last executing test programs: 1m37.43180658s ago: executing program 3 (id=1763): syz_open_dev$tty1(0xc, 0x4, 0x2) syz_io_uring_setup(0x4ea0, &(0x7f0000000480)={0x0, 0x8981, 0x400, 0x0, 0x2f0}, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2c060000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x40000080, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000003a80)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x2}, {0x0}, &(0x7f0000003a00)=[{&(0x7f00000016c0)=""/96, 0x60}], 0x1, 0x0, 0x2}}], 0x48, 0x4000000}, 0x0) 1m36.523868939s ago: executing program 3 (id=1765): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000940)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee00}}, './file0\x00'}) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB='dots,fmask=00000000000000000006675,uid=', @ANYRESHEX=0x0, @ANYBLOB=',flush,dots,nfs=stale_rw,nfs=stale_rw,dots,nodots,nodots,nodots,nodots,nodots,umask=00000000000000000001355,nodots,dots,nodots,nodots,dots,umask=00000000000000000076645,nodots,dots,uid=', @ANYRESDEC=r0, @ANYBLOB="2c72256f2c6dc031297247"], 0x1, 0x1f5, &(0x7f0000000600)="$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") r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) fremovexattr(r4, &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000440), &(0x7f0000000480)=r3}, 0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = syz_usbip_server_init(0x2) prctl$PR_SET_FP_MODE(0x2d, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r8 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f00000002c0)={0x6, 0x28, '\x00', 0x1, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0]}) syz_io_uring_submit(r9, r10, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) unshare(0x2000000) io_uring_enter(r8, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOv7WNu0lCZNadJ1Whbt4H8ggoJPPvki+AcIwzz4B8jAgL6ID6KiiM7og6DOlSQ3TidN2rrTNp3m84HTnHPvzf2ec0NO7o/TewMYWy9FxFsRMRERr0ZEMZ+e5in2uqm93IP77y21UxJZ9s5fk0jyab11tdcxGRFX87dNRcTXvhzxzeRg3ObO7vpirVbdysuVVn2z0tzZvb5WX1ytrlY35ufn3lh4c+H1hdks90TtLPUyP/nS529/+lu/u/Hna99uV+tzH4lC9LXjJHWbXuhsi572Nto6jWAj0PvMC6OuCAAAx9Lex/9gRHyis/9fjInO3lyfiVHUDAAAADgp2Rem499JRAYAAABcWGlETEeSlvOxANORppfycwMfjitprdFsfWqlsb2x3J4XUYpCurJWq87mY4VLUUja5bl8jG2v/FpfeT4inouI7xcvd8rlpUZtecTnPgAAAGBcXO07/v9HMe3kjzbg/wQAAACA86s0tAAAAABcFA75AQAA4OLrP/6/PaJ6AAAAAKfiK2+/3U5Z7/nXy+/ubK833r2+XG2ul+vbS+WlxtZmebXRWO3cs69+1PpqjcbmZ2Jj+2alVW22Ks2d3Rv1xvZG68baY4/ABgAAAM7Qcx+/8+skIvY+e7mTIr8PIMBj/jDqCgAnaWLUFQBGxl28YXwVRl0BYOSSI+YbvAMAAE+/mY8evP7fe/6/cwNwsRnrAwDjx/V/GF8FIwBhrKUR8YFu9plhywy9/v/L40bJsoi7xf1TnF8EAICzNd1JSVrOjwOmI03L5YhnI9JSFJKVtVp1Nj8++FWx8Ey7PNd5Z3LkmGEAAAAAAAAAAAAAAAAAAAAAAAAAoCvLksgAAACACy0i/VPSuZt/xEzxlen+8wOXkn8W44954Ufv/ODmYqu1Ndee/rfOs7wuRUTrh/n014Y+PgwAAAA4acne0Fnd4/T8de5MawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGHhw/72lXjrLuH/5YkSUBsWfjKnO61QUIuLK35OY3Pe+JCImTiD+3q2IeH5Q/CQeZllWymvRHz+NiMunHL/U2TTD4189gfgwzu60+5+3Bn3/0nip8zr4+zeZpyc1vP9L88jPd/q5Qf3fswfWVh8Y44V7P6sMjX8r4oXJwf1Pr/9NhsR/+cDa/pVl2cEY3/j67u6w+NmPI2YG/v4kj8WqtOqblebO7vW1+uJqdbW6MT8/98bCmwuvL8xWVtZq1fzvwBjf+9jPHx7W/isD4v/2N93+97D2vzJspX3+c+/m/Q91s4VB8a+9PPD3dyqGxE/z375P5vn2/Jlefq+b3+/Fn9598bD2Lw/Z/kd9/teO2f5Xv/rd3x9zUQDgDDR3dtcXa7Xq1iGZqWMs8zRmfjF1Lqrxf2ay73Q/ufNSn/ebae+tPprSa9U5qNi+THZmsSbinDT5f5mRdksAAMApeLTTP+qaAAAAAAAAAAAAAAAAAAAAwPg6i9uJ9cfcG01TAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO9d8AAAD//yLg4A8=") gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) write$usbip_server(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="000000030000000800000000000000010600000000000009000000000000000600000000000003fffffff80000000000"], 0x30) 1m35.241314555s ago: executing program 3 (id=1773): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) close_range(r0, r1, 0x0) 1m35.183774691s ago: executing program 3 (id=1774): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file2\x00', 0x1808004, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x4, 0x7cc, &(0x7f0000002200)="$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") clock_gettime(0xfffffffffffffffc, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0xc, 0x7, 0x7ffc1efb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='ext4_ext_convert_to_initialized_fastpath\x00', r0}, 0x18) statx(0xffffffffffffffff, 0x0, 0x400, 0x40, 0x0) ptrace$pokeuser(0x6, r1, 0x380, 0x3) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000300)={0x4, 0x0, 0x800}) syz_open_dev$tty1(0xc, 0x4, 0x4) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00') 1m35.111641478s ago: executing program 3 (id=1776): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x34, r0, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 1m34.931584716s ago: executing program 3 (id=1777): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="ab50effc1bb5442b8a5ffd96efc987decf31283852a666b73dc9b3b7960a814b90cd06280a32", 0x26}, {&(0x7f00000001c0)="6bbdca5fd1a0d7982df6862806485a3e674cc6ff1b16f7cfe8530ce1ea0726db734e1381eb7d", 0x26}, {&(0x7f0000000240)="22d07c19482743b38576ed62338f126a7691c9d386dd7cf1458d53f918f01338d25f655004242b666fa456b4815f9088a69dc85a291a4524ed585947a4d4be31dd9debf38ea9d191c8c67350b05a878d3c957bbf21279f7f", 0x58}, {&(0x7f0000000300)="baf95b8ceb7e606662f41ff7e9b0cc6c3dd10aaf4d93001e89f61285a91bf56a22ed75ced53df775b6f1148c806b70c5208a7ed185b1a79a12527e00eddedb1b58e3cbdc9ab7e157a642b879770f27ba8007e31baff1069e2ba14b8ffc2ffdcc33aa8ff1760dc3ed6b4a706f00d880872e4b7c", 0x73}, {&(0x7f0000001c00)="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", 0x1000}], 0x5, &(0x7f0000000400)=[{0x28, 0x11, 0x69a, "4da5830551ddbff9e63bae85b516a27821e4e5"}], 0x28, 0xc915}, 0x38) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_clone(0x600cf000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r4}, 0x18) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3) 1m34.863961313s ago: executing program 32 (id=1777): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="ab50effc1bb5442b8a5ffd96efc987decf31283852a666b73dc9b3b7960a814b90cd06280a32", 0x26}, {&(0x7f00000001c0)="6bbdca5fd1a0d7982df6862806485a3e674cc6ff1b16f7cfe8530ce1ea0726db734e1381eb7d", 0x26}, {&(0x7f0000000240)="22d07c19482743b38576ed62338f126a7691c9d386dd7cf1458d53f918f01338d25f655004242b666fa456b4815f9088a69dc85a291a4524ed585947a4d4be31dd9debf38ea9d191c8c67350b05a878d3c957bbf21279f7f", 0x58}, {&(0x7f0000000300)="baf95b8ceb7e606662f41ff7e9b0cc6c3dd10aaf4d93001e89f61285a91bf56a22ed75ced53df775b6f1148c806b70c5208a7ed185b1a79a12527e00eddedb1b58e3cbdc9ab7e157a642b879770f27ba8007e31baff1069e2ba14b8ffc2ffdcc33aa8ff1760dc3ed6b4a706f00d880872e4b7c", 0x73}, {&(0x7f0000001c00)="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", 0x1000}], 0x5, &(0x7f0000000400)=[{0x28, 0x11, 0x69a, "4da5830551ddbff9e63bae85b516a27821e4e5"}], 0x28, 0xc915}, 0x38) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_clone(0x600cf000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r4}, 0x18) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3) 1m24.187185604s ago: executing program 5 (id=1854): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x40, 0x1800}], 0x1, 0x0) unshare(0x20060400) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x20000000000000c2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000000500000780680000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r5}, 0x18) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xf}, 0x94) syz_io_uring_setup(0x53f, &(0x7f0000000440)={0x0, 0x4000f05e, 0x100, 0xfffffff8, 0xfe}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) unshare(0x2c020400) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) 1m24.061618266s ago: executing program 5 (id=1856): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@loopback, 0x19, r1}) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000200)='.\x00', 0x10000a0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20004048, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c) getsockopt$inet_int(r3, 0x0, 0xe, 0x0, &(0x7f0000000500)=0x3) sendmsg$NFT_BATCH(r0, 0x0, 0x4000000) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, 0xe) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x111}}, 0x20) syz_emit_ethernet(0x0, 0x0, 0x0) writev(r5, &(0x7f0000000040), 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYRES32=r6, @ANYRES16=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x18) truncate(&(0x7f0000000000)='./file1\x00', 0x400000000000001) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close_range(r8, r9, 0x0) 1m24.02209534s ago: executing program 5 (id=1857): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) close_range(r0, r1, 0x0) 1m24.003533962s ago: executing program 5 (id=1858): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file2\x00', 0x1808004, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x4, 0x7cc, &(0x7f0000002200)="$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") clock_gettime(0xfffffffffffffffc, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0xc, 0x7, 0x7ffc1efb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='ext4_ext_convert_to_initialized_fastpath\x00', r0}, 0x18) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00') 1m23.91460218s ago: executing program 5 (id=1860): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pimreg\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000300)="1b26f00157302d0d3b9dbf9a477a9df4828dea1b70f0c1d6e7e7f4f24011968c2e4e638eef2fbbfdc63373f54be777bfb1242b24e435a721983f44fa7503ab68fad2b70cf15570e73cce6f108f174464b3a8fd359f0e664a0a4921cf5ad808ea7cd96e381b7224bae76f46ef4bc583ac243f8688fd989fe0ee494cbd796bc5f00470fa9b3d776f5b96e233bbf6db162769e89e298201716ae1282da372411626252bcc55765d6e7eda9df7435e9cf66ea1e04dfb85aa6c8a0dd32e12d6e1", &(0x7f0000000b40)=""/4096}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r4, &(0x7f0000000100)=[{0x0, 0x72}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @empty}, 0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000003c0)={'gre0\x00', 0x0, 0x700, 0x7, 0x8, 0x8001, {{0x2a, 0x4, 0x1, 0x10, 0xa8, 0x68, 0x0, 0x2, 0x29, 0x0, @broadcast, @broadcast, {[@cipso={0x86, 0x2d, 0x0, [{0x1, 0x7, "78833ef2f1"}, {0x6, 0x11, "08351080c800c602ef6586bd297e90"}, {0x7, 0x3, "f8"}, {0x6, 0x5, "e49619"}, {0x5, 0x7, "bf158c7a84"}]}, @cipso={0x86, 0x42, 0x2, [{0x2, 0x11, "e91e62e7d9f999c9933cc12d090879"}, {0x5, 0x2}, {0x0, 0xc, "c44d26a1a24ec31b5843"}, {0x2, 0x8, "5ad56a20ef0c"}, {0x2, 0xd, "5015bf3cab2be192bb267c"}, {0x6, 0x8, "7e43cb631550"}]}, @noop, @lsrr={0x83, 0x23, 0x78, [@empty, @local, @rand_addr=0x64010101, @rand_addr=0x64010100, @remote, @broadcast, @multicast1, @local]}]}}}}}) bind$packet(r4, &(0x7f00000004c0)={0x11, 0x5, r6, 0x1, 0x4b, 0x6, @remote}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x1000000000000}, 0x18) r7 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r8, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000540)=""/196, 0xc4}, {&(0x7f0000000640)=""/64, 0x40}, {&(0x7f0000000680)=""/14, 0xe}, {&(0x7f00000006c0)=""/175, 0xaf}, {&(0x7f0000000780)=""/207, 0xcf}, {&(0x7f0000000880)=""/6, 0x6}], 0x6, &(0x7f0000001e80)=[@mask_cswp={0x58, 0x114, 0x9, {{0x5, 0x6}, &(0x7f00000008c0)=0x5, &(0x7f0000001b40)=0x2, 0x4, 0x0, 0x7, 0x3, 0x0, 0x2}}, @mask_fadd={0x58, 0x114, 0x8, {{0x1, 0x8}, &(0x7f0000001b80)=0x3, &(0x7f0000001bc0)=0xb, 0x4, 0x9, 0xc, 0x0, 0x60, 0x7fff}}, @mask_cswp={0x58, 0x114, 0x9, {{0x8, 0xffffffff}, &(0x7f0000001c00)=0x100, &(0x7f0000001c40)=0xfff, 0x8, 0x6, 0x1000, 0x5, 0x2, 0x9}}, @mask_cswp={0x58, 0x114, 0x9, {{0x6, 0x101}, &(0x7f0000001c80)=0xfa, &(0x7f0000001cc0)=0xeae8, 0x7, 0x7, 0x67, 0x10000, 0x68, 0x7fff}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001d00)=""/71, 0x47}, &(0x7f0000001d80), 0x8}}, @rdma_dest={0x18, 0x114, 0x2, {0x9, 0x3}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001dc0)=""/118, 0x76}, &(0x7f0000001e40), 0x2c}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x8000}, @zcopy_cookie={0x18, 0x114, 0xc, 0x9}], 0x208, 0x4006}, 0x4000000) r9 = fsmount(r7, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r9, &(0x7f0000000140)='./file0\x00') openat(r9, &(0x7f0000000200)='./file0\x00', 0x414f02, 0x52abe154ad664fa4) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000500), 0x4) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 1m20.76774433s ago: executing program 5 (id=1911): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x40004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000180)=0x81, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000000000000008100d00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r4 = socket(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000380)=ANY=[@ANYRESDEC=r3], 0x48) sendmsg$nl_route_sched(r4, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=@newqdisc={0x2c, 0x24, 0x200, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5}, {0x6, 0x6}, {0xb, 0x9}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xbaa8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x4004080) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000740)={r5, &(0x7f0000000340), &(0x7f0000000200)=@tcp6=r4}, 0x20) recvmmsg(r4, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1}, 0x3ff}], 0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300010029bd7000fedbdf2500000000", @ANYRES32=r7, @ANYBLOB="d45006000200000024001a802000028014"], 0x44}, 0x1, 0x0, 0x0, 0x8081}, 0x20040000) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7b25bb05490abfa8, '\x00', r7, @fallback=0x7, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r9) sendmsg$IEEE802154_LIST_PHY(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x14, r10, 0x30b, 0x70bd27, 0x25dfdc00}, 0x14}, 0x1, 0x0, 0x0, 0x4851}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000040) r11 = getpid() r12 = syz_pidfd_open(r11, 0x0) r13 = pidfd_getfd(r12, r12, 0x0) setns(r13, 0x66020000) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 1m20.760503571s ago: executing program 33 (id=1911): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x40004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000180)=0x81, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000000000000008100d00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r4 = socket(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000380)=ANY=[@ANYRESDEC=r3], 0x48) sendmsg$nl_route_sched(r4, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=@newqdisc={0x2c, 0x24, 0x200, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5}, {0x6, 0x6}, {0xb, 0x9}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xbaa8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x4004080) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000740)={r5, &(0x7f0000000340), &(0x7f0000000200)=@tcp6=r4}, 0x20) recvmmsg(r4, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1}, 0x3ff}], 0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300010029bd7000fedbdf2500000000", @ANYRES32=r7, @ANYBLOB="d45006000200000024001a802000028014"], 0x44}, 0x1, 0x0, 0x0, 0x8081}, 0x20040000) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7b25bb05490abfa8, '\x00', r7, @fallback=0x7, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r9) sendmsg$IEEE802154_LIST_PHY(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x14, r10, 0x30b, 0x70bd27, 0x25dfdc00}, 0x14}, 0x1, 0x0, 0x0, 0x4851}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000040) r11 = getpid() r12 = syz_pidfd_open(r11, 0x0) r13 = pidfd_getfd(r12, r12, 0x0) setns(r13, 0x66020000) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 3.810789885s ago: executing program 4 (id=3099): socket$kcm(0x10, 0x2, 0x0) mbind(&(0x7f00004fa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x1ff, 0x8, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x19, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) connect$unix(0xffffffffffffffff, 0x0, 0x0) mq_unlink(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000009184100002020702500000000002020207b1af8ffb3fe0000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e3, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='adfs\x00', 0x220ac08, 0x0) umount2(&(0x7f0000000380)='./file1\x00', 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x4, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)=ANY=[@ANYRES8=r3]) 2.295466084s ago: executing program 1 (id=3126): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00'], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 2.227700961s ago: executing program 2 (id=3127): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x44, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0xfff2, 0x4}, {}, {0xd, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054) 2.096851053s ago: executing program 2 (id=3129): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85000000430000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) close_range(r1, 0xffffffffffffffff, 0x0) 2.074079326s ago: executing program 2 (id=3130): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x34, r1, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 1.42449183s ago: executing program 1 (id=3143): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') name_to_handle_at(r0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000200)=@FILEID_BTRFS_WITHOUT_PARENT={0x28, 0x4e, {0x0, 0x6e6, 0x4, 0xaf, 0x98, 0x7}}, &(0x7f00000002c0), 0x600) (fail_nth: 1) 1.362281296s ago: executing program 1 (id=3144): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast1}, 0xa, 0x0, 0xfffd}}, 0x26) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(r2, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) 1.358732756s ago: executing program 1 (id=3145): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757819"], 0x65) 1.258403406s ago: executing program 0 (id=3146): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x44, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0xfff2, 0x4}, {}, {0xd, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054) 1.164082605s ago: executing program 1 (id=3148): syz_usb_connect(0x2, 0x0, 0x0, 0x0) r0 = socket$inet_icmp(0x2, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xb, &(0x7f0000000ac0)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000ac0), 0x1, 0x3ce, &(0x7f00000004c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) open_by_handle_at(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="4b00000002"], 0x36f0516f) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f00000000c0)=0xfff, 0x4) sendmmsg$inet(r0, &(0x7f00000053c0)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x4800) recvfrom(r0, 0x0, 0x0, 0x40000040, 0x0, 0x0) socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x440081) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a"], 0x44}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0xc6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000000040000000000000000000000000000c00a4640566bf57867b9fb5a95f575046a3efc679dcd975fd13b6917f2d9f15eddd47cee1095ee4051ebbc3fb92473b59bcf11edc63a", @ANYRES16=r2, @ANYBLOB="00000000000000001c9a7291c5ee63e64637a748f8dfb40d6c0012800b00010062726964676500000c0002800500070007dd0100"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x2, 0x2, 0x1) r6 = socket(0x2, 0x2, 0x1) bind$unix(r6, &(0x7f0000000000)=@abs, 0x6e) r7 = socket(0x2, 0x2, 0x1) bind$unix(r7, &(0x7f0000000000)=@abs, 0x6e) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r8, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9) 1.140597497s ago: executing program 2 (id=3149): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@loopback, 0x19, r1}) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000200)='.\x00', 0x10000a0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_int(r3, 0x0, 0xe, 0x0, &(0x7f0000000500)=0x3) sendmsg$NFT_BATCH(r0, 0x0, 0x4000000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, 0xe) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x111}}, 0x20) syz_emit_ethernet(0x0, 0x0, 0x0) writev(r6, &(0x7f0000000040), 0x0) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYRES32=r7, @ANYRES16=r0, @ANYBLOB="0000000000000000b7020000010000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x18) truncate(&(0x7f0000000000)='./file1\x00', 0x400000000000001) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close_range(r9, r10, 0x0) 1.12250943s ago: executing program 0 (id=3150): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x4}, 0x18) r3 = socket(0x5, 0x800, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000980)={0x4e0, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x40, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3b}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xaa}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}]}]}, @NL80211_ATTR_TID_CONFIG={0x204, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4a}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7c}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x36}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x97}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0xec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb3}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa4, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x1be0, 0x3, 0x3, 0x6, 0xb2fd, 0x2, 0x2a]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x43ad, 0x401, 0x40, 0xfffe, 0x3, 0x7, 0x7f, 0x401]}}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xe, 0x2, [{0x6}, {0x0, 0x6}, {0x1}, {0x2}, {0x6, 0xa}, {0x2, 0x2}, {0x1, 0x6}, {0x2, 0x6}, {0x2, 0x4}, {0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4000, 0x2, 0x3, 0x3, 0x3883, 0xb, 0x1800, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x479c, 0x60, 0x0, 0x1, 0x1ff, 0x5]}}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x24, 0x1b, 0x1, 0x2, 0x16, 0x9, 0x6, 0x0]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x4, 0x5, 0x32, 0x18, 0x3, 0x6, 0x4, 0x24, 0x48, 0xb, 0x12, 0xb, 0xc, 0x36, 0x24, 0x16, 0xc, 0x5, 0xc, 0x9]}]}]}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x48, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x7, 0x7}, {0x2, 0x4}, {0x4, 0x9}, {0x4, 0x2}, {0x5, 0x9}, {0x5}, {0x3, 0x9}, {0x1, 0x7}, {0x3, 0x5}, {0x0, 0x9}, {0x7, 0xa}, {0x6, 0x4}, {0x1, 0x4}, {0x0, 0x1}, {0x0, 0x9}, {0x0, 0x5}, {0x3, 0x3}, {0x0, 0x3}, {0x3, 0x2}, {0x7}, {0x2, 0x8}, {0x2, 0x9}, {0x0, 0x7}, {0x2, 0x8}, {0x1, 0x7}, {0x3, 0x1}, {0x1, 0x9}, {0x7, 0x1}, {0x1, 0x6}, {0x0, 0x7}, {0x2, 0xa}, {0x3, 0x9}, {0x2, 0x9}, {0x7, 0x9}, {0x6, 0x3}, {0x6, 0x3}, {0x0, 0x6}, {0x5, 0x8}, {0x2, 0x1}, {0x1}, {0x6, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x2, 0x3}, {}, {0x6, 0x8}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0xb, 0x5, 0xc, 0x12, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x250, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd7}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x33}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x188, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x160, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x8000, 0x6d, 0x7, 0x2, 0x8001, 0x5, 0x8]}}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xfff, 0xfffc, 0x8000, 0x10, 0x0, 0xcc, 0x80]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x9, 0xb, 0x1b, 0x2, 0x9, 0xb, 0x1, 0x60, 0x3, 0x60, 0x16, 0x24, 0x6, 0x12, 0x9, 0x24, 0xb, 0x16, 0x4, 0xb, 0x1, 0x18, 0x36, 0x36, 0x16, 0x4, 0x5, 0x3, 0x6, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x5, 0xc, 0x400, 0x100, 0x7, 0x9dbd]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xfeff, 0x0, 0x9, 0x1, 0x3ff, 0x3, 0x10]}}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0x80, 0x2, 0x40, 0xb02, 0x8, 0x5, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x7, 0x4, 0x0, 0x0, 0x46, 0xf, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xe07, 0xf4a, 0x3, 0x3, 0x0, 0xff, 0x8]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x18, 0x60, 0x6, 0x1f, 0x30, 0x9, 0x12, 0x36, 0x2, 0x30, 0x30]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x6, 0x5636434cc5bbe00a, 0x9, 0x24, 0x6, 0xb, 0x12, 0x60, 0x36, 0xb]}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x6, 0x5, 0x6, 0x2, 0xf3, 0x2, 0x56]}}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x1, 0x3}, {0x1, 0x6}, {0x6, 0x5}, {0x5, 0x7}, {0x1, 0xa}, {0x1, 0x7}, {0x7}, {0x3, 0x7}, {0x6, 0x2}, {0x1, 0x2}, {0x2, 0x3}, {0x3, 0x6}, {0x2, 0x5}, {0x0, 0x7}, {0x1, 0x9}, {0x2, 0x5}, {0x2, 0x9}, {0x3, 0x5}, {0x2, 0x1}, {0x0, 0x9}, {0x6, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3c}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2e}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x51}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7e}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x54}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6e}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}]}, 0x4e0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r5, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r5, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000740)="b3", 0x1}], 0x1, &(0x7f0000000640)=ANY=[], 0xf0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000900)="1d", 0x1}], 0x1}}], 0x2, 0x24004c41) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r6}, 0x10) fsetxattr$security_ima(r6, &(0x7f0000000000), &(0x7f0000000200)=@v1={0x2, "231a6d4ff980ecf12cde96ee"}, 0xd, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 1.054866876s ago: executing program 4 (id=3151): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x8, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0xd4d, &(0x7f0000001500)={0x0, 0xdb60, 0x40, 0x3, 0x211}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000480)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x11}], 0x1) 1.047309467s ago: executing program 2 (id=3152): openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000007daf274814f59eb44368942eb4b40c0000008000000000"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f00000008c0)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sys_enter\x00', r0, 0x0, 0x80000000000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) getgid() bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) 957.447116ms ago: executing program 0 (id=3153): socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') read$ptp(r0, &(0x7f0000000340)=""/162, 0xa2) (fail_nth: 3) 956.398456ms ago: executing program 4 (id=3155): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00'], 0x48) socket$nl_audit(0x10, 0x3, 0x9) r1 = epoll_create1(0x80000) r2 = syz_open_procfs(0x0, 0x0) writev(r2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETS2(r3, 0x402c542b, 0x0) dup(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES16=r3, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r8, @ANYRES8=r7, @ANYRESOCT=r4, @ANYRESOCT=r6], 0x24}, 0x1, 0x0, 0x0, 0x8008800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000d40937e3c54321b031ef3080000b70800000000ebff7b8af8ff00000000bfa20000020000f8ffffffb703000008000000b704000000000000850000000300000095", @ANYRES16=r1, @ANYRES8=r2, @ANYRES8, @ANYRESDEC=r0, @ANYRESOCT=r5], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0800000004000000040000000700000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fbffffffffffffffdf"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800201458053629a66ad42200000000000000004eb1000000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$pppoe(0x18, 0x1, 0x0) r11 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r11, &(0x7f0000000000)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r12 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r12, &(0x7f00000000c0)={0x18, 0x0, {0x4, @remote, 'ip6gre0\x00'}}, 0x1e) connect$pppoe(r10, &(0x7f0000000080)={0x18, 0x0, {0x2, @empty, 'ip_vti0\x00'}}, 0x1e) close(r11) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 657.229755ms ago: executing program 0 (id=3156): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x81, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x73, 0x65, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x25, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x4, "4eb8"}, {0x0, 0xe, "9606053d0006ff00800000b6"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x6}]}}, "a815a2"}}}}}, 0x0) 656.862965ms ago: executing program 4 (id=3157): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x9, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r4, 0x2007ffc) sendfile(r4, r4, 0x0, 0x800000009) socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) read$rfkill(r1, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 656.518525ms ago: executing program 0 (id=3158): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757819"], 0x65) 639.803557ms ago: executing program 2 (id=3159): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_targets\x00') socket$inet(0x2, 0x2, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) socket$netlink(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='net/sockstat\x00') 585.734342ms ago: executing program 0 (id=3160): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x34, r1, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 548.390646ms ago: executing program 4 (id=3161): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000014000103f7"], 0x14}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x201001a, &(0x7f0000000080)=ANY=[], 0x1, 0x740, &(0x7f0000000140)="$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") r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) flock(0xffffffffffffffff, 0xe) dup(r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000100)='cgroup.controllers\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="480200001a0007000000000000000000fc020000000000000000000000000000e0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000000000000000000b40000000000000200000000000000000000007ffffffe0000000100000000e40c00000000000007000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e"], 0x248}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)="5da93f8d4b791e0d0000003b233a3882e02fe9d5ed508a3bebad04394777b771504e9096bef8a966b8a851e5313d28de90a4d8efe9617da4742c6538ff1a22266bb0f6cf0f9ba396d801bb55205e7f9704152db4997ed800b7f20815e806d2e4f8cdc95b3376230805e8e9f3dde61b7f2aedc85e725f4432dc7a624e2ed2f5d5a49646184c88552ab30f959a22f87b05257f0a99da9b5de39a339ca7289cc78e291abf4cb7d87d378961dbe621281e8e0c900556b61713831c94571477530e4b86158a9b40289cc62becc7db9c79f40f0578550cea77c5fc5b57b485cd1d1a3b9700fb", 0xe3}, 0x1, 0x0, 0x0, 0x8801}, 0x890) 536.274417ms ago: executing program 6 (id=3162): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@loopback, 0x19, r1}) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000200)='.\x00', 0x10000a0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_int(r3, 0x0, 0xe, 0x0, &(0x7f0000000500)=0x3) sendmsg$NFT_BATCH(r0, 0x0, 0x4000000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, 0xe) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x111}}, 0x20) syz_emit_ethernet(0x0, 0x0, 0x0) writev(r6, &(0x7f0000000040), 0x0) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYRES32=r7, @ANYRES16=r0, @ANYBLOB="0000000000000000b7020000010000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x18) truncate(&(0x7f0000000000)='./file1\x00', 0x400000000000001) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close_range(r9, r10, 0x0) 472.334933ms ago: executing program 6 (id=3163): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x44, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0xfff2, 0x4}, {}, {0xd, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054) 378.363503ms ago: executing program 6 (id=3164): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x4}, 0x18) r3 = socket(0x5, 0x800, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000980)={0x4e0, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x40, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3b}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xaa}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}]}]}, @NL80211_ATTR_TID_CONFIG={0x204, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4a}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7c}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x36}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x97}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0xec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb3}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa4, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x1be0, 0x3, 0x3, 0x6, 0xb2fd, 0x2, 0x2a]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x43ad, 0x401, 0x40, 0xfffe, 0x3, 0x7, 0x7f, 0x401]}}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xe, 0x2, [{0x6}, {0x0, 0x6}, {0x1}, {0x2}, {0x6, 0xa}, {0x2, 0x2}, {0x1, 0x6}, {0x2, 0x6}, {0x2, 0x4}, {0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4000, 0x2, 0x3, 0x3, 0x3883, 0xb, 0x1800, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x479c, 0x60, 0x0, 0x1, 0x1ff, 0x5]}}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x24, 0x1b, 0x1, 0x2, 0x16, 0x9, 0x6, 0x0]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x4, 0x5, 0x32, 0x18, 0x3, 0x6, 0x4, 0x24, 0x48, 0xb, 0x12, 0xb, 0xc, 0x36, 0x24, 0x16, 0xc, 0x5, 0xc, 0x9]}]}]}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x48, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x7, 0x7}, {0x2, 0x4}, {0x4, 0x9}, {0x4, 0x2}, {0x5, 0x9}, {0x5}, {0x3, 0x9}, {0x1, 0x7}, {0x3, 0x5}, {0x0, 0x9}, {0x7, 0xa}, {0x6, 0x4}, {0x1, 0x4}, {0x0, 0x1}, {0x0, 0x9}, {0x0, 0x5}, {0x3, 0x3}, {0x0, 0x3}, {0x3, 0x2}, {0x7}, {0x2, 0x8}, {0x2, 0x9}, {0x0, 0x7}, {0x2, 0x8}, {0x1, 0x7}, {0x3, 0x1}, {0x1, 0x9}, {0x7, 0x1}, {0x1, 0x6}, {0x0, 0x7}, {0x2, 0xa}, {0x3, 0x9}, {0x2, 0x9}, {0x7, 0x9}, {0x6, 0x3}, {0x6, 0x3}, {0x0, 0x6}, {0x5, 0x8}, {0x2, 0x1}, {0x1}, {0x6, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x2, 0x3}, {}, {0x6, 0x8}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0xb, 0x5, 0xc, 0x12, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x250, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd7}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x33}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x188, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x160, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x8000, 0x6d, 0x7, 0x2, 0x8001, 0x5, 0x8]}}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xfff, 0xfffc, 0x8000, 0x10, 0x0, 0xcc, 0x80]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x9, 0xb, 0x1b, 0x2, 0x9, 0xb, 0x1, 0x60, 0x3, 0x60, 0x16, 0x24, 0x6, 0x12, 0x9, 0x24, 0xb, 0x16, 0x4, 0xb, 0x1, 0x18, 0x36, 0x36, 0x16, 0x4, 0x5, 0x3, 0x6, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x5, 0xc, 0x400, 0x100, 0x7, 0x9dbd]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xfeff, 0x0, 0x9, 0x1, 0x3ff, 0x3, 0x10]}}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0x80, 0x2, 0x40, 0xb02, 0x8, 0x5, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x7, 0x4, 0x0, 0x0, 0x46, 0xf, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xe07, 0xf4a, 0x3, 0x3, 0x0, 0xff, 0x8]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x18, 0x60, 0x6, 0x1f, 0x30, 0x9, 0x12, 0x36, 0x2, 0x30, 0x30]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x6, 0x5636434cc5bbe00a, 0x9, 0x24, 0x6, 0xb, 0x12, 0x60, 0x36, 0xb]}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x6, 0x5, 0x6, 0x2, 0xf3, 0x2, 0x56]}}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x1, 0x3}, {0x1, 0x6}, {0x6, 0x5}, {0x5, 0x7}, {0x1, 0xa}, {0x1, 0x7}, {0x7}, {0x3, 0x7}, {0x6, 0x2}, {0x1, 0x2}, {0x2, 0x3}, {0x3, 0x6}, {0x2, 0x5}, {0x0, 0x7}, {0x1, 0x9}, {0x2, 0x5}, {0x2, 0x9}, {0x3, 0x5}, {0x2, 0x1}, {0x0, 0x9}, {0x6, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3c}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2e}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x51}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7e}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x54}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6e}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}]}, 0x4e0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r5, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r5, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000740)="b3", 0x1}], 0x1, &(0x7f0000000640)=ANY=[], 0xf0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000900)="1d", 0x1}], 0x1}}], 0x2, 0x24004c41) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r6}, 0x10) fsetxattr$security_ima(r6, &(0x7f0000000000), &(0x7f0000000200)=@v1={0x2, "231a6d4ff980ecf12cde96ee"}, 0xd, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 267.870484ms ago: executing program 6 (id=3165): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000880), 0x0, 0x0) r1 = mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x10, &(0x7f0000000300)={0x0, 0x1, 0x3}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x2, 0x0) dup3(r4, r3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r5}, &(0x7f0000000200), &(0x7f0000000480)='%pi6 \x00'}, 0x20) mq_timedreceive(r1, &(0x7f00000003c0)=""/83, 0x53, 0x8000000000002003, 0x0) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree\x00', r8}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$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") sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) 122.103118ms ago: executing program 1 (id=3166): io_setup(0x2, &(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x10000}, 0x18) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000300)=r2}, 0x20) r5 = socket(0x1e, 0x6, 0x0) sendmsg$tipc(r5, &(0x7f0000000400)={&(0x7f00000003c0)=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4c840}, 0x4000001) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) munlockall() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 39.877066ms ago: executing program 6 (id=3167): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) 33.342316ms ago: executing program 4 (id=3168): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x44, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0xfff2, 0x4}, {}, {0xd, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054) 0s ago: executing program 6 (id=3169): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="010000000400000008"], 0x48) (async, rerun: 64) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) (rerun: 64) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) (async, rerun: 64) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x10000) (async, rerun: 64) sendmmsg$unix(r0, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) (async) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) (async) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc96, 0x0, 0x0, 0x0, 0x4}, 0x94) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f00000004c0), &(0x7f0000000500)=0x4) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) (async, rerun: 32) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000}, 0x50) (rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000001080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf910000000000b2af421d4096c87209e487e1a0bc00b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000, 0x0, 0x32}, 0x1e) r6 = syz_io_uring_setup(0xbc3, &(0x7f0000000540)={0x0, 0x1568, 0x10000, 0x2, 0x264}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r9) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32, @ANYBLOB="0800051d0000000014000600"], 0x58}}, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) r11 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000380)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) accept4$vsock_stream(r11, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x800) io_uring_enter(r6, 0x29ab, 0xd480, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): high bit was 0) [ 244.289044][T12198] SELinux: failed to load policy [ 244.306270][T12202] loop2: detected capacity change from 0 to 1024 [ 244.313466][T12202] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 244.324198][T12202] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 244.335215][T12202] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 244.346865][T12202] JBD2: no valid journal superblock found [ 244.352697][T12202] EXT4-fs (loop2): Could not load journal inode [ 244.456078][T12210] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=12210 comm=gBp [ 244.468510][T12211] loop4: detected capacity change from 0 to 764 [ 244.468662][T12210] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5122 sclass=netlink_route_socket pid=12210 comm=gBp [ 244.496114][T12204] rock: directory entry would overflow storage [ 244.502304][T12204] rock: sig=0x4f50, size=4, remaining=3 [ 244.507887][T12204] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 244.516543][T12204] rock: directory entry would overflow storage [ 244.522727][T12204] rock: sig=0x4f50, size=4, remaining=3 [ 244.528564][T12204] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 244.536788][T12204] netlink: 324 bytes leftover after parsing attributes in process `syz.4.2654'. [ 244.774729][T12226] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12226 comm=syz.2.2664 [ 244.790713][T12228] SELinux: ebitmap: map size 149 does not match my size 64 (high bit was 0) [ 244.815713][T12228] SELinux: failed to load policy [ 244.903724][T12238] FAULT_INJECTION: forcing a failure. [ 244.903724][T12238] name failslab, interval 1, probability 0, space 0, times 0 [ 244.914187][T12240] loop6: detected capacity change from 0 to 512 [ 244.916471][T12238] CPU: 1 UID: 0 PID: 12238 Comm: syz.2.2668 Not tainted syzkaller #0 PREEMPT(voluntary) [ 244.916507][T12238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 244.916524][T12238] Call Trace: [ 244.916534][T12238] [ 244.916544][T12238] __dump_stack+0x1d/0x30 [ 244.916573][T12238] dump_stack_lvl+0xe8/0x140 [ 244.916599][T12238] dump_stack+0x15/0x1b [ 244.916689][T12238] should_fail_ex+0x265/0x280 [ 244.916761][T12238] should_failslab+0x8c/0xb0 [ 244.916804][T12238] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 244.916842][T12238] ? __d_alloc+0x3d/0x340 [ 244.916882][T12238] __d_alloc+0x3d/0x340 [ 244.916970][T12238] ? search_extable+0x53/0x80 [ 244.917005][T12238] ? strncpy_from_user+0x17d/0x230 [ 244.917072][T12238] d_alloc_parallel+0x53/0xc60 [ 244.917202][T12238] ? __rcu_read_unlock+0x4f/0x70 [ 244.917255][T12238] ? do_user_addr_fault+0xd9e/0x1080 [ 244.917283][T12238] ? lockref_get_not_dead+0x120/0x1c0 [ 244.917367][T12238] ? __rcu_read_unlock+0x4f/0x70 [ 244.917403][T12238] __lookup_slow+0x8c/0x250 [ 244.917451][T12238] lookup_slow+0x3c/0x60 [ 244.917495][T12238] link_path_walk+0x753/0x900 [ 244.917575][T12238] path_lookupat+0x63/0x2a0 [ 244.917629][T12238] filename_lookup+0x147/0x340 [ 244.917726][T12238] user_path_at+0x3e/0x130 [ 244.917776][T12238] __se_sys_chroot+0x45/0x230 [ 244.917819][T12238] __x64_sys_chroot+0x1f/0x30 [ 244.917856][T12238] x64_sys_call+0x214f/0x3000 [ 244.917966][T12238] do_syscall_64+0xd2/0x200 [ 244.917998][T12238] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 244.918055][T12238] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 244.918084][T12238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.918114][T12238] RIP: 0033:0x7f7d4c5aeec9 [ 244.918133][T12238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.918157][T12238] RSP: 002b:00007f7d4b017038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a1 [ 244.918181][T12238] RAX: ffffffffffffffda RBX: 00007f7d4c805fa0 RCX: 00007f7d4c5aeec9 [ 244.918242][T12238] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 244.918258][T12238] RBP: 00007f7d4b017090 R08: 0000000000000000 R09: 0000000000000000 [ 244.918325][T12238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.918341][T12238] R13: 00007f7d4c806038 R14: 00007f7d4c805fa0 R15: 00007fff2f516d28 [ 244.918367][T12238] [ 245.033019][ T4731] kernel write not supported for file /snd/seq (pid: 4731 comm: kworker/1:9) [ 245.067774][T12240] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 245.181880][T12240] EXT4-fs (loop6): 1 truncate cleaned up [ 245.189469][T12256] loop2: detected capacity change from 0 to 512 [ 245.198110][T12256] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.2676: EA inode hash validation failed [ 245.211178][T12256] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #15: comm syz.2.2676: corrupted inode contents [ 245.223463][T12256] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #15: comm syz.2.2676: mark_inode_dirty error [ 245.234939][T12256] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #15: comm syz.2.2676: corrupted inode contents [ 245.247361][T12256] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm syz.2.2676: mark_inode_dirty error [ 245.259702][T12256] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.2676: mark inode dirty (error -117) [ 245.272483][T12256] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 245.281612][T12256] EXT4-fs (loop2): 1 orphan inode deleted [ 245.309928][T12261] SELinux: ebitmap: map size 149 does not match my size 64 (high bit was 0) [ 245.318822][T12261] SELinux: failed to load policy [ 245.331308][ T29] kauditd_printk_skb: 661 callbacks suppressed [ 245.331324][ T29] audit: type=1326 audit(1760193958.696:15222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12262 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4c5aeec9 code=0x7ffc0000 [ 245.373233][ T29] audit: type=1326 audit(1760193958.696:15223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12262 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4c5aeec9 code=0x7ffc0000 [ 245.397032][ T29] audit: type=1326 audit(1760193958.696:15224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12262 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4c5aeec9 code=0x7ffc0000 [ 245.420686][ T29] audit: type=1326 audit(1760193958.696:15225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12262 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d4c5aeec9 code=0x7ffc0000 [ 245.444418][ T29] audit: type=1326 audit(1760193958.696:15226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12262 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4c5aeec9 code=0x7ffc0000 [ 245.468102][ T29] audit: type=1326 audit(1760193958.696:15227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12262 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4c5aeec9 code=0x7ffc0000 [ 245.491694][ T29] audit: type=1326 audit(1760193958.696:15228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12262 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4c5aeec9 code=0x7ffc0000 [ 245.515421][ T29] audit: type=1326 audit(1760193958.696:15229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12262 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4c5aeec9 code=0x7ffc0000 [ 245.539075][ T29] audit: type=1326 audit(1760193958.696:15230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12262 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d4c5aeec9 code=0x7ffc0000 [ 245.562760][ T29] audit: type=1326 audit(1760193958.696:15231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12262 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4c5aeec9 code=0x7ffc0000 [ 245.721582][T12287] loop1: detected capacity change from 0 to 512 [ 245.730540][T12287] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.2687: EA inode hash validation failed [ 245.747917][T12287] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #15: comm syz.1.2687: corrupted inode contents [ 245.763940][T12289] loop4: detected capacity change from 0 to 256 [ 245.771722][T12287] EXT4-fs error (device loop1): ext4_dirty_inode:6509: inode #15: comm syz.1.2687: mark_inode_dirty error [ 245.785702][T12287] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #15: comm syz.1.2687: corrupted inode contents [ 245.797901][T12287] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2996: inode #15: comm syz.1.2687: mark_inode_dirty error [ 245.810729][T12287] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.2687: mark inode dirty (error -117) [ 245.823453][T12287] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 245.832868][T12287] EXT4-fs (loop1): 1 orphan inode deleted [ 245.864256][T12296] SELinux: ebitmap: map size 149 does not match my size 64 (high bit was 0) [ 245.873147][T12296] SELinux: failed to load policy [ 245.884107][T12298] SELinux: ebitmap: map size 149 does not match my size 64 (high bit was 0) [ 246.011427][T12313] tipc: Enabled bearer , priority 0 [ 246.039326][T12313] syzkaller0: MTU too low for tipc bearer [ 246.045100][T12313] tipc: Disabling bearer [ 246.139314][T12320] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 246.313521][T12309] loop1: detected capacity change from 0 to 512 [ 246.337549][T12309] EXT4-fs: Ignoring removed mblk_io_submit option [ 246.344877][T12309] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 246.360495][T12309] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 246.368922][T12309] EXT4-fs (loop1): orphan cleanup on readonly fs [ 246.375802][T12309] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.2694: Invalid block bitmap block 0 in block_group 0 [ 246.389669][T12309] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.2694: Invalid block bitmap block 0 in block_group 0 [ 246.403494][T12309] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.2694: Invalid block bitmap block 0 in block_group 0 [ 246.417349][T12309] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2694: Failed to acquire dquot type 1 [ 246.429584][T12309] EXT4-fs (loop1): 1 orphan inode deleted [ 246.435807][ T5181] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:47: Failed to release dquot type 1 [ 246.452240][T12329] lo speed is unknown, defaulting to 1000 [ 246.458596][T12329] lo speed is unknown, defaulting to 1000 [ 246.491227][T12329] SELinux: Context : is not valid (left unmapped). [ 246.511149][T12304] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 246.519387][T12331] loop0: detected capacity change from 0 to 512 [ 246.528082][T12331] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.2704: EA inode hash validation failed [ 246.541023][T12331] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #15: comm syz.0.2704: corrupted inode contents [ 246.553794][T12331] EXT4-fs error (device loop0): ext4_dirty_inode:6509: inode #15: comm syz.0.2704: mark_inode_dirty error [ 246.565489][T12331] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #15: comm syz.0.2704: corrupted inode contents [ 246.577858][T12331] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2996: inode #15: comm syz.0.2704: mark_inode_dirty error [ 246.590411][T12331] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #15: comm syz.0.2704: mark inode dirty (error -117) [ 246.604943][T12331] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 246.616697][T12331] EXT4-fs (loop0): 1 orphan inode deleted [ 246.682278][T12338] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2707'. [ 246.701529][T12340] loop1: detected capacity change from 0 to 512 [ 246.712826][T12340] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.2708: EA inode hash validation failed [ 246.735070][T12345] siw: device registration error -23 [ 246.735681][T12340] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #15: comm syz.1.2708: corrupted inode contents [ 246.752532][T12345] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=12345 comm=gBp [ 246.765725][T12345] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5122 sclass=netlink_route_socket pid=12345 comm=gBp [ 246.771170][T12340] EXT4-fs error (device loop1): ext4_dirty_inode:6509: inode #15: comm syz.1.2708: mark_inode_dirty error [ 246.806438][T12350] loop6: detected capacity change from 0 to 512 [ 246.813127][T12340] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #15: comm syz.1.2708: corrupted inode contents [ 246.833716][T12340] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2996: inode #15: comm syz.1.2708: mark_inode_dirty error [ 246.850622][T12340] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.2708: mark inode dirty (error -117) [ 246.863876][T12357] siw: device registration error -23 [ 246.870176][T12357] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=12357 comm=gBp [ 246.882473][T12357] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5122 sclass=netlink_route_socket pid=12357 comm=gBp [ 246.887354][T12350] bond3: entered promiscuous mode [ 246.894714][T12340] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 246.899736][T12350] bond3: entered allmulticast mode [ 246.909070][T12340] EXT4-fs (loop1): 1 orphan inode deleted [ 246.923363][T12350] 8021q: adding VLAN 0 to HW filter on device bond3 [ 246.941764][T12362] loop2: detected capacity change from 0 to 512 [ 246.949507][T12350] bond3 (unregistering): Released all slaves [ 246.963071][T12362] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.2717: EA inode hash validation failed [ 246.977011][T12366] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12366 comm=syz.0.2718 [ 246.990021][T12362] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #15: comm syz.2.2717: corrupted inode contents [ 247.015997][T12369] 9pnet_fd: Insufficient options for proto=fd [ 247.022245][T12362] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #15: comm syz.2.2717: mark_inode_dirty error [ 247.045339][T12362] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #15: comm syz.2.2717: corrupted inode contents [ 247.061085][T12362] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm syz.2.2717: mark_inode_dirty error [ 247.073609][T12362] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.2717: mark inode dirty (error -117) [ 247.089789][T12362] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 247.100993][T12362] EXT4-fs (loop2): 1 orphan inode deleted [ 247.150917][T12382] siw: device registration error -23 [ 247.162931][T12382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=12382 comm=gBp [ 247.176803][T12382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5122 sclass=netlink_route_socket pid=12382 comm=gBp [ 247.197013][T12392] FAULT_INJECTION: forcing a failure. [ 247.197013][T12392] name failslab, interval 1, probability 0, space 0, times 0 [ 247.209868][T12392] CPU: 0 UID: 0 PID: 12392 Comm: syz.1.2728 Not tainted syzkaller #0 PREEMPT(voluntary) [ 247.209903][T12392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 247.209921][T12392] Call Trace: [ 247.209928][T12392] [ 247.209936][T12392] __dump_stack+0x1d/0x30 [ 247.210002][T12392] dump_stack_lvl+0xe8/0x140 [ 247.210029][T12392] dump_stack+0x15/0x1b [ 247.210050][T12392] should_fail_ex+0x265/0x280 [ 247.210108][T12392] should_failslab+0x8c/0xb0 [ 247.210134][T12392] kmem_cache_alloc_noprof+0x50/0x480 [ 247.210161][T12392] ? getname_flags+0x80/0x3b0 [ 247.210220][T12392] getname_flags+0x80/0x3b0 [ 247.210281][T12392] __x64_sys_rmdir+0x21/0x40 [ 247.210309][T12392] x64_sys_call+0x2390/0x3000 [ 247.210331][T12392] do_syscall_64+0xd2/0x200 [ 247.210358][T12392] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 247.210391][T12392] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 247.210503][T12392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.210530][T12392] RIP: 0033:0x7f845b42eec9 [ 247.210545][T12392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.210566][T12392] RSP: 002b:00007f8459e8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 247.210684][T12392] RAX: ffffffffffffffda RBX: 00007f845b685fa0 RCX: 00007f845b42eec9 [ 247.210741][T12392] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 247.210758][T12392] RBP: 00007f8459e8f090 R08: 0000000000000000 R09: 0000000000000000 [ 247.210774][T12392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.210791][T12392] R13: 00007f845b686038 R14: 00007f845b685fa0 R15: 00007ffee2a32f68 [ 247.210893][T12392] [ 247.428320][T12399] loop1: detected capacity change from 0 to 2048 [ 247.502490][T12408] loop1: detected capacity change from 0 to 1024 [ 247.513901][T12409] loop4: detected capacity change from 0 to 1024 [ 247.556091][T12408] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.2733: Allocating blocks 449-513 which overlap fs metadata [ 247.575285][T12407] EXT4-fs (loop1): pa ffff888106e24cb0: logic 48, phys. 177, len 21 [ 247.583338][T12407] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 247.867465][T12430] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=12430 comm=gBp [ 247.879773][T12430] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5122 sclass=netlink_route_socket pid=12430 comm=gBp [ 247.881773][T12432] lo speed is unknown, defaulting to 1000 [ 247.909427][T12432] lo speed is unknown, defaulting to 1000 [ 247.920292][T12433] loop6: detected capacity change from 0 to 764 [ 247.933548][T12434] loop2: detected capacity change from 0 to 512 [ 247.956743][T12434] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2740: bg 0: block 5: invalid block bitmap [ 247.987698][T12434] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 247.997680][T12419] rock: directory entry would overflow storage [ 248.004052][T12419] rock: sig=0x4f50, size=4, remaining=3 [ 248.005238][T12434] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2740: invalid indirect mapped block 3 (level 2) [ 248.009776][T12419] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 248.038396][T12419] rock: directory entry would overflow storage [ 248.044621][T12419] rock: sig=0x4f50, size=4, remaining=3 [ 248.050439][T12419] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 248.059131][T12434] EXT4-fs (loop2): 1 orphan inode deleted [ 248.059336][T12419] netlink: 324 bytes leftover after parsing attributes in process `syz.6.2735'. [ 248.064942][T12434] EXT4-fs (loop2): 1 truncate cleaned up [ 248.077506][T12443] loop0: detected capacity change from 0 to 512 [ 248.090034][T12443] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.2743: EA inode hash validation failed [ 248.120852][T12443] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #15: comm syz.0.2743: corrupted inode contents [ 248.153242][T12443] EXT4-fs error (device loop0): ext4_dirty_inode:6509: inode #15: comm syz.0.2743: mark_inode_dirty error [ 248.178520][T12443] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #15: comm syz.0.2743: corrupted inode contents [ 248.217340][T12443] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2996: inode #15: comm syz.0.2743: mark_inode_dirty error [ 248.231196][T12443] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #15: comm syz.0.2743: mark inode dirty (error -117) [ 248.243950][T12456] netlink: 2148 bytes leftover after parsing attributes in process `syz.6.2750'. [ 248.253212][T12456] netlink: 2148 bytes leftover after parsing attributes in process `syz.6.2750'. [ 248.261950][T12443] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 248.267344][T12456] loop6: detected capacity change from 0 to 512 [ 248.295182][T12456] msdos: Unknown parameter 'nocasE' [ 248.302255][T12443] EXT4-fs (loop0): 1 orphan inode deleted [ 248.368828][T12473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2754'. [ 248.385573][T12475] loop2: detected capacity change from 0 to 512 [ 248.392202][T12475] EXT4-fs: Ignoring removed i_version option [ 248.428669][T12475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2756'. [ 248.455903][T12475] 8021q: adding VLAN 0 to HW filter on device bond2 [ 248.469624][T12488] loop6: detected capacity change from 0 to 512 [ 248.547547][T12488] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.2760: EA inode hash validation failed [ 248.566809][T12488] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #15: comm syz.6.2760: corrupted inode contents [ 248.584869][T12488] EXT4-fs error (device loop6): ext4_dirty_inode:6509: inode #15: comm syz.6.2760: mark_inode_dirty error [ 248.606473][T12488] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #15: comm syz.6.2760: corrupted inode contents [ 248.638590][T12488] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2996: inode #15: comm syz.6.2760: mark_inode_dirty error [ 248.690732][T12488] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2999: inode #15: comm syz.6.2760: mark inode dirty (error -117) [ 248.738223][T12488] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 248.779766][T12488] EXT4-fs (loop6): 1 orphan inode deleted [ 248.936892][T12506] netlink: 2148 bytes leftover after parsing attributes in process `syz.2.2765'. [ 248.946099][T12506] netlink: 2148 bytes leftover after parsing attributes in process `syz.2.2765'. [ 249.014353][T12507] loop2: detected capacity change from 0 to 512 [ 249.027323][T12507] msdos: Unknown parameter 'nocasE' [ 249.130585][T12514] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2768'. [ 249.162860][T12517] loop6: detected capacity change from 0 to 512 [ 249.178933][T12517] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.2769: EA inode hash validation failed [ 249.179663][T12484] loop4: detected capacity change from 0 to 512 [ 249.209559][T12517] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #15: comm syz.6.2769: corrupted inode contents [ 249.223885][T12484] EXT4-fs: Ignoring removed mblk_io_submit option [ 249.232322][T12484] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 249.232781][T12517] EXT4-fs error (device loop6): ext4_dirty_inode:6509: inode #15: comm syz.6.2769: mark_inode_dirty error [ 249.242873][T12484] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 249.261146][T12517] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #15: comm syz.6.2769: corrupted inode contents [ 249.262067][T12484] EXT4-fs (loop4): orphan cleanup on readonly fs [ 249.274640][T12517] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2996: inode #15: comm syz.6.2769: mark_inode_dirty error [ 249.280495][T12484] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2759: Invalid block bitmap block 0 in block_group 0 [ 249.305807][T12484] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2759: Invalid block bitmap block 0 in block_group 0 [ 249.320079][T12484] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2759: Invalid block bitmap block 0 in block_group 0 [ 249.333777][T12484] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2759: Failed to acquire dquot type 1 [ 249.362033][T12484] EXT4-fs (loop4): 1 orphan inode deleted [ 249.367865][T12517] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2999: inode #15: comm syz.6.2769: mark inode dirty (error -117) [ 249.368044][ T5181] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:47: Failed to release dquot type 1 [ 249.393254][T12517] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 249.405984][T12517] EXT4-fs (loop6): 1 orphan inode deleted [ 249.490842][T12484] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 249.707330][T12537] loop0: detected capacity change from 0 to 512 [ 249.725738][T12537] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.2776: EA inode hash validation failed [ 249.763655][T12537] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #15: comm syz.0.2776: corrupted inode contents [ 249.787025][T12541] loop4: detected capacity change from 0 to 256 [ 249.793570][T12537] EXT4-fs error (device loop0): ext4_dirty_inode:6509: inode #15: comm syz.0.2776: mark_inode_dirty error [ 249.794902][T12541] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 249.820680][T12537] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #15: comm syz.0.2776: corrupted inode contents [ 249.833921][T12541] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 249.847505][T12537] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2996: inode #15: comm syz.0.2776: mark_inode_dirty error [ 249.851047][T12545] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2779'. [ 249.875215][T12537] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #15: comm syz.0.2776: mark inode dirty (error -117) [ 249.905343][T12537] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 249.919887][T12537] EXT4-fs (loop0): 1 orphan inode deleted [ 250.183855][T12567] netlink: 'syz.4.2789': attribute type 10 has an invalid length. [ 250.196821][T12567] hsr_slave_0: left promiscuous mode [ 250.203421][T12567] hsr_slave_1: left promiscuous mode [ 250.403634][T12567] lo speed is unknown, defaulting to 1000 [ 250.421953][T12567] lo speed is unknown, defaulting to 1000 [ 250.457109][T12575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=12575 comm=gBp [ 250.588618][ T29] kauditd_printk_skb: 450 callbacks suppressed [ 250.588648][ T29] audit: type=1400 audit(1760193963.956:15676): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 251.014751][T12611] loop1: detected capacity change from 0 to 256 [ 252.442638][T12644] __nla_validate_parse: 2 callbacks suppressed [ 252.442658][T12644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2814'. [ 252.459015][T12644] selinux_netlink_send: 2 callbacks suppressed [ 252.459042][T12644] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12644 comm=syz.2.2814 [ 252.478408][ T29] audit: type=1326 audit(1760193965.846:15677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12645 comm="syz.0.2815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea036eec9 code=0x7ffc0000 [ 252.502034][ T29] audit: type=1326 audit(1760193965.846:15678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12645 comm="syz.0.2815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea036eec9 code=0x7ffc0000 [ 252.525117][T12649] FAULT_INJECTION: forcing a failure. [ 252.525117][T12649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.538644][T12649] CPU: 1 UID: 0 PID: 12649 Comm: syz.1.2816 Not tainted syzkaller #0 PREEMPT(voluntary) [ 252.538703][T12649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 252.538739][T12649] Call Trace: [ 252.538747][T12649] [ 252.538767][T12649] __dump_stack+0x1d/0x30 [ 252.538792][T12649] dump_stack_lvl+0xe8/0x140 [ 252.538811][T12649] dump_stack+0x15/0x1b [ 252.538894][T12649] should_fail_ex+0x265/0x280 [ 252.538991][T12649] should_fail+0xb/0x20 [ 252.539027][T12649] should_fail_usercopy+0x1a/0x20 [ 252.539096][T12649] _copy_to_user+0x20/0xa0 [ 252.539121][T12649] simple_read_from_buffer+0xb5/0x130 [ 252.539159][T12649] proc_fail_nth_read+0x10e/0x150 [ 252.539192][T12649] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 252.539270][T12649] vfs_read+0x1a5/0x770 [ 252.539293][T12649] ? __rcu_read_unlock+0x4f/0x70 [ 252.539393][T12649] ? __fget_files+0x184/0x1c0 [ 252.539420][T12649] ksys_read+0xda/0x1a0 [ 252.539449][T12649] __x64_sys_read+0x40/0x50 [ 252.539477][T12649] x64_sys_call+0x27c0/0x3000 [ 252.539503][T12649] do_syscall_64+0xd2/0x200 [ 252.539538][T12649] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 252.539567][T12649] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 252.539649][T12649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.539692][T12649] RIP: 0033:0x7f845b42d8dc [ 252.539706][T12649] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 252.539723][T12649] RSP: 002b:00007f8459e8f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 252.539740][T12649] RAX: ffffffffffffffda RBX: 00007f845b685fa0 RCX: 00007f845b42d8dc [ 252.539752][T12649] RDX: 000000000000000f RSI: 00007f8459e8f0a0 RDI: 0000000000000004 [ 252.539764][T12649] RBP: 00007f8459e8f090 R08: 0000000000000000 R09: 0000000000000000 [ 252.539849][T12649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.539860][T12649] R13: 00007f845b686038 R14: 00007f845b685fa0 R15: 00007ffee2a32f68 [ 252.539878][T12649] [ 252.795408][ T29] audit: type=1326 audit(1760193965.846:15679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12631 comm="syz.6.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819886eec9 code=0x7ffc0000 [ 252.802989][T12658] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12658 comm=syz.1.2820 [ 252.819156][ T29] audit: type=1326 audit(1760193965.846:15680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12631 comm="syz.6.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819886eec9 code=0x7ffc0000 [ 252.855646][ T29] audit: type=1326 audit(1760193965.856:15681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12631 comm="syz.6.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f819886eec9 code=0x7ffc0000 [ 252.879445][ T29] audit: type=1326 audit(1760193965.856:15682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12645 comm="syz.0.2815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdea036eec9 code=0x7ffc0000 [ 252.903353][ T29] audit: type=1326 audit(1760193965.856:15683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12645 comm="syz.0.2815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea036eec9 code=0x7ffc0000 [ 252.927073][ T29] audit: type=1326 audit(1760193965.856:15684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12645 comm="syz.0.2815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea036eec9 code=0x7ffc0000 [ 252.951031][ T29] audit: type=1326 audit(1760193965.856:15685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12645 comm="syz.0.2815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdea036eec9 code=0x7ffc0000 [ 252.980757][T12669] loop0: detected capacity change from 0 to 512 [ 252.987587][T12669] EXT4-fs: Ignoring removed i_version option [ 253.023338][T12669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2822'. [ 253.039900][T12669] 8021q: adding VLAN 0 to HW filter on device bond2 [ 253.104134][T12691] FAULT_INJECTION: forcing a failure. [ 253.104134][T12691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.117430][T12691] CPU: 0 UID: 0 PID: 12691 Comm: syz.1.2830 Not tainted syzkaller #0 PREEMPT(voluntary) [ 253.117525][T12691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 253.117538][T12691] Call Trace: [ 253.117588][T12691] [ 253.117597][T12691] __dump_stack+0x1d/0x30 [ 253.117624][T12691] dump_stack_lvl+0xe8/0x140 [ 253.117647][T12691] dump_stack+0x15/0x1b [ 253.117667][T12691] should_fail_ex+0x265/0x280 [ 253.117753][T12691] should_fail+0xb/0x20 [ 253.117785][T12691] should_fail_usercopy+0x1a/0x20 [ 253.117804][T12691] strncpy_from_user+0x25/0x230 [ 253.117836][T12691] strncpy_from_user_nofault+0x68/0xf0 [ 253.117902][T12691] bpf_probe_read_user_str+0x2a/0x70 [ 253.117931][T12691] bpf_prog_a3b97ca3d235027a+0x41/0x47 [ 253.117965][T12691] bpf_trace_run3+0x10f/0x1d0 [ 253.117997][T12691] ? __dentry_kill+0x3d1/0x4b0 [ 253.118112][T12691] ? iput+0x22d/0x650 [ 253.118135][T12691] ? __dentry_kill+0x3d1/0x4b0 [ 253.118163][T12691] kmem_cache_free+0x329/0x3d0 [ 253.118201][T12691] __dentry_kill+0x3d1/0x4b0 [ 253.118236][T12691] ? lock_for_kill+0x61/0x140 [ 253.118332][T12691] dput+0x5e/0xd0 [ 253.118425][T12691] __fput+0x444/0x650 [ 253.118492][T12691] fput_close_sync+0x6e/0x120 [ 253.118531][T12691] __x64_sys_close+0x56/0xf0 [ 253.118549][T12691] x64_sys_call+0x273c/0x3000 [ 253.118646][T12691] do_syscall_64+0xd2/0x200 [ 253.118679][T12691] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 253.118705][T12691] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 253.118751][T12691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.118773][T12691] RIP: 0033:0x7f845b42eec9 [ 253.118790][T12691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.118884][T12691] RSP: 002b:00007f8459e8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 253.118960][T12691] RAX: ffffffffffffffda RBX: 00007f845b685fa0 RCX: 00007f845b42eec9 [ 253.118975][T12691] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 253.119055][T12691] RBP: 00007f8459e8f090 R08: 0000000000000000 R09: 0000000000000000 [ 253.119066][T12691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.119077][T12691] R13: 00007f845b686038 R14: 00007f845b685fa0 R15: 00007ffee2a32f68 [ 253.119106][T12691] [ 253.420296][T12697] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12697 comm=syz.0.2833 [ 253.455738][T12706] FAULT_INJECTION: forcing a failure. [ 253.455738][T12706] name failslab, interval 1, probability 0, space 0, times 0 [ 253.468365][T12706] CPU: 0 UID: 0 PID: 12706 Comm: syz.1.2837 Not tainted syzkaller #0 PREEMPT(voluntary) [ 253.468422][T12706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 253.468435][T12706] Call Trace: [ 253.468442][T12706] [ 253.468451][T12706] __dump_stack+0x1d/0x30 [ 253.468581][T12706] dump_stack_lvl+0xe8/0x140 [ 253.468600][T12706] dump_stack+0x15/0x1b [ 253.468616][T12706] should_fail_ex+0x265/0x280 [ 253.468651][T12706] should_failslab+0x8c/0xb0 [ 253.468678][T12706] kmem_cache_alloc_noprof+0x50/0x480 [ 253.468784][T12706] ? __send_signal_locked+0x154/0x760 [ 253.468818][T12706] __send_signal_locked+0x154/0x760 [ 253.468904][T12706] send_signal_locked+0x34e/0x3c0 [ 253.468934][T12706] ? __ptrace_may_access+0x2c3/0x340 [ 253.468979][T12706] ptrace_attach+0x3c3/0x590 [ 253.469072][T12706] __se_sys_ptrace+0x146/0x2c0 [ 253.469100][T12706] __x64_sys_ptrace+0x55/0x70 [ 253.469127][T12706] x64_sys_call+0x2870/0x3000 [ 253.469149][T12706] do_syscall_64+0xd2/0x200 [ 253.469174][T12706] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 253.469267][T12706] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 253.469290][T12706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.469313][T12706] RIP: 0033:0x7f845b42eec9 [ 253.469329][T12706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.469372][T12706] RSP: 002b:00007f8459e8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 253.469436][T12706] RAX: ffffffffffffffda RBX: 00007f845b685fa0 RCX: 00007f845b42eec9 [ 253.469450][T12706] RDX: 0000000000000000 RSI: 00000000000005bc RDI: 0000000000000010 [ 253.469462][T12706] RBP: 00007f8459e8f090 R08: 0000000000000000 R09: 0000000000000000 [ 253.469475][T12706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.469523][T12706] R13: 00007f845b686038 R14: 00007f845b685fa0 R15: 00007ffee2a32f68 [ 253.469544][T12706] [ 253.728878][T12719] FAULT_INJECTION: forcing a failure. [ 253.728878][T12719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.742060][T12719] CPU: 1 UID: 0 PID: 12719 Comm: syz.1.2842 Not tainted syzkaller #0 PREEMPT(voluntary) [ 253.742119][T12719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 253.742132][T12719] Call Trace: [ 253.742138][T12719] [ 253.742146][T12719] __dump_stack+0x1d/0x30 [ 253.742172][T12719] dump_stack_lvl+0xe8/0x140 [ 253.742209][T12719] dump_stack+0x15/0x1b [ 253.742292][T12719] should_fail_ex+0x265/0x280 [ 253.742326][T12719] should_fail+0xb/0x20 [ 253.742406][T12719] should_fail_usercopy+0x1a/0x20 [ 253.742427][T12719] strncpy_from_user+0x25/0x230 [ 253.742455][T12719] ? __fget_files+0x184/0x1c0 [ 253.742497][T12719] __se_sys_request_key+0x57/0x290 [ 253.742539][T12719] ? fput+0x8f/0xc0 [ 253.742572][T12719] __x64_sys_request_key+0x55/0x70 [ 253.742612][T12719] x64_sys_call+0x1d98/0x3000 [ 253.742651][T12719] do_syscall_64+0xd2/0x200 [ 253.742744][T12719] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 253.742773][T12719] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 253.742799][T12719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.742823][T12719] RIP: 0033:0x7f845b42eec9 [ 253.742838][T12719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.742856][T12719] RSP: 002b:00007f8459e8f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 253.742877][T12719] RAX: ffffffffffffffda RBX: 00007f845b685fa0 RCX: 00007f845b42eec9 [ 253.742890][T12719] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 253.742902][T12719] RBP: 00007f8459e8f090 R08: 0000000000000000 R09: 0000000000000000 [ 253.742914][T12719] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000001 [ 253.742926][T12719] R13: 00007f845b686038 R14: 00007f845b685fa0 R15: 00007ffee2a32f68 [ 253.743011][T12719] [ 253.946085][T12721] loop6: detected capacity change from 0 to 512 [ 253.959096][T12721] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.2844: EA inode hash validation failed [ 253.971896][T12721] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #15: comm syz.6.2844: corrupted inode contents [ 253.985111][T12721] EXT4-fs error (device loop6): ext4_dirty_inode:6509: inode #15: comm syz.6.2844: mark_inode_dirty error [ 253.999890][T12721] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #15: comm syz.6.2844: corrupted inode contents [ 254.012190][T12721] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2996: inode #15: comm syz.6.2844: mark_inode_dirty error [ 254.025182][T12721] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2999: inode #15: comm syz.6.2844: mark inode dirty (error -117) [ 254.041824][T12721] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 254.059643][T12721] EXT4-fs (loop6): 1 orphan inode deleted [ 254.126121][T12744] loop4: detected capacity change from 0 to 256 [ 254.144880][T12744] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 254.149702][T12743] 9pnet_fd: Insufficient options for proto=fd [ 254.171041][T12743] syz.2.2847 (12743): /proc/12735/oom_adj is deprecated, please use /proc/12735/oom_score_adj instead. [ 254.201174][T12726] lo speed is unknown, defaulting to 1000 [ 254.207797][T12744] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 254.225519][T12726] lo speed is unknown, defaulting to 1000 [ 254.274627][T12753] lo speed is unknown, defaulting to 1000 [ 254.288758][T12757] loop2: detected capacity change from 0 to 512 [ 254.301670][T12757] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2853: bg 0: block 5: invalid block bitmap [ 254.314494][T12757] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 254.323590][T12757] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2853: invalid indirect mapped block 3 (level 2) [ 254.337469][T12757] EXT4-fs (loop2): 1 orphan inode deleted [ 254.343243][T12757] EXT4-fs (loop2): 1 truncate cleaned up [ 254.355760][T12753] lo speed is unknown, defaulting to 1000 [ 254.375204][T12762] FAULT_INJECTION: forcing a failure. [ 254.375204][T12762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.388567][T12762] CPU: 1 UID: 0 PID: 12762 Comm: syz.1.2855 Not tainted syzkaller #0 PREEMPT(voluntary) [ 254.388603][T12762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 254.388642][T12762] Call Trace: [ 254.388650][T12762] [ 254.388659][T12762] __dump_stack+0x1d/0x30 [ 254.388687][T12762] dump_stack_lvl+0xe8/0x140 [ 254.388713][T12762] dump_stack+0x15/0x1b [ 254.388735][T12762] should_fail_ex+0x265/0x280 [ 254.388848][T12762] should_fail+0xb/0x20 [ 254.388955][T12762] should_fail_usercopy+0x1a/0x20 [ 254.388981][T12762] _copy_to_user+0x20/0xa0 [ 254.389014][T12762] simple_read_from_buffer+0xb5/0x130 [ 254.389045][T12762] proc_fail_nth_read+0x10e/0x150 [ 254.389099][T12762] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 254.389135][T12762] vfs_read+0x1a5/0x770 [ 254.389163][T12762] ? __rcu_read_unlock+0x4f/0x70 [ 254.389195][T12762] ? __fget_files+0x184/0x1c0 [ 254.389269][T12762] ksys_read+0xda/0x1a0 [ 254.389301][T12762] __x64_sys_read+0x40/0x50 [ 254.389331][T12762] x64_sys_call+0x27c0/0x3000 [ 254.389359][T12762] do_syscall_64+0xd2/0x200 [ 254.389389][T12762] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 254.389450][T12762] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 254.389479][T12762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.389507][T12762] RIP: 0033:0x7f845b42d8dc [ 254.389551][T12762] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 254.389630][T12762] RSP: 002b:00007f8459e8f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 254.389655][T12762] RAX: ffffffffffffffda RBX: 00007f845b685fa0 RCX: 00007f845b42d8dc [ 254.389671][T12762] RDX: 000000000000000f RSI: 00007f8459e8f0a0 RDI: 0000000000000004 [ 254.389688][T12762] RBP: 00007f8459e8f090 R08: 0000000000000000 R09: 0000000000000000 [ 254.389704][T12762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.389719][T12762] R13: 00007f845b686038 R14: 00007f845b685fa0 R15: 00007ffee2a32f68 [ 254.389745][T12762] [ 254.614730][T12726] chnl_net:caif_netlink_parms(): no params data found [ 254.641913][T12771] loop2: detected capacity change from 0 to 512 [ 254.650301][T12766] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2856'. [ 254.650345][T12771] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.2857: EA inode hash validation failed [ 254.659449][ T5154] bridge_slave_1: left allmulticast mode [ 254.673088][T12771] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #15: comm syz.2.2857: corrupted inode contents [ 254.677711][ T5154] bridge_slave_1: left promiscuous mode [ 254.677921][ T5154] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.690172][T12771] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #15: comm syz.2.2857: mark_inode_dirty error [ 254.735804][ T5154] bridge_slave_0: left allmulticast mode [ 254.741490][ T5154] bridge_slave_0: left promiscuous mode [ 254.747328][ T5154] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.785610][T12771] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #15: comm syz.2.2857: corrupted inode contents [ 254.797880][T12771] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm syz.2.2857: mark_inode_dirty error [ 254.814576][T12771] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.2857: mark inode dirty (error -117) [ 254.827562][T12771] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 254.838171][T12771] EXT4-fs (loop2): 1 orphan inode deleted [ 255.137746][ T5154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.146590][T12786] loop2: detected capacity change from 0 to 2048 [ 255.153233][ T5154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.162361][ T5154] bond0 (unregistering): Released all slaves [ 255.170606][ T5154] bond1 (unregistering): Released all slaves [ 255.179079][ T5154] bond2 (unregistering): Released all slaves [ 255.180876][T12786] loop2: p2 p3 p7 [ 255.267831][ T5154] tipc: Left network mode [ 255.284667][T12726] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.291863][T12726] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.299410][T12726] bridge_slave_0: entered allmulticast mode [ 255.308927][T12726] bridge_slave_0: entered promiscuous mode [ 255.317792][T12793] lo speed is unknown, defaulting to 1000 [ 255.323979][T12793] lo speed is unknown, defaulting to 1000 [ 255.346187][T12726] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.353321][T12726] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.360785][T12726] bridge_slave_1: entered allmulticast mode [ 255.367430][T12726] bridge_slave_1: entered promiscuous mode [ 255.370213][T12796] loop2: detected capacity change from 0 to 512 [ 255.385808][T12799] loop6: detected capacity change from 0 to 256 [ 255.387594][T12796] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2864: bg 0: block 5: invalid block bitmap [ 255.392918][T12799] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 255.404438][ T5154] hsr_slave_0: left promiscuous mode [ 255.422015][T12799] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 255.455330][ T5154] hsr_slave_1: left promiscuous mode [ 255.461214][ T5154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.469150][ T5154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.583352][ T5154] team0 (unregistering): Port device team_slave_1 removed [ 255.633199][ T5154] team0 (unregistering): Port device team_slave_0 removed [ 255.834982][T12726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.899490][T12726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.928842][T12726] team0: Port device team_slave_0 added [ 255.938035][T12726] team0: Port device team_slave_1 added [ 255.962908][T12726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.970098][T12726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.996153][T12726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.051266][T12816] loop6: detected capacity change from 0 to 512 [ 256.060646][T12726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.067737][T12726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.093844][T12726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.139754][T12816] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.2870: EA inode hash validation failed [ 256.153383][T12816] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #15: comm syz.6.2870: corrupted inode contents [ 256.168959][T12816] EXT4-fs error (device loop6): ext4_dirty_inode:6509: inode #15: comm syz.6.2870: mark_inode_dirty error [ 256.189030][T12816] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #15: comm syz.6.2870: corrupted inode contents [ 256.201147][T12816] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2996: inode #15: comm syz.6.2870: mark_inode_dirty error [ 256.213632][T12816] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2999: inode #15: comm syz.6.2870: mark inode dirty (error -117) [ 256.226576][T12816] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 256.236205][T12816] EXT4-fs (loop6): 1 orphan inode deleted [ 256.242565][T12816] EXT4-fs mount: 51 callbacks suppressed [ 256.242577][T12816] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.285586][T12796] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 256.294580][T12796] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2864: invalid indirect mapped block 3 (level 2) [ 256.308078][T12796] EXT4-fs (loop2): 1 orphan inode deleted [ 256.313810][T12796] EXT4-fs (loop2): 1 truncate cleaned up [ 256.320153][T12796] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.341881][T12726] hsr_slave_0: entered promiscuous mode [ 256.348267][T12726] hsr_slave_1: entered promiscuous mode [ 256.354107][T12726] debugfs: 'hsr0' already exists in 'hsr' [ 256.359891][T12726] Cannot create hsr debugfs directory [ 256.366827][ T9925] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.396008][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 256.396027][ T29] audit: type=1326 audit(1760193969.766:15750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12818 comm="syz.6.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819886eec9 code=0x7ffc0000 [ 256.425868][ T29] audit: type=1326 audit(1760193969.766:15751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12818 comm="syz.6.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819886eec9 code=0x7ffc0000 [ 256.426761][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.449528][ T29] audit: type=1326 audit(1760193969.766:15752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12818 comm="syz.6.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819886eec9 code=0x7ffc0000 [ 256.449569][ T29] audit: type=1326 audit(1760193969.766:15753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12818 comm="syz.6.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819886eec9 code=0x7ffc0000 [ 256.468922][T12821] 9pnet_virtio: no channels available for device 127.0.0.1 [ 256.482097][ T29] audit: type=1326 audit(1760193969.776:15754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12818 comm="syz.6.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f819886eec9 code=0x7ffc0000 [ 256.482138][ T29] audit: type=1326 audit(1760193969.776:15755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12818 comm="syz.6.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819886eec9 code=0x7ffc0000 [ 256.559979][ T29] audit: type=1326 audit(1760193969.776:15756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12818 comm="syz.6.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819886eec9 code=0x7ffc0000 [ 256.583696][ T29] audit: type=1326 audit(1760193969.776:15757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12818 comm="syz.6.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819886eec9 code=0x7ffc0000 [ 256.607255][ T29] audit: type=1326 audit(1760193969.776:15758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12818 comm="syz.6.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819886eec9 code=0x7ffc0000 [ 256.630830][ T29] audit: type=1326 audit(1760193969.776:15759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12818 comm="syz.6.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f819886eec9 code=0x7ffc0000 [ 256.798557][ T5154] IPVS: stop unused estimator thread 0... [ 256.829172][T12844] loop2: detected capacity change from 0 to 2048 [ 256.849572][T12844] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.917924][ T5162] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 256.932897][ T5162] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 256.945285][ T5162] EXT4-fs (loop2): This should not happen!! Data will be lost [ 256.945285][ T5162] [ 256.954966][ T5162] EXT4-fs (loop2): Total free blocks count 0 [ 256.961005][ T5162] EXT4-fs (loop2): Free/Dirty block details [ 256.966972][ T5162] EXT4-fs (loop2): free_blocks=2415919504 [ 256.972776][ T5162] EXT4-fs (loop2): dirty_blocks=64 [ 256.977939][ T5162] EXT4-fs (loop2): Block reservation details [ 256.983943][ T5162] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 257.056460][ T5201] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 33 with error 28 [ 257.229877][T12726] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 257.240300][T12726] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 257.253185][T12726] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 257.263234][T12726] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 257.312327][T12726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.322543][T12867] loop2: detected capacity change from 0 to 2048 [ 257.338238][T12867] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.433968][T12726] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.457956][ T5201] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.465061][ T5201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.497972][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.505161][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.551203][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.561096][T12874] loop1: detected capacity change from 0 to 2048 [ 257.625597][T12726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.637209][T12874] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.729200][T12897] loop4: detected capacity change from 0 to 512 [ 257.739515][ T5201] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 257.760286][T12897] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.2894: EA inode hash validation failed [ 257.761528][ T5201] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 257.778205][T12897] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #15: comm syz.4.2894: corrupted inode contents [ 257.785401][ T5201] EXT4-fs (loop1): This should not happen!! Data will be lost [ 257.785401][ T5201] [ 257.805195][T12726] veth0_vlan: entered promiscuous mode [ 257.806957][ T5201] EXT4-fs (loop1): Total free blocks count 0 [ 257.818388][ T5201] EXT4-fs (loop1): Free/Dirty block details [ 257.818403][ T5201] EXT4-fs (loop1): free_blocks=2415919504 [ 257.818431][ T5201] EXT4-fs (loop1): dirty_blocks=64 [ 257.818445][ T5201] EXT4-fs (loop1): Block reservation details [ 257.818455][ T5201] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 257.819218][T12897] EXT4-fs error (device loop4): ext4_dirty_inode:6509: inode #15: comm syz.4.2894: mark_inode_dirty error [ 257.825001][ T5154] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 33 with error 28 [ 257.830518][T12897] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #15: comm syz.4.2894: corrupted inode contents [ 257.837276][T12726] veth1_vlan: entered promiscuous mode [ 257.841575][T12897] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2996: inode #15: comm syz.4.2894: mark_inode_dirty error [ 257.864284][T12726] veth0_macvtap: entered promiscuous mode [ 257.902524][T12897] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #15: comm syz.4.2894: mark inode dirty (error -117) [ 257.920043][T12897] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 257.920084][T12897] EXT4-fs (loop4): 1 orphan inode deleted [ 257.920475][T12897] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.924042][T12726] veth1_macvtap: entered promiscuous mode [ 257.959955][T12726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.986924][T12726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.021990][ T5154] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.032601][T12912] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12912 comm=syz.6.2899 [ 258.052353][ T5199] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.061557][ T5199] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.082550][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.085336][ T5199] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.216334][T12930] loop0: detected capacity change from 0 to 512 [ 258.243904][T12930] EXT4-fs: Ignoring removed i_version option [ 258.257628][T12930] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.360310][T12930] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2904'. [ 258.393781][T12946] loop4: detected capacity change from 0 to 764 [ 258.435835][T12926] rock: directory entry would overflow storage [ 258.442042][T12926] rock: sig=0x4f50, size=4, remaining=3 [ 258.447670][T12926] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 258.461032][T12926] rock: directory entry would overflow storage [ 258.467238][T12926] rock: sig=0x4f50, size=4, remaining=3 [ 258.472912][T12926] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 258.482048][T12926] netlink: 324 bytes leftover after parsing attributes in process `syz.4.2900'. [ 258.543325][T12726] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.572948][T12955] SELinux: ebitmap: map size 149 does not match my size 64 (high bit was 0) [ 258.582393][T12955] sel_write_load: 1 callbacks suppressed [ 258.582407][T12955] SELinux: failed to load policy [ 259.357744][T12988] SELinux: ebitmap: map size 149 does not match my size 64 (high bit was 0) [ 259.370123][T12966] lo speed is unknown, defaulting to 1000 [ 259.376603][T12988] SELinux: failed to load policy [ 259.387281][T12966] lo speed is unknown, defaulting to 1000 [ 259.557945][T12993] loop2: detected capacity change from 0 to 128 [ 259.564717][T12993] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 259.586123][T12993] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 259.588688][T12992] loop0: detected capacity change from 0 to 512 [ 259.605533][T12993] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 259.606717][T12966] chnl_net:caif_netlink_parms(): no params data found [ 259.614115][T12993] FAT-fs (loop2): Filesystem has been set read-only [ 259.630508][T12992] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 259.668626][T12992] EXT4-fs (loop0): 1 truncate cleaned up [ 259.674697][T12992] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.842312][T12966] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.849487][T12966] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.867385][T13010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=13010 comm=gBp [ 259.880035][T12966] bridge_slave_0: entered allmulticast mode [ 259.887546][T12966] bridge_slave_0: entered promiscuous mode [ 259.895828][T12966] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.902930][T12966] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.910328][T12966] bridge_slave_1: entered allmulticast mode [ 259.912470][T13010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5122 sclass=netlink_route_socket pid=13010 comm=gBp [ 259.916944][T12966] bridge_slave_1: entered promiscuous mode [ 259.934103][T13012] loop4: detected capacity change from 0 to 2048 [ 259.958588][T12966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.958769][T13015] loop6: detected capacity change from 0 to 512 [ 259.971589][T13014] lo speed is unknown, defaulting to 1000 [ 259.984442][T13012] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.987427][T12966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.005881][T13014] lo speed is unknown, defaulting to 1000 [ 260.007743][T13015] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.2925: bg 0: block 5: invalid block bitmap [ 260.034737][T13015] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 260.046991][T13015] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2925: invalid indirect mapped block 3 (level 2) [ 260.047279][T12966] team0: Port device team_slave_0 added [ 260.072975][T13015] EXT4-fs (loop6): 1 orphan inode deleted [ 260.078863][T13015] EXT4-fs (loop6): 1 truncate cleaned up [ 260.085565][T13015] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.099626][T12966] team0: Port device team_slave_1 added [ 260.123893][T12966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.131020][T12966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.157275][T12966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.169433][ T9925] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.171183][T12966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.185658][T12966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.211668][T12966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.223647][ T5181] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 260.248412][ T5181] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 260.260771][ T5181] EXT4-fs (loop4): This should not happen!! Data will be lost [ 260.260771][ T5181] [ 260.270515][ T5181] EXT4-fs (loop4): Total free blocks count 0 [ 260.276596][ T5181] EXT4-fs (loop4): Free/Dirty block details [ 260.282515][ T5181] EXT4-fs (loop4): free_blocks=2415919504 [ 260.288422][ T5181] EXT4-fs (loop4): dirty_blocks=64 [ 260.293547][ T5181] EXT4-fs (loop4): Block reservation details [ 260.299567][ T5181] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 260.355976][ T5199] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 33 with error 28 [ 260.374940][T12966] hsr_slave_0: entered promiscuous mode [ 260.382093][T12966] hsr_slave_1: entered promiscuous mode [ 260.382558][T12726] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.391435][T12966] debugfs: 'hsr0' already exists in 'hsr' [ 260.402539][T12966] Cannot create hsr debugfs directory [ 260.478996][T13034] loop4: detected capacity change from 0 to 512 [ 260.489496][T13036] loop6: detected capacity change from 0 to 256 [ 260.505511][T13034] EXT4-fs: Ignoring removed i_version option [ 260.533613][T13039] loop0: detected capacity change from 0 to 256 [ 260.550200][T13034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.588414][T13039] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 260.595069][T13039] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 260.602795][T13039] vhci_hcd vhci_hcd.0: Device attached [ 260.613980][T13042] loop6: detected capacity change from 0 to 512 [ 260.625615][T13034] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2930'. [ 260.626807][T13042] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.2935: EA inode hash validation failed [ 260.647606][T13042] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #15: comm syz.6.2935: corrupted inode contents [ 260.652115][T13034] 8021q: adding VLAN 0 to HW filter on device bond3 [ 260.674324][T13043] vhci_hcd: cannot find a urb of seqnum 8 max seqnum 0 [ 260.682068][ T5201] vhci_hcd: stop threads [ 260.686580][ T5201] vhci_hcd: release socket [ 260.691097][ T5201] vhci_hcd: disconnect device [ 260.697758][T13042] EXT4-fs error (device loop6): ext4_dirty_inode:6509: inode #15: comm syz.6.2935: mark_inode_dirty error [ 260.723544][T13042] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #15: comm syz.6.2935: corrupted inode contents [ 260.736776][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.737517][T13042] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2996: inode #15: comm syz.6.2935: mark_inode_dirty error [ 260.761550][T13042] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2999: inode #15: comm syz.6.2935: mark inode dirty (error -117) [ 260.774679][T13042] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 260.783887][T13042] EXT4-fs (loop6): 1 orphan inode deleted [ 260.790046][T13042] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.815744][T13052] loop2: detected capacity change from 0 to 512 [ 260.822670][T13052] EXT4-fs: Ignoring removed i_version option [ 260.833478][T13052] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.851864][ T9925] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.861165][T12966] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 260.876464][T12966] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 260.887983][T12966] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 260.900194][T12966] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 260.907729][T13052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2938'. [ 260.934445][T13052] 8021q: adding VLAN 0 to HW filter on device bond3 [ 260.963701][T13057] lo speed is unknown, defaulting to 1000 [ 260.969670][T13065] loop4: detected capacity change from 0 to 764 [ 260.981427][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.981763][T13066] loop6: detected capacity change from 0 to 512 [ 260.995802][T13057] lo speed is unknown, defaulting to 1000 [ 261.010923][T13066] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.2939: bg 0: block 5: invalid block bitmap [ 261.030958][T13066] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 261.040277][T13066] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2939: invalid indirect mapped block 3 (level 2) [ 261.064954][T12966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.072522][T13066] EXT4-fs (loop6): 1 orphan inode deleted [ 261.078303][T13066] EXT4-fs (loop6): 1 truncate cleaned up [ 261.084587][T13066] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.105938][T13054] rock: directory entry would overflow storage [ 261.112113][T13054] rock: sig=0x4f50, size=4, remaining=3 [ 261.117725][T13054] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 261.118844][T12966] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.137123][T13054] rock: directory entry would overflow storage [ 261.143341][T13054] rock: sig=0x4f50, size=4, remaining=3 [ 261.149009][T13054] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 261.156739][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.163883][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.168207][T13054] netlink: 324 bytes leftover after parsing attributes in process `syz.4.2937'. [ 261.184273][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.184553][ T9925] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.191353][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.228789][T12966] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 261.239234][T12966] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 261.289238][T13077] loop6: detected capacity change from 0 to 512 [ 261.311985][T13077] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 261.331292][T13077] EXT4-fs (loop6): 1 truncate cleaned up [ 261.339567][T13077] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.403052][T12966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.475546][ T29] kauditd_printk_skb: 503 callbacks suppressed [ 261.475565][ T29] audit: type=1326 audit(1760193974.846:16263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13083 comm="syz.2.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4c5aeec9 code=0x7ffc0000 [ 261.505442][ T29] audit: type=1326 audit(1760193974.846:16264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13083 comm="syz.2.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4c5aeec9 code=0x7ffc0000 [ 261.535642][ T29] audit: type=1326 audit(1760193974.876:16265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13083 comm="syz.2.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7d4c5aeec9 code=0x7ffc0000 [ 261.559324][ T29] audit: type=1326 audit(1760193974.876:16266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13083 comm="syz.2.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4c5aeec9 code=0x7ffc0000 [ 261.582988][ T29] audit: type=1326 audit(1760193974.876:16267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13083 comm="syz.2.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4c5aeec9 code=0x7ffc0000 [ 261.606712][ T29] audit: type=1326 audit(1760193974.876:16268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13083 comm="syz.2.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7d4c5aeec9 code=0x7ffc0000 [ 261.630447][ T29] audit: type=1326 audit(1760193974.876:16269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13083 comm="syz.2.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4c5aeec9 code=0x7ffc0000 [ 261.654365][ T29] audit: type=1326 audit(1760193974.876:16270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13083 comm="syz.2.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4c5aeec9 code=0x7ffc0000 [ 261.669908][T12966] veth0_vlan: entered promiscuous mode [ 261.689218][T12966] veth1_vlan: entered promiscuous mode [ 261.711216][T12966] veth0_macvtap: entered promiscuous mode [ 261.718009][T13111] loop2: detected capacity change from 0 to 256 [ 261.724814][T13109] lo speed is unknown, defaulting to 1000 [ 261.726590][T12966] veth1_macvtap: entered promiscuous mode [ 261.738215][T13109] lo speed is unknown, defaulting to 1000 [ 261.743354][T12966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.758586][T13111] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 261.764648][T12966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.765376][T13111] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 261.780283][T13111] vhci_hcd vhci_hcd.0: Device attached [ 261.791461][ T5181] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.801627][ T29] audit: type=1326 audit(1760193975.166:16271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13110 comm="syz.2.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4c5aeec9 code=0x7ffc0000 [ 261.825460][ T29] audit: type=1326 audit(1760193975.166:16272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13110 comm="syz.2.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4c5aeec9 code=0x7ffc0000 [ 261.851184][ T5181] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.860400][ T5181] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.869475][ T5181] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.894930][T13113] vhci_hcd: cannot find a urb of seqnum 8 max seqnum 0 [ 261.904426][ T5199] vhci_hcd: stop threads [ 261.908802][ T5199] vhci_hcd: release socket [ 261.913364][ T5199] vhci_hcd: disconnect device [ 261.940652][T13121] lo speed is unknown, defaulting to 1000 [ 261.951207][T13121] lo speed is unknown, defaulting to 1000 [ 261.965336][ T4731] vhci_hcd: vhci_device speed not set [ 261.999292][T13130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2954'. [ 262.050420][T13136] loop1: detected capacity change from 0 to 2048 [ 262.077233][T13136] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.131640][ T5181] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 262.148175][ T5181] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 262.160438][ T5181] EXT4-fs (loop1): This should not happen!! Data will be lost [ 262.160438][ T5181] [ 262.170246][ T5181] EXT4-fs (loop1): Total free blocks count 0 [ 262.176281][ T5181] EXT4-fs (loop1): Free/Dirty block details [ 262.182273][ T5181] EXT4-fs (loop1): free_blocks=2415919504 [ 262.188116][ T5181] EXT4-fs (loop1): dirty_blocks=64 [ 262.193247][ T5181] EXT4-fs (loop1): Block reservation details [ 262.199353][ T5181] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 262.207028][ T9925] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.212389][ T5181] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 33 with error 28 [ 262.273313][T13151] netlink: 'syz.6.2960': attribute type 21 has an invalid length. [ 262.284773][T13153] loop1: detected capacity change from 0 to 512 [ 262.300228][T13153] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.331996][T13153] bond1: entered promiscuous mode [ 262.337477][T13153] bond1: entered allmulticast mode [ 262.345944][T13153] 8021q: adding VLAN 0 to HW filter on device bond1 [ 262.356361][T13153] bond1 (unregistering): Released all slaves [ 262.362554][T13163] loop6: detected capacity change from 0 to 512 [ 262.369661][T13163] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 262.381641][T13163] EXT4-fs (loop6): 1 truncate cleaned up [ 262.387901][T13163] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.401914][T13163] EXT4-fs error (device loop6): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.6.2964: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 262.425021][T13163] EXT4-fs (loop6): Remounting filesystem read-only [ 262.546554][ T9925] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.592320][T13182] lo speed is unknown, defaulting to 1000 [ 262.598613][T13182] lo speed is unknown, defaulting to 1000 [ 262.629692][T13186] loop6: detected capacity change from 0 to 512 [ 262.639785][T13186] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.2966: bg 0: block 5: invalid block bitmap [ 262.666929][T13186] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 262.694950][T13186] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2966: invalid indirect mapped block 3 (level 2) [ 262.721918][T13186] EXT4-fs (loop6): 1 orphan inode deleted [ 262.727795][T13186] EXT4-fs (loop6): 1 truncate cleaned up [ 262.751692][T13186] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.840807][ T9925] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.883664][T13192] loop6: detected capacity change from 0 to 512 [ 262.890773][T13192] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 262.903210][T13192] EXT4-fs (loop6): 1 truncate cleaned up [ 262.909514][T13192] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.033634][T12966] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.137080][T13211] loop1: detected capacity change from 0 to 512 [ 263.146172][T13211] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.2973: EA inode hash validation failed [ 263.159118][T13211] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #15: comm syz.1.2973: corrupted inode contents [ 263.172428][T13211] EXT4-fs error (device loop1): ext4_dirty_inode:6509: inode #15: comm syz.1.2973: mark_inode_dirty error [ 263.183980][T13211] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #15: comm syz.1.2973: corrupted inode contents [ 263.196399][T13211] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2996: inode #15: comm syz.1.2973: mark_inode_dirty error [ 263.208698][T13211] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.2973: mark inode dirty (error -117) [ 263.221831][T13215] loop2: detected capacity change from 0 to 764 [ 263.221920][T13211] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 263.237323][T13211] EXT4-fs (loop1): 1 orphan inode deleted [ 263.243567][T13211] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.248831][T13209] rock: directory entry would overflow storage [ 263.261786][T13209] rock: sig=0x4f50, size=4, remaining=3 [ 263.267408][T13209] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 263.277115][T13209] rock: directory entry would overflow storage [ 263.283293][T13209] rock: sig=0x4f50, size=4, remaining=3 [ 263.289106][T13209] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 263.297995][T13209] netlink: 324 bytes leftover after parsing attributes in process `syz.2.2975'. [ 263.306600][T12966] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.349338][T13220] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2977'. [ 263.362572][T13220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2977'. [ 263.414981][T13226] loop4: detected capacity change from 0 to 256 [ 263.753648][T13239] loop1: detected capacity change from 0 to 164 [ 263.766204][ T9925] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.786307][T13239] ISOFS: unable to read i-node block [ 263.791649][T13239] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 263.828896][T13241] netlink: 'syz.6.2983': attribute type 2 has an invalid length. [ 263.836735][T13241] netlink: 'syz.6.2983': attribute type 1 has an invalid length. [ 263.844499][T13241] netlink: 'syz.6.2983': attribute type 1 has an invalid length. [ 263.852365][T13241] netlink: 'syz.6.2983': attribute type 1 has an invalid length. [ 263.898354][T13247] loop6: detected capacity change from 0 to 512 [ 263.947318][T13247] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.963897][T13247] ext4 filesystem being mounted at /214/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 264.001210][T13247] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #2: block 18: comm syz.6.2986: lblock 23 mapped to illegal pblock 18 (length 1) [ 264.006058][T13247] EXT4-fs (loop6): Remounting filesystem read-only [ 264.036565][ T9925] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.070393][T13260] loop4: detected capacity change from 0 to 2048 [ 264.099192][T13260] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.141527][T13269] loop6: detected capacity change from 0 to 512 [ 264.149320][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.155664][T13269] msdos: Unknown parameter 'nocasE' [ 264.188377][T13271] FAULT_INJECTION: forcing a failure. [ 264.188377][T13271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.201619][T13271] CPU: 1 UID: 0 PID: 13271 Comm: syz.4.2996 Not tainted syzkaller #0 PREEMPT(voluntary) [ 264.201644][T13271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 264.201655][T13271] Call Trace: [ 264.201720][T13271] [ 264.201730][T13271] __dump_stack+0x1d/0x30 [ 264.201754][T13271] dump_stack_lvl+0xe8/0x140 [ 264.201773][T13271] dump_stack+0x15/0x1b [ 264.201787][T13271] should_fail_ex+0x265/0x280 [ 264.201909][T13271] should_fail+0xb/0x20 [ 264.201956][T13271] should_fail_usercopy+0x1a/0x20 [ 264.201999][T13271] _copy_to_user+0x20/0xa0 [ 264.202045][T13271] simple_read_from_buffer+0xb5/0x130 [ 264.202094][T13271] proc_fail_nth_read+0x10e/0x150 [ 264.202123][T13271] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 264.202158][T13271] vfs_read+0x1a5/0x770 [ 264.202231][T13271] ? __rcu_read_unlock+0x4f/0x70 [ 264.202258][T13271] ? __fget_files+0x184/0x1c0 [ 264.202353][T13271] ksys_read+0xda/0x1a0 [ 264.202377][T13271] __x64_sys_read+0x40/0x50 [ 264.202407][T13271] x64_sys_call+0x27c0/0x3000 [ 264.202441][T13271] do_syscall_64+0xd2/0x200 [ 264.202526][T13271] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 264.202552][T13271] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 264.202573][T13271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.202678][T13271] RIP: 0033:0x7f02d9e0d8dc [ 264.202701][T13271] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 264.202724][T13271] RSP: 002b:00007f02d886f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 264.202749][T13271] RAX: ffffffffffffffda RBX: 00007f02da065fa0 RCX: 00007f02d9e0d8dc [ 264.202765][T13271] RDX: 000000000000000f RSI: 00007f02d886f0a0 RDI: 0000000000000003 [ 264.202781][T13271] RBP: 00007f02d886f090 R08: 0000000000000000 R09: 0000000000000009 [ 264.202795][T13271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.202828][T13271] R13: 00007f02da066038 R14: 00007f02da065fa0 R15: 00007ffc120204a8 [ 264.202847][T13271] [ 264.458608][T13282] loop4: detected capacity change from 0 to 2048 [ 264.477166][T13282] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.513001][T13278] lo speed is unknown, defaulting to 1000 [ 264.519468][T13278] lo speed is unknown, defaulting to 1000 [ 264.525808][ T5154] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 264.541391][ T5154] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 264.553749][ T5154] EXT4-fs (loop4): This should not happen!! Data will be lost [ 264.553749][ T5154] [ 264.563506][ T5154] EXT4-fs (loop4): Total free blocks count 0 [ 264.569517][ T5154] EXT4-fs (loop4): Free/Dirty block details [ 264.575533][ T5154] EXT4-fs (loop4): free_blocks=2415919504 [ 264.581278][ T5154] EXT4-fs (loop4): dirty_blocks=64 [ 264.586431][ T5154] EXT4-fs (loop4): Block reservation details [ 264.592418][ T5154] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 264.593913][T13278] chnl_net:caif_netlink_parms(): no params data found [ 264.598871][ T5154] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 33 with error 28 [ 264.638137][T13296] loop4: detected capacity change from 0 to 512 [ 264.644833][T13296] EXT4-fs: Ignoring removed i_version option [ 264.653000][T13296] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.653797][T13278] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.672324][T13278] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.679553][T13278] bridge_slave_0: entered allmulticast mode [ 264.686015][T13278] bridge_slave_0: entered promiscuous mode [ 264.693107][T13278] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.700304][T13278] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.708358][T13278] bridge_slave_1: entered allmulticast mode [ 264.714834][T13278] bridge_slave_1: entered promiscuous mode [ 264.723813][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.743227][T13278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.770095][T13278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.843481][ T5181] bond0 (unregistering): Released all slaves [ 264.852960][ T5181] bond1 (unregistering): Released all slaves [ 264.861855][ T5181] bond2 (unregistering): Released all slaves [ 264.873071][ T5181] bond3 (unregistering): Released all slaves [ 264.896327][T13278] team0: Port device team_slave_0 added [ 264.903347][T13278] team0: Port device team_slave_1 added [ 264.922685][ T5181] hsr_slave_0: left promiscuous mode [ 264.928875][ T5181] hsr_slave_1: left promiscuous mode [ 264.981713][ T5181] team0 (unregistering): Port device dummy0 removed [ 265.001659][T13278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.008819][T13278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.034865][T13278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.045384][T13317] loop4: detected capacity change from 0 to 764 [ 265.061150][T13278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.068221][T13278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.084528][T13316] rock: directory entry would overflow storage [ 265.094175][T13278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.111018][T13316] rock: sig=0x4f50, size=4, remaining=3 [ 265.116643][T13316] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 265.127696][T13317] rock: directory entry would overflow storage [ 265.133963][T13317] rock: sig=0x4f50, size=4, remaining=3 [ 265.139672][T13317] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 265.168610][T13316] netlink: 324 bytes leftover after parsing attributes in process `syz.4.3005'. [ 265.182442][T13278] hsr_slave_0: entered promiscuous mode [ 265.196532][T13278] hsr_slave_1: entered promiscuous mode [ 265.204668][T13278] debugfs: 'hsr0' already exists in 'hsr' [ 265.210450][T13278] Cannot create hsr debugfs directory [ 265.321287][T13326] loop4: detected capacity change from 0 to 2048 [ 265.369720][T13326] loop4: p2 p3 p7 [ 265.371195][T13335] loop6: detected capacity change from 0 to 512 [ 265.381741][T13335] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.420342][T13335] bond3: entered promiscuous mode [ 265.425469][T13335] bond3: entered allmulticast mode [ 265.431150][T13335] 8021q: adding VLAN 0 to HW filter on device bond3 [ 265.452552][T13335] bond3 (unregistering): Released all slaves [ 265.481188][T13337] SELinux: failed to load policy [ 265.520891][T13345] loop4: detected capacity change from 0 to 512 [ 265.527797][T13345] msdos: Unknown parameter 'nocasE' [ 265.592180][T13278] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 265.601100][T13278] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 265.610653][T13278] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 265.619805][T13278] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 265.660984][T13278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.674587][T13278] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.684615][ T5199] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.691822][ T5199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.703820][ T5199] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.710976][ T5199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.783205][T13278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.858353][T13278] veth0_vlan: entered promiscuous mode [ 265.866591][T13278] veth1_vlan: entered promiscuous mode [ 265.883771][T13278] veth0_macvtap: entered promiscuous mode [ 265.892215][T13278] veth1_macvtap: entered promiscuous mode [ 265.904676][T13278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.915942][T13278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.927067][ T52] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.936670][ T52] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.945476][ T52] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.956462][ T52] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.997224][T13365] loop2: detected capacity change from 0 to 512 [ 266.004169][T13365] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 266.016922][T13365] EXT4-fs (loop2): 1 truncate cleaned up [ 266.017585][ T9925] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.023132][T13365] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.113462][T13372] loop6: detected capacity change from 0 to 512 [ 266.121121][T13372] EXT4-fs: Ignoring removed i_version option [ 266.142870][T13372] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.170696][ T9925] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.210768][T13383] loop6: detected capacity change from 0 to 1024 [ 266.227789][T13383] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 266.240043][T13383] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.259714][T13383] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 266.337065][T13389] EXT4-fs error (device loop6): ext4_free_blocks:6706: comm syz.6.3022: Freeing blocks not in datazone - block = 0, count = 16 [ 266.390844][T13397] loop4: detected capacity change from 0 to 512 [ 266.399924][T13397] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.416930][T13400] netlink: 'syz.0.3028': attribute type 21 has an invalid length. [ 266.423300][T13397] bond4: entered promiscuous mode [ 266.429858][T13397] bond4: entered allmulticast mode [ 266.435474][T13397] 8021q: adding VLAN 0 to HW filter on device bond4 [ 266.447756][T13397] bond4 (unregistering): Released all slaves [ 266.504125][T13409] FAULT_INJECTION: forcing a failure. [ 266.504125][T13409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.517283][T13409] CPU: 0 UID: 0 PID: 13409 Comm: syz.0.3031 Not tainted syzkaller #0 PREEMPT(voluntary) [ 266.517421][T13409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 266.517437][T13409] Call Trace: [ 266.517444][T13409] [ 266.517453][T13409] __dump_stack+0x1d/0x30 [ 266.517477][T13409] dump_stack_lvl+0xe8/0x140 [ 266.517538][T13409] dump_stack+0x15/0x1b [ 266.517561][T13409] should_fail_ex+0x265/0x280 [ 266.517594][T13409] should_fail+0xb/0x20 [ 266.517621][T13409] should_fail_usercopy+0x1a/0x20 [ 266.517651][T13409] _copy_from_user+0x1c/0xb0 [ 266.517674][T13409] ___sys_sendmsg+0xc1/0x1d0 [ 266.517763][T13409] __x64_sys_sendmsg+0xd4/0x160 [ 266.517993][T13409] x64_sys_call+0x191e/0x3000 [ 266.518013][T13409] do_syscall_64+0xd2/0x200 [ 266.518045][T13409] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 266.518128][T13409] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 266.518174][T13409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.518193][T13409] RIP: 0033:0x7fbf316feec9 [ 266.518211][T13409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.518302][T13409] RSP: 002b:00007fbf30167038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.518318][T13409] RAX: ffffffffffffffda RBX: 00007fbf31955fa0 RCX: 00007fbf316feec9 [ 266.518328][T13409] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 266.518339][T13409] RBP: 00007fbf30167090 R08: 0000000000000000 R09: 0000000000000000 [ 266.518349][T13409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.518424][T13409] R13: 00007fbf31956038 R14: 00007fbf31955fa0 R15: 00007fffc22e9ed8 [ 266.518441][T13409] [ 266.804780][T13413] SELinux: ebitmap: map size 149 does not match my size 64 (high bit was 0) [ 266.814067][T13413] SELinux: failed to load policy [ 266.887243][T13278] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.913955][T13418] lo speed is unknown, defaulting to 1000 [ 266.959786][T13418] loop2: detected capacity change from 0 to 512 [ 266.975772][T13418] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.3035: bg 0: block 5: invalid block bitmap [ 266.991505][T13418] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 267.000718][T13418] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3035: invalid indirect mapped block 3 (level 2) [ 267.017946][T13418] EXT4-fs (loop2): 1 orphan inode deleted [ 267.023731][T13418] EXT4-fs (loop2): 1 truncate cleaned up [ 267.031745][T13418] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.068313][T13278] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.097712][ T9925] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 267.168358][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.197680][T13436] SELinux: ebitmap: map size 149 does not match my size 64 (high bit was 0) [ 267.207682][T13436] SELinux: failed to load policy [ 267.230485][T13437] loop2: detected capacity change from 0 to 512 [ 267.257203][T13438] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3039'. [ 267.314270][T13439] loop6: detected capacity change from 0 to 512 [ 267.349952][T13437] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.3040: EA inode hash validation failed [ 267.376902][T13437] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #15: comm syz.2.3040: corrupted inode contents [ 267.433807][T13439] EXT4-fs (loop6): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 267.448832][T13437] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #15: comm syz.2.3040: mark_inode_dirty error [ 267.477110][T13437] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #15: comm syz.2.3040: corrupted inode contents [ 267.606301][T13437] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm syz.2.3040: mark_inode_dirty error [ 267.635391][T13439] EXT4-fs warning (device loop6): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop6. [ 267.635707][T13437] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.3040: mark inode dirty (error -117) [ 267.659562][T13437] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 267.672913][T13437] EXT4-fs (loop2): 1 orphan inode deleted [ 267.679470][T13437] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.733429][ T29] kauditd_printk_skb: 343 callbacks suppressed [ 267.733449][ T29] audit: type=1400 audit(1760193981.096:16616): avc: denied { read write } for pid=9925 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 267.764201][ T29] audit: type=1400 audit(1760193981.096:16617): avc: denied { open } for pid=9925 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 267.788530][ T29] audit: type=1400 audit(1760193981.096:16618): avc: denied { ioctl } for pid=9925 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 267.820601][ T29] audit: type=1400 audit(1760193981.106:16619): avc: denied { create } for pid=13455 comm="syz.6.3047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 267.840453][ T29] audit: type=1400 audit(1760193981.106:16620): avc: denied { allowed } for pid=13455 comm="syz.6.3047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 267.860154][ T29] audit: type=1400 audit(1760193981.136:16621): avc: denied { create } for pid=13455 comm="syz.6.3047" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 267.881776][ T29] audit: type=1400 audit(1760193981.136:16622): avc: denied { map } for pid=13455 comm="syz.6.3047" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=35778 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 267.906284][ T29] audit: type=1400 audit(1760193981.136:16623): avc: denied { read write } for pid=13455 comm="syz.6.3047" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=35778 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 267.907748][ T29] audit: type=1400 audit(1760193981.256:16624): avc: denied { map_create } for pid=13457 comm="syz.2.3049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 267.907785][ T29] audit: type=1400 audit(1760193981.256:16625): avc: denied { prog_load } for pid=13457 comm="syz.2.3049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 268.041438][T13465] loop1: detected capacity change from 0 to 512 [ 268.097474][T13465] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.3052: EA inode hash validation failed [ 268.117120][T13465] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #15: comm syz.1.3052: corrupted inode contents [ 268.149660][T13465] EXT4-fs error (device loop1): ext4_dirty_inode:6509: inode #15: comm syz.1.3052: mark_inode_dirty error [ 268.160673][T13477] loop2: detected capacity change from 0 to 512 [ 268.176040][T13465] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #15: comm syz.1.3052: corrupted inode contents [ 268.178983][T13477] EXT4-fs: Ignoring removed i_version option [ 268.194254][T13465] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2996: inode #15: comm syz.1.3052: mark_inode_dirty error [ 268.208606][T13465] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.3052: mark inode dirty (error -117) [ 268.222796][T13465] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 268.232500][T13465] EXT4-fs (loop1): 1 orphan inode deleted [ 268.277662][T13483] loop6: detected capacity change from 0 to 512 [ 268.294741][T13483] msdos: Unknown parameter 'nocasE' [ 268.308998][T13484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3056'. [ 268.542289][T13505] loop4: detected capacity change from 0 to 2048 [ 268.543509][T13507] loop2: detected capacity change from 0 to 512 [ 268.561111][T13509] SELinux: ebitmap: map size 149 does not match my size 64 (high bit was 0) [ 268.565254][T13507] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.3068: EA inode hash validation failed [ 268.570156][T13509] SELinux: failed to load policy [ 268.597599][T13507] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #15: comm syz.2.3068: corrupted inode contents [ 268.627934][T13507] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #15: comm syz.2.3068: mark_inode_dirty error [ 268.628415][ T5181] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 268.639608][T13507] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #15: comm syz.2.3068: corrupted inode contents [ 268.666359][ T5181] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 268.678774][ T5181] EXT4-fs (loop4): This should not happen!! Data will be lost [ 268.678774][ T5181] [ 268.688463][ T5181] EXT4-fs (loop4): Total free blocks count 0 [ 268.694501][ T5181] EXT4-fs (loop4): Free/Dirty block details [ 268.700490][ T5181] EXT4-fs (loop4): free_blocks=2415919504 [ 268.706248][ T5181] EXT4-fs (loop4): dirty_blocks=64 [ 268.711450][ T5181] EXT4-fs (loop4): Block reservation details [ 268.715233][T13507] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm syz.2.3068: mark_inode_dirty error [ 268.717526][ T5181] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 268.735890][ T5181] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 33 with error 28 [ 268.742319][T13507] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.3068: mark inode dirty (error -117) [ 268.748533][ T5181] EXT4-fs (loop4): This should not happen!! Data will be lost [ 268.748533][ T5181] [ 268.774075][T13507] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 268.785360][T13507] EXT4-fs (loop2): 1 orphan inode deleted [ 268.804419][T13515] siw: device registration error -23 [ 268.830004][T13515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=13515 comm=gBp [ 268.854084][T13515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5122 sclass=netlink_route_socket pid=13515 comm=gBp [ 268.917341][T13527] FAULT_INJECTION: forcing a failure. [ 268.917341][T13527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.930668][T13527] CPU: 1 UID: 0 PID: 13527 Comm: syz.0.3075 Not tainted syzkaller #0 PREEMPT(voluntary) [ 268.930710][T13527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 268.930726][T13527] Call Trace: [ 268.930735][T13527] [ 268.930780][T13527] __dump_stack+0x1d/0x30 [ 268.930809][T13527] dump_stack_lvl+0xe8/0x140 [ 268.930835][T13527] dump_stack+0x15/0x1b [ 268.930857][T13527] should_fail_ex+0x265/0x280 [ 268.930902][T13527] should_fail+0xb/0x20 [ 268.931003][T13527] should_fail_usercopy+0x1a/0x20 [ 268.931046][T13527] _copy_from_user+0x1c/0xb0 [ 268.931079][T13527] ___sys_sendmsg+0xc1/0x1d0 [ 268.931213][T13527] __x64_sys_sendmsg+0xd4/0x160 [ 268.931262][T13527] x64_sys_call+0x191e/0x3000 [ 268.931289][T13527] do_syscall_64+0xd2/0x200 [ 268.931379][T13527] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 268.931415][T13527] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 268.931444][T13527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.931512][T13527] RIP: 0033:0x7fbf316feec9 [ 268.931528][T13527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.931552][T13527] RSP: 002b:00007fbf30167038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 268.931570][T13527] RAX: ffffffffffffffda RBX: 00007fbf31955fa0 RCX: 00007fbf316feec9 [ 268.931589][T13527] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 268.931604][T13527] RBP: 00007fbf30167090 R08: 0000000000000000 R09: 0000000000000000 [ 268.931620][T13527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.931636][T13527] R13: 00007fbf31956038 R14: 00007fbf31955fa0 R15: 00007fffc22e9ed8 [ 268.931715][T13527] [ 269.198660][T13536] SELinux: ebitmap: map size 149 does not match my size 64 (high bit was 0) [ 269.208519][T13536] SELinux: failed to load policy [ 269.232500][T13538] SELinux: ebitmap: map size 149 does not match my size 64 (high bit was 0) [ 269.252190][T13538] SELinux: failed to load policy [ 269.287155][T13545] lo speed is unknown, defaulting to 1000 [ 269.351994][T13545] loop1: detected capacity change from 0 to 512 [ 269.366249][T13545] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.3083: bg 0: block 5: invalid block bitmap [ 269.383201][T13545] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 269.392269][T13545] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3083: invalid indirect mapped block 3 (level 2) [ 269.406493][T13529] 9pnet_fd: Insufficient options for proto=fd [ 269.413064][T13545] EXT4-fs (loop1): 1 orphan inode deleted [ 269.418892][T13545] EXT4-fs (loop1): 1 truncate cleaned up [ 269.466703][T13555] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 269.490595][T13555] loop6: detected capacity change from 0 to 128 [ 269.551575][T13564] FAULT_INJECTION: forcing a failure. [ 269.551575][T13564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.564753][T13564] CPU: 0 UID: 0 PID: 13564 Comm: syz.6.3089 Not tainted syzkaller #0 PREEMPT(voluntary) [ 269.564814][T13564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 269.564830][T13564] Call Trace: [ 269.564838][T13564] [ 269.564847][T13564] __dump_stack+0x1d/0x30 [ 269.564896][T13564] dump_stack_lvl+0xe8/0x140 [ 269.564956][T13564] dump_stack+0x15/0x1b [ 269.564973][T13564] should_fail_ex+0x265/0x280 [ 269.565008][T13564] should_fail+0xb/0x20 [ 269.565108][T13564] should_fail_usercopy+0x1a/0x20 [ 269.565134][T13564] _copy_from_user+0x1c/0xb0 [ 269.565164][T13564] ___sys_sendmsg+0xc1/0x1d0 [ 269.565260][T13564] __x64_sys_sendmsg+0xd4/0x160 [ 269.565370][T13564] x64_sys_call+0x191e/0x3000 [ 269.565449][T13564] do_syscall_64+0xd2/0x200 [ 269.565512][T13564] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 269.565539][T13564] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 269.565560][T13564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.565652][T13564] RIP: 0033:0x7f819886eec9 [ 269.565666][T13564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.565684][T13564] RSP: 002b:00007f81972d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.565706][T13564] RAX: ffffffffffffffda RBX: 00007f8198ac5fa0 RCX: 00007f819886eec9 [ 269.565726][T13564] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 269.565737][T13564] RBP: 00007f81972d7090 R08: 0000000000000000 R09: 0000000000000000 [ 269.565815][T13564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.565827][T13564] R13: 00007f8198ac6038 R14: 00007f8198ac5fa0 R15: 00007ffc6ddf28a8 [ 269.565846][T13564] [ 269.926538][T13570] SELinux: ebitmap: map size 149 does not match my size 64 (high bit was 0) [ 269.980381][T13570] SELinux: failed to load policy [ 270.028578][T13574] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 270.075610][T13578] SELinux: ebitmap: map size 149 does not match my size 64 (high bit was 0) [ 270.087260][T13578] SELinux: failed to load policy [ 270.142125][ T5168] Bluetooth: hci0: Frame reassembly failed (-84) [ 270.197299][T13590] loop1: detected capacity change from 0 to 512 [ 270.224533][T13590] EXT4-fs: Ignoring removed i_version option [ 270.319241][T13602] SELinux: Context @ is not valid (left unmapped). [ 270.447783][T13612] SELinux: ebitmap: map size 149 does not match my size 64 (high bit was 0) [ 270.469890][T13612] SELinux: failed to load policy [ 270.571894][T13616] siw: device registration error -23 [ 270.584570][T13616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=13616 comm=gBp [ 270.597022][T13616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5122 sclass=netlink_route_socket pid=13616 comm=gBp [ 270.629615][T13618] loop1: detected capacity change from 0 to 512 [ 270.638416][T13618] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 270.650061][T13618] EXT4-fs (loop1): 1 truncate cleaned up [ 271.100957][T13633] loop6: detected capacity change from 0 to 512 [ 271.107772][T13633] EXT4-fs: Ignoring removed i_version option [ 271.128544][T13635] loop2: detected capacity change from 0 to 256 [ 271.169512][T13637] lo speed is unknown, defaulting to 1000 [ 271.238150][T13637] loop6: detected capacity change from 0 to 128 [ 271.261895][T13637] syz.6.3115: attempt to access beyond end of device [ 271.261895][T13637] loop6: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 271.275471][T13637] syz.6.3115: attempt to access beyond end of device [ 271.275471][T13637] loop6: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 271.289455][T13637] syz.6.3115: attempt to access beyond end of device [ 271.289455][T13637] loop6: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 271.303451][T13637] syz.6.3115: attempt to access beyond end of device [ 271.303451][T13637] loop6: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 271.325048][T13637] syz.6.3115: attempt to access beyond end of device [ 271.325048][T13637] loop6: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 271.339216][T13637] syz.6.3115: attempt to access beyond end of device [ 271.339216][T13637] loop6: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 271.360723][T13637] syz.6.3115: attempt to access beyond end of device [ 271.360723][T13637] loop6: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 271.374309][T13637] syz.6.3115: attempt to access beyond end of device [ 271.374309][T13637] loop6: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 271.388377][T13637] syz.6.3115: attempt to access beyond end of device [ 271.388377][T13637] loop6: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 271.508599][T13654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3120'. [ 271.532719][T13654] 8021q: adding VLAN 0 to HW filter on device bond1 [ 271.611115][T13663] loop6: detected capacity change from 0 to 512 [ 271.642486][T13663] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 271.656631][T13670] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 271.662132][T13663] EXT4-fs (loop6): orphan cleanup on readonly fs [ 271.678871][T13663] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #16: comm syz.6.3121: corrupted inode contents [ 271.700994][T13663] EXT4-fs error (device loop6): ext4_dirty_inode:6509: inode #16: comm syz.6.3121: mark_inode_dirty error [ 271.728220][T13663] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #16: comm syz.6.3121: corrupted inode contents [ 271.740550][T13663] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.3121: mark_inode_dirty error [ 271.752172][T13663] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #16: comm syz.6.3121: corrupted inode contents [ 271.765704][T13663] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem [ 271.774489][T13663] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #16: comm syz.6.3121: corrupted inode contents [ 271.786743][T13663] EXT4-fs error (device loop6): ext4_truncate:4637: inode #16: comm syz.6.3121: mark_inode_dirty error [ 271.798109][T13663] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem [ 271.807723][T13663] EXT4-fs (loop6): 1 truncate cleaned up [ 271.813552][ T5162] EXT4-fs error (device loop6): ext4_release_dquot:6981: comm kworker/u8:28: Failed to release dquot type 1 [ 272.008181][T13687] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 272.017096][T13687] SELinux: failed to load policy [ 272.205434][ T3503] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 272.211627][T13586] Bluetooth: hci0: command 0x1003 tx timeout [ 272.510405][T13703] loop6: detected capacity change from 0 to 512 [ 272.519091][T13705] FAULT_INJECTION: forcing a failure. [ 272.519091][T13705] name failslab, interval 1, probability 0, space 0, times 0 [ 272.521077][T13703] EXT4-fs: Ignoring removed i_version option [ 272.531870][T13705] CPU: 0 UID: 0 PID: 13705 Comm: syz.1.3143 Not tainted syzkaller #0 PREEMPT(voluntary) [ 272.531904][T13705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 272.531927][T13705] Call Trace: [ 272.531936][T13705] [ 272.531948][T13705] __dump_stack+0x1d/0x30 [ 272.531990][T13705] dump_stack_lvl+0xe8/0x140 [ 272.532017][T13705] dump_stack+0x15/0x1b [ 272.532039][T13705] should_fail_ex+0x265/0x280 [ 272.532086][T13705] should_failslab+0x8c/0xb0 [ 272.532179][T13705] kmem_cache_alloc_noprof+0x50/0x480 [ 272.532216][T13705] ? getname_flags+0x80/0x3b0 [ 272.532257][T13705] getname_flags+0x80/0x3b0 [ 272.532323][T13705] user_path_at+0x28/0x130 [ 272.532441][T13705] __se_sys_name_to_handle_at+0xff/0x630 [ 272.532482][T13705] ? ksys_write+0x192/0x1a0 [ 272.532513][T13705] __x64_sys_name_to_handle_at+0x67/0x80 [ 272.532585][T13705] x64_sys_call+0x1552/0x3000 [ 272.532614][T13705] do_syscall_64+0xd2/0x200 [ 272.532646][T13705] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 272.532682][T13705] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 272.532719][T13705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.532785][T13705] RIP: 0033:0x7fe73cc2eec9 [ 272.532806][T13705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.532831][T13705] RSP: 002b:00007fe73b68f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012f [ 272.532856][T13705] RAX: ffffffffffffffda RBX: 00007fe73ce85fa0 RCX: 00007fe73cc2eec9 [ 272.532872][T13705] RDX: 0000200000000200 RSI: 0000200000000240 RDI: 0000000000000003 [ 272.532932][T13705] RBP: 00007fe73b68f090 R08: 0000000000000600 R09: 0000000000000000 [ 272.533013][T13705] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 272.533029][T13705] R13: 00007fe73ce86038 R14: 00007fe73ce85fa0 R15: 00007ffc5f8bdfb8 [ 272.533055][T13705] [ 272.603437][T13712] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 272.658209][T13703] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3141'. [ 272.676325][T13712] SELinux: failed to load policy [ 272.792883][T13718] loop1: detected capacity change from 0 to 512 [ 272.809466][ T29] kauditd_printk_skb: 334 callbacks suppressed [ 272.809484][ T29] audit: type=1400 audit(1760193986.176:16959): avc: denied { setopt } for pid=13717 comm="syz.1.3148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 272.836496][ T29] audit: type=1400 audit(1760193986.206:16960): avc: denied { write } for pid=13717 comm="syz.1.3148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 272.865600][ T29] audit: type=1400 audit(1760193986.206:16961): avc: denied { read } for pid=13717 comm="syz.1.3148" lport=35827 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 272.886868][T13718] bond1: entered promiscuous mode [ 272.891984][T13718] bond1: entered allmulticast mode [ 272.905514][T13718] 8021q: adding VLAN 0 to HW filter on device bond1 [ 272.929244][T13718] bond1 (unregistering): Released all slaves [ 272.929237][ T29] audit: type=1400 audit(1760193986.276:16962): avc: denied { bind } for pid=13717 comm="syz.1.3148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 272.954958][ T29] audit: type=1400 audit(1760193986.276:16963): avc: denied { node_bind } for pid=13717 comm="syz.1.3148" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 273.001876][ T29] audit: type=1400 audit(1760193986.366:16964): avc: denied { create } for pid=13753 comm="syz.6.3154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 273.006370][T13756] FAULT_INJECTION: forcing a failure. [ 273.006370][T13756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.021513][ T29] audit: type=1400 audit(1760193986.366:16965): avc: denied { write } for pid=13753 comm="syz.6.3154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 273.034611][T13756] CPU: 1 UID: 0 PID: 13756 Comm: syz.0.3153 Not tainted syzkaller #0 PREEMPT(voluntary) [ 273.034777][T13756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 273.034796][T13756] Call Trace: [ 273.034808][T13756] [ 273.034819][T13756] __dump_stack+0x1d/0x30 [ 273.034906][T13756] dump_stack_lvl+0xe8/0x140 [ 273.034946][T13756] dump_stack+0x15/0x1b [ 273.034975][T13756] should_fail_ex+0x265/0x280 [ 273.035093][T13756] should_fail+0xb/0x20 [ 273.035212][T13756] should_fail_usercopy+0x1a/0x20 [ 273.035240][T13756] _copy_to_user+0x20/0xa0 [ 273.035294][T13756] simple_read_from_buffer+0xb5/0x130 [ 273.035326][T13756] proc_fail_nth_read+0x10e/0x150 [ 273.035369][T13756] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 273.035409][T13756] vfs_read+0x1a5/0x770 [ 273.035448][T13756] ? __rcu_read_unlock+0x4f/0x70 [ 273.035506][T13756] ? __fget_files+0x184/0x1c0 [ 273.035608][T13756] ksys_read+0xda/0x1a0 [ 273.035640][T13756] __x64_sys_read+0x40/0x50 [ 273.035675][T13756] x64_sys_call+0x27c0/0x3000 [ 273.035705][T13756] do_syscall_64+0xd2/0x200 [ 273.035808][T13756] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 273.035846][T13756] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 273.035951][T13756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.035982][T13756] RIP: 0033:0x7fbf316fd8dc [ 273.036003][T13756] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 273.036075][T13756] RSP: 002b:00007fbf30167030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 273.036102][T13756] RAX: ffffffffffffffda RBX: 00007fbf31955fa0 RCX: 00007fbf316fd8dc [ 273.036121][T13756] RDX: 000000000000000f RSI: 00007fbf301670a0 RDI: 0000000000000005 [ 273.036140][T13756] RBP: 00007fbf30167090 R08: 0000000000000000 R09: 0000000000000000 [ 273.036157][T13756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.036174][T13756] R13: 00007fbf31956038 R14: 00007fbf31955fa0 R15: 00007fffc22e9ed8 [ 273.036203][T13756] [ 273.299856][T13766] loop4: detected capacity change from 0 to 512 [ 273.306616][T13766] EXT4-fs: Ignoring removed i_version option [ 273.321675][T13769] loop2: detected capacity change from 0 to 512 [ 273.328332][T13770] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 273.337088][T13770] SELinux: failed to load policy [ 273.343218][T13769] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 273.366033][T13766] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3157'. [ 273.376029][T13769] EXT4-fs (loop2): 1 truncate cleaned up [ 273.416721][ T29] audit: type=1400 audit(1760193986.786:16966): avc: denied { create } for pid=13777 comm="syz.4.3161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 273.591766][T13787] loop4: detected capacity change from 0 to 764 [ 273.600685][ T29] audit: type=1400 audit(1760193986.966:16967): avc: denied { mount } for pid=13777 comm="syz.4.3161" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 273.665436][T13778] rock: directory entry would overflow storage [ 273.671667][T13778] rock: sig=0x4f50, size=4, remaining=3 [ 273.677326][T13778] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 273.686424][T13778] rock: directory entry would overflow storage [ 273.692592][T13778] rock: sig=0x4f50, size=4, remaining=3 [ 273.698343][T13778] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 273.710122][T13778] netlink: 324 bytes leftover after parsing attributes in process `syz.4.3161'. [ 273.711048][ T29] audit: type=1400 audit(1760193987.076:16968): avc: denied { create } for pid=13777 comm="syz.4.3161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 273.748143][T13796] loop6: detected capacity change from 0 to 512 [ 273.756728][T13796] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.3165: EA inode hash validation failed [ 273.769902][T13796] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #15: comm syz.6.3165: corrupted inode contents [ 273.782238][T13796] EXT4-fs error (device loop6): ext4_dirty_inode:6509: inode #15: comm syz.6.3165: mark_inode_dirty error [ 273.794527][T13796] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #15: comm syz.6.3165: corrupted inode contents [ 273.806715][T13796] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2996: inode #15: comm syz.6.3165: mark_inode_dirty error [ 273.819172][T13796] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2999: inode #15: comm syz.6.3165: mark inode dirty (error -117) [ 273.832403][T13796] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 273.841630][T13796] EXT4-fs (loop6): 1 orphan inode deleted [ 273.965698][T13807] ================================================================== [ 273.973895][T13807] BUG: KCSAN: data-race in __ip6_datagram_connect / rawv6_sendmsg [ 273.981743][T13807] [ 273.984077][T13807] write to 0xffff8881035bddb8 of 16 bytes by task 13805 on cpu 0: [ 273.991897][T13807] __ip6_datagram_connect+0x6d1/0x7e0 [ 273.997310][T13807] ip6_datagram_connect_v6_only+0x52/0x80 [ 274.003104][T13807] inet_dgram_connect+0x125/0x1c0 [ 274.008166][T13807] __sys_connect+0x1ef/0x2b0 [ 274.012781][T13807] __x64_sys_connect+0x3f/0x50 [ 274.017562][T13807] x64_sys_call+0x2c0c/0x3000 [ 274.022256][T13807] do_syscall_64+0xd2/0x200 [ 274.026776][T13807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.032696][T13807] [ 274.035024][T13807] read to 0xffff8881035bddb8 of 16 bytes by task 13807 on cpu 1: [ 274.042740][T13807] rawv6_sendmsg+0x8ac/0xf70 [ 274.047406][T13807] inet_sendmsg+0xc2/0xd0 [ 274.051772][T13807] __sock_sendmsg+0x102/0x180 [ 274.056484][T13807] ____sys_sendmsg+0x345/0x4e0 [ 274.061261][T13807] ___sys_sendmsg+0x17b/0x1d0 [ 274.065953][T13807] __sys_sendmmsg+0x178/0x300 [ 274.070640][T13807] __x64_sys_sendmmsg+0x57/0x70 [ 274.075511][T13807] x64_sys_call+0x1c4a/0x3000 [ 274.080200][T13807] do_syscall_64+0xd2/0x200 [ 274.084715][T13807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.090612][T13807] [ 274.092942][T13807] Reported by Kernel Concurrency Sanitizer on: [ 274.099088][T13807] CPU: 1 UID: 0 PID: 13807 Comm: syz.6.3169 Not tainted syzkaller #0 PREEMPT(voluntary) [ 274.108902][T13807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 274.118961][T13807] ==================================================================