last executing test programs: 3.050113723s ago: executing program 2 (id=652): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000045e7dd2155707a43e423aa8631000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = memfd_create(0x0, 0x3) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) syz_read_part_table(0x5c8, &(0x7f0000000600)="$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") sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000020c0)=@newtaction={0x88c, 0x30, 0xffff, 0x5, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x11, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x7ff, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x22, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x8, 0x3, 0x0, 0x27ffdbfc, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xfffffffe, 0x0, 0x0, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0xeeb, 0x7, 0x0, 0x0, 0x0, 0x0, 0x400, 0x8, 0x0, 0x0, 0x0, 0x81b, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x200, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0xffffffff, 0x40, 0x40, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xa, 0x0, 0xfffffffe, 0xfffffffd, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x100, 0xfffffffc, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x55, 0xfff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x79, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x2, 0x400000, 0x20000000, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x100000]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x7, 0xfffeffff, 0x100, 0x8, {0x4, 0x0, 0x400, 0x3200, 0x7fff, 0x7}, {0x7, 0x2, 0x5, 0x8, 0xd6, 0x766}, 0xfeea, 0x4, 0x2}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x3, 0xc, 0x7ff, 0x9, 0x3, 0x80000000, 0x6, 0x3, 0x2, 0x1, 0x80000000, 0x0, 0x4, 0x80, 0x5, 0x3, 0x5, 0x9d, 0xfffffffe, 0x2, 0xff, 0x80000001, 0x6, 0x7f, 0x2, 0x0, 0x5, 0x76, 0x3, 0x2, 0x7, 0x800, 0x0, 0x10000, 0xf0, 0x8, 0xb8, 0x151, 0xfff, 0x6, 0x9, 0x401, 0xfffffff8, 0x5, 0x8, 0xfffffffa, 0x4, 0x7, 0x8000, 0xf9, 0xfff, 0x7fff, 0x1, 0x0, 0xff, 0x5c0078f0, 0x7f, 0x0, 0x2, 0xfffffffa, 0x8, 0x7, 0x7, 0x7, 0x6, 0x80000000, 0x5, 0x4, 0x3, 0x6, 0xffffffff, 0x10000, 0x5, 0x6, 0x3, 0x2, 0x1, 0x8d400, 0x3, 0x74, 0x4, 0xfee, 0x401, 0x5, 0x5, 0xfff, 0x8f4, 0x3, 0x8000, 0x2, 0x6, 0x1, 0x1ff, 0x9, 0x1, 0x6, 0x9, 0xc, 0x0, 0x80, 0xe, 0xd, 0xc82, 0x8, 0xfffffffe, 0xef, 0x2, 0x3, 0x1f, 0x7, 0x9, 0x1ec0, 0x2, 0xfffff001, 0x2, 0x0, 0x10001, 0xd5b, 0x5, 0x0, 0x1, 0x5, 0x3, 0x7, 0x8, 0x1, 0x4, 0x8, 0x101, 0x200, 0x6, 0x80000000, 0x5, 0x2, 0x0, 0x7fff, 0x7, 0x6, 0x3ff, 0x7, 0xffff935a, 0x8, 0xf64, 0x8, 0x4, 0x80000001, 0x5, 0xfe000000, 0x3, 0x2, 0x8, 0xba, 0x400000, 0x3, 0x8, 0x7, 0x5, 0x2, 0x400, 0x7, 0x1ff, 0x1, 0x749, 0x2, 0x6, 0xfffffff9, 0x8, 0x6, 0x53a, 0x5, 0x8, 0x6, 0x8, 0x3, 0x7ff, 0x6, 0x9, 0xa, 0x3, 0xfffff000, 0xdae4, 0x5, 0xa, 0x5, 0x7, 0x2, 0x1000, 0xe, 0x4, 0x0, 0x2, 0x1, 0x0, 0x9, 0x5, 0x9, 0x3, 0x2, 0x7ff, 0x4, 0x5, 0x4, 0x4, 0x0, 0x80000000, 0x80, 0x5a78, 0xf94, 0x7, 0x6, 0x80, 0xc, 0xfffffff9, 0x5, 0x4, 0x5, 0x4, 0x9, 0x8, 0xffff4fba, 0x5, 0x3, 0x800, 0x93, 0x3, 0x2fffffd, 0x8, 0x80000001, 0x6, 0x6, 0xde4a, 0x9, 0xd, 0x10001, 0x4c, 0x8, 0xf0, 0xfffffffc, 0x5, 0x9, 0x4, 0x20003, 0x8, 0xffffffff, 0x2, 0x5, 0x9, 0x2, 0x4, 0x9, 0x7, 0x5, 0x10001, 0x8, 0x9]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) times(0xffffffffffffffff) syslog(0x3, 0x0, 0x0) r4 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r4, 0xee00, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) creat(&(0x7f00000000c0)='./file0\x00', 0x48) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000540)=ANY=[], 0x53) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) sigaltstack(0x0, 0x0) 2.741491048s ago: executing program 0 (id=654): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r2}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x51d0174}, 0x10, 0x0, 0x0, &(0x7f0000000980)=[@cswp={0x58, 0x114, 0x7, {{0x4, 0x7f72}, &(0x7f0000000280)=0x67af, 0x0, 0x765, 0x81, 0x9, 0xfffffffffffefffd, 0x54, 0x20000000000000}}], 0x58, 0x20040044}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="03be"], 0x0, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {}, {0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x1c, 0x2, [@TCA_BASIC_EMATCHES={0x18, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x2}}}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48c0}, 0x20001880) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) read(r6, &(0x7f0000032440)=""/102364, 0x18fdc) add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000000c0)="35e871dd31305a3cd9c768ac17e1b437f32a381f8acdd349517782d4551ad2cdc52c18bd3f0b82a32916c559041baed5bb83b967aabc1d6b579146f7866f3b042ec7659da87fe42794f16822a1a83aede6e0134cbeab46", 0x57, 0xfffffffffffffffd) 2.563446621s ago: executing program 2 (id=657): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a5"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd55", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.472414692s ago: executing program 2 (id=659): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) unshare(0x22020400) 2.437157803s ago: executing program 2 (id=660): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) getsockopt$inet_pktinfo(r0, 0x110, 0x8, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xffffffffffffff40}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB=',pcr=00000000000000000056,rootcontext=', @ANYBLOB="22f0092283aaf8de02bbea8b6c164ea7f97dc4bd774c2662fefc59aaf24bb14242abc632a2ee6b1fad113f11136a9b0431f6c116d870be2da3a75821fa4190823ac1c5cc3f71b4a7f0b3447fa90556ddeb27cf1cb99a"]) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x82, &(0x7f0000000300)={r6, 0x10, 0x4}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100002c34c027000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_getoverrun(r7) 2.020551909s ago: executing program 3 (id=667): unshare(0x8000480) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=0x0, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r3}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 1.915450051s ago: executing program 3 (id=669): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd70000000000010000000180001801400b2228d547468315f746f5f626f6e6400000008000feb04000000"], 0x34}}, 0x4044890) pipe2(0x0, 0x4000) syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) syz_io_uring_setup(0x417, &(0x7f0000002180)={0x0, 0x4d91, 0x100, 0x1, 0xb9}, 0x0, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000300)={0x1d, r3}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x7f, 0x3}]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010004000000000004000500a9930000100000000000000020"], 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1.874685631s ago: executing program 0 (id=670): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) unshare(0x22020400) 1.850381351s ago: executing program 0 (id=672): pipe2$9p(&(0x7f0000000240), 0x0) io_setup(0x9, &(0x7f0000003080)=0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) io_getevents(r0, 0x1, 0x1, &(0x7f0000000000)=[{}], 0x0) io_submit(r0, 0x0, 0x0) 1.569619256s ago: executing program 1 (id=678): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_mount_image$iso9660(&(0x7f00000025c0), &(0x7f0000000800)='./file0\x00', 0x221488e, &(0x7f00000002c0)=ANY=[], 0xfd, 0x6b6, &(0x7f0000002600)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000002580)=ANY=[@ANYBLOB="16000000020000001d"], 0x0) 1.503481737s ago: executing program 2 (id=679): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x14, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2d, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x6}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x2, &(0x7f0000fd7ff0), 0x0, 0xfffffffd) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xa, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100c93a, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0x2}, 0x18) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r7, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000004000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) recvmmsg(r4, &(0x7f0000001140), 0x700, 0x2, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r10, 0x0, 0xfffffffffffffffd}, 0x18) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000080)=@generic={0x2, 0x9, 0x1}) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}, {&(0x7f00000002c0)=ANY=[@ANYBLOB="f00000003900000427bd7000fcdbdf25b6758a293fd77079e5515337840ec80b4eaf8b"], 0xf0}], 0x2}, 0x0) 1.502025667s ago: executing program 1 (id=680): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r2}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x51d0174}, 0x10, 0x0, 0x0, &(0x7f0000000980)=[@cswp={0x58, 0x114, 0x7, {{0x4, 0x7f72}, &(0x7f0000000280)=0x67af, 0x0, 0x765, 0x81, 0x9, 0xfffffffffffefffd, 0x54, 0x20000000000000}}], 0x58, 0x20040044}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="03be"], 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x1c, 0x2, [@TCA_BASIC_EMATCHES={0x18, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x2}}}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48c0}, 0x20001880) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) read(r4, &(0x7f0000032440)=""/102364, 0x18fdc) add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000000c0)="35e871dd31305a3cd9c768ac17e1b437f32a381f8acdd349517782d4551ad2cdc52c18bd3f0b82a32916c559041baed5bb83b967aabc1d6b579146f7866f3b042ec7659da87fe42794f16822a1a83aede6e0134cbeab46", 0x57, 0xfffffffffffffffd) 1.252955891s ago: executing program 4 (id=681): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000000400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.213167521s ago: executing program 4 (id=682): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) unshare(0x22020400) 1.212671901s ago: executing program 4 (id=683): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="03000000000000800e45c79b738778212477fb", 0x13, 0x4044011, &(0x7f0000001ac0)={0x11, 0x15, r1, 0x1, 0x7, 0x6, @multicast}, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) gettid() accept4$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e, 0x80000) inotify_init1(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000001d00), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r4 = gettid() r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r5, &(0x7f0000000200)=""/202, 0xca) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000080)={0x335, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r5, 0xc0605345, &(0x7f00000000c0)={0x7, 0x2, {0x1, 0x2, 0x23, 0x7, 0x9}, 0x8003}) tkill(r4, 0x7) epoll_create(0x6) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xd0000121) 1.106837703s ago: executing program 3 (id=684): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x24f6, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x8}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.052151384s ago: executing program 3 (id=685): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00'], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) unshare(0x22020400) 1.051606074s ago: executing program 3 (id=686): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x100000004}, 0x18) syz_mount_image$iso9660(&(0x7f00000025c0), &(0x7f0000000800)='./file0\x00', 0x221488e, &(0x7f00000002c0)=ANY=[], 0xfd, 0x6b6, &(0x7f0000002600)="$eJzs3d1v29b9x/EP5SfZ/SEofhuCIEiTk2QFHCxTJLlxYGRAq1GUzU0SBVIebGBAkTV2EUROtyQDFl+s880egA7Y9e56s4vd7R8Y0Ov+F7vbgGK7G7AbDTzUoyVKVv3QZX2/jFYU+eU5X5IKv6AtHgoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMhxy/l8wVHVr2/vmHRuOQxqE5YnrS3oTjJxZ2q/khP/p2xWV5JZV77ZX3w5/t8tXUveXVM2fsnq8I3Lbz78xnymu/6EhL4Mzdrgi1eHTx+1WnvPTxA7p5mb/yopc4KgTa/uR4FfK216xo8Cs7G+nr+3VYlMxa960W7U9GrGDb1MMwjNqnvHFDY21oyX2w2265vlUtXrznzwnWI+v26+v5QcaEm5yN3yq1W/vmlj4sVxzAPzyY+SAK9UM2b/SWtvbVqScVDhJEHFkX1w7JAV88VioVAsFtbvb9x/kM/Pj8zIx5x8j0YizvxDi9fMmZ27gdPKxPX/r45UVVZ1bWtHZuyPq7JCBaqlLO/o1v+373kT+x2s/90qf0V6t7P4qmz9v568u55W/1NyMTJ2hXFLnJT5s/0s2IyMXuiVDvVUj9RSS3t6fgZtG5kbZ9LKBfxsylNdviIF8lVTyc4xnTlGG1rXuvJ6X1uqKJJRRb6q8hRpV5Ga8uwnylUoTyU1FSiU0apc3ZFRQRva0JqMPOW0q0DbqmtTZZX0r3a7va8ndr+vTchR3aBCSsDSYFBxQktp9f/HHyef0079z1P/v66Sz8FS8vJ5Skz2DM/fwGm0O9f/M7pxPtkAAAAAAIDz4Njfvjv2b/dvSWqr4le9fPoKixeZHQAAAAAAOAuO2ku6Jie+/pf0lpwp1/8AAAAAAOC149h77BxJK/ZL/U7/TqiT/BJg7gJSBAAAAAAAp2Tv/L++KLXtoBU35Mx0/Q8AAAAAAF4DvxkYY3++O8Zuu/tn/YykqLHk/OUfSwoXnKPGzrecg1K8pHQwl7EhI98AaFauOtHvk4F67Xi9i5LsO9e75nR66wyU2Rt38Iv90bH+e8Nk2rF+nfBYAotzgw0cS+BSZ6RgJ+55fb7zTp/o5rtDsY8PM7JLkl5WKn7Vy7lB9WFBpdKlTNPbaf7s2ZOfS2FvO/eftPZyH3zUemxzOYpnHR3EeXzcTefPi51dN5yLfenn8tKOt2DvuRg3uvGyKt0uf1uvrTi233x3++dUOsj0j1Hq9h/r81e6lRyzWytJ7MphbzTSePuz8fYXcvaQDW19uOD0sygc3/JxByIli6zN4nYSc3v1dvLSzS9uJ+Nkvz0nFXOjx2Aoi+JgFtP3hfPPkX0xKYvOvliLs/gsbigli7XZshg5IgDwVdnvVyE7iPnIGPvd8tA9qX2pujOmug/34rw3XN1f/qHdtivMSfOdv01M7CWr+Iy+6tg6tCh7Yp2/OnJG725N6VJWKWf0/CmqW9zXn/rPQOqkPZLFv9vt9sOC7fd3x6rqp/EKn6b2G1WT3X7v5cFP7AD4sQ/3Ptx7ViyureffyefvF7VgN6PzMidqDwBgxPRn7EyNcN7RzSTi5uO/v51MDVW8/+99pSCnD/SRWnqsu91HCNwY3+rKwNcQ7iZXrRq4ajWX33y4LB2PLehu6lWdraUDscVe7IK6qwxX6n7s2jkfBQAALtatKXV4fP3PDtX/u1pNIlavjr3uXulcy8vW8s7Vce+SPq3mFqYn/95Z7gkAAL4+vPALZ6X5aycM/cb7hY2NQqm55ZkwcH9gQr+86Rm/3vRCd6tU3/RMIwyagRtUTSPUkl/2IhNtNxpB2DSVIDSNIPJ37JPfTefR75FXK9Wbvhs1ql4p8owb1Jslt2nKfuSaxvb3qn605YV25ajhuX7Fd0tNP6ibKNgOXS9nTOR5A4F+2as3/YofT9bNLySVwl3zw6C6XfNM2Yvc0G80g6TBbl9+vRKENdtsTu2ZH3QIAMD/ohevDp8+arX2nh+fWI4vzZM5R0qJGZ1YHNMgYwQBAPBfpl+uZ1ip9818fdY+l6wAAAAAAAAAAAAAAAAAAAAAAMCg6bf0zTixMO5mQak356eXOnP0S/VvMRxpx9FZJzbLRGbWtbq3RBw+/XxC8HJvTnf3D8Ycnet2ZQf6+tv/SW/YRUrmzI9bK5veoDO90+UJB/eEE3PxDjpp8Hf3kz2aGhMvHLtoqXcs5s/+n0M88eyPKYva7XZ78upLw/twcdIGDk/MS3q+eIpDcPHnIgAX6z8BAAD//2apM8Q=") 1.016347514s ago: executing program 4 (id=687): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1008002, &(0x7f0000000080)=ANY=[], 0x1, 0x2f2, &(0x7f00000009c0)="$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") r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4200, 0x1) write$9p(r1, &(0x7f0000000040)=';', 0x1) sendfile(r1, r2, 0x0, 0x7ffff000) 999.135474ms ago: executing program 3 (id=688): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x3f, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r9, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r9, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r10}], 0x2c, 0xffffffffffbffff8) fcntl$setown(r9, 0x8, r8) tkill(r8, 0x13) timer_create(0x1, &(0x7f0000000100)={0x0, 0x33, 0x0, @tid=r8}, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) statx(0xffffffffffffffff, 0x0, 0x6000, 0x4, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) 973.912985ms ago: executing program 4 (id=689): r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x2, 0x400) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='page_pool_update_nid\x00', r0, 0x0, 0x9}, 0x18) r2 = socket$unix(0x1, 0x2, 0x0) socket$inet6(0xa, 0x800, 0x1) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'team0\x00', 0x200}) recvmsg$can_raw(r0, &(0x7f0000000680)={&(0x7f0000000100)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000180)=""/81, 0x51}, {&(0x7f0000000200)=""/100, 0x64}, {&(0x7f0000000280)=""/126, 0x7e}, {&(0x7f0000000300)=""/168, 0xa8}, {&(0x7f00000003c0)=""/38, 0x26}, {&(0x7f0000000400)=""/236, 0xec}, {&(0x7f0000000500)=""/100, 0x64}, {&(0x7f0000000580)=""/98, 0x62}], 0x8}, 0x40010020) syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0) r3 = openat$cgroup_ro(r0, &(0x7f0000000700)='memory.numa_stat\x00', 0x0, 0x0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000740), 0x1, 0x0) ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r4, &(0x7f00000007c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000780)}}, 0x18) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40840}, 0x4000) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000940), r4) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000b40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000980)={0x180, r5, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x15c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @mcast2, 0x1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x26}}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010101}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xd1, @local, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x29}}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8f}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x65c}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd6a}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x4040000}, 0x4040005) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000d40)={'syztnl2\x00', &(0x7f0000000cc0)={'syztnl0\x00', 0x0, 0x29, 0x0, 0xfd, 0x71e7, 0x18, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x6f, 0x9, 0x2c1}}) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000e00)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) r8 = openat2(r3, &(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80)={0x151802, 0x13d, 0x2a}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f40)={0x6, 0x1, &(0x7f0000000b80)=@raw=[@call={0x85, 0x0, 0x0, 0x12}], &(0x7f0000000bc0)='syzkaller\x00', 0x2, 0x8e, &(0x7f0000000c00)=""/142, 0x41100, 0x40, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000d80)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000dc0)={0x4, 0x1, 0x1}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000ec0)=[r3, r7, 0xffffffffffffffff, r4, r3, r8, r3], &(0x7f0000000f00)=[{0x0, 0x5, 0x8, 0x1}, {0x3, 0x2, 0x1, 0x4}], 0x10, 0xa, @void, @value}, 0x94) ftruncate(r1, 0x1400000000000) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000001040)={0x1, &(0x7f0000001000)=[{0x4, 0x0, 0x7f, 0x2}]}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001080)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6}}, &(0x7f0000001180)=0xe8) quotactl_fd$Q_SETINFO(r4, 0xffffffff80000601, r9, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x6}) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x5c, 0x3, 0x3, 0x101, 0x0, 0x0, {0x1}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x3}}, @NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x7}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc66f}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x7}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x1}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x240000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4c004}, 0x100) write$P9_RRENAMEAT(r8, &(0x7f0000001340)={0x7, 0x4b, 0x1}, 0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000024c0)={r0, 0x0, 0x5d, 0x11, &(0x7f0000001380)="afc29302f61017fe369d28c6364ef937781704cf0aa9ce5482cbdcf6be1d4933e7f7cab1df8ef4bcd8e0d3acb8c173ce51f366aa6107dd031f920ddfc0e95a8418b5ac28b30b57a59141ac523f9ad5b2836ef14ddbb8ad530ed0304837", &(0x7f0000001400)=""/17, 0x1, 0x0, 0x4a, 0x1000, &(0x7f0000001440)="0b49dc50ee5d5a4a60e170e8726e1be11f9c9a85a737e00a1f1fe025ad506b7b7cf7535c325cd6f5313a56d2116369eed369af20c45a2d26de19568f76cd6e2fa2e61a9c6cd62ea9d137", &(0x7f00000014c0)="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"}, 0x50) listen(r2, 0x8) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002640)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002780)={0x18, 0x11, &(0x7f0000002540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@alu={0x7, 0x1, 0x0, 0x3, 0x3, 0xfffffffffffffffc, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x98}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002600)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x58, '\x00', r6, 0x0, r10, 0x8, &(0x7f0000002680)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000026c0)={0x0, 0x2, 0x6, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000002700)=[r8], &(0x7f0000002740)=[{0x5, 0x3, 0xc, 0xa}, {0x2, 0x5, 0x3, 0x6}], 0x10, 0x6, @void, @value}, 0x94) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x80010, 0xffffffffffffffff, 0xc0d28000) 946.956725ms ago: executing program 0 (id=690): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0xfe44, 0x0) (fail_nth: 5) 705.792009ms ago: executing program 4 (id=691): kexec_load(0x3, 0x0, 0x0, 0x140000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000001c0)={'wg2\x00'}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket(0x1e, 0x80004, 0x0) socket(0x1e, 0x4, 0x0) 626.39225ms ago: executing program 1 (id=692): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="050000000400000099000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x200000000003}, 0x18) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x80400, 0x2004, 0x800}) 607.31559ms ago: executing program 0 (id=693): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000000400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 572.560861ms ago: executing program 2 (id=694): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd70000000000010000000180001801400b2228d547468315f746f5f626f6e6400000008000feb04000000"], 0x34}}, 0x4044890) pipe2(0x0, 0x4000) syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) syz_io_uring_setup(0x417, &(0x7f0000002180)={0x0, 0x4d91, 0x100, 0x1, 0xb9}, 0x0, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000300)={0x1d, r3}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x7f, 0x3}]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010004000000000004000500a9930000100000000000000020"], 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 572.219361ms ago: executing program 0 (id=695): mknodat$null(0xffffffffffffff9c, 0x0, 0xb0a54e68b1cd2fdb, 0x103) pipe2$9p(&(0x7f00000001c0), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000240)={[{@acl}, {@barrier}, {@barrier_val}, {@sysvgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@grpid}, {@noinit_itable}]}, 0xfc, 0x587, &(0x7f0000002100)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0xfffffffc, 0x100, 0x0, 0x1dd}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x77359400}, 0x0) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0x24400, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, @perf_bp={&(0x7f0000000180), 0x5}, 0x10048a, 0x81, 0x7ff, 0x1, 0x0, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xc, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') openat(0xffffffffffffffff, 0x0, 0x101842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r7, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) write$ppp(r6, 0x0, 0x0) 571.936831ms ago: executing program 1 (id=696): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x20000000000008b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) capset(0x0, 0x0) (fail_nth: 4) 652.46µs ago: executing program 1 (id=697): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x24, r1, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x24}}, 0x0) 0s ago: executing program 1 (id=698): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c0000000000000000000000070000004404730001000000"], 0x40}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x4}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd70000000000022000000180001801400020064756d6d793000000000000000000000b29685a7c068e9169cbb47208f81d412dd8121928f522a1c5b688c909b37f2f2b3c99f1f25b9929a280cf6e8820963eeeb874f4050a2f2a516809a68b1ad4f3a409ca405e3de62ca1d4df1be66ac7962d6eb3087258daeba06d85ae2425e0b672584106d852120b04d460366b21bf0a5d955fa3752be596ae46100"/172], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = memfd_create(&(0x7f00000009c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9b5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\\\xb0:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1exQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1.E\b1\xcb\xa2\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0 [ 45.366730][ T3811] __dump_stack+0x1d/0x30 [ 45.366759][ T3811] dump_stack_lvl+0xe8/0x140 [ 45.366848][ T3811] dump_stack+0x15/0x1b [ 45.366868][ T3811] should_fail_ex+0x265/0x280 [ 45.366895][ T3811] ? tipc_group_create+0x66/0x290 [ 45.366927][ T3811] should_failslab+0x8c/0xb0 [ 45.366959][ T3811] __kmalloc_cache_noprof+0x4c/0x320 [ 45.367043][ T3811] tipc_group_create+0x66/0x290 [ 45.367126][ T3811] tipc_sk_join+0x130/0x2e0 [ 45.367147][ T3811] tipc_setsockopt+0x598/0x620 [ 45.367231][ T3811] ? __pfx_tipc_setsockopt+0x10/0x10 [ 45.367256][ T3811] __sys_setsockopt+0x181/0x200 [ 45.367301][ T3811] __x64_sys_setsockopt+0x64/0x80 [ 45.367334][ T3811] x64_sys_call+0x2bd5/0x2fb0 [ 45.367361][ T3811] do_syscall_64+0xd2/0x200 [ 45.367451][ T3811] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 45.367486][ T3811] ? clear_bhb_loop+0x40/0x90 [ 45.367547][ T3811] ? clear_bhb_loop+0x40/0x90 [ 45.367575][ T3811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.367603][ T3811] RIP: 0033:0x7f934fcce969 [ 45.367622][ T3811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.367699][ T3811] RSP: 002b:00007f934e337038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 45.367717][ T3811] RAX: ffffffffffffffda RBX: 00007f934fef5fa0 RCX: 00007f934fcce969 [ 45.367732][ T3811] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 45.367747][ T3811] RBP: 00007f934e337090 R08: 0000000000000010 R09: 0000000000000000 [ 45.367763][ T3811] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 45.367777][ T3811] R13: 0000000000000000 R14: 00007f934fef5fa0 R15: 00007ffe37808908 [ 45.367794][ T3811] [ 45.676231][ T3821] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=3821 comm=syz.0.71 [ 45.790850][ T3836] netlink: 'syz.3.73': attribute type 5 has an invalid length. [ 45.812323][ T3838] capability: warning: `syz.0.77' uses deprecated v2 capabilities in a way that may be insecure [ 45.939990][ T3844] loop4: detected capacity change from 0 to 512 [ 45.948975][ T3844] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.964463][ T3844] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 45.980083][ T3844] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 45.997988][ T3844] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 46.035217][ T3844] EXT4-fs (loop4): 1 truncate cleaned up [ 46.046997][ T3844] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.185177][ T3851] loop2: detected capacity change from 0 to 736 [ 46.369363][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.521457][ T3863] __nla_validate_parse: 18 callbacks suppressed [ 46.521479][ T3863] netlink: 44 bytes leftover after parsing attributes in process `syz.2.88'. [ 46.570689][ T3866] netlink: 24 bytes leftover after parsing attributes in process `syz.2.89'. [ 46.616093][ T3870] loop3: detected capacity change from 0 to 128 [ 46.623202][ T3868] loop2: detected capacity change from 0 to 512 [ 46.641492][ T3870] netlink: 16 bytes leftover after parsing attributes in process `syz.3.91'. [ 46.644135][ T3868] EXT4-fs: Ignoring removed oldalloc option [ 46.679169][ T3868] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.90: Parent and EA inode have the same ino 15 [ 46.692007][ T3870] netlink: 16 bytes leftover after parsing attributes in process `syz.3.91'. [ 46.702627][ T3870] Zero length message leads to an empty skb [ 46.715196][ T3874] loop1: detected capacity change from 0 to 128 [ 46.722370][ T3868] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.90: Parent and EA inode have the same ino 15 [ 46.740759][ T3868] EXT4-fs (loop2): 1 orphan inode deleted [ 46.760818][ T3868] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.908766][ T3880] loop3: detected capacity change from 0 to 128 [ 46.977983][ T3883] loop1: detected capacity change from 0 to 128 [ 46.994578][ T3880] FAT-fs (loop3): Directory bread(block 32) failed [ 47.002820][ T3880] FAT-fs (loop3): Directory bread(block 33) failed [ 47.143709][ T3880] FAT-fs (loop3): Directory bread(block 34) failed [ 47.244368][ T3880] FAT-fs (loop3): Directory bread(block 35) failed [ 47.290813][ T3880] FAT-fs (loop3): Directory bread(block 36) failed [ 47.401753][ T3880] FAT-fs (loop3): Directory bread(block 37) failed [ 47.408591][ T3880] FAT-fs (loop3): Directory bread(block 38) failed [ 47.415359][ T3880] FAT-fs (loop3): Directory bread(block 39) failed [ 47.422202][ T3880] FAT-fs (loop3): Directory bread(block 40) failed [ 47.429303][ T3880] FAT-fs (loop3): Directory bread(block 41) failed [ 47.511032][ T3333] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.523184][ T3888] netlink: 44 bytes leftover after parsing attributes in process `syz.1.99'. [ 47.553278][ T3890] netlink: 24 bytes leftover after parsing attributes in process `syz.4.100'. [ 47.622686][ T3896] loop0: detected capacity change from 0 to 1024 [ 47.660117][ T3896] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 47.720443][ T3902] netlink: 96 bytes leftover after parsing attributes in process `syz.2.101'. [ 47.729581][ T3902] netlink: 'syz.2.101': attribute type 5 has an invalid length. [ 47.737446][ T3902] netlink: 44 bytes leftover after parsing attributes in process `syz.2.101'. [ 47.877296][ T3910] loop0: detected capacity change from 0 to 2048 [ 47.919423][ T3912] loop3: detected capacity change from 0 to 128 [ 47.941186][ T3913] FAULT_INJECTION: forcing a failure. [ 47.941186][ T3913] name failslab, interval 1, probability 0, space 0, times 0 [ 47.955476][ T3913] CPU: 0 UID: 0 PID: 3913 Comm: syz.1.102 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(voluntary) [ 47.955504][ T3913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 47.955517][ T3913] Call Trace: [ 47.955524][ T3913] [ 47.955534][ T3913] __dump_stack+0x1d/0x30 [ 47.955560][ T3913] dump_stack_lvl+0xe8/0x140 [ 47.955584][ T3913] dump_stack+0x15/0x1b [ 47.955605][ T3913] should_fail_ex+0x265/0x280 [ 47.955629][ T3913] should_failslab+0x8c/0xb0 [ 47.955661][ T3913] kmem_cache_alloc_noprof+0x50/0x310 [ 47.955698][ T3913] ? vm_area_alloc+0x2c/0xb0 [ 47.955740][ T3913] vm_area_alloc+0x2c/0xb0 [ 47.955774][ T3913] mmap_region+0xa3a/0x1560 [ 47.955838][ T3913] do_mmap+0x9b3/0xbe0 [ 47.955868][ T3913] vm_mmap_pgoff+0x17a/0x2e0 [ 47.955911][ T3913] ksys_mmap_pgoff+0xc2/0x310 [ 47.955936][ T3913] ? __x64_sys_mmap+0x49/0x70 [ 47.955958][ T3913] x64_sys_call+0x1602/0x2fb0 [ 47.955980][ T3913] do_syscall_64+0xd2/0x200 [ 47.956010][ T3913] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 47.956046][ T3913] ? clear_bhb_loop+0x40/0x90 [ 47.956074][ T3913] ? clear_bhb_loop+0x40/0x90 [ 47.956103][ T3913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.956126][ T3913] RIP: 0033:0x7f4d471ae9a3 [ 47.956141][ T3913] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 47.956160][ T3913] RSP: 002b:00007f4d457d4e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 47.956181][ T3913] RAX: ffffffffffffffda RBX: 0000000000000448 RCX: 00007f4d471ae9a3 [ 47.956194][ T3913] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 47.956206][ T3913] RBP: 0000200000000bc2 R08: 00000000ffffffff R09: 0000000000000000 [ 47.956218][ T3913] R10: 0000000000000022 R11: 0000000000000246 R12: 000000000000000b [ 47.956231][ T3913] R13: 00007f4d457d4ef0 R14: 00007f4d457d4eb0 R15: 0000200000000340 [ 47.956252][ T3913] [ 48.188567][ T3910] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.306986][ T3922] loop4: detected capacity change from 0 to 128 [ 48.342540][ T3924] loop3: detected capacity change from 0 to 128 [ 48.385578][ T3924] netlink: 16 bytes leftover after parsing attributes in process `syz.3.109'. [ 48.394623][ T3924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.109'. [ 48.464306][ T3330] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.609095][ T3940] netlink: 'syz.0.117': attribute type 4 has an invalid length. [ 48.697902][ T3947] SELinux: syz.3.119 (3947) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 48.776790][ T3952] loop3: detected capacity change from 0 to 128 [ 48.937654][ T3956] loop3: detected capacity change from 0 to 512 [ 48.980398][ T3955] loop2: detected capacity change from 0 to 1024 [ 48.988797][ T3955] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 48.998843][ T3955] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 49.010467][ T3955] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 49.020716][ T3955] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 49.030044][ T3955] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 49.040962][ T3956] EXT4-fs: Ignoring removed oldalloc option [ 49.075660][ T3956] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.122: Parent and EA inode have the same ino 15 [ 49.092860][ T3956] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.122: Parent and EA inode have the same ino 15 [ 49.147292][ T3956] EXT4-fs (loop3): 1 orphan inode deleted [ 49.165198][ T3956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.355041][ T3965] netlink: 'syz.0.124': attribute type 5 has an invalid length. [ 49.395050][ T3965] loop0: detected capacity change from 0 to 512 [ 49.436939][ T3965] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.479105][ T3965] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.579863][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 49.579881][ T29] audit: type=1400 audit(1748859628.485:650): avc: denied { write } for pid=3966 comm="syz.2.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 49.610568][ T3965] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.124: corrupted inode contents [ 49.715619][ T3965] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.124: mark_inode_dirty error [ 49.947350][ T29] audit: type=1400 audit(1748859628.585:651): avc: denied { sys_module } for pid=3966 comm="syz.2.127" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 49.973993][ T3965] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.124: corrupted inode contents [ 50.010110][ T3973] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.124: corrupted inode contents [ 50.049937][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.053617][ T3973] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.124: mark_inode_dirty error [ 50.071006][ T29] audit: type=1400 audit(1748859628.965:652): avc: denied { getopt } for pid=3977 comm="syz.2.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.108911][ T3973] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.124: corrupted inode contents [ 50.132926][ T3973] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.124: mark_inode_dirty error [ 50.176495][ T3973] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.124: corrupted inode contents [ 50.203361][ T3973] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.124: mark_inode_dirty error [ 50.205805][ T3986] loop2: detected capacity change from 0 to 128 [ 50.245566][ T3330] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.260335][ T29] audit: type=1400 audit(1748859629.165:653): avc: denied { read write } for pid=3987 comm="syz.3.134" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 50.284751][ T29] audit: type=1400 audit(1748859629.165:654): avc: denied { open } for pid=3987 comm="syz.3.134" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 50.289110][ T3988] loop3: detected capacity change from 0 to 1024 [ 50.373799][ T3988] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.396496][ T29] audit: type=1400 audit(1748859629.305:655): avc: denied { append } for pid=3994 comm="syz.4.136" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 50.396602][ T3995] FAULT_INJECTION: forcing a failure. [ 50.396602][ T3995] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 50.433885][ T3995] CPU: 0 UID: 0 PID: 3995 Comm: syz.4.136 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(voluntary) [ 50.433998][ T3995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 50.434015][ T3995] Call Trace: [ 50.434023][ T3995] [ 50.434031][ T3995] __dump_stack+0x1d/0x30 [ 50.434053][ T3995] dump_stack_lvl+0xe8/0x140 [ 50.434073][ T3995] dump_stack+0x15/0x1b [ 50.434091][ T3995] should_fail_ex+0x265/0x280 [ 50.434587][ T3995] should_fail+0xb/0x20 [ 50.434650][ T3995] should_fail_usercopy+0x1a/0x20 [ 50.434679][ T3995] _copy_from_user+0x1c/0xb0 [ 50.434709][ T3995] proc_do_submiturb+0x866/0x1d00 [ 50.434755][ T3995] ? proc_do_submiturb+0x110/0x1d00 [ 50.434829][ T3995] ? should_fail_ex+0xdb/0x280 [ 50.434872][ T3995] proc_submiturb+0x7b/0xa0 [ 50.434903][ T3995] usbdev_ioctl+0xcc2/0x1710 [ 50.434950][ T3995] ? __pfx_usbdev_ioctl+0x10/0x10 [ 50.435057][ T3995] __se_sys_ioctl+0xcb/0x140 [ 50.435083][ T3995] __x64_sys_ioctl+0x43/0x50 [ 50.435135][ T3995] x64_sys_call+0x19a8/0x2fb0 [ 50.435163][ T3995] do_syscall_64+0xd2/0x200 [ 50.435302][ T3995] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 50.435339][ T3995] ? clear_bhb_loop+0x40/0x90 [ 50.435368][ T3995] ? clear_bhb_loop+0x40/0x90 [ 50.435441][ T3995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.435467][ T3995] RIP: 0033:0x7f196fc5e969 [ 50.435488][ T3995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.435511][ T3995] RSP: 002b:00007f196e2c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 50.435536][ T3995] RAX: ffffffffffffffda RBX: 00007f196fe85fa0 RCX: 00007f196fc5e969 [ 50.435552][ T3995] RDX: 0000200000000280 RSI: 000000008038550a RDI: 0000000000000006 [ 50.435570][ T3995] RBP: 00007f196e2c7090 R08: 0000000000000000 R09: 0000000000000000 [ 50.435598][ T3995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.435612][ T3995] R13: 0000000000000000 R14: 00007f196fe85fa0 R15: 00007fff57193098 [ 50.435632][ T3995] [ 50.743793][ T4000] loop4: detected capacity change from 0 to 128 [ 50.804128][ T29] audit: type=1326 audit(1748859629.705:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4001 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934fcce969 code=0x7ffc0000 [ 50.830028][ T29] audit: type=1326 audit(1748859629.705:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4001 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934fcce969 code=0x7ffc0000 [ 50.855044][ T29] audit: type=1326 audit(1748859629.705:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4001 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f934fcce969 code=0x7ffc0000 [ 50.880881][ T29] audit: type=1326 audit(1748859629.705:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4001 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934fcce969 code=0x7ffc0000 [ 50.908170][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.006189][ T4005] 8021q: adding VLAN 0 to HW filter on device team1 [ 51.040202][ T3992] loop2: detected capacity change from 0 to 256 [ 51.058431][ T3992] FAT-fs (loop2): bogus number of FAT sectors [ 51.064882][ T3992] FAT-fs (loop2): Can't find a valid FAT filesystem [ 51.399494][ T4023] FAULT_INJECTION: forcing a failure. [ 51.399494][ T4023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.413555][ T4023] CPU: 0 UID: 0 PID: 4023 Comm: syz.3.148 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(voluntary) [ 51.413632][ T4023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 51.413649][ T4023] Call Trace: [ 51.413658][ T4023] [ 51.413666][ T4023] __dump_stack+0x1d/0x30 [ 51.413688][ T4023] dump_stack_lvl+0xe8/0x140 [ 51.413769][ T4023] dump_stack+0x15/0x1b [ 51.413792][ T4023] should_fail_ex+0x265/0x280 [ 51.413820][ T4023] should_fail+0xb/0x20 [ 51.413844][ T4023] should_fail_usercopy+0x1a/0x20 [ 51.413887][ T4023] _copy_from_user+0x1c/0xb0 [ 51.413926][ T4023] restore_altstack+0x4b/0x2d0 [ 51.413966][ T4023] ? __set_task_blocked+0x23a/0x2a0 [ 51.413996][ T4023] __ia32_sys_rt_sigreturn+0xdc/0x350 [ 51.414071][ T4023] ? _raw_spin_unlock_irq+0x26/0x50 [ 51.414165][ T4023] ? signal_setup_done+0x266/0x290 [ 51.414243][ T4023] ? xfd_validate_state+0x45/0xf0 [ 51.414296][ T4023] ? fpu__clear_user_states+0x63/0x1e0 [ 51.414336][ T4023] ? fpregs_mark_activate+0x66/0x140 [ 51.414411][ T4023] ? fpu__clear_user_states+0x63/0x1e0 [ 51.414459][ T4023] ? arch_do_signal_or_restart+0x2f3/0x480 [ 51.414503][ T4023] x64_sys_call+0x2e8a/0x2fb0 [ 51.414526][ T4023] do_syscall_64+0xd2/0x200 [ 51.414563][ T4023] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 51.414598][ T4023] ? clear_bhb_loop+0x40/0x90 [ 51.414638][ T4023] ? clear_bhb_loop+0x40/0x90 [ 51.414707][ T4023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.414741][ T4023] RIP: 0033:0x7fd48f44ab39 [ 51.414759][ T4023] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 51.414782][ T4023] RSP: 002b:00007fd48db16a80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 51.414818][ T4023] RAX: ffffffffffffffda RBX: 00007fd48f6d5fa0 RCX: 00007fd48f44ab39 [ 51.414834][ T4023] RDX: 00007fd48db16a80 RSI: 00007fd48db16bb0 RDI: 0000000000000011 [ 51.414850][ T4023] RBP: 00007fd48db17090 R08: 0000000000000000 R09: 0000000000000000 [ 51.414866][ T4023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.414881][ T4023] R13: 0000000000000000 R14: 00007fd48f6d5fa0 R15: 00007fff79ce39f8 [ 51.414905][ T4023] [ 51.705772][ T4037] __nla_validate_parse: 21 callbacks suppressed [ 51.705799][ T4037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.153'. [ 51.732314][ T4037] IPVS: Error joining to the multicast group [ 51.969734][ T4046] netlink: 44 bytes leftover after parsing attributes in process `syz.0.156'. [ 52.032611][ T4048] loop0: detected capacity change from 0 to 1024 [ 52.040557][ T4048] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 52.050849][ T4048] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 52.067039][ T4048] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 52.080278][ T4048] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 52.089564][ T4048] EXT4-fs (loop0): filesystem has both journal inode and journal device! [ 52.210242][ T4057] netlink: 24 bytes leftover after parsing attributes in process `syz.0.160'. [ 52.276766][ T4061] netlink: 32 bytes leftover after parsing attributes in process `syz.0.162'. [ 52.357911][ T4065] loop0: detected capacity change from 0 to 1024 [ 52.384768][ T4065] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.402725][ T4065] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 52.430313][ T4065] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 52.449325][ T4065] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 2: comm syz.0.164: lblock 2 mapped to illegal pblock 2 (length 1) [ 52.483000][ T4065] EXT4-fs (loop0): Remounting filesystem read-only [ 52.493003][ T4065] EXT4-fs (loop0): 1 orphan inode deleted [ 52.520200][ T4065] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.569954][ T4079] loop3: detected capacity change from 0 to 128 [ 52.583027][ T3330] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.674120][ T4086] netlink: 12 bytes leftover after parsing attributes in process `syz.2.171'. [ 52.696831][ T4089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.172'. [ 52.712780][ T4089] 8021q: adding VLAN 0 to HW filter on device team1 [ 52.717965][ T4091] netlink: 24 bytes leftover after parsing attributes in process `syz.2.173'. [ 52.763807][ T4094] loop2: detected capacity change from 0 to 128 [ 52.785747][ T4094] FAT-fs (loop2): Directory bread(block 32) failed [ 52.804855][ T4094] FAT-fs (loop2): Directory bread(block 33) failed [ 52.812314][ T4094] FAT-fs (loop2): Directory bread(block 34) failed [ 52.819235][ T4094] FAT-fs (loop2): Directory bread(block 35) failed [ 52.826650][ T4094] FAT-fs (loop2): Directory bread(block 36) failed [ 52.833735][ T4094] FAT-fs (loop2): Directory bread(block 37) failed [ 52.840857][ T4094] FAT-fs (loop2): Directory bread(block 38) failed [ 52.847720][ T4094] FAT-fs (loop2): Directory bread(block 39) failed [ 52.854441][ T4094] FAT-fs (loop2): Directory bread(block 40) failed [ 52.861256][ T4094] FAT-fs (loop2): Directory bread(block 41) failed [ 53.097080][ T4101] loop1: detected capacity change from 0 to 512 [ 53.127969][ T4107] loop0: detected capacity change from 0 to 164 [ 53.135834][ T4101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.153792][ T4101] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.209945][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.245949][ T4114] loop0: detected capacity change from 0 to 128 [ 53.260182][ T4115] atomic_op ffff88811a4f7528 conn xmit_atomic 0000000000000000 [ 53.285926][ T4114] netlink: 16 bytes leftover after parsing attributes in process `syz.0.180'. [ 53.322783][ T4114] netlink: 16 bytes leftover after parsing attributes in process `syz.0.180'. [ 53.333242][ T4119] loop1: detected capacity change from 0 to 128 [ 53.379671][ T4121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.183'. [ 53.462037][ T4129] loop0: detected capacity change from 0 to 128 [ 53.477726][ T4129] FAT-fs (loop0): Directory bread(block 32) failed [ 53.485179][ T4129] FAT-fs (loop0): Directory bread(block 33) failed [ 53.492184][ T4129] FAT-fs (loop0): Directory bread(block 34) failed [ 53.501150][ T4129] FAT-fs (loop0): Directory bread(block 35) failed [ 53.508276][ T4125] loop4: detected capacity change from 0 to 1024 [ 53.523176][ T4129] FAT-fs (loop0): Directory bread(block 36) failed [ 53.538256][ T4129] FAT-fs (loop0): Directory bread(block 37) failed [ 53.550635][ T4125] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 53.561156][ T4125] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 53.579007][ T4129] FAT-fs (loop0): Directory bread(block 38) failed [ 53.588720][ T4132] 8021q: adding VLAN 0 to HW filter on device team1 [ 53.594871][ T4125] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 53.595596][ T4129] FAT-fs (loop0): Directory bread(block 39) failed [ 53.605340][ T4125] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 53.620767][ T4125] EXT4-fs (loop4): filesystem has both journal inode and journal device! [ 53.629756][ T4129] FAT-fs (loop0): Directory bread(block 40) failed [ 53.646731][ T4129] FAT-fs (loop0): Directory bread(block 41) failed [ 53.713979][ T4141] 8021q: adding VLAN 0 to HW filter on device team1 [ 53.972102][ T4157] loop4: detected capacity change from 0 to 1024 [ 53.998268][ T4157] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.178703][ T4166] netlink: 'syz.2.200': attribute type 5 has an invalid length. [ 54.197467][ T4166] loop2: detected capacity change from 0 to 512 [ 54.230139][ T4166] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.243314][ T4166] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.262005][ T4166] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.200: corrupted inode contents [ 54.276815][ T4166] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.200: mark_inode_dirty error [ 54.290621][ T4166] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.200: corrupted inode contents [ 54.311833][ T4166] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.200: corrupted inode contents [ 54.326063][ T4166] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.200: mark_inode_dirty error [ 54.339265][ T4166] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.200: corrupted inode contents [ 54.353119][ T4166] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.200: mark_inode_dirty error [ 54.368676][ T4166] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.200: corrupted inode contents [ 54.381316][ T4166] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.200: mark_inode_dirty error [ 54.637718][ T4176] atomic_op ffff888119dbd528 conn xmit_atomic 0000000000000000 [ 54.713031][ T4180] 8021q: adding VLAN 0 to HW filter on device team2 [ 54.815728][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.837917][ T4185] loop4: detected capacity change from 0 to 128 [ 54.855191][ T4185] FAT-fs (loop4): Directory bread(block 32) failed [ 54.861992][ T4185] FAT-fs (loop4): Directory bread(block 33) failed [ 54.880718][ T4185] FAT-fs (loop4): Directory bread(block 34) failed [ 54.891334][ T4185] FAT-fs (loop4): Directory bread(block 35) failed [ 54.899224][ T4185] FAT-fs (loop4): Directory bread(block 36) failed [ 54.906906][ T4183] syz.3.206 (4183) used greatest stack depth: 10840 bytes left [ 54.912251][ T4185] FAT-fs (loop4): Directory bread(block 37) failed [ 54.927000][ T4185] FAT-fs (loop4): Directory bread(block 38) failed [ 54.934146][ T4185] FAT-fs (loop4): Directory bread(block 39) failed [ 54.942204][ T4185] FAT-fs (loop4): Directory bread(block 40) failed [ 54.951669][ T4185] FAT-fs (loop4): Directory bread(block 41) failed [ 54.975005][ T3333] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.121130][ T4195] syz.2.211 (4195) used greatest stack depth: 10616 bytes left [ 55.158827][ T4193] syz.3.210 (4193) used greatest stack depth: 10552 bytes left [ 55.170108][ T4203] loop2: detected capacity change from 0 to 128 [ 55.276948][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 55.276964][ T29] audit: type=1326 audit(1748859634.185:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4211 comm="syz.2.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9d568e969 code=0x7ffc0000 [ 55.321135][ T29] audit: type=1326 audit(1748859634.215:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4211 comm="syz.2.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fa9d568e969 code=0x7ffc0000 [ 55.348786][ T29] audit: type=1326 audit(1748859634.215:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4211 comm="syz.2.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9d568e969 code=0x7ffc0000 [ 55.372901][ T29] audit: type=1326 audit(1748859634.215:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4211 comm="syz.2.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa9d568e969 code=0x7ffc0000 [ 55.397171][ T29] audit: type=1326 audit(1748859634.215:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4211 comm="syz.2.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9d568e969 code=0x7ffc0000 [ 55.422207][ T29] audit: type=1326 audit(1748859634.215:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4211 comm="syz.2.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7fa9d568e969 code=0x7ffc0000 [ 55.447355][ T29] audit: type=1326 audit(1748859634.215:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4211 comm="syz.2.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9d568e969 code=0x7ffc0000 [ 55.471735][ T29] audit: type=1326 audit(1748859634.215:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4211 comm="syz.2.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9d568e969 code=0x7ffc0000 [ 55.553180][ T4217] loop4: detected capacity change from 0 to 128 [ 55.614421][ T29] audit: type=1326 audit(1748859634.525:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4222 comm="syz.3.221" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd48f4ae969 code=0x0 [ 55.716008][ T4231] netlink: 'syz.3.221': attribute type 5 has an invalid length. [ 55.739019][ T4231] loop3: detected capacity change from 0 to 512 [ 55.786245][ T29] audit: type=1326 audit(1748859634.695:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4236 comm="syz.0.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934fcce969 code=0x7ffc0000 [ 55.890487][ T4231] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.904591][ T4221] loop1: detected capacity change from 0 to 256 [ 55.913778][ T4221] FAT-fs (loop1): bogus number of FAT sectors [ 55.921000][ T4221] FAT-fs (loop1): Can't find a valid FAT filesystem [ 55.953899][ T4252] loop2: detected capacity change from 0 to 128 [ 55.954128][ T4231] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.976290][ T4231] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.221: corrupted inode contents [ 55.985319][ T4253] 8021q: adding VLAN 0 to HW filter on device team2 [ 56.001500][ T4231] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.221: mark_inode_dirty error [ 56.044150][ T4231] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.221: corrupted inode contents [ 56.082993][ T4255] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.221: corrupted inode contents [ 56.133591][ T4255] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.221: mark_inode_dirty error [ 56.147341][ T4255] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.221: corrupted inode contents [ 56.168680][ T4255] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.221: mark_inode_dirty error [ 56.184767][ T4255] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.221: corrupted inode contents [ 56.198108][ T4255] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.221: mark_inode_dirty error [ 56.338649][ T4282] loop2: detected capacity change from 0 to 1024 [ 56.362976][ T4282] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 56.375211][ T4282] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 56.388458][ T4282] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 56.399634][ T4282] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 56.409038][ T4282] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 56.441575][ T4288] loop0: detected capacity change from 0 to 128 [ 56.467794][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.575579][ T4298] 9pnet_fd: Insufficient options for proto=fd [ 56.691966][ T4312] loop3: detected capacity change from 0 to 1024 [ 56.711636][ T4312] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 56.717187][ T4316] loop4: detected capacity change from 0 to 128 [ 56.761288][ T4320] loop0: detected capacity change from 0 to 128 [ 56.841808][ T4328] __nla_validate_parse: 18 callbacks suppressed [ 56.841827][ T4328] netlink: 96 bytes leftover after parsing attributes in process `syz.2.261'. [ 56.866883][ T4328] netlink: 'syz.2.261': attribute type 5 has an invalid length. [ 56.874936][ T4328] netlink: 44 bytes leftover after parsing attributes in process `syz.2.261'. [ 56.902255][ T4335] netlink: 24 bytes leftover after parsing attributes in process `syz.4.268'. [ 56.913841][ T4333] netlink: 32 bytes leftover after parsing attributes in process `syz.0.267'. [ 56.924759][ T4328] loop2: detected capacity change from 0 to 512 [ 56.967386][ T4328] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.990503][ T4328] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.002337][ T4328] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.261: corrupted inode contents [ 57.015196][ T4328] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.261: mark_inode_dirty error [ 57.022699][ T4336] loop3: detected capacity change from 0 to 2048 [ 57.034668][ T4342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.268'. [ 57.049153][ T4328] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.261: corrupted inode contents [ 57.065560][ T4343] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.261: corrupted inode contents [ 57.108989][ T4343] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.261: mark_inode_dirty error [ 57.121695][ T4343] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.261: corrupted inode contents [ 57.141100][ T4343] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.261: mark_inode_dirty error [ 57.154412][ T4343] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.261: corrupted inode contents [ 57.169433][ T4343] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.261: mark_inode_dirty error [ 57.173899][ T4336] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.200031][ T4349] netlink: 76 bytes leftover after parsing attributes in process `syz.1.269'. [ 57.211675][ T4349] netlink: 40 bytes leftover after parsing attributes in process `syz.1.269'. [ 57.232473][ T4335] syz.4.268 (4335) used greatest stack depth: 10424 bytes left [ 57.372516][ T4358] netlink: 96 bytes leftover after parsing attributes in process `syz.4.274'. [ 57.398423][ T4358] netlink: 'syz.4.274': attribute type 5 has an invalid length. [ 57.406596][ T4358] netlink: 44 bytes leftover after parsing attributes in process `syz.4.274'. [ 57.420507][ T4358] loop4: detected capacity change from 0 to 512 [ 57.437665][ T4358] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.456387][ T4358] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.469301][ T4358] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.274: corrupted inode contents [ 57.481840][ T4358] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.274: mark_inode_dirty error [ 57.495847][ T4358] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.274: corrupted inode contents [ 57.528431][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.545068][ T4364] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.274: corrupted inode contents [ 57.600869][ T3333] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.620790][ T4364] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.274: mark_inode_dirty error [ 57.655172][ T4364] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.274: corrupted inode contents [ 57.685053][ T4372] loop2: detected capacity change from 0 to 128 [ 57.698181][ T4364] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.274: mark_inode_dirty error [ 57.713878][ T4364] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.274: corrupted inode contents [ 57.728215][ T4364] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.274: mark_inode_dirty error [ 57.753433][ T4375] loop3: detected capacity change from 0 to 128 [ 57.886598][ T4389] loop2: detected capacity change from 0 to 1024 [ 57.894459][ T4389] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 57.964202][ T4396] netlink: 24 bytes leftover after parsing attributes in process `syz.3.289'. [ 58.004303][ T4399] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 58.022400][ T4399] can: request_module (can-proto-0) failed. [ 58.046360][ T4403] loop2: detected capacity change from 0 to 2048 [ 58.075500][ T4403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.196360][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.250305][ T4412] loop4: detected capacity change from 0 to 128 [ 58.281880][ T4414] 8021q: adding VLAN 0 to HW filter on device team2 [ 58.544303][ T4433] loop0: detected capacity change from 0 to 128 [ 58.621296][ T4435] loop4: detected capacity change from 0 to 1024 [ 58.635728][ T4439] loop0: detected capacity change from 0 to 128 [ 58.651288][ T4435] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 58.661531][ T4435] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 58.678132][ T4435] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 58.688411][ T4435] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 58.698033][ T4435] EXT4-fs (loop4): filesystem has both journal inode and journal device! [ 58.737511][ T4441] loop0: detected capacity change from 0 to 164 [ 58.759003][ T3333] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.885210][ T4446] loop0: detected capacity change from 0 to 1024 [ 58.941491][ T4446] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.948891][ T4450] SET target dimension over the limit! [ 58.974229][ T4456] IPVS: Error joining to the multicast group [ 59.001174][ T4450] loop4: detected capacity change from 0 to 512 [ 59.062857][ T4460] loop2: detected capacity change from 0 to 128 [ 59.077823][ T4450] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.109693][ T4450] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.127804][ T3330] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.221254][ T4471] loop3: detected capacity change from 0 to 128 [ 59.245031][ T4478] netlink: 'syz.1.319': attribute type 5 has an invalid length. [ 59.271391][ T4478] loop1: detected capacity change from 0 to 512 [ 59.328641][ T4478] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.341342][ T4478] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.359076][ T4483] loop3: detected capacity change from 0 to 164 [ 59.404273][ T4478] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.319: corrupted inode contents [ 59.409767][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.431889][ T4478] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.319: mark_inode_dirty error [ 59.450620][ T4478] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.319: corrupted inode contents [ 59.476370][ T4496] netlink: 'syz.2.324': attribute type 5 has an invalid length. [ 59.485078][ T4493] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.319: corrupted inode contents [ 59.497920][ T4493] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.319: mark_inode_dirty error [ 59.518006][ T4493] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.319: corrupted inode contents [ 59.531924][ T4496] loop2: detected capacity change from 0 to 512 [ 59.543381][ T4493] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.319: mark_inode_dirty error [ 59.556591][ T4493] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.319: corrupted inode contents [ 59.604032][ T4493] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.319: mark_inode_dirty error [ 59.622532][ T4496] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.647449][ T4496] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.659858][ T4507] loop4: detected capacity change from 0 to 128 [ 59.686232][ T4496] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.324: corrupted inode contents [ 59.708793][ T4496] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.324: mark_inode_dirty error [ 59.723109][ T4511] atomic_op ffff88810124c928 conn xmit_atomic 0000000000000000 [ 59.732145][ T4496] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.324: corrupted inode contents [ 59.747327][ T4515] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.324: corrupted inode contents [ 59.759491][ T4515] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.324: mark_inode_dirty error [ 59.771619][ T4515] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.324: corrupted inode contents [ 59.791190][ T4515] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.324: mark_inode_dirty error [ 59.805908][ T4515] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.324: corrupted inode contents [ 59.820046][ T4515] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.324: mark_inode_dirty error [ 59.851672][ T4521] IPVS: Error joining to the multicast group [ 59.979772][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.983230][ T4524] netlink: 'syz.0.336': attribute type 5 has an invalid length. [ 60.006372][ T4524] loop0: detected capacity change from 0 to 512 [ 60.025447][ T4524] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.038766][ T4524] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.051441][ T4524] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.336: corrupted inode contents [ 60.064820][ T4524] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.336: mark_inode_dirty error [ 60.079911][ T4524] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.336: corrupted inode contents [ 60.094363][ T4524] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.336: corrupted inode contents [ 60.107003][ T4524] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.336: mark_inode_dirty error [ 60.118820][ T4524] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.336: corrupted inode contents [ 60.131464][ T4524] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.336: mark_inode_dirty error [ 60.143200][ T4524] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.336: corrupted inode contents [ 60.155817][ T4524] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.336: mark_inode_dirty error [ 60.209372][ T3333] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.266540][ T4534] loop1: detected capacity change from 0 to 1024 [ 60.274527][ T4534] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 60.284545][ T4534] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 60.295659][ T4534] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 60.305832][ T4534] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 60.314649][ T4534] EXT4-fs (loop1): filesystem has both journal inode and journal device! [ 60.365394][ T29] kauditd_printk_skb: 5769 callbacks suppressed [ 60.365412][ T29] audit: type=1326 audit(1748859639.275:6625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4537 comm="syz.1.342" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d471ae969 code=0x0 [ 60.468282][ T4540] netlink: 'syz.1.342': attribute type 5 has an invalid length. [ 60.481460][ T4540] loop1: detected capacity change from 0 to 512 [ 60.501179][ T4540] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.514291][ T4540] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.527759][ T4540] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.342: corrupted inode contents [ 60.584740][ T4540] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.342: mark_inode_dirty error [ 60.605397][ T4540] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.342: corrupted inode contents [ 60.633543][ T4547] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.342: corrupted inode contents [ 60.647935][ T4547] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.342: mark_inode_dirty error [ 60.661159][ T4547] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.342: corrupted inode contents [ 60.675743][ T4547] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.342: mark_inode_dirty error [ 60.689501][ T4547] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.342: corrupted inode contents [ 60.703836][ T4547] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.342: mark_inode_dirty error [ 60.735548][ T3330] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.793299][ T4555] loop0: detected capacity change from 0 to 128 [ 60.999224][ T29] audit: type=1326 audit(1748859639.885:6626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4567 comm="syz.4.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196fc5e969 code=0x7ffc0000 [ 61.023091][ T29] audit: type=1326 audit(1748859639.885:6627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4567 comm="syz.4.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196fc5e969 code=0x7ffc0000 [ 61.046556][ T29] audit: type=1326 audit(1748859639.885:6628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4567 comm="syz.4.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f196fc5e969 code=0x7ffc0000 [ 61.070539][ T29] audit: type=1326 audit(1748859639.885:6629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4567 comm="syz.4.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196fc5e969 code=0x7ffc0000 [ 61.095082][ T29] audit: type=1326 audit(1748859639.885:6630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4567 comm="syz.4.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196fc5e969 code=0x7ffc0000 [ 61.118588][ T29] audit: type=1326 audit(1748859639.885:6631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4567 comm="syz.4.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f196fc5e969 code=0x7ffc0000 [ 61.142433][ T29] audit: type=1326 audit(1748859639.885:6632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4567 comm="syz.4.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196fc5e969 code=0x7ffc0000 [ 61.166286][ T29] audit: type=1326 audit(1748859639.885:6633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4567 comm="syz.4.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f196fc5e969 code=0x7ffc0000 [ 61.190181][ T29] audit: type=1326 audit(1748859639.885:6634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4567 comm="syz.4.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196fc5e969 code=0x7ffc0000 [ 61.241175][ T4574] loop3: detected capacity change from 0 to 1024 [ 61.266823][ T4572] atomic_op ffff88811a4f7928 conn xmit_atomic 0000000000000000 [ 61.355304][ T4574] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 61.402227][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.638508][ T4585] loop3: detected capacity change from 0 to 2048 [ 61.771429][ T4585] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.266369][ T4597] loop0: detected capacity change from 0 to 128 [ 62.346225][ T4601] loop2: detected capacity change from 0 to 1024 [ 62.376454][ T4601] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.509797][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.526404][ T3333] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.663046][ T4619] __nla_validate_parse: 20 callbacks suppressed [ 62.663068][ T4619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.369'. [ 62.700659][ T4619] IPVS: Error joining to the multicast group [ 62.796865][ T4632] openvswitch: netlink: Message has 6 unknown bytes. [ 62.802107][ T4629] atomic_op ffff88811a30ed28 conn xmit_atomic 0000000000000000 [ 62.930359][ T4648] loop3: detected capacity change from 0 to 1024 [ 62.938208][ T4648] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 62.948059][ T4648] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 62.965173][ T4648] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 62.975242][ T4648] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 62.984213][ T4648] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 62.996155][ T4649] netlink: 96 bytes leftover after parsing attributes in process `syz.0.377'. [ 63.005710][ T4649] netlink: 'syz.0.377': attribute type 5 has an invalid length. [ 63.013719][ T4649] netlink: 44 bytes leftover after parsing attributes in process `syz.0.377'. [ 63.060313][ T4649] loop0: detected capacity change from 0 to 512 [ 63.119780][ T4649] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.145396][ T4649] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.163381][ T4649] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.377: corrupted inode contents [ 63.179124][ T4649] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.377: mark_inode_dirty error [ 63.191473][ T4649] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.377: corrupted inode contents [ 63.210563][ T4649] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.377: corrupted inode contents [ 63.223067][ T4649] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.377: mark_inode_dirty error [ 63.293105][ T4649] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.377: corrupted inode contents [ 63.339615][ T4649] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.377: mark_inode_dirty error [ 63.371788][ T4649] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.377: corrupted inode contents [ 63.419914][ T4649] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.377: mark_inode_dirty error [ 63.624713][ T4679] netlink: 100 bytes leftover after parsing attributes in process `syz.3.393'. [ 63.688668][ T4687] loop1: detected capacity change from 0 to 164 [ 63.718543][ T4687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.730821][ T4689] gtp0: entered promiscuous mode [ 63.735887][ T4689] gtp0: entered allmulticast mode [ 63.740257][ T4687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.754994][ T3330] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.759336][ T4689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.397'. [ 63.773541][ T4689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.397'. [ 63.787978][ T4687] nfs4: Bad value for 'source' [ 63.986652][ T4700] loop0: detected capacity change from 0 to 128 [ 64.103961][ T4706] netlink: 100 bytes leftover after parsing attributes in process `syz.3.405'. [ 64.189755][ T4704] loop0: detected capacity change from 0 to 256 [ 64.197962][ T4704] FAT-fs (loop0): bogus number of FAT sectors [ 64.204246][ T4704] FAT-fs (loop0): Can't find a valid FAT filesystem [ 64.622837][ T4725] FAULT_INJECTION: forcing a failure. [ 64.622837][ T4725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.635997][ T4725] CPU: 1 UID: 0 PID: 4725 Comm: syz.4.411 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(voluntary) [ 64.636024][ T4725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 64.636040][ T4725] Call Trace: [ 64.636048][ T4725] [ 64.636115][ T4725] __dump_stack+0x1d/0x30 [ 64.636137][ T4725] dump_stack_lvl+0xe8/0x140 [ 64.636161][ T4725] dump_stack+0x15/0x1b [ 64.636183][ T4725] should_fail_ex+0x265/0x280 [ 64.636246][ T4725] should_fail+0xb/0x20 [ 64.636266][ T4725] should_fail_usercopy+0x1a/0x20 [ 64.636288][ T4725] _copy_from_iter+0xcf/0xe40 [ 64.636310][ T4725] ? __build_skb_around+0x1a0/0x200 [ 64.636382][ T4725] ? __alloc_skb+0x223/0x320 [ 64.636412][ T4725] netlink_sendmsg+0x471/0x6b0 [ 64.636483][ T4725] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.636520][ T4725] __sock_sendmsg+0x145/0x180 [ 64.636548][ T4725] ____sys_sendmsg+0x31e/0x4e0 [ 64.636597][ T4725] ___sys_sendmsg+0x17b/0x1d0 [ 64.636670][ T4725] __x64_sys_sendmsg+0xd4/0x160 [ 64.636729][ T4725] x64_sys_call+0x2999/0x2fb0 [ 64.636753][ T4725] do_syscall_64+0xd2/0x200 [ 64.636792][ T4725] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 64.636833][ T4725] ? clear_bhb_loop+0x40/0x90 [ 64.636899][ T4725] ? clear_bhb_loop+0x40/0x90 [ 64.636922][ T4725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.636944][ T4725] RIP: 0033:0x7f196fc5e969 [ 64.636968][ T4725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.636990][ T4725] RSP: 002b:00007f196e2c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.637037][ T4725] RAX: ffffffffffffffda RBX: 00007f196fe85fa0 RCX: 00007f196fc5e969 [ 64.637054][ T4725] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 64.637069][ T4725] RBP: 00007f196e2c7090 R08: 0000000000000000 R09: 0000000000000000 [ 64.637085][ T4725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.637101][ T4725] R13: 0000000000000000 R14: 00007f196fe85fa0 R15: 00007fff57193098 [ 64.637193][ T4725] [ 64.883526][ T4722] xt_CT: No such helper "netbios-ns" [ 65.064908][ T4736] loop1: detected capacity change from 0 to 128 [ 65.158454][ T4750] FAULT_INJECTION: forcing a failure. [ 65.158454][ T4750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.165250][ T4751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.421'. [ 65.172258][ T4750] CPU: 0 UID: 0 PID: 4750 Comm: syz.4.422 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(voluntary) [ 65.172296][ T4750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 65.172314][ T4750] Call Trace: [ 65.172322][ T4750] [ 65.172332][ T4750] __dump_stack+0x1d/0x30 [ 65.172360][ T4750] dump_stack_lvl+0xe8/0x140 [ 65.172387][ T4750] dump_stack+0x15/0x1b [ 65.172454][ T4750] should_fail_ex+0x265/0x280 [ 65.172487][ T4750] should_fail+0xb/0x20 [ 65.172511][ T4750] should_fail_usercopy+0x1a/0x20 [ 65.172541][ T4750] _copy_from_iter+0xcf/0xe40 [ 65.172571][ T4750] ? __build_skb_around+0x1a0/0x200 [ 65.172608][ T4750] ? __alloc_skb+0x223/0x320 [ 65.172713][ T4750] netlink_sendmsg+0x471/0x6b0 [ 65.172774][ T4750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.172861][ T4750] __sock_sendmsg+0x145/0x180 [ 65.172891][ T4750] ____sys_sendmsg+0x31e/0x4e0 [ 65.172934][ T4750] ___sys_sendmsg+0x17b/0x1d0 [ 65.172977][ T4750] __x64_sys_sendmsg+0xd4/0x160 [ 65.173051][ T4750] x64_sys_call+0x2999/0x2fb0 [ 65.173080][ T4750] do_syscall_64+0xd2/0x200 [ 65.173161][ T4750] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 65.173221][ T4750] ? clear_bhb_loop+0x40/0x90 [ 65.173250][ T4750] ? clear_bhb_loop+0x40/0x90 [ 65.173280][ T4750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.173310][ T4750] RIP: 0033:0x7f196fc5e969 [ 65.173330][ T4750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.173406][ T4750] RSP: 002b:00007f196e2c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.173442][ T4750] RAX: ffffffffffffffda RBX: 00007f196fe85fa0 RCX: 00007f196fc5e969 [ 65.173458][ T4750] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 65.173479][ T4750] RBP: 00007f196e2c7090 R08: 0000000000000000 R09: 0000000000000000 [ 65.173496][ T4750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.173513][ T4750] R13: 0000000000000000 R14: 00007f196fe85fa0 R15: 00007fff57193098 [ 65.173539][ T4750] [ 65.403526][ T29] kauditd_printk_skb: 168 callbacks suppressed [ 65.403544][ T29] audit: type=1326 audit(1748859644.305:6803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4754 comm="syz.4.424" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f196fc5e969 code=0x0 [ 65.451407][ T4751] 8021q: adding VLAN 0 to HW filter on device team2 [ 65.469731][ T4756] netlink: 96 bytes leftover after parsing attributes in process `syz.4.424'. [ 65.479196][ T4756] netlink: 'syz.4.424': attribute type 5 has an invalid length. [ 65.487523][ T4756] netlink: 44 bytes leftover after parsing attributes in process `syz.4.424'. [ 65.504933][ T4756] loop4: detected capacity change from 0 to 512 [ 65.521388][ T4753] loop0: detected capacity change from 0 to 1024 [ 65.528840][ T4753] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 65.540594][ T4753] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 65.570627][ T4756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.588484][ T4753] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 65.598558][ T4753] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 65.607689][ T4753] EXT4-fs (loop0): filesystem has both journal inode and journal device! [ 65.607981][ T4756] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.641345][ T29] audit: type=1400 audit(1748859644.545:6804): avc: denied { read } for pid=4762 comm="syz.2.426" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 65.664741][ T29] audit: type=1400 audit(1748859644.545:6805): avc: denied { open } for pid=4762 comm="syz.2.426" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 65.709065][ T4763] loop2: detected capacity change from 0 to 512 [ 65.716936][ T4756] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.424: corrupted inode contents [ 65.729730][ T29] audit: type=1400 audit(1748859644.615:6806): avc: denied { create } for pid=4762 comm="syz.2.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 65.754550][ T4761] IPVS: Error joining to the multicast group [ 65.761055][ T4763] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846c118, mo2=0002] [ 65.769861][ T4763] System zones: 1-12 [ 65.775418][ T4763] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #2: block 3: comm syz.2.426: lblock 0 mapped to illegal pblock 3 (length 1) [ 65.792108][ T4756] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.424: mark_inode_dirty error [ 65.819751][ T4763] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.426: error -117 reading directory block [ 65.840340][ T29] audit: type=1326 audit(1748859644.725:6807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4766 comm="syz.0.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934fcce969 code=0x7ffc0000 [ 65.858232][ T4769] loop1: detected capacity change from 0 to 128 [ 65.864844][ T29] audit: type=1326 audit(1748859644.725:6808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4766 comm="syz.0.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934fcce969 code=0x7ffc0000 [ 65.894814][ T29] audit: type=1326 audit(1748859644.725:6809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4766 comm="syz.0.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f934fcce969 code=0x7ffc0000 [ 65.918618][ T29] audit: type=1326 audit(1748859644.725:6810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4766 comm="syz.0.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934fcce969 code=0x7ffc0000 [ 65.942799][ T29] audit: type=1326 audit(1748859644.725:6811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4766 comm="syz.0.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f934fcce969 code=0x7ffc0000 [ 65.943723][ T4763] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 65.966674][ T29] audit: type=1326 audit(1748859644.725:6812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4766 comm="syz.0.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934fcce969 code=0x7ffc0000 [ 65.985896][ T4763] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.012178][ T4756] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.424: corrupted inode contents [ 66.069721][ T4772] loop3: detected capacity change from 0 to 1024 [ 66.093931][ T4763] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #2: comm syz.2.426: corrupted xattr block 255: invalid header [ 66.117700][ T4765] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.424: corrupted inode contents [ 66.139083][ T4763] SELinux: (dev loop2, type ext4) getxattr errno 117 [ 66.143815][ T4765] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.424: mark_inode_dirty error [ 66.159473][ T4763] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.227397][ T4765] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.424: corrupted inode contents [ 66.227656][ T4765] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.424: mark_inode_dirty error [ 66.227790][ T4765] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.424: corrupted inode contents [ 66.228940][ T4765] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.424: mark_inode_dirty error [ 66.242942][ T4784] loop1: detected capacity change from 0 to 512 [ 66.243750][ T4784] EXT4-fs: Ignoring removed nobh option [ 66.243828][ T4784] ext2: Bad value for 'max_batch_time' [ 66.254602][ T4772] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.340450][ T4763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.361346][ T4763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.365916][ T4763] bond0 (unregistering): Released all slaves [ 66.380743][ T4792] netlink: 'syz.2.426': attribute type 39 has an invalid length. [ 66.636014][ T4800] IPVS: Error joining to the multicast group [ 66.654726][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.675991][ T4805] loop2: detected capacity change from 0 to 128 [ 66.917550][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.972887][ T4813] atomic_op ffff88811adc8928 conn xmit_atomic 0000000000000000 [ 67.082304][ T4824] FAULT_INJECTION: forcing a failure. [ 67.082304][ T4824] name failslab, interval 1, probability 0, space 0, times 0 [ 67.095247][ T4824] CPU: 0 UID: 0 PID: 4824 Comm: syz.3.449 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(voluntary) [ 67.095275][ T4824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 67.095287][ T4824] Call Trace: [ 67.095295][ T4824] [ 67.095380][ T4824] __dump_stack+0x1d/0x30 [ 67.095404][ T4824] dump_stack_lvl+0xe8/0x140 [ 67.095426][ T4824] dump_stack+0x15/0x1b [ 67.095447][ T4824] should_fail_ex+0x265/0x280 [ 67.095473][ T4824] ? tipc_sub_subscribe+0xc7/0x340 [ 67.095548][ T4824] should_failslab+0x8c/0xb0 [ 67.095575][ T4824] __kmalloc_cache_noprof+0x4c/0x320 [ 67.095679][ T4824] tipc_sub_subscribe+0xc7/0x340 [ 67.095705][ T4824] ? idr_alloc+0x89/0xd0 [ 67.095737][ T4824] tipc_conn_rcv_sub+0x100/0x210 [ 67.095767][ T4824] tipc_topsrv_kern_subscr+0x148/0x1b0 [ 67.095805][ T4824] tipc_group_create+0x24d/0x290 [ 67.095839][ T4824] tipc_sk_join+0x130/0x2e0 [ 67.095867][ T4824] tipc_setsockopt+0x598/0x620 [ 67.095888][ T4824] ? __pfx_tipc_setsockopt+0x10/0x10 [ 67.095907][ T4824] __sys_setsockopt+0x181/0x200 [ 67.096006][ T4824] __x64_sys_setsockopt+0x64/0x80 [ 67.096062][ T4824] x64_sys_call+0x2bd5/0x2fb0 [ 67.096087][ T4824] do_syscall_64+0xd2/0x200 [ 67.096117][ T4824] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 67.096230][ T4824] ? clear_bhb_loop+0x40/0x90 [ 67.096265][ T4824] ? clear_bhb_loop+0x40/0x90 [ 67.096353][ T4824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.096381][ T4824] RIP: 0033:0x7fd48f4ae969 [ 67.096405][ T4824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.096422][ T4824] RSP: 002b:00007fd48db17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 67.096449][ T4824] RAX: ffffffffffffffda RBX: 00007fd48f6d5fa0 RCX: 00007fd48f4ae969 [ 67.096460][ T4824] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 67.096470][ T4824] RBP: 00007fd48db17090 R08: 0000000000000010 R09: 0000000000000000 [ 67.096481][ T4824] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 67.096492][ T4824] R13: 0000000000000000 R14: 00007fd48f6d5fa0 R15: 00007fff79ce39f8 [ 67.096510][ T4824] [ 67.096517][ T4824] tipc: Subscription rejected, no memory [ 67.433226][ T4835] IPVS: Error joining to the multicast group [ 67.493824][ T4840] 8021q: adding VLAN 0 to HW filter on device team3 [ 67.559783][ T4848] loop3: detected capacity change from 0 to 128 [ 67.681308][ T4854] loop0: detected capacity change from 0 to 1024 [ 67.819802][ T4861] __nla_validate_parse: 7 callbacks suppressed [ 67.819820][ T4861] netlink: 32 bytes leftover after parsing attributes in process `syz.4.464'. [ 67.894022][ T4861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.464'. [ 67.933791][ T4861] FAULT_INJECTION: forcing a failure. [ 67.933791][ T4861] name failslab, interval 1, probability 0, space 0, times 0 [ 67.946737][ T4861] CPU: 0 UID: 0 PID: 4861 Comm: syz.4.464 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(voluntary) [ 67.946779][ T4861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 67.946796][ T4861] Call Trace: [ 67.946804][ T4861] [ 67.946815][ T4861] __dump_stack+0x1d/0x30 [ 67.946837][ T4861] dump_stack_lvl+0xe8/0x140 [ 67.946926][ T4861] dump_stack+0x15/0x1b [ 67.946948][ T4861] should_fail_ex+0x265/0x280 [ 67.946974][ T4861] ? audit_log_d_path+0x8d/0x150 [ 67.947051][ T4861] should_failslab+0x8c/0xb0 [ 67.947084][ T4861] __kmalloc_cache_noprof+0x4c/0x320 [ 67.947140][ T4861] audit_log_d_path+0x8d/0x150 [ 67.947184][ T4861] audit_log_d_path_exe+0x42/0x70 [ 67.947202][ T4861] audit_log_task+0x1e9/0x250 [ 67.947237][ T4861] audit_seccomp+0x61/0x100 [ 67.947326][ T4861] ? __seccomp_filter+0x68c/0x10d0 [ 67.947358][ T4861] __seccomp_filter+0x69d/0x10d0 [ 67.947385][ T4861] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 67.947409][ T4861] ? vfs_write+0x75e/0x8e0 [ 67.947513][ T4861] __secure_computing+0x82/0x150 [ 67.947541][ T4861] syscall_trace_enter+0xcf/0x1e0 [ 67.947586][ T4861] do_syscall_64+0xac/0x200 [ 67.947617][ T4861] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 67.947644][ T4861] ? clear_bhb_loop+0x40/0x90 [ 67.947670][ T4861] ? clear_bhb_loop+0x40/0x90 [ 67.947706][ T4861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.947732][ T4861] RIP: 0033:0x7f196fc5e969 [ 67.947811][ T4861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.947830][ T4861] RSP: 002b:00007f196e2c6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 67.947848][ T4861] RAX: ffffffffffffffda RBX: 0000000000000531 RCX: 00007f196fc5e969 [ 67.947860][ T4861] RDX: 00007f196e2c6ef0 RSI: 0000000000000000 RDI: 00007f196fce1444 [ 67.947872][ T4861] RBP: 0000200000000780 R08: 00007f196e2c6bb7 R09: 00007f196e2c6e40 [ 67.947884][ T4861] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 67.947899][ T4861] R13: 00007f196e2c6ef0 R14: 00007f196e2c6eb0 R15: 0000200000000d80 [ 67.947924][ T4861] [ 68.179133][ T4861] loop4: detected capacity change from 0 to 512 [ 68.192092][ T4866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.466'. [ 68.202537][ T4861] EXT4-fs: Ignoring removed nobh option [ 68.211334][ T4861] ext2: Bad value for 'max_batch_time' [ 68.217900][ T4866] IPVS: Error joining to the multicast group [ 68.377897][ T4875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.469'. [ 68.449558][ T4879] loop2: detected capacity change from 0 to 128 [ 68.469554][ T4875] 8021q: adding VLAN 0 to HW filter on device team3 [ 68.604105][ T4887] atomic_op ffff888119d63d28 conn xmit_atomic 0000000000000000 [ 68.633591][ T4895] netlink: 76 bytes leftover after parsing attributes in process `syz.0.465'. [ 68.657095][ T4863] netlink: 40 bytes leftover after parsing attributes in process `syz.0.465'. [ 68.676242][ T4899] netem: change failed [ 68.681436][ T4900] netlink: 96 bytes leftover after parsing attributes in process `syz.4.475'. [ 68.711784][ T4900] netlink: 'syz.4.475': attribute type 5 has an invalid length. [ 68.719622][ T4900] netlink: 44 bytes leftover after parsing attributes in process `syz.4.475'. [ 68.741465][ T4904] loop4: detected capacity change from 0 to 512 [ 68.767809][ T4903] loop1: detected capacity change from 0 to 1024 [ 68.779702][ T4903] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 68.789855][ T4903] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 68.804374][ T4904] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.817122][ T4903] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 68.827018][ T4903] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 68.835976][ T4903] EXT4-fs (loop1): filesystem has both journal inode and journal device! [ 68.847231][ T4900] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.475: corrupted inode contents [ 68.872121][ T4900] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.475: mark_inode_dirty error [ 68.906794][ T4900] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.475: corrupted inode contents [ 68.937262][ T4904] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.475: corrupted inode contents [ 68.977863][ T4904] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.475: mark_inode_dirty error [ 68.999785][ T4904] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.475: corrupted inode contents [ 69.017746][ T4904] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.475: mark_inode_dirty error [ 69.032621][ T4904] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.475: corrupted inode contents [ 69.050786][ T4904] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.475: mark_inode_dirty error [ 69.149680][ T4923] netlink: 96 bytes leftover after parsing attributes in process `syz.1.488'. [ 69.158961][ T4923] netlink: 'syz.1.488': attribute type 5 has an invalid length. [ 69.166881][ T4923] netlink: 44 bytes leftover after parsing attributes in process `syz.1.488'. [ 69.180168][ T4923] loop1: detected capacity change from 0 to 512 [ 69.196502][ T4923] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.208848][ T4923] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.488: corrupted inode contents [ 69.224418][ T4923] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.488: mark_inode_dirty error [ 69.236123][ T4923] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.488: corrupted inode contents [ 69.253468][ T4923] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.488: corrupted inode contents [ 69.267811][ T4923] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.488: mark_inode_dirty error [ 69.283395][ T4923] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.488: corrupted inode contents [ 69.298173][ T4923] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.488: mark_inode_dirty error [ 69.312141][ T4923] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.488: corrupted inode contents [ 69.325859][ T4923] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.488: mark_inode_dirty error [ 69.471103][ T4929] loop2: detected capacity change from 0 to 164 [ 69.533372][ T4931] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 69.670355][ T4936] gtp1: entered promiscuous mode [ 69.681798][ T4938] loop4: detected capacity change from 0 to 128 [ 69.719319][ T4940] loop4: detected capacity change from 0 to 1024 [ 69.726474][ T4940] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 69.872553][ T4953] 8021q: adding VLAN 0 to HW filter on device team3 [ 69.888723][ T4954] loop4: detected capacity change from 0 to 2048 [ 69.896567][ T4955] netlink: 'syz.2.496': attribute type 5 has an invalid length. [ 69.925111][ T4955] loop2: detected capacity change from 0 to 512 [ 69.948308][ T4955] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.960938][ T4958] atomic_op ffff88811adcbd28 conn xmit_atomic 0000000000000000 [ 69.967697][ T4955] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.496: corrupted inode contents [ 70.002503][ T4955] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.496: mark_inode_dirty error [ 70.022690][ T4955] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.496: corrupted inode contents [ 70.036651][ T4966] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.496: corrupted inode contents [ 70.053822][ T4967] netlink: 'syz.1.500': attribute type 5 has an invalid length. [ 70.063045][ T4966] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.496: mark_inode_dirty error [ 70.076308][ T4966] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.496: corrupted inode contents [ 70.076484][ T4967] loop1: detected capacity change from 0 to 512 [ 70.091130][ T4966] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.496: mark_inode_dirty error [ 70.106973][ T4966] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.496: corrupted inode contents [ 70.124728][ T4966] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.496: mark_inode_dirty error [ 70.146736][ T4967] EXT4-fs mount: 8 callbacks suppressed [ 70.146789][ T4967] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.167796][ T4967] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.180140][ T4967] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.500: corrupted inode contents [ 70.193268][ T4967] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.500: mark_inode_dirty error [ 70.205820][ T4967] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.500: corrupted inode contents [ 70.224193][ T4975] 8021q: adding VLAN 0 to HW filter on device team4 [ 70.233700][ T4967] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.500: corrupted inode contents [ 70.246306][ T4967] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.500: mark_inode_dirty error [ 70.257963][ T4967] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.500: corrupted inode contents [ 70.271219][ T4967] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.500: mark_inode_dirty error [ 70.279309][ T4977] loop0: detected capacity change from 0 to 128 [ 70.282807][ T4967] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.500: corrupted inode contents [ 70.301231][ T4967] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.500: mark_inode_dirty error [ 70.559396][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.599964][ T29] kauditd_printk_skb: 218 callbacks suppressed [ 70.599980][ T29] audit: type=1326 audit(1748859649.505:7031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4982 comm="syz.4.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196fc5e969 code=0x7ffc0000 [ 70.633043][ T29] audit: type=1326 audit(1748859649.505:7032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4982 comm="syz.4.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196fc5e969 code=0x7ffc0000 [ 70.656793][ T29] audit: type=1326 audit(1748859649.505:7033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4982 comm="syz.4.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f196fc5e969 code=0x7ffc0000 [ 70.680266][ T29] audit: type=1326 audit(1748859649.505:7034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4982 comm="syz.4.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196fc5e969 code=0x7ffc0000 [ 70.704064][ T29] audit: type=1326 audit(1748859649.505:7035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4982 comm="syz.4.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196fc5e969 code=0x7ffc0000 [ 70.729002][ T29] audit: type=1326 audit(1748859649.505:7036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4982 comm="syz.4.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f196fc5e969 code=0x7ffc0000 [ 70.757733][ T29] audit: type=1326 audit(1748859649.505:7037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4982 comm="syz.4.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196fc5e969 code=0x7ffc0000 [ 70.786104][ T29] audit: type=1326 audit(1748859649.505:7038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4982 comm="syz.4.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196fc5e969 code=0x7ffc0000 [ 70.811712][ T29] audit: type=1326 audit(1748859649.505:7039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4982 comm="syz.4.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f196fc5e969 code=0x7ffc0000 [ 70.835967][ T29] audit: type=1326 audit(1748859649.505:7040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4982 comm="syz.4.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196fc5e969 code=0x7ffc0000 [ 70.864904][ T3333] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.901168][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.920176][ T4993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.927685][ T4993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.951465][ T4998] loop1: detected capacity change from 0 to 128 [ 70.956333][ T4999] program syz.2.514 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.959495][ T4993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.974584][ T4993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.027945][ T5003] loop4: detected capacity change from 0 to 164 [ 71.100054][ T5007] loop4: detected capacity change from 0 to 1024 [ 71.113663][ T5007] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 71.136380][ T5011] netlink: 'syz.2.519': attribute type 39 has an invalid length. [ 71.209838][ T5018] loop2: detected capacity change from 0 to 1024 [ 71.249682][ T5020] netlink: 'syz.0.520': attribute type 5 has an invalid length. [ 71.253988][ T5018] loop2: detected capacity change from 0 to 512 [ 71.266271][ T5020] loop0: detected capacity change from 0 to 512 [ 71.278627][ T5018] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.521: Failed to acquire dquot type 1 [ 71.317297][ T5018] EXT4-fs (loop2): 1 truncate cleaned up [ 71.323158][ T5022] loop4: detected capacity change from 0 to 2048 [ 71.323542][ T5018] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.338530][ T5020] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.358658][ T5005] loop1: detected capacity change from 0 to 256 [ 71.365499][ T5018] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.366188][ T5020] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.389284][ T5020] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.520: corrupted inode contents [ 71.402923][ T5020] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.520: mark_inode_dirty error [ 71.419821][ T5005] FAT-fs (loop1): bogus number of FAT sectors [ 71.420580][ T5020] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.520: corrupted inode contents [ 71.425966][ T5005] FAT-fs (loop1): Can't find a valid FAT filesystem [ 71.469190][ T3333] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.475999][ T5028] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.520: corrupted inode contents [ 71.490362][ T5028] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.520: mark_inode_dirty error [ 71.502739][ T5028] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.520: corrupted inode contents [ 71.515209][ T5022] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.517110][ T5028] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.520: mark_inode_dirty error [ 71.555815][ T5028] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.520: corrupted inode contents [ 71.571742][ T5033] loop2: detected capacity change from 0 to 164 [ 71.575304][ T5028] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.520: mark_inode_dirty error [ 71.708842][ T5039] netlink: 'syz.2.523': attribute type 5 has an invalid length. [ 71.725859][ T5039] loop2: detected capacity change from 0 to 512 [ 71.746827][ T5039] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.759817][ T5039] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.775224][ T5039] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.523: corrupted inode contents [ 71.788061][ T5039] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.523: mark_inode_dirty error [ 71.800579][ T5039] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.523: corrupted inode contents [ 71.815450][ T5039] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.523: corrupted inode contents [ 71.832367][ T5039] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.523: mark_inode_dirty error [ 71.853101][ T5039] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.523: corrupted inode contents [ 71.866610][ T5039] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.523: mark_inode_dirty error [ 71.886887][ T5039] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.523: corrupted inode contents [ 71.899289][ T5039] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.523: mark_inode_dirty error [ 71.934539][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.980219][ T5056] loop4: detected capacity change from 0 to 128 [ 72.021156][ T5060] loop4: detected capacity change from 0 to 164 [ 72.041396][ T3330] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.130403][ T5074] loop4: detected capacity change from 0 to 128 [ 72.166599][ T5076] loop1: detected capacity change from 0 to 1024 [ 72.181830][ T5076] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 72.266992][ T5085] loop0: detected capacity change from 0 to 164 [ 72.376306][ T5090] loop1: detected capacity change from 0 to 2048 [ 72.410592][ T5091] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 72.438247][ T5091] loop0: detected capacity change from 0 to 512 [ 72.445199][ T5092] loop4: detected capacity change from 0 to 1024 [ 72.455247][ T5090] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.498836][ T5091] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 72.518406][ T3333] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.538426][ T5091] EXT4-fs (loop0): orphan cleanup on readonly fs [ 72.553019][ T5091] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 72.568561][ T5091] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 72.575983][ T5092] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.609380][ T5091] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.543: bg 0: block 40: padding at end of block bitmap is not set [ 72.673114][ T5091] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 72.742448][ T5091] EXT4-fs (loop0): 1 truncate cleaned up [ 72.756812][ T5091] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.820690][ T5104] loop3: detected capacity change from 0 to 128 [ 72.821980][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.864096][ T5106] __nla_validate_parse: 15 callbacks suppressed [ 72.864114][ T5106] netlink: 40 bytes leftover after parsing attributes in process `syz.3.548'. [ 72.880632][ T5107] netlink: 76 bytes leftover after parsing attributes in process `syz.2.545'. [ 72.910107][ T3330] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.934661][ T5112] loop0: detected capacity change from 0 to 128 [ 73.009020][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.060981][ T5119] loop0: detected capacity change from 0 to 128 [ 73.069631][ T5124] loop3: detected capacity change from 0 to 128 [ 73.098940][ T5124] FAT-fs (loop3): Directory bread(block 32) failed [ 73.108794][ T5124] FAT-fs (loop3): Directory bread(block 33) failed [ 73.117173][ T5124] FAT-fs (loop3): Directory bread(block 34) failed [ 73.125438][ T5124] FAT-fs (loop3): Directory bread(block 35) failed [ 73.132165][ T5124] FAT-fs (loop3): Directory bread(block 36) failed [ 73.160285][ T5124] FAT-fs (loop3): Directory bread(block 37) failed [ 73.177227][ T5124] FAT-fs (loop3): Directory bread(block 38) failed [ 73.190835][ T5124] FAT-fs (loop3): Directory bread(block 39) failed [ 73.204307][ T5124] FAT-fs (loop3): Directory bread(block 40) failed [ 73.213895][ T5124] FAT-fs (loop3): Directory bread(block 41) failed [ 73.225824][ T5119] FAT-fs (loop0): Directory bread(block 32) failed [ 73.233138][ T5119] FAT-fs (loop0): Directory bread(block 33) failed [ 73.253052][ T5119] FAT-fs (loop0): Directory bread(block 34) failed [ 73.269839][ T5132] loop1: detected capacity change from 0 to 128 [ 73.284254][ T5119] FAT-fs (loop0): Directory bread(block 35) failed [ 73.313585][ T5119] FAT-fs (loop0): Directory bread(block 36) failed [ 73.330035][ T5119] FAT-fs (loop0): Directory bread(block 37) failed [ 73.345970][ T5119] FAT-fs (loop0): Directory bread(block 38) failed [ 73.364412][ T5119] FAT-fs (loop0): Directory bread(block 39) failed [ 73.379896][ T5119] FAT-fs (loop0): Directory bread(block 40) failed [ 73.394871][ T5119] FAT-fs (loop0): Directory bread(block 41) failed [ 73.438952][ T5141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.561'. [ 73.447908][ T5141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.561'. [ 73.475561][ T5141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.561'. [ 73.509319][ T5141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.561'. [ 73.518379][ T5141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.561'. [ 73.528172][ T5141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.561'. [ 73.596247][ T5150] loop2: detected capacity change from 0 to 512 [ 73.617553][ T5141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.561'. [ 73.626488][ T5141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.561'. [ 73.646545][ T5150] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.563: invalid indirect mapped block 4294967295 (level 1) [ 73.661874][ T5150] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.563: invalid indirect mapped block 4294967295 (level 1) [ 73.702528][ T5150] EXT4-fs (loop2): 2 truncates cleaned up [ 73.728739][ T5150] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.754720][ T5157] loop4: detected capacity change from 0 to 128 [ 73.799622][ T5154] loop3: detected capacity change from 0 to 256 [ 73.807768][ T5154] FAT-fs (loop3): bogus number of FAT sectors [ 73.814033][ T5154] FAT-fs (loop3): Can't find a valid FAT filesystem [ 73.851060][ T5162] loop0: detected capacity change from 0 to 128 [ 73.905568][ T3333] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.924073][ T5167] loop4: detected capacity change from 0 to 512 [ 73.956945][ T5167] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 73.964246][ T5167] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 73.972377][ T5167] vhci_hcd vhci_hcd.0: Device attached [ 74.149215][ T5178] loop2: detected capacity change from 0 to 1024 [ 74.177571][ T5178] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 74.187547][ T5178] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 74.309232][ T5178] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 74.319463][ T5178] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 74.328275][ T5178] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 74.376037][ T5186] loop1: detected capacity change from 0 to 128 [ 74.419100][ T5186] FAT-fs (loop1): Directory bread(block 32) failed [ 74.437914][ T5186] FAT-fs (loop1): Directory bread(block 33) failed [ 74.467218][ T5186] FAT-fs (loop1): Directory bread(block 34) failed [ 74.493695][ T5186] FAT-fs (loop1): Directory bread(block 35) failed [ 74.517499][ T5186] FAT-fs (loop1): Directory bread(block 36) failed [ 74.540381][ T5186] FAT-fs (loop1): Directory bread(block 37) failed [ 74.564613][ T5186] FAT-fs (loop1): Directory bread(block 38) failed [ 74.596190][ T5186] FAT-fs (loop1): Directory bread(block 39) failed [ 74.621055][ T5186] FAT-fs (loop1): Directory bread(block 40) failed [ 74.639453][ T5186] FAT-fs (loop1): Directory bread(block 41) failed [ 74.695671][ T3393] vhci_hcd: vhci_device speed not set [ 74.743845][ T5171] vhci_hcd: connection closed [ 74.744378][ T1732] vhci_hcd: stop threads [ 74.753437][ T1732] vhci_hcd: release socket [ 74.757563][ T3393] usb 9-1: new full-speed USB device number 2 using vhci_hcd [ 74.757969][ T1732] vhci_hcd: disconnect device [ 74.775968][ T3393] usb 9-1: enqueue for inactive port 0 [ 74.786882][ T3393] usb 9-1: enqueue for inactive port 0 [ 74.802426][ T3393] usb 9-1: enqueue for inactive port 0 [ 74.805991][ T5199] loop3: detected capacity change from 0 to 128 [ 74.879535][ T3393] vhci_hcd: vhci_device speed not set [ 74.921630][ T5205] loop3: detected capacity change from 0 to 164 [ 75.092717][ T5218] loop3: detected capacity change from 0 to 164 [ 75.223249][ T5230] loop2: detected capacity change from 0 to 128 [ 75.262408][ T5233] IPVS: Error joining to the multicast group [ 75.296565][ T5235] IPVS: Error joining to the multicast group [ 75.318654][ T5237] loop0: detected capacity change from 0 to 128 [ 75.364900][ T5242] loop2: detected capacity change from 0 to 164 [ 75.365817][ T5237] FAT-fs (loop0): Directory bread(block 32) failed [ 75.393827][ T5237] FAT-fs (loop0): Directory bread(block 33) failed [ 75.402357][ T5237] FAT-fs (loop0): Directory bread(block 34) failed [ 75.427532][ T5237] FAT-fs (loop0): Directory bread(block 35) failed [ 75.436235][ T5237] FAT-fs (loop0): Directory bread(block 36) failed [ 75.443060][ T5237] FAT-fs (loop0): Directory bread(block 37) failed [ 75.452448][ T5237] FAT-fs (loop0): Directory bread(block 38) failed [ 75.475432][ T5237] FAT-fs (loop0): Directory bread(block 39) failed [ 75.482191][ T5237] FAT-fs (loop0): Directory bread(block 40) failed [ 75.485115][ T5246] loop2: detected capacity change from 0 to 164 [ 75.490031][ T5237] FAT-fs (loop0): Directory bread(block 41) failed [ 75.600363][ T5248] atomic_op ffff888119d62928 conn xmit_atomic 0000000000000000 [ 75.735975][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 75.735992][ T29] audit: type=1326 audit(1748859654.720:7178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5259 comm="syz.4.605" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f196fc5e969 code=0x0 [ 75.748874][ T5262] loop0: detected capacity change from 0 to 128 [ 75.813187][ T29] audit: type=1326 audit(1748859654.792:7179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5263 comm="syz.0.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934fcce969 code=0x7ffc0000 [ 75.837948][ T29] audit: type=1326 audit(1748859654.792:7180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5263 comm="syz.0.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934fcce969 code=0x7ffc0000 [ 75.862328][ T29] audit: type=1326 audit(1748859654.802:7181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5263 comm="syz.0.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f934fcce969 code=0x7ffc0000 [ 75.886499][ T29] audit: type=1326 audit(1748859654.802:7182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5263 comm="syz.0.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934fcce969 code=0x7ffc0000 [ 75.910406][ T29] audit: type=1326 audit(1748859654.802:7183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5263 comm="syz.0.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934fcce969 code=0x7ffc0000 [ 75.934018][ T29] audit: type=1326 audit(1748859654.802:7184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5263 comm="syz.0.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f934fcce969 code=0x7ffc0000 [ 75.935199][ T5265] loop4: detected capacity change from 0 to 512 [ 75.957716][ T29] audit: type=1326 audit(1748859654.802:7185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5263 comm="syz.0.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934fcce969 code=0x7ffc0000 [ 75.987509][ T29] audit: type=1326 audit(1748859654.813:7186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5263 comm="syz.0.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f934fcce969 code=0x7ffc0000 [ 76.011408][ T29] audit: type=1326 audit(1748859654.813:7187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5263 comm="syz.0.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934fcce969 code=0x7ffc0000 [ 76.071710][ T5265] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.101194][ T5265] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.116192][ T5275] loop3: detected capacity change from 0 to 164 [ 76.155670][ T5265] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.605: corrupted inode contents [ 76.219373][ T5265] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.605: mark_inode_dirty error [ 76.237345][ T5265] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.605: corrupted inode contents [ 76.273744][ T5284] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.605: corrupted inode contents [ 76.319042][ T5284] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.605: mark_inode_dirty error [ 76.340401][ T5291] loop3: detected capacity change from 0 to 128 [ 76.358585][ T5284] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.605: corrupted inode contents [ 76.371899][ T5284] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.605: mark_inode_dirty error [ 76.385406][ T5284] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.605: corrupted inode contents [ 76.404010][ T5284] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.605: mark_inode_dirty error [ 76.597018][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.668938][ T5302] loop0: detected capacity change from 0 to 1024 [ 76.701645][ T5302] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.787681][ T5316] loop4: detected capacity change from 0 to 1024 [ 76.812377][ T5301] loop2: detected capacity change from 0 to 256 [ 76.823511][ T5301] FAT-fs (loop2): bogus number of FAT sectors [ 76.829752][ T5301] FAT-fs (loop2): Can't find a valid FAT filesystem [ 76.839773][ T5316] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 76.964430][ T3330] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.982904][ T5326] loop1: detected capacity change from 0 to 128 [ 77.023777][ T5327] loop4: detected capacity change from 0 to 2048 [ 77.064490][ T5327] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.519583][ T5365] loop1: detected capacity change from 0 to 1024 [ 77.562449][ T5362] loop0: detected capacity change from 0 to 1024 [ 77.569974][ T5362] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 77.579876][ T5362] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 77.638008][ T5362] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 77.648243][ T5362] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 77.657088][ T5362] EXT4-fs (loop0): filesystem has both journal inode and journal device! [ 77.677508][ T5369] loop2: detected capacity change from 0 to 764 [ 77.684513][ T5365] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.713223][ T5369] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 77.759818][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.796312][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.838123][ T5382] __nla_validate_parse: 15 callbacks suppressed [ 77.838140][ T5382] netlink: 116 bytes leftover after parsing attributes in process `syz.2.650'. [ 77.876755][ T5384] loop4: detected capacity change from 0 to 164 [ 77.923522][ T5386] FAULT_INJECTION: forcing a failure. [ 77.923522][ T5386] name failslab, interval 1, probability 0, space 0, times 0 [ 77.936396][ T5386] CPU: 0 UID: 0 PID: 5386 Comm: syz.1.648 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(voluntary) [ 77.936424][ T5386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 77.936460][ T5386] Call Trace: [ 77.936468][ T5386] [ 77.936478][ T5386] __dump_stack+0x1d/0x30 [ 77.936503][ T5386] dump_stack_lvl+0xe8/0x140 [ 77.936526][ T5386] dump_stack+0x15/0x1b [ 77.936545][ T5386] should_fail_ex+0x265/0x280 [ 77.936608][ T5386] should_failslab+0x8c/0xb0 [ 77.936640][ T5386] kmem_cache_alloc_noprof+0x50/0x310 [ 77.936675][ T5386] ? getname_flags+0x80/0x3b0 [ 77.936703][ T5386] ? kstrtouint+0x76/0xc0 [ 77.936741][ T5386] getname_flags+0x80/0x3b0 [ 77.936769][ T5386] user_path_at+0x28/0x130 [ 77.936821][ T5386] bpf_obj_get_user+0x66/0x300 [ 77.936852][ T5386] bpf_obj_get+0xed/0x100 [ 77.936955][ T5386] __sys_bpf+0x654/0x790 [ 77.937039][ T5386] __x64_sys_bpf+0x41/0x50 [ 77.937073][ T5386] x64_sys_call+0x2478/0x2fb0 [ 77.937139][ T5386] do_syscall_64+0xd2/0x200 [ 77.937244][ T5386] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 77.937274][ T5386] ? clear_bhb_loop+0x40/0x90 [ 77.937301][ T5386] ? clear_bhb_loop+0x40/0x90 [ 77.937367][ T5386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.937394][ T5386] RIP: 0033:0x7f4d471ae969 [ 77.937413][ T5386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.937436][ T5386] RSP: 002b:00007f4d45817038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 77.937459][ T5386] RAX: ffffffffffffffda RBX: 00007f4d473d5fa0 RCX: 00007f4d471ae969 [ 77.937474][ T5386] RDX: 0000000000000018 RSI: 0000200000001d80 RDI: 0000000000000007 [ 77.937489][ T5386] RBP: 00007f4d45817090 R08: 0000000000000000 R09: 0000000000000000 [ 77.937505][ T5386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.937606][ T5386] R13: 0000000000000000 R14: 00007f4d473d5fa0 R15: 00007ffea85ff0c8 [ 77.937628][ T5386] [ 78.145658][ T5392] loop0: detected capacity change from 0 to 128 [ 78.158957][ T5386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.216912][ T5386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.231891][ T5397] atomic_op ffff88810438b128 conn xmit_atomic 0000000000000000 [ 78.241957][ T5393] loop2: detected capacity change from 0 to 2048 [ 78.263739][ T5399] loop4: detected capacity change from 0 to 1024 [ 78.273031][ T5399] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 78.283100][ T5399] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 78.302040][ T5399] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 78.312384][ T5399] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 78.321142][ T5399] EXT4-fs (loop4): filesystem has both journal inode and journal device! [ 78.385806][ T5405] netlink: 96 bytes leftover after parsing attributes in process `syz.3.651'. [ 78.399565][ T5405] netlink: 'syz.3.651': attribute type 5 has an invalid length. [ 78.407414][ T5405] netlink: 44 bytes leftover after parsing attributes in process `syz.3.651'. [ 78.423808][ T5405] loop3: detected capacity change from 0 to 512 [ 78.451030][ T5405] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.469537][ T5405] ext4 filesystem being mounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.503650][ T5405] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.651: corrupted inode contents [ 78.518276][ T5405] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.651: mark_inode_dirty error [ 78.537453][ T5413] loop2: detected capacity change from 0 to 1024 [ 78.544095][ T5414] loop4: detected capacity change from 0 to 1024 [ 78.544257][ T5405] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.651: corrupted inode contents [ 78.555882][ T5413] ext4: Bad value for 'auto_da_alloc' [ 78.581144][ T5405] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.651: corrupted inode contents [ 78.598888][ T5413] SELinux: security_context_str_to_sid ( lN}ĽwL&bYKBB2k?j1p-X!A:?qDV') failed with errno=-22 [ 78.598982][ T5414] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.617228][ T5405] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.651: mark_inode_dirty error [ 78.639669][ T5405] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.651: corrupted inode contents [ 78.652236][ T5405] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.651: mark_inode_dirty error [ 78.664144][ T5405] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.651: corrupted inode contents [ 78.694978][ T5405] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.651: mark_inode_dirty error [ 78.738177][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.784231][ T5421] netlink: 116 bytes leftover after parsing attributes in process `syz.4.662'. [ 78.784590][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.864522][ T5428] loop3: detected capacity change from 0 to 128 [ 79.026509][ T5438] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 79.047830][ T5438] netlink: 112 bytes leftover after parsing attributes in process `syz.1.668'. [ 79.099767][ T5443] loop3: detected capacity change from 0 to 512 [ 79.109975][ T5444] loop1: detected capacity change from 0 to 164 [ 79.123802][ T5443] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.152628][ T5443] ext4 filesystem being mounted at /155/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.170609][ T5443] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.669: corrupted inode contents [ 79.189940][ T5443] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.669: mark_inode_dirty error [ 79.202945][ T5443] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.669: corrupted inode contents [ 79.216803][ T5443] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.669: corrupted inode contents [ 79.230364][ T5443] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.669: mark_inode_dirty error [ 79.241953][ T5454] loop1: detected capacity change from 0 to 164 [ 79.245415][ T5443] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.669: corrupted inode contents [ 79.260599][ T5443] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.669: mark_inode_dirty error [ 79.273575][ T5443] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.669: corrupted inode contents [ 79.286078][ T5443] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.669: mark_inode_dirty error [ 79.309682][ T5456] loop1: detected capacity change from 0 to 128 [ 79.380777][ T5460] loop1: detected capacity change from 0 to 164 [ 79.455844][ T5465] atomic_op ffff88811a304d28 conn xmit_atomic 0000000000000000 [ 79.469677][ T5466] mmap: syz.2.679 (5466) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 79.829868][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.896029][ T5482] loop3: detected capacity change from 0 to 164 [ 79.929786][ T5484] loop4: detected capacity change from 0 to 128 [ 79.975582][ T5486] netlink: 24 bytes leftover after parsing attributes in process `syz.3.688'. [ 80.007462][ T5492] FAULT_INJECTION: forcing a failure. [ 80.007462][ T5492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.020831][ T5492] CPU: 0 UID: 0 PID: 5492 Comm: syz.0.690 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(voluntary) [ 80.020873][ T5492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 80.020890][ T5492] Call Trace: [ 80.020897][ T5492] [ 80.020964][ T5492] __dump_stack+0x1d/0x30 [ 80.020992][ T5492] dump_stack_lvl+0xe8/0x140 [ 80.021018][ T5492] dump_stack+0x15/0x1b [ 80.021040][ T5492] should_fail_ex+0x265/0x280 [ 80.021082][ T5492] should_fail+0xb/0x20 [ 80.021103][ T5492] should_fail_usercopy+0x1a/0x20 [ 80.021129][ T5492] strncpy_from_user+0x25/0x230 [ 80.021166][ T5492] strncpy_from_user_nofault+0x68/0xf0 [ 80.021196][ T5492] bpf_probe_read_user_str+0x2a/0x70 [ 80.021291][ T5492] bpf_prog_02a70dbeb5f742df+0x43/0x49 [ 80.021324][ T5492] bpf_trace_run2+0x107/0x1c0 [ 80.021356][ T5492] ? selinux_release_secctx+0x45/0x80 [ 80.021437][ T5492] ? selinux_release_secctx+0x45/0x80 [ 80.021480][ T5492] __traceiter_kfree+0x2e/0x50 [ 80.021515][ T5492] ? selinux_release_secctx+0x45/0x80 [ 80.021550][ T5492] kfree+0x27b/0x320 [ 80.021577][ T5492] ? security_sid_to_context+0x27/0x40 [ 80.021689][ T5492] selinux_release_secctx+0x45/0x80 [ 80.021731][ T5492] security_release_secctx+0x42/0x60 [ 80.021774][ T5492] audit_log_task_context+0xb3/0x190 [ 80.021802][ T5492] audit_log_task+0xf4/0x250 [ 80.021845][ T5492] audit_seccomp+0x61/0x100 [ 80.021883][ T5492] ? __seccomp_filter+0x68c/0x10d0 [ 80.021915][ T5492] __seccomp_filter+0x69d/0x10d0 [ 80.021949][ T5492] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 80.022039][ T5492] ? vfs_write+0x75e/0x8e0 [ 80.022076][ T5492] __secure_computing+0x82/0x150 [ 80.022140][ T5492] syscall_trace_enter+0xcf/0x1e0 [ 80.022175][ T5492] do_syscall_64+0xac/0x200 [ 80.022205][ T5492] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 80.022231][ T5492] ? clear_bhb_loop+0x40/0x90 [ 80.022312][ T5492] ? clear_bhb_loop+0x40/0x90 [ 80.022342][ T5492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.022444][ T5492] RIP: 0033:0x7f934fcce969 [ 80.022460][ T5492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.022478][ T5492] RSP: 002b:00007f934e337038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 80.022498][ T5492] RAX: ffffffffffffffda RBX: 00007f934fef5fa0 RCX: 00007f934fcce969 [ 80.022510][ T5492] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 80.022558][ T5492] RBP: 00007f934e337090 R08: 0000000000000000 R09: 0000000000000000 [ 80.022574][ T5492] R10: 000000000000fe44 R11: 0000000000000246 R12: 0000000000000001 [ 80.022590][ T5492] R13: 0000000000000000 R14: 00007f934fef5fa0 R15: 00007ffe37808908 [ 80.022615][ T5492] [ 80.309615][ T5486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.688'. [ 80.382653][ T5507] FAULT_INJECTION: forcing a failure. [ 80.382653][ T5507] name failslab, interval 1, probability 0, space 0, times 0 [ 80.395766][ T5507] CPU: 0 UID: 0 PID: 5507 Comm: syz.1.696 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(voluntary) [ 80.395836][ T5507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 80.395852][ T5507] Call Trace: [ 80.395861][ T5507] [ 80.395869][ T5507] __dump_stack+0x1d/0x30 [ 80.395896][ T5507] dump_stack_lvl+0xe8/0x140 [ 80.395920][ T5507] dump_stack+0x15/0x1b [ 80.395941][ T5507] should_fail_ex+0x265/0x280 [ 80.396030][ T5507] should_failslab+0x8c/0xb0 [ 80.396132][ T5507] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 80.396194][ T5507] ? sidtab_sid2str_get+0xa0/0x130 [ 80.396228][ T5507] kmemdup_noprof+0x2b/0x70 [ 80.396262][ T5507] sidtab_sid2str_get+0xa0/0x130 [ 80.396298][ T5507] security_sid_to_context_core+0x1eb/0x2e0 [ 80.396342][ T5507] security_sid_to_context+0x27/0x40 [ 80.396368][ T5507] selinux_lsmprop_to_secctx+0x67/0xf0 [ 80.396442][ T5507] security_lsmprop_to_secctx+0x43/0x80 [ 80.396486][ T5507] audit_log_task_context+0x77/0x190 [ 80.396514][ T5507] audit_log_task+0xf4/0x250 [ 80.396561][ T5507] audit_seccomp+0x61/0x100 [ 80.396626][ T5507] ? __seccomp_filter+0x68c/0x10d0 [ 80.396656][ T5507] __seccomp_filter+0x69d/0x10d0 [ 80.396707][ T5507] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 80.396784][ T5507] ? vfs_write+0x75e/0x8e0 [ 80.396813][ T5507] ? __rcu_read_unlock+0x4f/0x70 [ 80.396840][ T5507] ? __fget_files+0x184/0x1c0 [ 80.396876][ T5507] __secure_computing+0x82/0x150 [ 80.396922][ T5507] syscall_trace_enter+0xcf/0x1e0 [ 80.396954][ T5507] do_syscall_64+0xac/0x200 [ 80.396988][ T5507] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 80.397091][ T5507] ? clear_bhb_loop+0x40/0x90 [ 80.397128][ T5507] ? clear_bhb_loop+0x40/0x90 [ 80.397156][ T5507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.397184][ T5507] RIP: 0033:0x7f4d471ae969 [ 80.397203][ T5507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.397226][ T5507] RSP: 002b:00007f4d45817038 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 80.397250][ T5507] RAX: ffffffffffffffda RBX: 00007f4d473d5fa0 RCX: 00007f4d471ae969 [ 80.397298][ T5507] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 80.397311][ T5507] RBP: 00007f4d45817090 R08: 0000000000000000 R09: 0000000000000000 [ 80.397324][ T5507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.397340][ T5507] R13: 0000000000000000 R14: 00007f4d473d5fa0 R15: 00007ffea85ff0c8 [ 80.397364][ T5507] [ 80.654203][ T5507] audit_panic: 215 callbacks suppressed [ 80.654219][ T5507] audit: error in audit_log_task_context [ 80.658033][ T5508] loop0: detected capacity change from 0 to 1024 [ 80.672077][ T29] audit: type=1326 audit(1748859659.468:7403): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5505 comm="syz.1.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f4d471ae969 code=0x7ffc0000 [ 80.674343][ T5508] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 80.693216][ T29] audit: type=1326 audit(1748859659.764:7404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5505 comm="syz.1.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f4d471ad37c code=0x7ffc0000 [ 80.725415][ T29] audit: type=1326 audit(1748859659.764:7405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5505 comm="syz.1.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4d471ad41f code=0x7ffc0000 [ 80.749231][ T29] audit: type=1326 audit(1748859659.764:7406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5505 comm="syz.1.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4d471ad5ca code=0x7ffc0000 [ 80.774390][ T29] audit: type=1326 audit(1748859659.764:7407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5505 comm="syz.1.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d471ae969 code=0x7ffc0000 [ 80.798607][ T29] audit: type=1326 audit(1748859659.764:7408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5505 comm="syz.1.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d471ae969 code=0x7ffc0000 [ 80.853755][ T5509] loop2: detected capacity change from 0 to 512 [ 80.917539][ T5509] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.936055][ T5509] ext4 filesystem being mounted at /129/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.955546][ T5509] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.694: corrupted inode contents [ 80.967802][ T5509] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.694: mark_inode_dirty error [ 80.979914][ T5509] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.694: corrupted inode contents [ 80.994162][ T5509] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.694: corrupted inode contents [ 81.007868][ T5509] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.694: mark_inode_dirty error [ 81.019463][ T5509] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.694: corrupted inode contents [ 81.032744][ T5509] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.694: mark_inode_dirty error [ 81.044438][ T5509] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.694: corrupted inode contents [ 81.057759][ T5509] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.694: mark_inode_dirty error [ 81.104330][ T5521] loop1: detected capacity change from 0 to 256 [ 81.111528][ T3007] ================================================================== [ 81.119659][ T3007] BUG: KCSAN: data-race in d_delete / lookup_fast [ 81.126136][ T3007] [ 81.126944][ T5521] FAT-fs (loop1): bogus number of FAT sectors [ 81.128461][ T3007] read-write to 0xffff88810633a600 of 4 bytes by task 4303 on cpu 0: [ 81.128485][ T3007] d_delete+0x15a/0x180 [ 81.134669][ T5521] FAT-fs (loop1): Can't find a valid FAT filesystem [ 81.142624][ T3007] d_delete_notify+0x32/0x100 [ 81.142656][ T3007] vfs_unlink+0x30b/0x420 [ 81.142680][ T3007] do_unlinkat+0x28e/0x4c0 [ 81.167167][ T3007] __x64_sys_unlink+0x2e/0x40 [ 81.171897][ T3007] x64_sys_call+0x22a6/0x2fb0 [ 81.176609][ T3007] do_syscall_64+0xd2/0x200 [ 81.181225][ T3007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.187235][ T3007] [ 81.189562][ T3007] read to 0xffff88810633a600 of 4 bytes by task 3007 on cpu 1: [ 81.197152][ T3007] lookup_fast+0xf0/0x320 [ 81.201609][ T3007] walk_component+0x3f/0x220 [ 81.206330][ T3007] path_lookupat+0xfe/0x2a0 [ 81.210856][ T3007] filename_lookup+0x147/0x340 [ 81.215656][ T3007] do_readlinkat+0x7d/0x320 [ 81.220198][ T3007] __x64_sys_readlink+0x47/0x60 [ 81.225222][ T3007] x64_sys_call+0x2cf3/0x2fb0 [ 81.229936][ T3007] do_syscall_64+0xd2/0x200 [ 81.234506][ T3007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.240458][ T3007] [ 81.242805][ T3007] value changed: 0x00300108 -> 0x00004008 [ 81.248542][ T3007] [ 81.250894][ T3007] Reported by Kernel Concurrency Sanitizer on: [ 81.257067][ T3007] CPU: 1 UID: 0 PID: 3007 Comm: udevd Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(voluntary) [ 81.268822][ T3007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 81.278906][ T3007] ================================================================== [ 81.307286][ T3333] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.