last executing test programs: 2.953142391s ago: executing program 0 (id=2070): openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8b}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000007c0)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x11, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r6}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r7}, 0x18) io_uring_setup(0x19df, &(0x7f0000000080)={0x0, 0x5542, 0x100, 0x3, 0x389}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'erspan0\x00', &(0x7f0000000ac0)={'syztnl1\x00', 0x0, 0x1, 0x8000, 0x578, 0x8, {{0xb, 0x4, 0x1, 0x4, 0x2c, 0x67, 0x0, 0x3, 0x2b, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@ssrr={0x89, 0x17, 0xd2, [@private=0xa010101, @multicast1, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x14}, @private=0xa010101]}]}}}}}) r11 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r12 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r13, 0x3000) ftruncate(r13, 0xc17a) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_tracing={0x1a, 0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000002000000000000000500000018000000ddffffff00000000750c0000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa10000d240374507010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYRESOCT=r9, @ANYRES32=r5, @ANYBLOB="000000000400000095000000000000001838000003000000000000000000000085100000fdffffff9500000000000000"], &(0x7f0000000000)='GPL\x00', 0x132, 0x3c, &(0x7f0000000040)=""/60, 0x41000, 0x20, '\x00', r10, 0x19, r11, 0x8, &(0x7f0000000780)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0x2, 0x4, 0x240}, 0x10, 0xebf0, r12, 0x3, &(0x7f0000000940)=[r5, r13], &(0x7f0000000980)=[{0x5, 0x2, 0x9, 0x6}, {0x3, 0x1, 0x3, 0x1}, {0x1, 0x1, 0xa, 0x4}], 0x10, 0xd}, 0x94) r14 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r14, 0x4b45, 0x0) ioctl$TIOCL_SETSEL(r14, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0xfffc, 0x2fd, 0x1, 0x101}}) 2.906571347s ago: executing program 0 (id=2073): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) 2.821939948s ago: executing program 0 (id=2077): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000000000000008100d00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sys_enter\x00', r1, 0x0, 0x7ff}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000ac0000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) r5 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) pwritev(r5, &(0x7f00000029c0)=[{&(0x7f0000002480)="95", 0x1}], 0x1, 0xed47, 0x8000) 2.80324458s ago: executing program 0 (id=2079): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27e}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r0, 0x5, 0x4002) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000000306010400000000000000000700f8010500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x2880}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") getdents(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x10) 2.060068456s ago: executing program 2 (id=2089): r0 = gettid() capget(&(0x7f0000000180)={0x19980330, r0}, &(0x7f00000001c0)={0x5, 0x10001, 0x61a, 0x3, 0x6, 0x61f}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2, 0xed, 0x0, 0x0, 0x0, 0x7, 0x920, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20000006}, r0, 0x3, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r3, 0x0) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x1, 0x510, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffefd, 0x2, @perf_bp={&(0x7f0000000200)}, 0x120, 0x1af6, 0xba4c, 0x8, 0x1000000009, 0x3, 0x7, 0x0, 0x0, 0x0, 0x20000006}, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x7fffffff, 0x3, 0xfffffffc}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0xffffffffffffffd0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0x200, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {0xe, 0xe16a681f22a735d4}, {0x9}}}, 0x24}}, 0x0) io_uring_enter(r5, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r2}, &(0x7f00000003c0), &(0x7f00000005c0)=r4}, 0xfffffd43) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_io_uring_setup(0x351c, &(0x7f00000000c0)={0x0, 0x79af, 0x3380, 0x2, 0x40024a}, &(0x7f0000000340)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x21, 0x6000, @fd_index=0x4, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0x1, r9}}) r10 = fcntl$dupfd(r6, 0x0, r6) write$tun(r10, &(0x7f00000002c0)=ANY=[], 0xa2) r11 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r11, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) connect$pppoe(r11, &(0x7f0000000040)={0x18, 0x0, {0x0, @empty, 'netpci0\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.964296648s ago: executing program 3 (id=2090): getsockopt$inet_buf(0xffffffffffffffff, 0x118, 0x4, 0x0, &(0x7f00000003c0)) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x20040600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) listen(r0, 0x802) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0006}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b7030000000000008500000073000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(0x0, 0xfffffffffffffd8e, 0x0, 0x0, 0x4e) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r3 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r2, 0x0, 0x101, 0x0) close(r5) close(r3) socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x1100000000f334, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x7) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)={0x13c, 0x7, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2a}]}, @NFTA_RULE_EXPRESSIONS={0x100, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", ""]}}}, {0x7c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x64, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040044) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000040), 0x2}], 0xf2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.742043347s ago: executing program 2 (id=2091): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, 0x0) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x100010, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_elf64(r1, &(0x7f0000002600)=ANY=[], 0x1820) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x12}}, 0x40) 1.439496715s ago: executing program 2 (id=2092): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x101080, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0xe) 948.645418ms ago: executing program 2 (id=2094): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = syz_create_resource$binfmt(0x0) openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x1ffffffffffffffd}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r4, 0x0, 0x0}, 0x10) bind$xdp(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="240003"], 0x10e0}}, 0x0) 916.823233ms ago: executing program 2 (id=2095): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x2, 0x275, 0x0, 0x0, 0x3}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0xd2e, 0x0, 0x0, 0x0, 0x10, 0x29064778, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x37, 0x5, 0x1, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40ffc, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x5, 0x20000, 0x0, 0xb, 0x0, 0x7, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x101, 0x563, 0x0, 0x0, 0x0, 0x4271, 0x40000000, 0x400, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xf566, 0x100000, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x2, 0x8, 0x5, 0x0, 0xfffffffe, 0xffffffff, 0x9, 0x5, 0x0, 0x0, 0x3, 0x10000, 0x5, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x5, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff7ffd, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0x103, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xe, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0001, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fe, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x4, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0x1, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x3, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x7ffd, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x2000007, 0x1, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x3, 0x1, 0x0, 0x5, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x9, 0x6, 0x7fff, 0x1000800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0x40ff, 0x1, 0x2, 0x12, 0x24b9, 0x8, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x100, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x2, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0xfffffffe, 0x0, 0x5, 0x2, 0x65, 0x40, 0xfffffa0a, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x2b, 0x2, 0x5, 0x10001, 0xffffffff, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffb, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x77a, 0x80a, 0xffe, 0x3ff, 0x3f7, 0x4, 0x8, 0x8, 0x200, 0x5d, 0x9, 0x9, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r2, 0x540a, 0x0) r3 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff3000/0x2000)=nil, 0x2000, 0x1000004, 0x13012, r4, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r5, 0x545c, 0x2000000) 874.258238ms ago: executing program 4 (id=2096): openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8b}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000007c0)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x11, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r6}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r7}, 0x18) io_uring_setup(0x19df, &(0x7f0000000080)={0x0, 0x5542, 0x100, 0x3, 0x389}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'erspan0\x00', &(0x7f0000000ac0)={'syztnl1\x00', 0x0, 0x1, 0x8000, 0x578, 0x8, {{0xb, 0x4, 0x1, 0x4, 0x2c, 0x67, 0x0, 0x3, 0x2b, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@ssrr={0x89, 0x17, 0xd2, [@private=0xa010101, @multicast1, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x14}, @private=0xa010101]}]}}}}}) r11 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r12 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r13, 0x3000) ftruncate(r13, 0xc17a) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_tracing={0x1a, 0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000002000000000000000500000018000000ddffffff00000000750c0000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa10000d240374507010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYRESOCT=r9, @ANYRES32=r5, @ANYBLOB="000000000400000095000000000000001838000003000000000000000000000085100000fdffffff9500000000000000"], &(0x7f0000000000)='GPL\x00', 0x132, 0x3c, &(0x7f0000000040)=""/60, 0x41000, 0x20, '\x00', r10, 0x19, r11, 0x8, &(0x7f0000000780)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0x2, 0x4, 0x240}, 0x10, 0xebf0, r12, 0x3, &(0x7f0000000940)=[r5, r13], &(0x7f0000000980)=[{0x5, 0x2, 0x9, 0x6}, {0x3, 0x1, 0x3, 0x1}, {0x1, 0x1, 0xa, 0x4}], 0x10, 0xd}, 0x94) r14 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r14, 0x4b45, 0x0) ioctl$TIOCL_SETSEL(r14, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0xfffc, 0x2fd, 0x1, 0x101}}) 873.462168ms ago: executing program 4 (id=2097): socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x6}, 0x9092, 0x0, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) 790.940589ms ago: executing program 4 (id=2100): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x6}, 0x9092, 0x0, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") 746.699314ms ago: executing program 1 (id=2101): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000000000000008100d00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sys_enter\x00', r2, 0x0, 0x7ff}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000ac0000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r5, @ANYRES16=r7, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) fstat(r3, &(0x7f0000000240)) syz_pidfd_open(r1, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r8, &(0x7f0000000100)={0x2}) 644.436328ms ago: executing program 0 (id=2102): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='\x00\x00\x00\x00\x00K\x178\xde\xb8\xe3\\\x9f\xb5\xf0\xb7\xa5m\x16\xc2l\x91\xe4\xc5\'zj\xa2uf\xb41}~\x9b\xc7[M\x12\x04\x18@\x19\xd3\x95\xf2\x9c/\xde\v\xb1*\x8b\xbe.{\xe4%x[:\xc2r\b\x00\x00\x00yG\xdd\xac\xa0\xff\x95\xf4\xc9\xd4\xe2\xc7\xe2\n\xd2\x1c\x1d\x9d\x89\x9e\xb6\x9e\xa2\xf8\x05\x82\xc8\xce\x89\xaas\x7f\x96\xe8\x0e\xff(ge\xa5u%\xc4\xe8\xab*.R\xce\xe1\v>\x88\xd6\xe6 \xd5[\xbeC\x02\x9f\x8f,-\xe0\xa2\xf0\xe5\a<\x11\xe5z\xc4\x80\xee\'Y!L\x83\xf5\xf6\x85k\xb2\xbc\xe5\xa7\x7f\xffe\xa4J\xfd\xf6\xc5\x00f\x84\xb8\x1a<\xaf\x841\x8e\x01]e\xed\x00\xda\xb0^`\xbc%\xa5') r2 = epoll_create1(0x0) epoll_pwait2(r2, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x20002017}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001cc0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x30bd27, 0x4000005, {0x0, 0x0, 0x42c, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x101, 0x3, 0xc, 0x13}, {0x7, 0x2, 0x8001, 0x200, 0x2, 0x7}, 0xffffff80, 0x947, 0xe03}}, @TCA_TBF_RTAB={0x404, 0x2, [0x6, 0x6, 0x6b12, 0x7, 0xfffffffd, 0x8, 0x8, 0x3, 0x7, 0xb, 0x5, 0x0, 0x80, 0x9, 0x30, 0x8, 0x81, 0x9, 0x2, 0x8, 0x40, 0x8, 0x80000001, 0x80, 0x10000400, 0x7a2, 0x5, 0x400, 0x3, 0xfffffffa, 0x6, 0x6, 0xaf8, 0x1, 0x3, 0x3ff, 0x9, 0x2, 0x3, 0x10001, 0x1, 0x5, 0x10001, 0x3, 0x59, 0x3, 0xd54e, 0x40, 0x6, 0xd, 0x0, 0x28, 0x9, 0xa4800000, 0x3, 0xa0, 0xad4, 0x7, 0x4, 0x1, 0x7, 0x4, 0x102, 0x5, 0x4, 0x402, 0x3, 0xf6a5, 0x7fffffff, 0x8, 0x2, 0xcff, 0xfffffacf, 0x0, 0x4, 0x10001, 0xa, 0x1, 0x2, 0x8002, 0x5, 0x5, 0x5, 0xfffffffb, 0x5, 0x0, 0x4, 0x4edcaeea, 0x2, 0xe, 0xe, 0xfff, 0x4, 0x496c01fc, 0x4, 0x7fffffff, 0x9, 0x8, 0x12, 0x9, 0x80000001, 0x325b, 0x7, 0x0, 0x80000006, 0x2, 0xffffffff, 0x5, 0x1, 0x18001, 0x5, 0x94, 0x2, 0x9, 0x2fcb, 0x3, 0x5, 0x7, 0x1, 0xffffffff, 0x4, 0x0, 0x4, 0x3, 0x4, 0x5, 0xa993, 0x200, 0x6847adf1, 0x6, 0x9, 0x81, 0x7, 0x5, 0x5, 0x7fffffff, 0x8, 0xc, 0xd, 0x2, 0x1, 0x7fffffff, 0x8, 0x0, 0x8, 0x8, 0x91e, 0x4, 0xe, 0x8001, 0x8, 0x40000, 0x0, 0x9, 0xd, 0x5, 0x8, 0xfe, 0x8, 0x0, 0x1, 0x2, 0x9, 0x6, 0x3ff, 0x5, 0x1, 0xf682, 0x40, 0x6, 0x8, 0x3, 0x1fffe, 0xfffdfffe, 0x5, 0x1, 0xfffffff8, 0xa608, 0x23972b48, 0x407, 0x2, 0x0, 0xd, 0x4, 0xa, 0x5, 0x6, 0x10, 0x5, 0x5, 0x10, 0x41, 0x9, 0x76, 0x3, 0xfffffffa, 0x7, 0x2, 0x20004, 0x40, 0x9, 0x6, 0x2ef, 0xfffffffb, 0xcf30, 0x8, 0x4, 0xffffff8a, 0x0, 0x4, 0x80000000, 0x4, 0x2, 0x0, 0x2, 0x6, 0xfff, 0x4, 0x1, 0x40, 0x5, 0x9, 0x5, 0x8, 0x80000000, 0x0, 0x3, 0xeff, 0x6, 0x8001, 0x8, 0xc, 0x3, 0x1, 0x0, 0x5, 0x8, 0x6c67, 0x800, 0xffffff59, 0x9, 0x0, 0x303, 0x7, 0x1, 0x2, 0x6, 0x6561, 0x7, 0x4, 0xc, 0x42, 0x3c04, 0x5f, 0x5fa, 0x1]}]}}]}, 0x45c}}, 0x8000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x20, r10, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000090}, 0x4004000) setxattr$incfs_id(&(0x7f0000000180)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000001c0), 0x0, 0x0, 0x2) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) ioctl$LOOP_CTL_REMOVE(r11, 0x4c81, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8, 0x0, 0x3}, 0x18) syz_clone3(&(0x7f00000001c0)={0x100000000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x58) r13 = socket$netlink(0x10, 0x3, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x95788ed, 0x41000000}], 0x0) sendmsg$netlink(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="200000005f0001"], 0x20}], 0x1}, 0x0) 626.68886ms ago: executing program 1 (id=2103): syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000a40)='kfree\x00', r3, 0x0, 0x2}, 0x18) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 589.647615ms ago: executing program 3 (id=2104): syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000a40)='kfree\x00', r3, 0x0, 0x2}, 0x18) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 589.333015ms ago: executing program 4 (id=2105): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = syz_create_resource$binfmt(0x0) openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x1ffffffffffffffd}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r4, 0x0, 0x0}, 0x10) bind$xdp(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="240003"], 0x10e0}}, 0x0) 588.918795ms ago: executing program 3 (id=2106): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="0500000000000000000001000000060006004e240000901008809005008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b24000100000000000000000000000000000000000000000000000000000000000000000024000200fcbefe9641719404cc5c9ab2766dd4793e367b0ea55e65e2e3416ac9d4e68841240002001171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec24000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691cb40409807c000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030000000000f4000080060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000a00000014000200fc0200000000000000000000000000010500030000000000060001000200000008000200e00000020500030003000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200ac1414bb0500030000000000060001000a00000014000200000000000000000000000000000000010500030002000000060001000a00000014000200fc0200000000000000000000000000000500030003000000340000800600010002000000080002000a0101010500030004000000060001000200000008000200ac1414aa050003000300000064000080060001000a00000014000200200100000000000000000000000000000500030002000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200ff010000000000000000000000000001050003000200000094000080060001000200000008000200ac1e00010500030002000000060001000200000008000200e00000010500030002000000060001000a00000014000200fc0000000000000000000000000000000500030002000000060001000200000008000200000000000500030003000000060001000a00000014000200fe80000000000000000000000000000e050003000000000040000080060001000a00000014000200fc0200000000000000000000000000000500030002000000060001000200000008000200ac1414aa050003000000000064000080060001000a00000014000200200100000000000000000000000000020500030001000000060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002000a010100050003000200000070000080060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200000000000000000000000000000000000500030002000000060001000a0000001400020000000000000000000000000000000001050003000000000000010080060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000200000008000200000000000500030003000000060001000200000008000200640101000500030002000000060001000200000008000200640101010500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8000000000000000000000000000bb05000300020000000600010002000000080002007f0000010500030002000000060001000a00000014000200fc0200000000000000000000000000010500030003000000060001000200000008000200640101010500030001000000240002005da952055e5857d673cddd36909746c80efa3ff95c317de1063db32bc80a0b3e1803008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39220600050005000000e802098058000080060001000200000008000200ac1e00010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ffffffff05000300010000007c000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414bb0500030002000000060001000a000000140002000000000000000000000000000000000105000300020000000600010002000000080002000a0101010500030003000000f4000080060001000a0000001400020000000000000000000000ffffac1414aa0500030003000000060001000200000008000200ac1414aa05000300000000000600010002000000080002000a01010205000300020000000600010002000000080002007f00000105000300000000000600010002000000080002000a0101010500030003000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc01000000000000000000000000000005000300010000000600010002000000080002000a0101000500030000000000060001000200000008000200ac1e0101050003000200000094000080060001000a00000014000200fc0200000000000000000000000000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030002000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200ffffffff050003000200000088000080060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8800000000000000000000000001010500030002000000060001000a00000014000200ff02000000000000000000000000000105000300020000007c000080200004000a004e2100000006fc0100000000000000000000000000010400000008000a000100000024000100f44da367a88ee6564f020211456727082f5debee8b1bf5eb7337341b459b3922080003000300000024000200379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a549780000800800030001000000080003000400000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e22000000000000000000000000e4060080dc020980f4000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000200000008000200ffffffff0500030001000000060001000200000008000200ac1e00010500030001000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a00000014000200000000000000000000000000000000010500030001000000060001000a00000014000200fc010000000000000000000000000001050003000300000034000080060001000200000008000200640101000500030001000000060001000200000008000200ac1414bb050003000200000000010080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300020000000600010002000000080002006401010005000300020000000600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc0100000000000000000000000000010500030000000000940000800600010002000000080002006401010005000300010000000600010002000000080002006401010205000300000000000600010002000000080002007f0000010500030003000000060001000200000008000200e00000020500030003000000060001000200000008000200ac1414120500030002000000060001000200000008000200ac14142d05000300020000001c000080060001000200000008000200ffffffff05000300030000000800030002000000200004000a004e2000000005fc010000000000000000000000000001000000009403098094000080060001000a0000001400020000000000000000000000ffffac1414bb0500030003000000060001000a00000014000200fe8800000000000000000000000000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030003000000060001000a00000014000200fe880000000000000000000000000101050003000100000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414bb0500030001000000060001000a0000001400020000000000000000000000ffffe00000020500030003000000f4000080060001000200000008000200000000000500030001000000060001000a00000014000200000000000000000000000000000000010500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe80000000000000000000000000003e05000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200ff0200000000000000000000000000010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200e0000001050003000000000058000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414410500030010000000060001000200000008000200ac1e00010500030001000000f4000080060001000200000008000200640101000500030002000000060001000a00000014000200200100000000000000000000000000000500030000000000060001000a00000014000200fc0200000000000000000000000000010500030003000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000060001000200000008000200ac1414aa0500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414270500030000000000060001000a0000001400020020010000000000000000000000000002050003000100000058000080060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe8000000000000000000000000000140500030000000000060001000200000008000200e0000001050003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e0c0000800800030006000000060006004e24000008000100", @ANYRES32=r3, @ANYBLOB="240003"], 0x10e0}}, 0x0) 585.369825ms ago: executing program 1 (id=2107): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xdf) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000"], 0x5b0) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x1000) 576.761966ms ago: executing program 4 (id=2108): socket$netlink(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x0, 0x0, 0x9}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r1], 0x1c}}, 0x0) setsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000340), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000008a0552df3411a3121951961a1d4bb62758f95bbc7add79969da225be5e095b672c84a2b87343cec5574d35ab4a0280e3"], 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_generic(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c0000002000090002000000ffdbdf250200000008000800", @ANYRES32=r2, @ANYBLOB="cbff903daaa0361fe33f0027fa50fe5afe2222e61da4fd003eaaf04a22d55b8dcf7852645ede94196ef883200b2e3b114592a2ea52e021e7116e70e2d1ede42b3a60347c1a3d95c4217235e96f0c4310d13162ee82553a15973f4ed960e8cc31e39b216706aa9c555fbec2e23065591633ea4a7f8c1b8e199c7d358cc253dee8d004d8621438b67b103c1984f28f8e6115a315"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) socket(0x10, 0x3, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000080)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000adef9da709926b8380b344cef87cde888b5a89fcbf26ed1b10b2d621791c816f3bd413c5581f4cf8546cc303038307d61a4e2c30b44f49712beeecd3a1da53c683203f352af9232570d1679c07d9477e28ea7df584ea9624a9", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) syz_io_uring_complete(0x0) syslog(0x2, &(0x7f00000004c0)=""/164, 0xa4) 561.890748ms ago: executing program 1 (id=2109): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x6}, 0x9092, 0x0, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 554.926129ms ago: executing program 3 (id=2110): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1c, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r3, 0x0, 0x0, 0xf0, 0xd215) bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r3, 0x4) recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) 513.974604ms ago: executing program 1 (id=2111): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) mmap$usbfs(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2000000, 0x31, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) mlockall(0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x24bc]}, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'macvlan0\x00', 0x0}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f00000005c0)={&(0x7f0000000140)=@can={{0x3}, 0x3, 0x3, 0x0, 0x0, "8e9f5a50be1f3a9b"}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 456.853052ms ago: executing program 4 (id=2112): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = creat(0x0, 0x182) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, r3, 0xe701ac47a3d23ecd}, 0x14}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004"], 0x50) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817", 0x15, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000880)={0x1, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000300)=""/89, 0x59}, {&(0x7f0000000000)=""/13, 0xd}, {&(0x7f00000001c0)=""/7, 0x7}, {&(0x7f0000000480)=""/183, 0xb7}, {&(0x7f00000003c0)}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000000400)}, {&(0x7f0000000540)=""/6, 0x6}, {&(0x7f0000000580)=""/60, 0x3c}], &(0x7f0000000600)=[0xe28, 0x4, 0xff, 0x728b7000, 0x95, 0x5, 0x5, 0x5, 0x3], 0x9}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x9) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000003140100c68f7bec9aff068609000200737962320000000008004100736977001400330062726964676530"], 0x38}, 0x1, 0x0, 0x0, 0x44805}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) 411.861468ms ago: executing program 1 (id=2113): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES8=0x0], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000003c0)='bcache_invalidate\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @thr={&(0x7f0000000140)="5b296d7dc657c0451acc0b8356c9a649c1c38cb52caca0f6", &(0x7f0000002000)="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"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x5, 0x100000000000000, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1a, 0x9, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2, 0x0, 0x401}, 0x18) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x6, @multicast}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a1, &(0x7f0000000380)={'syzkaller0\x00'}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40086602, &(0x7f0000000080)=0xd0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffff, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xa, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40086602, &(0x7f0000000000)) r10 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) close_range(r10, r10, 0x2) 352.531065ms ago: executing program 3 (id=2114): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000c000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1, 0x0, 0x3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000080)='./file0\x00', 0x30) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0xb}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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") 239.063469ms ago: executing program 0 (id=2115): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40101}}, 0x20}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) listen(0xffffffffffffffff, 0x4) (fail_nth: 6) 229.043701ms ago: executing program 3 (id=2116): socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x6}, 0x9092, 0x0, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$eJzs3U1IHGcYB/BnZndr1aXY9lIo/YBSSiuIvRV6sZcWhCJSSqEtWErppUULVulNe8olh+QYkuApFwm5xeQYvEguCYGcTOLBXAKJ5BDJIQnZsDsr+JVo3HUnZH4/WOfDd97nHWb+74g4GEBh9UXEUESUIqI/IioRkWxu8HH26WtuznUvjUXUaj/cTxrtsu3MxnG9ETEbEV9FxGKaxF/liOmFX1YfLn/32dGpyqdnFn7u7uhJNq2trny/fnrkyPnhL6evXr87ksRQVLecV/slu+wrJxHvHEaxV0RSznsE7Mfof+du1HP/bkR80sh/JdLILt6xyTcWK/HFqecde/zetfc7OVag/Wq1Sv0ZOFsDCieNiGok6UBEZOtpOjCQ/Qx/s9ST/j0x+W//nxNT43/kPVMB7VKNWPn2YteF3m35v1PK8g+8prJfSq38ODp/q76yXsp7QEBHfJAt6s///t9mPg/5h8KRfygu+Yfikn8oLvmH4pJ/KC75h4J42vxjv0275B+KS/6huA6c/xNPDm9QQEdszj8AUCy1rgO9Ndzel5CBXOQ9/wAAAAAAAAAAAAAAAAAAADvNdS+NbXza02N5zxaXT0asfZM13Vm/1Ph/xBFvNr72PEi29Jjsq8KL/fpRix206GzOb1+/dTvf+lc+zLf+zHjE7P8RMVgu77z/kub9d3Bv7/H9yu8tFnhJybbtr3/qbP3tHs/nW394OeJSff4Z3G3+SeO9xnL3+adav34t1v/nUYsdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0DHPAgAA///B2nXP") 0s ago: executing program 2 (id=2117): syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000a40)='kfree\x00', r3, 0x0, 0x2}, 0x18) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x4402) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r5, 0xec776000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x14b042, 0x0) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0xa, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) kernel console output (not intermixed with test programs): x471/0x6b0 [ 111.506423][ T6704] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.506466][ T6704] __sock_sendmsg+0x145/0x180 [ 111.506526][ T6704] ____sys_sendmsg+0x31e/0x4a0 [ 111.506560][ T6704] ___sys_sendmsg+0x17b/0x1d0 [ 111.506694][ T6704] __x64_sys_sendmsg+0xd4/0x160 [ 111.506728][ T6704] x64_sys_call+0x17ba/0x3000 [ 111.506807][ T6704] do_syscall_64+0xca/0x2b0 [ 111.506829][ T6704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.506851][ T6704] RIP: 0033:0x7fc1cee3f749 [ 111.506866][ T6704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.506885][ T6704] RSP: 002b:00007fc1cd8a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.506904][ T6704] RAX: ffffffffffffffda RBX: 00007fc1cf095fa0 RCX: 00007fc1cee3f749 [ 111.506917][ T6704] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 111.506988][ T6704] RBP: 00007fc1cd8a7090 R08: 0000000000000000 R09: 0000000000000000 [ 111.507034][ T6704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.507047][ T6704] R13: 00007fc1cf096038 R14: 00007fc1cf095fa0 R15: 00007fffced3ead8 [ 111.507066][ T6704] [ 111.698922][ T6698] loop3: detected capacity change from 0 to 512 [ 111.733463][ T6698] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.746361][ T6698] ext4 filesystem being mounted at /271/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.809051][ T6720] siw: device registration error -23 [ 111.829227][ T6720] netlink: 'syz.0.1121': attribute type 12 has an invalid length. [ 111.883384][ T6735] sd 0:0:1:0: device reset [ 112.057383][ T6755] siw: device registration error -23 [ 112.064679][ T6755] netlink: 'syz.4.1138': attribute type 12 has an invalid length. [ 112.212501][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.241761][ T6781] loop0: detected capacity change from 0 to 512 [ 112.294466][ T6781] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1150: bg 0: block 248: padding at end of block bitmap is not set [ 112.391190][ T6789] loop1: detected capacity change from 0 to 512 [ 112.468340][ T6795] siw: device registration error -23 [ 112.497345][ T6795] netlink: 'syz.4.1153': attribute type 12 has an invalid length. [ 112.511358][ T6781] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.1150: Failed to acquire dquot type 1 [ 112.527350][ T6789] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.539949][ T6789] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.615987][ T6781] EXT4-fs (loop0): 1 truncate cleaned up [ 112.664238][ T6781] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.784091][ T6781] ext4 filesystem being mounted at /254/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.983908][ T6816] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1162'. [ 113.280582][ T6781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.446715][ T6833] loop3: detected capacity change from 0 to 512 [ 113.456367][ T29] kauditd_printk_skb: 549 callbacks suppressed [ 113.456383][ T29] audit: type=1326 audit(1768580409.836:5159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6831 comm="syz.0.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cee3f749 code=0x7ffc0000 [ 113.487110][ T29] audit: type=1326 audit(1768580409.836:5160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6831 comm="syz.0.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cee3f749 code=0x7ffc0000 [ 113.510730][ T29] audit: type=1326 audit(1768580409.836:5161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6831 comm="syz.0.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cee3f749 code=0x7ffc0000 [ 113.534273][ T29] audit: type=1326 audit(1768580409.846:5162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6831 comm="syz.0.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc1cee3f749 code=0x7ffc0000 [ 113.557694][ T29] audit: type=1326 audit(1768580409.846:5163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6831 comm="syz.0.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cee3f749 code=0x7ffc0000 [ 113.581218][ T29] audit: type=1326 audit(1768580409.846:5164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6831 comm="syz.0.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cee3f749 code=0x7ffc0000 [ 113.604925][ T29] audit: type=1326 audit(1768580409.846:5165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6831 comm="syz.0.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cee3f749 code=0x7ffc0000 [ 113.628799][ T29] audit: type=1326 audit(1768580409.846:5166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6831 comm="syz.0.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7fc1cee3f749 code=0x7ffc0000 [ 113.652411][ T29] audit: type=1326 audit(1768580409.846:5167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6831 comm="syz.0.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cee3f749 code=0x7ffc0000 [ 113.676059][ T29] audit: type=1326 audit(1768580409.846:5168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6831 comm="syz.0.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cee3f749 code=0x7ffc0000 [ 113.731790][ T6833] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.744571][ T6833] ext4 filesystem being mounted at /277/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.167795][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.196058][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.254650][ T6860] loop4: detected capacity change from 0 to 512 [ 114.261372][ T6860] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 114.281284][ T6860] bond0: (slave dummy0): Releasing backup interface [ 114.337514][ T6863] loop1: detected capacity change from 0 to 128 [ 114.344163][ T6860] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 114.362769][ T6863] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 114.385963][ T6863] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.510598][ T3317] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.534744][ T6878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1185'. [ 114.695239][ T6887] sd 0:0:1:0: device reset [ 114.804577][ T6888] loop3: detected capacity change from 0 to 512 [ 115.088205][ T6895] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.218247][ T6893] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 115.244284][ T6888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.257119][ T6888] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.280499][ T6895] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.317322][ T6893] FAULT_INJECTION: forcing a failure. [ 115.317322][ T6893] name failslab, interval 1, probability 0, space 0, times 0 [ 115.330135][ T6893] CPU: 1 UID: 0 PID: 6893 Comm: syz.1.1191 Not tainted syzkaller #0 PREEMPT(voluntary) [ 115.330193][ T6893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 115.330273][ T6893] Call Trace: [ 115.330282][ T6893] [ 115.330292][ T6893] __dump_stack+0x1d/0x30 [ 115.330318][ T6893] dump_stack_lvl+0x95/0xd0 [ 115.330339][ T6893] dump_stack+0x15/0x1b [ 115.330357][ T6893] should_fail_ex+0x265/0x280 [ 115.330383][ T6893] should_failslab+0x8c/0xb0 [ 115.330532][ T6893] kmem_cache_alloc_noprof+0x69/0x4b0 [ 115.330554][ T6893] ? getname_flags+0x80/0x3b0 [ 115.330654][ T6893] getname_flags+0x80/0x3b0 [ 115.330679][ T6893] user_path_at+0x28/0x130 [ 115.330707][ T6893] do_fchownat+0xb0/0x210 [ 115.330811][ T6893] __x64_sys_chown+0x47/0x60 [ 115.330843][ T6893] x64_sys_call+0x2eb9/0x3000 [ 115.330917][ T6893] do_syscall_64+0xca/0x2b0 [ 115.331009][ T6893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.331030][ T6893] RIP: 0033:0x7f57615cf749 [ 115.331045][ T6893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.331063][ T6893] RSP: 002b:00007f576002f038 EFLAGS: 00000246 ORIG_RAX: 000000000000005c [ 115.331082][ T6893] RAX: ffffffffffffffda RBX: 00007f5761825fa0 RCX: 00007f57615cf749 [ 115.331098][ T6893] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 115.331124][ T6893] RBP: 00007f576002f090 R08: 0000000000000000 R09: 0000000000000000 [ 115.331140][ T6893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.331157][ T6893] R13: 00007f5761826038 R14: 00007f5761825fa0 R15: 00007ffcd2ffde08 [ 115.331182][ T6893] [ 115.556672][ T6905] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 115.567746][ T6905] rock: directory entry would overflow storage [ 115.574075][ T6905] rock: sig=0x4f50, size=4, remaining=3 [ 115.579712][ T6905] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 115.734524][ T6895] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.746675][ T6904] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 115.760289][ T6904] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.773139][ T6904] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 115.787268][ T6910] set_capacity_and_notify: 2 callbacks suppressed [ 115.787284][ T6910] loop1: detected capacity change from 0 to 512 [ 115.802147][ T6904] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1194: bg 0: block 112: padding at end of block bitmap is not set [ 115.818085][ T6910] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.830634][ T6910] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.852845][ T6895] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.879853][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 115.916417][ T3584] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.942960][ T3584] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.981224][ T3584] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.016868][ T3584] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.172210][ T6929] loop4: detected capacity change from 0 to 512 [ 116.179734][ T6929] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 116.670527][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.681006][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.696926][ T6929] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 116.786228][ T6940] loop1: detected capacity change from 0 to 128 [ 116.801036][ T6940] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 116.815262][ T6940] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.848345][ T6950] sd 0:0:1:0: device reset [ 116.972934][ T3317] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 116.991209][ T6966] loop2: detected capacity change from 0 to 512 [ 117.006224][ T6965] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.019951][ T6966] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1218: bg 0: block 248: padding at end of block bitmap is not set [ 117.035250][ T6966] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1218: Failed to acquire dquot type 1 [ 117.047989][ T6966] EXT4-fs (loop2): 1 truncate cleaned up [ 117.054211][ T6966] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.070033][ T6966] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.082529][ T6966] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.121335][ T6965] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.198563][ T6975] loop0: detected capacity change from 0 to 512 [ 117.242809][ T6975] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.255522][ T6975] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.281516][ T6965] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.338111][ T6981] sd 0:0:1:0: device reset [ 117.365234][ T6982] siw: device registration error -23 [ 117.386236][ T6965] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.519039][ T53] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.576256][ T3552] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.585310][ T3552] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.633399][ T3552] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.057120][ T6991] loop2: detected capacity change from 0 to 512 [ 118.089920][ T6991] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.102588][ T6991] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.179986][ T6995] sd 0:0:1:0: device reset [ 118.279452][ T6997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1227'. [ 118.293893][ T6999] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=60179 sclass=netlink_xfrm_socket pid=6999 comm=syz.3.1228 [ 118.480402][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 118.480420][ T29] audit: type=1326 audit(1768580414.866:5359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.4.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd84cf749 code=0x7ffc0000 [ 118.546869][ T29] audit: type=1326 audit(1768580414.896:5360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.4.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd84cf749 code=0x7ffc0000 [ 118.570903][ T29] audit: type=1326 audit(1768580414.896:5361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.4.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd84cf749 code=0x7ffc0000 [ 118.594460][ T29] audit: type=1326 audit(1768580414.896:5362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.4.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fedd84cf749 code=0x7ffc0000 [ 118.617907][ T29] audit: type=1326 audit(1768580414.896:5363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.4.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd84cf749 code=0x7ffc0000 [ 118.641361][ T29] audit: type=1326 audit(1768580414.896:5364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.4.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd84cf749 code=0x7ffc0000 [ 118.664802][ T29] audit: type=1326 audit(1768580414.896:5365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.4.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd84cf749 code=0x7ffc0000 [ 118.688403][ T29] audit: type=1326 audit(1768580414.896:5366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.4.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fedd84cf749 code=0x7ffc0000 [ 118.711856][ T29] audit: type=1326 audit(1768580414.896:5367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.4.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd84cf749 code=0x7ffc0000 [ 118.735402][ T29] audit: type=1326 audit(1768580414.896:5368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.4.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd84cf749 code=0x7ffc0000 [ 118.818793][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.132355][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.153840][ T7025] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.188931][ T7031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.197747][ T7031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.232638][ T7034] netlink: 'syz.3.1244': attribute type 21 has an invalid length. [ 119.240660][ T7034] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1244'. [ 119.246254][ T7036] loop0: detected capacity change from 0 to 128 [ 119.259465][ T7036] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 119.273546][ T7036] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.275272][ T7025] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.342977][ T7025] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.370542][ T3320] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.380836][ T7041] 9p: Bad value for 'source' [ 119.430589][ T7025] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.487910][ T7049] loop0: detected capacity change from 0 to 128 [ 119.498026][ T7049] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 119.508683][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1244'. [ 119.511625][ T7049] ext4 filesystem being mounted at /272/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.541528][ T7034] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.590174][ T7034] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.640106][ T7034] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.660020][ T3320] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.691195][ T7034] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.786601][ T3575] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.806234][ T3556] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.814631][ T3556] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.823366][ T3556] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.915088][ T7061] loop0: detected capacity change from 0 to 512 [ 119.948235][ T7062] loop1: detected capacity change from 0 to 512 [ 119.955782][ T7062] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 119.991836][ T7061] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.004521][ T7061] ext4 filesystem being mounted at /274/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.083359][ T7062] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 120.280335][ T7069] syzkaller0: entered promiscuous mode [ 120.334467][ T7069] syzkaller0 (unregistering): left promiscuous mode [ 120.398819][ T7075] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 120.413169][ T7075] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.428642][ T7073] syzkaller0: entered promiscuous mode [ 120.495283][ T7079] syzkaller0 (unregistering): left promiscuous mode [ 120.672072][ T3321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.685711][ T7083] syzkaller0: entered promiscuous mode [ 120.697838][ T7083] syzkaller0 (unregistering): left promiscuous mode [ 120.890128][ T7095] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.971648][ T7100] syzkaller0: entered promiscuous mode [ 120.980697][ T7095] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.995520][ T7102] set_capacity_and_notify: 1 callbacks suppressed [ 120.995534][ T7102] loop1: detected capacity change from 0 to 128 [ 121.013145][ T7100] syzkaller0 (unregistering): left promiscuous mode [ 121.023169][ T7102] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 121.036319][ T7102] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.105936][ T7095] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.121005][ T3317] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 121.150437][ T7108] loop1: detected capacity change from 0 to 512 [ 121.157281][ T7108] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 121.202591][ T7108] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 121.221172][ T7095] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.395839][ T323] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.410217][ T323] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.537980][ T323] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.605224][ T7115] loop3: detected capacity change from 0 to 512 [ 121.613165][ T323] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.682294][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.730782][ T7115] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.743475][ T7115] ext4 filesystem being mounted at /298/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.835592][ T7123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1273'. [ 121.928841][ T7125] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 122.570502][ T3556] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.595410][ T3556] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.619957][ T3556] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.637027][ T3556] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.075383][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.133334][ T7149] loop3: detected capacity change from 0 to 128 [ 123.142338][ T7149] ext4 filesystem being mounted at /301/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.316754][ T7164] !yz!: rxe_newlink: already configured on team_slave_0 [ 123.386898][ T7172] loop0: detected capacity change from 0 to 128 [ 123.395089][ T7166] loop1: detected capacity change from 0 to 128 [ 123.402765][ T7176] loop3: detected capacity change from 0 to 512 [ 123.409898][ T7166] syz.1.1291 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 123.410041][ T7176] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 123.428801][ T7172] ext4 filesystem being mounted at /276/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.447110][ T7176] bond0: (slave dummy0): Releasing backup interface [ 123.470613][ T7176] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 123.490203][ T7179] loop1: detected capacity change from 0 to 128 [ 123.511510][ T7179] ext4 filesystem being mounted at /241/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.536435][ T7183] loop0: detected capacity change from 0 to 2048 [ 123.590246][ T7183] Alternate GPT is invalid, using primary GPT. [ 123.596592][ T7183] loop0: p1 p2 p3 [ 123.600465][ T7183] loop0: partition table partially beyond EOD, truncated [ 123.634424][ T7190] loop3: detected capacity change from 0 to 512 [ 123.641236][ T7190] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 123.671555][ T7190] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 123.736252][ T29] kauditd_printk_skb: 385 callbacks suppressed [ 123.736271][ T29] audit: type=1326 audit(1768580420.116:5754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7201 comm="syz.1.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57615cf749 code=0x7ffc0000 [ 123.781974][ T29] audit: type=1326 audit(1768580420.146:5755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7201 comm="syz.1.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f57615cf749 code=0x7ffc0000 [ 123.805504][ T29] audit: type=1326 audit(1768580420.146:5756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7201 comm="syz.1.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57615cf749 code=0x7ffc0000 [ 123.829017][ T29] audit: type=1326 audit(1768580420.166:5757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7205 comm="syz.3.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407887f749 code=0x7ffc0000 [ 123.852650][ T29] audit: type=1326 audit(1768580420.166:5758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7205 comm="syz.3.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407887f749 code=0x7ffc0000 [ 123.876204][ T29] audit: type=1326 audit(1768580420.166:5759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7205 comm="syz.3.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f407887f749 code=0x7ffc0000 [ 123.899804][ T29] audit: type=1326 audit(1768580420.166:5760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7205 comm="syz.3.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407887f749 code=0x7ffc0000 [ 123.923467][ T29] audit: type=1326 audit(1768580420.166:5761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7205 comm="syz.3.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f407887f749 code=0x7ffc0000 [ 123.946962][ T29] audit: type=1326 audit(1768580420.166:5762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7205 comm="syz.3.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407887f749 code=0x7ffc0000 [ 123.974244][ T29] audit: type=1326 audit(1768580420.166:5763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7205 comm="syz.3.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f407887f749 code=0x7ffc0000 [ 124.041348][ T7215] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1310: bg 0: block 248: padding at end of block bitmap is not set [ 124.056288][ T7215] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1310: Failed to acquire dquot type 1 [ 124.070775][ T7215] EXT4-fs (loop3): 1 truncate cleaned up [ 124.077218][ T7215] ext4 filesystem being mounted at /312/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.229438][ T7227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1314'. [ 124.397378][ T7238] ext4 filesystem being mounted at /279/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.515804][ T7244] siw: device registration error -23 [ 124.658910][ T7256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1326'. [ 124.749628][ T7262] Alternate GPT is invalid, using primary GPT. [ 124.755926][ T7262] loop0: p1 p2 p3 [ 124.759760][ T7262] loop0: partition table partially beyond EOD, truncated [ 124.827414][ T7271] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.870329][ T7271] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.910441][ T7271] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.970677][ T7271] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.003363][ T7275] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 125.029979][ T7275] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 125.056919][ T3584] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.076487][ T3584] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.084996][ T3584] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.094091][ T3584] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.121086][ T7279] netlink: 'syz.3.1336': attribute type 21 has an invalid length. [ 125.129021][ T7279] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1336'. [ 125.143413][ T7281] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.180578][ T7281] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.240622][ T7281] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.269313][ T7279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1336'. [ 125.300723][ T7281] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.321708][ T7284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1338'. [ 125.646068][ T7314] EXT4-fs: Ignoring removed bh option [ 125.651845][ T7314] EXT4-fs: inline encryption not supported [ 125.658167][ T7314] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 125.669500][ T7314] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 125.679430][ T7314] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.1353: lblock 2 mapped to illegal pblock 2 (length 1) [ 125.693897][ T7314] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.1353: lblock 0 mapped to illegal pblock 48 (length 1) [ 125.708612][ T7314] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1353: Failed to acquire dquot type 0 [ 125.720357][ T7314] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 125.730300][ T7314] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.1353: mark_inode_dirty error [ 125.742169][ T7314] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 125.752834][ T7314] EXT4-fs (loop3): 1 orphan inode deleted [ 125.762126][ T7314] FAULT_INJECTION: forcing a failure. [ 125.762126][ T7314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.775247][ T7314] CPU: 0 UID: 0 PID: 7314 Comm: syz.3.1353 Not tainted syzkaller #0 PREEMPT(voluntary) [ 125.775273][ T7314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 125.775285][ T7314] Call Trace: [ 125.775292][ T7314] [ 125.775299][ T7314] __dump_stack+0x1d/0x30 [ 125.775358][ T7314] dump_stack_lvl+0x95/0xd0 [ 125.775431][ T7314] dump_stack+0x15/0x1b [ 125.775455][ T7314] should_fail_ex+0x265/0x280 [ 125.775485][ T7314] should_fail+0xb/0x20 [ 125.775503][ T7314] should_fail_usercopy+0x1a/0x20 [ 125.775570][ T7314] _copy_from_user+0x1c/0xb0 [ 125.775597][ T7314] inet6_ioctl+0xf1/0x190 [ 125.775634][ T7314] sock_do_ioctl+0x73/0x220 [ 125.775657][ T7314] sock_ioctl+0x41b/0x610 [ 125.775697][ T7314] ? __pfx_sock_ioctl+0x10/0x10 [ 125.775774][ T7314] __se_sys_ioctl+0xce/0x140 [ 125.775806][ T7314] __x64_sys_ioctl+0x43/0x50 [ 125.775867][ T7314] x64_sys_call+0x14b0/0x3000 [ 125.775898][ T7314] do_syscall_64+0xca/0x2b0 [ 125.775969][ T7314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.775999][ T7314] RIP: 0033:0x7f407887f749 [ 125.776018][ T7314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.776058][ T7314] RSP: 002b:00007f40772e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.776077][ T7314] RAX: ffffffffffffffda RBX: 00007f4078ad5fa0 RCX: 00007f407887f749 [ 125.776089][ T7314] RDX: 00002000000002c0 RSI: 000000000000890b RDI: 000000000000000c [ 125.776100][ T7314] RBP: 00007f40772e7090 R08: 0000000000000000 R09: 0000000000000000 [ 125.776130][ T7314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.776143][ T7314] R13: 00007f4078ad6038 R14: 00007f4078ad5fa0 R15: 00007fffdc6e18a8 [ 125.776161][ T7314] [ 125.953548][ T3556] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:18: lblock 1 mapped to illegal pblock 1 (length 1) [ 125.989318][ T3556] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:18: Failed to release dquot type 0 [ 126.003740][ T3319] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 126.030484][ T7324] set_capacity_and_notify: 5 callbacks suppressed [ 126.030501][ T7324] loop0: detected capacity change from 0 to 2048 [ 126.037720][ T3319] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 126.053163][ T3319] EXT4-fs error (device loop3): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 126.087588][ T7329] loop3: detected capacity change from 0 to 128 [ 126.095511][ T7324] Alternate GPT is invalid, using primary GPT. [ 126.102014][ T7324] loop0: p1 p2 p3 [ 126.105801][ T7324] loop0: partition table partially beyond EOD, truncated [ 126.115941][ T7329] ext4 filesystem being mounted at /329/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.221543][ T7346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1367'. [ 126.608682][ T7356] loop3: detected capacity change from 0 to 512 [ 126.650888][ T7356] ext4 filesystem being mounted at /332/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.205527][ T7369] syzkaller0: entered promiscuous mode [ 127.423802][ T7369] syzkaller0 (unregistering): left promiscuous mode [ 127.469581][ T7365] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 127.499594][ T7365] bond1: (slave lo): Enslaving as a backup interface with an up link [ 127.513565][ T7365] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 127.538048][ T7377] siw: device registration error -23 [ 128.317678][ T7393] loop3: detected capacity change from 0 to 2048 [ 128.329981][ T7391] siw: device registration error -23 [ 128.359605][ T7393] Alternate GPT is invalid, using primary GPT. [ 128.365991][ T7393] loop3: p1 p2 p3 [ 128.369782][ T7393] loop3: partition table partially beyond EOD, truncated [ 128.568830][ T7407] 9p: Bad value for 'source' [ 129.015606][ T7423] lo speed is unknown, defaulting to 1000 [ 129.103832][ T29] kauditd_printk_skb: 207 callbacks suppressed [ 129.103852][ T29] audit: type=1400 audit(1768580425.486:5966): avc: denied { read } for pid=7422 comm="syz.2.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 129.150300][ T7426] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1394'. [ 129.186974][ T29] audit: type=1326 audit(1768580425.566:5967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.2.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f554883f749 code=0x7ffc0000 [ 129.210702][ T29] audit: type=1326 audit(1768580425.566:5968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.2.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f554883f749 code=0x7ffc0000 [ 129.234242][ T29] audit: type=1326 audit(1768580425.566:5969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.2.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f554883f749 code=0x7ffc0000 [ 129.264974][ T7432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1397'. [ 129.277104][ T7433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1395'. [ 129.314354][ T7433] lo speed is unknown, defaulting to 1000 [ 129.364615][ T29] audit: type=1326 audit(1768580425.746:5970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7434 comm="syz.0.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cee3f749 code=0x7ffc0000 [ 129.416491][ T29] audit: type=1326 audit(1768580425.746:5971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7434 comm="syz.0.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fc1cee3f749 code=0x7ffc0000 [ 129.440326][ T29] audit: type=1326 audit(1768580425.746:5972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7434 comm="syz.0.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cee3f749 code=0x7ffc0000 [ 129.532159][ T29] audit: type=1326 audit(1768580425.916:5973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7444 comm="syz.4.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd84cf749 code=0x7ffc0000 [ 129.562534][ T29] audit: type=1326 audit(1768580425.916:5974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7444 comm="syz.4.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd84cf749 code=0x7ffc0000 [ 129.586235][ T29] audit: type=1326 audit(1768580425.916:5975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7444 comm="syz.4.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd84cf749 code=0x7ffc0000 [ 129.655367][ T7453] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1406'. [ 129.940103][ T7475] 9p: Bad value for 'source' [ 130.022072][ T7477] netlink: 'syz.2.1416': attribute type 21 has an invalid length. [ 130.031451][ T7477] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1416'. [ 130.127329][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1416'. [ 130.184990][ T7483] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1419'. [ 130.209764][ T7485] FAULT_INJECTION: forcing a failure. [ 130.209764][ T7485] name failslab, interval 1, probability 0, space 0, times 0 [ 130.222715][ T7485] CPU: 0 UID: 0 PID: 7485 Comm: syz.2.1420 Not tainted syzkaller #0 PREEMPT(voluntary) [ 130.222766][ T7485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 130.222783][ T7485] Call Trace: [ 130.222798][ T7485] [ 130.222806][ T7485] __dump_stack+0x1d/0x30 [ 130.222828][ T7485] dump_stack_lvl+0x95/0xd0 [ 130.222919][ T7485] dump_stack+0x15/0x1b [ 130.222936][ T7485] should_fail_ex+0x265/0x280 [ 130.223002][ T7485] should_failslab+0x8c/0xb0 [ 130.223021][ T7485] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 130.223042][ T7485] ? perf_event_alloc+0x159/0x18d0 [ 130.223071][ T7485] perf_event_alloc+0x159/0x18d0 [ 130.223166][ T7485] ? __fget_files+0x184/0x1c0 [ 130.223190][ T7485] __se_sys_perf_event_open+0x490/0x1210 [ 130.223260][ T7485] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 130.223305][ T7485] __x64_sys_perf_event_open+0x67/0x80 [ 130.223340][ T7485] x64_sys_call+0x78c/0x3000 [ 130.223378][ T7485] do_syscall_64+0xca/0x2b0 [ 130.223397][ T7485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.223417][ T7485] RIP: 0033:0x7f554883f749 [ 130.223431][ T7485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.223484][ T7485] RSP: 002b:00007f554729f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 130.223500][ T7485] RAX: ffffffffffffffda RBX: 00007f5548a95fa0 RCX: 00007f554883f749 [ 130.223512][ T7485] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000180 [ 130.223582][ T7485] RBP: 00007f554729f090 R08: 0000000000000000 R09: 0000000000000000 [ 130.223604][ T7485] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 130.223615][ T7485] R13: 00007f5548a96038 R14: 00007f5548a95fa0 R15: 00007fff5750eaa8 [ 130.223631][ T7485] [ 130.457399][ T3556] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.478346][ T3556] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.486952][ T3556] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.503137][ T3556] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.535050][ T7492] loop3: detected capacity change from 0 to 512 [ 130.581135][ T7490] lo speed is unknown, defaulting to 1000 [ 130.589510][ T7492] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1423: bg 0: block 248: padding at end of block bitmap is not set [ 130.621104][ T7492] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1423: Failed to acquire dquot type 1 [ 130.639814][ T7492] EXT4-fs (loop3): 1 truncate cleaned up [ 130.646298][ T7492] ext4 filesystem being mounted at /337/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.661002][ T7505] netlink: 'syz.4.1428': attribute type 21 has an invalid length. [ 130.669076][ T7505] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1428'. [ 130.741028][ T7510] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1430'. [ 130.787053][ T7512] loop3: detected capacity change from 0 to 1024 [ 130.829856][ T7512] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1432: Failed to acquire dquot type 0 [ 130.857950][ T7512] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 130.954412][ T7512] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.1432: corrupted inode contents [ 131.010171][ T7512] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #13: comm syz.3.1432: mark_inode_dirty error [ 131.023340][ T7512] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.1432: corrupted inode contents [ 131.052584][ T7512] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.1432: mark_inode_dirty error [ 131.074797][ T7512] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.1432: corrupted inode contents [ 131.087628][ T7512] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 131.099005][ T7512] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.1432: corrupted inode contents [ 131.112177][ T7512] EXT4-fs error (device loop3): ext4_truncate:4635: inode #13: comm syz.3.1432: mark_inode_dirty error [ 131.160619][ T7512] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 131.286477][ T7512] EXT4-fs (loop3): 1 truncate cleaned up [ 131.309016][ T7512] EXT4-fs mount: 18 callbacks suppressed [ 131.309038][ T7512] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.367659][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.436599][ T7542] 9p: Bad value for 'source' [ 131.544214][ T7549] syzkaller0: entered promiscuous mode [ 131.552843][ T7549] syzkaller0 (unregistering): left promiscuous mode [ 131.707545][ T7563] block device autoloading is deprecated and will be removed. [ 131.856186][ T7571] siw: device registration error -23 [ 131.981491][ T7577] loop2: detected capacity change from 0 to 128 [ 131.991660][ T7577] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 132.004787][ T7577] ext4 filesystem being mounted at /291/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.081132][ T3321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.158000][ T7587] FAULT_INJECTION: forcing a failure. [ 132.158000][ T7587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.171972][ T7587] CPU: 1 UID: 0 PID: 7587 Comm: syz.2.1461 Not tainted syzkaller #0 PREEMPT(voluntary) [ 132.171998][ T7587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 132.172011][ T7587] Call Trace: [ 132.172017][ T7587] [ 132.172024][ T7587] __dump_stack+0x1d/0x30 [ 132.172047][ T7587] dump_stack_lvl+0x95/0xd0 [ 132.172144][ T7587] dump_stack+0x15/0x1b [ 132.172201][ T7587] should_fail_ex+0x265/0x280 [ 132.172239][ T7587] should_fail+0xb/0x20 [ 132.172265][ T7587] should_fail_usercopy+0x1a/0x20 [ 132.172324][ T7587] strncpy_from_user+0x27/0x260 [ 132.172365][ T7587] ? __se_sys_memfd_create+0x1f2/0x6b0 [ 132.172421][ T7587] ? __tsan_memcpy+0x3b4/0x3c0 [ 132.172455][ T7587] __se_sys_memfd_create+0x206/0x6b0 [ 132.172535][ T7587] __x64_sys_memfd_create+0x31/0x40 [ 132.172567][ T7587] x64_sys_call+0x28cb/0x3000 [ 132.172609][ T7587] do_syscall_64+0xca/0x2b0 [ 132.172636][ T7587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.172664][ T7587] RIP: 0033:0x7f554883f749 [ 132.172683][ T7587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.172701][ T7587] RSP: 002b:00007f554729ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 132.172747][ T7587] RAX: ffffffffffffffda RBX: 000000000000059d RCX: 00007f554883f749 [ 132.172763][ T7587] RDX: 00007f554729eef0 RSI: 0000000000000000 RDI: 00007f55488c4960 [ 132.172779][ T7587] RBP: 0000200000001100 R08: 00007f554729ebb7 R09: 00007f554729ee40 [ 132.172796][ T7587] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000002c0 [ 132.172812][ T7587] R13: 00007f554729eef0 R14: 00007f554729eeb0 R15: 0000200000000600 [ 132.172858][ T7587] [ 132.571640][ T7602] sd 0:0:1:0: device reset [ 132.801401][ T7617] loop3: detected capacity change from 0 to 128 [ 132.810526][ T7617] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 132.824216][ T7617] ext4 filesystem being mounted at /346/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.833909][ T7619] 9p: Bad value for 'source' [ 132.950370][ T3319] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 133.006941][ T7627] loop3: detected capacity change from 0 to 512 [ 133.021088][ T7627] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1478: bg 0: block 248: padding at end of block bitmap is not set [ 133.035891][ T7627] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1478: Failed to acquire dquot type 1 [ 133.048342][ T7627] EXT4-fs (loop3): 1 truncate cleaned up [ 133.055374][ T7627] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.068035][ T7627] ext4 filesystem being mounted at /349/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.079530][ T7627] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.235880][ T7634] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1480'. [ 133.244985][ T7634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1480'. [ 133.257214][ T7634] loop2: detected capacity change from 0 to 128 [ 133.285844][ T7634] syz.2.1480: attempt to access beyond end of device [ 133.285844][ T7634] loop2: rw=2049, sector=138, nr_sectors = 4 limit=128 [ 133.435319][ T7637] syzkaller0: entered promiscuous mode [ 133.444241][ T7637] syzkaller0 (unregistering): left promiscuous mode [ 133.675060][ T7646] siw: device registration error -23 [ 133.812959][ T7658] loop2: detected capacity change from 0 to 128 [ 134.041077][ T7663] netlink: 'syz.3.1490': attribute type 21 has an invalid length. [ 134.306377][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 134.306392][ T29] audit: type=1326 audit(1768580430.686:6116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7669 comm="syz.3.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407887f749 code=0x7ffc0000 [ 134.368476][ T29] audit: type=1326 audit(1768580430.716:6117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7669 comm="syz.3.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f407887f749 code=0x7ffc0000 [ 134.392733][ T29] audit: type=1326 audit(1768580430.716:6118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7669 comm="syz.3.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f407887f749 code=0x7ffc0000 [ 134.416360][ T29] audit: type=1326 audit(1768580430.716:6119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7669 comm="syz.3.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f407887f749 code=0x7ffc0000 [ 134.441059][ T29] audit: type=1326 audit(1768580430.716:6120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7669 comm="syz.3.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f407887f749 code=0x7ffc0000 [ 134.464610][ T29] audit: type=1326 audit(1768580430.716:6121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7669 comm="syz.3.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f407887f749 code=0x7ffc0000 [ 134.488809][ T29] audit: type=1326 audit(1768580430.716:6122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7669 comm="syz.3.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f407887f749 code=0x7ffc0000 [ 134.512759][ T29] audit: type=1326 audit(1768580430.716:6123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7669 comm="syz.3.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f407887f749 code=0x7ffc0000 [ 134.536847][ T29] audit: type=1326 audit(1768580430.716:6124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7669 comm="syz.3.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f407887f749 code=0x7ffc0000 [ 134.561064][ T29] audit: type=1326 audit(1768580430.716:6125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7669 comm="syz.3.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f407887f749 code=0x7ffc0000 [ 134.757286][ T7689] netlink: 'syz.2.1499': attribute type 21 has an invalid length. [ 134.765213][ T7689] __nla_validate_parse: 1 callbacks suppressed [ 134.765230][ T7689] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1499'. [ 135.037870][ T7721] FAULT_INJECTION: forcing a failure. [ 135.037870][ T7721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.051678][ T7721] CPU: 1 UID: 0 PID: 7721 Comm: syz.4.1513 Not tainted syzkaller #0 PREEMPT(voluntary) [ 135.051711][ T7721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 135.051771][ T7721] Call Trace: [ 135.051779][ T7721] [ 135.051786][ T7721] __dump_stack+0x1d/0x30 [ 135.051886][ T7721] dump_stack_lvl+0x95/0xd0 [ 135.051910][ T7721] dump_stack+0x15/0x1b [ 135.051929][ T7721] should_fail_ex+0x265/0x280 [ 135.051952][ T7721] should_fail+0xb/0x20 [ 135.052011][ T7721] should_fail_usercopy+0x1a/0x20 [ 135.052039][ T7721] _copy_from_iter+0xcf/0xe70 [ 135.052065][ T7721] ? alloc_pages_mpol+0x217/0x260 [ 135.052175][ T7721] copy_page_from_iter+0x178/0x2a0 [ 135.052256][ T7721] tun_get_user+0x679/0x2670 [ 135.052287][ T7721] ? ref_tracker_alloc+0x1f2/0x2f0 [ 135.052317][ T7721] tun_chr_write_iter+0x15e/0x210 [ 135.052341][ T7721] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 135.052418][ T7721] vfs_write+0x52a/0x960 [ 135.052444][ T7721] ksys_write+0xda/0x1a0 [ 135.052468][ T7721] __x64_sys_write+0x40/0x50 [ 135.052489][ T7721] x64_sys_call+0x2847/0x3000 [ 135.052520][ T7721] do_syscall_64+0xca/0x2b0 [ 135.052560][ T7721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.052586][ T7721] RIP: 0033:0x7fedd84ce1ff [ 135.052604][ T7721] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 135.052625][ T7721] RSP: 002b:00007fedd6f2f000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 135.052711][ T7721] RAX: ffffffffffffffda RBX: 00007fedd8725fa0 RCX: 00007fedd84ce1ff [ 135.052727][ T7721] RDX: 000000000000003e RSI: 00002000000010c0 RDI: 00000000000000c8 [ 135.052741][ T7721] RBP: 00007fedd6f2f090 R08: 0000000000000000 R09: 0000000000000000 [ 135.052756][ T7721] R10: 000000000000003e R11: 0000000000000293 R12: 0000000000000001 [ 135.052771][ T7721] R13: 00007fedd8726038 R14: 00007fedd8725fa0 R15: 00007fff43594298 [ 135.052793][ T7721] [ 135.254927][ T7714] loop2: detected capacity change from 0 to 512 [ 135.289148][ T7714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.319293][ T7730] netlink: 'syz.1.1516': attribute type 21 has an invalid length. [ 135.327375][ T7730] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1516'. [ 135.354878][ T7714] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.366267][ T7737] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1520'. [ 135.375626][ T7737] unsupported nla_type 65024 [ 135.535690][ T7757] lo speed is unknown, defaulting to 1000 [ 135.589534][ T7759] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1529'. [ 135.599111][ T7760] 9p: Bad value for 'source' [ 135.785706][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.924988][ T7773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.933682][ T7773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.043101][ T7782] sd 0:0:1:0: device reset [ 136.062627][ T7786] loop2: detected capacity change from 0 to 512 [ 136.069975][ T7786] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 136.080360][ T7786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1542'. [ 136.257743][ T7791] loop2: detected capacity change from 0 to 512 [ 136.272681][ T7791] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.285487][ T7791] ext4 filesystem being mounted at /316/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.305602][ T7795] syzkaller0: entered promiscuous mode [ 136.313823][ T7795] syzkaller0 (unregistering): left promiscuous mode [ 136.455347][ T7813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1553'. [ 136.488345][ T7816] FAULT_INJECTION: forcing a failure. [ 136.488345][ T7816] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.501608][ T7816] CPU: 0 UID: 0 PID: 7816 Comm: syz.4.1554 Not tainted syzkaller #0 PREEMPT(voluntary) [ 136.501636][ T7816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 136.501654][ T7816] Call Trace: [ 136.501663][ T7816] [ 136.501673][ T7816] __dump_stack+0x1d/0x30 [ 136.501704][ T7816] dump_stack_lvl+0x95/0xd0 [ 136.501731][ T7816] dump_stack+0x15/0x1b [ 136.501776][ T7816] should_fail_ex+0x265/0x280 [ 136.501837][ T7816] should_fail+0xb/0x20 [ 136.501863][ T7816] should_fail_usercopy+0x1a/0x20 [ 136.501948][ T7816] _copy_from_iter+0xcf/0xe70 [ 136.501972][ T7816] ? should_fail_ex+0xdb/0x280 [ 136.501996][ T7816] ? should_failslab+0x8c/0xb0 [ 136.502023][ T7816] ? __kmalloc_noprof+0x2b4/0x5a0 [ 136.502051][ T7816] ? kernfs_fop_write_iter+0xe2/0x300 [ 136.502115][ T7816] kernfs_fop_write_iter+0x125/0x300 [ 136.502166][ T7816] ? __import_iovec+0x428/0x540 [ 136.502201][ T7816] do_iter_readv_writev+0x4a1/0x540 [ 136.502234][ T7816] vfs_writev+0x2df/0x8b0 [ 136.502351][ T7816] __x64_sys_pwritev+0xfd/0x1c0 [ 136.502379][ T7816] x64_sys_call+0x161b/0x3000 [ 136.502411][ T7816] do_syscall_64+0xca/0x2b0 [ 136.502438][ T7816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.502495][ T7816] RIP: 0033:0x7fedd84cf749 [ 136.502509][ T7816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.502526][ T7816] RSP: 002b:00007fedd6f2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 136.502547][ T7816] RAX: ffffffffffffffda RBX: 00007fedd8725fa0 RCX: 00007fedd84cf749 [ 136.502564][ T7816] RDX: 0000000000000001 RSI: 00002000000029c0 RDI: 0000000000000004 [ 136.502580][ T7816] RBP: 00007fedd6f2f090 R08: 0000000000008000 R09: 0000000000000000 [ 136.502647][ T7816] R10: 000000000000ed47 R11: 0000000000000246 R12: 0000000000000001 [ 136.502658][ T7816] R13: 00007fedd8726038 R14: 00007fedd8725fa0 R15: 00007fff43594298 [ 136.502676][ T7816] [ 136.876678][ T7832] lo speed is unknown, defaulting to 1000 [ 136.884979][ T7834] FAULT_INJECTION: forcing a failure. [ 136.884979][ T7834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.898795][ T7834] CPU: 1 UID: 0 PID: 7834 Comm: syz.3.1561 Not tainted syzkaller #0 PREEMPT(voluntary) [ 136.898890][ T7834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 136.898913][ T7834] Call Trace: [ 136.898926][ T7834] [ 136.898936][ T7834] __dump_stack+0x1d/0x30 [ 136.898968][ T7834] dump_stack_lvl+0x95/0xd0 [ 136.899005][ T7834] dump_stack+0x15/0x1b [ 136.899040][ T7834] should_fail_ex+0x265/0x280 [ 136.899095][ T7834] should_fail+0xb/0x20 [ 136.899116][ T7834] should_fail_usercopy+0x1a/0x20 [ 136.899140][ T7834] _copy_from_iter+0xcf/0xe70 [ 136.899166][ T7834] ? should_fail_ex+0xdb/0x280 [ 136.899192][ T7834] ? should_failslab+0x8c/0xb0 [ 136.899242][ T7834] ? __kmalloc_noprof+0x2b4/0x5a0 [ 136.899270][ T7834] ? kernfs_fop_write_iter+0xe2/0x300 [ 136.899362][ T7834] kernfs_fop_write_iter+0x125/0x300 [ 136.899399][ T7834] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 136.899466][ T7834] vfs_write+0x52a/0x960 [ 136.899489][ T7834] ksys_write+0xda/0x1a0 [ 136.899515][ T7834] __x64_sys_write+0x40/0x50 [ 136.899618][ T7834] x64_sys_call+0x2847/0x3000 [ 136.899642][ T7834] do_syscall_64+0xca/0x2b0 [ 136.899669][ T7834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.899744][ T7834] RIP: 0033:0x7f407887f749 [ 136.899760][ T7834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.899778][ T7834] RSP: 002b:00007f40772e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 136.899878][ T7834] RAX: ffffffffffffffda RBX: 00007f4078ad5fa0 RCX: 00007f407887f749 [ 136.899900][ T7834] RDX: 0000000000000027 RSI: 0000200000000080 RDI: 0000000000000004 [ 136.899916][ T7834] RBP: 00007f40772e7090 R08: 0000000000000000 R09: 0000000000000000 [ 136.900006][ T7834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.900022][ T7834] R13: 00007f4078ad6038 R14: 00007f4078ad5fa0 R15: 00007fffdc6e18a8 [ 136.900047][ T7834] [ 137.143839][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.276916][ T7844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.286086][ T7844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.352623][ T7849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1567'. [ 137.359210][ T7845] lo speed is unknown, defaulting to 1000 [ 137.370920][ T7849] loop2: detected capacity change from 0 to 512 [ 137.378235][ T7849] EXT4-fs: Invalid want_extra_isize 255 [ 137.492129][ T7853] team0: Port device dummy0 removed [ 137.503004][ T7853] bridge_slave_0: left allmulticast mode [ 137.508787][ T7853] bridge_slave_0: left promiscuous mode [ 137.514668][ T7853] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.526214][ T7853] bridge_slave_1: left allmulticast mode [ 137.532055][ T7853] bridge_slave_1: left promiscuous mode [ 137.538042][ T7853] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.548137][ T7853] bond0: (slave bond_slave_0): Releasing backup interface [ 137.578096][ T7853] bond0: (slave bond_slave_1): Releasing backup interface [ 137.607797][ T7853] team0: Port device team_slave_0 removed [ 137.632988][ T7853] team0: Port device team_slave_1 removed [ 137.647650][ T7853] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 137.758305][ T7859] block device autoloading is deprecated and will be removed. [ 138.088278][ T7876] loop2: detected capacity change from 0 to 512 [ 138.104782][ T7875] syzkaller0: entered promiscuous mode [ 138.115714][ T7876] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.128437][ T7876] ext4 filesystem being mounted at /321/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.159240][ T7875] syzkaller0 (unregistering): left promiscuous mode [ 138.170329][ T7873] loop0: detected capacity change from 0 to 128 [ 138.213565][ T7873] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 138.284380][ T7873] ext4 filesystem being mounted at /347/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.491910][ T3320] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.816496][ T7900] loop3: detected capacity change from 0 to 128 [ 138.843886][ T7900] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 138.889532][ T7900] ext4 filesystem being mounted at /370/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.986907][ T2241] Bluetooth: hci0: Frame reassembly failed (-84) [ 138.995956][ T3319] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 139.497839][ T7920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1592'. [ 139.907281][ T7920] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 140.170841][ T7924] 9p: Bad value for 'source' [ 140.403760][ T29] kauditd_printk_skb: 259 callbacks suppressed [ 140.403788][ T29] audit: type=1326 audit(1768580436.786:6385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7930 comm="syz.3.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407887f749 code=0x7ffc0000 [ 140.503102][ T7934] !yz!: rxe_newlink: already configured on team_slave_0 [ 140.531875][ T29] audit: type=1326 audit(1768580436.826:6386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7930 comm="syz.3.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407887f749 code=0x7ffc0000 [ 140.555405][ T29] audit: type=1326 audit(1768580436.826:6387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7930 comm="syz.3.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407887f749 code=0x7ffc0000 [ 140.578876][ T29] audit: type=1326 audit(1768580436.826:6388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7930 comm="syz.3.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407887f749 code=0x7ffc0000 [ 140.602449][ T29] audit: type=1326 audit(1768580436.826:6389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7930 comm="syz.3.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f407887f749 code=0x7ffc0000 [ 140.625946][ T29] audit: type=1326 audit(1768580436.826:6390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7930 comm="syz.3.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407887f749 code=0x7ffc0000 [ 140.649542][ T29] audit: type=1326 audit(1768580436.826:6391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7930 comm="syz.3.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407887f749 code=0x7ffc0000 [ 140.673041][ T29] audit: type=1326 audit(1768580436.826:6392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7930 comm="syz.3.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407887f749 code=0x7ffc0000 [ 140.696492][ T29] audit: type=1326 audit(1768580436.826:6393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7930 comm="syz.3.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407887f749 code=0x7ffc0000 [ 140.720106][ T29] audit: type=1326 audit(1768580436.826:6394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7930 comm="syz.3.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407887f749 code=0x7ffc0000 [ 140.830378][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.851895][ T7949] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1601'. [ 140.895984][ T7955] xt_l2tp: v2 doesn't support IP mode [ 140.909635][ T7957] loop2: detected capacity change from 0 to 128 [ 140.933062][ T7955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7955 comm=syz.3.1604 [ 140.971769][ T7960] loop0: detected capacity change from 0 to 512 [ 140.997856][ T7963] sd 0:0:1:0: device reset [ 141.004292][ T7960] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1607: bg 0: block 248: padding at end of block bitmap is not set [ 141.019155][ T7960] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.1607: Failed to acquire dquot type 1 [ 141.031456][ T7960] EXT4-fs (loop0): 1 truncate cleaned up [ 141.037581][ T7960] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.050298][ T7960] ext4 filesystem being mounted at /351/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.060349][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 141.069617][ T7960] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.186590][ T7977] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1614'. [ 141.247056][ T7983] loop0: detected capacity change from 0 to 512 [ 141.257247][ T7983] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 141.266637][ T7983] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1616'. [ 141.312597][ T7990] syzkaller0: entered promiscuous mode [ 141.329183][ T7990] syzkaller0 (unregistering): left promiscuous mode [ 141.349183][ T7999] loop0: detected capacity change from 0 to 512 [ 141.389135][ T8003] loop2: detected capacity change from 0 to 128 [ 141.397899][ T7999] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1623: bg 0: block 248: padding at end of block bitmap is not set [ 141.414002][ T7999] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.1623: Failed to acquire dquot type 1 [ 141.426377][ T7999] EXT4-fs (loop0): 1 truncate cleaned up [ 141.432890][ T7999] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.446432][ T7999] ext4 filesystem being mounted at /355/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.461478][ T8003] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 141.476127][ T7999] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.479162][ T8003] ext4 filesystem being mounted at /326/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.605771][ T8020] FAULT_INJECTION: forcing a failure. [ 141.605771][ T8020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.619595][ T8020] CPU: 1 UID: 0 PID: 8020 Comm: syz.0.1631 Not tainted syzkaller #0 PREEMPT(voluntary) [ 141.619622][ T8020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 141.619636][ T8020] Call Trace: [ 141.619645][ T8020] [ 141.619655][ T8020] __dump_stack+0x1d/0x30 [ 141.619729][ T8020] dump_stack_lvl+0x95/0xd0 [ 141.619758][ T8020] dump_stack+0x15/0x1b [ 141.619779][ T8020] should_fail_ex+0x265/0x280 [ 141.619802][ T8020] should_fail+0xb/0x20 [ 141.619897][ T8020] should_fail_usercopy+0x1a/0x20 [ 141.619929][ T8020] _copy_from_iter+0x328/0xe70 [ 141.619962][ T8020] ? __kmalloc_noprof+0x2b4/0x5a0 [ 141.620064][ T8020] ? kernfs_fop_write_iter+0xe2/0x300 [ 141.620108][ T8020] kernfs_fop_write_iter+0x125/0x300 [ 141.620156][ T8020] ? __import_iovec+0x321/0x540 [ 141.620194][ T8020] do_iter_readv_writev+0x4a1/0x540 [ 141.620227][ T8020] vfs_writev+0x2df/0x8b0 [ 141.620271][ T8020] __x64_sys_pwritev+0xfd/0x1c0 [ 141.620365][ T8020] x64_sys_call+0x161b/0x3000 [ 141.620428][ T8020] do_syscall_64+0xca/0x2b0 [ 141.620454][ T8020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.620490][ T8020] RIP: 0033:0x7fc1cee3f749 [ 141.620508][ T8020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.620526][ T8020] RSP: 002b:00007fc1cd8a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 141.620622][ T8020] RAX: ffffffffffffffda RBX: 00007fc1cf095fa0 RCX: 00007fc1cee3f749 [ 141.620637][ T8020] RDX: 0000000000000002 RSI: 00002000000029c0 RDI: 0000000000000004 [ 141.620653][ T8020] RBP: 00007fc1cd8a7090 R08: 0000000000008000 R09: 0000000000000000 [ 141.620669][ T8020] R10: 000000000000ed47 R11: 0000000000000246 R12: 0000000000000001 [ 141.620684][ T8020] R13: 00007fc1cf096038 R14: 00007fc1cf095fa0 R15: 00007fffced3ead8 [ 141.620702][ T8020] [ 141.864358][ T8029] netlink: 'syz.0.1635': attribute type 21 has an invalid length. [ 141.872280][ T8029] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1635'. [ 141.884432][ T8031] loop3: detected capacity change from 0 to 128 [ 141.972889][ T8043] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1640'. [ 142.160375][ T3321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.285119][ T8072] ref_ctr_offset mismatch. inode: 0x644 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x30656c69662f2e [ 142.311838][ T8071] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1652'. [ 142.455423][ T8092] FAULT_INJECTION: forcing a failure. [ 142.455423][ T8092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.470320][ T8092] CPU: 0 UID: 0 PID: 8092 Comm: syz.2.1662 Not tainted syzkaller #0 PREEMPT(voluntary) [ 142.470348][ T8092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 142.470361][ T8092] Call Trace: [ 142.470370][ T8092] [ 142.470380][ T8092] __dump_stack+0x1d/0x30 [ 142.470490][ T8092] dump_stack_lvl+0x95/0xd0 [ 142.470511][ T8092] dump_stack+0x15/0x1b [ 142.470531][ T8092] should_fail_ex+0x265/0x280 [ 142.470608][ T8092] should_fail+0xb/0x20 [ 142.470634][ T8092] should_fail_usercopy+0x1a/0x20 [ 142.470666][ T8092] _copy_to_iter+0x251/0xe70 [ 142.470700][ T8092] ? seq_show+0x321/0x370 [ 142.470764][ T8092] seq_read_iter+0x776/0x950 [ 142.470815][ T8092] seq_read+0x270/0x2b0 [ 142.470856][ T8092] ? __pfx_seq_read+0x10/0x10 [ 142.470893][ T8092] vfs_readv+0x3fb/0x690 [ 142.470943][ T8092] __x64_sys_preadv+0xfd/0x1c0 [ 142.470968][ T8092] x64_sys_call+0x2805/0x3000 [ 142.471001][ T8092] do_syscall_64+0xca/0x2b0 [ 142.471094][ T8092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.471173][ T8092] RIP: 0033:0x7f554883f749 [ 142.471193][ T8092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.471217][ T8092] RSP: 002b:00007f554729f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 142.471240][ T8092] RAX: ffffffffffffffda RBX: 00007f5548a95fa0 RCX: 00007f554883f749 [ 142.471253][ T8092] RDX: 0000000000000001 RSI: 0000200000001240 RDI: 0000000000000005 [ 142.471314][ T8092] RBP: 00007f554729f090 R08: 0000000000000003 R09: 0000000000000000 [ 142.471330][ T8092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.471344][ T8092] R13: 00007f5548a96038 R14: 00007f5548a95fa0 R15: 00007fff5750eaa8 [ 142.471366][ T8092] [ 142.738558][ T8102] tipc: Withdrawal distribution failure [ 142.889857][ T8121] loop2: detected capacity change from 0 to 128 [ 142.939528][ T8127] tipc: Can't bind to reserved service type 1 [ 142.946939][ T8127] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1679'. [ 142.999702][ T8121] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 143.017396][ T8121] ext4 filesystem being mounted at /339/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.121794][ T8148] ref_ctr_offset mismatch. inode: 0x5f9 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x30656c69662f2e [ 143.179088][ T8149] siw: device registration error -23 [ 143.375038][ T8158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1692'. [ 143.682046][ T8165] loop0: detected capacity change from 0 to 128 [ 143.791345][ T3321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.807528][ T8165] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 143.824956][ T8165] ext4 filesystem being mounted at /376/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.397373][ T3320] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 144.756190][ T8179] 9p: Bad value for 'source' [ 145.307487][ T8215] loop2: detected capacity change from 0 to 128 [ 145.318647][ T8215] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 145.331787][ T8215] ext4 filesystem being mounted at /345/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.361127][ T8217] FAULT_INJECTION: forcing a failure. [ 145.361127][ T8217] name failslab, interval 1, probability 0, space 0, times 0 [ 145.373841][ T8217] CPU: 0 UID: 0 PID: 8217 Comm: syz.0.1699 Not tainted syzkaller #0 PREEMPT(voluntary) [ 145.373867][ T8217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 145.373879][ T8217] Call Trace: [ 145.373887][ T8217] [ 145.373897][ T8217] __dump_stack+0x1d/0x30 [ 145.373941][ T8217] dump_stack_lvl+0x95/0xd0 [ 145.373962][ T8217] dump_stack+0x15/0x1b [ 145.373981][ T8217] should_fail_ex+0x265/0x280 [ 145.374004][ T8217] should_failslab+0x8c/0xb0 [ 145.374033][ T8217] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 145.374106][ T8217] ? __alloc_skb+0x2ff/0x4b0 [ 145.374140][ T8217] __alloc_skb+0x2ff/0x4b0 [ 145.374214][ T8217] ? __alloc_skb+0x228/0x4b0 [ 145.374269][ T8217] netlink_alloc_large_skb+0xbf/0xf0 [ 145.374307][ T8217] netlink_sendmsg+0x3cf/0x6b0 [ 145.374424][ T8217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.374471][ T8217] __sock_sendmsg+0x145/0x180 [ 145.374492][ T8217] ____sys_sendmsg+0x31e/0x4a0 [ 145.374531][ T8217] ___sys_sendmsg+0x17b/0x1d0 [ 145.374588][ T8217] __x64_sys_sendmsg+0xd4/0x160 [ 145.374629][ T8217] x64_sys_call+0x17ba/0x3000 [ 145.374653][ T8217] do_syscall_64+0xca/0x2b0 [ 145.374757][ T8217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.374825][ T8217] RIP: 0033:0x7fc1cee3f749 [ 145.374840][ T8217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.374863][ T8217] RSP: 002b:00007fc1cd865038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.374888][ T8217] RAX: ffffffffffffffda RBX: 00007fc1cf096180 RCX: 00007fc1cee3f749 [ 145.374989][ T8217] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000008 [ 145.375002][ T8217] RBP: 00007fc1cd865090 R08: 0000000000000000 R09: 0000000000000000 [ 145.375017][ T8217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.375033][ T8217] R13: 00007fc1cf096218 R14: 00007fc1cf096180 R15: 00007fffced3ead8 [ 145.375067][ T8217] [ 145.734044][ T3321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 145.762000][ T29] kauditd_printk_skb: 254 callbacks suppressed [ 145.762021][ T29] audit: type=1400 audit(1768580442.146:6645): avc: denied { ioctl } for pid=8223 comm="syz.4.1720" path="socket:[23306]" dev="sockfs" ino=23306 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 145.841526][ T29] audit: type=1326 audit(1768580442.176:6646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8223 comm="syz.4.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd84cf749 code=0x7ffc0000 [ 145.865899][ T29] audit: type=1326 audit(1768580442.176:6647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8223 comm="syz.4.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd84cf749 code=0x7ffc0000 [ 145.890265][ T29] audit: type=1326 audit(1768580442.176:6648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8223 comm="syz.4.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd84cf749 code=0x7ffc0000 [ 145.913910][ T29] audit: type=1326 audit(1768580442.176:6649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8223 comm="syz.4.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd84cf749 code=0x7ffc0000 [ 145.938505][ T29] audit: type=1326 audit(1768580442.176:6650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8223 comm="syz.4.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fedd84cf749 code=0x7ffc0000 [ 145.962189][ T29] audit: type=1326 audit(1768580442.176:6651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8223 comm="syz.4.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd84cf749 code=0x7ffc0000 [ 145.986370][ T29] audit: type=1326 audit(1768580442.176:6652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8223 comm="syz.4.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd84cf749 code=0x7ffc0000 [ 146.010643][ T29] audit: type=1400 audit(1768580442.186:6653): avc: denied { tracepoint } for pid=8223 comm="syz.4.1720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 146.030690][ T29] audit: type=1400 audit(1768580442.216:6654): avc: denied { ioctl } for pid=8228 comm="syz.1.1723" path="socket:[23317]" dev="sockfs" ino=23317 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 146.137812][ T8241] netlink: 'syz.4.1726': attribute type 13 has an invalid length. [ 146.145969][ T8241] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1726'. [ 146.180370][ T8248] loop2: detected capacity change from 0 to 512 [ 146.189648][ T8241] syz_tun: refused to change device tx_queue_len [ 146.196673][ T8241] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 146.218711][ T8248] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 146.230891][ T8248] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1730'. [ 146.249778][ T8255] loop0: detected capacity change from 0 to 128 [ 146.272484][ T8255] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 146.287354][ T8255] ext4 filesystem being mounted at /379/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.379061][ T3320] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 146.475940][ T8281] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1744'. [ 146.566577][ T8295] loop2: detected capacity change from 0 to 512 [ 146.582789][ T8295] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1750: bg 0: block 248: padding at end of block bitmap is not set [ 146.597446][ T8295] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1750: Failed to acquire dquot type 1 [ 146.610268][ T8295] EXT4-fs (loop2): 1 truncate cleaned up [ 146.616423][ T8295] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.629962][ T8295] ext4 filesystem being mounted at /351/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.641728][ T8295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.731325][ T8313] loop2: detected capacity change from 0 to 512 [ 146.738871][ T8313] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 146.755148][ T8315] loop0: detected capacity change from 0 to 128 [ 146.780737][ T8315] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 146.793776][ T8315] ext4 filesystem being mounted at /389/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.847792][ T8328] loop3: detected capacity change from 0 to 256 [ 146.933005][ T3320] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 146.998173][ T8343] loop2: detected capacity change from 0 to 512 [ 147.005053][ T8343] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 147.050551][ T8349] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1773: bg 0: block 248: padding at end of block bitmap is not set [ 147.065620][ T8349] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1773: Failed to acquire dquot type 1 [ 147.088634][ T8349] EXT4-fs (loop2): 1 truncate cleaned up [ 147.100812][ T8349] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.121084][ T8349] ext4 filesystem being mounted at /360/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.134040][ T8349] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.204273][ T8361] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 147.226863][ T8361] ext4 filesystem being mounted at /408/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.280327][ T3319] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 147.430549][ T8397] Alternate GPT is invalid, using primary GPT. [ 147.437041][ T8397] loop3: p1 p2 p3 [ 147.440850][ T8397] loop3: partition table partially beyond EOD, truncated [ 147.449946][ T8404] lo speed is unknown, defaulting to 1000 [ 147.480161][ T8406] FAULT_INJECTION: forcing a failure. [ 147.480161][ T8406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.493654][ T8406] CPU: 1 UID: 0 PID: 8406 Comm: syz.4.1796 Not tainted syzkaller #0 PREEMPT(voluntary) [ 147.493688][ T8406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 147.493704][ T8406] Call Trace: [ 147.493714][ T8406] [ 147.493723][ T8406] __dump_stack+0x1d/0x30 [ 147.493829][ T8406] dump_stack_lvl+0x95/0xd0 [ 147.493854][ T8406] dump_stack+0x15/0x1b [ 147.493872][ T8406] should_fail_ex+0x265/0x280 [ 147.493951][ T8406] should_fail+0xb/0x20 [ 147.493977][ T8406] should_fail_usercopy+0x1a/0x20 [ 147.494080][ T8406] _copy_from_user+0x1c/0xb0 [ 147.494145][ T8406] __copy_msghdr+0x244/0x300 [ 147.494231][ T8406] ___sys_sendmsg+0x109/0x1d0 [ 147.494285][ T8406] __x64_sys_sendmsg+0xd4/0x160 [ 147.494322][ T8406] x64_sys_call+0x17ba/0x3000 [ 147.494419][ T8406] do_syscall_64+0xca/0x2b0 [ 147.494439][ T8406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.494460][ T8406] RIP: 0033:0x7fedd84cf749 [ 147.494480][ T8406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.494535][ T8406] RSP: 002b:00007fedd6f0e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.494557][ T8406] RAX: ffffffffffffffda RBX: 00007fedd8726090 RCX: 00007fedd84cf749 [ 147.494569][ T8406] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 147.494580][ T8406] RBP: 00007fedd6f0e090 R08: 0000000000000000 R09: 0000000000000000 [ 147.494592][ T8406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.494605][ T8406] R13: 00007fedd8726128 R14: 00007fedd8726090 R15: 00007fff43594298 [ 147.494627][ T8406] [ 147.710488][ T8413] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1799'. [ 147.750828][ T8415] siw: device registration error -23 [ 147.934816][ T8441] set_capacity_and_notify: 3 callbacks suppressed [ 147.934914][ T8441] loop0: detected capacity change from 0 to 128 [ 147.951821][ T8441] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 147.964771][ T8441] ext4 filesystem being mounted at /393/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.989203][ T3320] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 148.001670][ T8444] siw: device registration error -23 [ 148.236211][ T8472] loop2: detected capacity change from 0 to 128 [ 148.238667][ T8470] syzkaller0: entered promiscuous mode [ 148.252562][ T8470] syzkaller0 (unregistering): left promiscuous mode [ 148.459226][ T8486] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1830'. [ 148.518646][ T8492] loop2: detected capacity change from 0 to 128 [ 148.527228][ T8492] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 148.540948][ T8492] ext4 filesystem being mounted at /371/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.579945][ T3321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 148.640171][ T8503] loop2: detected capacity change from 0 to 512 [ 148.650548][ T8503] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1838: bg 0: block 248: padding at end of block bitmap is not set [ 148.665468][ T8503] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1838: Failed to acquire dquot type 1 [ 148.677854][ T8503] EXT4-fs (loop2): 1 truncate cleaned up [ 148.684174][ T8503] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.697418][ T8503] ext4 filesystem being mounted at /374/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.709291][ T8503] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.768171][ T8517] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1843'. [ 148.797313][ T8519] FAULT_INJECTION: forcing a failure. [ 148.797313][ T8519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.810480][ T8519] CPU: 0 UID: 0 PID: 8519 Comm: syz.4.1845 Not tainted syzkaller #0 PREEMPT(voluntary) [ 148.810534][ T8519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 148.810552][ T8519] Call Trace: [ 148.810594][ T8519] [ 148.810604][ T8519] __dump_stack+0x1d/0x30 [ 148.810637][ T8519] dump_stack_lvl+0x95/0xd0 [ 148.810681][ T8519] dump_stack+0x15/0x1b [ 148.810738][ T8519] should_fail_ex+0x265/0x280 [ 148.810769][ T8519] should_fail+0xb/0x20 [ 148.810792][ T8519] should_fail_usercopy+0x1a/0x20 [ 148.810824][ T8519] strncpy_from_user+0x27/0x260 [ 148.810937][ T8519] getname_flags+0xae/0x3b0 [ 148.810970][ T8519] user_path_at+0x28/0x130 [ 148.811000][ T8519] __se_sys_mount+0x25b/0x2e0 [ 148.811031][ T8519] __x64_sys_mount+0x67/0x80 [ 148.811060][ T8519] x64_sys_call+0x2cca/0x3000 [ 148.811133][ T8519] do_syscall_64+0xca/0x2b0 [ 148.811161][ T8519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.811241][ T8519] RIP: 0033:0x7fedd84cf749 [ 148.811262][ T8519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.811280][ T8519] RSP: 002b:00007fedd6f2f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 148.811299][ T8519] RAX: ffffffffffffffda RBX: 00007fedd8725fa0 RCX: 00007fedd84cf749 [ 148.811311][ T8519] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000000 [ 148.811327][ T8519] RBP: 00007fedd6f2f090 R08: 0000000000000000 R09: 0000000000000000 [ 148.811344][ T8519] R10: 0000000000000021 R11: 0000000000000246 R12: 0000000000000001 [ 148.811360][ T8519] R13: 00007fedd8726038 R14: 00007fedd8725fa0 R15: 00007fff43594298 [ 148.811451][ T8519] [ 148.996218][ T8521] siw: device registration error -23 [ 149.033590][ T8526] loop2: detected capacity change from 0 to 128 [ 149.056830][ T8526] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 149.124578][ T8526] ext4 filesystem being mounted at /376/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.225166][ T3321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 149.324688][ T8567] lo speed is unknown, defaulting to 1000 [ 149.423272][ T8576] loop0: detected capacity change from 0 to 128 [ 149.461859][ T8576] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 149.489056][ T8576] ext4 filesystem being mounted at /401/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.586879][ T3320] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 149.738310][ T8591] loop0: detected capacity change from 0 to 512 [ 149.750232][ T8591] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1877: bg 0: block 248: padding at end of block bitmap is not set [ 149.765963][ T8591] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.1877: Failed to acquire dquot type 1 [ 149.777872][ T8591] EXT4-fs (loop0): 1 truncate cleaned up [ 149.794243][ T8591] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.809321][ T8591] ext4 filesystem being mounted at /404/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.834863][ T8591] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.994066][ T8600] siw: device registration error -23 [ 150.059004][ T8607] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1883'. [ 150.153534][ T8616] sd 0:0:1:0: device reset [ 150.169678][ T8618] syzkaller0: entered promiscuous mode [ 150.232188][ T8618] syzkaller0 (unregistering): left promiscuous mode [ 150.347533][ T8623] loop0: detected capacity change from 0 to 512 [ 150.373806][ T8623] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.386459][ T8623] ext4 filesystem being mounted at /409/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.744643][ T8639] lo speed is unknown, defaulting to 1000 [ 150.786193][ T8640] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 150.806446][ T8640] netlink: 'syz.4.1896': attribute type 4 has an invalid length. [ 150.814287][ T8640] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1896'. [ 150.861070][ T29] kauditd_printk_skb: 489 callbacks suppressed [ 150.861087][ T29] audit: type=1326 audit(1768580447.246:7136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8642 comm="syz.1.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57615cf749 code=0x7ffc0000 [ 150.895799][ T29] audit: type=1326 audit(1768580447.246:7137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8642 comm="syz.1.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57615cf749 code=0x7ffc0000 [ 150.919345][ T29] audit: type=1326 audit(1768580447.246:7138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8642 comm="syz.1.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57615cf749 code=0x7ffc0000 [ 150.943036][ T29] audit: type=1326 audit(1768580447.246:7139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8642 comm="syz.1.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57615cf749 code=0x7ffc0000 [ 150.966498][ T29] audit: type=1326 audit(1768580447.246:7140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8642 comm="syz.1.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57615cf749 code=0x7ffc0000 [ 150.990267][ T29] audit: type=1326 audit(1768580447.246:7141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8642 comm="syz.1.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57615cf749 code=0x7ffc0000 [ 151.013901][ T29] audit: type=1326 audit(1768580447.246:7142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8642 comm="syz.1.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f57615cf749 code=0x7ffc0000 [ 151.037569][ T29] audit: type=1326 audit(1768580447.246:7143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8642 comm="syz.1.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57615cf749 code=0x7ffc0000 [ 151.061152][ T29] audit: type=1326 audit(1768580447.246:7144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8642 comm="syz.1.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f57615cf749 code=0x7ffc0000 [ 151.084698][ T29] audit: type=1326 audit(1768580447.246:7145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8642 comm="syz.1.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f57615cf749 code=0x7ffc0000 [ 151.170268][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.198309][ T8654] loop0: detected capacity change from 0 to 1024 [ 151.205987][ T8654] EXT4-fs: Ignoring removed oldalloc option [ 151.212630][ T8654] EXT4-fs: Ignoring removed nobh option [ 151.218431][ T8654] EXT4-fs: Ignoring removed bh option [ 151.236211][ T8653] nfs: Unknown parameter 'nointr¢' [ 151.245311][ T8655] loop3: detected capacity change from 0 to 512 [ 151.257151][ T8654] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.273218][ T8654] FAULT_INJECTION: forcing a failure. [ 151.273218][ T8654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.286389][ T8654] CPU: 1 UID: 0 PID: 8654 Comm: syz.0.1899 Not tainted syzkaller #0 PREEMPT(voluntary) [ 151.286493][ T8654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 151.286506][ T8654] Call Trace: [ 151.286513][ T8654] [ 151.286521][ T8654] __dump_stack+0x1d/0x30 [ 151.286546][ T8654] dump_stack_lvl+0x95/0xd0 [ 151.286568][ T8654] dump_stack+0x15/0x1b [ 151.286602][ T8654] should_fail_ex+0x265/0x280 [ 151.286626][ T8654] should_fail+0xb/0x20 [ 151.286646][ T8654] should_fail_usercopy+0x1a/0x20 [ 151.286671][ T8654] _copy_from_user+0x1c/0xb0 [ 151.286769][ T8654] __sys_bpf+0x183/0x7c0 [ 151.286797][ T8654] __x64_sys_bpf+0x41/0x50 [ 151.286834][ T8654] x64_sys_call+0x28e1/0x3000 [ 151.286952][ T8654] do_syscall_64+0xca/0x2b0 [ 151.286973][ T8654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.286994][ T8654] RIP: 0033:0x7fc1cee3f749 [ 151.287078][ T8654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.287097][ T8654] RSP: 002b:00007fc1cd8a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 151.287116][ T8654] RAX: ffffffffffffffda RBX: 00007fc1cf095fa0 RCX: 00007fc1cee3f749 [ 151.287128][ T8654] RDX: 0000000000000050 RSI: 0000200000000740 RDI: 0000000000000000 [ 151.287140][ T8654] RBP: 00007fc1cd8a7090 R08: 0000000000000000 R09: 0000000000000000 [ 151.287153][ T8654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.287184][ T8654] R13: 00007fc1cf096038 R14: 00007fc1cf095fa0 R15: 00007fffced3ead8 [ 151.287203][ T8654] [ 151.447390][ T8655] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 151.455634][ T8655] EXT4-fs (loop3): orphan cleanup on readonly fs [ 151.466951][ T8655] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.1900: corrupted inode contents [ 151.479752][ T8655] EXT4-fs (loop3): Remounting filesystem read-only [ 151.486554][ T8655] EXT4-fs (loop3): 1 truncate cleaned up [ 151.492736][ T2241] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 151.503353][ T2241] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 151.534183][ T2241] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 151.545159][ T8655] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 151.564032][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.735922][ T8679] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 151.748982][ T8679] ext4 filesystem being mounted at /411/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.765979][ T4310] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 151.775159][ T4310] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 151.804468][ T8680] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.817238][ T8680] ext4 filesystem being mounted at /385/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.951670][ T8703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1919'. [ 151.961164][ T8703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1919'. [ 151.974693][ T8703] netlink: 'syz.1.1919': attribute type 1 has an invalid length. [ 151.982602][ T8703] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1919'. [ 152.030676][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.331239][ T8726] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.344815][ T8726] ext4 filesystem being mounted at /423/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.538034][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.782810][ T3320] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 153.078987][ T8737] 9p: Bad value for 'source' [ 153.197929][ T8743] sd 0:0:1:0: device reset [ 153.244453][ T8747] FAULT_INJECTION: forcing a failure. [ 153.244453][ T8747] name failslab, interval 1, probability 0, space 0, times 0 [ 153.257403][ T8747] CPU: 0 UID: 0 PID: 8747 Comm: syz.1.1937 Not tainted syzkaller #0 PREEMPT(voluntary) [ 153.257434][ T8747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 153.257446][ T8747] Call Trace: [ 153.257453][ T8747] [ 153.257463][ T8747] __dump_stack+0x1d/0x30 [ 153.257570][ T8747] dump_stack_lvl+0x95/0xd0 [ 153.257599][ T8747] dump_stack+0x15/0x1b [ 153.257635][ T8747] should_fail_ex+0x265/0x280 [ 153.257665][ T8747] should_failslab+0x8c/0xb0 [ 153.257694][ T8747] kmem_cache_alloc_noprof+0x69/0x4b0 [ 153.257765][ T8747] ? audit_log_start+0x342/0x720 [ 153.257793][ T8747] audit_log_start+0x342/0x720 [ 153.257854][ T8747] ? kstrtouint+0x76/0xc0 [ 153.257875][ T8747] audit_seccomp+0x48/0x100 [ 153.257914][ T8747] ? __seccomp_filter+0x832/0x1260 [ 153.257949][ T8747] __seccomp_filter+0x843/0x1260 [ 153.257999][ T8747] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 153.258089][ T8747] ? vfs_write+0x7e8/0x960 [ 153.258111][ T8747] __secure_computing+0x82/0x150 [ 153.258139][ T8747] syscall_trace_enter+0xcf/0x1e0 [ 153.258203][ T8747] do_syscall_64+0xa4/0x2b0 [ 153.258223][ T8747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.258246][ T8747] RIP: 0033:0x7f57615cf749 [ 153.258266][ T8747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.258341][ T8747] RSP: 002b:00007f576002f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f5 [ 153.258369][ T8747] RAX: ffffffffffffffda RBX: 00007f5761825fa0 RCX: 00007f57615cf749 [ 153.258384][ T8747] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 153.258400][ T8747] RBP: 00007f576002f090 R08: 0000000000000000 R09: 0000000000000000 [ 153.258416][ T8747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.258429][ T8747] R13: 00007f5761826038 R14: 00007f5761825fa0 R15: 00007ffcd2ffde08 [ 153.258475][ T8747] [ 153.509681][ T8749] 9p: Bad value for 'source' [ 153.591747][ T8751] set_capacity_and_notify: 3 callbacks suppressed [ 153.591764][ T8751] loop0: detected capacity change from 0 to 512 [ 153.642994][ T8755] syzkaller0: entered promiscuous mode [ 153.650873][ T8755] syzkaller0 (unregistering): left promiscuous mode [ 153.726926][ T8751] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1938: bg 0: block 248: padding at end of block bitmap is not set [ 153.742526][ T8751] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.1938: Failed to acquire dquot type 1 [ 153.756624][ T8751] EXT4-fs (loop0): 1 truncate cleaned up [ 153.763209][ T8751] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.803520][ T8751] ext4 filesystem being mounted at /415/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.916859][ T8769] loop0: detected capacity change from 0 to 128 [ 153.954347][ T8769] ext4 filesystem being mounted at /416/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.145270][ T8792] sd 0:0:1:0: device reset [ 154.262070][ T8803] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 154.270565][ T8804] 9p: Bad value for 'source' [ 154.505386][ T8823] loop2: detected capacity change from 0 to 512 [ 154.531880][ T8824] siw: device registration error -23 [ 154.631807][ T8823] ext4 filesystem being mounted at /393/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.796352][ T8831] syzkaller0: entered promiscuous mode [ 154.842782][ T8831] syzkaller0 (unregistering): left promiscuous mode [ 155.190704][ T8848] loop0: detected capacity change from 0 to 128 [ 155.207849][ T8848] ext4 filesystem being mounted at /418/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.633409][ T8867] loop3: detected capacity change from 0 to 512 [ 155.641438][ T8867] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 155.651646][ T8867] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1981'. [ 155.836438][ T8865] loop0: detected capacity change from 0 to 512 [ 155.860472][ T8865] ext4 filesystem being mounted at /419/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.872798][ T29] kauditd_printk_skb: 414 callbacks suppressed [ 155.872816][ T29] audit: type=1326 audit(1768580452.256:7550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8846 comm="syz.4.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fedd8502005 code=0x7ffc0000 [ 155.937068][ T29] audit: type=1326 audit(1768580452.286:7551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8874 comm="syz.1.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57615cf749 code=0x7ffc0000 [ 155.961291][ T29] audit: type=1326 audit(1768580452.286:7552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8874 comm="syz.1.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57615cf749 code=0x7ffc0000 [ 155.984733][ T29] audit: type=1326 audit(1768580452.286:7553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8874 comm="syz.1.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57615cf749 code=0x7ffc0000 [ 156.008878][ T29] audit: type=1326 audit(1768580452.286:7554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8874 comm="syz.1.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57615cf749 code=0x7ffc0000 [ 156.032303][ T29] audit: type=1326 audit(1768580452.286:7555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8874 comm="syz.1.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57615cf749 code=0x7ffc0000 [ 156.056507][ T29] audit: type=1326 audit(1768580452.286:7556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8874 comm="syz.1.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57615cf749 code=0x7ffc0000 [ 156.080699][ T29] audit: type=1326 audit(1768580452.286:7557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8874 comm="syz.1.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57615cf749 code=0x7ffc0000 [ 156.104240][ T29] audit: type=1326 audit(1768580452.286:7558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8874 comm="syz.1.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57615cf749 code=0x7ffc0000 [ 156.128250][ T29] audit: type=1326 audit(1768580452.286:7559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8874 comm="syz.1.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57615cf749 code=0x7ffc0000 [ 156.157860][ T8878] syzkaller0: entered promiscuous mode [ 156.170307][ T8878] syzkaller0 (unregistering): left promiscuous mode [ 156.300449][ T8894] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1991'. [ 156.371403][ T8897] siw: device registration error -23 [ 156.413225][ T8909] loop2: detected capacity change from 0 to 512 [ 156.420062][ T8909] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 156.442976][ T8913] loop3: detected capacity change from 0 to 128 [ 156.451407][ T8909] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 156.661488][ T8922] loop2: detected capacity change from 0 to 512 [ 156.680439][ T8922] ext4 filesystem being mounted at /396/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.091071][ T8930] syzkaller0: entered promiscuous mode [ 157.099003][ T8930] syzkaller0 (unregistering): left promiscuous mode [ 157.305632][ T8937] siw: device registration error -23 [ 157.340763][ T8947] netlink: 'syz.0.2011': attribute type 4 has an invalid length. [ 157.348691][ T8947] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2011'. [ 157.533413][ T8966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.542188][ T8966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.562948][ T8966] loop0: detected capacity change from 0 to 1024 [ 157.570023][ T8966] EXT4-fs: quotafile must be on filesystem root [ 157.645213][ T8968] siw: device registration error -23 [ 157.674852][ T8980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=8980 comm=syz.1.2025 [ 157.787344][ T8984] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 157.865128][ T8990] sd 0:0:1:0: device reset [ 157.944313][ T8992] siw: device registration error -23 [ 158.225384][ T9002] ext4 filesystem being mounted at /430/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.363433][ T9011] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 158.384372][ T9011] bond1: (slave lo): Releasing backup interface [ 158.396877][ T9011] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 158.441748][ T9011] team0: Port device ip6gre0 removed [ 158.527244][ T9011] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 158.815050][ T9030] set_capacity_and_notify: 2 callbacks suppressed [ 158.815070][ T9030] loop0: detected capacity change from 0 to 128 [ 158.831894][ T9030] ext4 filesystem being mounted at /432/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.885795][ T9035] sd 0:0:1:0: device reset [ 158.894200][ T9037] loop0: detected capacity change from 0 to 128 [ 158.929605][ T9043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2053'. [ 159.114142][ T9053] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 159.197045][ T9065] FAULT_INJECTION: forcing a failure. [ 159.197045][ T9065] name failslab, interval 1, probability 0, space 0, times 0 [ 159.209801][ T9065] CPU: 0 UID: 0 PID: 9065 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) [ 159.209882][ T9065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 159.209899][ T9065] Call Trace: [ 159.209907][ T9065] [ 159.209915][ T9065] __dump_stack+0x1d/0x30 [ 159.209946][ T9065] dump_stack_lvl+0x95/0xd0 [ 159.209975][ T9065] dump_stack+0x15/0x1b [ 159.210001][ T9065] should_fail_ex+0x265/0x280 [ 159.210080][ T9065] should_failslab+0x8c/0xb0 [ 159.210101][ T9065] kmem_cache_alloc_noprof+0x69/0x4b0 [ 159.210190][ T9065] ? audit_log_start+0x342/0x720 [ 159.210217][ T9065] audit_log_start+0x342/0x720 [ 159.210237][ T9065] ? kstrtouint+0x76/0xc0 [ 159.210262][ T9065] audit_seccomp+0x48/0x100 [ 159.210356][ T9065] ? __seccomp_filter+0x832/0x1260 [ 159.210432][ T9065] __seccomp_filter+0x843/0x1260 [ 159.210542][ T9065] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 159.210579][ T9065] ? vfs_write+0x7e8/0x960 [ 159.210643][ T9065] ? __rcu_read_unlock+0x4f/0x70 [ 159.210669][ T9065] ? __fget_files+0x184/0x1c0 [ 159.210699][ T9065] __secure_computing+0x82/0x150 [ 159.210798][ T9065] syscall_trace_enter+0xcf/0x1e0 [ 159.210828][ T9065] do_syscall_64+0xa4/0x2b0 [ 159.210873][ T9065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.210900][ T9065] RIP: 0033:0x7f57615cf749 [ 159.210920][ T9065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.210944][ T9065] RSP: 002b:00007f576002f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 159.210969][ T9065] RAX: ffffffffffffffda RBX: 00007f5761825fa0 RCX: 00007f57615cf749 [ 159.210985][ T9065] RDX: 0000000000000300 RSI: 0000200000001640 RDI: 0000000000000005 [ 159.210998][ T9065] RBP: 00007f576002f090 R08: 0000000000000000 R09: 0000000000000000 [ 159.211060][ T9065] R10: 0000000000034000 R11: 0000000000000246 R12: 0000000000000001 [ 159.211092][ T9065] R13: 00007f5761826038 R14: 00007f5761825fa0 R15: 00007ffcd2ffde08 [ 159.211138][ T9065] [ 159.428159][ T9067] sd 0:0:1:0: device reset [ 159.451597][ T9073] syzkaller0: entered promiscuous mode [ 159.459676][ T9073] syzkaller0 (unregistering): left promiscuous mode [ 159.462867][ T9075] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2067'. [ 159.629990][ T9087] loop3: detected capacity change from 0 to 128 [ 159.640888][ T9087] ext4 filesystem being mounted at /457/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.664917][ T9095] syzkaller0: entered promiscuous mode [ 159.672701][ T9095] syzkaller0 (unregistering): left promiscuous mode [ 159.827722][ T9114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2082'. [ 159.883250][ T9119] FAULT_INJECTION: forcing a failure. [ 159.883250][ T9119] name failslab, interval 1, probability 0, space 0, times 0 [ 159.896000][ T9119] CPU: 0 UID: 0 PID: 9119 Comm: syz.1.2084 Not tainted syzkaller #0 PREEMPT(voluntary) [ 159.896097][ T9119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 159.896109][ T9119] Call Trace: [ 159.896123][ T9119] [ 159.896130][ T9119] __dump_stack+0x1d/0x30 [ 159.896184][ T9119] dump_stack_lvl+0x95/0xd0 [ 159.896203][ T9119] dump_stack+0x15/0x1b [ 159.896241][ T9119] should_fail_ex+0x265/0x280 [ 159.896281][ T9119] should_failslab+0x8c/0xb0 [ 159.896382][ T9119] __kmalloc_cache_noprof+0x65/0x4c0 [ 159.896404][ T9119] ? io_ring_ctx_alloc+0x38/0x660 [ 159.896431][ T9119] io_ring_ctx_alloc+0x38/0x660 [ 159.896473][ T9119] ? io_prepare_config+0x57b/0x5a0 [ 159.896491][ T9119] io_uring_create+0x50/0x4e0 [ 159.896515][ T9119] ? memchr_inv+0x30/0x2e0 [ 159.896536][ T9119] __se_sys_io_uring_setup+0x1be/0x1d0 [ 159.896615][ T9119] __x64_sys_io_uring_setup+0x31/0x40 [ 159.896677][ T9119] x64_sys_call+0x244c/0x3000 [ 159.896703][ T9119] do_syscall_64+0xca/0x2b0 [ 159.896721][ T9119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.896750][ T9119] RIP: 0033:0x7f57615cf749 [ 159.896763][ T9119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.896778][ T9119] RSP: 002b:00007f576002f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 159.896874][ T9119] RAX: ffffffffffffffda RBX: 00007f5761825fa0 RCX: 00007f57615cf749 [ 159.896885][ T9119] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 159.896917][ T9119] RBP: 00007f576002f090 R08: 0000000000000000 R09: 0000000000000000 [ 159.896928][ T9119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.896938][ T9119] R13: 00007f5761826038 R14: 00007f5761825fa0 R15: 00007ffcd2ffde08 [ 159.897023][ T9119] [ 160.089895][ T9120] loop0: detected capacity change from 0 to 512 [ 160.154520][ T9120] ext4 filesystem being mounted at /441/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.210205][ T9126] loop3: detected capacity change from 0 to 128 [ 160.304364][ T9126] ext4 filesystem being mounted at /460/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.317324][ T9131] loop2: detected capacity change from 0 to 128 [ 160.721286][ T9135] sg_write: data in/out 32561/120 bytes for SCSI command 0x0-- guessing data in; [ 160.721286][ T9135] program syz.2.2089 not setting count and/or reply_len properly [ 161.050304][ T29] kauditd_printk_skb: 889 callbacks suppressed [ 161.050321][ T29] audit: type=1326 audit(1768580457.436:8447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.3.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407887f749 code=0x7ffc0000 [ 161.100964][ T29] audit: type=1326 audit(1768580457.466:8448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9132 comm="syz.1.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57615cf749 code=0x7ffc0000 [ 161.126033][ T29] audit: type=1326 audit(1768580457.466:8449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9132 comm="syz.1.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57615cf749 code=0x7ffc0000 [ 161.150115][ T29] audit: type=1326 audit(1768580457.466:8450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.3.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f407887f749 code=0x7ffc0000 [ 161.173547][ T29] audit: type=1326 audit(1768580457.466:8451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.3.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407887f749 code=0x7ffc0000 [ 161.197586][ T29] audit: type=1326 audit(1768580457.466:8452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.3.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f407887f749 code=0x7ffc0000 [ 161.221704][ T29] audit: type=1326 audit(1768580457.466:8453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.3.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407887f749 code=0x7ffc0000 [ 161.245204][ T29] audit: type=1326 audit(1768580457.466:8454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.3.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f407887f749 code=0x7ffc0000 [ 161.269577][ T29] audit: type=1326 audit(1768580457.466:8455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.3.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407887f749 code=0x7ffc0000 [ 161.293035][ T29] audit: type=1326 audit(1768580457.466:8456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.3.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f407887f749 code=0x7ffc0000 [ 161.326694][ T9142] FAULT_INJECTION: forcing a failure. [ 161.326694][ T9142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.340441][ T9142] CPU: 1 UID: 0 PID: 9142 Comm: syz.4.2093 Not tainted syzkaller #0 PREEMPT(voluntary) [ 161.340475][ T9142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 161.340491][ T9142] Call Trace: [ 161.340515][ T9142] [ 161.340525][ T9142] __dump_stack+0x1d/0x30 [ 161.340556][ T9142] dump_stack_lvl+0x95/0xd0 [ 161.340583][ T9142] dump_stack+0x15/0x1b [ 161.340608][ T9142] should_fail_ex+0x265/0x280 [ 161.340638][ T9142] should_fail+0xb/0x20 [ 161.340707][ T9142] should_fail_usercopy+0x1a/0x20 [ 161.340754][ T9142] strncpy_from_user+0x27/0x260 [ 161.340798][ T9142] strncpy_from_user_nofault+0x68/0xf0 [ 161.340833][ T9142] bpf_probe_read_user_str+0x2a/0x70 [ 161.340860][ T9142] bpf_prog_2f2d32d8e424670c+0x40/0x6c [ 161.340954][ T9142] bpf_trace_run2+0x107/0x1d0 [ 161.340993][ T9142] ? tty_set_ldisc+0x350/0x380 [ 161.341027][ T9142] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 161.341121][ T9142] ? tty_set_ldisc+0x350/0x380 [ 161.341139][ T9142] kfree+0x353/0x3c0 [ 161.341158][ T9142] tty_set_ldisc+0x350/0x380 [ 161.341184][ T9142] ? tty_wait_until_sent+0x22e/0x270 [ 161.341226][ T9142] tiocsetd+0x51/0x60 [ 161.341339][ T9142] tty_ioctl+0xa79/0xb80 [ 161.341363][ T9142] ? __pfx_tty_ioctl+0x10/0x10 [ 161.341454][ T9142] __se_sys_ioctl+0xce/0x140 [ 161.341560][ T9142] __x64_sys_ioctl+0x43/0x50 [ 161.341652][ T9142] x64_sys_call+0x14b0/0x3000 [ 161.341684][ T9142] do_syscall_64+0xca/0x2b0 [ 161.341709][ T9142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.341810][ T9142] RIP: 0033:0x7fedd84cf749 [ 161.341823][ T9142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.341845][ T9142] RSP: 002b:00007fedd6f2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 161.341870][ T9142] RAX: ffffffffffffffda RBX: 00007fedd8725fa0 RCX: 00007fedd84cf749 [ 161.341886][ T9142] RDX: 0000200000000100 RSI: 0000000000005423 RDI: 0000000000000007 [ 161.341929][ T9142] RBP: 00007fedd6f2f090 R08: 0000000000000000 R09: 0000000000000000 [ 161.341944][ T9142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.341959][ T9142] R13: 00007fedd8726038 R14: 00007fedd8725fa0 R15: 00007fff43594298 [ 161.342046][ T9142] [ 161.683166][ T9158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2098'. [ 161.889197][ T3320] EXT4-fs unmount: 21 callbacks suppressed [ 161.889214][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.031624][ T9185] sd 0:0:1:0: device reset [ 162.031797][ T9173] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 162.144831][ T9191] syzkaller0: entered promiscuous mode [ 162.168986][ T9191] syzkaller0 (unregistering): left promiscuous mode [ 162.198949][ T9193] loop3: detected capacity change from 0 to 512 [ 162.210273][ T9193] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2114: bg 0: block 248: padding at end of block bitmap is not set [ 162.225268][ T9193] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.2114: Failed to acquire dquot type 1 [ 162.238292][ T9193] EXT4-fs (loop3): 1 truncate cleaned up [ 162.244697][ T9193] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.257434][ T9193] ext4 filesystem being mounted at /465/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.269781][ T9193] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.302704][ T9201] FAULT_INJECTION: forcing a failure. [ 162.302704][ T9201] name failslab, interval 1, probability 0, space 0, times 0 [ 162.315491][ T9201] CPU: 0 UID: 0 PID: 9201 Comm: syz.0.2115 Not tainted syzkaller #0 PREEMPT(voluntary) [ 162.315527][ T9201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 162.315545][ T9201] Call Trace: [ 162.315554][ T9201] [ 162.315563][ T9201] __dump_stack+0x1d/0x30 [ 162.315615][ T9201] dump_stack_lvl+0x95/0xd0 [ 162.315660][ T9201] dump_stack+0x15/0x1b [ 162.315765][ T9201] should_fail_ex+0x265/0x280 [ 162.315798][ T9201] should_failslab+0x8c/0xb0 [ 162.315827][ T9201] kmem_cache_alloc_noprof+0x69/0x4b0 [ 162.315849][ T9201] ? audit_log_start+0x342/0x720 [ 162.315871][ T9201] audit_log_start+0x342/0x720 [ 162.315902][ T9201] ? __rcu_read_unlock+0x4f/0x70 [ 162.315924][ T9201] audit_seccomp+0x48/0x100 [ 162.315955][ T9201] ? __seccomp_filter+0x832/0x1260 [ 162.316057][ T9201] __seccomp_filter+0x843/0x1260 [ 162.316088][ T9201] ? __schedule+0x85f/0xcd0 [ 162.316116][ T9201] __secure_computing+0x82/0x150 [ 162.316143][ T9201] syscall_trace_enter+0xcf/0x1e0 [ 162.316167][ T9201] do_syscall_64+0xa4/0x2b0 [ 162.316261][ T9201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.316283][ T9201] RIP: 0033:0x7fc1cee3e15c [ 162.316390][ T9201] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 162.316408][ T9201] RSP: 002b:00007fc1cd8a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 162.316427][ T9201] RAX: ffffffffffffffda RBX: 00007fc1cf095fa0 RCX: 00007fc1cee3e15c [ 162.316440][ T9201] RDX: 000000000000000f RSI: 00007fc1cd8a70a0 RDI: 0000000000000008 [ 162.316452][ T9201] RBP: 00007fc1cd8a7090 R08: 0000000000000000 R09: 0000000000000000 [ 162.316464][ T9201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.316476][ T9201] R13: 00007fc1cf096038 R14: 00007fc1cf095fa0 R15: 00007fffced3ead8 [ 162.316562][ T9201] [ 162.543334][ T9203] loop3: detected capacity change from 0 to 128 [ 162.554511][ T9194] ================================================================== [ 162.562663][ T9194] BUG: KCSAN: data-race in __bpf_get_stackid / bcmp [ 162.569296][ T9194] [ 162.571651][ T9194] write to 0xffff88812e66a190 of 80 bytes by task 9207 on cpu 1: [ 162.579403][ T9194] __bpf_get_stackid+0x737/0x7d0 [ 162.584419][ T9194] bpf_get_stackid+0xf3/0x130 [ 162.589139][ T9194] bpf_get_stackid_raw_tp+0xf6/0x120 [ 162.594462][ T9194] bpf_prog_53f0063d4d7f65ce+0x2a/0x32 [ 162.600062][ T9194] bpf_trace_run2+0x107/0x1d0 [ 162.604783][ T9194] kfree+0x353/0x3c0 [ 162.608699][ T9194] __bpf_prog_put_noref+0x1a3/0x230 [ 162.613970][ T9194] bpf_prog_load+0x109d/0x1140 [ 162.618785][ T9194] __sys_bpf+0x469/0x7c0 [ 162.623050][ T9194] __x64_sys_bpf+0x41/0x50 [ 162.627497][ T9194] x64_sys_call+0x28e1/0x3000 [ 162.632199][ T9194] do_syscall_64+0xca/0x2b0 [ 162.636721][ T9194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.642662][ T9194] [ 162.645001][ T9194] read to 0xffff88812e66a1c8 of 8 bytes by task 9194 on cpu 0: [ 162.652561][ T9194] bcmp+0x23/0x90 [ 162.656219][ T9194] __bpf_get_stackid+0x382/0x7d0 [ 162.661182][ T9194] bpf_get_stackid+0xf3/0x130 [ 162.665882][ T9194] bpf_get_stackid_raw_tp+0xf6/0x120 [ 162.671285][ T9194] bpf_prog_53f0063d4d7f65ce+0x2a/0x32 [ 162.676863][ T9194] bpf_trace_run2+0x107/0x1d0 [ 162.681574][ T9194] kfree+0x353/0x3c0 [ 162.685491][ T9194] ___sys_recvmsg+0x135/0x370 [ 162.690288][ T9194] do_recvmmsg+0x1ef/0x540 [ 162.694734][ T9194] __x64_sys_recvmmsg+0xe5/0x170 [ 162.699701][ T9194] x64_sys_call+0x2b75/0x3000 [ 162.704516][ T9194] do_syscall_64+0xca/0x2b0 [ 162.709129][ T9194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.715070][ T9194] [ 162.717403][ T9194] value changed: 0xffffffff8575958a -> 0xffffffff81275c31 [ 162.724528][ T9194] [ 162.726862][ T9194] Reported by Kernel Concurrency Sanitizer on: [ 162.733139][ T9194] CPU: 0 UID: 0 PID: 9194 Comm: syz.4.2112 Not tainted syzkaller #0 PREEMPT(voluntary) [ 162.742962][ T9194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 162.753034][ T9194] ================================================================== [ 162.781241][ T9203] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 162.801916][ T9208] siw: device registration error -23 [ 162.817218][ T9203] ext4 filesystem being mounted at /466/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.932639][ T3319] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.