last executing test programs: 1m32.283206134s ago: executing program 2 (id=465): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r1 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) (rerun: 32) readv(r1, &(0x7f0000000040)=[{&(0x7f0000002300)=""/4077, 0xfed}], 0x1) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x100003c}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x2, &(0x7f0000000180)=[{0x61, 0x0, 0x81, 0xfffffffd}, {0x5, 0x1, 0xfc, 0x6}]}) 1m32.191890754s ago: executing program 2 (id=467): prlimit64(0x0, 0x5, &(0x7f0000000140)={0xf0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r3 = socket(0xf, 0x3, 0x2) write(r3, &(0x7f0000a97ff0)="020baf010200000000067bbc8e1d4b48", 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(r3, &(0x7f0000000780)={0x40000000, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x7, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x64010102, 0x0, 0x32}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x400002, 0x0) recvmsg(r5, &(0x7f0000000940)={&(0x7f0000000140)=@alg, 0x80, &(0x7f0000000880)=[{&(0x7f00000001c0)=""/170, 0xaa}, {&(0x7f0000000280)=""/142, 0x8e}, {&(0x7f0000000340)=""/241, 0xf1}, {0x0}, {0x0}, {&(0x7f0000000780)=""/232, 0xe8}], 0x6, &(0x7f0000000900)=""/20, 0x14}, 0x40000103) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) 1m29.537187701s ago: executing program 2 (id=512): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet(0x2, 0x6, 0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r3, 0x2285, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r4}, 0x18) writev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="aefdda9d240300005a90f57f07703aeff0f64ebbee07022c2277ae11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea00000c0f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 1m29.395602231s ago: executing program 2 (id=514): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000880)='./file0/file0\x00', 0x1c200, 0x5) r1 = open_tree(r0, &(0x7f0000000300)='\x00', 0x89000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/209, 0xd7}, {&(0x7f0000001780)=""/96, 0x60}, {&(0x7f0000000440)=""/134, 0x8c}, {&(0x7f0000000500)=""/94, 0x5e}, {&(0x7f0000000080)=""/39, 0xfffffffffffffe9b}, {&(0x7f0000000600)=""/230, 0xe6}, {&(0x7f0000000780)=""/155, 0xfffffcc8}], 0x7, &(0x7f0000002480)=""/4101, 0x1005}, 0x10000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) close_range(r4, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000100)='./file0/file0\x00') openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000840)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002dbd7000fddbdf25010000000800040080000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x200408c4) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x3) 1m29.284839883s ago: executing program 2 (id=517): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000040)='sched_switch\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000800}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x58, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x20}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r6, 0x10, 0x100}}}}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 1m28.755426076s ago: executing program 2 (id=526): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000480)=0x18) 1m28.733742286s ago: executing program 32 (id=526): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000480)=0x18) 1m14.317737566s ago: executing program 3 (id=810): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r4}, 0x18) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) sendto$inet(r7, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) writev(r7, &(0x7f00000006c0)=[{&(0x7f0000002680)='3', 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r7, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmmsg$inet6(r7, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001700)='y', 0x1}], 0x1}}], 0x1, 0x0) close(r7) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2800"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r8, 0xc0182101, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 1m12.234662909s ago: executing program 3 (id=842): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth0\x00'}) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)={0x184, 0x19, 0x1, 0x70bd2a, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x4c, 0x102, 0x0, 0x1, [@nested={0x48, 0xe7, 0x0, 0x1, [@nested={0x4, 0xec}, @nested={0x3d, 0x147, 0x0, 0x1, [@typed={0x14, 0x81, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @nested={0x4, 0x103}, @generic="1c8ca639f8663ee8e8af587906609733bf7483e8a17f2a405d5c8b53451e4b8112"]}]}]}]}, @nested={0x120, 0x6, 0x0, 0x1, [@nested={0x11c, 0xa9, 0x0, 0x1, [@nested={0x118, 0x13e, 0x0, 0x1, [@nested={0x114, 0xa0, 0x0, 0x1, [@nested={0x110, 0x61, 0x0, 0x1, [@nested={0x10c, 0x9f, 0x0, 0x1, [@nested={0xfd, 0xd1, 0x0, 0x1, [@typed={0xc, 0xef, 0x0, 0x0, @str='.\\])[,@\x00'}, @generic="7ddf6c51a2ca77df87500d44c122766d6a71af921edead65874f95ba1ac54ec247c2b62e732d2d6c595bd6", @typed={0x8, 0x4d, 0x0, 0x0, @pid}, @generic="53306338a8a268c1621feddb62d6ac8dc478cff31fc2acf023166506289a58dbdc4c90652fa0923e2e917aea41b3847754d66618e60219bae844276f49ece8c6bc475acf48fc7eb87f350d74fcb0d0c9241e74ff0bdfb4eb091f60d640955f6991105423b6d196b1590c7aa1d83618bbcee862b98b571610aea8c09100f6b3a382732d1751ced8bc396888f4d1348690b4cfacf04cf04119385cbf3cf6414255390d90522e7c6ecb82c8c2f0d13d6089172c22f79b1aa48e29a1"]}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@local}]}]}]}]}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x10}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250c0000000c00018008000100", @ANYRES32=r8, @ANYBLOB="0c000380"], 0x2c}, 0x1, 0x0, 0x0, 0x818}, 0x4) 1m12.233670659s ago: executing program 3 (id=843): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=@v3={0x3000000, [{0x4}, {0xfffffffe}]}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 1m12.223272059s ago: executing program 3 (id=844): socket$packet(0x11, 0xa, 0x300) socket$kcm(0x2, 0xa, 0x73) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x202) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x500, 0x40) r1 = open_tree(r0, &(0x7f0000000300)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(r0, &(0x7f0000000100)='\x00', 0x9001) move_mount(0xffffffffffffffff, &(0x7f0000000700)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x113) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$key(0xf, 0x3, 0x2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r6, 0x0, 0xfffffffffffffffd}, 0x18) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r7, 0x1, 0x1f, &(0x7f0000000740)=""/176, &(0x7f0000000240)=0xb0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYRES64=r3], 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0x6}, 0x18) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000540)={'ip6_vti0\x00', 0x0, 0x2f, 0x9, 0x0, 0x2, 0x10, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0x33}, 0x8000, 0x7820, 0x0, 0x10}}) sendmsg$nl_route(r2, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=@setlink={0x28, 0x13, 0x10, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, 0x4668, 0x8010}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x9}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0x0, 0x88c0) fremovexattr(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYBLOB="75eba26fdd02000000f565722e752c5aa5e2486276be031e95afa5e9f40584ea63802145f1f5af742d3eebb8e27b1edbca9a831e4b1d1d5376abff9b9717eb58acc590dd4d4a7f5ceab23d994087159565d5fb243b3a5d6562c231e290a881c13489000000000000000004"]) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00006600}, 0x1, 0x0, 0x1, 0x1, 0x5}, 0x20) 1m12.16167336s ago: executing program 3 (id=845): socket$xdp(0x2c, 0x3, 0x0) r0 = syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0x2, 0xbfdffdfc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x5}]}}]}, 0xac}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) truncate(&(0x7f00000000c0)='./file1\x00', 0x3) 1m12.10999536s ago: executing program 3 (id=846): r0 = socket$inet(0x2, 0x1, 0x7) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0803000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) 1m12.1097081s ago: executing program 33 (id=846): r0 = socket$inet(0x2, 0x1, 0x7) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0803000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) 2.706702473s ago: executing program 0 (id=2064): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r2, &(0x7f00000019c0)=""/4097, 0x1001) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0x8) 2.629898544s ago: executing program 4 (id=2066): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000300)='.\x02\x00', 0x800, &(0x7f0000000040)=ANY=[], 0x1, 0x2e0, &(0x7f0000000640)="$eJzs3T9rE2EYAPAnf5qmRWxncQi46FLU2SVIBTFQqGRQFwNVkFaEdImCkK/gIn4AJz+Sgx+iU8EhcrmzSZPUQrnexfb3g2ufu6d98+S43nvD+zSvb7/f3/tw+Hb081s0m62oRzPiOGIzqlGLVCX50vwbN2LasHZqN1YDAFh2u7u99lm5YbGlkIv63JF+v91bWfhs1v1RUFEAAAAAAAAAAADkbH79fwwXrv+PiOrp9f/jYDjTDwAALL9/rf/nauj327319PltplvT+n8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgPPUYbYxGo3s30t0knmyN2Ci7PgAgf8fT8/3J9nuUMf8DwBW0eP6fbGXXBwDkb2r+jzhn/q+VVyYAkKPnL14+a3c627utVjPiaDjoDrrp9zT/5Gln+35rbDMiqunRo8GgWzvJP0jzrcmoSX4l1rP8w4X5Rty9k+aT3OOdzkx+NfaKOQUAAAAAAAAAAAAAAAAAAABQuq1xG38lIu3vz0z6+7e2dr7+enfS/z+VT6Ps/wNUY6a///P3etyqp3vVM199Ned3AwAAAAAAAAAAAAAAAAAAAP+nw4+f9nsHB2/6xQSViMh35FpEjIN6dqSW+0tMBZc3chI0YxxUYi7ViIgLj5yc9MWpJHPRmr+kQcRFfv3Rq4hzf7iyvxZzqbXiL9rLDdayv8RlqedmdrWcdcdoFHdzAgAAAAAAAAAAAAAAAACAa2bS/Vt2JQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQnsnn/19eUPZ7BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK6HPwEAAP//GQR1Iw==") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x40000) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0x4fed0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x800455cc, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x15, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000040000000000000000800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000f00850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x39}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = fsopen(&(0x7f0000000240)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x1) ioctl$SG_EMULATED_HOST(r5, 0x2203, &(0x7f0000000180)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0xf8) writev(r6, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 2.545813695s ago: executing program 1 (id=2067): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x4}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x81, &(0x7f0000000240)={0x3, 0x11, 0x5, 0x5360, 0x7}, 0x10, 0x6, 0x81, 0x0, 0x1, 0x101, 0x0}) (fail_nth: 5) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 2.274671056s ago: executing program 4 (id=2069): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff8}, 0x1080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fcdbdf2501000000000000000b000000000600147379"], 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x800) recvmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x7, 0xffffffff, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x401, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x5, 0x0, 0x7fff, 0x1, 0xfffffff7, 0x1ff, 0x81, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0x40000000, 0x0, 0x1, 0x0, 0x0, 0xfffe, 0x0, 0xd5a9, 0x0, 0x0, 0x0, 0x0, 0xfb8d, 0x7b2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0xd4, 0x8000c, 0x6, 0x0, 0x0, 0x7fffffff, 0x3035, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0xfffffffc, 0x1, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0xe9, 0x3, 0xfffffffe, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0xff, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x2, 0x2, 0x1ff, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x9]}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x5, 0xfff8, 0x8, 0x40}, 0x0, 0x0, 0x6e4}}]}}]}, 0x45c}}, 0x0) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r5, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000140)="c0", 0x1, 0x40050c4, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, r3, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x1c, 0x18, {0x2, @bearer=@l2={'eth', 0x3a, 'veth1_virt_wifi\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4008854}, 0x11) 2.169918987s ago: executing program 1 (id=2071): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x3) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000340), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x18) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) 2.041573177s ago: executing program 4 (id=2072): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x18, &(0x7f0000000240)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8", @ANYRES8=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x310) rt_sigqueueinfo(r2, 0x28, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4eaa0000000000006410170000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pause() r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') socket$can_bcm(0x1d, 0x2, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r5}, 0x18) socket$inet6(0xa, 0x80002, 0x0) unshare(0x64000600) 1.749915779s ago: executing program 0 (id=2075): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) socket$pppoe(0x18, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0) 1.67158343s ago: executing program 6 (id=2076): syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(r0, &(0x7f0000004400)='./bus\x00', 0x3c1202, 0x30) write(0xffffffffffffffff, &(0x7f0000000480)="74a515de6dd0752119c35b418336000000000555711f953d549c4b0587203197ae239904203e69575bd6ae56f186df819be78438fb40dec08363280c015c148f27a8a8c7315014a2f4452e54d238e0d07bef6e3ca557587bb3d105a21e67e5bdb45bdee9a8de3f2b99045324d9ef4cc767cc542ac5326307000000000000005eb1edc82a1754162700"/148, 0x94) sendfile(r1, r1, 0x0, 0x3ffff) sendmsg$AUDIT_GET(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x3e8, 0x700, 0x70bd2b, 0x25dfdbfb, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000010}, 0x805) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) r6 = io_uring_setup(0x437b, &(0x7f0000000540)={0x0, 0x698c, 0x4, 0x2, 0x400002c4}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendmmsg$sock(r7, &(0x7f00000044c0), 0x4000000000001c0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) utime(&(0x7f0000000300)='./file0\x00', 0x0) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xf}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000680)={r8, 0x1ff, 0x0, 0x6}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000a40)=ANY=[], 0x6, 0x2d9, &(0x7f0000000cc0)="$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") r10 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0x20) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x62, 0x20c1b, 0x0, 0x8000007, 0x3, 0xfffffffe, 0x0, 0x0, 0x7cce8c743ee810dd}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1.548291681s ago: executing program 0 (id=2077): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendmsg$AUDIT_GET(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x3e8, 0x700, 0x70bd2b, 0x25dfdbfb, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000010}, 0x805) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xf}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x62, 0x20c1b, 0x0, 0x8000007, 0x3, 0xfffffffe, 0x0, 0x0, 0x7cce8c743ee810dd}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='rpcb_getport\x00'}, 0x18) r4 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x200000, 0x0}) (fail_nth: 6) 1.137998013s ago: executing program 1 (id=2078): r0 = syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x105142, 0x110) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) symlinkat(&(0x7f0000000380)='./file8/file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file7\x00', 0x2) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/250, 0xfa, 0x0, &(0x7f0000000440)=""/222, 0xde}, &(0x7f0000000280)=0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x18) mknod$loop(&(0x7f0000000300)='./file2\x00', 0x80, 0x1) r3 = getuid() quotactl_fd$Q_QUOTAON(r2, 0xffffffff80000201, r3, &(0x7f0000000080)='./file2\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r1, 0x0) unlink(&(0x7f00000002c0)='./file2\x00') write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000000)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 1.077205324s ago: executing program 4 (id=2079): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)=""/250, 0xfa}], 0x1, 0x0, 0x0, 0xf5ffffff}, 0x3f01) sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd548443", 0xa7}, {&(0x7f00000009c0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3", 0x51}], 0x2}}], 0x2, 0x4010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@errors_remount}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r5, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0xfea8, 0xa) r6 = openat2(r3, &(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x81, 0x21, 0x1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f80)={0x6, 0xd, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, [@generic={0x8, 0x2, 0x5, 0x401, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6e, 0x0, 0x0, 0x0, 0x6}, @map_val={0x18, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff9}, @func, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}]}, &(0x7f0000000380)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000001100)=""/4096, 0x40f00, 0x18, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x5, 0x6, 0x10001, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000f00)=[r6, 0x1], &(0x7f0000000f40)=[{0x1, 0x5, 0x7, 0xb}, {0x2, 0x5, 0x4, 0x4}, {0x0, 0x3, 0x4}], 0x10, 0x80}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r8, &(0x7f0000000240)={0x1d, r9}, 0x10) close(r8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r7}, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r8, @ANYRES32, @ANYRES64=r2], 0x18c}, 0x1, 0x0, 0x0, 0x40001}, 0x40801) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000010c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2b8, &(0x7f00000028c0)="$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") rename(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa1000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x25, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) 1.076618914s ago: executing program 1 (id=2080): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000300)='.\x02\x00', 0x800, &(0x7f0000000040)=ANY=[], 0x1, 0x2e0, &(0x7f0000000640)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x40000) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0x4fed0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x800455cc, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x15, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000040000000000000000800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000f00850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x39}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = fsopen(&(0x7f0000000240)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x1) ioctl$SG_EMULATED_HOST(r5, 0x2203, &(0x7f0000000180)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0xf8) writev(r6, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 1.003805284s ago: executing program 1 (id=2082): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x3) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000340), 0x4) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4a, &(0x7f0000000140), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r5 = gettid() kcmp(r5, 0x0, 0x2, r1, r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00'}, 0x18) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) 854.312305ms ago: executing program 5 (id=2083): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4008040) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x2}, 0x18) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) 853.663005ms ago: executing program 5 (id=2084): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000003e7400850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000940), r2) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b80000000001010400000000000000000a0000003c0001802c0001801400030000000000000000000000ffffac1414aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300ff02000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000008000480040003801c000f800800014000000000080002"], 0xb8}}, 0x0) 852.517335ms ago: executing program 5 (id=2085): openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0x3, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44840}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000300)=""/208, 0xd0}], 0x1, 0x4, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, r1, 0x9) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffb}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") write$binfmt_script(r0, &(0x7f0000000b00)={'#! ', './file0', [{0x20, 'GPL\x00'}], 0xa, "109fad815a49d8c1cc42a8a51649af87512b58a851cc685415ed77baef6c4998b6c507c2dae46e1ce126ce2a00b9cf214646848228521a011d5d119da908f313d83cc0b03f0244fb4b9f72b13ceacc1bca84d52fcc1a8960cf1d2e05ac8f04e161bcc159826bcfe9ac426d2f36623e0370a40ec797ee54fcffec2edb2fcafdd2ea47882531bc19e163a97d90288d6d20ea2b4c729c"}, 0xa5) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x1d4) getdents64(r6, 0x0, 0x0) 670.066306ms ago: executing program 6 (id=2086): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000840)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = semget$private(0x0, 0x1fffffb, 0x3b1) semtimedop(r5, &(0x7f0000000040)=[{0x0, 0x1}], 0x1, 0x0) semop(r5, &(0x7f00000000c0)=[{}], 0x1) semtimedop(r5, &(0x7f0000000000)=[{0x0, 0xffff, 0x1800}], 0x1, 0x0) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r7}, 0x18) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[], 0x118}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0xf4}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) socket$netlink(0x10, 0x3, 0x10) 401.947797ms ago: executing program 6 (id=2087): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000000)={{0x80}, 'port0\x00', 0xe2, 0x1d9a13, 0xfffffffe, 0x8000006, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x2}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x84, 0xe9a, 0x0, 0x5, 0x9, 0xc, 0xfd, 0xfcffffffffffffff, 0x1}) 401.427088ms ago: executing program 6 (id=2088): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000200), &(0x7f0000000240)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)=@generic={&(0x7f00000005c0)='./file0\x00', 0x0, 0x10}, 0x18) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) 401.050137ms ago: executing program 0 (id=2089): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) socket$pppoe(0x18, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0) 393.473298ms ago: executing program 5 (id=2090): mount$9p_rdma(&(0x7f0000000000), 0x0, 0x0, 0x10, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x200884c, &(0x7f00000003c0)={[{@nodots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@quiet}, {@fat=@fmask={'fmask', 0x3d, 0xaa98}}, {@fat=@check_strict}, {@nodots}, {@fat=@flush}, {@dots}, {@dots}, {@fat=@time_offset={'time_offset', 0x3d, 0x191}}, {@nodots}, {@dots}, {@dots}, {@nodots}]}, 0xfd, 0x23d, &(0x7f0000000040)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newtaction={0xf8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xe4, 0x1, [@m_ife={0xe0, 0x1, 0x0, 0x0, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @link_local}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xe}]}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_PARMS={0x1c}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_SMAC={0xa, 0x4, @dev}, @TCA_IFE_METALST={0x34, 0x6, [@IFE_META_SKBMARK={0x26}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x5}, @IFE_META_TCINDEX={0x6}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6}, @IFE_META_PRIO={0x8}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xf8}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0) sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="e2dc01005a200c0000000000004cc62cfa7ce951", @ANYRES16=r4, @ANYBLOB="080026bd7000fedbdf250900000008000300000000001c00068008000700", @ANYRES32=0x0, @ANYBLOB="06000100020000000800030000000000080002000300000005000500ff00000014000180080006001500000008000300ac1414aa0c0006800800060015000000080004000000000008000200080000001c0001800800060008000000080003000000000008000700", @ANYRES32=0x0, @ANYBLOB="0800030007000000"], 0x9c}, 0x1, 0x0, 0x0, 0x4000801}, 0x4800) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000480)=0x4, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x1}, 0x18) r8 = socket$kcm(0x10, 0x2, 0x0) socket(0x25, 0x1, 0x5) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600a400014009000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) 381.549908ms ago: executing program 6 (id=2091): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0xd00, 0x40000, 0x0}, &(0x7f0000000080)="0000501effd4", 0x0, 0x800004, 0x10030, 0x1, 0x0}) 356.919088ms ago: executing program 0 (id=2092): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0xe) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='ufshcd_upiu\x00', r1}, 0x18) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x10010, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r5, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2400c042) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}, {&(0x7f0000001cc0)=ANY=[@ANYRESOCT, @ANYRES32=r7, @ANYBLOB="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", @ANYBLOB="266abbea6a8c84710f29d28d1f1ce2bf1f25c7d4daa6e6e27af8d17d5516f6ff2d8db96a39d1113e795d1f41fea2f5580891f714f9c529b45ccda92eba9024f8d9ae3e99f97aafee8e4337c2c6473b1c072da33fcf94c6b2c250901f377e6d89509ac69eddf7bb1935f3eab30fcb52384d5aebfac52feb11c88a67de238139a36593e76d3c41b34c23c8d4d17256dba6f529dbed501e75aeb911d36e082c6a7d992d32c59c6260a63e433b96b484cf10927db03484476ff10615fb2f1ec25ca230a017199ad9ab6bf642e8450c3cb005331e806c366295b4b9d9b0", @ANYRES32=r4], 0x2cc}], 0x2, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x1c}, 0x4e23, 0x0, 0x4e24, 0x0, 0x2, 0x80, 0x0, 0x11, 0x0, r7}, {0xe61, 0x0, 0x0, 0x2, 0x9, 0x1, 0xffd, 0xc}, {0xfffffffffffff5b9, 0x4, 0x7fffffffffffffff, 0x7}, 0x8000, 0x6e6bb5, 0x0, 0x1, 0x2, 0x3}, {{@in6=@local, 0x4d4, 0x3c}, 0xa, @in6=@remote, 0x43500, 0x0, 0x0, 0x4, 0xc, 0xd0, 0x1}}, 0xe8) r8 = getgid() lchown(&(0x7f0000000040)='./file0\x00', r7, r8) quotactl_fd$Q_GETFMT(r5, 0xffffffff80000401, r7, &(0x7f00000001c0)) getsockname$inet(r5, &(0x7f0000000140)={0x2, 0x0, @broadcast}, &(0x7f0000000180)=0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='sys_enter\x00', r10}, 0x10) unlink(&(0x7f0000000300)='./file0\x00') r11 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB, @ANYRES32=r12, @ANYBLOB="0500370001000000"], 0x24}}, 0x18) creat(&(0x7f0000000080)='./file0\x00', 0x6a) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)=ANY=[]) 285.707118ms ago: executing program 6 (id=2093): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x510, &(0x7f0000000740)="$eJzs3c9vG1kdAPDvOHZp2mSTBQ6wEsvCLkorqJ1s2N2Iw1IkBKdKQLmXkDhRFCeOYqdtogpS8QcgIQRInODCBYk/AAlV4sIRIVWCMwgQCEELBw7QQbbHaZraidsaOxt/PtLLvDc//H3P0YznzTzNBDCyXouIqxHxKE3TyxExlc3PZSn2W6mx3sMHd5YaKYk0vf73JJJsXvuzkmx6MdvsfER85YsRX0+ejlvb3VtfrFTK21m5VN/YKtV2966sbSyullfLm/Pzc28vvLPw1sJsX9o5GRHvfv7P3/v2T77w7i8+desPN/566RuNak1kyw+34xnlj1vYanqh+V0c3mD7OYOdRvlmCzPjndYYa2cm25m7A6gXAABPa5zjvz8iPh4Rl2Mqxo45nT030JoBAAAA/ZJ+diL+k0SknZ3rMh8AAAB4D8k1x8AmuWI2FmAicrlisTWG94NxIVep1uqfXKnubC63xspORyG3slYpz2ZjhaejkDTKc8384/KbR8rzEfFyRHx3arxZLi5VK8vDvvgBAAAAI+Likf7/v6Za/X8AAADgjJkedgUAAACA/zv9fwAAADj79P8BAADgTPvStWuNlLbff718c3dnvXrzynK5tl7c2FkqLlW3t4qr1epq85l9Gyd9XqVa3fp0bO7cLtXLtXqptrt3Y6O6s1m/sfbEK7ABAACAAXr5o/d+l0TE/mfGmyl6f89/j6sBp1X+IJdk0w679e9fak3/NKBKAQMxNuwKAEOTH3YFgKEpDLsCwNAlJyzvOnjn19n0Y/2tDwAA0H8zH+5+/z937Jb7xy8GTj07MYwu9/9hdDXv//c6ktfJApwpBWcAMPJe+P7/idL0mSoEAAD03UQzJblidnlvInK5YjFisvlagEKyslYpz0bESxHx26nC+xrlueaWyYl9BgAAAAAAAAAAAAAAAAAAAAAAAACgJU2TSAEAAIAzLSL3l+SXrWf5z0y9MXH0+sC55N9Tkb0i9NYPr3//9mK9vj3XmP+Pg/n1H2Tz3xzGFQwAAAAYCc/0Av92P73djwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAfnr44M5SOw0y7t8+FxHTneLn43xzej4KEXHhn0nkD22XRMRYH+KPN/58qFP8pFGtg5Cd4o/3If7+3WPjx3T2LXSKf7EP8WGU3Wscf6522v9y8Vpz2nn/y0c8UX5e3Y9/cXD8G+uy/0/2GOOV+z8rdY1/N+KVfOfjTzt+0iX+6z3G/9pX9/a6LUt/FDHT8fcneSJWqb6xVart7l1Z21hcLa+WN+fn595eeGfhrYXZ0spapZz97RjjOx/5+aPj2n+hS/zpE9r/Ro/t/+/92w8+0MoWOsW/9HqH+L/6cbbG0/Fz2W/fJ7J8Y/lMO7/fyh/26k9/8+px7V/u0v6T/v+Xemz/5S9/6489rgoADEBtd299sVIpb5/ZTKOXfgqqIXMKM9/s6wemaZo29qkX+JwkTsPX0swM+8gEAAD02+OT/mHXBAAAAAAAAAAAAAAAAAAAAEbXIB4ndjTm/kEu6ccjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+uJ/AQAA///Vu9lo") bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) stat(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xe, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',o=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) lstat(&(0x7f00000011c0)='./file0\x00', &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) r7 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e30", 0x3, r7) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x5, 0x3, 0x0, 0x5, 0x0}) r8 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r9) setresgid(r9, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000001280)='./file0\x00', &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f0000001380)='./file0\x00', 0x400, 0x8, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000014c0)='./file0\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x8, &(0x7f0000001600)=[r2, r6, 0xee01, r9, r10, r11, r12, r13]) r14 = fsmount(r1, 0x0, 0x84) openat$cgroup_ro(r14, &(0x7f00000000c0)='cgroup.controllers\x00', 0x5000000, 0x0) 267.952238ms ago: executing program 4 (id=2094): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="4835522e42921d50b8f3e75fd1327111d1b81715f876cf311643df6e0cfea78d5cc9fba9e11b7d2159d2b66401a87e0134aa0aa8841e4aec631c2abec722fa973b677da5ec47bbadc8430ab65c53aaddfcd54be88c6483c7c1a6cd99b42ca24ea2fed95a2fcd8c609bc097ee32242b65947983e0a184753d8f708b97f79fb7c30229bf2757e6a4607602c0c385ee7d1353cab861a4500147a7d5fb8bfd8d91f74d5bf0bb5abd7dfe349c9cc9349248ddeb41488a50e710d090873e1dcdccd0f6ee30483c2a060e484c5959a7299ea042e8d761dad8f7531f11b494c9933379e448cf4ca97f03bb9d5de8a92119b8e17ec764a205822776b4686923721830f72461e353c8bbd753b4686277ca391e365edd584615cf9970", @ANYRES32=r1, @ANYRESOCT=r1, @ANYRES16=r1, @ANYRES32=r1, @ANYBLOB="73852ceccfe487120a7f", @ANYRES16=r1], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) symlink(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x8}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r4) sendmsg$NFC_CMD_DEP_LINK_UP(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x7, 0x85, 0x7, 0x7ffc0001}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r6}, 0x18) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r7, 0x40049421, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r9, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021800000000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000540003805000f87f080003400000000244000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000001014000180090001006c617374"], 0x104}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 220.986029ms ago: executing program 5 (id=2095): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x261ee2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82a02, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000040)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x18) r3 = io_uring_setup(0x437b, &(0x7f0000000540)={0x0, 0x698c, 0x40, 0x2, 0x400002c4}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendmmsg$sock(r4, &(0x7f00000044c0), 0x4000000000001c0, 0x0) close_range(r3, 0xffffffffffffffff, 0x200000000000000) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0xfffffffffffffce8, 0xa]}}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000280)=0xc) quotactl_fd$Q_SETINFO(r1, 0xffffffff80000601, r5, &(0x7f00000002c0)={0x3, 0x10001, 0x1, 0x4}) 105.68652ms ago: executing program 0 (id=2096): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000200), &(0x7f0000000240)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)=@generic={&(0x7f00000005c0)='./file0\x00', 0x0, 0x10}, 0x18) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r1}, 0x38) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) 13.3742ms ago: executing program 1 (id=2097): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 314.74µs ago: executing program 4 (id=2098): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000004c0)={0x6, 0x4, 0x4, 0x3, 0x1, 0x0, [{0xff, 0xffffffff, 0x2, '\x00', 0x508}]}) bind$inet(0xffffffffffffffff, 0x0, 0x0) unshare(0x2c060000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) close(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r6}}], 0x20, 0x2400e044}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000200)={r6, 0x7, 0x2, 0x40000}, &(0x7f0000000280)=0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x18) r9 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r9, 0x0, 0x4, 0x0, 0x0) unshare(0x2c020400) 0s ago: executing program 5 (id=2099): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) r1 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) flock(r1, 0xb) kernel console output (not intermixed with test programs): r_hwframe+0x77/0x7f [ 112.601413][ T7911] RIP: 0033:0x7f6a89d5efc9 [ 112.601429][ T7911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.601515][ T7911] RSP: 002b:00007f6a88785038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 112.601535][ T7911] RAX: ffffffffffffffda RBX: 00007f6a89fb6180 RCX: 00007f6a89d5efc9 [ 112.601549][ T7911] RDX: 0000000000000001 RSI: 000000000000011a RDI: 0000000000000003 [ 112.601563][ T7911] RBP: 00007f6a88785090 R08: 0000000000000028 R09: 0000000000000000 [ 112.601575][ T7911] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 112.601588][ T7911] R13: 00007f6a89fb6218 R14: 00007f6a89fb6180 R15: 00007ffc5af83078 [ 112.601608][ T7911] [ 112.844110][ T7921] loop6: detected capacity change from 0 to 512 [ 112.859250][ T7921] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 113.259123][ T7921] syz.6.1453: attempt to access beyond end of device [ 113.259123][ T7921] loop6: rw=2049, sector=1128, nr_sectors = 8 limit=512 [ 113.635675][ T7956] loop5: detected capacity change from 0 to 1024 [ 113.712352][ T7956] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.729835][ T7963] loop4: detected capacity change from 0 to 512 [ 113.752668][ T7963] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 113.792996][ T5119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.834788][ T7968] loop5: detected capacity change from 0 to 128 [ 113.857880][ T7968] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 113.857984][ T7968] FAT-fs (loop5): Filesystem has been set read-only [ 113.858019][ T7968] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 113.858041][ T7968] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 113.878158][ T7971] loop4: detected capacity change from 0 to 512 [ 113.878405][ T7971] EXT4-fs: Ignoring removed mblk_io_submit option [ 113.881983][ T7971] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 113.884441][ T7971] EXT4-fs (loop4): 1 truncate cleaned up [ 113.954018][ T7971] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.089690][ T7975] EXT4-fs (loop4): shut down requested (2) [ 114.184869][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.780424][ T7990] loop4: detected capacity change from 0 to 1024 [ 114.800512][ T7990] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.820713][ T7990] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 114.839979][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.877086][ T8001] FAULT_INJECTION: forcing a failure. [ 114.877086][ T8001] name failslab, interval 1, probability 0, space 0, times 0 [ 114.877221][ T8002] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 114.877221][ T8002] The task syz.6.1476 (8002) triggered the difference, watch for misbehavior. [ 114.889890][ T8001] CPU: 1 UID: 0 PID: 8001 Comm: syz.1.1477 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 114.889988][ T8001] Tainted: [W]=WARN [ 114.890051][ T8001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 114.890094][ T8001] Call Trace: [ 114.890101][ T8001] [ 114.890109][ T8001] __dump_stack+0x1d/0x30 [ 114.890140][ T8001] dump_stack_lvl+0xe8/0x140 [ 114.890163][ T8001] dump_stack+0x15/0x1b [ 114.890234][ T8001] should_fail_ex+0x265/0x280 [ 114.890256][ T8001] should_failslab+0x8c/0xb0 [ 114.890289][ T8001] __kmalloc_noprof+0xa5/0x570 [ 114.890410][ T8001] ? bpf_prog_bind_map+0x2cc/0x590 [ 114.890438][ T8001] bpf_prog_bind_map+0x2cc/0x590 [ 114.890466][ T8001] __sys_bpf+0x747/0x7c0 [ 114.890548][ T8001] __x64_sys_bpf+0x41/0x50 [ 114.890582][ T8001] x64_sys_call+0x2aee/0x3000 [ 114.890634][ T8001] do_syscall_64+0xd2/0x200 [ 114.890655][ T8001] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 114.890686][ T8001] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 114.890738][ T8001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.890762][ T8001] RIP: 0033:0x7f6a89d5efc9 [ 114.890778][ T8001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.890797][ T8001] RSP: 002b:00007f6a887c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 114.890818][ T8001] RAX: ffffffffffffffda RBX: 00007f6a89fb5fa0 RCX: 00007f6a89d5efc9 [ 114.890832][ T8001] RDX: 000000000000000c RSI: 0000200000000280 RDI: 0000000000000023 [ 114.890845][ T8001] RBP: 00007f6a887c7090 R08: 0000000000000000 R09: 0000000000000000 [ 114.890914][ T8001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.890928][ T8001] R13: 00007f6a89fb6038 R14: 00007f6a89fb5fa0 R15: 00007ffc5af83078 [ 114.891009][ T8001] [ 114.956669][ T8008] __nla_validate_parse: 3 callbacks suppressed [ 114.956730][ T8008] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1476'. [ 114.962674][ T8009] loop4: detected capacity change from 0 to 128 [ 115.055421][ T8016] FAULT_INJECTION: forcing a failure. [ 115.055421][ T8016] name failslab, interval 1, probability 0, space 0, times 0 [ 115.076948][ T8009] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 115.077748][ T8016] CPU: 1 UID: 0 PID: 8016 Comm: syz.0.1485 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 115.077779][ T8016] Tainted: [W]=WARN [ 115.077786][ T8016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 115.077800][ T8016] Call Trace: [ 115.077808][ T8016] [ 115.077817][ T8016] __dump_stack+0x1d/0x30 [ 115.077901][ T8016] dump_stack_lvl+0xe8/0x140 [ 115.077924][ T8016] dump_stack+0x15/0x1b [ 115.077967][ T8016] should_fail_ex+0x265/0x280 [ 115.077990][ T8016] should_failslab+0x8c/0xb0 [ 115.078022][ T8016] kmem_cache_alloc_noprof+0x50/0x480 [ 115.078076][ T8016] ? audit_log_start+0x342/0x720 [ 115.078153][ T8016] audit_log_start+0x342/0x720 [ 115.078177][ T8016] ? kstrtouint+0x76/0xc0 [ 115.078213][ T8016] audit_seccomp+0x48/0x100 [ 115.078313][ T8016] ? __seccomp_filter+0x82d/0x1250 [ 115.078344][ T8016] __seccomp_filter+0x83e/0x1250 [ 115.078425][ T8016] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 115.078460][ T8016] ? vfs_write+0x7e8/0x960 [ 115.078494][ T8016] __secure_computing+0x82/0x150 [ 115.078602][ T8016] syscall_trace_enter+0xcf/0x1e0 [ 115.078634][ T8016] do_syscall_64+0xac/0x200 [ 115.078655][ T8016] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 115.078686][ T8016] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 115.078781][ T8016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.078805][ T8016] RIP: 0033:0x7f7d32abefc9 [ 115.078821][ T8016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.078841][ T8016] RSP: 002b:00007f7d3151f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 115.078862][ T8016] RAX: ffffffffffffffda RBX: 00007f7d32d15fa0 RCX: 00007f7d32abefc9 [ 115.078876][ T8016] RDX: 00000000000000ca RSI: 0000000000000029 RDI: 0000000000000006 [ 115.078889][ T8016] RBP: 00007f7d3151f090 R08: 000000000000000c R09: 0000000000000000 [ 115.078977][ T8016] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 115.078991][ T8016] R13: 00007f7d32d16038 R14: 00007f7d32d15fa0 R15: 00007ffe8706dd58 [ 115.079012][ T8016] [ 115.089209][ T8016] pim6reg: entered allmulticast mode [ 115.094998][ T8009] FAT-fs (loop4): Filesystem has been set read-only [ 115.150487][ T8009] bio_check_eod: 2306 callbacks suppressed [ 115.150502][ T8009] syz.4.1481: attempt to access beyond end of device [ 115.150502][ T8009] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 115.337551][ T8022] loop5: detected capacity change from 0 to 512 [ 115.356506][ T8009] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 115.382709][ T8009] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 115.391228][ T8009] syz.4.1481: attempt to access beyond end of device [ 115.391228][ T8009] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 115.419132][ T8022] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 115.452938][ T8022] EXT4-fs (loop5): 1 truncate cleaned up [ 115.472734][ T8022] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.536088][ T8031] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 115.588457][ T8037] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1492'. [ 115.597790][ T8037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1492'. [ 115.620708][ T5119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.662974][ T8046] loop5: detected capacity change from 0 to 512 [ 115.673171][ T8046] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 115.711441][ T8050] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 115.738780][ T8046] syz.5.1494: attempt to access beyond end of device [ 115.738780][ T8046] loop5: rw=2049, sector=1128, nr_sectors = 8 limit=512 [ 115.761861][ T8046] syz.5.1494: attempt to access beyond end of device [ 115.761861][ T8046] loop5: rw=0, sector=516, nr_sectors = 4 limit=512 [ 115.928650][ T8061] loop6: detected capacity change from 0 to 512 [ 115.948954][ T8061] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 115.962109][ T8065] loop5: detected capacity change from 0 to 512 [ 115.968717][ T8065] ext4: Unknown parameter 'smackfsdef' [ 115.985681][ T8061] EXT4-fs (loop6): 1 truncate cleaned up [ 115.994805][ T8061] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.998308][ T8065] sctp: [Deprecated]: syz.5.1503 (pid 8065) Use of struct sctp_assoc_value in delayed_ack socket option. [ 115.998308][ T8065] Use struct sctp_sack_info instead [ 116.034453][ T8066] loop4: detected capacity change from 0 to 2048 [ 116.089950][ T8066] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 116.131574][ T6161] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.169994][ T8079] loop6: detected capacity change from 0 to 512 [ 116.183768][ T8079] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 116.198427][ T8080] FAULT_INJECTION: forcing a failure. [ 116.198427][ T8080] name failslab, interval 1, probability 0, space 0, times 0 [ 116.211160][ T8080] CPU: 1 UID: 0 PID: 8080 Comm: syz.0.1508 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 116.211249][ T8080] Tainted: [W]=WARN [ 116.211317][ T8080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 116.211332][ T8080] Call Trace: [ 116.211339][ T8080] [ 116.211347][ T8080] __dump_stack+0x1d/0x30 [ 116.211374][ T8080] dump_stack_lvl+0xe8/0x140 [ 116.211418][ T8080] dump_stack+0x15/0x1b [ 116.211438][ T8080] should_fail_ex+0x265/0x280 [ 116.211462][ T8080] should_failslab+0x8c/0xb0 [ 116.211493][ T8080] __kmalloc_noprof+0xa5/0x570 [ 116.211579][ T8080] ? mq_init+0xb9/0x380 [ 116.211662][ T8080] ? __sock_sendmsg+0x145/0x180 [ 116.211690][ T8080] mq_init+0xb9/0x380 [ 116.211706][ T8080] ? __pfx_noop_dequeue+0x10/0x10 [ 116.211735][ T8080] ? qdisc_alloc+0x3c3/0x440 [ 116.211791][ T8080] ? __pfx_mq_init+0x10/0x10 [ 116.211886][ T8080] qdisc_create+0x591/0x9e0 [ 116.211917][ T8080] tc_modify_qdisc+0xf2e/0x1420 [ 116.211952][ T8080] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 116.211977][ T8080] rtnetlink_rcv_msg+0x65a/0x6d0 [ 116.212029][ T8080] netlink_rcv_skb+0x123/0x220 [ 116.212060][ T8080] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 116.212134][ T8080] rtnetlink_rcv+0x1c/0x30 [ 116.212154][ T8080] netlink_unicast+0x5c0/0x690 [ 116.212188][ T8080] netlink_sendmsg+0x58b/0x6b0 [ 116.212212][ T8080] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.212287][ T8080] __sock_sendmsg+0x145/0x180 [ 116.212322][ T8080] ____sys_sendmsg+0x31e/0x4e0 [ 116.212359][ T8080] ___sys_sendmsg+0x17b/0x1d0 [ 116.212465][ T8080] __x64_sys_sendmsg+0xd4/0x160 [ 116.212486][ T8080] x64_sys_call+0x191e/0x3000 [ 116.212511][ T8080] do_syscall_64+0xd2/0x200 [ 116.212533][ T8080] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 116.212603][ T8080] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 116.212641][ T8080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.212666][ T8080] RIP: 0033:0x7f7d32abefc9 [ 116.212682][ T8080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.212777][ T8080] RSP: 002b:00007f7d3151f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.212817][ T8080] RAX: ffffffffffffffda RBX: 00007f7d32d15fa0 RCX: 00007f7d32abefc9 [ 116.212829][ T8080] RDX: 0000000004040080 RSI: 0000200000000040 RDI: 000000000000000c [ 116.212843][ T8080] RBP: 00007f7d3151f090 R08: 0000000000000000 R09: 0000000000000000 [ 116.212857][ T8080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.212872][ T8080] R13: 00007f7d32d16038 R14: 00007f7d32d15fa0 R15: 00007ffe8706dd58 [ 116.212894][ T8080] [ 116.507939][ T8066] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 116.523056][ T8066] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1246 with error 28 [ 116.534467][ T8079] syz.6.1506: attempt to access beyond end of device [ 116.534467][ T8079] loop6: rw=2049, sector=1128, nr_sectors = 8 limit=512 [ 116.535503][ T8066] EXT4-fs (loop4): This should not happen!! Data will be lost [ 116.535503][ T8066] [ 116.558574][ T8066] EXT4-fs (loop4): Total free blocks count 0 [ 116.564580][ T8066] EXT4-fs (loop4): Free/Dirty block details [ 116.570574][ T8066] EXT4-fs (loop4): free_blocks=2415919104 [ 116.576298][ T8066] EXT4-fs (loop4): dirty_blocks=1248 [ 116.581604][ T8066] EXT4-fs (loop4): Block reservation details [ 116.584158][ T8079] syz.6.1506: attempt to access beyond end of device [ 116.584158][ T8079] loop6: rw=0, sector=516, nr_sectors = 4 limit=512 [ 116.587568][ T8066] EXT4-fs (loop4): i_reserved_data_blocks=78 [ 116.620286][ T29] kauditd_printk_skb: 1093 callbacks suppressed [ 116.620301][ T29] audit: type=1400 audit(2000000553.726:29133): avc: denied { create } for pid=8053 comm="syz.4.1500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 116.647971][ T29] audit: type=1326 audit(2000000553.736:29134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8053 comm="syz.4.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96360efc9 code=0x7ffc0000 [ 116.671523][ T29] audit: type=1326 audit(2000000553.736:29135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8053 comm="syz.4.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96360efc9 code=0x7ffc0000 [ 116.720223][ T7772] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 116.784093][ T8098] netlink: 'syz.6.1516': attribute type 1 has an invalid length. [ 116.829288][ T8098] bond1: (slave bridge2): making interface the new active one [ 116.846110][ T8098] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 116.973715][ T8109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.983641][ T8103] loop5: detected capacity change from 0 to 512 [ 116.992375][ T8109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.004428][ T29] audit: type=1326 audit(2000000554.026:29136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8102 comm="syz.5.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23147fefc9 code=0x7ffc0000 [ 117.028038][ T29] audit: type=1326 audit(2000000554.026:29137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8102 comm="syz.5.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23147fefc9 code=0x7ffc0000 [ 117.028066][ T29] audit: type=1326 audit(2000000554.026:29138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8102 comm="syz.5.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23147fefc9 code=0x7ffc0000 [ 117.028092][ T29] audit: type=1326 audit(2000000554.026:29139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8102 comm="syz.5.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23147fefc9 code=0x7ffc0000 [ 117.028152][ T29] audit: type=1326 audit(2000000554.026:29140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8102 comm="syz.5.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23147fefc9 code=0x7ffc0000 [ 117.028250][ T29] audit: type=1326 audit(2000000554.026:29141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8102 comm="syz.5.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23147fefc9 code=0x7ffc0000 [ 117.063369][ T8103] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 117.075289][ T29] audit: type=1326 audit(2000000554.026:29142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8102 comm="syz.5.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f23147fefc9 code=0x7ffc0000 [ 117.196957][ T8103] EXT4-fs (loop5): 1 truncate cleaned up [ 117.200039][ T8103] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.248091][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1519'. [ 117.390632][ T5119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.927171][ T8136] loop6: detected capacity change from 0 to 512 [ 117.990778][ T8153] block device autoloading is deprecated and will be removed. [ 118.067616][ T8160] loop6: detected capacity change from 0 to 128 [ 118.109161][ T8160] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 118.117099][ T8160] FAT-fs (loop6): Filesystem has been set read-only [ 118.118098][ T8163] loop0: detected capacity change from 0 to 512 [ 118.148064][ T8160] syz.6.1533: attempt to access beyond end of device [ 118.148064][ T8160] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 118.162686][ T8163] ext4: Unknown parameter 'smackfsdef' [ 118.191086][ T8160] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 118.195775][ T8163] sctp: [Deprecated]: syz.0.1531 (pid 8163) Use of struct sctp_assoc_value in delayed_ack socket option. [ 118.195775][ T8163] Use struct sctp_sack_info instead [ 118.198982][ T8160] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 118.384543][ T8176] loop0: detected capacity change from 0 to 1024 [ 118.431657][ T8176] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.502284][ T8185] loop6: detected capacity change from 0 to 1024 [ 118.531197][ T8185] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.546811][ T8193] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1543'. [ 118.556853][ T8193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1543'. [ 118.583514][ T8198] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.1544'. [ 118.585613][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.609256][ T8199] loop5: detected capacity change from 0 to 512 [ 118.609979][ T8198] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1544'. [ 118.667602][ T6161] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.728723][ T8214] x_tables: duplicate underflow at hook 1 [ 118.834509][ T8222] loop6: detected capacity change from 0 to 512 [ 118.861175][ T8222] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.873717][ T8222] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.952798][ T6161] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.982468][ T8228] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1554'. [ 119.003239][ T8228] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1554'. [ 119.194675][ T8246] loop4: detected capacity change from 0 to 512 [ 119.201651][ T8246] EXT4-fs: Ignoring removed bh option [ 119.207797][ T8246] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 119.216898][ T8246] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 119.225687][ T8246] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 119.329037][ T8250] hub 2-0:1.0: USB hub found [ 119.334243][ T8250] hub 2-0:1.0: 8 ports detected [ 119.462875][ T8246] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006] [ 119.501948][ T8246] System zones: 0-2, 18-18, 34-35 [ 119.528699][ T8246] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.599266][ T7775] Bluetooth: hci0: Frame reassembly failed (-84) [ 119.637065][ T8246] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 119.680904][ T8259] loop5: detected capacity change from 0 to 512 [ 119.741137][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.760900][ T8259] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.773688][ T8259] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.806792][ T8259] SELinux: Context @ is not valid (left unmapped). [ 119.840415][ T8259] vlan0: entered promiscuous mode [ 119.902851][ T8268] loop4: detected capacity change from 0 to 1024 [ 119.932098][ T8268] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.958339][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.028708][ T8276] loop6: detected capacity change from 0 to 512 [ 120.037248][ T8276] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 120.135551][ T8285] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1576'. [ 120.144707][ T8285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1576'. [ 120.170914][ T8291] loop6: detected capacity change from 0 to 512 [ 120.306466][ T8305] loop6: detected capacity change from 0 to 1024 [ 120.332420][ T8305] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.443911][ T6161] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.507854][ T8299] lo speed is unknown, defaulting to 1000 [ 120.540330][ T8299] lo speed is unknown, defaulting to 1000 [ 120.558816][ T8319] loop0: detected capacity change from 0 to 128 [ 120.587559][ T8319] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 120.595454][ T8319] FAT-fs (loop0): Filesystem has been set read-only [ 120.653971][ T8319] syz.0.1588: attempt to access beyond end of device [ 120.653971][ T8319] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 120.759205][ T8319] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 120.767121][ T8319] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 120.986833][ T8338] loop6: detected capacity change from 0 to 512 [ 121.019967][ T8342] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 121.026567][ T8342] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 121.034179][ T8342] vhci_hcd vhci_hcd.0: Device attached [ 121.051123][ T8342] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1595'. [ 121.085859][ T8342] loop0: detected capacity change from 0 to 128 [ 121.105431][ T8347] macvlan1: entered promiscuous mode [ 121.112171][ T8347] ipvlan0: entered promiscuous mode [ 121.122950][ T8347] ipvlan0: left promiscuous mode [ 121.128162][ T8347] macvlan1: left promiscuous mode [ 121.148138][ T8348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1595'. [ 121.168202][ T8342] syz.0.1595: attempt to access beyond end of device [ 121.168202][ T8342] loop0: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 121.181607][ T8342] Buffer I/O error on dev loop0, logical block 2078, async page read [ 121.191766][ T8342] syz.0.1595: attempt to access beyond end of device [ 121.191766][ T8342] loop0: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 121.205052][ T8342] Buffer I/O error on dev loop0, logical block 2078, async page read [ 121.215252][ T8342] syz.0.1595: attempt to access beyond end of device [ 121.215252][ T8342] loop0: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 121.228587][ T8342] Buffer I/O error on dev loop0, logical block 2078, async page read [ 121.243243][ T3374] vhci_hcd: vhci_device speed not set [ 121.253424][ T8343] vhci_hcd: connection closed [ 121.253634][ T7772] vhci_hcd: stop threads [ 121.262622][ T7772] vhci_hcd: release socket [ 121.267091][ T7772] vhci_hcd: disconnect device [ 121.309073][ T3374] usb 1-1: new full-speed USB device number 2 using vhci_hcd [ 121.316563][ T3374] usb 1-1: enqueue for inactive port 0 [ 121.323331][ T3374] usb 1-1: enqueue for inactive port 0 [ 121.328867][ T3374] usb 1-1: enqueue for inactive port 0 [ 121.399002][ T3374] vhci_hcd: vhci_device speed not set [ 121.607683][ T8371] netlink: 'syz.1.1603': attribute type 1 has an invalid length. [ 121.626818][ T8371] bond2: (slave bridge0): making interface the new active one [ 121.634831][ T8371] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 121.659128][ T3723] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 121.665287][ T6071] Bluetooth: hci0: command 0x1003 tx timeout [ 121.791047][ T29] kauditd_printk_skb: 622 callbacks suppressed [ 121.791060][ T29] audit: type=1326 audit(2000000558.896:29765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8380 comm="syz.0.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d32abefc9 code=0x7ffc0000 [ 121.821122][ T29] audit: type=1326 audit(2000000558.906:29766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8380 comm="syz.0.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d32abefc9 code=0x7ffc0000 [ 121.844626][ T29] audit: type=1326 audit(2000000558.906:29767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8380 comm="syz.0.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d32abefc9 code=0x7ffc0000 [ 121.868131][ T29] audit: type=1326 audit(2000000558.906:29768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8380 comm="syz.0.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d32abefc9 code=0x7ffc0000 [ 121.891679][ T29] audit: type=1326 audit(2000000558.906:29769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8380 comm="syz.0.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f7d32abefc9 code=0x7ffc0000 [ 121.915116][ T29] audit: type=1326 audit(2000000558.906:29770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8380 comm="syz.0.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d32abefc9 code=0x7ffc0000 [ 121.938615][ T29] audit: type=1326 audit(2000000558.906:29771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8380 comm="syz.0.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f7d32abefc9 code=0x7ffc0000 [ 121.962063][ T29] audit: type=1326 audit(2000000558.906:29772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8380 comm="syz.0.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d32abefc9 code=0x7ffc0000 [ 121.985542][ T29] audit: type=1326 audit(2000000558.906:29773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8380 comm="syz.0.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f7d32abefc9 code=0x7ffc0000 [ 122.008917][ T29] audit: type=1326 audit(2000000558.906:29774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8380 comm="syz.0.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d32abefc9 code=0x7ffc0000 [ 122.212909][ T8394] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8394 comm=syz.0.1611 [ 122.231308][ T8394] netlink: 'syz.0.1611': attribute type 1 has an invalid length. [ 122.255748][ T5119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.256218][ T8396] loop0: detected capacity change from 0 to 128 [ 122.289714][ T8396] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 122.297654][ T8396] FAT-fs (loop0): Filesystem has been set read-only [ 122.307083][ T8398] loop5: detected capacity change from 0 to 1024 [ 122.314739][ T8396] syz.0.1612: attempt to access beyond end of device [ 122.314739][ T8396] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 122.340646][ T8398] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.355035][ T8396] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 122.362909][ T8396] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 122.383772][ T8404] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1615'. [ 122.392971][ T8404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1615'. [ 122.402311][ T8396] syz.0.1612: attempt to access beyond end of device [ 122.402311][ T8396] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 122.415871][ T8396] syz.0.1612: attempt to access beyond end of device [ 122.415871][ T8396] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 122.429218][ T8396] syz.0.1612: attempt to access beyond end of device [ 122.429218][ T8396] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 122.430823][ T8398] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 122.442631][ T8396] syz.0.1612: attempt to access beyond end of device [ 122.442631][ T8396] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 122.461472][ T8396] syz.0.1612: attempt to access beyond end of device [ 122.461472][ T8396] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 122.490756][ T5119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.754723][ T8430] loop5: detected capacity change from 0 to 512 [ 122.780789][ T8427] lo speed is unknown, defaulting to 1000 [ 122.794230][ T8427] lo speed is unknown, defaulting to 1000 [ 122.794276][ T8430] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 122.813199][ T8417] loop6: detected capacity change from 0 to 512 [ 122.841633][ T8433] loop4: detected capacity change from 0 to 512 [ 122.883208][ T8433] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.915084][ T8417] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 122.925207][ T8433] ext4 filesystem being mounted at /263/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.942571][ T8439] syzkaller0: entered allmulticast mode [ 122.966234][ T8439] syzkaller0: entered promiscuous mode [ 122.971934][ T8417] EXT4-fs (loop6): 1 truncate cleaned up [ 122.989061][ T8439] syzkaller0 (unregistering): left allmulticast mode [ 122.991636][ T8417] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.995815][ T8439] syzkaller0 (unregistering): left promiscuous mode [ 123.021857][ T8446] loop0: detected capacity change from 0 to 512 [ 123.030378][ T8446] EXT4-fs: Ignoring removed bh option [ 123.051074][ T8446] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 123.060166][ T8446] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 123.071812][ T8446] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 123.081878][ T8446] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006] [ 123.089914][ T8446] System zones: 0-2, 18-18, 34-35 [ 123.096159][ T8446] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.111067][ T8446] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 123.132841][ T6161] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.171002][ T8464] netlink: 'syz.6.1636': attribute type 1 has an invalid length. [ 123.178761][ T8464] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1636'. [ 123.193566][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.204842][ T7775] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.214080][ T7775] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.225194][ T8468] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 123.284886][ T7775] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.293773][ T7775] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.332733][ T8479] loop6: detected capacity change from 0 to 512 [ 123.345340][ T8479] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 123.384038][ T8481] loop5: detected capacity change from 0 to 512 [ 123.540157][ T8490] loop4: detected capacity change from 0 to 512 [ 123.553917][ T8490] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 123.570853][ T8490] EXT4-fs (loop4): 1 truncate cleaned up [ 123.582622][ T8495] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 123.782353][ T8498] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 124.130797][ T8502] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1650'. [ 124.139908][ T8502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1650'. [ 124.631190][ T8510] Set syz1 is full, maxelem 65536 reached [ 124.669802][ T8531] FAULT_INJECTION: forcing a failure. [ 124.669802][ T8531] name failslab, interval 1, probability 0, space 0, times 0 [ 124.682521][ T8531] CPU: 0 UID: 0 PID: 8531 Comm: syz.4.1663 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 124.682692][ T8531] Tainted: [W]=WARN [ 124.682750][ T8531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 124.682758][ T8531] Call Trace: [ 124.682763][ T8531] [ 124.682767][ T8531] __dump_stack+0x1d/0x30 [ 124.682782][ T8531] dump_stack_lvl+0xe8/0x140 [ 124.682794][ T8531] dump_stack+0x15/0x1b [ 124.682805][ T8531] should_fail_ex+0x265/0x280 [ 124.682886][ T8531] should_failslab+0x8c/0xb0 [ 124.682937][ T8531] __kmalloc_cache_node_noprof+0x54/0x4a0 [ 124.683037][ T8531] ? __get_vm_area_node+0x106/0x1d0 [ 124.683056][ T8531] __get_vm_area_node+0x106/0x1d0 [ 124.683085][ T8531] __vmalloc_node_range_noprof+0x28c/0xed0 [ 124.683182][ T8531] ? ethtool_get_stats+0x135/0x2b0 [ 124.683200][ T8531] ? terminate_walk+0x27f/0x2a0 [ 124.683278][ T8531] ? path_openat+0x1bf8/0x2170 [ 124.683290][ T8531] ? __rcu_read_unlock+0x4f/0x70 [ 124.683305][ T8531] ? avc_has_extended_perms+0x73d/0x940 [ 124.683400][ T8531] ? ethtool_get_stats+0x135/0x2b0 [ 124.683414][ T8531] vzalloc_noprof+0x82/0xc0 [ 124.683432][ T8531] ? ethtool_get_stats+0x135/0x2b0 [ 124.683457][ T8531] ethtool_get_stats+0x135/0x2b0 [ 124.683472][ T8531] dev_ethtool+0x909/0x1670 [ 124.683484][ T8531] ? full_name_hash+0x92/0xe0 [ 124.683527][ T8531] dev_ioctl+0x2e0/0x960 [ 124.683610][ T8531] sock_do_ioctl+0x197/0x220 [ 124.683625][ T8531] sock_ioctl+0x41b/0x610 [ 124.683639][ T8531] ? __pfx_sock_ioctl+0x10/0x10 [ 124.683718][ T8531] __se_sys_ioctl+0xce/0x140 [ 124.683731][ T8531] __x64_sys_ioctl+0x43/0x50 [ 124.683744][ T8531] x64_sys_call+0x1816/0x3000 [ 124.683789][ T8531] do_syscall_64+0xd2/0x200 [ 124.683801][ T8531] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 124.683831][ T8531] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 124.683850][ T8531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.683875][ T8531] RIP: 0033:0x7fa96360efc9 [ 124.683889][ T8531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.683899][ T8531] RSP: 002b:00007fa96206f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 124.683912][ T8531] RAX: ffffffffffffffda RBX: 00007fa963865fa0 RCX: 00007fa96360efc9 [ 124.683930][ T8531] RDX: 00002000000002c0 RSI: 0000000000008946 RDI: 0000000000000003 [ 124.683938][ T8531] RBP: 00007fa96206f090 R08: 0000000000000000 R09: 0000000000000000 [ 124.683945][ T8531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.683952][ T8531] R13: 00007fa963866038 R14: 00007fa963865fa0 R15: 00007ffce7f6c3b8 [ 124.683964][ T8531] [ 124.683969][ T8531] syz.4.1663: vmalloc error: size 80, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 124.892258][ T8535] loop0: detected capacity change from 0 to 512 [ 124.900408][ T8531] ,cpuset=/,mems_allowed=0 [ 124.900444][ T8531] CPU: 0 UID: 0 PID: 8531 Comm: syz.4.1663 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 124.900474][ T8531] Tainted: [W]=WARN [ 124.900482][ T8531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 124.900496][ T8531] Call Trace: [ 124.900504][ T8531] [ 124.900514][ T8531] __dump_stack+0x1d/0x30 [ 124.900565][ T8531] dump_stack_lvl+0xe8/0x140 [ 124.900587][ T8531] dump_stack+0x15/0x1b [ 124.900606][ T8531] warn_alloc+0x12b/0x1a0 [ 124.900677][ T8531] __vmalloc_node_range_noprof+0x2b1/0xed0 [ 124.900719][ T8531] ? terminate_walk+0x27f/0x2a0 [ 124.900753][ T8531] ? path_openat+0x1bf8/0x2170 [ 124.900915][ T8531] ? __rcu_read_unlock+0x4f/0x70 [ 124.900944][ T8531] ? avc_has_extended_perms+0x73d/0x940 [ 124.901017][ T8531] ? ethtool_get_stats+0x135/0x2b0 [ 124.901046][ T8531] vzalloc_noprof+0x82/0xc0 [ 124.901080][ T8531] ? ethtool_get_stats+0x135/0x2b0 [ 124.901156][ T8531] ethtool_get_stats+0x135/0x2b0 [ 124.901215][ T8531] dev_ethtool+0x909/0x1670 [ 124.901238][ T8531] ? full_name_hash+0x92/0xe0 [ 124.901276][ T8531] dev_ioctl+0x2e0/0x960 [ 124.901299][ T8531] sock_do_ioctl+0x197/0x220 [ 124.901445][ T8531] sock_ioctl+0x41b/0x610 [ 124.901470][ T8531] ? __pfx_sock_ioctl+0x10/0x10 [ 124.901494][ T8531] __se_sys_ioctl+0xce/0x140 [ 124.901518][ T8531] __x64_sys_ioctl+0x43/0x50 [ 124.901540][ T8531] x64_sys_call+0x1816/0x3000 [ 124.901622][ T8531] do_syscall_64+0xd2/0x200 [ 124.901642][ T8531] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 124.901696][ T8531] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 124.901731][ T8531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.901755][ T8531] RIP: 0033:0x7fa96360efc9 [ 124.901771][ T8531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.901860][ T8531] RSP: 002b:00007fa96206f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 124.901915][ T8531] RAX: ffffffffffffffda RBX: 00007fa963865fa0 RCX: 00007fa96360efc9 [ 124.901929][ T8531] RDX: 00002000000002c0 RSI: 0000000000008946 RDI: 0000000000000003 [ 124.901943][ T8531] RBP: 00007fa96206f090 R08: 0000000000000000 R09: 0000000000000000 [ 124.901957][ T8531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.901971][ T8531] R13: 00007fa963866038 R14: 00007fa963865fa0 R15: 00007ffce7f6c3b8 [ 124.901991][ T8531] [ 124.902009][ T8531] Mem-Info: [ 125.202284][ T8531] active_anon:45426 inactive_anon:2 isolated_anon:0 [ 125.202284][ T8531] active_file:25205 inactive_file:2512 isolated_file:0 [ 125.202284][ T8531] unevictable:0 dirty:468 writeback:0 [ 125.202284][ T8531] slab_reclaimable:3525 slab_unreclaimable:18919 [ 125.202284][ T8531] mapped:34050 shmem:36575 pagetables:1437 [ 125.202284][ T8531] sec_pagetables:0 bounce:0 [ 125.202284][ T8531] kernel_misc_reclaimable:0 [ 125.202284][ T8531] free:1757964 free_pcp:5857 free_cma:0 [ 125.247422][ T8531] Node 0 active_anon:181704kB inactive_anon:8kB active_file:100820kB inactive_file:10048kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:136200kB dirty:1872kB writeback:0kB shmem:146300kB kernel_stack:4288kB pagetables:5748kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 125.275208][ T8531] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 125.304860][ T8531] lowmem_reserve[]: 0 2881 7859 7859 [ 125.310265][ T8531] Node 0 DMA32 free:2946740kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950268kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 125.341690][ T8531] lowmem_reserve[]: 0 0 4978 4978 [ 125.346771][ T8531] Node 0 Normal free:4069712kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:178412kB inactive_anon:8kB active_file:100820kB inactive_file:10048kB unevictable:0kB writepending:1888kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:23216kB local_pcp:14960kB free_cma:0kB [ 125.380141][ T8531] lowmem_reserve[]: 0 0 0 0 [ 125.384777][ T8531] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 125.397713][ T8531] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 5*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946740kB [ 125.413960][ T8531] Node 0 Normal: 8*4kB (ME) 14*8kB (E) 14*16kB (UME) 161*32kB (UME) 299*64kB (UME) 162*128kB (UM) 78*256kB (UME) 53*512kB (UM) 60*1024kB (UME) 56*2048kB (UME) 928*4096kB (UM) = 4069712kB [ 125.432934][ T8531] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 125.442265][ T8531] 61218 total pagecache pages [ 125.446925][ T8531] 2 pages in swap cache [ 125.451088][ T8531] Free swap = 124988kB [ 125.455225][ T8531] Total swap = 124996kB [ 125.459431][ T8531] 2097051 pages RAM [ 125.463254][ T8531] 0 pages HighMem/MovableOnly [ 125.467901][ T8531] 81084 pages reserved [ 125.587998][ T8548] loop5: detected capacity change from 0 to 1024 [ 125.641196][ T8554] binfmt_misc: register: failed to install interpreter file ./file0 [ 125.739398][ T8558] loop4: detected capacity change from 0 to 128 [ 125.933631][ T8563] loop6: detected capacity change from 0 to 1024 [ 126.212404][ T8576] loop5: detected capacity change from 0 to 128 [ 126.243416][ T8576] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 126.251393][ T8576] FAT-fs (loop5): Filesystem has been set read-only [ 126.258437][ T8578] loop6: detected capacity change from 0 to 4096 [ 126.265740][ T8578] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.272976][ T8576] bio_check_eod: 4 callbacks suppressed [ 126.272993][ T8576] syz.5.1678: attempt to access beyond end of device [ 126.272993][ T8576] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 126.292812][ T8576] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 126.300715][ T8576] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 126.309639][ T8576] syz.5.1678: attempt to access beyond end of device [ 126.309639][ T8576] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 126.314622][ T8584] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1682'. [ 126.323614][ T8576] syz.5.1678: attempt to access beyond end of device [ 126.323614][ T8576] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 126.345569][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1682'. [ 126.399365][ T8588] loop0: detected capacity change from 0 to 512 [ 126.499951][ T8591] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 126.537217][ T8593] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1685'. [ 126.549582][ T8593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1685'. [ 126.589574][ T8598] loop5: detected capacity change from 0 to 2048 [ 126.624237][ T8598] EXT4-fs error (device loop5): ext4_ext_precache:632: inode #2: comm syz.5.1686: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 126.731056][ T8609] loop5: detected capacity change from 0 to 128 [ 126.733971][ T8609] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 126.733990][ T8609] FAT-fs (loop5): Filesystem has been set read-only [ 126.734002][ T8609] syz.5.1689: attempt to access beyond end of device [ 126.734002][ T8609] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 126.734038][ T8609] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 126.734056][ T8609] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 126.734291][ T8609] syz.5.1689: attempt to access beyond end of device [ 126.734291][ T8609] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 126.734354][ T8609] syz.5.1689: attempt to access beyond end of device [ 126.734354][ T8609] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 126.734415][ T8609] syz.5.1689: attempt to access beyond end of device [ 126.734415][ T8609] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 126.734457][ T8609] syz.5.1689: attempt to access beyond end of device [ 126.734457][ T8609] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 126.734533][ T8609] syz.5.1689: attempt to access beyond end of device [ 126.734533][ T8609] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 126.734571][ T8609] syz.5.1689: attempt to access beyond end of device [ 126.734571][ T8609] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 126.799149][ T29] kauditd_printk_skb: 359 callbacks suppressed [ 126.799164][ T29] audit: type=1326 audit(2000000563.906:30134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8606 comm="syz.1.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a89d5efc9 code=0x7ffc0000 [ 126.799373][ T29] audit: type=1326 audit(2000000563.906:30135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8606 comm="syz.1.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a89d5efc9 code=0x7ffc0000 [ 126.799559][ T29] audit: type=1326 audit(2000000563.906:30136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8606 comm="syz.1.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a89d5efc9 code=0x7ffc0000 [ 126.799754][ T29] audit: type=1326 audit(2000000563.906:30137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8606 comm="syz.1.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a89d5efc9 code=0x7ffc0000 [ 126.799849][ T29] audit: type=1326 audit(2000000563.906:30138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8606 comm="syz.1.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a89d5efc9 code=0x7ffc0000 [ 126.800255][ T29] audit: type=1326 audit(2000000563.906:30139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8606 comm="syz.1.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a89d5efc9 code=0x7ffc0000 [ 126.800371][ T29] audit: type=1326 audit(2000000563.906:30140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8606 comm="syz.1.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a89d5efc9 code=0x7ffc0000 [ 126.800520][ T29] audit: type=1326 audit(2000000563.906:30141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8606 comm="syz.1.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a89d5efc9 code=0x7ffc0000 [ 126.800692][ T29] audit: type=1326 audit(2000000563.906:30142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8606 comm="syz.1.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a89d5efc9 code=0x7ffc0000 [ 126.800784][ T29] audit: type=1326 audit(2000000563.906:30143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8606 comm="syz.1.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f6a89d5efc9 code=0x7ffc0000 [ 127.099324][ T8615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1690'. [ 127.307052][ T8622] loop0: detected capacity change from 0 to 128 [ 127.322237][ T8622] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 127.322265][ T8622] FAT-fs (loop0): Filesystem has been set read-only [ 127.322299][ T8622] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 127.322320][ T8622] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 127.358030][ T8626] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1695'. [ 127.358054][ T8626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1695'. [ 127.463236][ T8629] loop6: detected capacity change from 0 to 512 [ 127.463492][ T8629] EXT4-fs: Ignoring removed bh option [ 127.465716][ T8629] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 127.465735][ T8629] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 127.486399][ T8634] loop4: detected capacity change from 0 to 2048 [ 127.499402][ T8629] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 127.499652][ T8629] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006] [ 127.499683][ T8629] System zones: 0-2, 18-18, 34-35 [ 127.500394][ T8629] EXT4-fs mount: 11 callbacks suppressed [ 127.500407][ T8629] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.501288][ T8629] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 127.539757][ T8634] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.554557][ T8634] EXT4-fs error (device loop4): ext4_ext_precache:632: inode #2: comm syz.4.1698: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 127.575699][ T6161] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.595235][ T8641] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1699'. [ 127.595272][ T8641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1699'. [ 127.600345][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.684372][ T8650] netlink: 'syz.4.1704': attribute type 10 has an invalid length. [ 127.684394][ T8650] batadv0: left promiscuous mode [ 127.684407][ T8650] batadv0: left allmulticast mode [ 127.685058][ T8650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.686798][ T8650] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 127.690998][ T8653] netlink: 'syz.0.1705': attribute type 6 has an invalid length. [ 127.698023][ T8654] loop5: detected capacity change from 0 to 2048 [ 127.698903][ T8650] netlink: 'syz.4.1704': attribute type 10 has an invalid length. [ 127.698919][ T8650] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1704'. [ 127.698977][ T8650] batadv0: entered promiscuous mode [ 127.698993][ T8650] batadv0: entered allmulticast mode [ 127.700168][ T8650] bond0: (slave batadv0): Releasing backup interface [ 127.701906][ T8650] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 127.752257][ T8660] loop4: detected capacity change from 0 to 128 [ 127.767174][ T8660] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 127.767199][ T8660] FAT-fs (loop4): Filesystem has been set read-only [ 127.767222][ T8660] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 127.767241][ T8660] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 127.823683][ T8661] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 128.342402][ T8671] loop0: detected capacity change from 0 to 512 [ 128.342757][ T8671] EXT4-fs: Ignoring removed bh option [ 128.343310][ T8671] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 128.343326][ T8671] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 128.358115][ T8671] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 128.358314][ T8671] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006] [ 128.358345][ T8671] System zones: 0-2, 18-18, 34-35 [ 128.358963][ T8671] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.360112][ T8671] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 128.376965][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.423937][ T8674] FAULT_INJECTION: forcing a failure. [ 128.423937][ T8674] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 128.423972][ T8674] CPU: 0 UID: 0 PID: 8674 Comm: syz.0.1713 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 128.424001][ T8674] Tainted: [W]=WARN [ 128.424044][ T8674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 128.424060][ T8674] Call Trace: [ 128.424067][ T8674] [ 128.424076][ T8674] __dump_stack+0x1d/0x30 [ 128.424100][ T8674] dump_stack_lvl+0xe8/0x140 [ 128.424125][ T8674] dump_stack+0x15/0x1b [ 128.424165][ T8674] should_fail_ex+0x265/0x280 [ 128.424185][ T8674] should_fail_alloc_page+0xf2/0x100 [ 128.424220][ T8674] __alloc_frozen_pages_noprof+0xff/0x360 [ 128.424349][ T8674] alloc_pages_mpol+0xb3/0x260 [ 128.424371][ T8674] folio_alloc_mpol_noprof+0x39/0x80 [ 128.424393][ T8674] shmem_get_folio_gfp+0x3cf/0xd60 [ 128.424516][ T8674] shmem_write_begin+0xa8/0x190 [ 128.424537][ T8674] generic_perform_write+0x184/0x490 [ 128.424565][ T8674] shmem_file_write_iter+0xc5/0xf0 [ 128.424605][ T8674] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 128.424701][ T8674] vfs_write+0x52a/0x960 [ 128.424735][ T8674] ksys_write+0xda/0x1a0 [ 128.424801][ T8674] __x64_sys_write+0x40/0x50 [ 128.424830][ T8674] x64_sys_call+0x2802/0x3000 [ 128.424855][ T8674] do_syscall_64+0xd2/0x200 [ 128.424875][ T8674] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 128.424974][ T8674] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 128.425006][ T8674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.425027][ T8674] RIP: 0033:0x7f7d32abda7f [ 128.425041][ T8674] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 128.425097][ T8674] RSP: 002b:00007f7d3151edf0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 128.425118][ T8674] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007f7d32abda7f [ 128.425132][ T8674] RDX: 0000000000040000 RSI: 00007f7d290ff000 RDI: 0000000000000004 [ 128.425146][ T8674] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000002be [ 128.425160][ T8674] R10: 00002000000003c2 R11: 0000000000000293 R12: 0000000000000004 [ 128.425208][ T8674] R13: 00007f7d3151eef0 R14: 00007f7d3151eeb0 R15: 00007f7d290ff000 [ 128.425231][ T8674] [ 128.482774][ T8676] gre1: entered promiscuous mode [ 128.605128][ T8682] loop6: detected capacity change from 0 to 512 [ 128.793934][ T8682] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 129.001524][ T8711] loop5: detected capacity change from 0 to 512 [ 129.016886][ T8711] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 129.244007][ T8723] loop4: detected capacity change from 0 to 512 [ 129.265735][ T8723] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 129.283088][ T8723] EXT4-fs (loop4): 1 truncate cleaned up [ 129.290817][ T8723] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.409451][ T8740] tipc: Enabling of bearer rejected, failed to enable media [ 129.436680][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.636422][ T8757] loop5: detected capacity change from 0 to 1024 [ 129.647948][ T8757] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.696606][ T5119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.766568][ T8769] loop5: detected capacity change from 0 to 512 [ 129.780140][ T8769] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 129.786297][ T8769] EXT4-fs (loop5): orphan cleanup on readonly fs [ 129.786513][ T8769] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 129.786808][ T8769] EXT4-fs (loop5): Remounting filesystem read-only [ 129.786861][ T8769] EXT4-fs (loop5): 1 truncate cleaned up [ 129.787258][ T8769] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 129.844747][ T5119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.926291][ T8780] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 130.234808][ T8794] loop5: detected capacity change from 0 to 512 [ 130.235187][ T8794] EXT4-fs: Ignoring removed bh option [ 130.236036][ T8794] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 130.236052][ T8794] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 130.236576][ T8794] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 130.236922][ T8794] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006] [ 130.236948][ T8794] System zones: 0-2, 18-18, 34-35 [ 130.237658][ T8794] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.259071][ T8794] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 130.308209][ T5119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.369679][ T8801] FAULT_INJECTION: forcing a failure. [ 130.369679][ T8801] name failslab, interval 1, probability 0, space 0, times 0 [ 130.369732][ T8801] CPU: 1 UID: 0 PID: 8801 Comm: syz.4.1753 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 130.369837][ T8801] Tainted: [W]=WARN [ 130.369844][ T8801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 130.369856][ T8801] Call Trace: [ 130.369862][ T8801] [ 130.369945][ T8801] __dump_stack+0x1d/0x30 [ 130.369968][ T8801] dump_stack_lvl+0xe8/0x140 [ 130.370046][ T8801] dump_stack+0x15/0x1b [ 130.370065][ T8801] should_fail_ex+0x265/0x280 [ 130.370094][ T8801] should_failslab+0x8c/0xb0 [ 130.370250][ T8801] kmem_cache_alloc_noprof+0x50/0x480 [ 130.370282][ T8801] ? alloc_empty_file+0x76/0x200 [ 130.370320][ T8801] alloc_empty_file+0x76/0x200 [ 130.370355][ T8801] alloc_file_pseudo+0xc6/0x160 [ 130.370410][ T8801] anon_inode_getfile+0xa0/0x120 [ 130.370434][ T8801] __se_sys_perf_event_open+0xb69/0x11c0 [ 130.370475][ T8801] __x64_sys_perf_event_open+0x67/0x80 [ 130.370506][ T8801] x64_sys_call+0x7bd/0x3000 [ 130.370593][ T8801] do_syscall_64+0xd2/0x200 [ 130.370612][ T8801] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 130.370644][ T8801] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 130.370691][ T8801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.370715][ T8801] RIP: 0033:0x7fa96360efc9 [ 130.370729][ T8801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.370751][ T8801] RSP: 002b:00007fa96206f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 130.370773][ T8801] RAX: ffffffffffffffda RBX: 00007fa963865fa0 RCX: 00007fa96360efc9 [ 130.370789][ T8801] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000180 [ 130.370802][ T8801] RBP: 00007fa96206f090 R08: 000000000000000a R09: 0000000000000000 [ 130.370858][ T8801] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 130.370870][ T8801] R13: 00007fa963866038 R14: 00007fa963865fa0 R15: 00007ffce7f6c3b8 [ 130.370889][ T8801] [ 130.420350][ T8805] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 130.493586][ T8813] loop5: detected capacity change from 0 to 1024 [ 130.519628][ T8813] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.639185][ T5119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.640145][ T8822] loop4: detected capacity change from 0 to 512 [ 130.645722][ T8822] EXT4-fs (loop4): orphan cleanup on readonly fs [ 130.647253][ T8822] EXT4-fs error (device loop4): ext4_quota_enable:7136: comm syz.4.1759: inode #218103808: comm syz.4.1759: iget: illegal inode # [ 130.647370][ T8822] EXT4-fs error (device loop4): ext4_quota_enable:7139: comm syz.4.1759: Bad quota inode: 218103808, type: 2 [ 130.647475][ T8822] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 130.647653][ T8822] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 130.647963][ T8822] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 130.648847][ T8822] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.1759: deleted inode referenced: 12 [ 130.649751][ T8822] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.1759: deleted inode referenced: 12 [ 130.650854][ T8822] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 130.651290][ T8822] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.1759: deleted inode referenced: 12 [ 130.779771][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.807134][ T8831] loop4: detected capacity change from 0 to 1024 [ 130.855094][ T8831] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.002504][ T8835] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 131.056733][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.442147][ T8844] loop5: detected capacity change from 0 to 512 [ 131.941368][ T29] kauditd_printk_skb: 3025 callbacks suppressed [ 131.941383][ T29] audit: type=1400 audit(2000000569.046:33169): avc: denied { ioctl } for pid=8864 comm="syz.6.1774" path="socket:[24655]" dev="sockfs" ino=24655 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 131.974001][ T8865] __nla_validate_parse: 8 callbacks suppressed [ 131.974013][ T8865] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1774'. [ 132.025897][ T8872] 9pnet_fd: Insufficient options for proto=fd [ 132.032326][ T8872] netlink: '+}[@': attribute type 16 has an invalid length. [ 132.039685][ T8872] netlink: 156 bytes leftover after parsing attributes in process `+}[@'. [ 132.040539][ T8873] loop5: detected capacity change from 0 to 512 [ 132.048520][ T8865] team0: Port device team_slave_1 removed [ 132.065545][ T29] audit: type=1400 audit(2000000569.126:33170): avc: denied { read } for pid=8864 comm="+}[@" dev="sockfs" ino=24654 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 132.095241][ T8873] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 132.162329][ T8873] bio_check_eod: 3538 callbacks suppressed [ 132.162394][ T8873] syz.5.1778: attempt to access beyond end of device [ 132.162394][ T8873] loop5: rw=2049, sector=1128, nr_sectors = 8 limit=512 [ 132.203368][ T8873] syz.5.1778: attempt to access beyond end of device [ 132.203368][ T8873] loop5: rw=0, sector=516, nr_sectors = 4 limit=512 [ 132.242897][ T8891] loop6: detected capacity change from 0 to 1024 [ 132.271621][ T8889] SELinux: failed to load policy [ 132.271880][ T8891] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.314449][ T8895] can0: slcan on ttyS3. [ 132.359266][ T8902] loop4: detected capacity change from 0 to 1024 [ 132.375975][ T8895] can0 (unregistered): slcan off ttyS3. [ 132.386190][ T8902] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 132.396271][ T6161] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.407480][ T29] audit: type=1326 audit(2000000569.516:33171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8901 comm="syz.4.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96360efc9 code=0x7ffc0000 [ 132.431126][ T29] audit: type=1326 audit(2000000569.516:33172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8901 comm="syz.4.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96360efc9 code=0x7ffc0000 [ 132.468256][ T29] audit: type=1326 audit(2000000569.566:33173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8901 comm="syz.4.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa96360efc9 code=0x7ffc0000 [ 132.491906][ T29] audit: type=1326 audit(2000000569.566:33174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8901 comm="syz.4.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96360efc9 code=0x7ffc0000 [ 132.515454][ T29] audit: type=1326 audit(2000000569.566:33175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8901 comm="syz.4.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96360efc9 code=0x7ffc0000 [ 132.539205][ T29] audit: type=1326 audit(2000000569.566:33176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8901 comm="syz.4.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa96360efc9 code=0x7ffc0000 [ 132.562730][ T29] audit: type=1326 audit(2000000569.566:33177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8901 comm="syz.4.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96360efc9 code=0x7ffc0000 [ 132.586251][ T29] audit: type=1326 audit(2000000569.566:33178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8901 comm="syz.4.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fa96360efc9 code=0x7ffc0000 [ 132.650203][ T8915] loop5: detected capacity change from 0 to 4096 [ 132.692396][ T8915] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.738026][ T5119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.819012][ T8937] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 132.917937][ T8942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1801'. [ 132.936281][ T8944] loop6: detected capacity change from 0 to 1024 [ 133.104262][ T8944] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.159226][ T8963] tmpfs: Cannot disable swap on remount [ 133.166180][ T6161] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.203459][ T8965] netlink: 'syz.4.1810': attribute type 28 has an invalid length. [ 133.211490][ T8965] netlink: 'syz.4.1810': attribute type 4 has an invalid length. [ 133.219288][ T8965] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1810'. [ 133.253987][ T8965] loop4: detected capacity change from 0 to 512 [ 133.281140][ T8965] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 133.289353][ T8965] EXT4-fs (loop4): orphan cleanup on readonly fs [ 133.297710][ T8965] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.1810: corrupted inode contents [ 133.309845][ T8965] EXT4-fs (loop4): Remounting filesystem read-only [ 133.316484][ T8965] EXT4-fs (loop4): 1 truncate cleaned up [ 133.322322][ T4994] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 133.332899][ T4994] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 133.343920][ T4994] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 133.355244][ T8965] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 133.421659][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.521956][ T8990] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1813'. [ 133.521981][ T8990] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1813'. [ 133.555928][ T8992] loop4: detected capacity change from 0 to 128 [ 133.571710][ T8992] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 133.571731][ T8992] FAT-fs (loop4): Filesystem has been set read-only [ 133.571743][ T8992] syz.4.1820: attempt to access beyond end of device [ 133.571743][ T8992] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 133.571778][ T8992] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 133.571813][ T8992] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 133.571927][ T8992] syz.4.1820: attempt to access beyond end of device [ 133.571927][ T8992] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 133.571972][ T8992] syz.4.1820: attempt to access beyond end of device [ 133.571972][ T8992] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 133.572013][ T8992] syz.4.1820: attempt to access beyond end of device [ 133.572013][ T8992] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 133.572078][ T8992] syz.4.1820: attempt to access beyond end of device [ 133.572078][ T8992] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 133.572127][ T8992] syz.4.1820: attempt to access beyond end of device [ 133.572127][ T8992] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 133.572191][ T8992] syz.4.1820: attempt to access beyond end of device [ 133.572191][ T8992] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 133.572283][ T8992] syz.4.1820: attempt to access beyond end of device [ 133.572283][ T8992] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 134.054622][ T9029] loop4: detected capacity change from 0 to 512 [ 134.133545][ T9035] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1833'. [ 134.133564][ T9035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1833'. [ 134.270634][ T9042] loop5: detected capacity change from 0 to 128 [ 134.301133][ T9042] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 134.309122][ T9042] FAT-fs (loop5): Filesystem has been set read-only [ 134.322821][ T9042] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 134.330704][ T9042] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 134.395354][ T9054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1840'. [ 134.429949][ T9054] FAULT_INJECTION: forcing a failure. [ 134.429949][ T9054] name failslab, interval 1, probability 0, space 0, times 0 [ 134.442737][ T9054] CPU: 1 UID: 0 PID: 9054 Comm: syz.0.1840 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 134.442776][ T9054] Tainted: [W]=WARN [ 134.442784][ T9054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 134.442799][ T9054] Call Trace: [ 134.442806][ T9054] [ 134.442815][ T9054] __dump_stack+0x1d/0x30 [ 134.442952][ T9054] dump_stack_lvl+0xe8/0x140 [ 134.442976][ T9054] dump_stack+0x15/0x1b [ 134.442994][ T9054] should_fail_ex+0x265/0x280 [ 134.443014][ T9054] should_failslab+0x8c/0xb0 [ 134.443046][ T9054] kmem_cache_alloc_noprof+0x50/0x480 [ 134.443160][ T9054] ? skb_clone+0x151/0x1f0 [ 134.443182][ T9054] skb_clone+0x151/0x1f0 [ 134.443260][ T9054] __netlink_deliver_tap+0x2c9/0x500 [ 134.443297][ T9054] netlink_unicast+0x66b/0x690 [ 134.443334][ T9054] netlink_sendmsg+0x58b/0x6b0 [ 134.443382][ T9054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.443511][ T9054] __sock_sendmsg+0x145/0x180 [ 134.443537][ T9054] ____sys_sendmsg+0x31e/0x4e0 [ 134.443575][ T9054] ___sys_sendmsg+0x17b/0x1d0 [ 134.443691][ T9054] __x64_sys_sendmsg+0xd4/0x160 [ 134.443812][ T9054] x64_sys_call+0x191e/0x3000 [ 134.443847][ T9054] do_syscall_64+0xd2/0x200 [ 134.443934][ T9054] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 134.443967][ T9054] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 134.444041][ T9054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.444138][ T9054] RIP: 0033:0x7f7d32abefc9 [ 134.444152][ T9054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.444239][ T9054] RSP: 002b:00007f7d3151f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.444262][ T9054] RAX: ffffffffffffffda RBX: 00007f7d32d15fa0 RCX: 00007f7d32abefc9 [ 134.444274][ T9054] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 134.444287][ T9054] RBP: 00007f7d3151f090 R08: 0000000000000000 R09: 0000000000000000 [ 134.444301][ T9054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.444316][ T9054] R13: 00007f7d32d16038 R14: 00007f7d32d15fa0 R15: 00007ffe8706dd58 [ 134.444367][ T9054] [ 134.444389][ T9054] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1840'. [ 134.476942][ T9056] lo speed is unknown, defaulting to 1000 [ 134.672720][ T9056] lo speed is unknown, defaulting to 1000 [ 134.758310][ T9069] loop6: detected capacity change from 0 to 512 [ 134.772528][ T9069] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 135.010011][ T9090] FAULT_INJECTION: forcing a failure. [ 135.010011][ T9090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.023262][ T9090] CPU: 1 UID: 0 PID: 9090 Comm: syz.6.1852 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 135.023376][ T9090] Tainted: [W]=WARN [ 135.023383][ T9090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 135.023395][ T9090] Call Trace: [ 135.023400][ T9090] [ 135.023407][ T9090] __dump_stack+0x1d/0x30 [ 135.023501][ T9090] dump_stack_lvl+0xe8/0x140 [ 135.023525][ T9090] dump_stack+0x15/0x1b [ 135.023542][ T9090] should_fail_ex+0x265/0x280 [ 135.023562][ T9090] should_fail+0xb/0x20 [ 135.023577][ T9090] should_fail_usercopy+0x1a/0x20 [ 135.023676][ T9090] _copy_to_user+0x20/0xa0 [ 135.023707][ T9090] simple_read_from_buffer+0xb5/0x130 [ 135.023736][ T9090] proc_fail_nth_read+0x10e/0x150 [ 135.023774][ T9090] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 135.023812][ T9090] vfs_read+0x1a8/0x770 [ 135.023973][ T9090] ? __rcu_read_unlock+0x4f/0x70 [ 135.024004][ T9090] ? __fget_files+0x184/0x1c0 [ 135.024048][ T9090] ksys_read+0xda/0x1a0 [ 135.024082][ T9090] __x64_sys_read+0x40/0x50 [ 135.024115][ T9090] x64_sys_call+0x27c0/0x3000 [ 135.024140][ T9090] do_syscall_64+0xd2/0x200 [ 135.024164][ T9090] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 135.024281][ T9090] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 135.024319][ T9090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.024345][ T9090] RIP: 0033:0x7fba65ffd9dc [ 135.024361][ T9090] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 135.024406][ T9090] RSP: 002b:00007fba64a5f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 135.024427][ T9090] RAX: ffffffffffffffda RBX: 00007fba66255fa0 RCX: 00007fba65ffd9dc [ 135.024443][ T9090] RDX: 000000000000000f RSI: 00007fba64a5f0a0 RDI: 0000000000000004 [ 135.024463][ T9090] RBP: 00007fba64a5f090 R08: 0000000000000000 R09: 0000000000000000 [ 135.024475][ T9090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.024486][ T9090] R13: 00007fba66256038 R14: 00007fba66255fa0 R15: 00007fff481c1988 [ 135.024567][ T9090] [ 135.381415][ T9125] loop5: detected capacity change from 0 to 512 [ 135.381953][ T9125] ext2: Unknown parameter 'smackfstransmute' [ 135.736890][ T9150] siw: device registration error -23 [ 135.782207][ T9150] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.782527][ T9150] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.817094][ T9150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.820000][ T9150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.907616][ T310] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.907698][ T310] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.907733][ T310] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.907763][ T310] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.907862][ T310] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.907893][ T310] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.907940][ T310] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.907972][ T310] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.311692][ T9176] FAULT_INJECTION: forcing a failure. [ 136.311692][ T9176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.353443][ T9176] CPU: 1 UID: 0 PID: 9176 Comm: wÞ£ÿ Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 136.353609][ T9176] Tainted: [W]=WARN [ 136.353616][ T9176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 136.353629][ T9176] Call Trace: [ 136.353636][ T9176] [ 136.353643][ T9176] __dump_stack+0x1d/0x30 [ 136.353665][ T9176] dump_stack_lvl+0xe8/0x140 [ 136.353688][ T9176] dump_stack+0x15/0x1b [ 136.353707][ T9176] should_fail_ex+0x265/0x280 [ 136.353756][ T9176] should_fail+0xb/0x20 [ 136.353773][ T9176] should_fail_usercopy+0x1a/0x20 [ 136.353794][ T9176] _copy_from_iter+0xd2/0xe80 [ 136.353942][ T9176] ? __build_skb_around+0x1ab/0x200 [ 136.353972][ T9176] ? __alloc_skb+0x223/0x320 [ 136.354003][ T9176] netlink_sendmsg+0x471/0x6b0 [ 136.354025][ T9176] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.354044][ T9176] __sock_sendmsg+0x145/0x180 [ 136.354154][ T9176] ____sys_sendmsg+0x31e/0x4e0 [ 136.354190][ T9176] ___sys_sendmsg+0x17b/0x1d0 [ 136.354237][ T9176] __x64_sys_sendmsg+0xd4/0x160 [ 136.354303][ T9176] x64_sys_call+0x191e/0x3000 [ 136.354327][ T9176] do_syscall_64+0xd2/0x200 [ 136.354346][ T9176] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 136.354375][ T9176] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 136.354457][ T9176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.354486][ T9176] RIP: 0033:0x7f6a89d5efc9 [ 136.354500][ T9176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.354519][ T9176] RSP: 002b:00007f6a887c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.354538][ T9176] RAX: ffffffffffffffda RBX: 00007f6a89fb5fa0 RCX: 00007f6a89d5efc9 [ 136.354551][ T9176] RDX: 0000000000000004 RSI: 0000200000000440 RDI: 0000000000000004 [ 136.354564][ T9176] RBP: 00007f6a887c7090 R08: 0000000000000000 R09: 0000000000000000 [ 136.354576][ T9176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.354666][ T9176] R13: 00007f6a89fb6038 R14: 00007f6a89fb5fa0 R15: 00007ffc5af83078 [ 136.354685][ T9176] [ 136.680967][ T9197] loop5: detected capacity change from 0 to 1024 [ 136.712301][ T9197] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.789941][ T5119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.962022][ T9209] loop4: detected capacity change from 0 to 512 [ 137.000342][ T9209] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.088316][ T9216] __nla_validate_parse: 7 callbacks suppressed [ 137.088331][ T9216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1893'. [ 137.199016][ T29] kauditd_printk_skb: 936 callbacks suppressed [ 137.199030][ T29] audit: type=1326 audit(2000000574.286:34109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9213 comm="syz.1.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a89d5efc9 code=0x7ffc0000 [ 137.228722][ T29] audit: type=1326 audit(2000000574.286:34110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9213 comm="syz.1.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a89d5efc9 code=0x7ffc0000 [ 137.252477][ T29] audit: type=1326 audit(2000000574.286:34111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9213 comm="syz.1.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a89d5efc9 code=0x7ffc0000 [ 137.276217][ T29] audit: type=1326 audit(2000000574.286:34112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9213 comm="syz.1.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a89d5efc9 code=0x7ffc0000 [ 137.299823][ T29] audit: type=1326 audit(2000000574.286:34113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9213 comm="syz.1.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a89d5efc9 code=0x7ffc0000 [ 137.323420][ T29] audit: type=1326 audit(2000000574.286:34114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9213 comm="syz.1.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a89d5efc9 code=0x7ffc0000 [ 137.346944][ T29] audit: type=1326 audit(2000000574.286:34115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9213 comm="syz.1.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a89d5efc9 code=0x7ffc0000 [ 137.370753][ T29] audit: type=1326 audit(2000000574.296:34116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9213 comm="syz.1.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6a89d5efc9 code=0x7ffc0000 [ 137.394210][ T29] audit: type=1326 audit(2000000574.296:34117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9213 comm="syz.1.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a89d5efc9 code=0x7ffc0000 [ 137.417866][ T29] audit: type=1326 audit(2000000574.296:34118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9213 comm="syz.1.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f6a89d5efc9 code=0x7ffc0000 [ 137.446709][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.531129][ T9232] loop6: detected capacity change from 0 to 512 [ 137.653205][ T9232] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 137.706441][ T9228] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 138.317269][ T9232] bio_check_eod: 1153 callbacks suppressed [ 138.317296][ T9232] syz.6.1902: attempt to access beyond end of device [ 138.317296][ T9232] loop6: rw=2049, sector=1128, nr_sectors = 8 limit=512 [ 138.442976][ T9232] syz.6.1902: attempt to access beyond end of device [ 138.442976][ T9232] loop6: rw=0, sector=516, nr_sectors = 4 limit=512 [ 138.567547][ T9280] loop6: detected capacity change from 0 to 1024 [ 138.620922][ T9280] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.627657][ T9288] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1916'. [ 138.730460][ T6161] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.791513][ T3303] printk: udevd: 3 output lines suppressed due to ratelimiting [ 138.926556][ T9308] FAULT_INJECTION: forcing a failure. [ 138.926556][ T9308] name failslab, interval 1, probability 0, space 0, times 0 [ 138.939296][ T9308] CPU: 1 UID: 0 PID: 9308 Comm: syz.1.1924 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 138.939333][ T9308] Tainted: [W]=WARN [ 138.939339][ T9308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 138.939351][ T9308] Call Trace: [ 138.939358][ T9308] [ 138.939365][ T9308] __dump_stack+0x1d/0x30 [ 138.939387][ T9308] dump_stack_lvl+0xe8/0x140 [ 138.939423][ T9308] dump_stack+0x15/0x1b [ 138.939444][ T9308] should_fail_ex+0x265/0x280 [ 138.939467][ T9308] should_failslab+0x8c/0xb0 [ 138.939501][ T9308] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 138.939612][ T9308] ? __alloc_skb+0x101/0x320 [ 138.939647][ T9308] __alloc_skb+0x101/0x320 [ 138.939681][ T9308] alloc_skb_with_frags+0x7d/0x470 [ 138.939715][ T9308] ? obj_cgroup_charge_account+0x122/0x1a0 [ 138.939797][ T9308] ? security_inode_alloc+0x37/0x100 [ 138.939824][ T9308] ? __rcu_read_unlock+0x4f/0x70 [ 138.939899][ T9308] sock_alloc_send_pskb+0x430/0x4e0 [ 138.939924][ T9308] unix_dgram_sendmsg+0x380/0xfd0 [ 138.939963][ T9308] ? selinux_socket_sendmsg+0x175/0x1b0 [ 138.939999][ T9308] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 138.940066][ T9308] __sock_sendmsg+0x145/0x180 [ 138.940091][ T9308] ____sys_sendmsg+0x31e/0x4e0 [ 138.940127][ T9308] ___sys_sendmsg+0x17b/0x1d0 [ 138.940328][ T9308] __x64_sys_sendmsg+0xd4/0x160 [ 138.940354][ T9308] x64_sys_call+0x191e/0x3000 [ 138.940382][ T9308] do_syscall_64+0xd2/0x200 [ 138.940400][ T9308] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 138.940428][ T9308] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 138.940478][ T9308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.940501][ T9308] RIP: 0033:0x7f6a89d5efc9 [ 138.940518][ T9308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.940540][ T9308] RSP: 002b:00007f6a887c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.940572][ T9308] RAX: ffffffffffffffda RBX: 00007f6a89fb5fa0 RCX: 00007f6a89d5efc9 [ 138.940634][ T9308] RDX: 0000000000000000 RSI: 0000200000000980 RDI: 0000000000000003 [ 138.940649][ T9308] RBP: 00007f6a887c7090 R08: 0000000000000000 R09: 0000000000000000 [ 138.940662][ T9308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.940676][ T9308] R13: 00007f6a89fb6038 R14: 00007f6a89fb5fa0 R15: 00007ffc5af83078 [ 138.940698][ T9308] [ 139.252468][ T9311] lo speed is unknown, defaulting to 1000 [ 139.258873][ T9311] lo speed is unknown, defaulting to 1000 [ 139.373107][ T9303] loop6: detected capacity change from 0 to 512 [ 139.480779][ T9303] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.1920: bad orphan inode 11862016 [ 139.488990][ T9303] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 139.489151][ T9303] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.765635][ T9333] loop4: detected capacity change from 0 to 2048 [ 139.801807][ T9333] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.823342][ T6161] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 139.824473][ T9333] EXT4-fs error (device loop4): ext4_ext_precache:632: inode #2: comm syz.4.1928: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 139.877057][ T9348] FAULT_INJECTION: forcing a failure. [ 139.877057][ T9348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.890191][ T9348] CPU: 0 UID: 0 PID: 9348 Comm: syz.6.1933 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 139.890228][ T9348] Tainted: [W]=WARN [ 139.890234][ T9348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 139.890248][ T9348] Call Trace: [ 139.890254][ T9348] [ 139.890262][ T9348] __dump_stack+0x1d/0x30 [ 139.890288][ T9348] dump_stack_lvl+0xe8/0x140 [ 139.890380][ T9348] dump_stack+0x15/0x1b [ 139.890401][ T9348] should_fail_ex+0x265/0x280 [ 139.890424][ T9348] should_fail+0xb/0x20 [ 139.890443][ T9348] should_fail_usercopy+0x1a/0x20 [ 139.890467][ T9348] _copy_from_iter+0xd2/0xe80 [ 139.890491][ T9348] ? __build_skb_around+0x1ab/0x200 [ 139.890589][ T9348] ? __alloc_skb+0x223/0x320 [ 139.890619][ T9348] netlink_sendmsg+0x471/0x6b0 [ 139.890640][ T9348] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.890732][ T9348] __sock_sendmsg+0x145/0x180 [ 139.890761][ T9348] ____sys_sendmsg+0x31e/0x4e0 [ 139.890878][ T9348] ___sys_sendmsg+0x17b/0x1d0 [ 139.890930][ T9348] __x64_sys_sendmsg+0xd4/0x160 [ 139.890956][ T9348] x64_sys_call+0x191e/0x3000 [ 139.891022][ T9348] do_syscall_64+0xd2/0x200 [ 139.891044][ T9348] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 139.891078][ T9348] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 139.891114][ T9348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.891162][ T9348] RIP: 0033:0x7fba65ffefc9 [ 139.891179][ T9348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.891200][ T9348] RSP: 002b:00007fba64a5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.891222][ T9348] RAX: ffffffffffffffda RBX: 00007fba66255fa0 RCX: 00007fba65ffefc9 [ 139.891238][ T9348] RDX: 0000000020000050 RSI: 00002000000002c0 RDI: 0000000000000003 [ 139.891252][ T9348] RBP: 00007fba64a5f090 R08: 0000000000000000 R09: 0000000000000000 [ 139.891265][ T9348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.891277][ T9348] R13: 00007fba66256038 R14: 00007fba66255fa0 R15: 00007fff481c1988 [ 139.891304][ T9348] [ 139.893197][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.899287][ T9344] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 139.942810][ T9353] loop6: detected capacity change from 0 to 128 [ 140.140046][ T9353] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 140.147952][ T9353] FAT-fs (loop6): Filesystem has been set read-only [ 140.157153][ T9353] syz.6.1937: attempt to access beyond end of device [ 140.157153][ T9353] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 140.171841][ T9353] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 140.179843][ T9353] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 140.209942][ T9353] syz.6.1937: attempt to access beyond end of device [ 140.209942][ T9353] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 140.654142][ T9399] loop6: detected capacity change from 0 to 1024 [ 140.661951][ T9399] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 140.673093][ T9399] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 140.683653][ T9399] JBD2: no valid journal superblock found [ 140.689592][ T9399] EXT4-fs (loop6): Could not load journal inode [ 140.721681][ T3373] hid_parser_main: 9 callbacks suppressed [ 140.721697][ T3373] hid-generic 0004:0000:0003.0002: unknown main item tag 0x0 [ 140.734840][ T3373] hid-generic 0004:0000:0003.0002: unknown main item tag 0x0 [ 140.742275][ T3373] hid-generic 0004:0000:0003.0002: unknown main item tag 0x0 [ 140.750548][ T3373] hid-generic 0004:0000:0003.0002: unknown main item tag 0x0 [ 140.758180][ T3373] hid-generic 0004:0000:0003.0002: unknown main item tag 0x0 [ 140.765782][ T3373] hid-generic 0004:0000:0003.0002: unknown main item tag 0x0 [ 140.773287][ T3373] hid-generic 0004:0000:0003.0002: unknown main item tag 0x0 [ 140.780680][ T3373] hid-generic 0004:0000:0003.0002: unknown main item tag 0x0 [ 140.788114][ T3373] hid-generic 0004:0000:0003.0002: unknown main item tag 0x0 [ 140.795605][ T3373] hid-generic 0004:0000:0003.0002: unknown main item tag 0x0 [ 140.803742][ T3373] hid-generic 0004:0000:0003.0002: hidraw0: HID v8.00 Device [syz1] on syz0 [ 140.866537][ T9410] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 141.126989][ T9442] loop5: detected capacity change from 0 to 2048 [ 141.153708][ T9442] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.169965][ T9442] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.215047][ T9455] FAULT_INJECTION: forcing a failure. [ 141.215047][ T9455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.228164][ T9455] CPU: 0 UID: 0 PID: 9455 Comm: syz.4.1960 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 141.228223][ T9455] Tainted: [W]=WARN [ 141.228231][ T9455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 141.228245][ T9455] Call Trace: [ 141.228253][ T9455] [ 141.228261][ T9455] __dump_stack+0x1d/0x30 [ 141.228287][ T9455] dump_stack_lvl+0xe8/0x140 [ 141.228318][ T9455] dump_stack+0x15/0x1b [ 141.228346][ T9455] should_fail_ex+0x265/0x280 [ 141.228369][ T9455] should_fail+0xb/0x20 [ 141.228384][ T9455] should_fail_usercopy+0x1a/0x20 [ 141.228404][ T9455] _copy_to_user+0x20/0xa0 [ 141.228430][ T9455] simple_read_from_buffer+0xb5/0x130 [ 141.228509][ T9455] proc_fail_nth_read+0x10e/0x150 [ 141.228548][ T9455] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 141.228645][ T9455] vfs_read+0x1a8/0x770 [ 141.228748][ T9455] ? __rcu_read_unlock+0x4f/0x70 [ 141.228777][ T9455] ? __fget_files+0x184/0x1c0 [ 141.228858][ T9455] ksys_read+0xda/0x1a0 [ 141.228883][ T9455] __x64_sys_read+0x40/0x50 [ 141.228908][ T9455] x64_sys_call+0x27c0/0x3000 [ 141.228934][ T9455] do_syscall_64+0xd2/0x200 [ 141.229032][ T9455] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 141.229064][ T9455] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 141.229124][ T9455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.229149][ T9455] RIP: 0033:0x7fa96360d9dc [ 141.229176][ T9455] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 141.229198][ T9455] RSP: 002b:00007fa96206f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 141.229221][ T9455] RAX: ffffffffffffffda RBX: 00007fa963865fa0 RCX: 00007fa96360d9dc [ 141.229236][ T9455] RDX: 000000000000000f RSI: 00007fa96206f0a0 RDI: 0000000000000007 [ 141.229251][ T9455] RBP: 00007fa96206f090 R08: 0000000000000000 R09: 0000000000000000 [ 141.229266][ T9455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.229281][ T9455] R13: 00007fa963866038 R14: 00007fa963865fa0 R15: 00007ffce7f6c3b8 [ 141.229373][ T9455] [ 141.510051][ T9469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1964'. [ 141.519173][ T9469] netlink: 'syz.4.1964': attribute type 15 has an invalid length. [ 141.526978][ T9469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1964'. [ 141.554575][ T9472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.563359][ T9472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.572284][ T9474] --map-set only usable from mangle table [ 141.572783][ T9472] x_tables: duplicate underflow at hook 3 [ 141.583796][ T310] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.592339][ T310] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.600658][ T310] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.608865][ T310] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.676730][ T9479] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1967'. [ 141.686188][ T9479] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1967'. [ 141.822383][ T9487] loop4: detected capacity change from 0 to 1024 [ 141.840646][ T9487] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.885101][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.918025][ T7742] Bluetooth: hci0: Frame reassembly failed (-84) [ 141.925113][ T9493] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1970'. [ 141.934811][ T9493] Bluetooth: hci0: Frame reassembly failed (-90) [ 142.477311][ T9523] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 142.577489][ T9531] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1980'. [ 142.608306][ T9534] FAULT_INJECTION: forcing a failure. [ 142.608306][ T9534] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 142.608342][ T9534] CPU: 0 UID: 0 PID: 9534 Comm: syz.5.1981 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 142.608429][ T9534] Tainted: [W]=WARN [ 142.608440][ T9534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 142.608454][ T9534] Call Trace: [ 142.608460][ T9534] [ 142.608467][ T9534] __dump_stack+0x1d/0x30 [ 142.608492][ T9534] dump_stack_lvl+0xe8/0x140 [ 142.608542][ T9534] dump_stack+0x15/0x1b [ 142.608579][ T9534] should_fail_ex+0x265/0x280 [ 142.608602][ T9534] should_fail_alloc_page+0xf2/0x100 [ 142.608638][ T9534] __alloc_frozen_pages_noprof+0xff/0x360 [ 142.608683][ T9534] alloc_pages_mpol+0xb3/0x260 [ 142.608761][ T9534] vma_alloc_folio_noprof+0x1aa/0x300 [ 142.608788][ T9534] handle_mm_fault+0xec2/0x2be0 [ 142.608893][ T9534] ? __rcu_read_lock+0x37/0x50 [ 142.608920][ T9534] ? __pte_offset_map_lock+0x1d4/0x230 [ 142.609027][ T9534] __get_user_pages+0x102a/0x1ed0 [ 142.609059][ T9534] __mm_populate+0x243/0x3a0 [ 142.609084][ T9534] do_mlock+0x471/0x520 [ 142.609190][ T9534] ? fput+0x8f/0xc0 [ 142.609216][ T9534] ? ksys_write+0x192/0x1a0 [ 142.609260][ T9534] __x64_sys_mlock2+0x71/0x90 [ 142.609295][ T9534] x64_sys_call+0x197c/0x3000 [ 142.609321][ T9534] do_syscall_64+0xd2/0x200 [ 142.609361][ T9534] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 142.609420][ T9534] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 142.609457][ T9534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.609478][ T9534] RIP: 0033:0x7f23147fefc9 [ 142.609495][ T9534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.609595][ T9534] RSP: 002b:00007f231325f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 142.609616][ T9534] RAX: ffffffffffffffda RBX: 00007f2314a55fa0 RCX: 00007f23147fefc9 [ 142.609642][ T9534] RDX: 0000000000000000 RSI: 0000000000009000 RDI: 0000200000ff5000 [ 142.609656][ T9534] RBP: 00007f231325f090 R08: 0000000000000000 R09: 0000000000000000 [ 142.609671][ T9534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 142.609685][ T9534] R13: 00007f2314a56038 R14: 00007f2314a55fa0 R15: 00007ffccee570d8 [ 142.609708][ T9534] [ 143.210208][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 143.210278][ T29] audit: type=1326 audit(2000000580.316:34242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9547 comm="syz.0.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d32abefc9 code=0x7ffc0000 [ 143.240064][ T29] audit: type=1326 audit(2000000580.316:34243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9547 comm="syz.0.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f7d32abefc9 code=0x7ffc0000 [ 143.263634][ T29] audit: type=1326 audit(2000000580.316:34244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9547 comm="syz.0.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d32abefc9 code=0x7ffc0000 [ 143.287225][ T29] audit: type=1326 audit(2000000580.316:34245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9547 comm="syz.0.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f7d32abefc9 code=0x7ffc0000 [ 143.310762][ T29] audit: type=1400 audit(2000000580.316:34246): avc: denied { setcheckreqprot } for pid=9547 comm="syz.0.1986" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 143.331428][ T29] audit: type=1326 audit(2000000580.316:34247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9547 comm="syz.0.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d32abefc9 code=0x7ffc0000 [ 143.354932][ T29] audit: type=1326 audit(2000000580.316:34248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9547 comm="syz.0.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d32abefc9 code=0x7ffc0000 [ 143.493858][ T29] audit: type=1326 audit(2000000580.596:34249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9553 comm="syz.5.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23147fefc9 code=0x7ffc0000 [ 143.517607][ T29] audit: type=1326 audit(2000000580.596:34250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9553 comm="syz.5.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23147fefc9 code=0x7ffc0000 [ 143.541234][ T29] audit: type=1326 audit(2000000580.596:34251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9553 comm="syz.5.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23147fefc9 code=0x7ffc0000 [ 143.570758][ T9554] loop5: detected capacity change from 0 to 512 [ 143.579232][ T9554] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 143.592198][ T9554] EXT4-fs (loop5): 1 truncate cleaned up [ 143.598758][ T9554] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.762827][ T5119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.797243][ T9561] loop5: detected capacity change from 0 to 512 [ 143.819568][ T9561] EXT4-fs: Ignoring removed nomblk_io_submit option [ 143.834164][ T9561] ext4: Unknown parameter 'hash' [ 143.927781][ T9572] loop6: detected capacity change from 0 to 128 [ 143.938403][ T9572] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 143.946316][ T9572] FAT-fs (loop6): Filesystem has been set read-only [ 143.953208][ T9572] syz.6.1996: attempt to access beyond end of device [ 143.953208][ T9572] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 143.967620][ T9572] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 143.975583][ T9572] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 143.983945][ T3723] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 143.993372][ T9572] syz.6.1996: attempt to access beyond end of device [ 143.993372][ T9572] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 144.006849][ T9572] syz.6.1996: attempt to access beyond end of device [ 144.006849][ T9572] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 144.020454][ T9572] syz.6.1996: attempt to access beyond end of device [ 144.020454][ T9572] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 144.164347][ T9595] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2001'. [ 144.288302][ T9610] loop6: detected capacity change from 0 to 512 [ 144.312838][ T9613] loop5: detected capacity change from 0 to 512 [ 144.330474][ T9610] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 144.367596][ T9619] loop4: detected capacity change from 0 to 512 [ 144.390162][ T9613] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.421794][ T9613] ext4 filesystem being mounted at /276/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.434098][ T9623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2012'. [ 144.448373][ T9619] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 144.524736][ T9610] syz.6.2004: attempt to access beyond end of device [ 144.524736][ T9610] loop6: rw=2049, sector=1128, nr_sectors = 8 limit=512 [ 144.555260][ T9639] FAULT_INJECTION: forcing a failure. [ 144.555260][ T9639] name failslab, interval 1, probability 0, space 0, times 0 [ 144.568030][ T9639] CPU: 1 UID: 0 PID: 9639 Comm: syz.0.2014 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 144.568062][ T9639] Tainted: [W]=WARN [ 144.568070][ T9639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 144.568084][ T9639] Call Trace: [ 144.568092][ T9639] [ 144.568101][ T9639] __dump_stack+0x1d/0x30 [ 144.568155][ T9639] dump_stack_lvl+0xe8/0x140 [ 144.568199][ T9639] dump_stack+0x15/0x1b [ 144.568225][ T9639] should_fail_ex+0x265/0x280 [ 144.568315][ T9639] ? igmpv3_add_delrec+0x89/0x2e0 [ 144.568346][ T9639] should_failslab+0x8c/0xb0 [ 144.568375][ T9639] __kmalloc_cache_noprof+0x4c/0x4a0 [ 144.568411][ T9639] ? __mod_timer+0x86/0x840 [ 144.568484][ T9639] igmpv3_add_delrec+0x89/0x2e0 [ 144.568518][ T9639] __igmp_group_dropped+0x409/0x460 [ 144.568613][ T9639] ? mod_timer+0x1f/0x30 [ 144.568632][ T9639] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 144.568696][ T9639] __ip_mc_dec_group+0x194/0x3d0 [ 144.568742][ T9639] ip_mc_drop_socket+0x16c/0x1e0 [ 144.568776][ T9639] inet_release+0x31/0xf0 [ 144.568798][ T9639] sock_close+0x6b/0x150 [ 144.568899][ T9639] ? __pfx_sock_close+0x10/0x10 [ 144.568929][ T9639] __fput+0x29b/0x650 [ 144.568951][ T9639] ____fput+0x1c/0x30 [ 144.569012][ T9639] task_work_run+0x131/0x1a0 [ 144.569044][ T9639] exit_to_user_mode_loop+0xed/0x110 [ 144.569074][ T9639] do_syscall_64+0x1d6/0x200 [ 144.569149][ T9639] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 144.569176][ T9639] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 144.569282][ T9639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.569311][ T9639] RIP: 0033:0x7f7d32abefc9 [ 144.569328][ T9639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.569349][ T9639] RSP: 002b:00007f7d3151f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 144.569436][ T9639] RAX: 0000000000000000 RBX: 00007f7d32d15fa0 RCX: 00007f7d32abefc9 [ 144.569451][ T9639] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 144.569465][ T9639] RBP: 00007f7d3151f090 R08: 0000000000000000 R09: 0000000000000000 [ 144.569480][ T9639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.569494][ T9639] R13: 00007f7d32d16038 R14: 00007f7d32d15fa0 R15: 00007ffe8706dd58 [ 144.569596][ T9639] [ 144.579932][ T5119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.585490][ T9640] syz.6.2004: attempt to access beyond end of device [ 144.585490][ T9640] loop6: rw=0, sector=516, nr_sectors = 4 limit=512 [ 144.864485][ T9644] loop5: detected capacity change from 0 to 128 [ 144.900875][ T9644] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 144.908716][ T9644] FAT-fs (loop5): Filesystem has been set read-only [ 144.915379][ T9644] syz.5.2015: attempt to access beyond end of device [ 144.915379][ T9644] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 144.929061][ T9619] syz.4.2010: attempt to access beyond end of device [ 144.929061][ T9619] loop4: rw=2049, sector=1128, nr_sectors = 8 limit=512 [ 145.004184][ T9644] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 145.012045][ T9644] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 145.020434][ T9619] syz.4.2010: attempt to access beyond end of device [ 145.020434][ T9619] loop4: rw=0, sector=516, nr_sectors = 4 limit=512 [ 145.030761][ T9653] FAULT_INJECTION: forcing a failure. [ 145.030761][ T9653] name failslab, interval 1, probability 0, space 0, times 0 [ 145.046223][ T9653] CPU: 0 UID: 0 PID: 9653 Comm: syz.6.2020 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 145.046261][ T9653] Tainted: [W]=WARN [ 145.046268][ T9653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 145.046283][ T9653] Call Trace: [ 145.046290][ T9653] [ 145.046299][ T9653] __dump_stack+0x1d/0x30 [ 145.046324][ T9653] dump_stack_lvl+0xe8/0x140 [ 145.046348][ T9653] dump_stack+0x15/0x1b [ 145.046423][ T9653] should_fail_ex+0x265/0x280 [ 145.046443][ T9653] should_failslab+0x8c/0xb0 [ 145.046471][ T9653] __kmalloc_noprof+0xa5/0x570 [ 145.046600][ T9653] ? sk_prot_alloc+0xa8/0x190 [ 145.046633][ T9653] sk_prot_alloc+0xa8/0x190 [ 145.046664][ T9653] sk_alloc+0x34/0x360 [ 145.046694][ T9653] ? __pfx_genl_release+0x10/0x10 [ 145.046813][ T9653] ? __pfx_genl_release+0x10/0x10 [ 145.046840][ T9653] netlink_create+0x32a/0x460 [ 145.046919][ T9653] ? __pfx_genl_unbind+0x10/0x10 [ 145.047026][ T9653] ? __pfx_genl_bind+0x10/0x10 [ 145.047051][ T9653] __sock_create+0x2ec/0x5b0 [ 145.047135][ T9653] __sys_socket+0xb0/0x180 [ 145.047170][ T9653] __x64_sys_socket+0x3f/0x50 [ 145.047196][ T9653] x64_sys_call+0x1147/0x3000 [ 145.047220][ T9653] do_syscall_64+0xd2/0x200 [ 145.047242][ T9653] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 145.047305][ T9653] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 145.047343][ T9653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.047369][ T9653] RIP: 0033:0x7fba66000ee7 [ 145.047386][ T9653] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.047442][ T9653] RSP: 002b:00007fba64a5dfa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 145.047461][ T9653] RAX: ffffffffffffffda RBX: 00007fba66255fa0 RCX: 00007fba66000ee7 [ 145.047474][ T9653] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 145.047487][ T9653] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 145.047501][ T9653] R10: 00002000000001c0 R11: 0000000000000286 R12: 0000000000000001 [ 145.047516][ T9653] R13: 00007fba66256038 R14: 00007fba66255fa0 R15: 00007fff481c1988 [ 145.047565][ T9653] [ 145.089031][ T9644] syz.5.2015: attempt to access beyond end of device [ 145.089031][ T9644] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 145.476358][ T9663] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 145.580722][ T9687] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2027'. [ 145.791496][ T9706] FAULT_INJECTION: forcing a failure. [ 145.791496][ T9706] name failslab, interval 1, probability 0, space 0, times 0 [ 145.804234][ T9706] CPU: 1 UID: 0 PID: 9706 Comm: syz.5.2034 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 145.804272][ T9706] Tainted: [W]=WARN [ 145.804279][ T9706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 145.804369][ T9706] Call Trace: [ 145.804375][ T9706] [ 145.804383][ T9706] __dump_stack+0x1d/0x30 [ 145.804421][ T9706] dump_stack_lvl+0xe8/0x140 [ 145.804440][ T9706] dump_stack+0x15/0x1b [ 145.804457][ T9706] should_fail_ex+0x265/0x280 [ 145.804545][ T9706] should_failslab+0x8c/0xb0 [ 145.804573][ T9706] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 145.804661][ T9706] ? __alloc_skb+0x101/0x320 [ 145.804691][ T9706] __alloc_skb+0x101/0x320 [ 145.804722][ T9706] pfkey_sendmsg+0xd7/0x900 [ 145.804815][ T9706] ? avc_has_perm+0xf7/0x180 [ 145.804839][ T9706] ? selinux_socket_sendmsg+0x175/0x1b0 [ 145.804871][ T9706] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 145.804951][ T9706] __sock_sendmsg+0x145/0x180 [ 145.804978][ T9706] ____sys_sendmsg+0x31e/0x4e0 [ 145.805077][ T9706] ___sys_sendmsg+0x17b/0x1d0 [ 145.805127][ T9706] __x64_sys_sendmsg+0xd4/0x160 [ 145.805223][ T9706] x64_sys_call+0x191e/0x3000 [ 145.805250][ T9706] do_syscall_64+0xd2/0x200 [ 145.805270][ T9706] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 145.805302][ T9706] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 145.805389][ T9706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.805409][ T9706] RIP: 0033:0x7f23147fefc9 [ 145.805424][ T9706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.805442][ T9706] RSP: 002b:00007f231325f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.805525][ T9706] RAX: ffffffffffffffda RBX: 00007f2314a55fa0 RCX: 00007f23147fefc9 [ 145.805540][ T9706] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 145.805554][ T9706] RBP: 00007f231325f090 R08: 0000000000000000 R09: 0000000000000000 [ 145.805565][ T9706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.805579][ T9706] R13: 00007f2314a56038 R14: 00007f2314a55fa0 R15: 00007ffccee570d8 [ 145.805672][ T9706] [ 145.894546][ T9709] loop4: detected capacity change from 0 to 512 [ 145.930079][ T9713] loop5: detected capacity change from 0 to 128 [ 146.040800][ T9713] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 146.048665][ T9713] FAT-fs (loop5): Filesystem has been set read-only [ 146.055477][ T9713] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 146.063348][ T9713] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 146.329778][ T9709] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.443523][ T9709] ext4 filesystem being mounted at /331/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 146.648366][ T9737] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2045'. [ 146.813403][ T9709] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 146.870322][ T9709] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 146.994181][ T9752] loop5: detected capacity change from 0 to 512 [ 147.002174][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.016008][ T9752] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 147.038053][ T9756] loop4: detected capacity change from 0 to 128 [ 147.155842][ T9756] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 147.163824][ T9756] FAT-fs (loop4): Filesystem has been set read-only [ 147.200799][ T9756] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 147.208682][ T9756] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 147.328320][ T9770] loop5: detected capacity change from 0 to 512 [ 147.346322][ T9770] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 147.364814][ T9770] EXT4-fs (loop5): 1 truncate cleaned up [ 147.371217][ T9779] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2059'. [ 147.374616][ T9770] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.523124][ T5119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.559194][ T9796] loop4: detected capacity change from 0 to 512 [ 147.586173][ T9796] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 147.613628][ T9801] loop5: detected capacity change from 0 to 1024 [ 147.649734][ T9798] FAULT_INJECTION: forcing a failure. [ 147.649734][ T9798] name failslab, interval 1, probability 0, space 0, times 0 [ 147.662419][ T9798] CPU: 0 UID: 0 PID: 9798 Comm: +}[@ Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 147.662522][ T9798] Tainted: [W]=WARN [ 147.662601][ T9798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 147.662614][ T9798] Call Trace: [ 147.662622][ T9798] [ 147.662630][ T9798] __dump_stack+0x1d/0x30 [ 147.662656][ T9798] dump_stack_lvl+0xe8/0x140 [ 147.662681][ T9798] dump_stack+0x15/0x1b [ 147.662702][ T9798] should_fail_ex+0x265/0x280 [ 147.662725][ T9798] should_failslab+0x8c/0xb0 [ 147.662804][ T9798] __kmalloc_noprof+0xa5/0x570 [ 147.662887][ T9798] ? usb_alloc_urb+0x42/0xc0 [ 147.662922][ T9798] usb_alloc_urb+0x42/0xc0 [ 147.663078][ T9798] alloc_async+0x41/0x90 [ 147.663121][ T9798] proc_do_submiturb+0x76d/0x1d20 [ 147.663216][ T9798] proc_submiturb+0x7b/0xa0 [ 147.663245][ T9798] usbdev_ioctl+0xcb6/0x1700 [ 147.663291][ T9798] ? __pfx_usbdev_ioctl+0x10/0x10 [ 147.663386][ T9798] __se_sys_ioctl+0xce/0x140 [ 147.663409][ T9798] __x64_sys_ioctl+0x43/0x50 [ 147.663456][ T9798] x64_sys_call+0x1816/0x3000 [ 147.663496][ T9798] do_syscall_64+0xd2/0x200 [ 147.663517][ T9798] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 147.663601][ T9798] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 147.663633][ T9798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.663700][ T9798] RIP: 0033:0x7f6a89d5efc9 [ 147.663718][ T9798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.663737][ T9798] RSP: 002b:00007f6a887c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 147.663757][ T9798] RAX: ffffffffffffffda RBX: 00007f6a89fb5fa0 RCX: 00007f6a89d5efc9 [ 147.663769][ T9798] RDX: 0000200000000140 RSI: 000000008038550a RDI: 0000000000000005 [ 147.663782][ T9798] RBP: 00007f6a887c7090 R08: 0000000000000000 R09: 0000000000000000 [ 147.663793][ T9798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.663805][ T9798] R13: 00007f6a89fb6038 R14: 00007f6a89fb5fa0 R15: 00007ffc5af83078 [ 147.663825][ T9798] [ 148.045610][ T9808] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 148.088812][ T9801] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.149234][ T5119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.276660][ T9823] loop5: detected capacity change from 0 to 128 [ 148.283173][ T9818] vxcan2: entered allmulticast mode [ 148.292874][ T9823] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 148.300792][ T9823] FAT-fs (loop5): Filesystem has been set read-only [ 148.307502][ T9823] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 148.315363][ T9823] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 148.423847][ T9828] lo speed is unknown, defaulting to 1000 [ 148.430169][ T9828] lo speed is unknown, defaulting to 1000 [ 148.579834][ T9831] loop6: detected capacity change from 0 to 256 [ 149.118300][ T9843] loop4: detected capacity change from 0 to 512 [ 149.135590][ T9843] EXT4-fs: Ignoring removed nobh option [ 149.173065][ T9843] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #3: comm syz.4.2079: corrupted inode contents [ 149.189101][ T9843] EXT4-fs (loop4): Remounting filesystem read-only [ 149.199531][ T9843] __quota_error: 105 callbacks suppressed [ 149.199546][ T9843] Quota error (device loop4): write_blk: dquota write failed [ 149.212809][ T9843] Quota error (device loop4): qtree_write_dquot: Error -30 occurred while creating quota [ 149.224033][ T9843] EXT4-fs (loop4): 1 truncate cleaned up [ 149.230052][ T9843] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.243330][ T9843] ext4 filesystem being mounted at /337/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.300650][ T9855] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2084'. [ 149.380744][ T29] audit: type=1326 audit(2000000586.466:34357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9856 comm="syz.5.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23147fefc9 code=0x7ffc0000 [ 149.404285][ T29] audit: type=1326 audit(2000000586.466:34358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9856 comm="syz.5.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23147fefc9 code=0x7ffc0000 [ 149.440896][ T9858] loop5: detected capacity change from 0 to 512 [ 149.457857][ T9858] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 149.511916][ T29] audit: type=1326 audit(2000000586.616:34359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9856 comm="syz.5.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23147fefc9 code=0x7ffc0000 [ 149.537206][ T9858] EXT4-fs (loop5): 1 truncate cleaned up [ 149.543763][ T9858] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.560661][ T29] audit: type=1326 audit(2000000586.636:34360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9856 comm="syz.5.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23147fefc9 code=0x7ffc0000 [ 149.589184][ T29] audit: type=1326 audit(2000000586.656:34361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9856 comm="syz.5.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f23147fefc9 code=0x7ffc0000 [ 149.612596][ T29] audit: type=1326 audit(2000000586.686:34362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9856 comm="syz.5.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23147fefc9 code=0x7ffc0000 [ 149.636150][ T29] audit: type=1326 audit(2000000586.686:34363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9856 comm="syz.5.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f23147fefc9 code=0x7ffc0000 [ 149.659939][ T29] audit: type=1326 audit(2000000586.686:34364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9856 comm="syz.5.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23147fefc9 code=0x7ffc0000 [ 149.780963][ T5119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.859380][ T9875] loop5: detected capacity change from 0 to 512 [ 149.871365][ T9879] loop6: detected capacity change from 0 to 512 [ 149.877814][ T9875] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 149.902440][ T9879] EXT4-fs (loop6): orphan cleanup on readonly fs [ 149.909401][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.928148][ T9879] EXT4-fs error (device loop6): ext4_quota_enable:7136: comm syz.6.2093: inode #218103808: comm syz.6.2093: iget: illegal inode # [ 149.949259][ T9879] EXT4-fs error (device loop6): ext4_quota_enable:7139: comm syz.6.2093: Bad quota inode: 218103808, type: 2 [ 149.966752][ T9883] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2094'. [ 150.072596][ T9879] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 150.111164][ T9883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2094'. [ 150.120075][ T9883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2094'. [ 150.129383][ T9879] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 150.136506][ T9879] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 150.145366][ T9883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2094'. [ 150.198562][ T9879] EXT4-fs error (device loop6): ext4_lookup:1791: inode #2: comm syz.6.2093: deleted inode referenced: 12 [ 150.219525][ T9879] EXT4-fs error (device loop6): ext4_lookup:1791: inode #2: comm syz.6.2093: deleted inode referenced: 12 [ 150.238310][ T9879] EXT4-fs error (device loop6): ext4_lookup:1791: inode #2: comm syz.6.2093: deleted inode referenced: 12 [ 150.252814][ T9879] EXT4-fs error (device loop6): ext4_lookup:1791: inode #2: comm syz.6.2093: deleted inode referenced: 12 [ 150.264250][ T9879] ================================================================== [ 150.272326][ T9879] BUG: KCSAN: data-race in console_flush_all / console_flush_all [ 150.280050][ T9879] [ 150.282360][ T9879] write to 0xffffffff86a23ef8 of 8 bytes by task 9895 on cpu 1: [ 150.289971][ T9879] console_flush_all+0x35b/0x6a0 [ 150.294914][ T9879] console_unlock+0xa1/0x2e0 [ 150.299493][ T9879] vprintk_emit+0x3b5/0x580 [ 150.303987][ T9879] vprintk_default+0x26/0x30 [ 150.308585][ T9879] vprintk+0x1d/0x30 [ 150.312477][ T9879] _printk+0x79/0xa0 [ 150.316369][ T9879] base_sock_release+0x3a/0x220 [ 150.321210][ T9879] sock_close+0x6b/0x150 [ 150.325442][ T9879] __fput+0x29b/0x650 [ 150.329409][ T9879] ____fput+0x1c/0x30 [ 150.333378][ T9879] task_work_run+0x131/0x1a0 [ 150.337962][ T9879] exit_to_user_mode_loop+0xed/0x110 [ 150.343244][ T9879] do_syscall_64+0x1d6/0x200 [ 150.347824][ T9879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.353706][ T9879] [ 150.356015][ T9879] read to 0xffffffff86a23ef8 of 8 bytes by task 9879 on cpu 0: [ 150.363543][ T9879] console_flush_all+0x528/0x6a0 [ 150.368477][ T9879] console_unlock+0xa1/0x2e0 [ 150.373059][ T9879] vprintk_emit+0x3b5/0x580 [ 150.377566][ T9879] vprintk_default+0x26/0x30 [ 150.382145][ T9879] vprintk+0x1d/0x30 [ 150.386038][ T9879] _printk+0x79/0xa0 [ 150.389930][ T9879] __ext4_error_inode+0x2ca/0x3f0 [ 150.394945][ T9879] ext4_lookup+0x24d/0x390 [ 150.399355][ T9879] __lookup_slow+0x193/0x250 [ 150.403930][ T9879] lookup_slow+0x3c/0x60 [ 150.408158][ T9879] walk_component+0x1ec/0x220 [ 150.412833][ T9879] path_lookupat+0xfe/0x2a0 [ 150.417335][ T9879] filename_lookup+0x147/0x340 [ 150.422099][ T9879] vfs_statx+0x9d/0x390 [ 150.426252][ T9879] __se_sys_newlstat+0x69/0x280 [ 150.431103][ T9879] __x64_sys_newlstat+0x31/0x40 [ 150.435955][ T9879] x64_sys_call+0x1b88/0x3000 [ 150.440624][ T9879] do_syscall_64+0xd2/0x200 [ 150.445118][ T9879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.450999][ T9879] [ 150.453304][ T9879] value changed: 0x000000000000181d -> 0x000000000000181e [ 150.460390][ T9879] [ 150.462721][ T9879] Reported by Kernel Concurrency Sanitizer on: [ 150.468856][ T9879] CPU: 0 UID: 0 PID: 9879 Comm: syz.6.2093 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 150.480135][ T9879] Tainted: [W]=WARN [ 150.483918][ T9879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 SYZFAIL: failed to send rpc fd=3 want=48 sent=0 n=-1 (errno 32: Broken pipe) [ 150.493958][ T9879] ================================================================== [ 150.630614][ T9898] EXT4-fs error (device loop6): ext4_lookup:1791: inode #2: comm syz.6.2093: deleted inode referenced: 12 [ 150.665161][ T9879] EXT4-fs error (device loop6): ext4_lookup:1791: inode #2: comm syz.6.2093: deleted inode referenced: 12 [ 150.724958][ T8138] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.061499][ T7772] bridge_slave_1: left allmulticast mode [ 151.067155][ T7772] bridge_slave_1: left promiscuous mode [ 151.072987][ T7772] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.100569][ T7772] bridge_slave_0: left allmulticast mode [ 151.106220][ T7772] bridge_slave_0: left promiscuous mode [ 151.111982][ T7772] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.280090][ T7772] bond1 (unregistering): (slave bridge2): Releasing active interface [ 151.370390][ T7772] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.379415][ T7772] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.388330][ T7772] bond0 (unregistering): Released all slaves [ 151.395904][ T7772] bond1 (unregistering): Released all slaves [ 151.440378][ T7772] tipc: Left network mode [ 151.501332][ T7772] hsr_slave_0: left promiscuous mode [ 151.506925][ T7772] hsr_slave_1: left promiscuous mode [ 151.512750][ T7772] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.520225][ T7772] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.546513][ T7772] team0 (unregistering): Port device team_slave_0 removed [ 151.841364][ T7772] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.851165][ T7772] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.920262][ T7772] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.930121][ T7772] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.980869][ T7772] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.990632][ T7772] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.040184][ T7772] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.049957][ T7772] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.100991][ T7772] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.160160][ T7772] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.230013][ T7772] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.270307][ T7772] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.352000][ T7772] bridge_slave_1: left allmulticast mode [ 152.357637][ T7772] bridge_slave_1: left promiscuous mode [ 152.363301][ T7772] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.370858][ T7772] bridge_slave_0: left allmulticast mode [ 152.376473][ T7772] bridge_slave_0: left promiscuous mode [ 152.382234][ T7772] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.520743][ T7772] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.530312][ T7772] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.539686][ T7772] bond0 (unregistering): Released all slaves [ 152.601248][ T7772] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.610906][ T7772] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.620442][ T7772] bond0 (unregistering): Released all slaves [ 152.628490][ T7772] bond1 (unregistering): Released all slaves [ 152.695510][ T7772] hsr_slave_0: left promiscuous mode [ 152.701098][ T7772] hsr_slave_1: left promiscuous mode [ 152.706698][ T7772] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.714079][ T7772] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.721537][ T7772] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.728978][ T7772] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.737810][ T7772] hsr_slave_0: left promiscuous mode [ 152.743569][ T7772] hsr_slave_1: left promiscuous mode [ 152.749163][ T7772] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.756525][ T7772] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.763952][ T7772] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.771338][ T7772] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.782627][ T7772] veth1_macvtap: left promiscuous mode [ 152.788123][ T7772] veth0_macvtap: left promiscuous mode [ 152.793706][ T7772] veth1_vlan: left promiscuous mode [ 152.798966][ T7772] veth0_vlan: left promiscuous mode [ 152.804520][ T7772] veth1_macvtap: left promiscuous mode [ 152.810002][ T7772] veth0_macvtap: left promiscuous mode [ 152.815562][ T7772] veth1_vlan: left promiscuous mode [ 152.863861][ T7772] pimreg3 (unregistering): left allmulticast mode [ 152.908333][ T7772] pim6reg (unregistering): left allmulticast mode [ 152.934456][ T7772] team0 (unregistering): Port device team_slave_1 removed [ 152.944353][ T7772] team0 (unregistering): Port device team_slave_0 removed [ 152.970096][ T1034] lo speed is unknown, defaulting to 1000 [ 152.975815][ T1034] infiniband syz0: ib_query_port failed (-19)