last executing test programs: 3.3670808s ago: executing program 4 (id=404): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) pivot_root(&(0x7f0000000580)='./cgroup.cpu/cpuset.cpus\x00', 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8947, &(0x7f0000000340)={'vlan0\x00', @random="00009e0c1100"}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0xfe8e, 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e000000050000000300000000fbff3198f0ade7ca098e2a27b3ea8fcd00803f00080000", @ANYRES32=r3, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="fdffffff01000000040000000800"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x100000000000000}, 0x38) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_disconnect(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) 2.205081593s ago: executing program 3 (id=414): unshare(0x400) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x0) syz_open_dev$evdev(&(0x7f00000001c0), 0x7fff, 0x28801) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000480)={'wpan3\x00'}) r5 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x205, 0x2581) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0}) sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x811}, 0x24000080) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x200, {0x0, 0x0, 0x0, r8, {0xfff2}, {}, {0x9, 0x5}}}, 0x24}}, 0x0) 2.031197927s ago: executing program 3 (id=419): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x801, 0x43, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x4a00, 0x0, 0x8001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 1.982108661s ago: executing program 4 (id=422): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000880)={[{@data_err_abort}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@bh}, {@data_err_ignore}, {@lazytime}, {@data_err_ignore}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@data_err_ignore}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r3 = open(0x0, 0x64842, 0x86) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=r4], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) fdatasync(r5) 1.850584422s ago: executing program 3 (id=426): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000880)={[{@data_err_abort}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@bh}, {@data_err_ignore}, {@lazytime}, {@data_err_ignore}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@data_err_ignore}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r3 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r3, 0x0, 0x0, 0x7800, 0x0, 0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=r4], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) fdatasync(r5) 1.793295696s ago: executing program 0 (id=428): r0 = fsmount(0xffffffffffffffff, 0x1, 0x80) fsync(r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="59bb22bd7000000020001100000008002b01"], 0x28}}, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="780000001000ffff21bd7000f8dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="385a03002b92050028001280090001007665746800000000180002801400010000000000", @ANYRES8=r3, @ANYBLOB="10000000440001000a000100aaaaaaaaaabb000008000400b80f000004001a"], 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x200000000}, 0x18) r6 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6\xff\x03\x00\x00\x00\x00\x00\x00vs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\xca\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f1, 0x0) fcntl$setlease(r6, 0x400, 0x0) mq_unlink(&(0x7f00000000c0)='eth0\x00') close(r6) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="120000000200008008000000eb"], 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000003c0)={r0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="0900002a8c749f1ef1a6b580abc951d52747", @ANYRES16=r3, @ANYBLOB="040028bd7000ffdbdf25360000000c009900800000005e000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r9 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r9, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r8, &(0x7f0000000300)="05c164fd53fcb2e8", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 1.581117043s ago: executing program 0 (id=431): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @loopback, 0x6}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x120, 0x4) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c844) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), &(0x7f0000000140)=0x1) write(r0, &(0x7f00000001c0)='+', 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 1.536699177s ago: executing program 4 (id=434): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) 1.454195003s ago: executing program 4 (id=435): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x11) r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) write$selinux_validatetrans(r0, 0x0, 0x79) 1.426470615s ago: executing program 4 (id=436): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) gettid() rt_sigaction(0x16, &(0x7f0000000080)={&(0x7f0000000440)="c4a23d0643b9f0430fc079fff3460f1ec9f081035c000000f30faed446a900000000660f7ed238c461915492db8876efa1efa12eb22d233333f30fa7d0", 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) rt_sigsuspend(&(0x7f0000000000), 0x8) 1.400836428s ago: executing program 3 (id=437): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x50, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_INDEV={0x6a, 0x2, 'bridge_slave_0\x00'}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 1.218811732s ago: executing program 3 (id=442): socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x3d4e) bpf$PROG_LOAD(0x5, 0x0, 0x6692c20d2bb7a325) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x80000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000400)={0xa}) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x71, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0xfe7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f00000002c0)={0xfffa, 0x1}, 0x4) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r7, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x80}}, 0x0) epoll_create1(0x0) 1.091139562s ago: executing program 2 (id=445): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f000000b700)=[{{&(0x7f0000002500)={0xa, 0x4e20, 0x9, @mcast1, 0x9}, 0x1c, 0x0}}, {{&(0x7f0000006040)={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2c6}, 0x1c, 0x0}}], 0x2, 0x4004) (fail_nth: 3) 1.030861617s ago: executing program 2 (id=447): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x17) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r9}, 0x10) r10 = io_uring_setup(0x2e2d, &(0x7f0000000780)={0x0, 0xca8a}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r13, r14, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r11, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r12, 0x3516, 0x0, 0x4, 0x0, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) getsockname$packet(r8, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r15, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x34, 0x24, 0x800, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r15, {}, {0xffff, 0xffff}, {0xb, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r15, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 988.287591ms ago: executing program 2 (id=449): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000095000000000000004be98911ed523cf4451d51e400cbd30efbb0a73ceb2b050a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868162ff933958cb6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72beff7cda177e281ef0b7a1a97b2c8c5617bff8c9441a45fd951df19a9c6e933500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0xfffff000, 0xfe71, 0xffffffffffffff40, &(0x7f0000000080)="85d77444c5a569f1e21b08c0f264", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x3b) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xdcec2ce3859d418b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r5}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000009180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]}) signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xb4, 0x30, 0xffff, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_police={0x6c, 0x3ffe, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0x3, 0x6, "7caa27", 0x0, 0x6c, 0x1, @private1, @mcast2}}}}, 0x0) 947.219844ms ago: executing program 2 (id=450): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e00000004000000040000000600000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000f12478c710fb8a08864d6da2b0bc3a2456f1432da7167ba4b21ab8e29cf3c82b4f02106cdd535bdcf70aa9c979568df1bfcc45b0aa15fe8d7e02c7e5c6cd511f99a34103919809a60780a54504b7ecee040c7917f4c6e30834b7e7ee3fadcccbbdf74491d3f58f22a55eb8b62a89f98243836c0f84", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="3000000007868000000000000000000000000000080006400000000005000100070000000900020073797a3000000000"], 0x30}, 0x1, 0x0, 0x0, 0x200040c3}, 0x800) fdatasync(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410884, &(0x7f00000001c0)={[{@nouid32}, {@acl}]}, 0x1, 0x775, &(0x7f0000001180)="$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") prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x3}, 0x18) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x0, 0x40000000, 0x0, 0x3}, 0x8}) 900.043928ms ago: executing program 2 (id=453): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x14, 0x3, 0x7, 0x187a67a68afe9213, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40048c0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) timer_delete(r1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, 0x0, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 884.660079ms ago: executing program 1 (id=454): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000500), &(0x7f0000000580)}, 0x20) chown(0x0, 0xee00, 0x0) (fail_nth: 3) 624.31323ms ago: executing program 0 (id=455): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x45bd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50) 623.80981ms ago: executing program 1 (id=456): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000000000000000003a8371010a516079ac2da2398cff00f0213ac01f6a365e6ba195adb14c6f47b3899c0b4b81601f2a6f4b8c0bec79230da559e30634c46f1c0a5b4ef6b8084490dcd01b7b08bce881f19e552d4e063b7120971c63ca34ecdc6f6545691c1edf76430f1ba0b46d58df7833eb365e4e6823951f49dfd9dd6f9be391f5ba1cdc2957ee8bdcc04edf4e52078cdc2907688a3787c00f24b7fa1bd2c66246635fd9d8c533b0cf676e7cddc1b9fea44827f895b711cc2dbf827239cfc9040d7ecc809b1a34cf72d8e4602be426327f0ee9053b95956c7273e8a041e39fc863142c988f47b347cfe100"/263, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x4, 0x3, 0x0, 0x4e, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x4}}) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0xff03, &(0x7f0000001200)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000080031401002dbd7000000000000900020073797a320000000008004100736977001400000000000000008000000000000000000000b4a24bb98ad99395990ddcd43633d375637b6275424de8126162f30a9be75a7298b0e44b821beee111cc921ab790545805f492058ce603789474539fbbeb7697c4a0559118c1c17cc34f09b08dcbd8c6fec1eb101baf6df8fd1ed0100bf2c947a259e8a035c4215128def68ce2141fd1b6e86d344e314d7fcefd4a94f14d4609d3ae91b3e7ab6167d0643d4467995c27f441d7815ffb56014c6528d937ec4415fc355f11b4185d"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) socket$qrtr(0x2a, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000040)=0x0) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000300)={0x0, @nfc={0x27, r6, 0x0, 0x6}, @in={0x2, 0x4e21, @remote}, @can={0x1d, r4}, 0x6, 0x0, 0x0, 0x0, 0xf, 0x0, 0x4, 0x2, 0x7ff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) 617.69998ms ago: executing program 0 (id=457): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffb, r1, 0x1) 592.881792ms ago: executing program 0 (id=458): r0 = getpid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) write$cgroup_pid(r1, &(0x7f00000000c0)=r0, 0x12) socket$l2tp(0x2, 0x2, 0x73) close(r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0xf5, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x8, [{@rand_addr=0x86dd}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@multicast2}, {@loopback}, {@local, 0x4}, {@multicast1}]}]}}}}}}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x50) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/devices.allow\x00', 0x1, 0x0) 568.561624ms ago: executing program 1 (id=459): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xce9d8d60ab13d530, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000400)='{\x05T\x82\x89\x98Yi:') 555.093276ms ago: executing program 4 (id=460): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 496.84613ms ago: executing program 1 (id=461): syz_emit_ethernet(0x36, &(0x7f0000000300)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0x3, 0x6, "7caa27", 0x0, 0x6c, 0x1, @private1, @mcast2}}}}, 0x0) 483.687911ms ago: executing program 1 (id=462): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000340)=@raw=[@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}, @ldst={0x3, 0x3, 0x1, 0x4, 0xa, 0x20, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @generic={0x9, 0x5, 0xc, 0xb2e3, 0xf}, @alu={0x4, 0x0, 0xb, 0x4, 0x8, 0x100, 0x1}, @call={0x85, 0x0, 0x0, 0x1e}], &(0x7f0000000200)='syzkaller\x00', 0x81, 0x9e, &(0x7f0000000400)=""/158, 0x40f00, 0x20, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000500)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0xb, 0x9, 0x2}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000580)=[r1], &(0x7f0000000800)=[{0x2, 0x4, 0x5, 0x5}, {0x0, 0x2, 0x5, 0x9}, {0x0, 0x4, 0x6, 0x4}, {0x0, 0x2, 0xc, 0xc}, {0x3, 0x3, 0xb, 0xc}], 0x10, 0x7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="f6ffffffff"], 0x48) r4 = mq_open(&(0x7f0000000600)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdF\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1b\xf4\xce\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|9\x90\x8d\xf4r\xd9*\xd1\x83\n\x1a\xa8fa2\xd4:^\xd7a\x0f\x12}\a\x9d\xc9h\x02\xbe\xeb\x01\xd39LS\xefJ\xcc<\xc4\xc0\xb4A\xab{\x1b\x15<\x95\x02\xae\xfdT\x98\xf4\x85\a\x01@\x12\xe0<3\xb4\x97\xb6W\x84K\xd7\xc5\xf47\xed\xda4\xe2W\xb6r\xca\x1e\x90\xef\x13\xf1&~\x97n\x9f\x8eS\xa8R\xf6\x9d{9\x1bN\x81\x18~\xd7{', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r4, &(0x7f000001a3c0)=""/102381, 0xffffffffffffff32, 0x0, 0x0) 414.823017ms ago: executing program 1 (id=463): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600000095", @ANYRESHEX=r0, @ANYRES32=r0, @ANYRES8=r0, @ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYRES16], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r1}, 0x10) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e640000000800090000000000080006"], 0x4c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000900)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0xffffffffffffff61, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb1, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0xbffffffffffffffb}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xfff1, 0xffff}, {0x6, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffb}]}, 0x38}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000009c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x8020) r9 = io_uring_setup(0x4d42, &(0x7f0000000240)={0x0, 0xcb6c, 0x40, 0x3, 0x131}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') exit(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_uring_register$IORING_REGISTER_RESTRICTIONS(r9, 0xb, &(0x7f0000000480), 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28, 0xffffffffffffffff, 0x2}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000000)='rss_stat\x00', r10}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@resuid}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@grpquota}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000300)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) 392.582889ms ago: executing program 3 (id=464): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x13, &(0x7f00000002c0)=@raw=[@alu={0x7, 0x0, 0xc, 0x9, 0xd, 0xfffffffffffffff0, 0x10}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xe}, @map_val={0x18, 0xb, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @ldst={0x1, 0x3, 0x1, 0x2, 0x1, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @alu={0x4, 0x1, 0x1, 0xb, 0x0, 0x1, 0xffffffffffffffff}], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="a409000000000000140012800b61637365630000070002800800050000004000", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000400", 0x58, 0x6, 0xfe, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x16, 0xc2, 0x2000, 0x0, 0x7, {[@mptcp=@capable={0x1e, 0xc, 0xf, 0x1, 0x5, 0x1}, @md5sig={0x13, 0x12, "a1cbd12aa50e39de3b5624a87fb75f32"}, @md5sig={0x13, 0x12, "e9803cac6913fbfccc18ce5a512eaf73"}, @md5sig={0x13, 0x12, "f2a3c47d2be4dabe21013d40454c15b5"}]}}}}}}}}, 0x0) pipe(0x0) r8 = gettid() madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)=0x0) timer_settime(r9, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioprio_get$pid(0x1, r0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 259.006629ms ago: executing program 0 (id=465): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x1, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff4, 0x0, @perf_bp={0x0}, 0x4008, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYBLOB="000000000000000000000000ed557277d6ceab348606140000000040ed0000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='\x00'/28], 0x50) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2cc, &(0x7f0000000380)={[{@delalloc}]}, 0xfd, 0x4a5, &(0x7f0000000e00)="$eJzs3M1rHOUfAPDvbDZJ35Nff/WltdpoFYsvSZNWLShYBcGDgqCHepKYpKU2baSJ0JZgo5R6EbTgXQQvon+BJ0+ingSvepdCkV5aPa1MZmbdJLtJk02yafbzgWnm2X1mnuc7zzwzz8zsNIC21Zf+k0TsiIjfI6InIkq1GbZmU5rv9s3pkb9vTo8kUam8+VeSLha3bk6PFFmT/O/2LFFOV1S6ksTxOuVOXrx0Znh8fOx8nh6YOvv+wOTFS0+fPjt8auzU2LmhY8eOHhl87tmhZ1YlzrROt/Z9OLF/76tvX3t95MS1d3/+LonYVnxfG0eTnu+pzk5Xt8l8j61SYRvFzpr5pNzCirAs3RGRNlfnbP/viY4ru6rf9cQrH7e0csCaqlQqlaHGX89UgE0siVbXAGiN4kSfXv8W0zoNPTaEGy9lF0Bp3LfzKfumnN0H6c6ujXauUfl9EXFi5p8v0ymWfR+ic41qBQBsZj+k45+n6oz/yhH31uTblT8b6o2I/0XE7oj4f0TsiYh7Ist7X0TcX7+YvncalN83L71w/FO63kR4S0rHfy/kz7bmjv+qT8F6O/LUztn4O5OTp8fHDufb5FB0dqfpwbprTyJm0r+/fdao/NrxXzql5Rdjwbwe18vdc5cZHZ4abjrw3I2PIvaV68WfRPm/KGJvROxbYRmnn/hm/9xPOqpzS8e/iFV4zlT5KuLxrP1nYl78hWTx55MDW2J87PBAsVcs9MuvV99oVH4WfykWj39r84E2kLb/tnr7/4vV+HuT2ue1kwtW0bVUGVf/+KThNc1K9/+u5K05hV8Ynpo6PxjRlby28POaG9xF+sLot7P50/gPHazf/3fny6TxPxAR6U78YEQ8FBEH8ro/HBGPRMTBReL/6eVH32sY/4Em9v9VkMY/Wvf416j9lzGzJV/DmR+/b1R+tf2LBqvb/keLxGylZo9/S3SJO63pyrYaAAAA3F1KEbEjklJ/db5U6u/Pfi+/J7aVxicmp548OfHBudHsHYHe6CwVd7p6au6HDub3hov0UJ6+nKeP5PeNv+jYOpvuH5kYH2118NDmtkccjzr9P/VnR6trB6y5Bc/RKj2tqQiw7ryvCe1r5f3fkQPudkv04tJ61QNYf87i0L7q9f/LtYkksl/JA5uO8z+0r2r///wOMte87jX/5U3g7rPY+d9PAWBzM/6HtrSi9/o30kx8HbF4nmSjVHVZM582s3h5HWoYpRZun66WNMpQR0QLd4nynf6vFnGxcrnpQlt9ZAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFgd/wYAAP//+OPdbA==") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000500)='sched_process_hang\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000027010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x85a4f6425325cf6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r6, &(0x7f0000000000)=@abs={0x0, 0x0, 0x5}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000ac0)="0eb2c8ca3126012dee8e7c6be1e7a1b771355ab1c3bdb97bd81d32d17521fd86b0bf6349e32e39d42036177a5a1d55f29074a8f9d86be29e0ce9f5c742039430742e9033223e00beaf4a269510a74d18ecacff5e735f687dc358a820f89a143f501d6c73e1d7e671fe31ce996c2604a398b35e736670ebe0403e1c2619b5c73b43fae12dcbdbb3d69dba2d073541226d883456c0fe2985d70e8ba095beed970d775b1e751a57d9748e724c327ad98ddf01fb3564ef6e9bbaa2b9707eee6a65fef248375579f85247d9fd1381e28d02571ff6bfa39c86baf809", &(0x7f0000000880)="1d24ca95f66ebcd885b6a187dc8a4776de030ad1daada98f4cc6265ef50dc253e29a27c98a27719b47f6b608ba501eabd64b9ee170c659cead17d4d50bc8c041afda55d752c64b398b13d364c974a49472012f42ab3b89137ef5f04cf008f2bd85dbcc98753542ec3bcc3e0d70d172eedf138798cdd92bbc7886a6b6221dac1e58df25cd1837ba109b0a89efc465c08c06c1d732ff5beeda43cb69dec459c92d51ea37ddd8270bd9b0983e05b05ac25f46fa"}}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0xfffffffe, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc)=0x2, 0x5, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0) r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r10, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010027bd7000fedbdf251400000008001d00", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00afcf18cde5bf851b0800010001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r8, 0x0) write$selinux_load(r3, &(0x7f0000000840)=ANY=[@ANYRES64=r1, @ANYRESOCT=r7, @ANYRES8=r2, @ANYRESDEC=r0, @ANYRES16=r11], 0x2000) 0s ago: executing program 2 (id=466): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) (async, rerun: 64) lsetxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)=@md5={0x1, "5211eb8e5ce6935e9bbd76e32c4c956e"}, 0x11, 0x1) (async, rerun: 64) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x2, 0x1}, 0x9) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffa}]}) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) (async) setresuid(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): state [ 38.918434][ T4024] loop2: detected capacity change from 0 to 1024 [ 38.934005][ T51] bridge_slave_0: left promiscuous mode [ 38.939785][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.953179][ T4024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.033324][ T4024] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 39.071357][ T4034] hub 9-0:1.0: USB hub found [ 39.074239][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.084409][ T4034] hub 9-0:1.0: 8 ports detected [ 39.087488][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.100057][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.111708][ T51] bond0 (unregistering): Released all slaves [ 39.159986][ T4039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.169261][ T4039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.178730][ T51] hsr_slave_0: left promiscuous mode [ 39.185102][ T51] hsr_slave_1: left promiscuous mode [ 39.191631][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.199092][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.206774][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.214229][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.224220][ T51] veth1_macvtap: left promiscuous mode [ 39.229794][ T51] veth0_macvtap: left promiscuous mode [ 39.235370][ T51] veth1_vlan: left promiscuous mode [ 39.240724][ T51] veth0_vlan: left promiscuous mode [ 39.284990][ T4041] loop2: detected capacity change from 0 to 512 [ 39.304386][ T4041] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 39.313292][ T4041] EXT4-fs (loop2): orphan cleanup on readonly fs [ 39.324161][ T4041] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.101: corrupted inode contents [ 39.336828][ T51] team0 (unregistering): Port device team_slave_1 removed [ 39.336987][ T4041] EXT4-fs (loop2): Remounting filesystem read-only [ 39.351116][ T51] team0 (unregistering): Port device team_slave_0 removed [ 39.353652][ T4041] EXT4-fs (loop2): 1 truncate cleaned up [ 39.369267][ T3432] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 39.379913][ T3432] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 39.390511][ T3432] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 39.394879][ T3936] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.407791][ T3936] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.411761][ T4041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 39.424603][ T3936] bridge_slave_0: entered allmulticast mode [ 39.435139][ T3936] bridge_slave_0: entered promiscuous mode [ 39.454835][ T3936] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.461991][ T3936] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.479432][ T3936] bridge_slave_1: entered allmulticast mode [ 39.493175][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.493497][ T3936] bridge_slave_1: entered promiscuous mode [ 39.542655][ T3936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.584213][ T3936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.626136][ T3936] team0: Port device team_slave_0 added [ 39.633821][ T3936] team0: Port device team_slave_1 added [ 39.655395][ T4071] netlink: 60 bytes leftover after parsing attributes in process `syz.1.105'. [ 39.675251][ T3936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.682306][ T3936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.708368][ T3936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.745186][ T4076] loop4: detected capacity change from 0 to 2048 [ 39.752285][ T3936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.759239][ T3936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.785576][ T3936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.806080][ T4060] loop2: detected capacity change from 0 to 128 [ 39.833615][ T3936] hsr_slave_0: entered promiscuous mode [ 39.840639][ T3936] hsr_slave_1: entered promiscuous mode [ 39.846677][ T3936] debugfs: 'hsr0' already exists in 'hsr' [ 39.852513][ T3936] Cannot create hsr debugfs directory [ 40.031616][ T3797] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 40.041182][ T3797] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 40.056579][ T3797] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 40.069231][ T3797] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 40.133445][ T3797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.156888][ T3797] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.167059][ T3568] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.174164][ T3568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.187011][ T3572] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.194313][ T3572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.245861][ T3936] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.265860][ T3936] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.282333][ T3936] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.301140][ T3936] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.361962][ T3797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.435617][ T3936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.452567][ T3936] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.474003][ T3568] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.481190][ T3568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.502217][ T3568] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.509414][ T3568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.538246][ T3936] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.548691][ T3936] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.588246][ T3797] veth0_vlan: entered promiscuous mode [ 40.608437][ T3797] veth1_vlan: entered promiscuous mode [ 40.650371][ T3797] veth0_macvtap: entered promiscuous mode [ 40.658673][ T3797] veth1_macvtap: entered promiscuous mode [ 40.703232][ T3936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.735146][ T3797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.773118][ T4218] loop1: detected capacity change from 0 to 512 [ 40.860370][ T3797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.881488][ T4218] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 40.911844][ T3572] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.915097][ T4218] EXT4-fs (loop1): orphan cleanup on readonly fs [ 40.944858][ T3568] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.965134][ T4218] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.112: corrupted inode contents [ 40.970635][ T3568] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.986379][ T3568] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.995509][ T4218] EXT4-fs (loop1): Remounting filesystem read-only [ 41.004905][ T4218] EXT4-fs (loop1): 1 truncate cleaned up [ 41.012482][ T3432] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 41.023102][ T3432] __quota_error: 427 callbacks suppressed [ 41.023182][ T3432] Quota error (device loop1): write_blk: dquota write failed [ 41.036317][ T3432] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries [ 41.046350][ T3432] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 41.056981][ T3432] Quota error (device loop1): write_blk: dquota write failed [ 41.064647][ T3432] Quota error (device loop1): free_dqentry: Can't move quota data block (5) to free list [ 41.079985][ T29] audit: type=1326 audit(1755484156.449:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4250 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87341debe9 code=0x7ffc0000 [ 41.103540][ T29] audit: type=1326 audit(1755484156.449:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4250 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87341debe9 code=0x7ffc0000 [ 41.114121][ T4258] loop2: detected capacity change from 0 to 512 [ 41.126966][ T29] audit: type=1326 audit(1755484156.449:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4250 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f87341debe9 code=0x7ffc0000 [ 41.156553][ T29] audit: type=1326 audit(1755484156.449:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4250 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87341debe9 code=0x7ffc0000 [ 41.168663][ T3432] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 41.180424][ T29] audit: type=1326 audit(1755484156.449:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4250 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f87341debe9 code=0x7ffc0000 [ 41.190416][ T3432] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 41.220928][ T4218] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.253060][ T4258] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 41.277123][ T3936] veth0_vlan: entered promiscuous mode [ 41.290749][ T4258] EXT4-fs (loop2): mount failed [ 41.304033][ T3936] veth1_vlan: entered promiscuous mode [ 41.350507][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.372546][ T3936] veth0_macvtap: entered promiscuous mode [ 41.380793][ T3936] veth1_macvtap: entered promiscuous mode [ 41.424411][ T3936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.438247][ T4287] loop3: detected capacity change from 0 to 128 [ 41.441832][ T3936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.459996][ T4287] FAT-fs (loop3): error, corrupted file size (i_pos 548, 512) [ 41.467525][ T4287] FAT-fs (loop3): Filesystem has been set read-only [ 41.472482][ T3330] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.512454][ T3330] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.539163][ T3330] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.579378][ T3330] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.739203][ T4321] loop3: detected capacity change from 0 to 128 [ 41.793369][ T4323] hub 9-0:1.0: USB hub found [ 41.817616][ T4323] hub 9-0:1.0: 8 ports detected [ 41.955251][ T4300] loop0: detected capacity change from 0 to 1024 [ 41.982746][ T4300] EXT4-fs: Ignoring removed bh option [ 41.992239][ T4300] EXT4-fs: Ignoring removed nobh option [ 42.000770][ T4300] EXT4-fs: inline encryption not supported [ 42.069375][ T4340] loop1: detected capacity change from 0 to 1024 [ 42.094805][ T4340] EXT4-fs: Ignoring removed bh option [ 42.103681][ T4340] EXT4-fs: Ignoring removed nobh option [ 42.110750][ T4340] EXT4-fs: inline encryption not supported [ 42.132526][ T4300] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.157975][ T4357] loop2: detected capacity change from 0 to 1024 [ 42.164959][ T4357] EXT4-fs: Ignoring removed bh option [ 42.170411][ T4357] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.196702][ T4357] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.198646][ T4340] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.578646][ T4372] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 42.700812][ T4300] syz.0.82 (4300) used greatest stack depth: 10312 bytes left [ 42.736147][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.759809][ T3936] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.877924][ T4402] loop0: detected capacity change from 0 to 512 [ 42.886700][ T4402] EXT4-fs: Ignoring removed nobh option [ 42.947267][ T4402] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.129: corrupted inode contents [ 42.972341][ T4410] loop4: detected capacity change from 0 to 128 [ 42.979157][ T4417] loop3: detected capacity change from 0 to 512 [ 42.989038][ T4402] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.129: mark_inode_dirty error [ 43.083443][ T4402] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.129: corrupted inode contents [ 43.141476][ T4402] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.129: mark_inode_dirty error [ 43.158369][ T4402] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.129: Failed to acquire dquot type 0 [ 43.172721][ T4402] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.129: corrupted inode contents [ 43.186521][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.197352][ T4402] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.129: mark_inode_dirty error [ 43.210473][ T4417] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 43.225361][ T4402] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.129: corrupted inode contents [ 43.247467][ T4417] EXT4-fs (loop3): mount failed [ 43.265330][ T4402] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.129: mark_inode_dirty error [ 43.287086][ T4402] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.129: corrupted inode contents [ 43.325362][ T4402] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 43.360208][ T4402] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.129: corrupted inode contents [ 43.382894][ T4437] netlink: 12 bytes leftover after parsing attributes in process `syz.4.135'. [ 43.410484][ T4402] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.129: mark_inode_dirty error [ 43.434394][ T4402] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 43.483296][ T4402] EXT4-fs (loop0): 1 truncate cleaned up [ 43.497292][ T4402] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.534128][ T4456] FAULT_INJECTION: forcing a failure. [ 43.534128][ T4456] name failslab, interval 1, probability 0, space 0, times 0 [ 43.540958][ T4402] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.546926][ T4456] CPU: 0 UID: 0 PID: 4456 Comm: syz.2.139 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 43.547008][ T4456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 43.547020][ T4456] Call Trace: [ 43.547027][ T4456] [ 43.547035][ T4456] __dump_stack+0x1d/0x30 [ 43.547057][ T4456] dump_stack_lvl+0xe8/0x140 [ 43.547076][ T4456] dump_stack+0x15/0x1b [ 43.547092][ T4456] should_fail_ex+0x265/0x280 [ 43.547113][ T4456] should_failslab+0x8c/0xb0 [ 43.547212][ T4456] __kmalloc_noprof+0xa5/0x3e0 [ 43.547237][ T4456] ? do_handle_open+0x3a3/0x6b0 [ 43.547263][ T4456] do_handle_open+0x3a3/0x6b0 [ 43.547289][ T4456] __x64_sys_open_by_handle_at+0x44/0x50 [ 43.547363][ T4456] x64_sys_call+0x279b/0x2ff0 [ 43.547384][ T4456] do_syscall_64+0xd2/0x200 [ 43.547480][ T4456] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 43.547502][ T4456] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 43.547555][ T4456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.547576][ T4456] RIP: 0033:0x7f87341debe9 [ 43.547591][ T4456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.547608][ T4456] RSP: 002b:00007f8732c47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 43.547628][ T4456] RAX: ffffffffffffffda RBX: 00007f8734405fa0 RCX: 00007f87341debe9 [ 43.547641][ T4456] RDX: 00000000000cee02 RSI: 0000200000000000 RDI: 0000000000000005 [ 43.547672][ T4456] RBP: 00007f8732c47090 R08: 0000000000000000 R09: 0000000000000000 [ 43.547684][ T4456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.547696][ T4456] R13: 00007f8734406038 R14: 00007f8734405fa0 R15: 00007ffcfc4d6bf8 [ 43.547714][ T4456] [ 43.681788][ T4468] hub 9-0:1.0: USB hub found [ 43.738097][ T4402] syz.0.129 (4402) used greatest stack depth: 9760 bytes left [ 43.739403][ T4468] hub 9-0:1.0: 8 ports detected [ 43.755771][ T4472] hub 9-0:1.0: USB hub found [ 43.761631][ T4472] hub 9-0:1.0: 8 ports detected [ 43.801338][ T3936] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.895233][ T4487] can0: slcan on ptm0. [ 43.898593][ T4479] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 43.921356][ T4479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.142'. [ 43.970806][ T4485] can0 (unregistered): slcan off ptm0. [ 44.235045][ T4550] loop4: detected capacity change from 0 to 1024 [ 44.269481][ T4550] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.291050][ T4550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.149'. [ 44.300285][ T4550] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (8) [ 44.334459][ T4562] netlink: 16 bytes leftover after parsing attributes in process `syz.1.151'. [ 44.382593][ T4561] netlink: 'syz.2.150': attribute type 15 has an invalid length. [ 44.397964][ T4572] loop1: detected capacity change from 0 to 512 [ 44.413156][ T4572] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 44.424663][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.437093][ T4572] EXT4-fs (loop1): orphan cleanup on readonly fs [ 44.447633][ T4561] mmap: syz.2.150 (4561) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 44.457098][ T4572] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.152: corrupted inode contents [ 44.472121][ T4572] EXT4-fs (loop1): Remounting filesystem read-only [ 44.478849][ T4572] EXT4-fs (loop1): 1 truncate cleaned up [ 44.484922][ T31] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 44.495573][ T31] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 44.506903][ T31] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 44.523551][ T4581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.153'. [ 44.525599][ T4572] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.544015][ T4582] tipc: Started in network mode [ 44.550005][ T4582] tipc: Node identity 7, cluster identity 4711 [ 44.556234][ T4582] tipc: Node number set to 7 [ 44.565277][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.638467][ T4595] loop4: detected capacity change from 0 to 512 [ 44.655085][ T4587] can0: slcan on ptm0. [ 44.661860][ T4595] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 44.683175][ T4595] EXT4-fs (loop4): mount failed [ 44.740078][ T4586] can0 (unregistered): slcan off ptm0. [ 44.812406][ T4607] FAULT_INJECTION: forcing a failure. [ 44.812406][ T4607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.825526][ T4607] CPU: 0 UID: 0 PID: 4607 Comm: syz.0.163 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 44.825602][ T4607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 44.825612][ T4607] Call Trace: [ 44.825619][ T4607] [ 44.825627][ T4607] __dump_stack+0x1d/0x30 [ 44.825652][ T4607] dump_stack_lvl+0xe8/0x140 [ 44.825674][ T4607] dump_stack+0x15/0x1b [ 44.825699][ T4607] should_fail_ex+0x265/0x280 [ 44.825721][ T4607] should_fail+0xb/0x20 [ 44.825736][ T4607] should_fail_usercopy+0x1a/0x20 [ 44.825760][ T4607] _copy_from_user+0x1c/0xb0 [ 44.825789][ T4607] ___sys_sendmsg+0xc1/0x1d0 [ 44.825866][ T4607] __x64_sys_sendmsg+0xd4/0x160 [ 44.825890][ T4607] x64_sys_call+0x191e/0x2ff0 [ 44.825987][ T4607] do_syscall_64+0xd2/0x200 [ 44.826017][ T4607] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 44.826039][ T4607] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 44.826127][ T4607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.826146][ T4607] RIP: 0033:0x7f48810debe9 [ 44.826161][ T4607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.826234][ T4607] RSP: 002b:00007f487fb47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 44.826252][ T4607] RAX: ffffffffffffffda RBX: 00007f4881305fa0 RCX: 00007f48810debe9 [ 44.826264][ T4607] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 44.826308][ T4607] RBP: 00007f487fb47090 R08: 0000000000000000 R09: 0000000000000000 [ 44.826322][ T4607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.826335][ T4607] R13: 00007f4881306038 R14: 00007f4881305fa0 R15: 00007fff4df20708 [ 44.826353][ T4607] [ 45.014931][ T4609] loop2: detected capacity change from 0 to 512 [ 45.049556][ T4614] netlink: 5 bytes leftover after parsing attributes in process `syz.1.162'. [ 45.068015][ T4613] loop3: detected capacity change from 0 to 2048 [ 45.089889][ T4609] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 45.122703][ T4609] EXT4-fs (loop2): orphan cleanup on readonly fs [ 45.132861][ T4613] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.168650][ T4609] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.165: corrupted inode contents [ 45.183587][ T4609] EXT4-fs (loop2): Remounting filesystem read-only [ 45.190645][ T4609] EXT4-fs (loop2): 1 truncate cleaned up [ 45.197202][ T3575] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 45.207815][ T3575] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 45.249881][ T3575] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 45.291790][ T4609] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.292469][ T4629] netlink: 60 bytes leftover after parsing attributes in process `syz.1.170'. [ 45.330067][ T3797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.340278][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.404455][ T4633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.427424][ T4616] netdevsim netdevsim4: Direct firmware load for .. failed with error -2 [ 45.429028][ T4637] can0: slcan on ptm0. [ 45.440720][ T4633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.449096][ T4638] netlink: 32 bytes leftover after parsing attributes in process `syz.3.172'. [ 45.547830][ T4649] loop4: detected capacity change from 0 to 2048 [ 45.561864][ T4649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.576113][ T4636] can0 (unregistered): slcan off ptm0. [ 45.731079][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.798153][ T4685] loop1: detected capacity change from 0 to 512 [ 45.822958][ T4685] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 45.831176][ T4685] EXT4-fs (loop1): orphan cleanup on readonly fs [ 45.839572][ T4685] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.182: corrupted inode contents [ 45.853069][ T4685] EXT4-fs (loop1): Remounting filesystem read-only [ 45.859743][ T4685] EXT4-fs (loop1): 1 truncate cleaned up [ 45.865552][ T4248] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 45.876129][ T4248] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 45.886919][ T4248] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 45.897661][ T4685] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.928038][ T4689] loop4: detected capacity change from 0 to 2048 [ 45.935186][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.957399][ T4689] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.000350][ T4694] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.016938][ T4694] loop1: detected capacity change from 0 to 128 [ 46.023887][ T4694] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 46.036496][ T4694] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 46.060575][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.082693][ T29] kauditd_printk_skb: 437 callbacks suppressed [ 46.082798][ T29] audit: type=1326 audit(1755484161.449:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4698 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225253ebe9 code=0x7ffc0000 [ 46.137076][ T4700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.146387][ T4700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.158527][ T29] audit: type=1326 audit(1755484161.479:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4698 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225253ebe9 code=0x7ffc0000 [ 46.182231][ T29] audit: type=1326 audit(1755484161.479:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4698 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f225253ebe9 code=0x7ffc0000 [ 46.198385][ T4702] netlink: 12 bytes leftover after parsing attributes in process `syz.2.185'. [ 46.205682][ T29] audit: type=1326 audit(1755484161.479:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4698 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225253ebe9 code=0x7ffc0000 [ 46.237814][ T29] audit: type=1326 audit(1755484161.479:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4698 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225253ebe9 code=0x7ffc0000 [ 46.261517][ T29] audit: type=1326 audit(1755484161.479:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4698 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f225253ebe9 code=0x7ffc0000 [ 46.284894][ T29] audit: type=1326 audit(1755484161.479:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4698 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225253ebe9 code=0x7ffc0000 [ 46.288643][ T4707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.189'. [ 46.308362][ T29] audit: type=1326 audit(1755484161.479:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4698 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225253ebe9 code=0x7ffc0000 [ 46.308398][ T29] audit: type=1326 audit(1755484161.489:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4698 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f225253ebe9 code=0x7ffc0000 [ 46.308424][ T29] audit: type=1326 audit(1755484161.489:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4698 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225253ebe9 code=0x7ffc0000 [ 46.400141][ T4708] tipc: Enabling of bearer rejected, failed to enable media [ 46.534505][ T4712] loop0: detected capacity change from 0 to 128 [ 46.569197][ T4718] loop3: detected capacity change from 0 to 512 [ 46.711723][ T4718] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 46.726781][ T4718] EXT4-fs (loop3): mount failed [ 46.953591][ T4728] loop2: detected capacity change from 0 to 128 [ 46.979771][ T4730] loop4: detected capacity change from 0 to 128 [ 47.174032][ T3575] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.245431][ T3575] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.313673][ T3575] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.382932][ T3575] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.446432][ T4739] chnl_net:caif_netlink_parms(): no params data found [ 47.499652][ T4739] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.506978][ T4739] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.514507][ T4739] bridge_slave_0: entered allmulticast mode [ 47.522240][ T4739] bridge_slave_0: entered promiscuous mode [ 47.546425][ T4739] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.553570][ T4739] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.561768][ T4739] bridge_slave_1: entered allmulticast mode [ 47.573970][ T4739] bridge_slave_1: entered promiscuous mode [ 47.605401][ T4739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.616074][ T4739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.625310][ T3575] bridge_slave_1: left allmulticast mode [ 47.631045][ T3575] bridge_slave_1: left promiscuous mode [ 47.636853][ T3575] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.644634][ T3575] bridge_slave_0: left allmulticast mode [ 47.650349][ T3575] bridge_slave_0: left promiscuous mode [ 47.655984][ T3575] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.729103][ T4772] loop1: detected capacity change from 0 to 128 [ 47.772166][ T3575] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.781805][ T3575] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.791458][ T3575] bond0 (unregistering): Released all slaves [ 47.801942][ T4744] chnl_net:caif_netlink_parms(): no params data found [ 47.827900][ T4739] team0: Port device team_slave_0 added [ 47.838938][ T4739] team0: Port device team_slave_1 added [ 47.850982][ T3575] hsr_slave_0: left promiscuous mode [ 47.856687][ T3575] hsr_slave_1: left promiscuous mode [ 47.862511][ T3575] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.870027][ T3575] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.877431][ T3575] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.884878][ T3575] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.895251][ T3575] veth1_macvtap: left promiscuous mode [ 47.900816][ T3575] veth0_macvtap: left promiscuous mode [ 47.906348][ T3575] veth1_vlan: left promiscuous mode [ 47.911730][ T3575] veth0_vlan: left promiscuous mode [ 47.996305][ T4774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.005230][ T4774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.019338][ T3575] team0 (unregistering): Port device team_slave_1 removed [ 48.029286][ T3575] team0 (unregistering): Port device team_slave_0 removed [ 48.088772][ T4739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.095911][ T4739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.122149][ T4739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.133823][ T4739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.140867][ T4739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.166914][ T4739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.210523][ T4744] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.217632][ T4744] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.227074][ T4744] bridge_slave_0: entered allmulticast mode [ 48.233897][ T4744] bridge_slave_0: entered promiscuous mode [ 48.247997][ T4744] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.255125][ T4744] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.262824][ T4744] bridge_slave_1: entered allmulticast mode [ 48.269193][ T4744] bridge_slave_1: entered promiscuous mode [ 48.289573][ T4739] hsr_slave_0: entered promiscuous mode [ 48.296124][ T4739] hsr_slave_1: entered promiscuous mode [ 48.318550][ T4744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.348507][ T4791] loop3: detected capacity change from 0 to 1024 [ 48.358848][ T4744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.379279][ T4791] EXT4-fs: Ignoring removed bh option [ 48.395940][ T4791] EXT4-fs: Ignoring removed nobh option [ 48.402451][ T4791] EXT4-fs: inline encryption not supported [ 48.429903][ T4744] team0: Port device team_slave_0 added [ 48.455915][ T4744] team0: Port device team_slave_1 added [ 48.482892][ T4791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.546211][ T4808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.557115][ T4808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.573212][ T3575] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.593009][ T4744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.600219][ T4744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.626325][ T4744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.645222][ T4812] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 48.691674][ T3575] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.704052][ T4744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.711172][ T4744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.737126][ T4744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.751973][ T3797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.766044][ T4776] chnl_net:caif_netlink_parms(): no params data found [ 48.783701][ T4815] FAULT_INJECTION: forcing a failure. [ 48.783701][ T4815] name failslab, interval 1, probability 0, space 0, times 0 [ 48.785566][ T3575] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.796462][ T4815] CPU: 1 UID: 0 PID: 4815 Comm: syz.3.215 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 48.796534][ T4815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 48.796545][ T4815] Call Trace: [ 48.796551][ T4815] [ 48.796559][ T4815] __dump_stack+0x1d/0x30 [ 48.796580][ T4815] dump_stack_lvl+0xe8/0x140 [ 48.796599][ T4815] dump_stack+0x15/0x1b [ 48.796658][ T4815] should_fail_ex+0x265/0x280 [ 48.796679][ T4815] should_failslab+0x8c/0xb0 [ 48.796702][ T4815] kmem_cache_alloc_noprof+0x50/0x310 [ 48.796768][ T4815] ? audit_log_start+0x365/0x6c0 [ 48.796796][ T4815] audit_log_start+0x365/0x6c0 [ 48.796825][ T4815] audit_seccomp+0x48/0x100 [ 48.796849][ T4815] ? __seccomp_filter+0x68c/0x10d0 [ 48.796895][ T4815] __seccomp_filter+0x69d/0x10d0 [ 48.796916][ T4815] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 48.796941][ T4815] ? vfs_write+0x7e8/0x960 [ 48.796962][ T4815] ? __rcu_read_unlock+0x4f/0x70 [ 48.796982][ T4815] ? __fget_files+0x184/0x1c0 [ 48.797126][ T4815] __secure_computing+0x82/0x150 [ 48.797146][ T4815] syscall_trace_enter+0xcf/0x1e0 [ 48.797169][ T4815] do_syscall_64+0xac/0x200 [ 48.797193][ T4815] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 48.797296][ T4815] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 48.797366][ T4815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.797386][ T4815] RIP: 0033:0x7fd30ebdebe9 [ 48.797401][ T4815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.797418][ T4815] RSP: 002b:00007fd30d647038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 48.797437][ T4815] RAX: ffffffffffffffda RBX: 00007fd30ee05fa0 RCX: 00007fd30ebdebe9 [ 48.797526][ T4815] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: ffffffffffffffff [ 48.797538][ T4815] RBP: 00007fd30d647090 R08: 0000000000010003 R09: 0000000000000000 [ 48.797609][ T4815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.797621][ T4815] R13: 00007fd30ee06038 R14: 00007fd30ee05fa0 R15: 00007ffda396a698 [ 48.797694][ T4815] [ 49.042984][ T4744] hsr_slave_0: entered promiscuous mode [ 49.049146][ T4744] hsr_slave_1: entered promiscuous mode [ 49.055658][ T4744] debugfs: 'hsr0' already exists in 'hsr' [ 49.061449][ T4744] Cannot create hsr debugfs directory [ 49.108443][ T3575] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.134116][ T4776] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.141248][ T4776] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.148471][ T4776] bridge_slave_0: entered allmulticast mode [ 49.154956][ T4776] bridge_slave_0: entered promiscuous mode [ 49.166814][ T4829] can0: slcan on ptm1. [ 49.180431][ T4776] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.187855][ T4776] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.195177][ T4776] bridge_slave_1: entered allmulticast mode [ 49.201921][ T4776] bridge_slave_1: entered promiscuous mode [ 49.244884][ T4776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.268066][ T4776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.308421][ T4776] team0: Port device team_slave_0 added [ 49.314169][ T4828] can0 (unregistered): slcan off ptm1. [ 49.315465][ T4776] team0: Port device team_slave_1 added [ 49.370646][ T3575] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.384250][ T4776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.391270][ T4776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.417264][ T4776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.431310][ T4776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.438568][ T4776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.465109][ T4776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.465491][ T4845] loop0: detected capacity change from 0 to 128 [ 49.497713][ T4776] hsr_slave_0: entered promiscuous mode [ 49.503902][ T4776] hsr_slave_1: entered promiscuous mode [ 49.509812][ T4776] debugfs: 'hsr0' already exists in 'hsr' [ 49.515604][ T4776] Cannot create hsr debugfs directory [ 49.545606][ T3575] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.566488][ T4739] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 49.585945][ T4739] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 49.602367][ T4739] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 49.621870][ T4739] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 49.663403][ T3575] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.707491][ T3575] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.803846][ T4739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.839183][ T3575] bridge_slave_1: left allmulticast mode [ 49.844974][ T3575] bridge_slave_1: left promiscuous mode [ 49.850861][ T3575] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.860522][ T3575] bridge_slave_0: left allmulticast mode [ 49.866427][ T3575] bridge_slave_0: left promiscuous mode [ 49.872330][ T3575] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.891247][ T3575] bridge_slave_1: left allmulticast mode [ 49.896969][ T3575] bridge_slave_1: left promiscuous mode [ 49.902753][ T3575] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.927147][ T3575] bridge_slave_0: left allmulticast mode [ 49.933004][ T3575] bridge_slave_0: left promiscuous mode [ 49.938870][ T3575] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.073584][ T3575] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.083634][ T3575] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.093501][ T3575] bond0 (unregistering): Released all slaves [ 50.182345][ T3575] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.192040][ T3575] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.201557][ T3575] bond0 (unregistering): Released all slaves [ 50.211152][ T4739] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.229090][ T3583] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.236201][ T3583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.252946][ T3572] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.260179][ T3572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.275420][ T3575] tipc: Left network mode [ 50.284981][ T3575] hsr_slave_0: left promiscuous mode [ 50.290954][ T3575] hsr_slave_1: left promiscuous mode [ 50.296723][ T3575] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.304227][ T3575] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.314450][ T3575] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.321995][ T3575] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.335154][ T3575] hsr_slave_0: left promiscuous mode [ 50.341070][ T3575] hsr_slave_1: left promiscuous mode [ 50.346816][ T3575] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.354381][ T3575] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.367467][ T3575] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.374983][ T3575] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.398199][ T3575] veth1_macvtap: left promiscuous mode [ 50.403897][ T3575] veth0_macvtap: left promiscuous mode [ 50.409520][ T3575] veth1_vlan: left promiscuous mode [ 50.415233][ T3575] veth0_vlan: left promiscuous mode [ 50.421190][ T3575] veth1_macvtap: left promiscuous mode [ 50.426734][ T3575] veth0_macvtap: left promiscuous mode [ 50.432546][ T3575] veth1_vlan: left promiscuous mode [ 50.437979][ T3575] veth0_vlan: left promiscuous mode [ 50.462725][ T4917] loop3: detected capacity change from 0 to 2048 [ 50.486392][ T4917] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.524426][ T4917] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 50.589481][ T3575] team0 (unregistering): Port device team_slave_1 removed [ 50.599412][ T3575] team0 (unregistering): Port device team_slave_0 removed [ 50.657316][ T3575] team0 (unregistering): Port device team_slave_1 removed [ 50.667013][ T3575] team0 (unregistering): Port device team_slave_0 removed [ 50.708627][ T3797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.794598][ T4739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.906001][ T4744] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.917886][ T4966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.225'. [ 50.957122][ T4744] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.967038][ T4744] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.979535][ T4966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.225'. [ 50.984922][ T4744] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 51.008665][ T4980] wireguard0: entered promiscuous mode [ 51.014381][ T4980] wireguard0: entered allmulticast mode [ 51.089067][ T4739] veth0_vlan: entered promiscuous mode [ 51.107743][ T4739] veth1_vlan: entered promiscuous mode [ 51.133351][ T4739] veth0_macvtap: entered promiscuous mode [ 51.142578][ T4744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.150338][ T29] kauditd_printk_skb: 318 callbacks suppressed [ 51.150397][ T29] audit: type=1326 audit(1755484166.519:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4964 comm="syz.3.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30ebdebe9 code=0x7ffc0000 [ 51.180089][ T29] audit: type=1326 audit(1755484166.519:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4964 comm="syz.3.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30ebdebe9 code=0x7ffc0000 [ 51.190536][ T4739] veth1_macvtap: entered promiscuous mode [ 51.253228][ T4744] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.266294][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.273413][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.294483][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.301569][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.314727][ T4739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.322834][ T4776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 51.332642][ T4776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 51.341689][ T4776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 51.353172][ T4739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.363308][ T4776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 51.377205][ T41] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.388550][ T5013] can0: slcan on ptm0. [ 51.395410][ T41] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.418027][ T3583] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.427015][ T3583] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.447093][ T29] audit: type=1400 audit(1755484166.809:2152): avc: denied { mount } for pid=4739 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 51.489896][ T5012] can0 (unregistered): slcan off ptm0. [ 51.515120][ T4776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.548979][ T29] audit: type=1326 audit(1755484166.909:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5029 comm="syz.4.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3750e9ebe9 code=0x7ffc0000 [ 51.572669][ T29] audit: type=1326 audit(1755484166.909:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5029 comm="syz.4.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3750e9ebe9 code=0x7ffc0000 [ 51.608647][ T4776] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.633880][ T3583] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.641020][ T3583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.662223][ T4744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.675387][ T3583] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.682613][ T3583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.704725][ T29] audit: type=1326 audit(1755484166.949:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5029 comm="syz.4.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f3750e9ebe9 code=0x7ffc0000 [ 51.714226][ T4776] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 51.728096][ T29] audit: type=1326 audit(1755484166.949:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5029 comm="syz.4.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3750e9ebe9 code=0x7ffc0000 [ 51.738506][ T4776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.761990][ T29] audit: type=1326 audit(1755484166.949:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5029 comm="syz.4.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3750e9ebe9 code=0x7ffc0000 [ 51.780337][ T5031] loop4: detected capacity change from 0 to 128 [ 51.795704][ T29] audit: type=1326 audit(1755484166.949:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5029 comm="syz.4.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f3750e9ebe9 code=0x7ffc0000 [ 51.825291][ T29] audit: type=1326 audit(1755484166.969:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5033 comm="syz.4.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3750ed14a5 code=0x7ffc0000 [ 51.955245][ T4744] veth0_vlan: entered promiscuous mode [ 51.972637][ T4744] veth1_vlan: entered promiscuous mode [ 52.013781][ T4776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.018426][ T5048] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 52.057365][ T5032] loop3: detected capacity change from 0 to 1024 [ 52.062730][ T5048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.233'. [ 52.075080][ T4744] veth0_macvtap: entered promiscuous mode [ 52.101576][ T4744] veth1_macvtap: entered promiscuous mode [ 52.106181][ T5032] EXT4-fs: Ignoring removed bh option [ 52.142965][ T4744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.164117][ T5056] loop4: detected capacity change from 0 to 512 [ 52.166589][ T5032] EXT4-fs: Ignoring removed nobh option [ 52.177964][ T5032] EXT4-fs: inline encryption not supported [ 52.181844][ T4744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.202754][ T5061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.235'. [ 52.207445][ T4776] veth0_vlan: entered promiscuous mode [ 52.211723][ T5061] netlink: 24 bytes leftover after parsing attributes in process `syz.0.235'. [ 52.232165][ T3583] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.242377][ T3583] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.270353][ T4776] veth1_vlan: entered promiscuous mode [ 52.270991][ T5065] loop0: detected capacity change from 0 to 128 [ 52.303319][ T3583] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.327973][ T4776] veth0_macvtap: entered promiscuous mode [ 52.337278][ T4776] veth1_macvtap: entered promiscuous mode [ 52.352825][ T4776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.362585][ T4776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.362905][ T5056] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 52.388032][ T3583] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.411939][ T3583] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.426530][ T5074] FAULT_INJECTION: forcing a failure. [ 52.426530][ T5074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.439691][ T5074] CPU: 1 UID: 0 PID: 5074 Comm: syz.2.204 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 52.439778][ T5074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 52.439789][ T5074] Call Trace: [ 52.439795][ T5074] [ 52.439804][ T5074] __dump_stack+0x1d/0x30 [ 52.439918][ T5074] dump_stack_lvl+0xe8/0x140 [ 52.439936][ T5074] dump_stack+0x15/0x1b [ 52.439953][ T5074] should_fail_ex+0x265/0x280 [ 52.439976][ T5074] should_fail+0xb/0x20 [ 52.439992][ T5074] should_fail_usercopy+0x1a/0x20 [ 52.440034][ T5074] _copy_from_user+0x1c/0xb0 [ 52.440106][ T5074] ___sys_sendmsg+0xc1/0x1d0 [ 52.440137][ T5074] __x64_sys_sendmsg+0xd4/0x160 [ 52.440160][ T5074] x64_sys_call+0x191e/0x2ff0 [ 52.440180][ T5074] do_syscall_64+0xd2/0x200 [ 52.440207][ T5074] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 52.440231][ T5074] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 52.440257][ T5074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.440317][ T5074] RIP: 0033:0x7f654153ebe9 [ 52.440334][ T5074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.440354][ T5074] RSP: 002b:00007f653ff9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.440376][ T5074] RAX: ffffffffffffffda RBX: 00007f6541765fa0 RCX: 00007f654153ebe9 [ 52.440460][ T5074] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 52.440498][ T5074] RBP: 00007f653ff9f090 R08: 0000000000000000 R09: 0000000000000000 [ 52.440511][ T5074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.440525][ T5074] R13: 00007f6541766038 R14: 00007f6541765fa0 R15: 00007fffbef0f668 [ 52.440622][ T5074] [ 52.614738][ T3583] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.633687][ T3583] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.661924][ T3583] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.690558][ T5056] EXT4-fs (loop4): mount failed [ 52.707729][ T5032] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.850644][ T5080] syz.2.239: attempt to access beyond end of device [ 52.850644][ T5080] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 52.877889][ T5083] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 52.900162][ T5080] FAT-fs (loop5): unable to read boot sector [ 52.973594][ T5085] loop0: detected capacity change from 0 to 1024 [ 53.003311][ T5088] netlink: 'syz.2.242': attribute type 1 has an invalid length. [ 53.026722][ T5085] EXT4-fs: Ignoring removed bh option [ 53.064328][ T5088] 8021q: VLANs not supported on ip_vti0 [ 53.075194][ T3797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.083738][ T5085] EXT4-fs: Ignoring removed nobh option [ 53.091424][ T5085] EXT4-fs: inline encryption not supported [ 53.140875][ T5099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.245'. [ 53.155980][ T5097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.246'. [ 53.175086][ T5094] loop4: detected capacity change from 0 to 128 [ 53.203589][ T5085] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.224815][ T5105] loop2: detected capacity change from 0 to 512 [ 53.282478][ T5105] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 53.302208][ T5105] EXT4-fs (loop2): orphan cleanup on readonly fs [ 53.311041][ T5109] tls_set_device_offload: netdev not found [ 53.341558][ T5105] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.247: corrupted inode contents [ 53.386051][ T5105] EXT4-fs (loop2): Remounting filesystem read-only [ 53.398879][ T5085] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 15: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 53.416234][ T5105] EXT4-fs (loop2): 1 truncate cleaned up [ 53.431759][ T41] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 53.442384][ T41] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 53.459220][ T41] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 53.471800][ T5105] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.514311][ T4744] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.546937][ T3936] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.600076][ T5137] FAULT_INJECTION: forcing a failure. [ 53.600076][ T5137] name failslab, interval 1, probability 0, space 0, times 0 [ 53.612774][ T5137] CPU: 1 UID: 0 PID: 5137 Comm: syz.2.255 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 53.612801][ T5137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 53.612837][ T5137] Call Trace: [ 53.612843][ T5137] [ 53.612850][ T5137] __dump_stack+0x1d/0x30 [ 53.612875][ T5137] dump_stack_lvl+0xe8/0x140 [ 53.612893][ T5137] dump_stack+0x15/0x1b [ 53.612908][ T5137] should_fail_ex+0x265/0x280 [ 53.612928][ T5137] should_failslab+0x8c/0xb0 [ 53.612969][ T5137] kmem_cache_alloc_noprof+0x50/0x310 [ 53.612998][ T5137] ? __break_lease+0x78/0xe80 [ 53.613021][ T5137] __break_lease+0x78/0xe80 [ 53.613043][ T5137] ? selinux_file_open+0x2df/0x330 [ 53.613068][ T5137] do_dentry_open+0x5be/0xa20 [ 53.613154][ T5137] vfs_open+0x37/0x1e0 [ 53.613185][ T5137] path_openat+0x1c5e/0x2170 [ 53.613315][ T5137] do_filp_open+0x109/0x230 [ 53.613383][ T5137] do_sys_openat2+0xa6/0x110 [ 53.613486][ T5137] __x64_sys_openat+0xf2/0x120 [ 53.613518][ T5137] x64_sys_call+0x2e9c/0x2ff0 [ 53.613540][ T5137] do_syscall_64+0xd2/0x200 [ 53.613603][ T5137] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 53.613792][ T5137] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 53.613879][ T5137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.613901][ T5137] RIP: 0033:0x7f654153ebe9 [ 53.613918][ T5137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.613936][ T5137] RSP: 002b:00007f653ff9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 53.613958][ T5137] RAX: ffffffffffffffda RBX: 00007f6541765fa0 RCX: 00007f654153ebe9 [ 53.613971][ T5137] RDX: 0000000000002040 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 53.614042][ T5137] RBP: 00007f653ff9f090 R08: 0000000000000000 R09: 0000000000000000 [ 53.614056][ T5137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.614068][ T5137] R13: 00007f6541766038 R14: 00007f6541765fa0 R15: 00007fffbef0f668 [ 53.614087][ T5137] [ 53.824317][ T5133] loop3: detected capacity change from 0 to 1024 [ 53.853289][ T5142] sctp: failed to load transform for md5: -2 [ 53.871304][ T5133] EXT4-fs: Ignoring removed bh option [ 53.948453][ T5156] loop4: detected capacity change from 0 to 512 [ 53.967030][ T5133] EXT4-fs: Ignoring removed nobh option [ 53.975041][ T5133] EXT4-fs: inline encryption not supported [ 54.026648][ T5156] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 54.035210][ T5156] EXT4-fs (loop4): orphan cleanup on readonly fs [ 54.066015][ T5156] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.265: corrupted inode contents [ 54.120857][ T5156] EXT4-fs (loop4): Remounting filesystem read-only [ 54.127566][ T5156] EXT4-fs (loop4): 1 truncate cleaned up [ 54.128060][ T5163] loop2: detected capacity change from 0 to 2002 [ 54.134790][ T3572] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 54.150289][ T3572] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 54.153806][ T5133] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.166040][ T5172] netlink: 'syz.2.267': attribute type 4 has an invalid length. [ 54.195512][ T3572] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 54.208919][ T5156] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 54.222009][ T5176] FAULT_INJECTION: forcing a failure. [ 54.222009][ T5176] name failslab, interval 1, probability 0, space 0, times 0 [ 54.234811][ T5176] CPU: 1 UID: 0 PID: 5176 Comm: syz.0.270 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 54.234845][ T5176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 54.234857][ T5176] Call Trace: [ 54.234864][ T5176] [ 54.234871][ T5176] __dump_stack+0x1d/0x30 [ 54.234932][ T5176] dump_stack_lvl+0xe8/0x140 [ 54.234953][ T5176] dump_stack+0x15/0x1b [ 54.234974][ T5176] should_fail_ex+0x265/0x280 [ 54.235029][ T5176] should_failslab+0x8c/0xb0 [ 54.235056][ T5176] __kmalloc_noprof+0xa5/0x3e0 [ 54.235083][ T5176] ? iter_file_splice_write+0xfe/0x9e0 [ 54.235104][ T5176] ? terminate_walk+0x27f/0x2a0 [ 54.235211][ T5176] iter_file_splice_write+0xfe/0x9e0 [ 54.235235][ T5176] ? kernelmode_fixup_or_oops+0x59/0xb0 [ 54.235270][ T5176] ? exc_page_fault+0x62/0xa0 [ 54.235321][ T5176] ? avc_policy_seqno+0x15/0x30 [ 54.235345][ T5176] ? selinux_file_permission+0x1e4/0x320 [ 54.235373][ T5176] ? __pfx_iter_file_splice_write+0x10/0x10 [ 54.235394][ T5176] do_splice+0x974/0x10b0 [ 54.235416][ T5176] ? bpf_probe_read_user+0x6c/0x70 [ 54.235532][ T5176] ? __rcu_read_unlock+0x4f/0x70 [ 54.235610][ T5176] ? __fget_files+0x184/0x1c0 [ 54.235634][ T5176] ? bpf_trace_run2+0x124/0x1c0 [ 54.235662][ T5176] __se_sys_splice+0x26c/0x3a0 [ 54.235694][ T5176] __x64_sys_splice+0x78/0x90 [ 54.235755][ T5176] x64_sys_call+0x28a3/0x2ff0 [ 54.235778][ T5176] do_syscall_64+0xd2/0x200 [ 54.235818][ T5176] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 54.235843][ T5176] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 54.235890][ T5176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.235911][ T5176] RIP: 0033:0x7f48810debe9 [ 54.235926][ T5176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.235963][ T5176] RSP: 002b:00007f487fb47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 54.235984][ T5176] RAX: ffffffffffffffda RBX: 00007f4881305fa0 RCX: 00007f48810debe9 [ 54.235997][ T5176] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000004 [ 54.236028][ T5176] RBP: 00007f487fb47090 R08: 00000000088000cc R09: 0000000000000000 [ 54.236041][ T5176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.236054][ T5176] R13: 00007f4881306038 R14: 00007f4881305fa0 R15: 00007fff4df20708 [ 54.236075][ T5176] [ 54.506394][ T5177] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 54.523774][ T4739] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.619445][ T3797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.695386][ T5189] loop2: detected capacity change from 0 to 1024 [ 54.713058][ T5189] EXT4-fs: Ignoring removed orlov option [ 54.727437][ T5189] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.744139][ T5189] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.783231][ T5184] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 54.862944][ T4744] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.913517][ T5200] loop2: detected capacity change from 0 to 512 [ 54.927029][ T5200] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 55.073897][ T5212] netlink: 12 bytes leftover after parsing attributes in process `syz.0.283'. [ 55.089721][ T5215] netlink: 'syz.2.284': attribute type 10 has an invalid length. [ 55.097589][ T5215] netlink: 40 bytes leftover after parsing attributes in process `syz.2.284'. [ 55.111939][ T5215] team0: Port device geneve1 added [ 55.272008][ T5228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.280975][ T5228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.377409][ T5232] process 'syz.2.292' launched './file0' with NULL argv: empty string added [ 55.546351][ T5244] netlink: 'syz.2.296': attribute type 6 has an invalid length. [ 55.701252][ T5252] netlink: 20 bytes leftover after parsing attributes in process `syz.4.301'. [ 55.710322][ T5252] FAULT_INJECTION: forcing a failure. [ 55.710322][ T5252] name failslab, interval 1, probability 0, space 0, times 0 [ 55.723306][ T5252] CPU: 0 UID: 0 PID: 5252 Comm: syz.4.301 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 55.723348][ T5252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 55.723359][ T5252] Call Trace: [ 55.723366][ T5252] [ 55.723373][ T5252] __dump_stack+0x1d/0x30 [ 55.723448][ T5252] dump_stack_lvl+0xe8/0x140 [ 55.723470][ T5252] dump_stack+0x15/0x1b [ 55.723488][ T5252] should_fail_ex+0x265/0x280 [ 55.723511][ T5252] should_failslab+0x8c/0xb0 [ 55.723539][ T5252] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 55.723578][ T5252] ? __d_alloc+0x3d/0x340 [ 55.723601][ T5252] ? sprintf+0x88/0xb0 [ 55.723684][ T5252] __d_alloc+0x3d/0x340 [ 55.723842][ T5252] d_alloc_parallel+0x53/0xc60 [ 55.723876][ T5252] ? __rcu_read_unlock+0x4f/0x70 [ 55.723899][ T5252] ? __d_lookup+0x316/0x340 [ 55.724051][ T5252] ? default_pointer+0xf2/0x5e0 [ 55.724076][ T5252] __lookup_slow+0x8c/0x250 [ 55.724125][ T5252] lookup_noperm+0xc9/0x180 [ 55.724161][ T5252] simple_start_creating+0x97/0x120 [ 55.724186][ T5252] start_creating+0xe9/0x160 [ 55.724214][ T5252] __debugfs_create_file+0x6b/0x330 [ 55.724236][ T5252] debugfs_create_file_full+0x3f/0x60 [ 55.724340][ T5252] ? __pfx_hsr_dev_setup+0x10/0x10 [ 55.724366][ T5252] ref_tracker_dir_debugfs+0x100/0x1e0 [ 55.724391][ T5252] alloc_netdev_mqs+0x1a2/0xa30 [ 55.724417][ T5252] rtnl_create_link+0x239/0x710 [ 55.724437][ T5252] rtnl_newlink_create+0x14c/0x620 [ 55.724544][ T5252] ? __schedule+0x6b9/0xb30 [ 55.724580][ T5252] rtnl_newlink+0xf29/0x12d0 [ 55.724613][ T5252] ? xas_load+0x413/0x430 [ 55.724640][ T5252] ? __rcu_read_unlock+0x4f/0x70 [ 55.724659][ T5252] ? xa_load+0xb1/0xe0 [ 55.724688][ T5252] ? __rcu_read_unlock+0x4f/0x70 [ 55.724804][ T5252] ? avc_has_perm_noaudit+0x1b1/0x200 [ 55.724835][ T5252] ? cred_has_capability+0x210/0x280 [ 55.724861][ T5252] ? selinux_capable+0x31/0x40 [ 55.724887][ T5252] ? security_capable+0x83/0x90 [ 55.724914][ T5252] ? ns_capable+0x7d/0xb0 [ 55.724944][ T5252] ? __pfx_rtnl_newlink+0x10/0x10 [ 55.724966][ T5252] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 55.724991][ T5252] netlink_rcv_skb+0x123/0x220 [ 55.725008][ T5252] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 55.725085][ T5252] rtnetlink_rcv+0x1c/0x30 [ 55.725105][ T5252] netlink_unicast+0x5bd/0x690 [ 55.725135][ T5252] netlink_sendmsg+0x58b/0x6b0 [ 55.725157][ T5252] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.725182][ T5252] __sock_sendmsg+0x142/0x180 [ 55.725213][ T5252] ____sys_sendmsg+0x31e/0x4e0 [ 55.725280][ T5252] ___sys_sendmsg+0x17b/0x1d0 [ 55.725361][ T5252] __x64_sys_sendmsg+0xd4/0x160 [ 55.725389][ T5252] x64_sys_call+0x191e/0x2ff0 [ 55.725412][ T5252] do_syscall_64+0xd2/0x200 [ 55.725493][ T5252] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 55.725519][ T5252] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 55.725545][ T5252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.725567][ T5252] RIP: 0033:0x7f3750e9ebe9 [ 55.725584][ T5252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.725649][ T5252] RSP: 002b:00007f374f8ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.725667][ T5252] RAX: ffffffffffffffda RBX: 00007f37510c5fa0 RCX: 00007f3750e9ebe9 [ 55.725679][ T5252] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000003 [ 55.725690][ T5252] RBP: 00007f374f8ff090 R08: 0000000000000000 R09: 0000000000000000 [ 55.725702][ T5252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.725717][ T5252] R13: 00007f37510c6038 R14: 00007f37510c5fa0 R15: 00007ffed40c3018 [ 55.725733][ T5252] [ 55.726123][ T5252] syz.4.301 (5252) used greatest stack depth: 9608 bytes left [ 55.839888][ T5256] vhci_hcd: invalid port number 236 [ 55.874928][ T5258] loop1: detected capacity change from 0 to 2048 [ 55.876562][ T5256] vhci_hcd: invalid port number 236 [ 56.121317][ T5258] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.142533][ T5258] ALSA: seq fatal error: cannot create timer (-22) [ 56.175552][ T31] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.240631][ T4776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.256161][ T31] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.275799][ T5270] FAULT_INJECTION: forcing a failure. [ 56.275799][ T5270] name failslab, interval 1, probability 0, space 0, times 0 [ 56.279906][ T29] kauditd_printk_skb: 717 callbacks suppressed [ 56.279923][ T29] audit: type=1326 audit(1755484171.639:2864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5269 comm="syz.0.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48810debe9 code=0x7ffc0000 [ 56.288615][ T5270] CPU: 1 UID: 0 PID: 5270 Comm: syz.0.309 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 56.288642][ T5270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 56.288653][ T5270] Call Trace: [ 56.288661][ T5270] [ 56.288669][ T5270] __dump_stack+0x1d/0x30 [ 56.288759][ T5270] dump_stack_lvl+0xe8/0x140 [ 56.288778][ T5270] dump_stack+0x15/0x1b [ 56.288803][ T5270] should_fail_ex+0x265/0x280 [ 56.288824][ T5270] should_failslab+0x8c/0xb0 [ 56.288846][ T5270] kmem_cache_alloc_noprof+0x50/0x310 [ 56.288932][ T5270] ? audit_log_start+0x365/0x6c0 [ 56.288960][ T5270] audit_log_start+0x365/0x6c0 [ 56.288988][ T5270] audit_seccomp+0x48/0x100 [ 56.289013][ T5270] ? __seccomp_filter+0x68c/0x10d0 [ 56.289033][ T5270] __seccomp_filter+0x69d/0x10d0 [ 56.289109][ T5270] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 56.289181][ T5270] ? vfs_write+0x7e8/0x960 [ 56.289201][ T5270] ? __rcu_read_unlock+0x4f/0x70 [ 56.289224][ T5270] ? __fget_files+0x184/0x1c0 [ 56.289248][ T5270] __secure_computing+0x82/0x150 [ 56.289294][ T5270] syscall_trace_enter+0xcf/0x1e0 [ 56.289396][ T5270] do_syscall_64+0xac/0x200 [ 56.289420][ T5270] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 56.289443][ T5270] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 56.289465][ T5270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.289507][ T5270] RIP: 0033:0x7f48810debe9 [ 56.289523][ T5270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.289540][ T5270] RSP: 002b:00007f487fb47038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ef [ 56.289560][ T5270] RAX: ffffffffffffffda RBX: 00007f4881305fa0 RCX: 00007f48810debe9 [ 56.289573][ T5270] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000000 [ 56.289585][ T5270] RBP: 00007f487fb47090 R08: 0000000000000006 R09: 0000000000000000 [ 56.289624][ T5270] R10: 0000200000bea000 R11: 0000000000000246 R12: 0000000000000001 [ 56.289636][ T5270] R13: 00007f4881306038 R14: 00007f4881305fa0 R15: 00007fff4df20708 [ 56.289653][ T5270] [ 56.289660][ T5270] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 56.294743][ T29] audit: type=1326 audit(1755484171.639:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5269 comm="syz.0.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f48810dd550 code=0x7ffc0000 [ 56.318679][ T5270] audit: out of memory in audit_log_start [ 56.331178][ T29] audit: type=1326 audit(1755484171.639:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5269 comm="syz.0.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f48810dd69f code=0x7ffc0000 [ 56.591814][ T29] audit: type=1326 audit(1755484171.709:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5271 comm="syz.4.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3750e9ebe9 code=0x7ffc0000 [ 56.615443][ T29] audit: type=1326 audit(1755484171.709:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5271 comm="syz.4.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3750e9ebe9 code=0x7ffc0000 [ 56.638795][ T29] audit: type=1326 audit(1755484171.709:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5271 comm="syz.4.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f3750e9ebe9 code=0x7ffc0000 [ 56.662453][ T29] audit: type=1326 audit(1755484171.709:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5271 comm="syz.4.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3750e9ebe9 code=0x7ffc0000 [ 56.685857][ T29] audit: type=1326 audit(1755484171.709:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5271 comm="syz.4.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f3750e9ebe9 code=0x7ffc0000 [ 56.709559][ T5280] wireguard0: entered promiscuous mode [ 56.715085][ T5280] wireguard0: entered allmulticast mode [ 56.753902][ T31] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.827877][ T31] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.855891][ T5265] chnl_net:caif_netlink_parms(): no params data found [ 56.888642][ T5265] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.896005][ T5265] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.903363][ T5265] bridge_slave_0: entered allmulticast mode [ 56.909682][ T5265] bridge_slave_0: entered promiscuous mode [ 56.916641][ T5265] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.923725][ T5265] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.930944][ T5265] bridge_slave_1: entered allmulticast mode [ 56.937308][ T5265] bridge_slave_1: entered promiscuous mode [ 56.969165][ T5265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.010470][ T5265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.020865][ T31] bridge_slave_1: left allmulticast mode [ 57.026689][ T31] bridge_slave_1: left promiscuous mode [ 57.032497][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.050368][ T31] bridge_slave_0: left allmulticast mode [ 57.056055][ T31] bridge_slave_0: left promiscuous mode [ 57.061848][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.151826][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.162053][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.171609][ T31] bond0 (unregistering): Released all slaves [ 57.193577][ T5265] team0: Port device team_slave_0 added [ 57.201223][ T5265] team0: Port device team_slave_1 added [ 57.218064][ T5265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.225116][ T5265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.251475][ T5265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.264526][ T5265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.271558][ T5265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.297503][ T5265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.331236][ T31] hsr_slave_0: left promiscuous mode [ 57.348059][ T31] hsr_slave_1: left promiscuous mode [ 57.366704][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.374461][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.403433][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.410889][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.424633][ T31] veth1_macvtap: left promiscuous mode [ 57.430297][ T31] veth0_macvtap: left promiscuous mode [ 57.435880][ T31] veth1_vlan: left promiscuous mode [ 57.442937][ T31] veth0_vlan: left promiscuous mode [ 57.613864][ T31] team0 (unregistering): Port device team_slave_1 removed [ 57.628334][ T31] team0 (unregistering): Port device team_slave_0 removed [ 57.775957][ T5265] hsr_slave_0: entered promiscuous mode [ 57.838832][ T5265] hsr_slave_1: entered promiscuous mode [ 57.885957][ T5265] debugfs: 'hsr0' already exists in 'hsr' [ 57.891765][ T5265] Cannot create hsr debugfs directory [ 57.905977][ T5324] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 58.054285][ T5355] netlink: 116 bytes leftover after parsing attributes in process `syz.2.320'. [ 58.136373][ T5299] chnl_net:caif_netlink_parms(): no params data found [ 58.253102][ T5299] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.260261][ T5299] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.276176][ T5299] bridge_slave_0: entered allmulticast mode [ 58.301673][ T5299] bridge_slave_0: entered promiscuous mode [ 58.314877][ T5382] loop1: detected capacity change from 0 to 2048 [ 58.322891][ T5299] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.330040][ T5299] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.338818][ T5299] bridge_slave_1: entered allmulticast mode [ 58.346378][ T5299] bridge_slave_1: entered promiscuous mode [ 58.354144][ T5382] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.369120][ T31] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.383532][ T5382] ALSA: seq fatal error: cannot create timer (-22) [ 58.405959][ T5299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.416749][ T5299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.437821][ T31] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.450531][ T5299] team0: Port device team_slave_0 added [ 58.457130][ T5299] team0: Port device team_slave_1 added [ 58.473015][ T5299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.480093][ T5299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.506063][ T5299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.517605][ T5299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.524626][ T5299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.550633][ T5299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.562143][ T4776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.594117][ T5394] FAULT_INJECTION: forcing a failure. [ 58.594117][ T5394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.607494][ T5394] CPU: 1 UID: 0 PID: 5394 Comm: syz.1.327 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 58.607524][ T5394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 58.607535][ T5394] Call Trace: [ 58.607563][ T5394] [ 58.607571][ T5394] __dump_stack+0x1d/0x30 [ 58.607595][ T5394] dump_stack_lvl+0xe8/0x140 [ 58.607619][ T5394] dump_stack+0x15/0x1b [ 58.607638][ T5394] should_fail_ex+0x265/0x280 [ 58.607659][ T5394] should_fail+0xb/0x20 [ 58.607679][ T5394] should_fail_usercopy+0x1a/0x20 [ 58.607735][ T5394] strncpy_from_user+0x25/0x230 [ 58.607765][ T5394] ? kmem_cache_alloc_noprof+0x186/0x310 [ 58.607825][ T5394] ? getname_flags+0x80/0x3b0 [ 58.607853][ T5394] getname_flags+0xae/0x3b0 [ 58.607881][ T5394] path_setxattrat+0x223/0x310 [ 58.607995][ T5394] __x64_sys_lsetxattr+0x71/0x90 [ 58.608021][ T5394] x64_sys_call+0x2877/0x2ff0 [ 58.608070][ T5394] do_syscall_64+0xd2/0x200 [ 58.608098][ T5394] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 58.608180][ T5394] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 58.608205][ T5394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.608228][ T5394] RIP: 0033:0x7f8cb8c0ebe9 [ 58.608245][ T5394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.608263][ T5394] RSP: 002b:00007f8cb7677038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 58.608340][ T5394] RAX: ffffffffffffffda RBX: 00007f8cb8e35fa0 RCX: 00007f8cb8c0ebe9 [ 58.608353][ T5394] RDX: 0000200000000200 RSI: 00002000000000c0 RDI: 0000200000000080 [ 58.608366][ T5394] RBP: 00007f8cb7677090 R08: 0000000000000002 R09: 0000000000000000 [ 58.608380][ T5394] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 58.608393][ T5394] R13: 00007f8cb8e36038 R14: 00007f8cb8e35fa0 R15: 00007ffdd4b53798 [ 58.608411][ T5394] [ 58.846973][ T31] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.875484][ T5299] hsr_slave_0: entered promiscuous mode [ 58.881644][ T5299] hsr_slave_1: entered promiscuous mode [ 58.887529][ T5299] debugfs: 'hsr0' already exists in 'hsr' [ 58.893340][ T5299] Cannot create hsr debugfs directory [ 58.903162][ T31] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.999401][ T5265] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.022670][ T5418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.332'. [ 59.039448][ T5265] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.049396][ T5265] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.092991][ T5265] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.116592][ T31] bridge_slave_1: left allmulticast mode [ 59.122328][ T31] bridge_slave_1: left promiscuous mode [ 59.128013][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.136429][ T31] bridge_slave_0: left allmulticast mode [ 59.142395][ T31] bridge_slave_0: left promiscuous mode [ 59.148173][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.242957][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.253216][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 59.264153][ T31] bond0 (unregistering): Released all slaves [ 59.304745][ T31] hsr_slave_0: left promiscuous mode [ 59.311003][ T31] hsr_slave_1: left promiscuous mode [ 59.316718][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.324199][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.333361][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.340908][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.352703][ T31] veth1_macvtap: left promiscuous mode [ 59.358272][ T31] veth0_macvtap: left promiscuous mode [ 59.364535][ T31] veth1_vlan: left promiscuous mode [ 59.369945][ T31] veth0_vlan: left promiscuous mode [ 59.445696][ T31] team0 (unregistering): Port device team_slave_1 removed [ 59.456849][ T31] team0 (unregistering): Port device team_slave_0 removed [ 59.522398][ T5265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.536778][ T5265] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.552240][ T3570] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.559358][ T3570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.579787][ T3575] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.586931][ T3575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.717023][ T5265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.770820][ T5481] chnl_net:caif_netlink_parms(): no params data found [ 59.823695][ T5299] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.845451][ T5299] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.864530][ T5299] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.879622][ T5299] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.894395][ T5481] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.901551][ T5481] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.908840][ T5481] bridge_slave_0: entered allmulticast mode [ 59.915520][ T5481] bridge_slave_0: entered promiscuous mode [ 59.934152][ T5481] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.941294][ T5481] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.949050][ T5481] bridge_slave_1: entered allmulticast mode [ 59.955687][ T5481] bridge_slave_1: entered promiscuous mode [ 59.973569][ T5537] netlink: 32 bytes leftover after parsing attributes in process `syz.0.340'. [ 59.975524][ T5265] veth0_vlan: entered promiscuous mode [ 60.015940][ T5545] FAULT_INJECTION: forcing a failure. [ 60.015940][ T5545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.029069][ T5545] CPU: 0 UID: 0 PID: 5545 Comm: syz.0.342 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 60.029151][ T5545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 60.029163][ T5545] Call Trace: [ 60.029169][ T5545] [ 60.029176][ T5545] __dump_stack+0x1d/0x30 [ 60.029197][ T5545] dump_stack_lvl+0xe8/0x140 [ 60.029214][ T5545] dump_stack+0x15/0x1b [ 60.029231][ T5545] should_fail_ex+0x265/0x280 [ 60.029255][ T5545] should_fail+0xb/0x20 [ 60.029306][ T5545] should_fail_usercopy+0x1a/0x20 [ 60.029393][ T5545] _copy_from_user+0x1c/0xb0 [ 60.029424][ T5545] ___sys_sendmsg+0xc1/0x1d0 [ 60.029458][ T5545] __x64_sys_sendmsg+0xd4/0x160 [ 60.029498][ T5545] x64_sys_call+0x191e/0x2ff0 [ 60.029517][ T5545] do_syscall_64+0xd2/0x200 [ 60.029545][ T5545] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 60.029571][ T5545] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 60.029611][ T5545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.029635][ T5545] RIP: 0033:0x7f48810debe9 [ 60.029654][ T5545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.029716][ T5545] RSP: 002b:00007f487fb47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.029740][ T5545] RAX: ffffffffffffffda RBX: 00007f4881305fa0 RCX: 00007f48810debe9 [ 60.029754][ T5545] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 60.029782][ T5545] RBP: 00007f487fb47090 R08: 0000000000000000 R09: 0000000000000000 [ 60.029796][ T5545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.029868][ T5545] R13: 00007f4881306038 R14: 00007f4881305fa0 R15: 00007fff4df20708 [ 60.029889][ T5545] [ 60.075620][ T31] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.221984][ T5481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.232412][ T5481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.282242][ T31] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.303791][ T5265] veth1_vlan: entered promiscuous mode [ 60.310960][ T5481] team0: Port device team_slave_0 added [ 60.317989][ T5481] team0: Port device team_slave_1 added [ 60.335643][ T5481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.342695][ T5481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.368637][ T5481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.383335][ T5552] loop0: detected capacity change from 0 to 512 [ 60.383621][ T31] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.390046][ T5552] EXT4-fs: dax option not supported [ 60.420391][ T5481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.427597][ T5481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.453655][ T5481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.489396][ T5557] can0: slcan on ptm0. [ 60.509582][ T5481] hsr_slave_0: entered promiscuous mode [ 60.516060][ T5481] hsr_slave_1: entered promiscuous mode [ 60.524671][ T31] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.540334][ T5299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.548388][ T5265] veth0_macvtap: entered promiscuous mode [ 60.564770][ T5265] veth1_macvtap: entered promiscuous mode [ 60.597383][ T5299] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.620112][ T5556] can0 (unregistered): slcan off ptm0. [ 60.652665][ T5265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.660957][ T3570] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.668028][ T3570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.676957][ T3570] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.684038][ T3570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.697775][ T5265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.708855][ T31] bridge_slave_1: left allmulticast mode [ 60.714625][ T31] bridge_slave_1: left promiscuous mode [ 60.720519][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.729120][ T31] bridge_slave_0: left allmulticast mode [ 60.734929][ T31] bridge_slave_0: left promiscuous mode [ 60.740821][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.822001][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.832090][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.841474][ T31] bond0 (unregistering): Released all slaves [ 60.860980][ T3570] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.884097][ T31] hsr_slave_0: left promiscuous mode [ 60.890198][ T31] hsr_slave_1: left promiscuous mode [ 60.895980][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.903717][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.912865][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.920379][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.936424][ T31] veth1_macvtap: left promiscuous mode [ 60.942081][ T31] veth0_macvtap: left promiscuous mode [ 60.947792][ T31] veth1_vlan: left promiscuous mode [ 60.953457][ T31] veth0_vlan: left promiscuous mode [ 61.059351][ T31] team0 (unregistering): Port device team_slave_1 removed [ 61.076556][ T31] team0 (unregistering): Port device team_slave_0 removed [ 61.141203][ T3570] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.163531][ T3570] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.189085][ T5299] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.199503][ T5299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.241904][ T3570] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.259145][ T5600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.268207][ T5600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.342699][ T5481] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.357138][ T5481] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.369558][ T5481] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.388364][ T5481] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.444446][ T5299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.493408][ T5627] loop9: detected capacity change from 0 to 7 [ 61.500994][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.511217][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 61.520370][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.530600][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 61.543441][ T5627] loop9: unable to read partition table [ 61.551760][ T5627] loop_reread_partitions: partition scan of loop9 (被xڬd͈`*` [ 61.551760][ T5627] ) failed (rc=-5) [ 61.553872][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.575210][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 61.585488][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.595719][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 61.606518][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.616845][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 61.624962][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.635199][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 61.643555][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.653771][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 61.672256][ T5481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.701608][ T5481] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.729704][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.736817][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.750944][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.758054][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.788892][ T5481] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.799321][ T5481] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.828646][ T5652] wireguard0: entered promiscuous mode [ 61.834369][ T5652] wireguard0: entered allmulticast mode [ 61.857031][ T29] kauditd_printk_skb: 239 callbacks suppressed [ 61.857047][ T29] audit: type=1326 audit(1755484177.229:3111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5655 comm="syz.3.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c973debe9 code=0x7ffc0000 [ 61.890995][ T29] audit: type=1326 audit(1755484177.229:3112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5655 comm="syz.3.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c973debe9 code=0x7ffc0000 [ 61.914714][ T29] audit: type=1326 audit(1755484177.229:3113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5655 comm="syz.3.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c973debe9 code=0x7ffc0000 [ 61.938425][ T29] audit: type=1326 audit(1755484177.229:3114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5655 comm="syz.3.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c973debe9 code=0x7ffc0000 [ 61.962899][ T29] audit: type=1326 audit(1755484177.259:3115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5655 comm="syz.3.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c973debe9 code=0x7ffc0000 [ 61.986303][ T29] audit: type=1326 audit(1755484177.259:3116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5655 comm="syz.3.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c973debe9 code=0x7ffc0000 [ 62.040633][ T29] audit: type=1326 audit(1755484177.359:3117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5655 comm="syz.3.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8c973debe9 code=0x7ffc0000 [ 62.064141][ T29] audit: type=1326 audit(1755484177.359:3118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5655 comm="syz.3.352" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c973debe9 code=0x0 [ 62.149371][ T5299] veth0_vlan: entered promiscuous mode [ 62.159463][ T5299] veth1_vlan: entered promiscuous mode [ 62.190595][ T5481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.206597][ T5299] veth0_macvtap: entered promiscuous mode [ 62.215031][ T5299] veth1_macvtap: entered promiscuous mode [ 62.231330][ T5299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.249568][ T5299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.263349][ T3570] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.275409][ T3570] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.301340][ T3570] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.318910][ T3570] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.346465][ T5481] veth0_vlan: entered promiscuous mode [ 62.348028][ T29] audit: type=1400 audit(1755484177.709:3119): avc: denied { read append } for pid=5685 comm="syz.4.314" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 62.363396][ T5481] veth1_vlan: entered promiscuous mode [ 62.375335][ T29] audit: type=1400 audit(1755484177.709:3120): avc: denied { open } for pid=5685 comm="syz.4.314" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 62.414401][ T5686] loop4: detected capacity change from 0 to 1024 [ 62.421502][ T5686] EXT4-fs: inline encryption not supported [ 62.427350][ T5686] EXT4-fs: Ignoring removed i_version option [ 62.430938][ T5586] syz.2.348 (5586) used greatest stack depth: 7304 bytes left [ 62.445329][ T5686] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 62.459023][ T5686] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.314: lblock 2 mapped to illegal pblock 2 (length 1) [ 62.465012][ T5481] veth0_macvtap: entered promiscuous mode [ 62.481167][ T5686] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.314: lblock 0 mapped to illegal pblock 48 (length 1) [ 62.481235][ T5481] veth1_macvtap: entered promiscuous mode [ 62.505815][ T5686] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.314: Failed to acquire dquot type 0 [ 62.508482][ T5481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.525186][ T5686] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 62.537668][ T5481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.538364][ T5686] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.314: mark_inode_dirty error [ 62.555009][ T3572] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.560564][ T5686] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 62.581067][ T3572] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.581822][ T5686] EXT4-fs (loop4): 1 orphan inode deleted [ 62.597824][ T3572] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.598060][ T5686] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.608806][ T3572] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.619008][ T41] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 62.679485][ T41] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 62.733636][ T5699] can0: slcan on ptm0. [ 62.847855][ T5711] can0: slcan on ptm1. [ 62.860075][ T5698] can0 (unregistered): slcan off ptm0. [ 63.030061][ T5702] can0 (unregistered): slcan off ptm1. [ 63.361902][ T5733] hub 9-0:1.0: USB hub found [ 63.375620][ T5733] hub 9-0:1.0: 8 ports detected [ 63.386810][ T5732] C: renamed from team_slave_0 (while UP) [ 63.400091][ T5732] can0: slcan on ttyS3. [ 63.470299][ T5732] can0 (unregistered): slcan off ttyS3. [ 63.607264][ T5686] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.631282][ T5686] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz.4.314: Invalid inode table block 1 in block_group 0 [ 63.644190][ T5753] wireguard0: entered promiscuous mode [ 63.649705][ T5753] wireguard0: entered allmulticast mode [ 63.654478][ T5686] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 63.665121][ T5686] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz.4.314: mark_inode_dirty error [ 63.726657][ T5751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.365'. [ 63.894667][ T5776] loop4: detected capacity change from 0 to 512 [ 63.911770][ T5776] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.924472][ T5776] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.011233][ T5299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.091388][ T5781] loop4: detected capacity change from 0 to 128 [ 64.104005][ T5781] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 64.131835][ T5781] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 64.145492][ T5781] ext2 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 64.186346][ T5781] netlink: 56 bytes leftover after parsing attributes in process `syz.4.377'. [ 64.216746][ T5299] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 64.383893][ T5787] loop4: detected capacity change from 0 to 1024 [ 64.405916][ T5787] EXT4-fs: Ignoring removed bh option [ 64.510373][ T5787] EXT4-fs: Ignoring removed nobh option [ 64.517437][ T5787] EXT4-fs: inline encryption not supported [ 64.545061][ T5792] loop0: detected capacity change from 0 to 512 [ 64.617064][ T5792] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 64.642903][ T5792] EXT4-fs (loop0): orphan cleanup on readonly fs [ 64.664067][ T5792] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.381: corrupted inode contents [ 64.707030][ T5792] EXT4-fs (loop0): Remounting filesystem read-only [ 64.712037][ T5787] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.732804][ T5792] EXT4-fs (loop0): 1 truncate cleaned up [ 64.738616][ T3575] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 64.749234][ T3575] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 64.776587][ T3575] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 64.823167][ T5792] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 64.859706][ T3936] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.887065][ T5811] loop0: detected capacity change from 0 to 128 [ 64.917891][ T5299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.066223][ T5816] loop4: detected capacity change from 0 to 1024 [ 65.094251][ T5816] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.109937][ T5816] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.160546][ T5816] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 1: comm syz.4.389: lblock 1 mapped to illegal pblock 1 (length 15) [ 65.174822][ T5818] netlink: 12 bytes leftover after parsing attributes in process `syz.0.390'. [ 65.187199][ T5816] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 65.200181][ T5816] EXT4-fs (loop4): This should not happen!! Data will be lost [ 65.200181][ T5816] [ 65.227950][ T5816] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 65.272107][ T5299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.495500][ T5829] hub 9-0:1.0: USB hub found [ 65.561208][ T5829] hub 9-0:1.0: 8 ports detected [ 65.632891][ T5838] FAULT_INJECTION: forcing a failure. [ 65.632891][ T5838] name failslab, interval 1, probability 0, space 0, times 0 [ 65.645852][ T5838] CPU: 1 UID: 0 PID: 5838 Comm: syz.3.397 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 65.645884][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 65.645897][ T5838] Call Trace: [ 65.645902][ T5838] [ 65.645910][ T5838] __dump_stack+0x1d/0x30 [ 65.645960][ T5838] dump_stack_lvl+0xe8/0x140 [ 65.645980][ T5838] dump_stack+0x15/0x1b [ 65.645997][ T5838] should_fail_ex+0x265/0x280 [ 65.646016][ T5838] should_failslab+0x8c/0xb0 [ 65.646041][ T5838] kmem_cache_alloc_noprof+0x50/0x310 [ 65.646118][ T5838] ? skb_clone+0x151/0x1f0 [ 65.646142][ T5838] skb_clone+0x151/0x1f0 [ 65.646166][ T5838] __netlink_deliver_tap+0x2c9/0x500 [ 65.646230][ T5838] ? __rcu_read_unlock+0x34/0x70 [ 65.646255][ T5838] netlink_broadcast_filtered+0xafa/0xc60 [ 65.646292][ T5838] nlmsg_notify+0xcf/0x170 [ 65.646314][ T5838] nfnetlink_send+0x8e/0xb0 [ 65.646390][ T5838] ctnetlink_conntrack_event+0xc7e/0xce0 [ 65.646428][ T5838] nf_conntrack_eventmask_report+0x1fb/0x350 [ 65.646460][ T5838] nf_ct_delete+0x1c5/0x410 [ 65.646488][ T5838] ? nf_ct_iterate_cleanup+0xc2/0x3d0 [ 65.646514][ T5838] nf_ct_iterate_cleanup+0x2f9/0x3d0 [ 65.646540][ T5838] ? __pfx_ctnetlink_flush_iterate+0x10/0x10 [ 65.646642][ T5838] ? __pfx_ctnetlink_flush_iterate+0x10/0x10 [ 65.646749][ T5838] nf_ct_iterate_cleanup_net+0x8c/0xb0 [ 65.646777][ T5838] ctnetlink_del_conntrack+0x44d/0x4f0 [ 65.646869][ T5838] nfnetlink_rcv_msg+0x4c3/0x590 [ 65.646961][ T5838] netlink_rcv_skb+0x123/0x220 [ 65.646977][ T5838] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 65.647113][ T5838] nfnetlink_rcv+0x16b/0x1690 [ 65.647142][ T5838] ? nlmon_xmit+0x4f/0x60 [ 65.647168][ T5838] ? consume_skb+0x49/0x150 [ 65.647186][ T5838] ? nlmon_xmit+0x4f/0x60 [ 65.647221][ T5838] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 65.647245][ T5838] ? __dev_queue_xmit+0x1200/0x2000 [ 65.647298][ T5838] ? __dev_queue_xmit+0x182/0x2000 [ 65.647322][ T5838] ? ref_tracker_free+0x37d/0x3e0 [ 65.647348][ T5838] ? __netlink_deliver_tap+0x4dc/0x500 [ 65.647426][ T5838] netlink_unicast+0x5bd/0x690 [ 65.647460][ T5838] netlink_sendmsg+0x58b/0x6b0 [ 65.647535][ T5838] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.647557][ T5838] __sock_sendmsg+0x142/0x180 [ 65.647638][ T5838] ____sys_sendmsg+0x31e/0x4e0 [ 65.647663][ T5838] ___sys_sendmsg+0x17b/0x1d0 [ 65.647766][ T5838] __x64_sys_sendmsg+0xd4/0x160 [ 65.647792][ T5838] x64_sys_call+0x191e/0x2ff0 [ 65.647815][ T5838] do_syscall_64+0xd2/0x200 [ 65.647841][ T5838] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 65.647934][ T5838] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 65.647960][ T5838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.647988][ T5838] RIP: 0033:0x7f8c973debe9 [ 65.648005][ T5838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.648022][ T5838] RSP: 002b:00007f8c95e3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.648102][ T5838] RAX: ffffffffffffffda RBX: 00007f8c97605fa0 RCX: 00007f8c973debe9 [ 65.648131][ T5838] RDX: 0000000000040040 RSI: 0000200000000300 RDI: 0000000000000004 [ 65.648145][ T5838] RBP: 00007f8c95e3f090 R08: 0000000000000000 R09: 0000000000000000 [ 65.648195][ T5838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.648208][ T5838] R13: 00007f8c97606038 R14: 00007f8c97605fa0 R15: 00007ffd50c3bc88 [ 65.648226][ T5838] [ 66.212108][ T5852] loop0: detected capacity change from 0 to 512 [ 66.332060][ T5857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.386'. [ 66.353830][ T5852] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.401: iget: bad i_size value: 38620345925642 [ 66.367091][ T5857] netlink: 24 bytes leftover after parsing attributes in process `syz.2.386'. [ 66.968127][ T5852] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.401: couldn't read orphan inode 15 (err -117) [ 66.993974][ T29] kauditd_printk_skb: 242 callbacks suppressed [ 66.993988][ T29] audit: type=1326 audit(1755484182.359:3354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5864 comm="syz.1.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc97021ebe9 code=0x7ffc0000 [ 67.023733][ T29] audit: type=1326 audit(1755484182.359:3355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5864 comm="syz.1.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97021ebe9 code=0x7ffc0000 [ 67.024123][ T5852] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.047257][ T29] audit: type=1326 audit(1755484182.359:3356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5864 comm="syz.1.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97021ebe9 code=0x7ffc0000 [ 67.107838][ T5872] loop3: detected capacity change from 0 to 2048 [ 67.109473][ T29] audit: type=1326 audit(1755484182.419:3357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5864 comm="syz.1.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc97021ebe9 code=0x7ffc0000 [ 67.137755][ T29] audit: type=1326 audit(1755484182.419:3358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5864 comm="syz.1.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97021ebe9 code=0x7ffc0000 [ 67.137787][ T29] audit: type=1326 audit(1755484182.419:3359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5864 comm="syz.1.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97021ebe9 code=0x7ffc0000 [ 67.137838][ T29] audit: type=1326 audit(1755484182.419:3360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5864 comm="syz.1.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc97021ebe9 code=0x7ffc0000 [ 67.137865][ T29] audit: type=1326 audit(1755484182.419:3361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5864 comm="syz.1.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97021ebe9 code=0x7ffc0000 [ 67.137886][ T29] audit: type=1326 audit(1755484182.419:3362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5864 comm="syz.1.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc97021ebe9 code=0x7ffc0000 [ 67.137907][ T29] audit: type=1326 audit(1755484182.449:3363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5864 comm="syz.1.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97021ebe9 code=0x7ffc0000 [ 67.165554][ T5872] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.203357][ T5872] ALSA: seq fatal error: cannot create timer (-22) [ 67.383876][ T5882] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 67.384701][ T3936] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.404562][ T5882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.412'. [ 67.404651][ T5265] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.492750][ T5884] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 67.500729][ T5884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.414'. [ 67.734417][ T5905] loop4: detected capacity change from 0 to 1024 [ 67.804501][ T5905] EXT4-fs: Ignoring removed bh option [ 67.826095][ T5905] EXT4-fs: Ignoring removed nobh option [ 67.833051][ T5921] netlink: 48 bytes leftover after parsing attributes in process `syz.0.428'. [ 67.845163][ T5905] EXT4-fs: inline encryption not supported [ 67.855666][ T5921] veth5: entered allmulticast mode [ 67.902396][ T5905] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.969005][ T5916] loop3: detected capacity change from 0 to 1024 [ 67.994405][ T5916] EXT4-fs: Ignoring removed bh option [ 68.006582][ T5916] EXT4-fs: Ignoring removed nobh option [ 68.018294][ T5916] EXT4-fs: inline encryption not supported [ 68.068280][ T5299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.105192][ T5916] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.208684][ T5265] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.228242][ T5950] netlink: 24 bytes leftover after parsing attributes in process `syz.3.437'. [ 68.238640][ T5950] netlink: 28 bytes leftover after parsing attributes in process `syz.3.437'. [ 68.253304][ T5952] wireguard0: entered promiscuous mode [ 68.258820][ T5952] wireguard0: entered allmulticast mode [ 68.271678][ T5950] bond0: (slave bond_slave_1): Releasing backup interface [ 68.482321][ T5970] capability: warning: `syz.2.444' uses 32-bit capabilities (legacy support in use) [ 68.492255][ T5967] hub 9-0:1.0: USB hub found [ 68.497036][ T5967] hub 9-0:1.0: 8 ports detected [ 68.610457][ T5980] hub 9-0:1.0: USB hub found [ 68.615507][ T5980] hub 9-0:1.0: 8 ports detected [ 68.734327][ T5992] FAULT_INJECTION: forcing a failure. [ 68.734327][ T5992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.747600][ T5992] CPU: 1 UID: 0 PID: 5992 Comm: syz.1.454 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 68.747630][ T5992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 68.747641][ T5992] Call Trace: [ 68.747648][ T5992] [ 68.747656][ T5992] __dump_stack+0x1d/0x30 [ 68.747678][ T5992] dump_stack_lvl+0xe8/0x140 [ 68.747698][ T5992] dump_stack+0x15/0x1b [ 68.747760][ T5992] should_fail_ex+0x265/0x280 [ 68.747781][ T5992] should_fail+0xb/0x20 [ 68.747841][ T5992] should_fail_usercopy+0x1a/0x20 [ 68.747864][ T5992] _copy_to_user+0x20/0xa0 [ 68.747890][ T5992] simple_read_from_buffer+0xb5/0x130 [ 68.747940][ T5992] proc_fail_nth_read+0x10e/0x150 [ 68.747980][ T5992] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 68.748008][ T5992] vfs_read+0x1a8/0x770 [ 68.748028][ T5992] ? __rcu_read_unlock+0x4f/0x70 [ 68.748135][ T5992] ? __fget_files+0x184/0x1c0 [ 68.748161][ T5992] ksys_read+0xda/0x1a0 [ 68.748184][ T5992] __x64_sys_read+0x40/0x50 [ 68.748207][ T5992] x64_sys_call+0x27bc/0x2ff0 [ 68.748229][ T5992] do_syscall_64+0xd2/0x200 [ 68.748288][ T5992] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 68.748313][ T5992] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 68.748353][ T5992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.748375][ T5992] RIP: 0033:0x7fc97021d5fc [ 68.748399][ T5992] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 68.748417][ T5992] RSP: 002b:00007fc96ec87030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 68.748451][ T5992] RAX: ffffffffffffffda RBX: 00007fc970445fa0 RCX: 00007fc97021d5fc [ 68.748465][ T5992] RDX: 000000000000000f RSI: 00007fc96ec870a0 RDI: 0000000000000006 [ 68.748478][ T5992] RBP: 00007fc96ec87090 R08: 0000000000000000 R09: 0000000000000000 [ 68.748534][ T5992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.748546][ T5992] R13: 00007fc970446038 R14: 00007fc970445fa0 R15: 00007fff4a166498 [ 68.748590][ T5992] [ 69.025603][ T6007] loop0: detected capacity change from 0 to 1024 [ 69.034837][ T6007] EXT4-fs: Ignoring removed orlov option [ 69.068178][ T6007] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.077623][ T6014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.091591][ T6014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.157211][ T6020] pim6reg: entered allmulticast mode [ 69.236589][ T6022] loop1: detected capacity change from 0 to 1024 [ 69.245825][ T6022] EXT4-fs: Ignoring removed bh option [ 69.252231][ T6022] EXT4-fs: inline encryption not supported [ 69.260286][ T6022] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 69.285963][ T6022] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.463: lblock 2 mapped to illegal pblock 2 (length 1) [ 69.347359][ T6022] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.463: lblock 0 mapped to illegal pblock 48 (length 1) [ 69.363237][ T3936] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.384252][ T6028] loop0: detected capacity change from 0 to 512 [ 69.391675][ T6022] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.463: Failed to acquire dquot type 0 [ 69.401080][ T6024] __nla_validate_parse: 2 callbacks suppressed [ 69.401098][ T6024] netlink: 16 bytes leftover after parsing attributes in process `syz.3.464'. [ 69.404420][ T6022] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 69.409008][ T6024] netlink: 16 bytes leftover after parsing attributes in process `syz.3.464'. [ 69.418733][ T6022] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.463: mark_inode_dirty error [ 69.448230][ T6022] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 69.458730][ T6022] EXT4-fs (loop1): 1 orphan inode deleted [ 69.461244][ T6028] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.0.465: corrupted xattr block 95: invalid header [ 69.469456][ T6022] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.478520][ T12] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 69.504725][ T6028] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.465: bg 0: block 7: invalid block bitmap [ 69.520219][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0 [ 69.521583][ T6028] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 69.532950][ T6022] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 69.540963][ T6028] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2962: inode #11: comm syz.0.465: corrupted xattr block 95: invalid header [ 69.563540][ T6028] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 69.573068][ T6028] EXT4-fs (loop0): 1 orphan inode deleted [ 69.579024][ T6028] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.617991][ T6032] ================================================================== [ 69.626197][ T6032] BUG: KCSAN: data-race in __dentry_kill / fast_dput [ 69.632966][ T6032] [ 69.635300][ T6032] write to 0xffff888106f09010 of 8 bytes by task 6031 on cpu 0: [ 69.643031][ T6032] __dentry_kill+0x142/0x4b0 [ 69.647641][ T6032] dput+0x5e/0xd0 [ 69.651340][ T6032] step_into+0x5b2/0x820 [ 69.655637][ T6032] walk_component+0x162/0x220 [ 69.660345][ T6032] path_lookupat+0xfe/0x2a0 [ 69.664884][ T6032] filename_lookup+0x147/0x340 [ 69.669860][ T6032] filename_setxattr+0x56/0x400 [ 69.674716][ T6032] path_setxattrat+0x2c9/0x310 [ 69.679483][ T6032] __x64_sys_lsetxattr+0x71/0x90 [ 69.684422][ T6032] x64_sys_call+0x2877/0x2ff0 [ 69.689098][ T6032] do_syscall_64+0xd2/0x200 [ 69.693605][ T6032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.699510][ T6032] [ 69.701828][ T6032] read to 0xffff888106f09010 of 8 bytes by task 6032 on cpu 1: [ 69.709365][ T6032] fast_dput+0x5f/0x2c0 [ 69.713612][ T6032] dput+0x24/0xd0 [ 69.717251][ T6032] step_into+0x5b2/0x820 [ 69.721493][ T6032] walk_component+0x162/0x220 [ 69.726171][ T6032] path_lookupat+0xfe/0x2a0 [ 69.730711][ T6032] filename_lookup+0x147/0x340 [ 69.735498][ T6032] filename_setxattr+0x56/0x400 [ 69.740352][ T6032] path_setxattrat+0x2c9/0x310 [ 69.745219][ T6032] __x64_sys_lsetxattr+0x71/0x90 [ 69.750179][ T6032] x64_sys_call+0x2877/0x2ff0 [ 69.754857][ T6032] do_syscall_64+0xd2/0x200 [ 69.759389][ T6032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.765303][ T6032] [ 69.767626][ T6032] value changed: 0xffff888237a2cd60 -> 0x0000000000000000 [ 69.774731][ T6032] [ 69.777078][ T6032] Reported by Kernel Concurrency Sanitizer on: [ 69.783314][ T6032] CPU: 1 UID: 0 PID: 6032 Comm: syz.2.466 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 69.795643][ T6032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 69.805696][ T6032] ================================================================== [ 69.881817][ T6036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.465'. [ 69.891501][ T6036] SELinux: policydb magic number 0x696e7500 does not match expected magic number 0xf97cff8c [ 69.901819][ T6036] SELinux: failed to load policy [ 69.995872][ T5481] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.221612][ T3936] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.