last executing test programs: 2.322685292s ago: executing program 4 (id=259): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="9febcd0018"], &(0x7f0000001f80)=""/212, 0x26, 0xd4, 0xa, 0x2}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002b2000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r4}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x60, 0x1403, 0x1, 0x70bd2c, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendto$inet6(r5, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r5, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x1cc, r6, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x26f4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @local, 0x6}}}}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffe7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xdf}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xdde9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9c4b}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe9a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4000000}, 0x89) timer_delete(0x0) 2.029654431s ago: executing program 1 (id=262): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x4}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = memfd_secret(0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000001080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r5}, &(0x7f00000008c0), &(0x7f0000000880)=r6}, 0x20) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000200)=ANY=[], 0xc0) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x1c, &(0x7f0000000080)={[{@nombcache}, {@dioread_lock}, {@nodiscard}, {@nomblk_io_submit}, {@noblock_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x44f, &(0x7f00000010c0)="$eJzs3M1vFGUYAPBnZtsiX7YifvChVtHY+NHSgsrBgxpNPGhiogc81rYQZKGG1kQI0WoMHg2Jd+PRxL/Ak16MejLxqndDQgwX0NOa2Z1pt8t2ocu2g+zvlwy873z0fZ6deXffmbfbAPrWaPZPErEjIv6IiOFGdfUOo43/rl05P/PPlfMzSdRqb/+d1Pe7euX8TLFrcdz2vDKWRqSfJ7GvTbsLZ8+dnK5W587k9YnFUx9MLJw99+yJU9PH547PnZ46cuTwockXnp96rid5ZjFd3fvx/P49r7978c2Zoxff++W7pMi/JY9VlrpucrTTxidqta5/8O1oZ1M5GSgxENalEhHZ6Rqs9//hqMTKyRuO1z4rNThgQ9Vqtdr2tTcv1YA7WBJlRwCUo/igz+5/i2WThh63hcsvN26Asryv5Utjy0Ck+T6DLfe3vTQaEUeX/v06W6LTcwgAgB75IRv/PNNu/JfG/U373Z3PDY1ExD0RsSsi7o2I3RFxX0R93wci4sF1tt86SXL9+Ce91FViNykb/72Yz22tHv8Vo78YqeS1nfX8B5NjJ6pzB/PXZCwGt2T1yQ5t/Pjq71+uta15/JctWfvFWDCP49LAltXHzE4vTt9Kzs0ufxqxd6Bd/snyTEASEXsiYm+XbZx46tv9a227cf4d9GCeqfZNxJON878ULfkXks7zkxN3RXXu4ERxVVzv198uvLVW+7eUfw9k539b2+t/Of+RpHm+dmH9bVz484s172m6vf6Hknfq5aF83UfTi4tnJiOGkjcaQTevn1o5tqgX+2f5jx1o3/93xcorsS8isov4oYh4OCIeyWN/NCIei4gDHfL/+ZXH3+8+/42V5T+7rvO/UhiK1jXtC5WTP32/qtGR9eSfnf/D9dJYvuZm3v9uJq7urmYAAAD4/0kjYkck6fhyOU3Hxxu/L787tqXV+YXFp4/Nf3h6tvEdgZEYTIsnXcNNz0Mn89v6oj7VUj+UPzf+qrK1Xh+fma/Olp089Lnta/T/zF+VsqMDNpzva0H/0v+hf+n/0L/0f+hfbfr/1jLiADZfu8//T0qIA9h8Lf1/edrvpRJiATaX+3/oX/o/9C/9H/rSwta48ZfkFTagUPx9hXLDqES3h0da/mt4xxQG84vhdonn5HS1xDclAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAHvovAAD//+qG390=") r8 = open(&(0x7f00000000c0)='.\x00', 0x48800, 0x50) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x40) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000001600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r10}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) sysinfo(&(0x7f0000000f80)=""/154) pwrite64(r9, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) syz_open_procfs$pagemap(0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001440)=""/126, 0x7e, 0x41) 2.006548423s ago: executing program 4 (id=264): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000100850000000f00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x4, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = io_uring_setup(0x7d98, &(0x7f0000000940)={0x0, 0xdf07, 0x800, 0x1, 0x8105}) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) close_range(r3, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000680)=0xde6b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x20}, &(0x7f0000000000)) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_TIOCOUTQ(r8, 0x5411, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000380)={0x0, 0x6}, 0x8) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.989775815s ago: executing program 0 (id=265): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x880) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='mm_page_free\x00', r2, 0x0, 0x8001}, 0x18) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYRESHEX], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000001580)=ANY=[@ANYRES16=r1, @ANYRESOCT=r3, @ANYRES16=0x0, @ANYBLOB="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", @ANYRES8, @ANYRES64], 0x8, 0x2fb, &(0x7f0000000a40)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x41, 0x8000010b, 0x1}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)=@qipcrtr={0x2a, 0xffffffff}, 0x80, 0x0}, 0x0) sendmsg$tipc(r6, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x5, 0x5}}, 0x10, 0x0}, 0x40000) pwritev2(r5, &(0x7f0000000340)=[{&(0x7f0000000080)="fc", 0x1}], 0x1, 0x5412, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) fdatasync(r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) vmsplice(r5, &(0x7f0000000940)=[{&(0x7f0000000540)="fbc998f0aead7845c7dcc3321853240bea38d3dfb0a51e28f0a31a3edd5790e2a2f250bf42076e5cd7412315ba4e946c5c98c53f7d06976987ed03db0275687f0e5418d696e0996207aedce57911ffd767032f6393758fdc2acc48afe586f8486924868ce8b923df3acbf3853db5d78d4fcdf5ffc984d87c4cccd8b896c891448cc78cf02d71d5bc74a4a06a2bae17c451354d8e9182bb72c1d02d131caff660d6f0e705023d47e5996d4f7d6e0651b5fd8aba786bfb2d58a2d24403f62c52b9916fce57a9c50d99", 0xc8}, {&(0x7f00000002c0)="3371d7506134701aad2ab0b120e7440938ddda84d2ba21513fe62b9283506d4361e03449964d56", 0x27}, {&(0x7f0000002640)="1f148c90fcd34aab58d351c185b832cd488c808ddf673b332108d5ba88efd5d8fc7a751c69820833b22722b4530f6fd51765e444286982a20a43d1273a4c1410241124b5a2e765c9d9819c739cae289a2b3bc1dad22d7fea206cb93e883740f1a558278aea7797665e962b10e4bbee95aa92de39529c9158ca16ec061e97df6266374d35ce3aadafc36abedddd294d83897fbd414d527f211d8698898dfd0e922ebc1a80c4a5f18383284e0399d63f1ddef3547717ab3a089230b965629e2da54f6e4154c56845bb38b7cf42aac4c78799c3aa6fe93bd3da70c28d0a21f6616d194bc962168247e31bd3bc64ccd4ef3a971ffdd108bae411d357d3504f40ac47c18a103de88f53abf5597a1d5bed51ed4d59be7c0637da84d537d3a6738d168fc9c13b1110a1652ee4d3e1113987976faa676dad69de25b9c0c2b6292cab75498cef10bb394bd7f55501a7d4532903197322391c8bf4c5f7afd2d2f9395cfe3adce04bec1a6d809910e86783d779e6ee69eb1f034d1c90eb8b698063e3c36b93b4d3828254907ae8e9adb9de57ddd9e7d1c30f8e58e4f4fb442fc657a21da6541bf207aa452854f58a9c94eca16493ee2b91c3c85ca91f02825b905132fd6ab4adba1e20bfc691c001db9addebee86e7c82ea80c474aa6fa93c5069c37a98d4b60150f7747a1d19b6bb44f55961224d242d6c06d0381aef5fadf24f1b25b6571f609e0cefe1cd69307342ec4385542ea8ea7237e8c66fd5afcaa5605d7d3594d1ba6fc91c1092e06d68fc94374ca36dc9c63fa963843133c7f4607522be7b14720cb4eb2b6a2bbff3d927cd87a6b92a1db0f407efe9b2c0b3eec4efdab4770232dffb335f0d5a01eca009458b26c2946c65d6e2a5356a0a2a2e6a3ef72ad51e268df08888656504212ad1ed472539983f99918abebd632852cbad4f32b6ceefef8f578b175beaece7de0a36305cbb7d18fddccd9d7c412756244db1d24e2553846531bae40f3107d99ae6c740d209315478cf470bd511e5cd7eee2b975cb51ec1e16637747f4fa696552a3e4c5852d17cb1d575cc9c7c3ee22043ddd52a4a4528f5d568513f404321e49e2bec8f17944654a80f77a382569c4c09a906265fa9258d0fbe8e7d2223611cbed00c99f5bf310c615e5cc94e39fc96499ea39d638502866c5101980272e103baad4261a2248671e9c576c9bb48f5711e3cc1827b3542beb4d280d52462265b809aaebfc35be7deb7cb96dca5a76569ea707e5c9fbf308016e7eccb884857583f7dc770a1cfb49d68d7267ab0f1005c9d74a80e89c26720a5451f6c3cc8886d38f271c2e856221321204a53bb65da050daddbf030594b2dac9e747585d235ec9c7b3960ad0bf24665768cbd1df9be71a11503878b447e8c90e48013839080990cd39964fb223b02da4bc5b3bf03e992ca945016bd9480ad3c89d841ebd4e8bb7f1df41e593d0e35225b22e32f7878daf9b15bc33a626fe846b40bd0cf927445f9e867fe94cc3c000dd43338dcdb5fb176725aa57ebbb081f3e5c879d304f5418b930fd5da87a26e8d4c891c775220d352c5c2f8c8c185247ed9a73432fbcc485d61b215b1142fc4f69d98f0bac43cdbbbee17e45495164797d3dc29bd131051fe11cd21ca597560298a7c1dff503cb7dd523c328513dc79888441523ab4ca381a152b6128a7836b38853ec23cf0a74d5d13a6f8d52b261d56702da465a805e35a98c49e94accf120051c3de7fb000901b93a60e7ed399f2defddbf1b14f24905ee84a3d2fcaee10074fa1f34bd66c3de83f8a5854daa1828de1a7a09096e1f3d8fae11b93d6825d7ad9f6197931f9367d416c2971eda23ff0166a63fb09035f924a8354f48eeb3f3f52891dc68d01527181351d1d66bd9247724372df732089efb2daad76eb7d9607c07234b8c525492f50bd5a2b037d77c6de7bd96f9946bf0f3f54ea9d0f262d33f67d398adf47d5e1639811cee6a12f73850acb141be0ebbbc8781d9385a18795f49d1a63a9b969f091af20a6ccdfe1b12b127e80e053e7651fc3ee671b95c63eff5dfc9b3035e874eba7a6967b66383dc95a6334534c37e7fbd36a44ccf9edd8ed5cd35bcb01f053d8f5644dc52cd609ed1d4c16c708400de30447de337102d9f5789ce2c19bb21506f6d40f86eb835526bbdebbc44395205a0272ae76fdc2a2d84563067aabff91a4fb2174df043eebef4f8bfbbf2e95a1a6b21935743417a68cc3785da98aa47495c21ea9731b7c23bf661cbe57161e360af6303f486987ee0d35f286c905eb1e4fc988420798ba1fd0125e099180a457137f16972948afd2e9c1ab41d87430605af29f5d0cf76cd13fd74cdbff2531be59622cedfae6aef3b6bde79673cd676e167df6d95417a56d6e7e701f68eb44fd006789b8592b6d2e4a4789c0b1b3a6bd38189cafec30149fe63390e85778834a26f158bab6305cd5d6ba0537613ef8160fd0280f6b0481b1b51719f66c2cf00220fabfcdc3354650760b1c9c538ee5a24a25896baaad09871b47a351bd09b5c730682f8b82f2240883f8e8df631190b8c752d79dd4944442d07cbb0b1c6df68866338fde33f10480afcdcf3c0c4f3a2947b530fccf670305827e74b78249e99cced2e1d9878322cbc5b2a1e31a850e4db0534b0ae0dae77985bdd69968bcdee60f6b6d6ec455038415f99b9002c7fdf5c34ce0f4496938b64d5dbcb44528167ae3bfe72e483c26cf6a5dadc9dd5196c2f3667f839b8d3e2147299d5ac6fdbd1a38c3f4e256ea1f65dfa3273544a20aa5ba5a829d35d0e23baa13a7231760b2e60212b5abd609740b1d2fce60202d69f6d238b03f6be5a3e1e091ce21185ceac09e1d73adb0e2aa865ecf8ac3afc61d91b141a17c9da4f67172e49bfcf04ae40566288ca4f170ebf8e507d2e387a57e916ed6fe9ae1cb2fed62e72d4c1baaf98c8c31a79497c27d31afb3c8760d1cc1df7dca7154fb1a0af1adfbd496444c5d2d3d9f83646dd240f87e2f514653345ee083a2e278c50ad85977a47e7626bfa558403301c1f8a38dcfbee8b45135585e73e130d03c630330f2c391f54abe9879a4a7dc726528511fb589c5ab663ef9acbc4d02596a39b45fe625771c04effb8791b923a5c7ed237b3b6749b06660a21c0ce3c105fc7b0109ff883dbcc8b5e9092e14c0f1bbd5d5b3dbfd55657fa757d11dd8a17fb29342eab3e259fbcd8561ebb3590f16bb260ae95a9fc82841fe7fbaf13e84f6c7c5565018f4ceeee3bef4c31df94b0a0aa7fad340c90cb54db096f81c1e02d868e50600c23c85f03a6c1aefa592c791b4cb4e90f697781e9e7b13c1096cb44102a919842248b9aa34930d1ee2ca3d98349a417a710cca88381529ee9742c6fb3e1177695c4021811e40090b9f48a32e656ae9136c426073d187c7787cbb27d0e6564cf65e3c69f3d0bf3be0b4b7710f143d6793e0b082ddf189f8b1c159d8c941dc3b669223fe8d3da028866b9f3edbe0ed6c8025a8d76a3689ee3947f5043e9692d49cf0e93dd319234f982b68412fda418e851ff913ddbf90b3decc6b05c53b150e9bf129ba09aaa7bdd2c4cdcfcfb7feca0255019023c91f2c24df29d882b248643c20843d22ff4fab99f3b523674db1d4cc3fbc1c043385c99a7d788bd83fdb8a367d54602fccbe737d0a3ec3aeae7259112de1fae62057c611c1ee53070daa7f207198659936eb55d45f26d061f1f553afd2f1d37d5a0ab09ed0247baa25e980c2ed6598c78872f92f44bfdf6becaefd704e64231518b3be9a7a76474e10209ac676537fac9f7c8153f4ae52cc68a8c37e960204eff0ed710b6e8f38c60a3e386931dc9529123de715ef50dd4d37141d33e4c18544d0620f191a0e71b790fbc5b5f7da175d90e63f46898b06c6374a10945be9ad8f187171c3795c488d82dd827158a1ee5e9c480a588698ed6afd9c24b415c6d51048a4446a1fc72739f97c5ea037cc2da503c4a6bdde02dfa07fd5b3af936a34a383a15bb88dc4bb1fe24ebbd4446d78e4ca2c9ee7bf4e6a47be059f5633c2c9efc7248f8155abbe8631e15d0d0377ddb87b8233897ac0f50e3d0883d9c049c0a787a6a64712e41da82758456c9491d0b72c4eddce982b2e864220bcc18bfa1ae6781f7b154d57983840e2afcfacc4645d7133a3543d42180c095ec1916dee621e17a34d8ab0b8ef6575822ce5c74fbc4982fe0c53d59c176d604ba8b9660c64cd3e4c1c7e68a64c1b5eae7d69741652a384e97d9e61cd3ce7227a0f21f8585df8e5585ebbf1b15bed1c74307ed0c5dd7e4e5462367aea6b6ccafa616321db8fefe89509cbb26f622f3728f2c6e8144402c0612ab0095e93081765fc74590f36543ef1fdfeb2d23176335472b498d13d5dc6c3398720dee4956160d3cbcd684b28757e0b5b52b503955cbca1808feddc649784f7445f256b76750be3a21e93aba6c797b712b35353b7469144a45e0d6cbff73340aa0c465b5b5a0c147528b096144cf5e95b3713f36e51dc673a25fc19e794fb9c754410f636aaaa03cdb197ba84a547456532805915b6788f4329c377a8f96d879ca1911ae15ac9220fe79acd0644338cdc8851364d56e11e961f0ec3ed40377b613e381238ba5c1ecbdda72b6b574373f804a90b4d17bd40757577f4ed7566ac535a547dc495dfe2d670d5b5de6bbf6fc0b5a3b0659af363a34fc704a22dcfbaf92c9fac9943545ce7986d592474cf8a44ce7b0633f3dd1bf45e606cd73a6e388779b99878b053f8deae366055df3886b2e3795c7762e3d22c7dbbc6e7707fd681f4402001218170b757550e1518dbff070b765f64e2c3ac2b7e4c48af6b7e55851592f3c39d0a30e81e92a0f05152ebce6ec7663daa15d068e291955030dbdd9899916bb173e1329afcefdbe10c147cf220f2a7382807b707459f403616e8d0b036378e862e3a424f9cfa7b0f5fafb4aa70cf3932399035c6a1c841f955220224f7b6d7887e03b29a8029e54c0cbb4cc8c8c670632b6a2bbb9031f4ac9f0aa7b13a1cb5049bd95eae63e7861c90b2f16d0c49b9f346c2c5aa262d2f38dc6803355cdd1110b133acc9afa48432ee4a4e13af68ab0b47b0bdd0fdeb00ee0de25dec11fb5228bdf30f144cac59423f991a3a38d5a6b4ecf0c2c9a47bb4aeaa316f019d4ed61771d4570407fdabaf7c7a4b88e1566f572a245858db9b57ce86439bf8659e8e76caef48053ab49077a1697d0867570937180fbed9b95bf077b39ada0c9d535cd79e7de1adc12dca0ade3c27304dad36c86e1571b278c9546365f368dc279c691c341bb9d5aae14617cdcdfb840389fed52762eea04cf9aa62329049c0e0cc2a933e5e156e7737dc9eef3e7d3948fb153954d54de896aa118a47a93080d9bf0d2b0d2f37ed534ac6a9e3e46fea3183227b8d1b2c8871eb808f7a284fa2fe273b14bc78d2bd44e333737c69348b96831a6801cfd9bbc87391d46a69bb7c5bb1a15567667c9b782946683181ea52851d3869e5fe78748c4199deb8dbfc748eb69a4c94dfc743af5a5a105e0a0224a55da4711ad57796cb0c9fc97f277368189dffb2ab770bf0c624cfdc8e00885a636bd27253e6e3a665978bdae5d9f0e6c20fcfb98b00de5d0029a1dfa04a4dbd75f9cabfbb70aa5f6988153a7aa4be2b806dae6849eedcd90776ee6d4f650a644287015befe0372811e390b18623531117074d8bdf684b0d42fdfa0bb51e5ea8885709c4a91eb6f8000c980d6accc716daa4ac892a87703ac8628b1daeb49b618370e73522b42", 0x1000}, {&(0x7f0000000700)="370dd92b4949621c01940b5cf6ab972ecead02f3ec2c062276974a4f23f747596ec88957e8e3c327e1b987bc46a59e5bdcf9e9fb7227442cc14cccf93220ccd7cc5e562d933147f4a21c44334acdc6c125e3a81aa48f8ce48a9e11f6a89ed70ce932688614f5ef1c66e65b4b7af273b5f3f8e03cd4b12d0b39947636947f9dbd712cdcedbec9a45c594807552fb2052ced9bb74001439cc78b4bcaa5dda82d8c4c85c111f5bdafc5c114c940274a25d053781b4c62daf71ffc4d89ca247a8646f4574b0eb5d6002c0f", 0xc9}, {&(0x7f0000000880)="7e561eca25b322af32bba68203e658b9e3204593365bd968f2afbfbd52e98428acc8825ca177639920d04c4116d1a9eac39f9042cd5f1110790c30dfc9d1b40ec89c16ec2ab4e9b8e48a820109540b3947fa7b32d5f1d70790fb39c8cca97c2ca60a6bc4225dbb702b7c73757a7606db9acf0f3f7480737c0480c235ff721fbf77075578426a9c9d2c374a791b5aeef6fbd1ec7fca1d852c15d372ff95d6659e217ced0b4320f8fccece5e21c3e70258e7367a", 0xb3}, {&(0x7f0000000800)="23f445fa93e71b77e3f7a8efdd78771ec9d8297607492e066c5499c71a189dd22e5265613340128a0cd2c120ba94faefccea", 0x32}], 0x6, 0x4) ftruncate(r4, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.661481787s ago: executing program 3 (id=268): io_setup(0x8f0, &(0x7f0000002400)) 1.614576972s ago: executing program 4 (id=269): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r2) tkill(r2, 0x12) ptrace$getregs(0xe, r2, 0xfffffffffffffffb, &(0x7f0000000180)=""/77) 1.567562976s ago: executing program 3 (id=270): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYRESOCT=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r0}, &(0x7f00000008c0), &(0x7f0000000a00)=r1}, 0x20) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) io_setup(0x7, &(0x7f0000000280)=0x0) r6 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x42, 0x80) io_submit(r5, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0xfffffc98}]) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020601040000000000000000000000000c00078008000840000000b10500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c706f327400000000e68b02040c592b0800fdc3d300f98521"], 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r4, &(0x7f0000000040)={0x11, 0x1, r7, 0x1, 0x9}, 0x14) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0xb60, 0x200, 0x43, 0xa0, 0x0, 0x98, 0xac8, 0x178, 0x178, 0xac8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x200, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3, {0x100000001}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x7, 0x4, 0x3, 0x4, 0x5], 0x3}, {0x1, [0x0, 0x3, 0x3, 0x4], 0x3, 0x1}}}}, {{@uncond, 0x0, 0x888, 0x8c8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0x8}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x7, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7, 0x1}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0xa}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x7, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x5}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138c}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x4}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x1}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xbc0) r10 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x8) ioctl$TIOCL_BLANKSCREEN(r10, 0x541c, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f00000002c0)={0x0, 0x0}) setpriority(0x2, r11, 0x1) r12 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r12, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x70bd2d, 0x2000001, {0x0, 0x0, 0x0, r7, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008044}, 0x0) 1.537521679s ago: executing program 0 (id=271): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffd}, 0x94) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_ROPEN(r1, &(0x7f00000002c0)={0x18, 0x71, 0x2, {{0x0, 0x3, 0x2}, 0x101}}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000005c0)={[{@jqfmt_vfsold}, {@orlov}, {@user_xattr}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@nodiscard}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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") r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x181000, 0x80) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vxcan1\x00'}) r6 = socket(0x2, 0x80805, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000ec0)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x7fffffff, 0x14, 0xfcc, 0x400, 0x9}, 0x81, 0x0, 0xc8c3, 0x40, 0x4, 0x1c, 0x11, 0x9, 0x8, 0xffffffff, {0xfffffff9, 0x4, 0xad8, 0x7, 0x4, 0x4}}}}]}, 0x78}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000003c0)='mm_page_pcpu_drain\x00', r11}, 0x18) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r12, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0xfa, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x0, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0x0, 0xfffffffc}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4e) socket$nl_route(0x10, 0x3, 0x0) 1.523633721s ago: executing program 4 (id=272): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan1\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r1, 0x9, 0xf5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = dup(r2) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000900)={0x6c, r4, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x5e}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xc}, @NL80211_ATTR_BSS_BASIC_RATES={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x8}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x16dc}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000005c00), 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000ae000000b703000007000000850000000e000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, &(0x7f0000000040)={0xffffff0c, 0x1a80000000000000, 0x7fffffffffffffff, 0x9}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast1, @private}, &(0x7f00000002c0)=0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x1a, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) syz_emit_ethernet(0x11f, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) write$nci(r6, 0x0, 0xfffffeea) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}}) 1.357237437s ago: executing program 3 (id=273): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x44}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000", @ANYRES16=r4], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x10, &(0x7f0000000200), 0x0, 0x5ae, &(0x7f00000016c0)="$eJzs3d9vFNUeAPDv2d22QOG23NzkXi4PNiERErWlBaMxJkLENx/8QeITibUthLBApTURxAgJ/gf6B5j4ZmKMj8QYor746puJf4AhEgN98W3N7M6WBXZLu2w7yHw+ybDnzNnhnNnNt2fm7JmZAEprIvunErEnIhZTxFhHWS3ywonW++7cvjy3cvvyXIpG4+0/U6R8Xfv9KX8dzTfeFhG//JDi39UH6126eOnMbL2+cCHPTy2fXZxaunjpudNnZ08tnFo4NzP9wvTzhw/NHD44kP3cFRE/TR6rXTv56t5v5r7c/cl3X11PcSR25uWd+zEoEzGx+pl0yj7XFwddWUGq+f50fsWpVmCD2JD29zcUEf+NsajG3S9vLD59s9DGAZuqkSIaQEkl8Q8l1T4OyM5/20uxRyTAVrl1tDUAcCe1xvZWVuO/1hobjG3NsYEdKyk6h3VSRAxiZC6rY/HpNJYtsUnjcEB3V65GxP+69f+pGZvjzVH8LP4r98R/JSLeyF+z9W/1Wf/EfXnxD1vnUeL/3Y74f6/P+rvH/0if/xsAAAAAAACU242jEfFst9//Kqvzf6LL/J/RiDgygPof/vt/5eYAqgG6uHU04uWIaM/9W+mI/9x4Nc/tas4HGEonT9cXDkbEvyLiQAyNZPnpNeqY2PvzUM+yjvl/2ZLVv3jPz/+Vm7X7pgPMzy7P9r/HQNutqxH/r3WL/7Ta/6cu/X/W9y+us47GsVd+7FXWNf7zucDA5mp8EbG/a/9/984Vae37c0w1jwem2kcFD/roxPVve9Uv/qE4Wf+/Y+34H0+d9+tZ2ngdH//x2yPEf/fj/+F0vHnLmeF83Yezy8sXpiOG0+sd64da62c23mZ4ErXjoR0vWfwf2Nf9/H+t4//tEXFlnXUe//61a73K9P9QnCz+5zfU/288se+dz//qVf/6+v/DzT79QL7G+B+sbb0BWnQ7AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCfqBIROyNVJlfTlcrkZMRoRPwndlTq55eWnzl5/oNz81lZ8/n/lfaTfsda+dR+/v94R37mvvyhiNgdEZ9Vtzfzk3Pn6/NF7zwAAAAAAAAAAAAAAAAAAAA8JkZ7XP+f+b1adOuATVe7mzxSZDuArVcrugFAYcQ/lJf4h/IS/1Be4h/KS/xDeYl/KC/xD+VVbXx9oug2AAAAAAAAA7P7qRu/poi48tL25pIZzsuGCm0ZsNlc7w/l5RY/UF6m/kF5tc7xR4puBlCg9JDybX1vCQAAAAAAAAAAAAAMyv49rv+HsqoU3QCgML2v/3dnAHjSuf4fyss5PvDw6//fn+tvSwAAAAAAAAAAAABgUJYuXjozW68vXOg3MfJom0tsaWIkHotmlDURaQARt0WJov8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbX8HAAD//97T+NI=") 1.153812227s ago: executing program 4 (id=274): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x44}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYRES16=r4], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x10, &(0x7f0000000200), 0x0, 0x5ae, &(0x7f00000016c0)="$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") 1.152873517s ago: executing program 1 (id=284): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0xfffffedf, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = socket$inet6(0x10, 0x806, 0x400000fd) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r4, 0x1) write(r4, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000280)={'\x00', 0x6, 0xe, 0x9, 0x3, 0x0, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0x2001, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(r6, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x24000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES8=r1, @ANYRES16=0x0, @ANYRESOCT=r3, @ANYRESHEX, @ANYRESHEX=r5, @ANYRES8=r1, @ANYBLOB="a5792a7ad62f325936c1c29dcb4170aa54cf9afe5aeadb1417841ee99db605fc4d24f1e5f0b11fbafb6bb49b20317f84580f3135e03666b3c7c0d3afc27ce665b260802e4ce7bca870b86419dd53071827b2"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r8, 0x0, 0x8, 0xfe, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x0, 0x0, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r10, 0x0, 0xff, 0x64, 0x7, 0x0, @dev, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x8000, 0xfffffffe}}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TESTMODE(r7, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="94030000", @ANYRES16=r11, @ANYBLOB="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"], 0x394}, 0x1, 0x0, 0x0, 0x80}, 0x8000010) 1.149440297s ago: executing program 2 (id=275): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="701500003c0007010300000000000000017c0000040042800c0003"], 0x1570}, 0x1, 0x0, 0x0, 0x20000000}, 0xc800) 1.127235779s ago: executing program 0 (id=276): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52b, &(0x7f0000000a00)="$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") r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) socket(0x10, 0x803, 0x0) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) write$binfmt_register(r2, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 1.056061717s ago: executing program 2 (id=277): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'erspan0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x700, 0x7800, 0x2, 0x1ff, {{0x18, 0x4, 0x0, 0xc, 0x60, 0x68, 0x0, 0x2, 0x4, 0x0, @local, @remote, {[@rr={0x7, 0x1f, 0x39, [@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @empty, @private=0xa010101, @empty]}, @timestamp={0x44, 0x20, 0xdc, 0x0, 0x9, [0x4, 0x2, 0x4, 0x2, 0x0, 0x26, 0x3]}, @timestamp_addr={0x44, 0xc, 0xc8, 0x1, 0x7, [{@private=0xa010100, 0x80}]}]}}}}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYRES16=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000500000000000000", @ANYBLOB="000000e4ffffffff7f"], 0x48) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f00000004c0)=0x7, 0x4) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r4 = dup(r3) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) read$nci(r5, &(0x7f00000001c0)=""/205, 0xcd) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000008c0)={0x80, 0x6, 0xf00, 0xec, 0x0, 0x5, 0x0}) fstatfs(r2, &(0x7f0000000040)=""/81) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018000000", @ANYRES32=r6, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r7, 0x0, 0x100000000}, 0x18) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) fsopen(0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000340)='kfree\x00', r9, 0x0, 0x200000000}, 0x18) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x10) r10 = socket$key(0xf, 0x3, 0x2) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[], 0x1, 0x2a4, &(0x7f0000000480)="$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") openat(0xffffffffffffff9c, 0x0, 0x1c5042, 0x12) rename(0x0, 0x0) sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="02030003100000002cbd7000fcdbdf2502000900080000001c00000000000000050006006c0000000a00000000000000fc020000000000000000000000000001020000000000000002000100000000000000030c0000000005000500000000000a000000000000010700000000000000ce6b5eb7fd7335c6784ce2c76abfff8d6948ecb0367ce598e068563ee0f1059be041ae04ed26"], 0x80}, 0x1, 0x7}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000190000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x2d) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2000) 953.248146ms ago: executing program 1 (id=278): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) fsopen(0x0, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) io_setup(0x8ed, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_tracing={0x1a, 0x20, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xffffffff}, @map_fd={0x18, 0xa, 0x1, 0x0, r0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x8, 0x51, &(0x7f0000000180)=""/81, 0x41000, 0x6, '\x00', r1, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x9, 0x8, 0x7}, 0x10, 0x7114, r2, 0x8, &(0x7f0000000540)=[0xffffffffffffffff, r0], &(0x7f0000000580)=[{0x4, 0x3, 0x6, 0x7}, {0x1, 0x4, 0x5, 0x7}, {0x5, 0x4, 0x3, 0x6}, {0x1, 0x4, 0x5, 0x7}, {0x3, 0x4, 0x0, 0xc}, {0x1, 0x4, 0x8, 0xc}, {0x5, 0x3, 0x5, 0x4}, {0x5, 0x5, 0x2, 0xd}], 0x10, 0x98}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) open_by_handle_at(r7, &(0x7f0000000240)=@reiserfs_2={0x4b, 0x2, {0xb}}, 0x36f0516f) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x8000000000002003, 0x0) 905.278271ms ago: executing program 2 (id=279): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x12, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='GPL\x00') ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008", @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0xb6fc1a02a0856390) r3 = memfd_create(&(0x7f0000001780)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfc\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\xec\xb3\xd8\x96\xbcq\xe6\xb3\xbc\xb9\xf3N\xb4f\x168\xaf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x8a[^\xaa\x0e\xe7\xa4\x8dE\xeaj\xa0\x83\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x997\xb5W\x8c<\x89#\xaf\xce\xe8\xb7-\xe3~4\xe6\xdc\x96\xa7\xa3\xbd;\xd6\xef.\x19\xdcV\x83Zir\tK\xc2&@o\xc1\xe0\xf2/\vS7U\xe5\x95\xe7&\xf5\xdd\x85K6\xc0\xcb\xa3\xcf\xff\xf5\xc3\xf3]*n\x88\x82\xc9a(\xa7\xe8\x88\x12\x9e}\xc5\xe9B\xeb\xa5\np\x10\xbc\xf4]\xbc\xcf\xf8\xc5\x97A\xd6A\xf1s\xf0\xed\x8azX?\x97\x92\x90\xbb\xa7\x94\xd1Z\n\xbb[\x04\x16\xeaJ\x9ciJg\x05\xe2q)\xd0\xc6]\x88\x83\xf4\x95\xb8\x80e/XB\xb1\x10\xe0W\xd1\x99\x06S\xf4\x05\xa9\xad\xe2;X\xb5s\x02\tG\xa5\xb02\x8e\xd0\xf1\x96en\xb7Ga\xc5\xd2\xefP\x993\xcak\xf0\x1c\xa9\x8dj7>\xcfs\xa1\x1c\xb5j*m\x99X\x10\xae\x84\xe9\x9b?\x93dI\xf1yEQ\x187y\xe3\xbf\xb9f\xd3S022\xa2o\xd59\xb7\xa1F\x01\x1a\x18\x91\xd3\xb3\r\xd5n.T_\xcc3:\xdb\x00\xbb\xd0YH\xc9\xd3 \xd4\xdav\v\x1e|6k\xbf\xe2r\xa5\x00\xc0\xbf\x01\xc4S\xe5\xb2\xc9\xc6\x93/l\xc13=7\x8e\x9e', 0x6) fcntl$addseals(r3, 0x409, 0xc) 877.000214ms ago: executing program 1 (id=280): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="06000000040000000400000009"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000100)=r0, 0x2000000}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) socket(0x2, 0xa, 0x300) socket$kcm(0x2, 0xa, 0x73) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)={0x34, 0x0, 0x800, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x14, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x101}]}]}, 0x34}}, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x1ac) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7e, 0x1000, 0x5c8, 0x80000003, 0x6}) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x3c281, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000002c0)=0x1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x10000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5e, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) unshare(0x26020480) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x2) 851.966676ms ago: executing program 2 (id=281): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000280)=0x14) read(r4, &(0x7f00000019c0)=""/4097, 0x1001) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) syz_io_uring_setup(0x7ca6, &(0x7f00000000c0)={0x0, 0xa934, 0x200, 0x1, 0x262}, &(0x7f0000000140)=0x0, &(0x7f0000000400)) r6 = socket$kcm(0x29, 0x5, 0x0) syz_io_uring_setup(0x90c, &(0x7f0000000200)={0x0, 0xcaaa, 0x400, 0x2, 0xfd}, &(0x7f0000000740)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r6, 0x0, 0x0, 0x5c, 0x10}) syz_io_uring_submit(r5, r8, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x44, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)='./file0\x00', 0x118, 0x4000, 0x23456}) close(r0) r9 = socket$netlink(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r12, 0x0, 0x4}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r13, 0x0}, 0x20) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r10, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 729.992658ms ago: executing program 0 (id=282): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r4, 0x0, 0x7fffffffffffffff}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, &(0x7f00000000c0)={0x4, 0x1}, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) kexec_load(0x4, 0xa, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000811}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 606.360821ms ago: executing program 1 (id=283): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x4, 0x6}, 0x0, 0x10000, 0x8, 0x6, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) io_setup(0x8f0, &(0x7f0000002400)) 583.694103ms ago: executing program 0 (id=285): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan1\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r1, 0x9, 0xf5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = dup(r2) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000900)={0x6c, r4, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x5e}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xc}, @NL80211_ATTR_BSS_BASIC_RATES={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x8}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x16dc}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000005c00), 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000ae000000b703000007000000850000000e000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, &(0x7f0000000040)={0xffffff0c, 0x1a80000000000000, 0x7fffffffffffffff, 0x9}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast1, @private}, &(0x7f00000002c0)=0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x1a, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) syz_emit_ethernet(0x11f, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) write$nci(r6, 0x0, 0xfffffeea) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}}) 575.401823ms ago: executing program 3 (id=286): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x5c, r1, 0x917, 0x0, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x5c}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095", @ANYRES32=r1, @ANYBLOB="6e6d57f6dc558a2c855d6cc043f8860a92a8b2af25ba3c9cb80c1153bd25424699fd9307ad68bf56e2c277a782c54ae749ab59e4eac4a39d4ad6fbeac77a3fd1"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='netlink_extack\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="61108e00000000006deb22768c2cbea40a9677ea07e784fdfb0cecad73328a8a06df5d151334daa7e9"], &(0x7f0000000200)='GPL\x00', 0x1}, 0x94) 468.625624ms ago: executing program 3 (id=287): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x542, &(0x7f0000001140)="$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") sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x24, r0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008081}, 0x810) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)={0x60, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x8004}, 0x8080) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) sendmsg$NL80211_CMD_SET_BEACON(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000e00004017000e401c04"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x9361, 0x1000) process_vm_readv(0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}, {&(0x7f0000000040)=""/67, 0x43}, {&(0x7f0000000180)=""/138, 0xab}], 0x4, &(0x7f0000008640), 0x1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'pim6reg1\x00', 0x1}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r10}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r12}, 0x10) connect$unix(r5, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x10e) r13 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./file2\x00', 0x109141, 0xdf) pwrite64(r13, &(0x7f0000000bc0)="cfac", 0x2, 0x7ff) 94.509991ms ago: executing program 2 (id=288): io_setup(0x8f0, &(0x7f0000002400)) 93.48284ms ago: executing program 0 (id=289): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x44}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x9, &(0x7f00000002c0), 0x4, 0x50e, &(0x7f0000000e40)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095", @ANYRES16=r3], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x10, &(0x7f0000000200), 0x0, 0x5ae, &(0x7f00000016c0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000009180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60400, 0x0) ioctl$TCFLSH(r6, 0x400455c8, 0x0) 78.532562ms ago: executing program 1 (id=290): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) shutdown(0xffffffffffffffff, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) setregid(0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000380), r3) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001000010700020100000000000a0000000600010016"], 0x1c}}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5}, 0x18) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r9, &(0x7f0000004200)='t', 0x1) sendfile(r9, r8, 0x0, 0x7ffff000) 52.260985ms ago: executing program 3 (id=291): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0xbc3, &(0x7f0000000540)={0x0, 0x1568, 0x80, 0x2, 0x264}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)) r5 = syz_open_pts(r4, 0x101000) dup3(r5, r4, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000100)={0x9, 0x5, 0xa, 0x9, 0x4, "222f9ad1322d8a7a56ab9c88444e7aecb9c7cf"}) io_uring_enter(r1, 0x29ab, 0xd480, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001080)={0x10, 0x1403, 0x1, 0xfffffffc}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r7, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0xb, &(0x7f0000001e00)=""/4086}, 0x90) sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0xa0, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_CHAIN_USERDATA={0x16, 0xc, "282572abf485ecd18a06d641dad585f3b730"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x17ac4937}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x382a0bb4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x21, 0xc, "8537dd3a52afa0e75391cd8de32c5568065d36bf2a5839249f3690dfca"}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88f8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8848}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}, @NFT_MSG_DELRULE={0x30, 0x8, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0xbc, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x68, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffa}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'vlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x250}, 0x1, 0x0, 0x0, 0x14}, 0x80c1) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x2, 0x90, &(0x7f0000000440)="14c444daaf3a5978f4db6eac44a2193748bac5204aad405d8a796a74ab8f60737a2a14d8ff4869a0f556d72fc28c21c380d823c446a457fcdcebf4aaa90bf02336f9322f1bb04b6b34480bae85d91b137df8cf439f25feb5c3010f24ca057d48c65a28b65e7e4abbec2aa36ece758c6f7074e64b0d4667ec4bc49eccc51b0f921eaf181df41d52a59b528af6e4903017"}]}) r8 = socket(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000008000100100000001c0005800a000400aaaaaaaaaa2d00000a0004003426f7b68ed1000008000500", @ANYRES32=r10], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0xc000002) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 51.026895ms ago: executing program 4 (id=292): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) fsopen(0x0, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) io_setup(0x8ed, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x50, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_tracing={0x1a, 0x20, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xffffffff}, @map_fd={0x18, 0xa, 0x1, 0x0, r0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x8, 0x51, &(0x7f0000000180)=""/81, 0x41000, 0x6, '\x00', r1, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x9, 0x8, 0x7}, 0x10, 0x7114, r2, 0x8, &(0x7f0000000540)=[0xffffffffffffffff, r0], &(0x7f0000000580)=[{0x4, 0x3, 0x6, 0x7}, {0x1, 0x4, 0x5, 0x7}, {0x5, 0x4, 0x3, 0x6}, {0x1, 0x4, 0x5, 0x7}, {0x3, 0x4, 0x0, 0xc}, {0x1, 0x4, 0x8, 0xc}, {0x5, 0x3, 0x5, 0x4}, {0x5, 0x5, 0x2, 0xd}], 0x10, 0x98}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) open_by_handle_at(r7, &(0x7f0000000240)=@reiserfs_2={0x4b, 0x2, {0xb}}, 0x36f0516f) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x8000000000002003, 0x0) 0s ago: executing program 2 (id=293): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdedn\xe5+\xf0', 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) kernel console output (not intermixed with test programs): 94] RDX: 0000000000000009 RSI: 0000000000101042 RDI: 0000200000000000 [ 39.914575][ T3494] RBP: 00007f929c5e7090 R08: 0000000000000000 R09: 0000000000000000 [ 39.914592][ T3494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 39.914609][ T3494] R13: 00007f929ddd6038 R14: 00007f929ddd5fa0 R15: 00007ffcdc369d28 [ 39.914637][ T3494] [ 40.134818][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.178594][ T3491] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 40.184299][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.236296][ T3491] EXT4-fs (loop0): mount failed [ 40.246943][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.256937][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.266104][ T3454] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.280505][ T3454] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.289356][ T3491] Zero length message leads to an empty skb [ 40.361186][ T3511] FAULT_INJECTION: forcing a failure. [ 40.361186][ T3511] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 40.374579][ T3511] CPU: 0 UID: 0 PID: 3511 Comm: syz.1.9 Not tainted syzkaller #0 PREEMPT(voluntary) [ 40.374610][ T3511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 40.374694][ T3511] Call Trace: [ 40.374701][ T3511] [ 40.374710][ T3511] __dump_stack+0x1d/0x30 [ 40.374733][ T3511] dump_stack_lvl+0xe8/0x140 [ 40.374757][ T3511] dump_stack+0x15/0x1b [ 40.374779][ T3511] should_fail_ex+0x265/0x280 [ 40.374904][ T3511] should_fail+0xb/0x20 [ 40.374945][ T3511] should_fail_usercopy+0x1a/0x20 [ 40.374973][ T3511] _copy_from_iter+0xd2/0xe80 [ 40.375005][ T3511] ? alloc_pages_mpol+0x217/0x260 [ 40.375112][ T3511] copy_page_from_iter+0x178/0x2a0 [ 40.375176][ T3511] tun_get_user+0x679/0x26e0 [ 40.375248][ T3511] ? ref_tracker_alloc+0x1f2/0x2f0 [ 40.375373][ T3511] tun_chr_write_iter+0x15e/0x210 [ 40.375432][ T3511] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 40.375479][ T3511] vfs_write+0x52a/0x960 [ 40.375507][ T3511] ksys_write+0xda/0x1a0 [ 40.375535][ T3511] __x64_sys_write+0x40/0x50 [ 40.375565][ T3511] x64_sys_call+0x2802/0x3000 [ 40.375676][ T3511] do_syscall_64+0xd2/0x200 [ 40.375780][ T3511] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 40.375812][ T3511] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 40.375838][ T3511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.375877][ T3511] RIP: 0033:0x7f929db7d97f [ 40.375895][ T3511] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 40.375918][ T3511] RSP: 002b:00007f929c5e7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 40.375942][ T3511] RAX: ffffffffffffffda RBX: 00007f929ddd5fa0 RCX: 00007f929db7d97f [ 40.375959][ T3511] RDX: 00000000000000da RSI: 00002000000001c0 RDI: 00000000000000c8 [ 40.375975][ T3511] RBP: 00007f929c5e7090 R08: 0000000000000000 R09: 0000000000000000 [ 40.376016][ T3511] R10: 00000000000000da R11: 0000000000000293 R12: 0000000000000001 [ 40.376028][ T3511] R13: 00007f929ddd6038 R14: 00007f929ddd5fa0 R15: 00007ffcdc369d28 [ 40.376047][ T3511] [ 40.586422][ T3509] netlink: 'syz.0.10': attribute type 10 has an invalid length. [ 40.608411][ T3509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.618088][ T3509] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 40.689803][ T3521] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13'. [ 40.752875][ T3521] syz.0.13 (3521) used greatest stack depth: 9360 bytes left [ 40.795964][ T3526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11'. [ 40.848134][ T3518] infiniband syz0: set active [ 40.852895][ T3518] infiniband syz0: added bond_slave_0 [ 40.889131][ T3518] RDS/IB: syz0: added [ 41.033245][ T3548] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 41.130794][ T3552] netlink: 256 bytes leftover after parsing attributes in process `syz.1.20'. [ 41.380350][ T3570] loop2: detected capacity change from 0 to 1024 [ 41.389603][ T3566] loop1: detected capacity change from 0 to 2048 [ 41.397788][ T3570] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.457361][ T3573] loop0: detected capacity change from 0 to 512 [ 41.502339][ T3566] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 41.551675][ T3573] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.564835][ T3573] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 41.646455][ T3573] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.665571][ T3573] EXT4-fs (loop0): 1 truncate cleaned up [ 41.667423][ T3566] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 41.671983][ T3573] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.699414][ T3584] loop3: detected capacity change from 0 to 512 [ 41.720142][ T3584] ======================================================= [ 41.720142][ T3584] WARNING: The mand mount option has been deprecated and [ 41.720142][ T3584] and is ignored by this kernel. Remove the mand [ 41.720142][ T3584] option from the mount to silence this warning. [ 41.720142][ T3584] ======================================================= [ 41.769771][ T3566] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1008 with error 28 [ 41.782379][ T3566] EXT4-fs (loop1): This should not happen!! Data will be lost [ 41.782379][ T3566] [ 41.792270][ T3566] EXT4-fs (loop1): Total free blocks count 0 [ 41.798377][ T3566] EXT4-fs (loop1): Free/Dirty block details [ 41.804646][ T3566] EXT4-fs (loop1): free_blocks=2415919104 [ 41.810452][ T3566] EXT4-fs (loop1): dirty_blocks=1024 [ 41.815926][ T3566] EXT4-fs (loop1): Block reservation details [ 41.822004][ T3566] EXT4-fs (loop1): i_reserved_data_blocks=64 [ 41.823293][ T3584] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 41.843106][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.852336][ T3589] loop4: detected capacity change from 0 to 512 [ 41.860391][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.964930][ T3589] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.996159][ T3589] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.009288][ T12] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 42.075790][ T3602] loop3: detected capacity change from 0 to 512 [ 42.080080][ T3600] syz0: rxe_newlink: already configured on bond_slave_0 [ 42.110809][ T3600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.30'. [ 42.148760][ T3602] EXT4-fs error (device loop3): ext4_init_orphan_info:581: comm syz.3.31: inode #0: comm syz.3.31: iget: illegal inode # [ 42.225554][ T3602] EXT4-fs (loop3): get orphan inode failed [ 42.248902][ T314] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 2 with error 28 [ 42.264835][ T3602] EXT4-fs (loop3): mount failed [ 42.321385][ T3612] loop2: detected capacity change from 0 to 1024 [ 42.391579][ T3612] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.32: Failed to acquire dquot type 0 [ 42.423748][ T3612] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 42.446425][ T3612] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.32: corrupted inode contents [ 42.465443][ T3612] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #13: comm syz.2.32: mark_inode_dirty error [ 42.488552][ T3612] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.32: corrupted inode contents [ 42.506763][ T3612] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.32: mark_inode_dirty error [ 42.521073][ T3602] loop3: detected capacity change from 0 to 1024 [ 42.528095][ T3612] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.32: corrupted inode contents [ 42.530564][ T3612] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 42.555803][ T3612] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.32: corrupted inode contents [ 42.598976][ T3602] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.31: Failed to acquire dquot type 0 [ 42.612232][ T3612] EXT4-fs error (device loop2): ext4_truncate:4637: inode #13: comm syz.2.32: mark_inode_dirty error [ 42.625855][ T3612] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 42.639522][ T3602] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 42.661033][ T3612] EXT4-fs (loop2): 1 truncate cleaned up [ 42.668428][ T3602] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #13: comm syz.3.31: corrupted inode contents [ 42.686448][ T3612] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.706378][ T3602] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #13: comm syz.3.31: mark_inode_dirty error [ 42.720354][ T3602] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #13: comm syz.3.31: corrupted inode contents [ 42.738648][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.748380][ T3602] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.31: mark_inode_dirty error [ 42.766919][ T3602] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #13: comm syz.3.31: corrupted inode contents [ 42.788163][ T3602] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 42.830710][ T3619] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 42.837300][ T3619] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 42.845087][ T3619] vhci_hcd vhci_hcd.0: Device attached [ 42.857765][ T3602] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #13: comm syz.3.31: corrupted inode contents [ 42.892225][ T3602] EXT4-fs error (device loop3): ext4_truncate:4637: inode #13: comm syz.3.31: mark_inode_dirty error [ 42.925400][ T3602] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 42.940967][ T3602] EXT4-fs (loop3): 1 truncate cleaned up [ 42.970986][ T3602] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.068583][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.115459][ T3479] usb 2-1: SetAddress Request (2) to port 0 [ 43.121510][ T3479] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 43.171316][ T3628] netlink: 96 bytes leftover after parsing attributes in process `syz.3.36'. [ 43.205969][ T3628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36'. [ 43.614782][ T3622] vhci_hcd: connection reset by peer [ 43.615026][ T12] vhci_hcd: stop threads [ 43.615039][ T12] vhci_hcd: release socket [ 43.615054][ T12] vhci_hcd: disconnect device [ 44.072562][ T3650] FAULT_INJECTION: forcing a failure. [ 44.072562][ T3650] name failslab, interval 1, probability 0, space 0, times 0 [ 44.085798][ T3650] CPU: 0 UID: 0 PID: 3650 Comm: syz.3.42 Not tainted syzkaller #0 PREEMPT(voluntary) [ 44.085829][ T3650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 44.085919][ T3650] Call Trace: [ 44.085984][ T3650] [ 44.085994][ T3650] __dump_stack+0x1d/0x30 [ 44.086044][ T3650] dump_stack_lvl+0xe8/0x140 [ 44.086127][ T3650] dump_stack+0x15/0x1b [ 44.086149][ T3650] should_fail_ex+0x265/0x280 [ 44.086208][ T3650] ? audit_log_d_path+0x8d/0x150 [ 44.086233][ T3650] should_failslab+0x8c/0xb0 [ 44.086280][ T3650] __kmalloc_cache_noprof+0x4c/0x4a0 [ 44.086318][ T3650] audit_log_d_path+0x8d/0x150 [ 44.086343][ T3650] audit_log_d_path_exe+0x42/0x70 [ 44.086416][ T3650] audit_log_task+0x1e9/0x250 [ 44.086458][ T3650] ? kstrtouint+0x76/0xc0 [ 44.086500][ T3650] audit_seccomp+0x61/0x100 [ 44.086548][ T3650] ? __seccomp_filter+0x82d/0x1250 [ 44.086635][ T3650] __seccomp_filter+0x83e/0x1250 [ 44.086670][ T3650] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 44.086711][ T3650] ? vfs_write+0x7e8/0x960 [ 44.086745][ T3650] __secure_computing+0x82/0x150 [ 44.086815][ T3650] syscall_trace_enter+0xcf/0x1e0 [ 44.086888][ T3650] do_syscall_64+0xac/0x200 [ 44.086913][ T3650] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 44.086946][ T3650] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 44.087011][ T3650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.087038][ T3650] RIP: 0033:0x7f8009ffeec9 [ 44.087058][ T3650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.087081][ T3650] RSP: 002b:00007f8008a5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000009b [ 44.087102][ T3650] RAX: ffffffffffffffda RBX: 00007f800a255fa0 RCX: 00007f8009ffeec9 [ 44.087229][ T3650] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 44.087245][ T3650] RBP: 00007f8008a5f090 R08: 0000000000000000 R09: 0000000000000000 [ 44.087261][ T3650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.087277][ T3650] R13: 00007f800a256038 R14: 00007f800a255fa0 R15: 00007ffdf3154768 [ 44.087348][ T3650] [ 44.309069][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 44.309088][ T29] audit: type=1326 audit(1760583600.622:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3649 comm="syz.3.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f8009ffd8dc code=0x7ffc0000 [ 44.338902][ T29] audit: type=1326 audit(1760583600.622:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3649 comm="syz.3.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8009ffd97f code=0x7ffc0000 [ 44.362698][ T29] audit: type=1326 audit(1760583600.622:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3649 comm="syz.3.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8009ffdb2a code=0x7ffc0000 [ 44.386014][ T29] audit: type=1326 audit(1760583600.622:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3649 comm="syz.3.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8009ffeec9 code=0x7ffc0000 [ 44.412934][ T29] audit: type=1326 audit(1760583600.622:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3649 comm="syz.3.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8009ffeec9 code=0x7ffc0000 [ 44.440424][ T29] audit: type=1400 audit(1760583600.962:256): avc: denied { read write } for pid=3651 comm="syz.0.43" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.463986][ T29] audit: type=1400 audit(1760583600.962:257): avc: denied { open } for pid=3651 comm="syz.0.43" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.494839][ T3659] x_tables: ip_tables: ah match: only valid for protocol 51 [ 44.516653][ T3661] FAULT_INJECTION: forcing a failure. [ 44.516653][ T3661] name failslab, interval 1, probability 0, space 0, times 0 [ 44.529341][ T3661] CPU: 1 UID: 0 PID: 3661 Comm: syz.1.45 Not tainted syzkaller #0 PREEMPT(voluntary) [ 44.529377][ T3661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 44.529393][ T3661] Call Trace: [ 44.529401][ T3661] [ 44.529410][ T3661] __dump_stack+0x1d/0x30 [ 44.529484][ T3661] dump_stack_lvl+0xe8/0x140 [ 44.529507][ T3661] dump_stack+0x15/0x1b [ 44.529523][ T3661] should_fail_ex+0x265/0x280 [ 44.529608][ T3661] should_failslab+0x8c/0xb0 [ 44.529718][ T3661] kmem_cache_alloc_noprof+0x50/0x480 [ 44.529754][ T3661] ? alloc_uid+0x106/0x370 [ 44.529792][ T3661] alloc_uid+0x106/0x370 [ 44.529818][ T3661] ? __sys_setreuid+0x2c5/0x520 [ 44.529852][ T3661] __sys_setreuid+0x2dd/0x520 [ 44.529878][ T3661] __x64_sys_setreuid+0x2d/0x40 [ 44.529897][ T3661] x64_sys_call+0x2450/0x3000 [ 44.529971][ T3661] do_syscall_64+0xd2/0x200 [ 44.530004][ T3661] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 44.530041][ T3661] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 44.530138][ T3661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.530165][ T3661] RIP: 0033:0x7f929db7eec9 [ 44.530180][ T3661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.530267][ T3661] RSP: 002b:00007f929c5e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 44.530293][ T3661] RAX: ffffffffffffffda RBX: 00007f929ddd5fa0 RCX: 00007f929db7eec9 [ 44.530310][ T3661] RDX: 0000000000000000 RSI: 000000000000ee01 RDI: 000000000000ee01 [ 44.530338][ T3661] RBP: 00007f929c5e7090 R08: 0000000000000000 R09: 0000000000000000 [ 44.530350][ T3661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.530362][ T3661] R13: 00007f929ddd6038 R14: 00007f929ddd5fa0 R15: 00007ffcdc369d28 [ 44.530384][ T3661] [ 44.718410][ T29] audit: type=1400 audit(1760583600.962:258): avc: denied { create } for pid=3652 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.738553][ T29] audit: type=1400 audit(1760583600.972:259): avc: denied { write } for pid=3652 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.758274][ T29] audit: type=1400 audit(1760583600.972:260): avc: denied { setopt } for pid=3652 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.849673][ T3667] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 44.862828][ T3667] netlink: 'syz.0.47': attribute type 1 has an invalid length. [ 44.870475][ T3667] netlink: 'syz.0.47': attribute type 2 has an invalid length. [ 44.878131][ T3667] netlink: 5412 bytes leftover after parsing attributes in process `syz.0.47'. [ 44.958411][ T3679] loop0: detected capacity change from 0 to 1024 [ 44.983309][ T3679] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.024792][ T3679] netlink: 24 bytes leftover after parsing attributes in process `syz.0.50'. [ 45.072549][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.100286][ T3683] FAULT_INJECTION: forcing a failure. [ 45.100286][ T3683] name failslab, interval 1, probability 0, space 0, times 0 [ 45.112973][ T3683] CPU: 1 UID: 0 PID: 3683 Comm: syz.1.52 Not tainted syzkaller #0 PREEMPT(voluntary) [ 45.113006][ T3683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 45.113019][ T3683] Call Trace: [ 45.113058][ T3683] [ 45.113068][ T3683] __dump_stack+0x1d/0x30 [ 45.113096][ T3683] dump_stack_lvl+0xe8/0x140 [ 45.113122][ T3683] dump_stack+0x15/0x1b [ 45.113139][ T3683] should_fail_ex+0x265/0x280 [ 45.113211][ T3683] should_failslab+0x8c/0xb0 [ 45.113242][ T3683] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 45.113337][ T3683] ? vfs_getxattr_alloc+0x338/0x3b0 [ 45.113362][ T3683] krealloc_node_align_noprof+0xd7/0x340 [ 45.113401][ T3683] vfs_getxattr_alloc+0x338/0x3b0 [ 45.113437][ T3683] cap_inode_getsecurity+0xad/0x510 [ 45.113525][ T3683] ? selinux_inode_getxattr+0x1c0/0x210 [ 45.113560][ T3683] security_inode_getsecurity+0x90/0xe0 [ 45.113649][ T3683] ? vfs_getxattr+0x129/0x250 [ 45.113711][ T3683] vfs_getxattr+0x140/0x250 [ 45.113745][ T3683] do_getxattr+0x129/0x2b0 [ 45.113779][ T3683] filename_getxattr+0xac/0x180 [ 45.113810][ T3683] __x64_sys_lgetxattr+0x10f/0x140 [ 45.113867][ T3683] x64_sys_call+0x2fb3/0x3000 [ 45.113890][ T3683] do_syscall_64+0xd2/0x200 [ 45.113915][ T3683] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 45.113994][ T3683] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 45.114024][ T3683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.114054][ T3683] RIP: 0033:0x7f929db7eec9 [ 45.114069][ T3683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.114117][ T3683] RSP: 002b:00007f929c5e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0 [ 45.114143][ T3683] RAX: ffffffffffffffda RBX: 00007f929ddd5fa0 RCX: 00007f929db7eec9 [ 45.114160][ T3683] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000200000000000 [ 45.114175][ T3683] RBP: 00007f929c5e7090 R08: 0000000000000000 R09: 0000000000000000 [ 45.114187][ T3683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.114203][ T3683] R13: 00007f929ddd6038 R14: 00007f929ddd5fa0 R15: 00007ffcdc369d28 [ 45.114229][ T3683] [ 45.557263][ T3699] process 'syz.2.55' launched './file1' with NULL argv: empty string added [ 45.602362][ T3703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.57'. [ 45.613987][ T3701] loop0: detected capacity change from 0 to 512 [ 45.627733][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.653755][ T3701] EXT4-fs warning (device loop0): ext4_xattr_inode_get:546: inode #11: comm ÿ: ea_inode file size=0 entry size=6 [ 45.667141][ T3701] ------------[ cut here ]------------ [ 45.672656][ T3701] EA inode 11 i_nlink=2 [ 45.672985][ T3701] WARNING: CPU: 1 PID: 3701 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x36a/0x380 [ 45.687565][ T3701] Modules linked in: [ 45.691566][ T3701] CPU: 1 UID: 0 PID: 3701 Comm: ÿ Not tainted syzkaller #0 PREEMPT(voluntary) [ 45.700775][ T3701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 45.710937][ T3701] RIP: 0010:ext4_xattr_inode_update_ref+0x36a/0x380 [ 45.717637][ T3701] Code: 90 49 8d 7e 40 e8 b6 00 b9 ff 4d 8b 6e 40 4c 89 e7 e8 ca fb b8 ff 41 8b 56 48 48 c7 c7 df 4d 55 86 4c 89 ee e8 17 08 68 ff 90 <0f> 0b 90 90 e9 ff fe ff ff e8 58 76 b0 03 0f 1f 84 00 00 00 00 00 [ 45.717668][ T3701] RSP: 0018:ffffc9000fcdb778 EFLAGS: 00010246 [ 45.717745][ T3701] RAX: 741c4bd695739e00 RBX: ffff88810718d308 RCX: 0000000000080000 [ 45.717761][ T3701] RDX: ffffc90001dda000 RSI: 00000000000041df RDI: 00000000000041e0 [ 45.717778][ T3701] RBP: 0000000000000002 R08: 0001c9000fcdb5f7 R09: 0000000000000000 [ 45.717855][ T3701] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88810718d2b8 [ 45.717922][ T3701] R13: 000000000000000b R14: ffff88810718d270 R15: 0000000000000001 [ 45.717940][ T3701] FS: 00007f2f5e01f6c0(0000) GS:ffff8882aef3a000(0000) knlGS:0000000000000000 [ 45.717964][ T3701] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.718006][ T3701] CR2: 00007f7b18b73ad8 CR3: 000000011f616000 CR4: 00000000003506f0 [ 45.718030][ T3701] Call Trace: [ 45.718040][ T3701] [ 45.718054][ T3701] ext4_xattr_inode_dec_ref_all+0x579/0x830 [ 45.718095][ T3701] ? errseq_check+0x2c/0x50 [ 45.718216][ T3701] ext4_xattr_delete_inode+0x6b7/0x790 [ 45.718263][ T3701] ? ext4_truncate+0x92e/0xae0 [ 45.718307][ T3701] ext4_evict_inode+0xa6a/0xd90 [ 45.718388][ T3701] ? __pfx_ext4_evict_inode+0x10/0x10 [ 45.718430][ T3701] evict+0x2e3/0x550 [ 45.718482][ T3701] ? __dquot_initialize+0x146/0x7c0 [ 45.718574][ T3701] iput+0x4ed/0x650 [ 45.718610][ T3701] ext4_process_orphan+0x1a9/0x1c0 [ 45.718645][ T3701] ext4_orphan_cleanup+0x6a8/0xa00 [ 45.718808][ T3701] ext4_fill_super+0x3483/0x3810 [ 45.718843][ T3701] ? snprintf+0x86/0xb0 [ 45.718881][ T3701] ? set_blocksize+0x1a8/0x310 [ 45.718910][ T3701] ? sb_set_blocksize+0xe3/0x100 [ 45.718994][ T3701] ? setup_bdev_super+0x30e/0x370 [ 45.719028][ T3701] ? __pfx_ext4_fill_super+0x10/0x10 [ 45.719055][ T3701] get_tree_bdev_flags+0x291/0x300 [ 45.719089][ T3701] ? __pfx_ext4_fill_super+0x10/0x10 [ 45.719131][ T3701] get_tree_bdev+0x1f/0x30 [ 45.719160][ T3701] ext4_get_tree+0x1c/0x30 [ 45.719215][ T3701] vfs_get_tree+0x57/0x1d0 [ 45.719336][ T3701] do_new_mount+0x24d/0x660 [ 45.719372][ T3701] path_mount+0x4a5/0xb70 [ 45.719421][ T3701] ? user_path_at+0x109/0x130 [ 45.719459][ T3701] __se_sys_mount+0x28c/0x2e0 [ 45.719503][ T3701] __x64_sys_mount+0x67/0x80 [ 45.719535][ T3701] x64_sys_call+0x2b51/0x3000 [ 45.719579][ T3701] do_syscall_64+0xd2/0x200 [ 45.719613][ T3701] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 45.719643][ T3701] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 45.719666][ T3701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.719724][ T3701] RIP: 0033:0x7f2f5f5c066a [ 45.719744][ T3701] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.719791][ T3701] RSP: 002b:00007f2f5e01ee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 45.719816][ T3701] RAX: ffffffffffffffda RBX: 00007f2f5e01eef0 RCX: 00007f2f5f5c066a [ 45.719829][ T3701] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f2f5e01eeb0 [ 45.719842][ T3701] RBP: 0000200000000180 R08: 00007f2f5e01eef0 R09: 0000000000800700 [ 45.719855][ T3701] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 45.719872][ T3701] R13: 00007f2f5e01eeb0 R14: 0000000000000473 R15: 0000200000000680 [ 45.719894][ T3701] [ 45.719901][ T3701] ---[ end trace 0000000000000000 ]--- [ 45.730041][ T3701] EXT4-fs (loop0): 1 orphan inode deleted [ 45.775698][ T3706] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 45.783935][ T3701] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.833968][ T3711] netlink: 'syz.2.59': attribute type 1 has an invalid length. [ 45.883114][ T3710] loop3: detected capacity change from 0 to 8192 [ 45.887558][ T3711] netlink: 'syz.2.59': attribute type 2 has an invalid length. [ 45.887577][ T3711] netlink: 5412 bytes leftover after parsing attributes in process `syz.2.59'. [ 46.041113][ T3713] loop1: detected capacity change from 0 to 512 [ 46.071573][ T3715] loop4: detected capacity change from 0 to 512 [ 46.087410][ T3713] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 46.105842][ T3715] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 46.130794][ T3713] EXT4-fs (loop1): 1 truncate cleaned up [ 46.156234][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.166434][ T3713] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.212505][ T3720] loop3: detected capacity change from 0 to 512 [ 46.220311][ T3715] EXT4-fs (loop4): 1 truncate cleaned up [ 46.231211][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.232150][ T3715] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.232558][ T3720] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 46.233882][ T3720] EXT4-fs (loop3): 1 truncate cleaned up [ 46.234451][ T3720] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.292127][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.352710][ T3727] loop0: detected capacity change from 0 to 512 [ 46.368376][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.380909][ T3729] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.472065][ T3741] loop1: detected capacity change from 0 to 512 [ 46.479385][ T3741] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 46.522087][ T3727] EXT4-fs error (device loop0): ext4_init_orphan_info:581: comm syz.0.62: inode #0: comm syz.0.62: iget: illegal inode # [ 46.557871][ T3741] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 46.594151][ T3727] EXT4-fs (loop0): get orphan inode failed [ 46.602802][ T3741] EXT4-fs (loop1): 1 truncate cleaned up [ 46.607100][ T3727] EXT4-fs (loop0): mount failed [ 46.633190][ T3741] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.757715][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.820186][ T3727] loop0: detected capacity change from 0 to 1024 [ 47.103238][ T3727] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.62: Failed to acquire dquot type 0 [ 47.116590][ T3772] loop1: detected capacity change from 0 to 512 [ 47.149355][ T3770] loop2: detected capacity change from 0 to 2048 [ 47.203786][ T3727] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 47.257055][ T3770] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.271603][ T3727] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.62: corrupted inode contents [ 47.295091][ T3727] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #13: comm syz.0.62: mark_inode_dirty error [ 47.309057][ T3727] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.62: corrupted inode contents [ 47.322997][ T3727] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.62: mark_inode_dirty error [ 47.335966][ T3727] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.62: corrupted inode contents [ 47.350115][ T3727] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 47.363407][ T3727] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.62: corrupted inode contents [ 47.378472][ T3727] EXT4-fs error (device loop0): ext4_truncate:4637: inode #13: comm syz.0.62: mark_inode_dirty error [ 47.391772][ T3727] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 47.407266][ T3727] EXT4-fs (loop0): 1 truncate cleaned up [ 47.419932][ T3727] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.435232][ T3778] FAULT_INJECTION: forcing a failure. [ 47.435232][ T3778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.448388][ T3778] CPU: 1 UID: 0 PID: 3778 Comm: syz.1.79 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 47.448421][ T3778] Tainted: [W]=WARN [ 47.448428][ T3778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 47.448443][ T3778] Call Trace: [ 47.448515][ T3778] [ 47.448593][ T3778] __dump_stack+0x1d/0x30 [ 47.448626][ T3778] dump_stack_lvl+0xe8/0x140 [ 47.448651][ T3778] dump_stack+0x15/0x1b [ 47.448747][ T3778] should_fail_ex+0x265/0x280 [ 47.448791][ T3778] should_fail+0xb/0x20 [ 47.448827][ T3778] should_fail_usercopy+0x1a/0x20 [ 47.448848][ T3778] _copy_from_user+0x1c/0xb0 [ 47.448878][ T3778] ___sys_sendmsg+0xc1/0x1d0 [ 47.448964][ T3778] __x64_sys_sendmsg+0xd4/0x160 [ 47.449029][ T3778] x64_sys_call+0x191e/0x3000 [ 47.449055][ T3778] do_syscall_64+0xd2/0x200 [ 47.449079][ T3778] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 47.449109][ T3778] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 47.449156][ T3778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.449178][ T3778] RIP: 0033:0x7f929db7eec9 [ 47.449251][ T3778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.449269][ T3778] RSP: 002b:00007f929c5c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.449287][ T3778] RAX: ffffffffffffffda RBX: 00007f929ddd6090 RCX: 00007f929db7eec9 [ 47.449299][ T3778] RDX: 0000000000000080 RSI: 00002000000003c0 RDI: 0000000000000008 [ 47.449311][ T3778] RBP: 00007f929c5c6090 R08: 0000000000000000 R09: 0000000000000000 [ 47.449405][ T3778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.449420][ T3778] R13: 00007f929ddd6128 R14: 00007f929ddd6090 R15: 00007ffcdc369d28 [ 47.449444][ T3778] [ 47.505586][ T3757] Set syz1 is full, maxelem 65536 reached [ 47.639468][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.673616][ T3783] netlink: 'syz.0.81': attribute type 4 has an invalid length. [ 47.763546][ T3788] loop1: detected capacity change from 0 to 512 [ 47.784556][ T3788] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 47.816750][ T3788] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 47.835428][ T3788] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.83: bg 0: block 248: padding at end of block bitmap is not set [ 47.851671][ T3792] FAULT_INJECTION: forcing a failure. [ 47.851671][ T3792] name failslab, interval 1, probability 0, space 0, times 0 [ 47.854931][ T3788] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.83: Failed to acquire dquot type 1 [ 47.864359][ T3792] CPU: 0 UID: 0 PID: 3792 Comm: syz.0.84 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 47.864396][ T3792] Tainted: [W]=WARN [ 47.864404][ T3792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 47.864420][ T3792] Call Trace: [ 47.864428][ T3792] [ 47.864521][ T3792] __dump_stack+0x1d/0x30 [ 47.864554][ T3792] dump_stack_lvl+0xe8/0x140 [ 47.864580][ T3792] dump_stack+0x15/0x1b [ 47.864614][ T3792] should_fail_ex+0x265/0x280 [ 47.864663][ T3792] should_failslab+0x8c/0xb0 [ 47.864733][ T3792] kmem_cache_alloc_noprof+0x50/0x480 [ 47.864774][ T3792] ? audit_log_start+0x342/0x720 [ 47.864803][ T3792] audit_log_start+0x342/0x720 [ 47.864857][ T3792] ? _raw_spin_lock_irqsave+0x3a/0x90 [ 47.864960][ T3792] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 47.865009][ T3792] audit_seccomp+0x48/0x100 [ 47.865051][ T3792] ? __seccomp_filter+0x82d/0x1250 [ 47.865175][ T3792] __seccomp_filter+0x83e/0x1250 [ 47.865236][ T3792] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 47.865279][ T3792] ? vfs_write+0x7e8/0x960 [ 47.865312][ T3792] ? __rcu_read_unlock+0x4f/0x70 [ 47.865420][ T3792] ? __fget_files+0x184/0x1c0 [ 47.865460][ T3792] __secure_computing+0x82/0x150 [ 47.865496][ T3792] syscall_trace_enter+0xcf/0x1e0 [ 47.865628][ T3792] do_syscall_64+0xac/0x200 [ 47.865725][ T3792] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 47.865765][ T3792] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 47.865796][ T3792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.865828][ T3792] RIP: 0033:0x7f2f5f5bd8dc [ 47.865881][ T3792] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 47.865908][ T3792] RSP: 002b:00007f2f5e01f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 47.865937][ T3792] RAX: ffffffffffffffda RBX: 00007f2f5f815fa0 RCX: 00007f2f5f5bd8dc [ 47.865956][ T3792] RDX: 000000000000000f RSI: 00007f2f5e01f0a0 RDI: 0000000000000005 [ 47.865974][ T3792] RBP: 00007f2f5e01f090 R08: 0000000000000000 R09: 0000000000000000 [ 47.865993][ T3792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.866011][ T3792] R13: 00007f2f5f816038 R14: 00007f2f5f815fa0 R15: 00007fff62f197f8 [ 47.866038][ T3792] [ 47.901619][ T3785] loop4: detected capacity change from 0 to 512 [ 47.940021][ T3788] EXT4-fs (loop1): 1 truncate cleaned up [ 47.996996][ T3785] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 48.002948][ T3788] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 48.014115][ T3785] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, [ 48.066477][ T3788] syz.1.83 (3788) used greatest stack depth: 9248 bytes left [ 48.072905][ T3785] inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 48.161592][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 48.165497][ T3479] usb 2-1: device descriptor read/8, error -110 [ 48.181952][ T3785] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.82: corrupted inode contents [ 48.220147][ T3800] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 48.238524][ T3785] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #11: comm syz.4.82: mark_inode_dirty error [ 48.252028][ T3800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.87'. [ 48.271051][ T3785] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.82: invalid indirect mapped block 1 (level 1) [ 48.285509][ T3479] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 48.305478][ T3479] usb 2-1: enqueue for inactive port 0 [ 48.311026][ T3479] usb 2-1: enqueue for inactive port 0 [ 48.311358][ T3785] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.82: corrupted inode contents [ 48.328915][ T3479] usb 2-1: enqueue for inactive port 0 [ 48.369168][ T3810] FAULT_INJECTION: forcing a failure. [ 48.369168][ T3810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.382542][ T3810] CPU: 1 UID: 0 PID: 3810 Comm: syz.1.90 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 48.382584][ T3810] Tainted: [W]=WARN [ 48.382593][ T3810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 48.382618][ T3810] Call Trace: [ 48.382625][ T3810] [ 48.382634][ T3810] __dump_stack+0x1d/0x30 [ 48.382657][ T3810] dump_stack_lvl+0xe8/0x140 [ 48.382682][ T3810] dump_stack+0x15/0x1b [ 48.382781][ T3810] should_fail_ex+0x265/0x280 [ 48.382827][ T3810] should_fail+0xb/0x20 [ 48.382869][ T3810] should_fail_usercopy+0x1a/0x20 [ 48.382897][ T3810] copy_fpstate_to_sigframe+0x628/0x7d0 [ 48.382959][ T3810] ? copy_fpstate_to_sigframe+0xe6/0x7d0 [ 48.383001][ T3810] ? x86_task_fpu+0x36/0x60 [ 48.383063][ T3810] get_sigframe+0x34d/0x490 [ 48.383087][ T3810] ? get_signal+0xdc7/0xf70 [ 48.383118][ T3810] x64_setup_rt_frame+0xa8/0x580 [ 48.383146][ T3810] arch_do_signal_or_restart+0x23e/0x440 [ 48.383175][ T3810] exit_to_user_mode_loop+0x77/0x110 [ 48.383207][ T3810] do_syscall_64+0x1d6/0x200 [ 48.383286][ T3810] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 48.383321][ T3810] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 48.383351][ T3810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.383416][ T3810] RIP: 0033:0x7f929db7eec7 [ 48.383435][ T3810] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 48.383475][ T3810] RSP: 002b:00007f929c5e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 48.383500][ T3810] RAX: 0000000000000013 RBX: 00007f929ddd5fa0 RCX: 00007f929db7eec9 [ 48.383564][ T3810] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000003 [ 48.383581][ T3810] RBP: 00007f929c5e7090 R08: 0000000000000000 R09: 0000000000000000 [ 48.383597][ T3810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.383620][ T3810] R13: 00007f929ddd6038 R14: 00007f929ddd5fa0 R15: 00007ffcdc369d28 [ 48.383645][ T3810] [ 48.395739][ T3807] loop3: detected capacity change from 0 to 1024 [ 48.475101][ T3810] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 48.475133][ T3810] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 48.475166][ T3810] vhci_hcd vhci_hcd.0: Device attached [ 48.495487][ T3785] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 48.626023][ T3810] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 48.637720][ T3810] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 48.645393][ T3810] vhci_hcd vhci_hcd.0: Device attached [ 48.648009][ T3785] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.82: corrupted inode contents [ 48.663926][ T3785] EXT4-fs error (device loop4): ext4_truncate:4637: inode #11: comm syz.4.82: mark_inode_dirty error [ 48.664322][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.675667][ T3785] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 48.697779][ T3785] EXT4-fs (loop4): 1 truncate cleaned up [ 48.702727][ T3811] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(9) [ 48.704384][ T3785] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.710082][ T3811] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 48.710164][ T3811] vhci_hcd vhci_hcd.0: Device attached [ 48.773017][ T3807] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.89: Failed to acquire dquot type 0 [ 48.790898][ T3812] vhci_hcd: connection closed [ 48.791019][ T3817] vhci_hcd: connection closed [ 48.798025][ T58] vhci_hcd: stop threads [ 48.807077][ T58] vhci_hcd: release socket [ 48.811566][ T58] vhci_hcd: disconnect device [ 48.813454][ T3785] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 48.825174][ T3814] vhci_hcd: connection closed [ 48.825938][ T10] vhci_hcd: vhci_device speed not set [ 48.850079][ T3785] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.851186][ T3807] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 48.860776][ T58] vhci_hcd: stop threads [ 48.860789][ T58] vhci_hcd: release socket [ 48.860802][ T58] vhci_hcd: disconnect device [ 48.861075][ T58] vhci_hcd: stop threads [ 48.884300][ T3823] FAULT_INJECTION: forcing a failure. [ 48.884300][ T3823] name failslab, interval 1, probability 0, space 0, times 0 [ 48.888758][ T58] vhci_hcd: release socket [ 48.888776][ T58] vhci_hcd: disconnect device [ 48.893097][ T3823] CPU: 1 UID: 0 PID: 3823 Comm: syz.0.92 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 48.893151][ T3823] Tainted: [W]=WARN [ 48.893210][ T3823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 48.893230][ T3823] Call Trace: [ 48.893239][ T3823] [ 48.893284][ T3823] __dump_stack+0x1d/0x30 [ 48.893313][ T3823] dump_stack_lvl+0xe8/0x140 [ 48.893341][ T3823] dump_stack+0x15/0x1b [ 48.893365][ T3823] should_fail_ex+0x265/0x280 [ 48.893476][ T3823] ? __se_sys_memfd_create+0x1cc/0x590 [ 48.893507][ T3823] should_failslab+0x8c/0xb0 [ 48.893545][ T3823] __kmalloc_cache_noprof+0x4c/0x4a0 [ 48.893632][ T3823] ? fput+0x8f/0xc0 [ 48.893676][ T3823] __se_sys_memfd_create+0x1cc/0x590 [ 48.893708][ T3823] __x64_sys_memfd_create+0x31/0x40 [ 48.893741][ T3823] x64_sys_call+0x2ac2/0x3000 [ 48.893844][ T3823] do_syscall_64+0xd2/0x200 [ 48.893879][ T3823] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 48.893991][ T3823] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 48.894022][ T3823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.894062][ T3823] RIP: 0033:0x7f2f5f5beec9 [ 48.894083][ T3823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.894109][ T3823] RSP: 002b:00007f2f5e01ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 48.894132][ T3823] RAX: ffffffffffffffda RBX: 0000000000000512 RCX: 00007f2f5f5beec9 [ 48.894151][ T3823] RDX: 00007f2f5e01eef0 RSI: 0000000000000000 RDI: 00007f2f5f642960 [ 48.894168][ T3823] RBP: 0000200000000380 R08: 00007f2f5e01ebb7 R09: 00007f2f5e01ee40 [ 48.894186][ T3823] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000080 [ 48.894208][ T3823] R13: 00007f2f5e01eef0 R14: 00007f2f5e01eeb0 R15: 0000200000000340 [ 48.894235][ T3823] [ 48.969491][ T3807] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #13: comm syz.3.89: corrupted inode contents [ 48.974490][ T10] usb 3-1: new full-speed USB device number 2 using vhci_hcd [ 48.974530][ T10] usb 3-1: enqueue for inactive port 0 [ 48.974554][ T10] usb 3-1: enqueue for inactive port 0 [ 48.974576][ T10] usb 3-1: enqueue for inactive port 0 [ 49.046228][ T10] vhci_hcd: vhci_device speed not set [ 49.061280][ T3807] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #13: comm syz.3.89: mark_inode_dirty error [ 49.089650][ T3825] loop0: detected capacity change from 0 to 512 [ 49.149786][ T3807] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #13: comm syz.3.89: corrupted inode contents [ 49.186903][ T3807] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.89: mark_inode_dirty error [ 49.199675][ T3825] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 49.208217][ T3825] EXT4-fs (loop0): orphan cleanup on readonly fs [ 49.216185][ T3807] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #13: comm syz.3.89: corrupted inode contents [ 49.231069][ T3825] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.93: corrupted inode contents [ 49.244889][ T3807] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 49.263020][ T3831] loop4: detected capacity change from 0 to 2048 [ 49.269889][ T3825] EXT4-fs (loop0): Remounting filesystem read-only [ 49.278424][ T3807] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #13: comm syz.3.89: corrupted inode contents [ 49.294429][ T3825] EXT4-fs (loop0): 1 truncate cleaned up [ 49.300376][ T314] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 49.301097][ T3807] EXT4-fs error (device loop3): ext4_truncate:4637: inode #13: comm syz.3.89: mark_inode_dirty error [ 49.310979][ T314] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 49.329198][ T314] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 49.336452][ T3807] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 49.344053][ T314] __quota_error: 385 callbacks suppressed [ 49.344069][ T314] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 49.354534][ T314] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 49.361490][ T3831] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 49.393220][ T3829] loop2: detected capacity change from 0 to 1024 [ 49.404359][ T3825] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.405655][ T3479] usb usb2-port1: attempt power cycle [ 49.443220][ T3807] EXT4-fs (loop3): 1 truncate cleaned up [ 49.459579][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.480218][ T3829] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 49.489987][ T3829] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 49.499563][ T3840] FAULT_INJECTION: forcing a failure. [ 49.499563][ T3840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.499959][ T3829] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.94: Failed to acquire dquot type 0 [ 49.512731][ T3840] CPU: 0 UID: 0 PID: 3840 Comm: +}[@ Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 49.512773][ T3840] Tainted: [W]=WARN [ 49.512781][ T3840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 49.512798][ T3840] Call Trace: [ 49.512806][ T3840] [ 49.512814][ T3840] __dump_stack+0x1d/0x30 [ 49.512858][ T3840] dump_stack_lvl+0xe8/0x140 [ 49.512884][ T3840] dump_stack+0x15/0x1b [ 49.512985][ T3840] should_fail_ex+0x265/0x280 [ 49.513032][ T3840] should_fail+0xb/0x20 [ 49.513074][ T3840] should_fail_usercopy+0x1a/0x20 [ 49.513102][ T3840] _copy_from_user+0x1c/0xb0 [ 49.513180][ T3840] copy_from_sockptr+0x5e/0xa0 [ 49.513214][ T3840] packet_setsockopt+0x941/0xfd0 [ 49.513245][ T3840] ? __pfx_packet_setsockopt+0x10/0x10 [ 49.513282][ T3840] __sys_setsockopt+0x184/0x200 [ 49.513381][ T3840] __x64_sys_setsockopt+0x64/0x80 [ 49.513417][ T3840] x64_sys_call+0x20ec/0x3000 [ 49.513487][ T3840] do_syscall_64+0xd2/0x200 [ 49.513519][ T3840] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 49.513612][ T3840] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 49.513636][ T3840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.513669][ T3840] RIP: 0033:0x7f2f5f5beec9 [ 49.513688][ T3840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.513712][ T3840] RSP: 002b:00007f2f5e01f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 49.513733][ T3840] RAX: ffffffffffffffda RBX: 00007f2f5f815fa0 RCX: 00007f2f5f5beec9 [ 49.513750][ T3840] RDX: 0000000000000012 RSI: 0000000000000107 RDI: 0000000000000004 [ 49.513834][ T3840] RBP: 00007f2f5e01f090 R08: 0000000000000004 R09: 0000000000000000 [ 49.513852][ T3840] R10: 0000200000006ffc R11: 0000000000000246 R12: 0000000000000001 [ 49.513870][ T3840] R13: 00007f2f5f816038 R14: 00007f2f5f815fa0 R15: 00007fff62f197f8 [ 49.513896][ T3840] [ 49.519715][ T3807] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.527377][ T29] audit: type=1400 audit(1760583606.052:634): avc: denied { wake_alarm } for pid=3839 comm="+}[@" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 49.582078][ T3829] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, [ 49.591118][ T3837] loop1: detected capacity change from 0 to 8192 [ 49.597764][ T3829] inode 13: [ 49.650384][ T3841] loop0: detected capacity change from 0 to 2048 [ 49.692265][ T3841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 49.694564][ T3829] block 144: [ 49.742357][ T3845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.97'. [ 49.753190][ T3829] freeing already freed block (bit 9); block bitmap corrupt. [ 49.847696][ T3829] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.94: corrupted inode contents [ 49.861455][ T3829] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #13: comm syz.2.94: mark_inode_dirty error [ 49.880402][ T3829] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.94: corrupted inode contents [ 49.909157][ T3829] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.94: mark_inode_dirty error [ 49.922618][ T3829] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.94: corrupted inode contents [ 49.936560][ T3829] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 49.947070][ T3695] loop1: p1 p2 p3 p4 [ 49.948350][ T3829] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.94: corrupted inode contents [ 49.951840][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 49.966723][ T3829] EXT4-fs error (device loop2): ext4_truncate:4637: inode #13: comm syz.2.94: mark_inode_dirty error [ 49.984505][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.986820][ T3695] loop1: p3 start 331777 is beyond EOD, truncated [ 50.000079][ T3695] loop1: p4 size 262144 extends beyond EOD, truncated [ 50.011382][ T3829] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 50.034978][ T3829] EXT4-fs (loop2): 1 truncate cleaned up [ 50.046141][ T3837] loop1: p1 p2 p3 p4 [ 50.056316][ T29] audit: type=1326 audit(1760583606.572:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.4.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1894eec9 code=0x7ffc0000 [ 50.079554][ T29] audit: type=1326 audit(1760583606.572:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.4.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1894eec9 code=0x7ffc0000 [ 50.103060][ T29] audit: type=1326 audit(1760583606.582:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.4.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7b1894eec9 code=0x7ffc0000 [ 50.127810][ T3847] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 50.129066][ T3829] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.138211][ T3847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.100'. [ 50.156701][ T3837] loop1: p3 start 331777 is beyond EOD, truncated [ 50.163250][ T3837] loop1: p4 size 262144 extends beyond EOD, truncated [ 50.189475][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.206071][ T29] audit: type=1326 audit(1760583606.582:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.4.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1894eec9 code=0x7ffc0000 [ 50.229414][ T29] audit: type=1326 audit(1760583606.582:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.4.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1894eec9 code=0x7ffc0000 [ 50.261076][ T3851] loop3: detected capacity change from 0 to 512 [ 50.281379][ T3851] EXT4-fs: inline encryption not supported [ 50.287923][ T3851] /dev/loop3: Can't open blockdev [ 50.328064][ T3856] loop2: detected capacity change from 0 to 1024 [ 50.339905][ T3856] EXT4-fs: Ignoring removed orlov option [ 50.384271][ T3695] udevd[3695]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 50.400190][ T3543] udevd[3543]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 50.408709][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 50.421479][ T3856] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.451811][ T3859] FAULT_INJECTION: forcing a failure. [ 50.451811][ T3859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.465063][ T3859] CPU: 0 UID: 0 PID: 3859 Comm: syz.3.104 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 50.465151][ T3859] Tainted: [W]=WARN [ 50.465158][ T3859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 50.465171][ T3859] Call Trace: [ 50.465178][ T3859] [ 50.465186][ T3859] __dump_stack+0x1d/0x30 [ 50.465213][ T3859] dump_stack_lvl+0xe8/0x140 [ 50.465238][ T3859] dump_stack+0x15/0x1b [ 50.465337][ T3859] should_fail_ex+0x265/0x280 [ 50.465381][ T3859] should_fail+0xb/0x20 [ 50.465422][ T3859] should_fail_usercopy+0x1a/0x20 [ 50.465532][ T3859] _copy_from_user+0x1c/0xb0 [ 50.465564][ T3859] ___sys_sendmsg+0xc1/0x1d0 [ 50.465620][ T3859] __x64_sys_sendmsg+0xd4/0x160 [ 50.465665][ T3859] x64_sys_call+0x191e/0x3000 [ 50.465696][ T3859] do_syscall_64+0xd2/0x200 [ 50.465719][ T3859] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 50.465753][ T3859] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 50.465834][ T3859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.465863][ T3859] RIP: 0033:0x7f8009ffeec9 [ 50.465883][ T3859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.465907][ T3859] RSP: 002b:00007f8008a5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.465932][ T3859] RAX: ffffffffffffffda RBX: 00007f800a255fa0 RCX: 00007f8009ffeec9 [ 50.466013][ T3859] RDX: 0000000020040000 RSI: 0000200000000480 RDI: 0000000000000007 [ 50.466030][ T3859] RBP: 00007f8008a5f090 R08: 0000000000000000 R09: 0000000000000000 [ 50.466046][ T3859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.466062][ T3859] R13: 00007f800a256038 R14: 00007f800a255fa0 R15: 00007ffdf3154768 [ 50.466141][ T3859] [ 50.533824][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 50.590281][ T3543] udevd[3543]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 50.617698][ T3695] udevd[3695]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 50.674785][ T3862] FAULT_INJECTION: forcing a failure. [ 50.674785][ T3862] name failslab, interval 1, probability 0, space 0, times 0 [ 50.687845][ T3862] CPU: 1 UID: 0 PID: 3862 Comm: syz.2.101 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 50.687882][ T3862] Tainted: [W]=WARN [ 50.687889][ T3862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 50.687901][ T3862] Call Trace: [ 50.687908][ T3862] [ 50.687915][ T3862] __dump_stack+0x1d/0x30 [ 50.687982][ T3862] dump_stack_lvl+0xe8/0x140 [ 50.688007][ T3862] dump_stack+0x15/0x1b [ 50.688028][ T3862] should_fail_ex+0x265/0x280 [ 50.688071][ T3862] ? alloc_pipe_info+0xae/0x350 [ 50.688167][ T3862] should_failslab+0x8c/0xb0 [ 50.688194][ T3862] __kmalloc_cache_noprof+0x4c/0x4a0 [ 50.688154][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 50.688301][ T3862] ? trace_event_buffer_commit+0x196/0x5c0 [ 50.688344][ T3862] alloc_pipe_info+0xae/0x350 [ 50.688452][ T3862] splice_direct_to_actor+0x592/0x680 [ 50.688485][ T3862] ? __pfx_direct_splice_actor+0x10/0x10 [ 50.688517][ T3862] ? bpf_bprintf_cleanup+0x50/0x80 [ 50.688672][ T3862] ? bpf_trace_printk+0xcf/0x1c0 [ 50.688700][ T3862] ? get_pid_task+0x96/0xd0 [ 50.688776][ T3862] ? avc_policy_seqno+0x15/0x30 [ 50.688856][ T3862] ? selinux_file_permission+0x1e4/0x320 [ 50.688936][ T3862] do_splice_direct+0xda/0x150 [ 50.688967][ T3862] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 50.689005][ T3862] do_sendfile+0x380/0x650 [ 50.689121][ T3862] __x64_sys_sendfile64+0x105/0x150 [ 50.689174][ T3862] x64_sys_call+0x2bb4/0x3000 [ 50.689286][ T3862] do_syscall_64+0xd2/0x200 [ 50.689353][ T3862] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 50.689390][ T3862] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 50.689451][ T3862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.689481][ T3862] RIP: 0033:0x7fd0feb9eec9 [ 50.689504][ T3862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.689528][ T3862] RSP: 002b:00007fd0fd5e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 50.689555][ T3862] RAX: ffffffffffffffda RBX: 00007fd0fedf6090 RCX: 00007fd0feb9eec9 [ 50.689647][ T3862] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 50.689665][ T3862] RBP: 00007fd0fd5e6090 R08: 0000000000000000 R09: 0000000000000000 [ 50.689682][ T3862] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 50.689700][ T3862] R13: 00007fd0fedf6128 R14: 00007fd0fedf6090 R15: 00007fff1a7f03f8 [ 50.689800][ T3862] [ 50.995927][ T3867] can0: slcan on ttyS3. [ 51.002042][ T3865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.009563][ T3865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.056428][ T3865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.063861][ T3865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.151674][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.195741][ T3866] can0 (unregistered): slcan off ttyS3. [ 51.330946][ T3885] loop2: detected capacity change from 0 to 512 [ 51.363758][ T3885] EXT4-fs (loop2): 1 orphan inode deleted [ 51.370123][ T3882] IPv6: NLM_F_CREATE should be specified when creating new route [ 51.522527][ T3885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.555655][ T3479] usb usb2-port1: unable to enumerate USB device [ 51.653536][ T3894] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 51.660107][ T3894] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 51.667891][ T3894] vhci_hcd vhci_hcd.0: Device attached [ 51.708996][ T3898] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 51.715663][ T3898] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 51.723277][ T3898] vhci_hcd vhci_hcd.0: Device attached [ 51.767548][ T3894] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(10) [ 51.774200][ T3894] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 51.781818][ T3894] vhci_hcd vhci_hcd.0: Device attached [ 51.790203][ T3880] loop1: detected capacity change from 0 to 1024 [ 51.806142][ T3902] loop4: detected capacity change from 0 to 2048 [ 51.813232][ T3894] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 51.854500][ T3902] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.869677][ T3880] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.112: Failed to acquire dquot type 0 [ 51.884251][ T3894] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 51.904888][ T3880] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 51.921600][ T23] vhci_hcd: vhci_device speed not set [ 51.928403][ T3895] vhci_hcd: connection closed [ 51.928532][ T3899] vhci_hcd: connection closed [ 51.933332][ T3903] vhci_hcd: connection closed [ 51.938812][ T314] vhci_hcd: stop threads [ 51.947907][ T314] vhci_hcd: release socket [ 51.952394][ T314] vhci_hcd: disconnect device [ 51.957493][ T3396] usb usb4-port1: attempt power cycle [ 51.977951][ T3902] 9p: Unknown access argument ÿÿÿÿÿÿÿÿ: -22 [ 51.984452][ T3880] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.112: corrupted inode contents [ 51.997022][ T23] usb 5-1: new full-speed USB device number 2 using vhci_hcd [ 52.004478][ T3900] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 52.010862][ T314] vhci_hcd: stop threads [ 52.015125][ T314] vhci_hcd: release socket [ 52.019618][ T314] vhci_hcd: disconnect device [ 52.026038][ T3880] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #13: comm syz.1.112: mark_inode_dirty error [ 52.029434][ T314] vhci_hcd: stop threads [ 52.040404][ T3880] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.112: corrupted inode contents [ 52.041780][ T314] vhci_hcd: release socket [ 52.041797][ T314] vhci_hcd: disconnect device [ 52.067406][ T3880] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.112: mark_inode_dirty error [ 52.093670][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.103714][ T3880] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.112: corrupted inode contents [ 52.118854][ T3880] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 52.144553][ T3880] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.112: corrupted inode contents [ 52.177596][ T3880] EXT4-fs error (device loop1): ext4_truncate:4637: inode #13: comm syz.1.112: mark_inode_dirty error [ 52.227023][ T3880] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 52.265797][ T3913] FAULT_INJECTION: forcing a failure. [ 52.265797][ T3913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.279094][ T3913] CPU: 0 UID: 0 PID: 3913 Comm: syz.0.119 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 52.279129][ T3913] Tainted: [W]=WARN [ 52.279138][ T3913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 52.279154][ T3913] Call Trace: [ 52.279162][ T3913] [ 52.279171][ T3913] __dump_stack+0x1d/0x30 [ 52.279230][ T3913] dump_stack_lvl+0xe8/0x140 [ 52.279250][ T3913] dump_stack+0x15/0x1b [ 52.279266][ T3913] should_fail_ex+0x265/0x280 [ 52.279309][ T3913] should_fail+0xb/0x20 [ 52.279375][ T3913] should_fail_usercopy+0x1a/0x20 [ 52.279496][ T3913] _copy_from_user+0x1c/0xb0 [ 52.279530][ T3913] do_sys_poll+0x149/0xbd0 [ 52.279566][ T3913] ? avc_has_perm+0xf7/0x180 [ 52.279650][ T3913] ? set_user_sigmask+0x84/0x190 [ 52.279719][ T3913] __se_sys_ppoll+0x1b9/0x200 [ 52.279755][ T3913] __x64_sys_ppoll+0x67/0x80 [ 52.279788][ T3913] x64_sys_call+0x1d52/0x3000 [ 52.279817][ T3913] do_syscall_64+0xd2/0x200 [ 52.279846][ T3913] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 52.279939][ T3913] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 52.279970][ T3913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.279999][ T3913] RIP: 0033:0x7f2f5f5beec9 [ 52.280015][ T3913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.280033][ T3913] RSP: 002b:00007f2f5e01f038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 52.280121][ T3913] RAX: ffffffffffffffda RBX: 00007f2f5f815fa0 RCX: 00007f2f5f5beec9 [ 52.280138][ T3913] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000000 [ 52.280258][ T3913] RBP: 00007f2f5e01f090 R08: 0000000000000000 R09: 0000000000000000 [ 52.280316][ T3913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.280332][ T3913] R13: 00007f2f5f816038 R14: 00007f2f5f815fa0 R15: 00007fff62f197f8 [ 52.280358][ T3913] [ 52.289434][ T3880] EXT4-fs (loop1): 1 truncate cleaned up [ 52.376741][ T3917] netlink: 24 bytes leftover after parsing attributes in process `syz.0.121'. [ 52.399469][ T3880] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.565035][ T3919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.120'. [ 52.579528][ T3922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.121'. [ 52.619336][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.630941][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.720043][ T3934] FAULT_INJECTION: forcing a failure. [ 52.720043][ T3934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.733181][ T3934] CPU: 1 UID: 0 PID: 3934 Comm: syz.2.123 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 52.733279][ T3934] Tainted: [W]=WARN [ 52.733285][ T3934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 52.733298][ T3934] Call Trace: [ 52.733304][ T3934] [ 52.733311][ T3934] __dump_stack+0x1d/0x30 [ 52.733334][ T3934] dump_stack_lvl+0xe8/0x140 [ 52.733409][ T3934] dump_stack+0x15/0x1b [ 52.733431][ T3934] should_fail_ex+0x265/0x280 [ 52.733468][ T3934] should_fail+0xb/0x20 [ 52.733548][ T3934] should_fail_usercopy+0x1a/0x20 [ 52.733569][ T3934] _copy_to_user+0x20/0xa0 [ 52.733722][ T3934] simple_read_from_buffer+0xb5/0x130 [ 52.733754][ T3934] proc_fail_nth_read+0x10e/0x150 [ 52.733795][ T3934] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 52.733829][ T3934] vfs_read+0x1a8/0x770 [ 52.733850][ T3934] ? __rcu_read_unlock+0x4f/0x70 [ 52.733923][ T3934] ? __fget_files+0x184/0x1c0 [ 52.734014][ T3934] ksys_read+0xda/0x1a0 [ 52.734046][ T3934] __x64_sys_read+0x40/0x50 [ 52.734068][ T3934] x64_sys_call+0x27c0/0x3000 [ 52.734090][ T3934] do_syscall_64+0xd2/0x200 [ 52.734173][ T3934] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 52.734206][ T3934] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 52.734236][ T3934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.734337][ T3934] RIP: 0033:0x7fd0feb9d8dc [ 52.734357][ T3934] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 52.734381][ T3934] RSP: 002b:00007fd0fd607030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 52.734402][ T3934] RAX: ffffffffffffffda RBX: 00007fd0fedf5fa0 RCX: 00007fd0feb9d8dc [ 52.734415][ T3934] RDX: 000000000000000f RSI: 00007fd0fd6070a0 RDI: 0000000000000005 [ 52.734493][ T3934] RBP: 00007fd0fd607090 R08: 0000000000000000 R09: 0000000000000000 [ 52.734509][ T3934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 52.734526][ T3934] R13: 00007fd0fedf6038 R14: 00007fd0fedf5fa0 R15: 00007fff1a7f03f8 [ 52.734548][ T3934] [ 52.977695][ T3932] tipc: Invalid UDP bearer configuration [ 52.977712][ T3932] tipc: Enabling of bearer rejected, failed to enable media [ 53.008760][ T3935] loop4: detected capacity change from 0 to 512 [ 53.155630][ T3935] EXT4-fs error (device loop4): ext4_init_orphan_info:581: comm syz.4.125: inode #0: comm syz.4.125: iget: illegal inode # [ 53.190306][ T3942] loop0: detected capacity change from 0 to 512 [ 53.194938][ T3953] ipip0: entered promiscuous mode [ 53.200371][ T3955] netlink: 'syz.2.134': attribute type 4 has an invalid length. [ 53.214101][ T3935] EXT4-fs (loop4): get orphan inode failed [ 53.219013][ T3953] netlink: 'syz.1.133': attribute type 1 has an invalid length. [ 53.227683][ T3953] netlink: 'syz.1.133': attribute type 2 has an invalid length. [ 53.235701][ T3953] netlink: 5412 bytes leftover after parsing attributes in process `syz.1.133'. [ 53.241939][ T3935] EXT4-fs (loop4): mount failed [ 53.261666][ T3942] EXT4-fs error (device loop0): ext4_init_orphan_info:581: comm syz.0.128: inode #0: comm syz.0.128: iget: illegal inode # [ 53.295263][ T3942] EXT4-fs (loop0): get orphan inode failed [ 53.324498][ T3942] EXT4-fs (loop0): mount failed [ 53.480125][ T3963] hub 9-0:1.0: USB hub found [ 53.490129][ T3964] loop0: detected capacity change from 0 to 1024 [ 53.508235][ T3958] loop1: detected capacity change from 0 to 1024 [ 53.534616][ T3963] hub 9-0:1.0: 8 ports detected [ 53.573483][ T3930] loop4: detected capacity change from 0 to 1024 [ 53.581241][ T3964] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.128: Failed to acquire dquot type 0 [ 53.581718][ T3964] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 53.668019][ T3958] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.135: Failed to acquire dquot type 0 [ 53.683796][ T3964] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.128: corrupted inode contents [ 53.691098][ T3930] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.125: Failed to acquire dquot type 0 [ 53.713233][ T3964] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #13: comm syz.0.128: mark_inode_dirty error [ 53.725006][ T3964] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.128: corrupted inode contents [ 53.739822][ T3958] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 53.757834][ T3964] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.128: mark_inode_dirty error [ 53.767344][ T3958] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.135: corrupted inode contents [ 53.771008][ T3930] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 53.800065][ T3964] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.128: corrupted inode contents [ 53.812231][ T3958] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #13: comm syz.1.135: mark_inode_dirty error [ 53.812782][ T3930] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.125: corrupted inode contents [ 53.837229][ T3964] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 53.840146][ T3958] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.135: corrupted inode contents [ 53.850403][ T3930] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #13: comm syz.4.125: mark_inode_dirty error [ 53.859095][ T3958] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.135: mark_inode_dirty error [ 53.870976][ T3964] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.128: corrupted inode contents [ 53.874424][ T3964] EXT4-fs error (device loop0): ext4_truncate:4637: inode #13: comm syz.0.128: mark_inode_dirty error [ 53.885404][ T3958] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.135: corrupted inode contents [ 53.895911][ T3930] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.125: corrupted inode contents [ 53.907559][ T3958] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 53.919638][ T3964] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 53.920063][ T3964] EXT4-fs (loop0): 1 truncate cleaned up [ 53.956542][ T3964] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.970053][ T3930] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.125: mark_inode_dirty error [ 53.973301][ T3958] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.135: corrupted inode contents [ 53.996186][ T3930] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.125: corrupted inode contents [ 54.035628][ T3958] EXT4-fs error (device loop1): ext4_truncate:4637: inode #13: comm syz.1.135: mark_inode_dirty error [ 54.056214][ T3930] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 54.058368][ T3958] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 54.095804][ T3396] usb usb4-port1: unable to enumerate USB device [ 54.096445][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.110158][ T3930] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.125: corrupted inode contents [ 54.125170][ T3958] EXT4-fs (loop1): 1 truncate cleaned up [ 54.156124][ T3981] netlink: 16 bytes leftover after parsing attributes in process `'. [ 54.164269][ T3981] netlink: 8 bytes leftover after parsing attributes in process `'. [ 54.167679][ T3930] EXT4-fs error (device loop4): ext4_truncate:4637: inode #13: comm syz.4.125: mark_inode_dirty error [ 54.195293][ T3958] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.220751][ T3930] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 54.240666][ T3930] EXT4-fs (loop4): 1 truncate cleaned up [ 54.271602][ T3930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.301485][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.362055][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.413786][ T3998] tmpfs: Bad value for 'mpol' [ 54.420832][ T3996] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.472225][ T29] kauditd_printk_skb: 526 callbacks suppressed [ 54.472240][ T29] audit: type=1326 audit(1760583610.992:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3979 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8009ffeec9 code=0x7ffc0000 [ 54.501927][ T4002] loop1: detected capacity change from 0 to 512 [ 54.503941][ T29] audit: type=1326 audit(1760583611.022:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3979 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8009ffeec9 code=0x7ffc0000 [ 54.532597][ T4002] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 54.533232][ T4000] loop4: detected capacity change from 0 to 2048 [ 54.550436][ T29] audit: type=1326 audit(1760583611.072:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3979 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8009ffeec9 code=0x7ffc0000 [ 54.551702][ T3996] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.573511][ T29] audit: type=1326 audit(1760583611.072:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3979 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8009ffeec9 code=0x7ffc0000 [ 54.599213][ T4002] EXT4-fs (loop1): 1 truncate cleaned up [ 54.606338][ T29] audit: type=1326 audit(1760583611.072:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3979 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8009ffeec9 code=0x7ffc0000 [ 54.612555][ T4002] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.641202][ T29] audit: type=1326 audit(1760583611.152:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3979 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f8009ffeec9 code=0x7ffc0000 [ 54.669753][ T29] audit: type=1326 audit(1760583611.152:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3979 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8009ffeec9 code=0x7ffc0000 [ 54.692429][ T29] audit: type=1326 audit(1760583611.152:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3979 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8009ffeec9 code=0x7ffc0000 [ 54.735634][ T29] audit: type=1326 audit(1760583611.262:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4001 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929db7eec9 code=0x7ffc0000 [ 54.759086][ T29] audit: type=1326 audit(1760583611.262:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4001 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929db7eec9 code=0x7ffc0000 [ 54.785556][ T4000] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 54.801895][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.812291][ T3996] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.839357][ T4008] loop3: detected capacity change from 0 to 2048 [ 54.858598][ T4000] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 54.873954][ T4000] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 758 with error 28 [ 54.886823][ T4000] EXT4-fs (loop4): This should not happen!! Data will be lost [ 54.886823][ T4000] [ 54.897148][ T4000] EXT4-fs (loop4): Total free blocks count 0 [ 54.903387][ T4000] EXT4-fs (loop4): Free/Dirty block details [ 54.903631][ T3301] loop3: p2 p3 p7 [ 54.909384][ T4000] EXT4-fs (loop4): free_blocks=2415919104 [ 54.909405][ T4000] EXT4-fs (loop4): dirty_blocks=768 [ 54.924197][ T4000] EXT4-fs (loop4): Block reservation details [ 54.930248][ T4000] EXT4-fs (loop4): i_reserved_data_blocks=48 [ 54.951290][ T4008] loop3: p2 p3 p7 [ 54.960201][ T3996] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.028853][ T60] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.058163][ T3695] udevd[3695]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 55.069540][ T3543] udevd[3543]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 55.074770][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 55.097688][ T60] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.124235][ T60] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.136107][ T3454] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 2 with error 28 [ 55.143877][ T60] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.185651][ T4027] netlink: 20 bytes leftover after parsing attributes in process `syz.0.160'. [ 55.195244][ T4024] loop2: detected capacity change from 0 to 512 [ 55.217371][ T4027] syz.0.160 uses obsolete (PF_INET,SOCK_PACKET) [ 55.290721][ T4024] EXT4-fs error (device loop2): ext4_init_orphan_info:581: comm syz.2.158: inode #0: comm syz.2.158: iget: illegal inode # [ 55.322489][ T4040] loop3: detected capacity change from 0 to 512 [ 55.330470][ T4024] EXT4-fs (loop2): get orphan inode failed [ 55.342400][ T4024] EXT4-fs (loop2): mount failed [ 55.362066][ T4040] EXT4-fs (loop3): orphan cleanup on readonly fs [ 55.365215][ T4021] loop1: detected capacity change from 0 to 1024 [ 55.389076][ T4040] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.163: EA inode hash validation failed [ 55.454225][ T4040] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 55.473605][ T4024] loop2: detected capacity change from 0 to 1024 [ 55.493655][ T4040] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.163: corrupted inode contents [ 55.540227][ T4040] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #15: comm syz.3.163: mark_inode_dirty error [ 55.562939][ T4040] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.163: corrupted inode contents [ 55.575543][ T4040] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2996: inode #15: comm syz.3.163: mark_inode_dirty error [ 55.586982][ T4021] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.156: Failed to acquire dquot type 0 [ 55.599455][ T4040] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.163: mark inode dirty (error -117) [ 55.599653][ T4040] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 55.599755][ T4040] EXT4-fs (loop3): 1 orphan inode deleted [ 55.600273][ T4040] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 55.644023][ T4024] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.158: Failed to acquire dquot type 0 [ 55.660460][ T4021] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 55.682268][ T4024] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 55.699341][ T4021] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.156: corrupted inode contents [ 55.722898][ T4021] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #13: comm syz.1.156: mark_inode_dirty error [ 55.723004][ T4024] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.158: corrupted inode contents [ 55.737272][ T4021] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.156: corrupted inode contents [ 55.760576][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.770832][ T4021] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.156: mark_inode_dirty error [ 55.803430][ T4024] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #13: comm syz.2.158: mark_inode_dirty error [ 55.835364][ T4057] loop3: detected capacity change from 0 to 512 [ 55.864834][ T4057] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 55.879242][ T4024] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.158: corrupted inode contents [ 55.882434][ T4021] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.156: corrupted inode contents [ 55.905380][ T4024] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.158: mark_inode_dirty error [ 55.918992][ T4051] netlink: 24 bytes leftover after parsing attributes in process `syz.0.167'. [ 55.928948][ T4051] netem: invalid attributes len -24 [ 55.934294][ T4051] netem: change failed [ 55.940766][ T4021] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 55.963584][ T4057] EXT4-fs (loop3): 1 truncate cleaned up [ 55.965214][ T4024] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.158: corrupted inode contents [ 55.969999][ T4057] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.994646][ T4021] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.156: corrupted inode contents [ 55.995543][ T4024] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 56.027355][ T4024] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.158: corrupted inode contents [ 56.037604][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.050816][ T4021] EXT4-fs error (device loop1): ext4_truncate:4637: inode #13: comm syz.1.156: mark_inode_dirty error [ 56.068034][ T4024] EXT4-fs error (device loop2): ext4_truncate:4637: inode #13: comm syz.2.158: mark_inode_dirty error [ 56.100600][ T4021] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 56.123073][ T4066] loop0: detected capacity change from 0 to 512 [ 56.130070][ T4024] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 56.167855][ T4024] EXT4-fs (loop2): 1 truncate cleaned up [ 56.178528][ T4066] loop0: detected capacity change from 0 to 2048 [ 56.187034][ T4021] EXT4-fs (loop1): 1 truncate cleaned up [ 56.198287][ T4069] loop3: detected capacity change from 0 to 164 [ 56.215725][ T4069] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 56.226662][ T4073] SELinux: policydb version 0 does not match my version range 15-35 [ 56.235272][ T4073] SELinux: failed to load policy [ 56.259198][ T4066] loop0: p2 p3 p7 [ 56.280498][ T4075] netlink: 'syz.3.176': attribute type 4 has an invalid length. [ 56.344336][ T3695] udevd[3695]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 56.344938][ T3543] udevd[3543]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 56.355544][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 56.386045][ T4081] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 56.393554][ T4081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.178'. [ 56.410960][ T4083] loop4: detected capacity change from 0 to 128 [ 56.458450][ T4083] ext4 filesystem being mounted at /37/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 56.497135][ T4093] loop2: detected capacity change from 0 to 512 [ 56.507464][ T4087] loop3: detected capacity change from 0 to 512 [ 56.532589][ T4093] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 56.561397][ T4093] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 56.576080][ T4093] EXT4-fs (loop2): 1 truncate cleaned up [ 56.599399][ T4087] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 56.608782][ T4087] EXT4-fs (loop3): orphan cleanup on readonly fs [ 56.618083][ T4087] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents [ 56.630058][ T4087] EXT4-fs (loop3): Remounting filesystem read-only [ 56.637395][ T4087] EXT4-fs (loop3): 1 truncate cleaned up [ 56.643290][ T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 56.653887][ T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 56.665176][ T4103] netlink: 44 bytes leftover after parsing attributes in process `syz.0.183'. [ 56.674383][ T4103] netem: unknown loss type 12 [ 56.679204][ T4103] netem: change failed [ 56.683855][ T12] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 56.705270][ T4105] ipip0: entered promiscuous mode [ 56.716170][ T4105] netlink: 'syz.2.186': attribute type 1 has an invalid length. [ 56.723994][ T4105] netlink: 'syz.2.186': attribute type 2 has an invalid length. [ 56.751188][ T4087] loop3: detected capacity change from 0 to 1024 [ 56.778687][ T4087] EXT4-fs: Ignoring removed oldalloc option [ 56.784767][ T4087] EXT4-fs: Ignoring removed bh option [ 56.811235][ T4087] EXT4-fs: Mount option(s) incompatible with ext2 [ 56.869922][ T4087] mmap: !}+#]))%+% (4087) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 56.882634][ T4121] syz0: rxe_newlink: already configured on bond_slave_0 [ 56.915173][ T4087] loop3: detected capacity change from 0 to 512 [ 56.933833][ T4123] loop4: detected capacity change from 0 to 2048 [ 56.942987][ T4125] 9pnet_fd: Insufficient options for proto=fd [ 56.952591][ T4087] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm !}+#]))%+%: inode has both inline data and extents flags [ 56.975877][ T4125] gre1: entered promiscuous mode [ 56.981353][ T4087] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm !}+#]))%+%: couldn't read orphan inode 15 (err -117) [ 56.997644][ T3301] loop4: p1 < > p4 [ 57.003762][ T3301] loop4: p4 size 8388608 extends beyond EOD, truncated [ 57.019316][ T4117] loop1: detected capacity change from 0 to 1024 [ 57.037957][ T4123] loop4: p1 < > p4 [ 57.042732][ T4123] loop4: p4 size 8388608 extends beyond EOD, truncated [ 57.055533][ T23] usb 5-1: enqueue for inactive port 0 [ 57.061241][ T23] usb 5-1: enqueue for inactive port 0 [ 57.070951][ T3001] loop4: p1 < > p4 [ 57.083147][ T3001] loop4: p4 size 8388608 extends beyond EOD, truncated [ 57.084050][ T4128] loop2: detected capacity change from 0 to 2048 [ 57.122491][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 57.135610][ T23] vhci_hcd: vhci_device speed not set [ 57.160345][ T4128] loop2: p2 p3 p7 [ 57.188853][ T4117] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.190: Failed to acquire dquot type 0 [ 57.212273][ T4117] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 57.240777][ T4117] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.190: corrupted inode contents [ 57.254244][ T4117] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #13: comm syz.1.190: mark_inode_dirty error [ 57.274412][ T3001] loop2: p2 p3 p7 [ 57.284056][ T4117] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.190: corrupted inode contents [ 57.330344][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 57.335985][ T3695] udevd[3695]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 57.358362][ T4117] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.190: mark_inode_dirty error [ 57.389411][ T3694] udevd[3694]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 57.392903][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 57.410994][ T3695] udevd[3695]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 57.429162][ T4117] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.190: corrupted inode contents [ 57.440493][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 57.451768][ T4117] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 57.463662][ T4117] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.190: corrupted inode contents [ 57.513394][ T4117] EXT4-fs error (device loop1): ext4_truncate:4637: inode #13: comm syz.1.190: mark_inode_dirty error [ 57.559102][ T4167] loop3: detected capacity change from 0 to 2048 [ 57.572972][ T4117] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 57.629018][ T4117] EXT4-fs (loop1): 1 truncate cleaned up [ 57.666984][ T4167] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 57.694440][ T4173] team_slave_0: entered promiscuous mode [ 57.700203][ T4173] team_slave_1: entered promiscuous mode [ 57.736601][ T4167] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 722 with error 28 [ 57.749129][ T4167] EXT4-fs (loop3): This should not happen!! Data will be lost [ 57.749129][ T4167] [ 57.759018][ T4167] EXT4-fs (loop3): Total free blocks count 0 [ 57.765014][ T4167] EXT4-fs (loop3): Free/Dirty block details [ 57.770970][ T4167] EXT4-fs (loop3): free_blocks=2415919104 [ 57.776740][ T4167] EXT4-fs (loop3): dirty_blocks=736 [ 57.781982][ T4167] EXT4-fs (loop3): Block reservation details [ 57.788093][ T4167] EXT4-fs (loop3): i_reserved_data_blocks=46 [ 57.832340][ T4178] loop0: detected capacity change from 0 to 2048 [ 57.853983][ T4165] __nla_validate_parse: 6 callbacks suppressed [ 57.854002][ T4165] netlink: 14 bytes leftover after parsing attributes in process `syz.4.204'. [ 57.869345][ T4180] loop1: detected capacity change from 0 to 4096 [ 57.889806][ T4165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.915631][ T4165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.941738][ T4165] bond0 (unregistering): Released all slaves [ 57.947247][ T3301] loop0: p2 p3 p7 [ 57.966274][ T4178] loop0: p2 p3 p7 [ 57.971906][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 2 with error 28 [ 57.984183][ T12] EXT4-fs (loop3): This should not happen!! Data will be lost [ 57.984183][ T12] [ 58.013586][ T4185] syz.2.211 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 58.083937][ T4189] loop3: detected capacity change from 0 to 2048 [ 58.091693][ T4193] tipc: Started in network mode [ 58.096747][ T4193] tipc: Node identity ac14140f, cluster identity 4711 [ 58.113140][ T4193] tipc: New replicast peer: 255.255.255.255 [ 58.119440][ T4193] tipc: Enabled bearer , priority 10 [ 58.391447][ T4211] FAULT_INJECTION: forcing a failure. [ 58.391447][ T4211] name failslab, interval 1, probability 0, space 0, times 0 [ 58.404313][ T4211] CPU: 0 UID: 0 PID: 4211 Comm: syz.4.217 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 58.404420][ T4211] Tainted: [W]=WARN [ 58.404428][ T4211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 58.404441][ T4211] Call Trace: [ 58.404446][ T4211] [ 58.404453][ T4211] __dump_stack+0x1d/0x30 [ 58.404480][ T4211] dump_stack_lvl+0xe8/0x140 [ 58.404506][ T4211] dump_stack+0x15/0x1b [ 58.404541][ T4211] should_fail_ex+0x265/0x280 [ 58.404587][ T4211] should_failslab+0x8c/0xb0 [ 58.404619][ T4211] kmem_cache_alloc_noprof+0x50/0x480 [ 58.404662][ T4211] ? audit_log_start+0x342/0x720 [ 58.404751][ T4211] audit_log_start+0x342/0x720 [ 58.404770][ T4211] ? _raw_spin_lock_irqsave+0x3a/0x90 [ 58.404850][ T4211] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 58.404892][ T4211] audit_seccomp+0x48/0x100 [ 58.404960][ T4211] ? __seccomp_filter+0x82d/0x1250 [ 58.405057][ T4211] __seccomp_filter+0x83e/0x1250 [ 58.405091][ T4211] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 58.405162][ T4211] ? vfs_write+0x7e8/0x960 [ 58.405191][ T4211] ? __rcu_read_unlock+0x4f/0x70 [ 58.405218][ T4211] ? bpf_trace_run2+0x124/0x1c0 [ 58.405252][ T4211] __secure_computing+0x82/0x150 [ 58.405286][ T4211] syscall_trace_enter+0xcf/0x1e0 [ 58.405323][ T4211] do_syscall_64+0xac/0x200 [ 58.405382][ T4211] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 58.405414][ T4211] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 58.405454][ T4211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.405475][ T4211] RIP: 0033:0x7f7b1894d8dc [ 58.405490][ T4211] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 58.405564][ T4211] RSP: 002b:00007f7b173af030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 58.405589][ T4211] RAX: ffffffffffffffda RBX: 00007f7b18ba5fa0 RCX: 00007f7b1894d8dc [ 58.405606][ T4211] RDX: 000000000000000f RSI: 00007f7b173af0a0 RDI: 0000000000000003 [ 58.405634][ T4211] RBP: 00007f7b173af090 R08: 0000000000000000 R09: 0000000000000000 [ 58.405647][ T4211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.405659][ T4211] R13: 00007f7b18ba6038 R14: 00007f7b18ba5fa0 R15: 00007ffcfe315e88 [ 58.405679][ T4211] [ 58.633233][ T4212] loop2: detected capacity change from 0 to 512 [ 58.639990][ T4212] ext4: Unknown parameter 'obj_type' [ 58.799898][ T4220] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 58.808590][ T4220] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 58.965761][ T4236] tipc: Started in network mode [ 58.970790][ T4236] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 58.982482][ T4234] loop0: detected capacity change from 0 to 512 [ 58.990826][ T4236] tipc: Enabled bearer , priority 10 [ 59.003434][ T4240] netlink: 'syz.1.225': attribute type 4 has an invalid length. [ 59.021801][ T4234] EXT4-fs error (device loop0): ext4_init_orphan_info:581: comm syz.0.223: inode #0: comm syz.0.223: iget: illegal inode # [ 59.044592][ T4234] EXT4-fs (loop0): get orphan inode failed [ 59.076318][ T4234] EXT4-fs (loop0): mount failed [ 59.126840][ T4246] x_tables: duplicate entry at hook 3 [ 59.186366][ T9] tipc: Node number set to 2886997007 [ 59.202361][ T4255] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 59.217878][ T4255] SET target dimension over the limit! [ 59.263253][ T4234] loop0: detected capacity change from 0 to 1024 [ 59.317510][ T4266] loop3: detected capacity change from 0 to 2048 [ 59.333659][ T4269] netlink: 'syz.1.227': attribute type 4 has an invalid length. [ 59.341492][ T4269] netlink: 152 bytes leftover after parsing attributes in process `syz.1.227'. [ 59.358760][ T4269] .`: renamed from bond0 (while UP) [ 59.379936][ T4269] netlink: 56 bytes leftover after parsing attributes in process `syz.1.227'. [ 59.397476][ T4234] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.223: Failed to acquire dquot type 0 [ 59.413203][ T4275] netlink: 24 bytes leftover after parsing attributes in process `syz.2.229'. [ 59.428516][ T4266] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 59.435273][ T4234] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 59.451385][ T4266] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1112 with error 28 [ 59.460727][ T4234] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.223: corrupted inode contents [ 59.471134][ T4266] EXT4-fs (loop3): This should not happen!! Data will be lost [ 59.471134][ T4266] [ 59.471155][ T4266] EXT4-fs (loop3): Total free blocks count 0 [ 59.471173][ T4266] EXT4-fs (loop3): Free/Dirty block details [ 59.471188][ T4266] EXT4-fs (loop3): free_blocks=2415919104 [ 59.471237][ T4266] EXT4-fs (loop3): dirty_blocks=1120 [ 59.471253][ T4266] EXT4-fs (loop3): Block reservation details [ 59.471268][ T4266] EXT4-fs (loop3): i_reserved_data_blocks=70 [ 59.487974][ T4234] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #13: comm syz.0.223: mark_inode_dirty error [ 59.544318][ T4234] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.223: corrupted inode contents [ 59.559347][ T4234] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.223: mark_inode_dirty error [ 59.573224][ T4234] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.223: corrupted inode contents [ 59.595295][ T4234] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 59.604790][ T4281] Cannot find add_set index 2 as target [ 59.606192][ T4234] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.223: corrupted inode contents [ 59.611630][ T4281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.231'. [ 59.626267][ T4234] EXT4-fs error (device loop0): ext4_truncate:4637: inode #13: comm syz.0.223: mark_inode_dirty error [ 59.647105][ T4234] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 59.660594][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 2 with error 28 [ 59.661147][ T4234] EXT4-fs (loop0): 1 truncate cleaned up [ 59.672956][ T12] EXT4-fs (loop3): This should not happen!! Data will be lost [ 59.672956][ T12] [ 59.736856][ T4286] netlink: 5452 bytes leftover after parsing attributes in process `syz.3.233'. [ 59.765745][ T3407] usb usb6-port1: attempt power cycle [ 59.856289][ T4299] netlink: 'syz.0.238': attribute type 1 has an invalid length. [ 59.864003][ T4299] netlink: 224 bytes leftover after parsing attributes in process `syz.0.238'. [ 59.884116][ T29] kauditd_printk_skb: 560 callbacks suppressed [ 59.884134][ T29] audit: type=1400 audit(1760583616.402:1712): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 59.916695][ T29] audit: type=1400 audit(1760583616.442:1713): avc: denied { firmware_load } for pid=4298 comm="syz.0.238" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 59.962950][ T29] audit: type=1400 audit(1760583616.472:1714): avc: denied { name_connect } for pid=4304 comm="syz.3.240" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 59.974885][ T4307] FAULT_INJECTION: forcing a failure. [ 59.974885][ T4307] name failslab, interval 1, probability 0, space 0, times 0 [ 59.996008][ T4307] CPU: 0 UID: 0 PID: 4307 Comm: syz.3.241 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 59.996128][ T4307] Tainted: [W]=WARN [ 59.996137][ T4307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 59.996154][ T4307] Call Trace: [ 59.996163][ T4307] [ 59.996173][ T4307] __dump_stack+0x1d/0x30 [ 59.996201][ T4307] dump_stack_lvl+0xe8/0x140 [ 59.996300][ T4307] dump_stack+0x15/0x1b [ 59.996369][ T4307] should_fail_ex+0x265/0x280 [ 59.996467][ T4307] ? v9fs_mount+0x51/0x5c0 [ 59.996490][ T4307] should_failslab+0x8c/0xb0 [ 59.996517][ T4307] __kmalloc_cache_noprof+0x4c/0x4a0 [ 59.996556][ T4307] v9fs_mount+0x51/0x5c0 [ 59.996578][ T4307] ? selinux_capable+0x31/0x40 [ 59.996641][ T4307] ? __pfx_v9fs_mount+0x10/0x10 [ 59.996658][ T4307] legacy_get_tree+0x78/0xd0 [ 59.996731][ T4307] vfs_get_tree+0x57/0x1d0 [ 59.996752][ T4307] do_new_mount+0x24d/0x660 [ 59.996814][ T4307] path_mount+0x4a5/0xb70 [ 59.996834][ T4307] ? user_path_at+0x109/0x130 [ 59.996864][ T4307] __se_sys_mount+0x28c/0x2e0 [ 59.996884][ T4307] ? fput+0x8f/0xc0 [ 59.996994][ T4307] __x64_sys_mount+0x67/0x80 [ 59.997025][ T4307] x64_sys_call+0x2b51/0x3000 [ 59.997052][ T4307] do_syscall_64+0xd2/0x200 [ 59.997074][ T4307] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 59.997136][ T4307] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 59.997156][ T4307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.997176][ T4307] RIP: 0033:0x7f8009ffeec9 [ 59.997190][ T4307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.997206][ T4307] RSP: 002b:00007f8008a5f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 59.997248][ T4307] RAX: ffffffffffffffda RBX: 00007f800a255fa0 RCX: 00007f8009ffeec9 [ 59.997260][ T4307] RDX: 0000200000001440 RSI: 0000200000001400 RDI: 00002000000013c0 [ 59.997271][ T4307] RBP: 00007f8008a5f090 R08: 00002000000000c0 R09: 0000000000000000 [ 59.997282][ T4307] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000002 [ 59.997293][ T4307] R13: 00007f800a256038 R14: 00007f800a255fa0 R15: 00007ffdf3154768 [ 59.997310][ T4307] [ 60.005588][ T3396] tipc: Node number set to 4269801488 [ 60.248696][ T4321] loop2: detected capacity change from 0 to 512 [ 60.290544][ T4316] loop3: detected capacity change from 0 to 512 [ 60.297761][ T4322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.311313][ T4316] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.325724][ T4316] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 60.337403][ T4324] loop0: detected capacity change from 0 to 512 [ 60.350843][ T4322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.361248][ T4324] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 60.379861][ T4316] EXT4-fs (loop3): 1 truncate cleaned up [ 60.383853][ T4321] EXT4-fs error (device loop2): ext4_init_orphan_info:581: comm syz.2.246: inode #0: comm syz.2.246: iget: illegal inode # [ 60.413725][ T29] audit: type=1326 audit(1760583616.932:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4312 comm="syz.3.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8009ffeec9 code=0x7ffc0000 [ 60.417415][ T4324] EXT4-fs (loop0): 1 truncate cleaned up [ 60.437425][ T29] audit: type=1326 audit(1760583616.932:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4312 comm="syz.3.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8009ffeec9 code=0x7ffc0000 [ 60.457653][ T4319] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4319 comm=syz.4.245 [ 60.466543][ T29] audit: type=1326 audit(1760583616.932:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4312 comm="syz.3.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8009ffeec9 code=0x7ffc0000 [ 60.494586][ T4321] EXT4-fs (loop2): get orphan inode failed [ 60.502598][ T29] audit: type=1326 audit(1760583616.932:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4312 comm="syz.3.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8009ffeec9 code=0x7ffc0000 [ 60.502642][ T29] audit: type=1326 audit(1760583616.932:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4312 comm="syz.3.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8009ffeec9 code=0x7ffc0000 [ 60.502686][ T29] audit: type=1326 audit(1760583616.932:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4312 comm="syz.3.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f8009ffeec9 code=0x7ffc0000 [ 60.502731][ T29] audit: type=1326 audit(1760583616.932:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4312 comm="syz.3.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8009ffeec9 code=0x7ffc0000 [ 60.529460][ T4319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=4319 comm=syz.4.245 [ 60.591723][ T4321] EXT4-fs (loop2): mount failed [ 60.782336][ T4334] loop1: detected capacity change from 0 to 1024 [ 60.844692][ T4342] loop3: detected capacity change from 0 to 512 [ 60.855636][ T4342] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.863433][ T4342] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 60.884128][ T4342] EXT4-fs (loop3): 1 truncate cleaned up [ 60.892441][ T4340] loop0: detected capacity change from 0 to 2048 [ 60.909933][ T4334] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.250: Failed to acquire dquot type 0 [ 60.929482][ T4321] loop2: detected capacity change from 0 to 1024 [ 60.977028][ T4334] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 60.993573][ T4334] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.250: corrupted inode contents [ 61.013743][ T4321] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.246: Failed to acquire dquot type 0 [ 61.026209][ T4334] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #13: comm syz.1.250: mark_inode_dirty error [ 61.043870][ T4334] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.250: corrupted inode contents [ 61.043907][ T4340] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 61.043992][ T4340] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1348 with error 28 [ 61.044023][ T4340] EXT4-fs (loop0): This should not happen!! Data will be lost [ 61.044023][ T4340] [ 61.044036][ T4340] EXT4-fs (loop0): Total free blocks count 0 [ 61.044050][ T4340] EXT4-fs (loop0): Free/Dirty block details [ 61.044064][ T4340] EXT4-fs (loop0): free_blocks=2415919104 [ 61.044077][ T4340] EXT4-fs (loop0): dirty_blocks=1360 [ 61.044092][ T4340] EXT4-fs (loop0): Block reservation details [ 61.044187][ T4340] EXT4-fs (loop0): i_reserved_data_blocks=85 [ 61.139441][ T4321] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 61.167010][ T4321] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.246: corrupted inode contents [ 61.170271][ T4334] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.250: mark_inode_dirty error [ 61.207209][ T4321] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #13: comm syz.2.246: mark_inode_dirty error [ 61.236122][ T4334] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.250: corrupted inode contents [ 61.259895][ T4321] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.246: corrupted inode contents [ 61.266691][ T4334] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 61.281670][ T4355] loop4: detected capacity change from 0 to 512 [ 61.282579][ T4355] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 61.300344][ T4321] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.246: mark_inode_dirty error [ 61.315662][ T4321] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.246: corrupted inode contents [ 61.330855][ T4334] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.250: corrupted inode contents [ 61.330909][ T4355] EXT4-fs (loop4): 1 truncate cleaned up [ 61.332635][ T4321] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 61.345400][ T4334] EXT4-fs error (device loop1): ext4_truncate:4637: inode #13: comm syz.1.250: mark_inode_dirty error [ 61.389345][ T4321] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.246: corrupted inode contents [ 61.402958][ T4321] EXT4-fs error (device loop2): ext4_truncate:4637: inode #13: comm syz.2.246: mark_inode_dirty error [ 61.404375][ T4334] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 61.417580][ T4321] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 61.440785][ T4321] EXT4-fs (loop2): 1 truncate cleaned up [ 61.460141][ T4334] EXT4-fs (loop1): 1 truncate cleaned up [ 61.480667][ T4361] netlink: 'syz.3.256': attribute type 4 has an invalid length. [ 61.520133][ T4364] FAULT_INJECTION: forcing a failure. [ 61.520133][ T4364] name failslab, interval 1, probability 0, space 0, times 0 [ 61.532873][ T4364] CPU: 0 UID: 0 PID: 4364 Comm: syz.3.258 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 61.532950][ T4364] Tainted: [W]=WARN [ 61.532958][ T4364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 61.532973][ T4364] Call Trace: [ 61.532981][ T4364] [ 61.532989][ T4364] __dump_stack+0x1d/0x30 [ 61.533024][ T4364] dump_stack_lvl+0xe8/0x140 [ 61.533166][ T4364] dump_stack+0x15/0x1b [ 61.533253][ T4364] should_fail_ex+0x265/0x280 [ 61.533292][ T4364] should_failslab+0x8c/0xb0 [ 61.533322][ T4364] kmem_cache_alloc_noprof+0x50/0x480 [ 61.533422][ T4364] ? audit_log_start+0x342/0x720 [ 61.533503][ T4364] audit_log_start+0x342/0x720 [ 61.533538][ T4364] ? should_fail_ex+0xdb/0x280 [ 61.533578][ T4364] audit_seccomp+0x48/0x100 [ 61.533613][ T4364] ? __seccomp_filter+0x82d/0x1250 [ 61.533642][ T4364] __seccomp_filter+0x83e/0x1250 [ 61.533709][ T4364] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 61.533802][ T4364] ? vfs_read+0x4e6/0x770 [ 61.533827][ T4364] ? __rcu_read_unlock+0x4f/0x70 [ 61.533910][ T4364] ? __fget_files+0x184/0x1c0 [ 61.533942][ T4364] __secure_computing+0x82/0x150 [ 61.533971][ T4364] syscall_trace_enter+0xcf/0x1e0 [ 61.534063][ T4364] do_syscall_64+0xac/0x200 [ 61.534151][ T4364] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 61.534180][ T4364] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 61.534236][ T4364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.534260][ T4364] RIP: 0033:0x7f8009ffd97f [ 61.534279][ T4364] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 61.534300][ T4364] RSP: 002b:00007f8008a5f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 61.534322][ T4364] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8009ffd97f [ 61.534407][ T4364] RDX: 0000000000000001 RSI: 00007f8008a5f0a0 RDI: 0000000000000003 [ 61.534421][ T4364] RBP: 00007f8008a5f090 R08: 0000000000000000 R09: 0000000000000000 [ 61.534434][ T4364] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 61.534448][ T4364] R13: 00007f800a256038 R14: 00007f800a255fa0 R15: 00007ffdf3154768 [ 61.534468][ T4364] [ 61.534918][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 61.625062][ T4365] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 61.630372][ T12] EXT4-fs (loop0): This should not happen!! Data will be lost [ 61.630372][ T12] [ 61.729020][ T4369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.261'. [ 61.734770][ T3407] usb usb6-port1: unable to enumerate USB device [ 61.803173][ T4367] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 61.829493][ T4373] netlink: 5452 bytes leftover after parsing attributes in process `syz.0.257'. [ 61.856128][ T4371] tipc: Enabled bearer , priority 0 [ 61.877041][ T4371] tipc: Disabling bearer [ 61.893897][ T4377] vhci_hcd: invalid port number 236 [ 61.911742][ T4377] loop3: detected capacity change from 0 to 256 [ 61.949222][ T4381] loop0: detected capacity change from 0 to 128 [ 61.956268][ T4378] loop1: detected capacity change from 0 to 512 [ 61.968016][ T4378] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.978452][ T4381] vfat: Unknown parameter '' [ 61.993167][ T4378] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 62.036362][ T4378] EXT4-fs (loop1): 1 truncate cleaned up [ 62.102795][ T4394] netlink: 20 bytes leftover after parsing attributes in process `syz.3.267'. [ 62.122308][ T4396] loop2: detected capacity change from 0 to 512 [ 62.151140][ T4396] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.177301][ T4396] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 62.208183][ T4396] EXT4-fs (loop2): 1 truncate cleaned up [ 62.324509][ T4407] Cannot find add_set index 2 as target [ 62.394465][ T4410] loop0: detected capacity change from 0 to 512 [ 62.423733][ T4410] EXT4-fs: Ignoring removed orlov option [ 62.487930][ T4410] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 62.528449][ T4410] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.271: corrupted in-inode xattr: e_value size too large [ 62.596081][ T4410] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.271: couldn't read orphan inode 15 (err -117) [ 62.649841][ T4420] loop3: detected capacity change from 0 to 1024 [ 62.707844][ T4420] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.273: Failed to acquire dquot type 0 [ 62.738298][ T4420] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 62.763241][ T4420] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #13: comm syz.3.273: corrupted inode contents [ 62.781810][ T4420] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #13: comm syz.3.273: mark_inode_dirty error [ 62.803958][ T4423] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=4423 comm=syz.1.284 [ 62.823883][ T4420] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #13: comm syz.3.273: corrupted inode contents [ 62.824076][ T4427] loop0: detected capacity change from 0 to 512 [ 62.841398][ T4427] EXT4-fs (loop0): orphan cleanup on readonly fs [ 62.853552][ T4429] vhci_hcd: invalid port number 236 [ 62.864777][ T4427] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.276: bad orphan inode 13 [ 62.869604][ T4420] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.273: mark_inode_dirty error [ 62.875241][ T4427] ext4_test_bit(bit=12, block=18) = 1 [ 62.875260][ T4427] is_bad_inode(inode)=0 [ 62.875270][ T4427] NEXT_ORPHAN(inode)=2130706432 [ 62.875278][ T4427] max_ino=32 [ 62.875287][ T4427] i_nlink=1 [ 62.928378][ T4427] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 62.940850][ T4429] loop2: detected capacity change from 0 to 256 [ 62.957978][ T4427] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.276: bg 0: block 248: padding at end of block bitmap is not set [ 62.993210][ T4427] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.276: Failed to acquire dquot type 1 [ 63.027015][ T4420] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #13: comm syz.3.273: corrupted inode contents [ 63.040817][ T4427] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 63.049029][ T4420] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 63.073265][ T4440] __nla_validate_parse: 3 callbacks suppressed [ 63.073285][ T4440] netlink: 27 bytes leftover after parsing attributes in process `syz.1.280'. [ 63.081859][ T4432] loop4: detected capacity change from 0 to 1024 [ 63.096543][ T4420] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #13: comm syz.3.273: corrupted inode contents [ 63.111466][ T4420] EXT4-fs error (device loop3): ext4_truncate:4637: inode #13: comm syz.3.273: mark_inode_dirty error [ 63.126039][ T4441] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.148644][ T4420] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 63.190384][ T4441] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.192511][ T4420] EXT4-fs (loop3): 1 truncate cleaned up [ 63.239783][ T4432] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.274: Failed to acquire dquot type 0 [ 63.248193][ T4445] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 63.258976][ T4445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.282'. [ 63.266350][ T4447] loop1: detected capacity change from 0 to 2048 [ 63.305213][ T4432] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 63.338048][ T4441] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.359707][ T4432] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.274: corrupted inode contents [ 63.375107][ T4447] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 63.392098][ T4432] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #13: comm syz.4.274: mark_inode_dirty error [ 63.416786][ T4447] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1100 with error 28 [ 63.429499][ T4447] EXT4-fs (loop1): This should not happen!! Data will be lost [ 63.429499][ T4447] [ 63.439188][ T4447] EXT4-fs (loop1): Total free blocks count 0 [ 63.445313][ T4447] EXT4-fs (loop1): Free/Dirty block details [ 63.451296][ T4447] EXT4-fs (loop1): free_blocks=2415919104 [ 63.457108][ T4447] EXT4-fs (loop1): dirty_blocks=1104 [ 63.462446][ T4447] EXT4-fs (loop1): Block reservation details [ 63.468945][ T4447] EXT4-fs (loop1): i_reserved_data_blocks=69 [ 63.479233][ T4459] loop3: detected capacity change from 0 to 512 [ 63.487198][ T4432] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.274: corrupted inode contents [ 63.501698][ T4441] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.502227][ T4432] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.274: mark_inode_dirty error [ 63.552803][ T4432] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.274: corrupted inode contents [ 63.569836][ T4459] ext4 filesystem being mounted at /61/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.580622][ T4432] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 63.617736][ T4432] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.274: corrupted inode contents [ 63.641728][ T3454] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.654027][ T3454] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.654970][ T4432] EXT4-fs error (device loop4): ext4_truncate:4637: inode #13: comm syz.4.274: mark_inode_dirty error [ 63.688994][ T4459] pim6reg1: entered promiscuous mode [ 63.694783][ T4459] pim6reg1: entered allmulticast mode [ 63.700587][ T4432] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 63.711809][ T60] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.738007][ T60] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.747476][ T4432] EXT4-fs (loop4): 1 truncate cleaned up [ 63.797073][ T3454] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 2 with error 28 [ 63.809515][ T3454] EXT4-fs (loop1): This should not happen!! Data will be lost [ 63.809515][ T3454] [ 63.911359][ T3454] ================================================================== [ 63.919512][ T3454] BUG: KCSAN: data-race in n_tty_receive_char_flow_ctrl / tty_set_termios [ 63.928061][ T3454] [ 63.930408][ T3454] write to 0xffff888118967d08 of 44 bytes by task 4478 on cpu 1: [ 63.938233][ T3454] tty_set_termios+0xc0/0x8c0 [ 63.942952][ T3454] set_termios+0x490/0x4d0 [ 63.947422][ T3454] tty_mode_ioctl+0x379/0x5c0 [ 63.952142][ T3454] n_tty_ioctl_helper+0x91/0x210 [ 63.957094][ T3454] n_tty_ioctl+0x101/0x200 [ 63.961534][ T3454] tty_ioctl+0x83f/0xb80 [ 63.965962][ T3454] __se_sys_ioctl+0xce/0x140 [ 63.970562][ T3454] __x64_sys_ioctl+0x43/0x50 [ 63.975164][ T3454] x64_sys_call+0x1816/0x3000 [ 63.979857][ T3454] do_syscall_64+0xd2/0x200 [ 63.984371][ T3454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.990274][ T3454] [ 63.992607][ T3454] read to 0xffff888118967d21 of 1 bytes by task 3454 on cpu 0: [ 64.000249][ T3454] n_tty_receive_char_flow_ctrl+0x23/0x1a0 [ 64.006109][ T3454] n_tty_lookahead_flow_ctrl+0xed/0x130 [ 64.011683][ T3454] tty_port_default_lookahead_buf+0x91/0xc0 [ 64.017659][ T3454] flush_to_ldisc+0x288/0x340 [ 64.022370][ T3454] process_scheduled_works+0x4ce/0x9d0 [ 64.027866][ T3454] worker_thread+0x582/0x770 [ 64.032481][ T3454] kthread+0x489/0x510 [ 64.036580][ T3454] ret_from_fork+0x122/0x1b0 [ 64.041221][ T3454] ret_from_fork_asm+0x1a/0x30 [ 64.045998][ T3454] [ 64.048324][ T3454] value changed: 0x11 -> 0x56 [ 64.053009][ T3454] [ 64.055337][ T3454] Reported by Kernel Concurrency Sanitizer on: [ 64.061509][ T3454] CPU: 0 UID: 0 PID: 3454 Comm: kworker/u8:7 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 64.072982][ T3454] Tainted: [W]=WARN [ 64.076789][ T3454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 64.087116][ T3454] Workqueue: events_unbound flush_to_ldisc [ 64.092943][ T3454] ================================================================== [ 64.125844][ T4482] team_slave_0: entered promiscuous mode [ 64.131685][ T4482] team_slave_1: entered promiscuous mode [ 64.138579][ T4477] loop0: detected capacity change from 0 to 512 [ 64.139263][ T4482] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 64.172588][ T4478] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 64.195865][ T4477] EXT4-fs error (device loop0): ext4_init_orphan_info:581: comm syz.0.289: inode #0: comm syz.0.289: iget: illegal inode # [ 64.211125][ T4477] EXT4-fs (loop0): get orphan inode failed [ 64.217900][ T4477] EXT4-fs (loop0): mount failed [ 64.280491][ T4477] loop0: detected capacity change from 0 to 1024 [ 64.302008][ T4477] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.289: Failed to acquire dquot type 0 [ 64.319585][ T4477] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 64.336336][ T4477] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.289: corrupted inode contents [ 64.350627][ T4477] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #13: comm syz.0.289: mark_inode_dirty error [ 64.366955][ T4477] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.289: corrupted inode contents [ 64.380213][ T4477] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.289: mark_inode_dirty error [ 64.392858][ T4477] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.289: corrupted inode contents [ 64.405696][ T4477] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 64.415946][ T4477] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.289: corrupted inode contents [ 64.428953][ T4477] EXT4-fs error (device loop0): ext4_truncate:4637: inode #13: comm syz.0.289: mark_inode_dirty error [ 64.441133][ T4477] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 64.452471][ T4477] EXT4-fs (loop0): 1 truncate cleaned up