_folios_tag+0x92/0x210 [ 69.079725][ T5815] writeback_iter+0x4bb/0x820 [ 69.084593][ T5815] mpage_writepages+0x87/0x1250 [ 69.089456][ T5815] fat_writepages+0x24/0x30 [ 69.093958][ T5815] do_writepages+0x1c3/0x310 [ 69.098678][ T5815] file_write_and_wait_range+0x156/0x2c0 [ 69.104492][ T5815] __generic_file_fsync+0x46/0x140 [ 69.109626][ T5815] fat_file_fsync+0x49/0x100 [ 69.114403][ T5815] vfs_fsync_range+0x10d/0x130 [ 69.119696][ T5815] generic_file_write_iter+0x1b8/0x2f0 [ 69.125169][ T5815] iter_file_splice_write+0x663/0xa60 [ 69.130716][ T5815] direct_splice_actor+0x153/0x2a0 [ 69.135849][ T5815] splice_direct_to_actor+0x30f/0x680 [ 69.141311][ T5815] do_splice_direct+0xda/0x150 [ 69.146171][ T5815] do_sendfile+0x380/0x650 [ 69.150643][ T5815] __x64_sys_sendfile64+0x105/0x150 [ 69.155850][ T5815] x64_sys_call+0x2bb0/0x2ff0 [ 69.160530][ T5815] do_syscall_64+0xd2/0x200 [ 69.165040][ T5815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.171110][ T5815] [ 69.173519][ T5815] value changed: 0x0a000021 -> 0x00000021 [ 69.179231][ T5815] [ 69.181552][ T5815] Reported by Kernel Concurrency Sanitizer on: [ 69.187704][ T5815] CPU: 1 UID: 0 PID: 5815 Comm: syz.3.776 Not tainted syzkaller #0 PREEMPT(voluntary) [ 69.197431][ T5815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 69.207756][ T5815] ==================================================================