last executing test programs: 3.059460857s ago: executing program 4 (id=866): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x7, 0x28}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="48000000020603000000000000000000000000000d000300686173683a6e65740000000005000400000000000900020073797a31000000000500050002000000050001000600"], 0x48}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 2.906898541s ago: executing program 4 (id=870): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x121100) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') read$watch_queue(r0, &(0x7f0000000200)=""/27, 0x1b) 2.788740292s ago: executing program 1 (id=872): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000043c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01dfffffff9a26000006210000000c00018008000100", @ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 2.788495912s ago: executing program 1 (id=873): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000012005783000000000000000000", @ANYBLOB="00000010"], 0x20}}, 0x0) 2.785064882s ago: executing program 1 (id=874): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) timer_create(0x2, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{}, {0x0, 0x9}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) unshare(0x62040200) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xf0}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYRES8=r4, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095f96fa6535923807f0565ca5b90ab2cc77555c5b1a210ddf73e01c22a5197e3e4"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00', r8}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x18000, &(0x7f0000000000), 0x80, 0x62d, &(0x7f0000000c40)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) 1.991015936s ago: executing program 4 (id=886): r0 = mq_open(&(0x7f0000000000)='+#&\'/(\x00', 0x8c1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0x2, 0x5, 0x9}) pread64(r0, &(0x7f0000000080)=""/184, 0xb8, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xb5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r1, &(0x7f00000001c0)="8ba02fac8132b1ad147128180bd3b5a8ca1970c6014f19f405e7b4008413814f02d78988efc7812ceae51385b3953c3a00ec47f5cc1586dc29e2e7d0fdc628be6c7e827c2ca15b1ce89899630eafbe43f6a002f1448eb6623fb1c8b1faafa936a473bb8258ae60a48f8e77822595bf00ba6acd7ed5fd03a734a05faaad551ec122e978fda9718129b3b0db488fff98c98eabbff0141b90897ac577ef0b0ccc23283f90c78d17e603be6abc353af8b1a23eb9927059eaf2a29a3a7220", &(0x7f0000000280)=""/217}, 0x20) r2 = fcntl$dupfd(r1, 0x0, r0) sched_getparam(0xffffffffffffffff, &(0x7f00000003c0)) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000400)={{0x2, 0x5}, 'port0\x00', 0x24, 0x400, 0x240000, 0xf, 0x3, 0x6, 0xfe2, 0x0, 0x5, 0x7}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000500), 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000540)={0x0, @dev}, &(0x7f0000000580)=0xc) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@float={0xf, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x2e, 0x30, 0x30, 0x61, 0x2e, 0x30, 0x30]}}, &(0x7f0000000600)=""/163, 0x2d, 0xa3, 0x1, 0x3, 0x10000, @value=r2}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xfd, 0x0, 0x1, 0x5, '\x00', r5, r6, 0x2, 0x4, 0x3}, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000780)={'vlan1\x00'}) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000007c0), &(0x7f0000000800)=0x14) ioctl$BTRFS_IOC_INO_PATHS(r4, 0xc0389423, &(0x7f0000000880)={0x10, 0x10, [0xc5, 0xfffffffffffff001, 0x6], &(0x7f0000000840)=[0x0, 0x0]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000008c0)='subflow_check_data_avail\x00', 0xffffffffffffffff, 0x0, 0x101}, 0x18) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000940)=0x0) capset(&(0x7f0000000980)={0x19980330, r8}, &(0x7f00000009c0)={0x2, 0x5, 0x0, 0x7, 0x7fffffff, 0xffff5766}) getpid() ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a00)) r9 = openat$cgroup(r2, &(0x7f0000000a40)='syz1\x00', 0x200002, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r9, 0xf504, 0x0) fcntl$setpipe(r3, 0x407, 0xfffffffffffffffb) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000b00)={'syztnl2\x00', &(0x7f0000000a80)={'syztnl1\x00', r5, 0x4, 0x3, 0xc, 0x7f, 0x29, @remote, @remote, 0x20, 0x700, 0x6, 0x3}}) r10 = socket$inet_smc(0x2b, 0x1, 0x0) accept$inet(r10, &(0x7f0000000b40)={0x2, 0x0, @empty}, &(0x7f0000000b80)=0x10) 1.970825908s ago: executing program 4 (id=887): prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1, 0x0, 0x400007}, 0x18) r2 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x240}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0xd024100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000000)={0x1039110d96a8023, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x2180, 0x0, 0x0, 0x0, 0xc}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000780)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)=@can_newroute={0x54, 0x18, 0x4, 0x70bd2b, 0x25dfdbff, {0x1d, 0x1, 0x4}, [@CGW_MOD_AND={0x15, 0x1, {{{0x1, 0x0, 0x0, 0x1}, 0x6, 0x94bb9fb02c0e73c7, 0x0, 0x0, "722c8fde794d0346"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x8}, @CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x1}, 0x3, 0x0, 0x0, 0x0, "09a455f04ac4abc4"}, 0x4}}]}, 0x54}}, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', r4, 0x0, 0xfffffffff7fffffc}, 0xc) syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000540)='./file0\x00', 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xfc, 0x55a, &(0x7f0000000f40)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000, 0x1000000000}, 0x10208, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f00000014c0)="0000501effd4", 0x0, 0x800004, 0x10030, 0x1, 0x0}) 1.827742891s ago: executing program 1 (id=889): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000010000100ffef0000000000001b00000a5c0000000c0a01010000000000ef00000a0000060900020073797a31000000000900010073797a3100000000300003801c0000800c00018006000100d10300000c000440000000002df31ab30c0000800800034000000002"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.700640133s ago: executing program 1 (id=892): syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x800009, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x5, 0x7, 0x444, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x10, 0x4, 0x7fff, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0xf8c800, 0x80000001, 0x6, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x4, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x1, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff44, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0xffffff00, 0x3, 0xffffffff, 0x7, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0x7, 0x0, 0x743, 0x5, 0x3, 0x7, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x1, 0x1, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x5a, 0x2302, 0xffff, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x401, 0x10401, 0x512d, 0x1, 0xe, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e9, 0x48, 0x9, 0x3, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x6, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x4, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0x7, 0x6e8, 0x8, 0x0, 0x80000000, 0x6, 0x9, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="70000000100003040000800000000000000074", @ANYRES32=r5, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 1.696891023s ago: executing program 4 (id=895): stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r0, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x98, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x101100) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001380)=@newchain={0xb5c, 0x64, 0x8, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0x3}, {0xfff1, 0xffff}, {0x9, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0xc0, 0x2}}, @filter_kind_options=@f_u32={{0x8}, {0xb20, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'pim6reg1\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0_macvtap\x00'}, @TCA_U32_POLICE={0x8d8, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0xbbb3, 0x20000007, 0x1, 0x8, 0xb, {0x2, 0x0, 0x7, 0xe, 0x39, 0x3}, {0x3, 0x0, 0xb46, 0xc, 0x7, 0x10000}, 0x5, 0x1, 0x5}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0xe, 0x8, 0x97, 0x23, 0x7fffffff, 0x6, 0x6, 0x3, 0x2, 0x1, 0x4, 0x3ff, 0xfffffffb, 0x3, 0x8, 0x0, 0x3ff, 0x4d5a0211, 0x200, 0x8000, 0x100, 0x4, 0x8, 0x5, 0x4, 0x1, 0x200, 0x101, 0xffff, 0xffffffff, 0x9, 0x8, 0x2, 0x3, 0x2, 0x8000, 0xffffffea, 0x6, 0x5, 0x0, 0xae1, 0x101, 0xa, 0x8, 0x0, 0xb2, 0x2, 0x8, 0x0, 0x781, 0x7a83, 0x5, 0x6, 0x400, 0x7fff, 0x200, 0x80000001, 0x8, 0x40, 0xfffffffe, 0x10001, 0x7f, 0x6, 0x8, 0x2, 0x5, 0x8fc8, 0x1, 0x8, 0x7, 0x1, 0x8, 0x1, 0x2, 0x4, 0x6, 0x86, 0x12ff, 0x5, 0x9, 0x7ff, 0x1, 0x9, 0x1, 0x4, 0x70646cad, 0x7, 0x1, 0x9568, 0x0, 0xfffffffa, 0x4da1, 0x2, 0x2, 0x800, 0x10000, 0x4, 0x2, 0x6, 0x3, 0x0, 0x8, 0x6, 0x6, 0x1, 0x81, 0x1ff, 0x3, 0xd8, 0x101, 0x80000001, 0x2, 0x200, 0x1, 0x9, 0x1, 0x8, 0xffffff8a, 0x8, 0x8000, 0x2, 0x4, 0xb4, 0xffffffff, 0x80000001, 0x7, 0x80000001, 0x2, 0x0, 0x6, 0x5, 0x7, 0x0, 0x10001, 0x5, 0x1, 0x0, 0xfffffff8, 0xfd2, 0x4, 0x79ea, 0x2, 0x1000, 0x1ff, 0x0, 0x20000000, 0x6, 0xf0, 0x1, 0x2, 0x3, 0x3, 0x6, 0x0, 0x401, 0x6, 0xfffffbff, 0x401, 0x8000, 0xffffffff, 0xfffffffc, 0x7, 0x7f, 0x4, 0x9c0, 0x663, 0x3ff, 0x3, 0xbe6, 0x1, 0x1, 0x5, 0x8, 0x9, 0xfffeffff, 0x0, 0x3, 0xa8, 0x6, 0x81, 0x1, 0x6, 0x3, 0xc, 0x100, 0x6, 0x3, 0x4, 0x0, 0x8, 0x2, 0x5, 0x6, 0x8001, 0x0, 0x8, 0x3, 0x9, 0x1c6, 0x6, 0x10001, 0x9, 0xfff, 0x0, 0x400, 0x0, 0x10, 0x5, 0x2edced61, 0x29a, 0x0, 0x1, 0x7fffffff, 0x4, 0x968d, 0x4, 0xffffffff, 0x4, 0x0, 0x101, 0x4, 0xf2, 0x3, 0x1, 0x3, 0x1, 0xa7, 0x2, 0x7f, 0x2, 0xffffffff, 0x2, 0x10, 0x4, 0x5, 0xf, 0x307, 0x0, 0x5, 0x4, 0x401, 0x6, 0x4, 0x4, 0xbdb, 0x7fff, 0xa5eb, 0x7fff, 0x2, 0x30, 0xa4, 0x9, 0xfff, 0x1ff, 0x0, 0xa4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x40, 0x3, 0x5, 0xfffffff8, 0x0, {0x5, 0x1, 0xf440, 0x40, 0x0, 0x1000000}, {0x3, 0x1, 0xf1, 0x8, 0x2, 0xf8}, 0x800, 0x3, 0x9}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x31a6, 0xbeb, 0x80, 0x0, 0x8000, 0xa0, 0xfffffffd, 0x19bc86bc, 0x3, 0x1, 0x5, 0xce3, 0x2, 0x4, 0xfff, 0x10001, 0x7, 0x7, 0x7040, 0x6, 0x80000001, 0x0, 0x1000, 0x75597f12, 0x7fff, 0x9, 0x7, 0xf344, 0x1, 0x4, 0x7fff, 0xfff, 0x0, 0xfffffff4, 0x0, 0x6, 0x9, 0x1, 0xc, 0xffffff80, 0x5, 0x0, 0xfffffffe, 0x9, 0xfffffc01, 0x9, 0x7, 0x5, 0x3, 0x4b6, 0x7c, 0x1000, 0x68, 0x203, 0xaaa, 0xb, 0xff2374, 0x0, 0x68c2442b, 0x7, 0x0, 0x9, 0x3, 0x9, 0x5, 0x7, 0x40, 0x8, 0x700, 0x9, 0x0, 0xe, 0x1, 0x16a4, 0x3c930ede, 0x1, 0x9, 0xc98, 0x9, 0x0, 0x152d, 0x6, 0x1, 0x74, 0x2, 0x0, 0xc2b9, 0x76f0, 0xffffffdf, 0x4, 0x18000000, 0x1, 0x7, 0xc0, 0xe, 0x8000, 0x6, 0x8, 0xaa9, 0xed, 0x1, 0x4, 0x7ff, 0x4, 0x400, 0x8a0, 0x4, 0xd, 0x2, 0x5, 0x4, 0x6, 0x8000, 0x4, 0x7, 0x80000000, 0x1, 0x2, 0x7, 0x3, 0x7, 0x9, 0xfff, 0x7, 0x5, 0xfffffffc, 0xc, 0x5, 0x7fffffff, 0x1000, 0xfffffffc, 0x7, 0x5, 0x5, 0x1ff, 0x6, 0x800, 0xffffff01, 0x6f, 0x7, 0xe15, 0x81, 0x1, 0x80000001, 0x7, 0x7, 0xfff, 0x5, 0xb881, 0x0, 0x7, 0x7, 0x0, 0xffff0282, 0x2, 0x3a9, 0x7f, 0x48, 0x31, 0x3, 0x7, 0x4, 0x3, 0x3, 0x8000, 0x7, 0x0, 0x4, 0x7, 0x4, 0x6, 0x6, 0xff, 0x8, 0x8, 0xffff, 0x0, 0x9, 0x10001, 0x0, 0x6, 0xd9db, 0x5, 0xc87a, 0xa, 0xfffffff8, 0x3f5, 0x4, 0x2, 0xfffffc00, 0x9, 0xfffffffe, 0x9, 0xc83, 0x4de, 0x8, 0x5, 0x7, 0x5ac6ac70, 0xfffffffc, 0x2, 0x60e, 0x10000, 0x6, 0x5, 0xc1, 0x1003, 0xfff, 0x5, 0x3, 0x4, 0x6, 0xb, 0xff, 0xd, 0x10001, 0x8001, 0x5, 0x81, 0x4, 0x8, 0x5, 0x10000, 0x80, 0x9, 0x3a, 0x0, 0x1, 0x80, 0x2, 0x7, 0x3ff, 0x2, 0x0, 0x7, 0x200000, 0x4, 0x2, 0x0, 0x6, 0x7fffffff, 0x8, 0x400, 0x9, 0xa03, 0x4100, 0x80000001, 0x994f, 0x7, 0x5, 0x81, 0x7, 0x6, 0x1000, 0x2, 0x2]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x59}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x10000000, 0x40, 0x4, 0x7, {0x3, 0x1, 0x8b19, 0x6, 0x5, 0xfffffffd}, {0xa9, 0x1, 0x4ffb, 0x5, 0x81, 0x6}, 0x1, 0x6, 0xfffffffb}}]}, @TCA_U32_ACT={0x168, 0x7, [@m_xt={0x94, 0x9, 0x0, 0x0, {{0x7}, {0x4}, {0x69, 0x6, "e07e1711c0a681b7aaa2b7e9a62b0c37d864aef01c1efea47704337b52c4704b46d2319b17e71fc3ed740528da85819f1568d89201984fe2e58c3655a5c7c9f2ff39ef275ae3163183661655688db037e81a16a328982164cd293544864255ac0bcb7a8261"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0xd0, 0x15, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9b4b, 0x2, 0x5, 0x2, 0x9}, 0x5}}]}, {0x84, 0x6, "ca67b594b416452ef1452cb2b7e57065bc0dd009889b750f1b158f357f92ae32447790b86cafd6728ed71cb3ed38450118e2ae8d6194d6c6f1f8980dc8526538eab4866c133d2e3ac991bf1d6acfe92d8914c34fd52628437cbcb292a3de1fc8245c16e6c798387915a81c13ebf361c8f9ac698225bc5abb1007cce6794b4585"}, {0xc}, {0xc, 0x8, {0x6, 0x1}}}}]}, @TCA_U32_HASH={0x8, 0x2, 0x1000}, @TCA_U32_POLICE={0x88, 0x6, [@TCA_POLICE_RATE64={0xc, 0x8, 0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x100, 0x0, 0xfffffffd, 0x8c9c, 0x5, {0x60, 0x1, 0x0, 0x1, 0x7, 0x7fff}, {0x10, 0x0, 0x5, 0xfff8, 0x1000, 0x40}, 0x3, 0x9, 0x2}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x3, 0x7f, 0x8, 0xc731, {0x3, 0x2, 0x4, 0x101, 0x3, 0x2}, {0x9, 0x1, 0x7, 0x3, 0xdd, 0x4}, 0x4, 0x7, 0x2}}]}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb7}, @TCA_U32_INDEV={0x14, 0x8, 'syz_tun\x00'}, @TCA_U32_FLAGS={0x8, 0xb, 0x4}]}}, @TCA_CHAIN={0x8}]}, 0xb5c}, 0x1, 0x0, 0x0, 0x20000800}, 0x2404c084) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$inet(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00'}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="004fa100", @ANYRES16=r6, @ANYBLOB="090302000000fcdbdf251d000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008915}, 0x20040000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd672d5115000800fffc010000000000000000e7ff00000001ff020000ea000000000000000000000132000101"], 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x280}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x40505330, &(0x7f0000000500)={0x800000, 0x210002, 0xffffffdd, 0x7fffffff, 0x2, 0x69}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x1}, 0x0) 1.500844351s ago: executing program 3 (id=898): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0003110004b9fd00a60c6eec00be004411"], 0xfdef) 1.307139799s ago: executing program 3 (id=905): prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1, 0x0, 0x400007}, 0x18) r2 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x240}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0xd024100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000000)={0x1039110d96a8023, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x2180, 0x0, 0x0, 0x0, 0xc}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000780)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)=@can_newroute={0x54, 0x18, 0x4, 0x70bd2b, 0x25dfdbff, {0x1d, 0x1, 0x4}, [@CGW_MOD_AND={0x15, 0x1, {{{0x1, 0x0, 0x0, 0x1}, 0x6, 0x94bb9fb02c0e73c7, 0x0, 0x0, "722c8fde794d0346"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x8}, @CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x1}, 0x3, 0x0, 0x0, 0x0, "09a455f04ac4abc4"}, 0x4}}]}, 0x54}}, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', r4, 0x0, 0xfffffffff7fffffc}, 0xc) syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000540)='./file0\x00', 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xfc, 0x55a, &(0x7f0000000f40)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000, 0x1000000000}, 0x10208, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f00000014c0)="0000501effd4", 0x0, 0x800004, 0x10030, 0x1, 0x0}) 1.094501749s ago: executing program 3 (id=911): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x545, &(0x7f0000001300)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000c50000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$evdev(0x0, 0x0, 0x2002) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="24000000390007010000000000000000027c0000040000000c00018006000600894f"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x60) write$evdev(r3, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000700000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003"], 0xfc}}, 0x0) setrlimit(0x1, &(0x7f00000003c0)={0x5, 0x8}) r9 = socket(0x10, 0x6, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "00000f0000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000380), 0x4) syz_io_uring_setup(0x1116, &(0x7f0000000180)={0x0, 0x6d2a, 0x0, 0x0, 0x2021e}, &(0x7f0000000200), &(0x7f0000000040)) 928.853195ms ago: executing program 3 (id=915): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 886.961948ms ago: executing program 3 (id=916): r0 = socket$inet(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f8, 0x2c0, 0x0, 0x2c0, 0x138, 0x0, 0x360, 0x360, 0x360, 0x360, 0x360, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98, 0x0, {0x600000000000000}}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xff, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xf, 0x7b7b, @remote, 0x4e22}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) 849.466171ms ago: executing program 3 (id=917): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = add_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r3 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x6, 0x80000001, 0x20, @private1, @remote, 0x0, 0x7, 0x37, 0x1}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@delqdisc={0x38, 0x25, 0x10, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x8, 0xd}, {0x4, 0xffe0}, {0xc, 0x10}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x8cd}}]}, 0x38}}, 0x4) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r5 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000001340)=[{&(0x7f0000004940)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') tee(r7, r7, 0xa18, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) syz_read_part_table(0x5d5, &(0x7f0000000600)="$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") ioctl$FICLONE(r0, 0x40049409, r2) 804.524086ms ago: executing program 1 (id=918): openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001d40)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000100)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="140082b42163287dee4a91b284b6d200000000000000000000070000008303130000000000"], 0x18}}], 0x2, 0x2000) r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x20, 0x2004, @fd=r2, 0x6, &(0x7f0000000740)="3945a1be95005e28e76de586fbc0f67336abcccd4aa709398b4ba10cfcb4a4cfac3581081fc79e97f93aa4b2e1b52de060ef79bca550dcec842f7e248cb41f1a720338baac999981351a3fa003aaaddef518bd212466021108bf665e7f0276a6cc3959aa65567e1c4abe65fcd30bd2f18067adea15e09db2c5b96247af35b9116146c6c8e3f42343c1c1cf4ffb9dc3daf334ee4694b04e8d1e4c85738d198c2c6967fa84b963d966d3ddab55b573923f1ab62e2c73c0e5fcc6dec1cdc37372a8d22a5df9f131d480eeafc6564ae557904ba13cfcbf8f5631073159dfd38ab87f14eb0459a1f5a5161032fed61df2f629078e8d3558f31b", 0xf7, 0xb}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00"/13], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd3a, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x20000090}, 0x8084) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) write$binfmt_aout(r9, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r10 = dup3(0xffffffffffffffff, r9, 0x0) read$watch_queue(r10, &(0x7f0000000240)=""/173, 0xad) ppoll(&(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000180)={0x80000001, 0x2, 0x81e6b76d, 0x10002, 0x9, "aa32b73986bbee6b9231334cbfa0b748261a13"}) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000030601020000ffffffff00000a0000010500018007"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESOCT=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x79b1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 730.125413ms ago: executing program 4 (id=919): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pI4 \x00'}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0x8, 0x1, 0x80000, r0, 0x3}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES16=r1, @ANYRES64=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32", @ANYRES8], 0x34}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000240)='btrfs_transaction_commit\x00', r2}, 0x18) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x8, &(0x7f0000000380)={[{@barrier_val}, {@errors_remount}]}, 0x21, 0x4f3, &(0x7f00000012c0)="$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") r7 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x1, 0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) fsmount(0xffffffffffffffff, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) r9 = dup3(r5, r6, 0x0) ioctl$MON_IOCG_STATS(r9, 0xc0109207, &(0x7f0000000180)) 636.636991ms ago: executing program 2 (id=921): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x81, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x9, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x2}, 0x18) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x20, r7, 0x1, 0x70bd29, 0x25dfdbf8, {}, [{{0x8, 0x1, r8}, {0x4}}]}, 0x20}, 0x1, 0x1000000, 0x0, 0x4004040}, 0x2004c8c0) 628.415832ms ago: executing program 0 (id=922): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x20}, 0x18) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c010000100013070000000000000000fc020000000500000000000000000001fe8000000000050000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000004d533000000e000000100000000000000000000000007000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000200000000000000000000004c001400636d61632861657329"], 0x13c}}, 0x0) 515.916602ms ago: executing program 0 (id=923): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be00442cfffe8000000000000000000000000000aaff0200000000006000000000", @ANYRES64], 0xfdef) 348.177528ms ago: executing program 0 (id=924): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x1, 0x2b, 0xfc0, 0x68, 0x0, 0x60, 0x33, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp={0x44, 0x4, 0xf0, 0x0, 0x1}]}}, "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"}}, 0xfce) 294.818043ms ago: executing program 0 (id=925): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@grpid}, {@errors_continue}, {@oldalloc}, {@nobh}, {@mblk_io_submit}, {@usrquota}]}, 0x45, 0x7b6, &(0x7f0000002080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x42, 0xc2) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x4) connect$vsock_stream(r1, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x30000}], 0x1}}], 0x51, 0x0) r3 = accept4$unix(r2, 0x0, 0x0, 0x80000) recvfrom$unix(r3, &(0x7f0000000140)=""/248, 0x40000, 0x0, 0x0, 0x0) pwrite64(r0, &(0x7f0000000080)="cc", 0x1, 0x200980) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='./file2\x00') 166.258805ms ago: executing program 2 (id=926): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 165.782355ms ago: executing program 0 (id=927): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x680b, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000340)=r0}, 0x20) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0xfffffffd, 0x0, 0xffffffffffffffff, 0xbf2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file1\x00', 0x42, 0x0) close(r7) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x1004014, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_tracing={0x1a, 0x30, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @exit, @map_fd={0x18, 0x5, 0x1, 0x0, r3}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x6}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x8}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x8}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @alu={0x4, 0x1, 0xb, 0x9, 0x5, 0x4, 0xfffffffffffffff0}], {{}, {}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f00000003c0)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41000, 0x72, '\x00', 0x0, 0x1b, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x5, 0x3, 0x40, 0x60}, 0x10, 0xca16, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=[0x1, r6, r7]}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000300)="63ecedda41c3903803ed69d8d41f", 0x0, 0x0, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 163.968145ms ago: executing program 2 (id=928): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket(0x10, 0x80003, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x200a02) write$evdev(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x70a, &(0x7f00000232c0)="$eJzs3V+P21gZBvDnJJkkk0JVAapWVbdzOmWlqRhSJ7NNFRUkjHOSMSRxZHtgRkJaFTqDRs0UaItEc9PODX+k5Qtwtzdc8CFW4oKr/RZwBdIKhIR2BUJGPraTTOJkJm3a2aXPb7Qb5/j18etjr896xj4GERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERQVgNw6gItO3uzq6czWq4Tif5ksXU/Ki2FdyMJm7OW+dKuF5AhP+gWMRbUfFbXxmFXA7/tY6r0berKIYfRQwuXL5098u5TLL8nIRfBBat8PHTwYN7/f7+ozPEZrFw9ecJmTMEtVTX9hy7Y7aUtD1H1ms149Z205NNu628Pc9XHWm5KuM7rtywbspKvb4lVXnP2em2GmZbJYV3vl41jJr8TiHa0QDKnrVtt9t2t6VjwtlhzB35/g+iAGV2pDw47O9vjeXzLK2Nw6BKSvKZ8eAwqHra5laNarVSqVYrtdv123cMIzdVYISEMYSpiKUftHSeMvHxusAiyzt5E72kjNX4j/FnAbRRRBc72IVM/bHQgAsHnRnzY0n//84tNXe94/1/0suvjGZfge7/r0Xfrs3q/2fkIiH1AmlzxIzyxX5WdEYSj/EUAzzAPfTRxz4eLaFuCbn20jXkjbgll5LPzJ8WFLqw4cGBjQ5MtPBFyLhEoo4aajDwHrbRhAeJJmy0oeBhDx58qPCIyoeZKpjw4cCFxAYs3IREBXXUsQUJhTL24GAHXbTQgIlPgiA4wKFu9604n+cpW40kqDJjIwrIJcfdPqpztnZW///DZ9HScf9vsP9/U0XHQSH6+GheDNFnQBBf/y9o7dVkQ0RERERERESvgtC/fRf6r/JvAwjQtNvKOBFTOLfsiIiIiIiIiGgZBIICrkJEd+XjbYjp638iIiIiIiIi+nwT+hk7AaCkb+oXo8elzvJLgOxrSJGIiIiIiIiIXpJ+8v9aHgj0Xf5rEAtd/xMRERERERHR58Cvx8bYz2XjMXaD5M/6GQBrfymID/9egLsijnu7XxVHZjjHPIpjpu4A8JtXxMV4oF79kQegv1nqqojXJoF/Jb99CH18kD7W//MgIoRwJxLIZ8crmJGACNdcy8Xf8D6uR4tcj8eZvz/IQM+JRhQuNe22KltO+24Fpnkx46td/+cPD38BuMPtPDjs75d/9JP+fZ3LcVh0fBRW+uxEOpn0xhjl8kSPt6CfuUgb3XgVzWSVv+l2SkKv10i2PwvzKDO+onk7oLYKRFv5S6xH+2w9iGJLg+GI+wJY04M/VMp6l53YendFjLKoTG552o6YseVFncWNKObGxo3oI2mTsJ6MKH4tC1TLk/sgTHQsi+p4Fqe3hfjHRPvPzwKiGLbFVpjFH8OKJtri+x9GC2/1dpPhMc6SxdRRQER0Xg5GvZAexHxqjP2ke0hOamfvd5AD4rPcjN59tJYg7j+S3v3J74Koh8oCufhvE+lrSfoVhGf0DaHryUcDuueupJzRjfKnQRCYF4sYP6P/NwiSDTIW6N2OgyCYPKP/YfQOpDjtqSz+HQTB3YruSX470at+EC7wwcz1eu1qFkUU8OTop/gkmb3/4/2H1epWzXjXMG5XsaL/VyH+yIJ9DxERTTn9HTs6IjMnQryL61Ed1+//7Z1o6kSP96X4lgLtFtDHfWwmrxBYS6+1hAN885/RbQib0VUrsF6KPksDefnS3fCqdhh7KHL6DS+bM6/qdGcZxerbG6rD2OS9Q5NXgKPYrVe8F4iIiF6v9Rn9MHCi/8fJ/r94ov/fxEYUsXEl9bq7NHZL4WZydTy8pB9cOE6NrZye/LeW3BhERERvCOV+LEr+r4Tr2r33KvV6xfS3lXQd67vStRstJe2ur1xr2+y2lOy5ju9YTlv2XBTsVeVJb6fXc1xfNh1X9hzP3tVvfpfxq9891TG7vm15vbYyPSUtp+ubli8btmfJ3s6327a3rVy9sNdTlt20LdO3na70nB3XUmUpPaXGAu2G6vp20w4nu7Ln2h3T3ZPfc9o7HSUbyrNcu+c7UYXJuuxu03E7utoygoVfdEhERPT/6PHTwYN7/f7+o8mJ1fDSPCo5xoyY6Yl8SoUcI4iIiOgzZtRdL7BQ8RUmREREREREREREREREREREREREREREREREU05/pG/BiZW0hwWBYcnPLsYleI7RI4ZT9Qi8bD6fun/SA/u9yOKZYYkAcIalkkciBg8+mhO8OixJmn885niRDHEJeOH2+esXgAu6BFFJbokHwPTzo0s/xtImvnEQteisGD0zdVZhuC9yy//PIZx4+PvpWSJs+SAIgvmLF062Yf7sx3MOwKP8nF2wesrx87rPRET0uv0vAAD//ySOL9Y=") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 67.219984ms ago: executing program 0 (id=929): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000004000000000000000e20400110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x58}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffff, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1008}, 0x108020, 0x0, 0xffffffff, 0x8, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t') r3 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x401, 0xfffffffc, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, 0x1543}, [@IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r7 = creat(&(0x7f0000000000)='./file0\x00', 0x40) write$binfmt_elf32(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4601079704080000000000000002000600010000"], 0x78) close(r7) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000600)='sys_enter\x00', r6, 0x0, 0xffffffffffffffff}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000340)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r9}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(0xffffffffffffffff, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r10, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4804}, 0x18) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, r11, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) 66.705494ms ago: executing program 2 (id=930): socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05fff500000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e7465720010000180090001"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 624.47µs ago: executing program 2 (id=931): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x2c0, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x0, 0x8400}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10000000}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 0s ago: executing program 2 (id=932): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x10000003}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0, {0x0, r4}}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x400, 0x823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback={0xfec0ffffffffffff}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x24000800) 0s ago: executing program 2 (id=933): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000300)='scsi_dispatch_cmd_start\x00', r0}, 0x18) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="a28d7acda0b2", 0x0, 0xfeffffff, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): or pid=3757 comm="syz.2.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 46.185518][ T29] audit: type=1400 audit(1766943830.773:690): avc: denied { setopt } for pid=3757 comm="syz.2.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 46.206407][ T3732] Set syz1 is full, maxelem 65536 reached [ 46.215049][ T3488] tipc: Node number set to 2886997162 [ 46.222694][ T3732] syz.0.70 (3732) used greatest stack depth: 9600 bytes left [ 46.234168][ T3760] IPVS: Error connecting to the multicast addr [ 46.291347][ T3768] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 46.295129][ T29] audit: type=1400 audit(1766943830.913:691): avc: denied { create } for pid=3765 comm="syz.3.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 46.299022][ T3768] FAT-fs (loop2): Filesystem has been set read-only [ 46.372961][ T29] audit: type=1400 audit(1766943830.953:692): avc: denied { sys_admin } for pid=3765 comm="syz.3.83" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 46.393909][ T29] audit: type=1400 audit(1766943830.953:693): avc: denied { setopt } for pid=3765 comm="syz.3.83" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.414396][ T29] audit: type=1400 audit(1766943830.953:694): avc: denied { read } for pid=3765 comm="syz.3.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.433725][ T29] audit: type=1326 audit(1766943830.973:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3763 comm="syz.0.82" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc71bc2f749 code=0x0 [ 46.480435][ T29] audit: type=1400 audit(1766943831.103:696): avc: denied { relabelfrom } for pid=3774 comm="syz.1.86" name="NETLINK" dev="sockfs" ino=5363 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 46.480580][ T3776] SELinux: Context system_u:object_r:hald_exec_t:s0 is not valid (left unmapped). [ 46.568688][ T3785] set_capacity_and_notify: 9 callbacks suppressed [ 46.568710][ T3785] loop1: detected capacity change from 0 to 764 [ 46.591810][ T3785] iso9660: Unknown parameter 'magic: 0xeb9f [ 46.591810][ T3785] version: 1 [ 46.591810][ T3785] flags: 0x0 [ 46.591810][ T3785] hdr_len: 24 [ 46.591810][ T3785] type_off: 0 [ 46.591810][ T3785] type_len: 48 [ 46.591810][ T3785] str_off: 48 [ 46.591810][ T3785] str_len: 9 [ 46.591810][ T3785] btf_total_size: 81 [ 46.591810][ T3785] [1] FUNC_PROTO (anon) return' [ 46.593184][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.648686][ T3790] loop3: detected capacity change from 0 to 512 [ 46.674564][ T3790] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.692197][ T3790] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.725495][ T3794] netlink: 48 bytes leftover after parsing attributes in process `syz.4.92'. [ 46.761108][ T3790] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.813497][ T3790] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.870256][ T3803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.882777][ T3803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.920664][ T3790] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.936383][ T3804] lo speed is unknown, defaulting to 1000 [ 46.943108][ T3804] lo speed is unknown, defaulting to 1000 [ 46.968966][ T3804] lo speed is unknown, defaulting to 1000 [ 46.981566][ T3790] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.004245][ T3804] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 47.035313][ T3804] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 47.055071][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.072040][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.088748][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.105897][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.145550][ T3804] lo speed is unknown, defaulting to 1000 [ 47.177404][ T3809] loop0: detected capacity change from 0 to 512 [ 47.194095][ T3804] lo speed is unknown, defaulting to 1000 [ 47.206864][ T3809] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 47.232505][ T3809] EXT4-fs (loop0): mount failed [ 47.244741][ T3804] lo speed is unknown, defaulting to 1000 [ 47.296259][ T3804] lo speed is unknown, defaulting to 1000 [ 47.308470][ T3816] 9p: Bad value for 'wfdno' [ 47.321128][ T3804] lo speed is unknown, defaulting to 1000 [ 47.450559][ T3832] loop2: detected capacity change from 0 to 164 [ 47.464355][ T3835] netlink: 48 bytes leftover after parsing attributes in process `syz.1.105'. [ 47.491994][ T3832] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 47.511215][ T3832] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 47.545951][ T3832] rock: directory entry would overflow storage [ 47.552175][ T3832] rock: sig=0x4f50, size=4, remaining=3 [ 47.557919][ T3832] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 47.570840][ T3833] lo speed is unknown, defaulting to 1000 [ 47.587361][ T3847] loop0: detected capacity change from 0 to 128 [ 47.609908][ T3847] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 47.671665][ T3851] loop1: detected capacity change from 0 to 128 [ 47.679017][ T3331] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.725283][ T3851] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 47.825996][ T3863] 9p: Bad value for 'wfdno' [ 48.008959][ T3876] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 48.052045][ T3873] lo speed is unknown, defaulting to 1000 [ 48.072218][ T3869] netlink: 24 bytes leftover after parsing attributes in process `syz.0.116'. [ 48.089500][ T3883] netlink: 24 bytes leftover after parsing attributes in process `syz.0.116'. [ 48.118482][ T3889] loop1: detected capacity change from 0 to 128 [ 48.137345][ T3889] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 48.254693][ T3895] loop4: detected capacity change from 0 to 164 [ 48.288334][ T3895] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 48.313083][ T3905] 9p: Bad value for 'wfdno' [ 48.325971][ T3895] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 48.348719][ T3895] rock: directory entry would overflow storage [ 48.354990][ T3895] rock: sig=0x4f50, size=4, remaining=3 [ 48.360999][ T3895] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 48.423959][ T3911] netlink: 596 bytes leftover after parsing attributes in process `syz.3.130'. [ 48.447823][ T3913] Illegal XDP return value 1197823079 on prog (id 92) dev N/A, expect packet loss! [ 48.501531][ T3922] syz.2.134 uses obsolete (PF_INET,SOCK_PACKET) [ 48.536192][ T3928] loop4: detected capacity change from 0 to 128 [ 48.550364][ T3928] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 48.568408][ T3926] lo speed is unknown, defaulting to 1000 [ 48.620554][ T3934] loop2: detected capacity change from 0 to 128 [ 48.722444][ T3943] 9p: Bad value for 'wfdno' [ 48.796469][ T3948] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 48.803065][ T3948] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 48.811218][ T3948] vhci_hcd vhci_hcd.0: Device attached [ 48.846152][ T3951] vhci_hcd: connection closed [ 48.846363][ T31] vhci_hcd vhci_hcd.0: stop threads [ 48.856570][ T31] vhci_hcd vhci_hcd.0: release socket [ 48.861995][ T31] vhci_hcd vhci_hcd.0: disconnect device [ 48.900783][ T3959] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 48.913430][ T3960] syz.3.143: attempt to access beyond end of device [ 48.913430][ T3960] loop3: rw=2049, sector=353, nr_sectors = 688 limit=128 [ 48.932142][ T3959] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 48.955899][ T3966] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 48.972368][ T3959] rock: directory entry would overflow storage [ 48.978640][ T3959] rock: sig=0x4f50, size=4, remaining=3 [ 48.984241][ T3959] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 48.990310][ T3968] netlink: 'syz.1.151': attribute type 21 has an invalid length. [ 49.105152][ T3978] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 49.204232][ T3989] syzkaller0: entered promiscuous mode [ 49.206642][ T3978] xt_connbytes: Forcing CT accounting to be enabled [ 49.210060][ T3989] syzkaller0: entered allmulticast mode [ 49.351768][ T3998] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 49.403730][ T3998] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.557519][ T3998] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.638121][ T4015] EXT4-fs: Ignoring removed mblk_io_submit option [ 49.677186][ T4017] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 49.797076][ T4016] infiniband syz!: set active [ 49.801954][ T4016] infiniband syz!: added team_slave_0 [ 49.821505][ T4015] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.859934][ T3331] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.900009][ T4016] RDS/IB: syz!: added [ 49.927539][ T4016] smc: adding ib device syz! with port count 1 [ 49.968291][ T4016] smc: ib device syz! port 1 has no pnetid [ 50.251020][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.325517][ T4025] ipt_ECN: cannot use operation on non-tcp rule [ 50.381882][ T4027] __nla_validate_parse: 6 callbacks suppressed [ 50.382006][ T4027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.172'. [ 50.404771][ T4027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.172'. [ 50.414892][ T4027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.172'. [ 50.578025][ T4040] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 50.975270][ T4064] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 50.981870][ T4064] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 50.989489][ T4064] vhci_hcd vhci_hcd.0: Device attached [ 50.995550][ T4054] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 51.010794][ T4061] 9p: Bad value for 'wfdno' [ 51.017999][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 51.018013][ T29] audit: type=1401 audit(1766943835.643:817): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 51.049813][ T4054] EXT4-fs (loop3): mount failed [ 51.117568][ T4065] vhci_hcd: connection closed [ 51.117749][ T37] vhci_hcd vhci_hcd.0: stop threads [ 51.127789][ T37] vhci_hcd vhci_hcd.0: release socket [ 51.133193][ T37] vhci_hcd vhci_hcd.0: disconnect device [ 51.189796][ T29] audit: type=1400 audit(1766943835.813:818): avc: denied { ioctl } for pid=4070 comm="syz.4.188" path="socket:[6963]" dev="sockfs" ino=6963 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 51.260039][ T4076] pimreg: entered allmulticast mode [ 51.266075][ T4071] pimreg: left allmulticast mode [ 51.284205][ T29] audit: type=1326 audit(1766943835.903:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4072 comm="syz.3.189" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a4e37f749 code=0x0 [ 51.377778][ T4078] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 51.386720][ T4078] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 51.395276][ T4078] rock: directory entry would overflow storage [ 51.401532][ T4078] rock: sig=0x4f50, size=4, remaining=3 [ 51.407251][ T4078] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 51.469471][ T29] audit: type=1326 audit(1766943836.093:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4086 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5685ff749 code=0x7ffc0000 [ 51.513800][ T29] audit: type=1326 audit(1766943836.093:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4086 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5685ff749 code=0x7ffc0000 [ 51.537517][ T29] audit: type=1326 audit(1766943836.093:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4086 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc5685ff749 code=0x7ffc0000 [ 51.560787][ T29] audit: type=1326 audit(1766943836.093:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4086 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5685ff749 code=0x7ffc0000 [ 51.584093][ T29] audit: type=1326 audit(1766943836.093:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4086 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fc5685ff749 code=0x7ffc0000 [ 51.607750][ T29] audit: type=1326 audit(1766943836.093:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4086 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5685ff749 code=0x7ffc0000 [ 51.631089][ T29] audit: type=1326 audit(1766943836.093:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4086 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5685ff749 code=0x7ffc0000 [ 51.747462][ T3990] set_capacity_and_notify: 8 callbacks suppressed [ 51.747483][ T3990] loop1: detected capacity change from 0 to 1024 [ 51.839320][ T4106] loop4: detected capacity change from 0 to 164 [ 51.856718][ T4106] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 51.875204][ T4106] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 51.876349][ T3990] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.904507][ T4106] rock: directory entry would overflow storage [ 51.911107][ T4106] rock: sig=0x4f50, size=4, remaining=3 [ 51.916837][ T4106] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 51.991357][ T4114] loop4: detected capacity change from 0 to 512 [ 52.079859][ T4121] netlink: 24 bytes leftover after parsing attributes in process `syz.3.205'. [ 52.102896][ T4121] netlink: 16 bytes leftover after parsing attributes in process `syz.3.205'. [ 52.148998][ T4129] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.188682][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.215793][ T4133] netlink: 14 bytes leftover after parsing attributes in process `syz.2.209'. [ 52.247570][ T4135] 9p: Bad value for 'wfdno' [ 52.252707][ T4133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.267106][ T4133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.279716][ T4137] netlink: 28 bytes leftover after parsing attributes in process `syz.4.212'. [ 52.283003][ T4133] bond0 (unregistering): Released all slaves [ 52.289298][ T4137] unsupported nla_type 24929 [ 52.340916][ T4140] loop4: detected capacity change from 0 to 4096 [ 52.367563][ T4140] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.400945][ T4143] veth4: entered promiscuous mode [ 52.406078][ T4143] veth4: entered allmulticast mode [ 52.424775][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.454646][ T4121] mmap: syz.3.205 (4121) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 52.469657][ T4121] xt_TPROXY: Can be used only with -p tcp or -p udp [ 52.477239][ T4148] netlink: 28 bytes leftover after parsing attributes in process `syz.2.215'. [ 52.486285][ T4148] netlink: 28 bytes leftover after parsing attributes in process `syz.2.215'. [ 52.501100][ T4148] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 52.551016][ T4156] loop4: detected capacity change from 0 to 512 [ 52.563888][ T4156] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 52.584099][ T4156] EXT4-fs error (device loop4): ext4_get_journal_inode:5849: comm syz.4.218: inode #1792: comm syz.4.218: iget: illegal inode # [ 52.602825][ T4156] EXT4-fs (loop4): Remounting filesystem read-only [ 52.609533][ T4156] EXT4-fs (loop4): no journal found [ 52.716424][ T4177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.226'. [ 52.736748][ T4173] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.842979][ T4189] loop3: detected capacity change from 0 to 128 [ 52.859119][ T4173] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.876532][ T4193] netlink: 'syz.3.231': attribute type 12 has an invalid length. [ 52.887911][ T4193] netlink: 'syz.3.231': attribute type 1 has an invalid length. [ 52.990888][ T4197] loop3: detected capacity change from 0 to 512 [ 53.084589][ T4199] 8021q: VLANs not supported on wg0 [ 53.134345][ T4173] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.201045][ T4201] tipc: Started in network mode [ 53.206108][ T4201] tipc: Node identity ac14140f, cluster identity 4711 [ 53.238121][ T4201] tipc: New replicast peer: 255.255.255.255 [ 53.244375][ T4201] tipc: Enabled bearer , priority 10 [ 53.267804][ T4173] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.419831][ T1683] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.476644][ T1683] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.499515][ T1683] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.507804][ T1683] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.604726][ T4216] netlink: 'syz.3.237': attribute type 3 has an invalid length. [ 53.693536][ T4231] 9p: Bad value for 'wfdno' [ 53.724632][ T4240] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.732037][ T4240] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.794632][ T4242] loop2: detected capacity change from 0 to 2048 [ 53.887653][ T4242] loop2: p1 < > p4 [ 53.897514][ T4242] loop2: p4 size 8388608 extends beyond EOD, truncated [ 54.107455][ T4254] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 54.126910][ T4257] veth2: entered promiscuous mode [ 54.132033][ T4257] veth2: entered allmulticast mode [ 54.132525][ T4233] Set syz1 is full, maxelem 65536 reached [ 54.321983][ T4254] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.374624][ T4261] loop2: detected capacity change from 0 to 512 [ 54.404103][ T36] tipc: Node number set to 2886997007 [ 54.417226][ T4261] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 54.517423][ T4261] EXT4-fs (loop2): 1 truncate cleaned up [ 54.523778][ T4261] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.636840][ T4260] Set syz1 is full, maxelem 65536 reached [ 54.678420][ T4254] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.822178][ T4281] loop1: detected capacity change from 0 to 128 [ 54.863811][ T4254] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.899602][ T4286] bridge0: port 3(macsec1) entered blocking state [ 54.906689][ T4286] bridge0: port 3(macsec1) entered disabled state [ 54.914096][ T4286] macsec1: entered allmulticast mode [ 54.920180][ T4286] macsec1: left allmulticast mode [ 54.935304][ T4254] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.970549][ T4290] Set syz1 is full, maxelem 65536 reached [ 54.984242][ T803] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.016079][ T803] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.041634][ T803] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.057406][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.067687][ T803] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.077390][ T4296] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.268: error while reading EA inode 32 err=-116 [ 55.098151][ T4299] veth4: entered promiscuous mode [ 55.103300][ T4299] veth4: entered allmulticast mode [ 55.115826][ T4296] EXT4-fs (loop3): Remounting filesystem read-only [ 55.124688][ T4301] kernel read not supported for file /policy (pid: 4301 comm: syz.1.272) [ 55.128759][ T4296] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 55.147171][ T4301] kernel read not supported for file /policy (pid: 4301 comm: syz.1.272) [ 55.156686][ T4296] EXT4-fs (loop3): 1 orphan inode deleted [ 55.162820][ T4296] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.178584][ T4306] atomic_op ffff88811a053d28 conn xmit_atomic 0000000000000000 [ 55.186803][ T4296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.278828][ T4306] veth0_to_team: left promiscuous mode [ 55.301476][ T4306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.347097][ T4306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.391716][ T4314] netlink: 'syz.0.274': attribute type 15 has an invalid length. [ 55.399768][ T347] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.409013][ T347] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.445321][ T347] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.476884][ T347] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.521862][ T4325] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.554370][ T3331] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.856709][ T4310] syz.0.274 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 55.870888][ T4310] CPU: 1 UID: 0 PID: 4310 Comm: syz.0.274 Not tainted syzkaller #0 PREEMPT(voluntary) [ 55.870934][ T4310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 55.870952][ T4310] Call Trace: [ 55.870963][ T4310] [ 55.870973][ T4310] __dump_stack+0x1d/0x30 [ 55.871004][ T4310] dump_stack_lvl+0x95/0xd0 [ 55.871076][ T4310] dump_stack+0x15/0x1b [ 55.871099][ T4310] dump_header+0x81/0x240 [ 55.871182][ T4310] oom_kill_process+0x295/0x350 [ 55.871217][ T4310] out_of_memory+0x97b/0xb80 [ 55.871303][ T4310] try_charge_memcg+0x610/0xa10 [ 55.871389][ T4310] obj_cgroup_charge_pages+0xa6/0x150 [ 55.871459][ T4310] __memcg_kmem_charge_page+0x9f/0x170 [ 55.871495][ T4310] __alloc_frozen_pages_noprof+0x18f/0x360 [ 55.871597][ T4310] alloc_pages_mpol+0xb3/0x260 [ 55.871672][ T4310] alloc_pages_noprof+0x90/0x130 [ 55.871718][ T4310] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 55.871803][ T4310] __kvmalloc_node_noprof+0x492/0x6b0 [ 55.871837][ T4310] ? ip_set_alloc+0x24/0x30 [ 55.871876][ T4310] ? ip_set_alloc+0x24/0x30 [ 55.871928][ T4310] ip_set_alloc+0x24/0x30 [ 55.871970][ T4310] hash_netiface_create+0x282/0x740 [ 55.872027][ T4310] ? __pfx_hash_netiface_create+0x10/0x10 [ 55.872061][ T4310] ip_set_create+0x3cc/0x970 [ 55.872098][ T4310] ? __nla_parse+0x40/0x60 [ 55.872131][ T4310] nfnetlink_rcv_msg+0x4c6/0x590 [ 55.872253][ T4310] netlink_rcv_skb+0x123/0x220 [ 55.872289][ T4310] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 55.872350][ T4310] nfnetlink_rcv+0x167/0x16c0 [ 55.872378][ T4310] ? kmem_cache_free+0xe3/0x3a0 [ 55.872412][ T4310] ? __kfree_skb+0x109/0x150 [ 55.872448][ T4310] ? nlmon_xmit+0x4f/0x60 [ 55.872552][ T4310] ? consume_skb+0x49/0x150 [ 55.872578][ T4310] ? nlmon_xmit+0x4f/0x60 [ 55.872597][ T4310] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 55.872639][ T4310] ? __dev_queue_xmit+0x138d/0x1ec0 [ 55.872827][ T4310] ? __dev_queue_xmit+0x148/0x1ec0 [ 55.872930][ T4310] ? __rcu_read_unlock+0x4f/0x70 [ 55.872975][ T4310] ? ref_tracker_free+0x37d/0x3e0 [ 55.873013][ T4310] ? __netlink_deliver_tap+0x4dc/0x500 [ 55.873112][ T4310] netlink_unicast+0x5c0/0x690 [ 55.873199][ T4310] netlink_sendmsg+0x58b/0x6b0 [ 55.873235][ T4310] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.873337][ T4310] __sock_sendmsg+0x145/0x180 [ 55.873367][ T4310] ____sys_sendmsg+0x31e/0x4a0 [ 55.873486][ T4310] ___sys_sendmsg+0x17b/0x1d0 [ 55.873538][ T4310] __x64_sys_sendmsg+0xd4/0x160 [ 55.873573][ T4310] x64_sys_call+0x17ba/0x3000 [ 55.873634][ T4310] do_syscall_64+0xca/0x2b0 [ 55.873684][ T4310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.873707][ T4310] RIP: 0033:0x7fc71bc2f749 [ 55.873725][ T4310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.873755][ T4310] RSP: 002b:00007fc71a68f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.873775][ T4310] RAX: ffffffffffffffda RBX: 00007fc71be85fa0 RCX: 00007fc71bc2f749 [ 55.873787][ T4310] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 55.873800][ T4310] RBP: 00007fc71bcb3f91 R08: 0000000000000000 R09: 0000000000000000 [ 55.873815][ T4310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.873832][ T4310] R13: 00007fc71be86038 R14: 00007fc71be85fa0 R15: 00007fff579a7678 [ 55.873880][ T4310] [ 55.873887][ T4310] memory: usage 307200kB, limit 307200kB, failcnt 249 [ 56.210721][ T4310] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 56.218790][ T4310] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 56.226179][ T4310] Memory cgroup stats for /syz0: [ 56.226819][ T4310] cache 0 [ 56.234908][ T4310] rss 0 [ 56.237824][ T4310] shmem 0 [ 56.240768][ T4310] mapped_file 0 [ 56.244229][ T4310] dirty 0 [ 56.247277][ T4310] writeback 0 [ 56.250588][ T4310] workingset_refault_anon 48 [ 56.255197][ T4310] workingset_refault_file 0 [ 56.259741][ T4310] swap 208896 [ 56.263742][ T4310] swapcached 4096 [ 56.267443][ T4310] pgpgin 12069 [ 56.270919][ T4310] pgpgout 12068 [ 56.274492][ T4310] pgfault 14380 [ 56.277995][ T4310] pgmajfault 40 [ 56.281457][ T4310] inactive_anon 0 [ 56.285114][ T4310] active_anon 4096 [ 56.288963][ T4310] inactive_file 0 [ 56.292641][ T4310] active_file 0 [ 56.296236][ T4310] unevictable 0 [ 56.299701][ T4310] hierarchical_memory_limit 314572800 [ 56.305318][ T4310] hierarchical_memsw_limit 9223372036854771712 [ 56.311646][ T4310] total_cache 0 [ 56.315142][ T4310] total_rss 0 [ 56.318493][ T4310] total_shmem 0 [ 56.322045][ T4310] total_mapped_file 0 [ 56.326139][ T4310] total_dirty 0 [ 56.329848][ T4310] total_writeback 0 [ 56.333672][ T4310] total_workingset_refault_anon 48 [ 56.338939][ T4310] total_workingset_refault_file 0 [ 56.344166][ T4310] total_swap 208896 [ 56.348043][ T4310] total_swapcached 4096 [ 56.352222][ T4310] total_pgpgin 12069 [ 56.356251][ T4310] total_pgpgout 12068 [ 56.360236][ T4310] total_pgfault 14380 [ 56.364241][ T4310] total_pgmajfault 40 [ 56.368266][ T4310] total_inactive_anon 0 [ 56.372422][ T4310] total_active_anon 4096 [ 56.376691][ T4310] total_inactive_file 0 [ 56.380858][ T4310] total_active_file 0 [ 56.384901][ T4310] total_unevictable 0 [ 56.388974][ T4310] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.274,pid=4309,uid=0 [ 56.403662][ T4310] Memory cgroup out of memory: Killed process 4309 (syz.0.274) total-vm:94100kB, anon-rss:1136kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 56.555591][ T4343] ALSA: seq fatal error: cannot create timer (-19) [ 56.559200][ T4337] Cannot find add_set index 0 as target [ 56.581611][ T4310] syz.0.274 (4310) used greatest stack depth: 7448 bytes left [ 56.606031][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 56.606050][ T29] audit: type=1326 audit(1766943841.233:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4345 comm="syz.2.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35385f749 code=0x7ffc0000 [ 56.692526][ T29] audit: type=1326 audit(1766943841.233:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4345 comm="syz.2.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35385f749 code=0x7ffc0000 [ 56.715988][ T29] audit: type=1326 audit(1766943841.233:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4345 comm="syz.2.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd35385f749 code=0x7ffc0000 [ 56.739613][ T29] audit: type=1326 audit(1766943841.233:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4345 comm="syz.2.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35385f749 code=0x7ffc0000 [ 56.763322][ T29] audit: type=1326 audit(1766943841.233:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4345 comm="syz.2.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35385f749 code=0x7ffc0000 [ 56.787077][ T29] audit: type=1326 audit(1766943841.233:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4345 comm="syz.2.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fd35385f749 code=0x7ffc0000 [ 56.810735][ T29] audit: type=1326 audit(1766943841.233:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4345 comm="syz.2.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35385f749 code=0x7ffc0000 [ 56.812774][ T4360] 9p: Bad value for 'wfdno' [ 56.970560][ T4368] set_capacity_and_notify: 2 callbacks suppressed [ 56.970581][ T4368] loop2: detected capacity change from 0 to 128 [ 56.978109][ T29] audit: type=1326 audit(1766943841.603:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4371 comm="syz.1.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9582bf749 code=0x7ffc0000 [ 56.990949][ T4368] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 57.037475][ T29] audit: type=1326 audit(1766943841.643:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4371 comm="syz.1.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb9582bf749 code=0x7ffc0000 [ 57.060891][ T29] audit: type=1326 audit(1766943841.643:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4371 comm="syz.1.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9582bf749 code=0x7ffc0000 [ 57.172074][ T4388] __nla_validate_parse: 3 callbacks suppressed [ 57.172092][ T4388] netlink: 40 bytes leftover after parsing attributes in process `syz.1.302'. [ 57.259095][ T4411] lo speed is unknown, defaulting to 1000 [ 57.273796][ T4410] loop3: detected capacity change from 0 to 512 [ 57.281756][ T4410] ext4: Bad value for 'max_dir_size_kb' [ 57.302580][ T4408] loop1: detected capacity change from 0 to 8192 [ 57.434078][ T4418] 9p: Bad value for 'wfdno' [ 57.463052][ T4421] loop4: detected capacity change from 0 to 512 [ 57.496423][ T4421] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 57.513870][ T4421] EXT4-fs (loop4): 1 truncate cleaned up [ 57.536029][ T4421] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.551325][ T4426] loop3: detected capacity change from 0 to 512 [ 57.558317][ T4426] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 57.579247][ T4426] netlink: 44 bytes leftover after parsing attributes in process `gtp'. [ 57.582042][ T4411] syz.0.313 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 57.657321][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.770526][ T4431] loop4: detected capacity change from 0 to 2048 [ 57.790383][ T4433] loop0: detected capacity change from 0 to 164 [ 57.797687][ T4431] EXT4-fs: quotafile must be on filesystem root [ 57.808869][ T4431] 9pnet_fd: p9_fd_create_tcp (4431): problem connecting socket to 127.0.0.1 [ 57.822840][ T4433] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 57.842681][ T4439] FAULT_INJECTION: forcing a failure. [ 57.842681][ T4439] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 57.855173][ T4433] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 57.855948][ T4439] CPU: 0 UID: 0 PID: 4439 Comm: syz.1.323 Not tainted syzkaller #0 PREEMPT(voluntary) [ 57.856111][ T4439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 57.856154][ T4439] Call Trace: [ 57.856175][ T4439] [ 57.856205][ T4439] __dump_stack+0x1d/0x30 [ 57.856299][ T4439] dump_stack_lvl+0x95/0xd0 [ 57.856376][ T4439] dump_stack+0x15/0x1b [ 57.856523][ T4439] should_fail_ex+0x265/0x280 [ 57.856660][ T4439] should_fail+0xb/0x20 [ 57.856705][ T4439] should_fail_usercopy+0x1a/0x20 [ 57.856730][ T4439] _copy_from_user+0x1c/0xb0 [ 57.856783][ T4439] bpf_test_init+0xb9/0x140 [ 57.856894][ T4439] bpf_prog_test_run_xdp+0x305/0x970 [ 57.857058][ T4439] ? __rcu_read_unlock+0x4f/0x70 [ 57.857142][ T4439] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 57.857241][ T4439] bpf_prog_test_run+0x204/0x340 [ 57.857340][ T4439] __sys_bpf+0x4c0/0x7c0 [ 57.857534][ T4439] __x64_sys_bpf+0x41/0x50 [ 57.857642][ T4439] x64_sys_call+0x28e1/0x3000 [ 57.857736][ T4439] do_syscall_64+0xca/0x2b0 [ 57.857882][ T4439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.857949][ T4439] RIP: 0033:0x7fb9582bf749 [ 57.858010][ T4439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.858065][ T4439] RSP: 002b:00007fb956d1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 57.858139][ T4439] RAX: ffffffffffffffda RBX: 00007fb958515fa0 RCX: 00007fb9582bf749 [ 57.858213][ T4439] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 57.858255][ T4439] RBP: 00007fb956d1f090 R08: 0000000000000000 R09: 0000000000000000 [ 57.858297][ T4439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.858338][ T4439] R13: 00007fb958516038 R14: 00007fb958515fa0 R15: 00007fff9bf37f08 [ 57.858423][ T4439] [ 58.061632][ T4433] rock: directory entry would overflow storage [ 58.068072][ T4433] rock: sig=0x4f50, size=4, remaining=3 [ 58.073677][ T4433] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 58.155478][ T4456] netlink: 'syz.1.329': attribute type 16 has an invalid length. [ 58.163319][ T4456] netlink: 156 bytes leftover after parsing attributes in process `syz.1.329'. [ 58.272197][ T4465] loop1: detected capacity change from 0 to 128 [ 58.279365][ T4465] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 58.353457][ T4469] xt_TPROXY: Can be used only with -p tcp or -p udp [ 58.647652][ T4478] netlink: 28 bytes leftover after parsing attributes in process `syz.0.339'. [ 58.656729][ T4478] netlink: 28 bytes leftover after parsing attributes in process `syz.0.339'. [ 58.699455][ T4478] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 58.906586][ T4489] netlink: 'syz.0.343': attribute type 4 has an invalid length. [ 58.906773][ T4490] 9p: Bad value for 'wfdno' [ 58.947505][ T4489] batadv_slave_0: entered promiscuous mode [ 59.063812][ T4494] IPv6: Can't replace route, no match found [ 59.102355][ T4487] batadv_slave_0: left promiscuous mode [ 59.165101][ T4461] syz.3.331 (4461) used greatest stack depth: 7080 bytes left [ 59.393053][ T4517] 9p: Bad value for 'wfdno' [ 59.663748][ T4531] capability: warning: `syz.0.361' uses deprecated v2 capabilities in a way that may be insecure [ 59.737452][ T4506] Set syz1 is full, maxelem 65536 reached [ 59.762765][ T4531] loop0: detected capacity change from 0 to 512 [ 59.785746][ T4539] SELinux: Context system_u:object_r:sshd_exec_t:s0 is not valid (left unmapped). [ 59.796235][ T4531] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.816967][ T4542] xt_recent: hitcount (33554432) is larger than allowed maximum (65535) [ 59.835873][ T4531] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 59.853992][ T4531] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.869016][ T4549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.368'. [ 59.878357][ T4531] EXT4-fs error (device loop0): __ext4_remount:6789: comm syz.0.361: Abort forced by user [ 59.889942][ T4531] EXT4-fs (loop0): Remounting filesystem read-only [ 59.896635][ T4531] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000d40000. [ 59.916665][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 59.929397][ T4549] loop1: detected capacity change from 0 to 1024 [ 59.936259][ T4549] EXT4-fs: Ignoring removed nobh option [ 59.942332][ T4549] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 59.951979][ T4549] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 59.961914][ T4549] EXT4-fs error (device loop1): ext4_get_journal_inode:5849: comm syz.1.368: inode #4294967295: comm syz.1.368: iget: illegal inode # [ 59.976121][ T4549] EXT4-fs (loop1): no journal found [ 59.976728][ T4553] netlink: 7 bytes leftover after parsing attributes in process `syz.2.371'. [ 59.981356][ T4549] EXT4-fs (loop1): can't get journal size [ 59.996910][ T4553] netlink: 7 bytes leftover after parsing attributes in process `syz.2.371'. [ 60.011884][ T4549] EXT4-fs (loop1): failed to initialize system zone (-22) [ 60.019368][ T4549] EXT4-fs (loop1): mount failed [ 60.083337][ T4565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.375'. [ 60.225081][ T4591] lo speed is unknown, defaulting to 1000 [ 60.233820][ T4594] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.385: invalid block [ 60.239580][ T4596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.248761][ T4594] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.385: invalid indirect mapped block 4294967295 (level 1) [ 60.254657][ T4596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.271215][ T4594] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.385: invalid indirect mapped block 4294967295 (level 1) [ 60.291051][ T4594] EXT4-fs (loop0): 2 truncates cleaned up [ 60.297469][ T4594] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.311765][ T4594] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.360679][ T4602] pim6reg: entered allmulticast mode [ 60.391439][ T4606] EXT4-fs: Ignoring removed bh option [ 60.397842][ T4606] EXT4-fs: inline encryption not supported [ 60.404274][ T4606] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 60.496925][ T4602] pim6reg: left allmulticast mode [ 60.520289][ T4613] infiniband !yz!: set active [ 60.525089][ T4613] infiniband !yz!: added team_slave_0 [ 60.535563][ T4613] RDS/IB: !yz!: added [ 60.539910][ T4613] smc: adding ib device !yz! with port count 1 [ 60.546421][ T4613] smc: ib device !yz! port 1 has no pnetid [ 60.549569][ T4616] C: renamed from team_slave_0 (while UP) [ 60.560987][ T4616] netlink: 152 bytes leftover after parsing attributes in process `syz.3.392'. [ 60.572836][ T4616] netlink: 'syz.3.392': attribute type 13 has an invalid length. [ 60.683648][ T4616] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.691209][ T4616] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.722556][ T4626] 9p: Bad value for 'wfdno' [ 60.890267][ T4616] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.905275][ T4616] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.311898][ T52] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.322954][ T52] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.341736][ T52] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.454779][ T4641] 9p: Bad value for 'wfdno' [ 61.522967][ T52] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.600524][ T4621] Set syz1 is full, maxelem 65536 reached [ 61.609687][ T4643] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.401: corrupted in-inode xattr: invalid ea_ino [ 61.634857][ T4643] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.401: couldn't read orphan inode 15 (err -117) [ 61.654774][ T4643] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.670284][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 61.670301][ T29] audit: type=1400 audit(1766943846.295:1124): avc: denied { add_name } for pid=4642 comm="syz.2.401" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.697283][ T29] audit: type=1400 audit(1766943846.295:1125): avc: denied { create } for pid=4642 comm="syz.2.401" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 61.717901][ T29] audit: type=1400 audit(1766943846.305:1126): avc: denied { remove_name } for pid=4642 comm="syz.2.401" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.740718][ T29] audit: type=1400 audit(1766943846.305:1127): avc: denied { rename } for pid=4642 comm="syz.2.401" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 61.763393][ T29] audit: type=1400 audit(1766943846.305:1128): avc: denied { add_name } for pid=4642 comm="syz.2.401" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 61.790449][ T29] audit: type=1400 audit(1766943846.415:1129): avc: denied { write } for pid=4652 comm="syz.3.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.816623][ T29] audit: type=1326 audit(1766943846.445:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4655 comm="syz.0.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71bc2f749 code=0x7ffc0000 [ 61.860607][ T29] audit: type=1326 audit(1766943846.475:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4655 comm="syz.0.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc71bc2f749 code=0x7ffc0000 [ 61.884095][ T29] audit: type=1326 audit(1766943846.475:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4655 comm="syz.0.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71bc2f749 code=0x7ffc0000 [ 61.907631][ T29] audit: type=1326 audit(1766943846.475:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4655 comm="syz.0.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fc71bc2f749 code=0x7ffc0000 [ 61.964066][ T4663] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 61.978906][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.995938][ T4663] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.407: bg 0: block 255: padding at end of block bitmap is not set [ 62.015425][ T4663] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 62.024489][ T4663] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.407: invalid indirect mapped block 1 (level 1) [ 62.038008][ T4663] EXT4-fs (loop4): 1 truncate cleaned up [ 62.044257][ T4663] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.120961][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.141537][ T4685] tipc: Started in network mode [ 62.146675][ T4685] tipc: Node identity ac14140f, cluster identity 4711 [ 62.156236][ T4685] tipc: New replicast peer: 255.255.255.255 [ 62.162458][ T4685] tipc: Enabled bearer , priority 10 [ 62.193754][ T4687] netlink: 12 bytes leftover after parsing attributes in process `syz.2.416'. [ 62.375495][ T4703] netlink: 132 bytes leftover after parsing attributes in process `syz.0.423'. [ 62.386932][ T4703] netlink: 52 bytes leftover after parsing attributes in process `syz.0.423'. [ 62.499521][ T4716] lo speed is unknown, defaulting to 1000 [ 62.617968][ T4723] netlink: 24 bytes leftover after parsing attributes in process `syz.0.431'. [ 62.627228][ T4723] netlink: 212 bytes leftover after parsing attributes in process `syz.0.431'. [ 62.636558][ T4723] netlink: 32 bytes leftover after parsing attributes in process `syz.0.431'. [ 62.729554][ T4731] set_capacity_and_notify: 5 callbacks suppressed [ 62.729574][ T4731] loop0: detected capacity change from 0 to 128 [ 62.838539][ T1683] kworker/u8:10: attempt to access beyond end of device [ 62.838539][ T1683] loop0: rw=1, sector=145, nr_sectors = 8 limit=128 [ 62.852278][ T1683] kworker/u8:10: attempt to access beyond end of device [ 62.852278][ T1683] loop0: rw=1, sector=161, nr_sectors = 8 limit=128 [ 62.865971][ T1683] kworker/u8:10: attempt to access beyond end of device [ 62.865971][ T1683] loop0: rw=1, sector=177, nr_sectors = 8 limit=128 [ 62.880100][ T1683] kworker/u8:10: attempt to access beyond end of device [ 62.880100][ T1683] loop0: rw=1, sector=193, nr_sectors = 8 limit=128 [ 62.894261][ T1683] kworker/u8:10: attempt to access beyond end of device [ 62.894261][ T1683] loop0: rw=1, sector=209, nr_sectors = 8 limit=128 [ 62.909503][ T1683] kworker/u8:10: attempt to access beyond end of device [ 62.909503][ T1683] loop0: rw=1, sector=225, nr_sectors = 8 limit=128 [ 62.934137][ T1683] kworker/u8:10: attempt to access beyond end of device [ 62.934137][ T1683] loop0: rw=1, sector=241, nr_sectors = 8 limit=128 [ 62.979907][ T1683] kworker/u8:10: attempt to access beyond end of device [ 62.979907][ T1683] loop0: rw=1, sector=257, nr_sectors = 8 limit=128 [ 63.009334][ T4738] loop1: detected capacity change from 0 to 512 [ 63.018456][ T1683] kworker/u8:10: attempt to access beyond end of device [ 63.018456][ T1683] loop0: rw=1, sector=273, nr_sectors = 8 limit=128 [ 63.037066][ T4738] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.050252][ T1683] kworker/u8:10: attempt to access beyond end of device [ 63.050252][ T1683] loop0: rw=1, sector=289, nr_sectors = 8 limit=128 [ 63.064095][ T4738] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.370708][ T1039] tipc: Node number set to 2886997007 [ 63.438695][ T4748] loop2: detected capacity change from 0 to 1024 [ 63.447052][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.450673][ T4748] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.439: bad orphan inode 134217728 [ 63.467294][ T4748] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.551191][ T4752] loop1: detected capacity change from 0 to 128 [ 63.559480][ T4754] atomic_op ffff8881392fb128 conn xmit_atomic 0000000000000000 [ 63.586661][ T4752] EXT4-fs: Ignoring removed nobh option [ 63.673475][ T4754] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.680882][ T4754] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.732278][ T4754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.742929][ T4754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.852557][ T4752] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 63.884006][ T37] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.905123][ T37] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.914769][ T52] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.924332][ T4752] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 63.945446][ T52] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.963603][ T4759] FAULT_INJECTION: forcing a failure. [ 63.963603][ T4759] name failslab, interval 1, probability 0, space 0, times 1 [ 63.976357][ T4759] CPU: 0 UID: 0 PID: 4759 Comm: syz.4.442 Not tainted syzkaller #0 PREEMPT(voluntary) [ 63.976397][ T4759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 63.976412][ T4759] Call Trace: [ 63.976421][ T4759] [ 63.976431][ T4759] __dump_stack+0x1d/0x30 [ 63.976462][ T4759] dump_stack_lvl+0x95/0xd0 [ 63.976489][ T4759] dump_stack+0x15/0x1b [ 63.976512][ T4759] should_fail_ex+0x265/0x280 [ 63.976541][ T4759] should_failslab+0x8c/0xb0 [ 63.976570][ T4759] kmem_cache_alloc_noprof+0x69/0x4b0 [ 63.976597][ T4759] ? vm_area_alloc+0x2c/0xb0 [ 63.976621][ T4759] vm_area_alloc+0x2c/0xb0 [ 63.976643][ T4759] mmap_region+0xadf/0x1410 [ 63.976700][ T4759] do_mmap+0x9b3/0xbe0 [ 63.976735][ T4759] vm_mmap_pgoff+0x17a/0x2e0 [ 63.976760][ T4759] ksys_mmap_pgoff+0xc2/0x310 [ 63.976786][ T4759] ? __x64_sys_mmap+0x49/0x70 [ 63.976822][ T4759] x64_sys_call+0x16bb/0x3000 [ 63.976853][ T4759] do_syscall_64+0xca/0x2b0 [ 63.976900][ T4759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.976926][ T4759] RIP: 0033:0x7fc5685ff783 [ 63.976946][ T4759] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 63.976969][ T4759] RSP: 002b:00007fc56705ee18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 63.976994][ T4759] RAX: ffffffffffffffda RBX: 00000000000004f1 RCX: 00007fc5685ff783 [ 63.977009][ T4759] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 63.977022][ T4759] RBP: 00002000000012c2 R08: 00000000ffffffff R09: 0000000000000000 [ 63.977038][ T4759] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 63.977053][ T4759] R13: 00007fc56705eef0 R14: 00007fc56705eeb0 R15: 0000200000000380 [ 63.977073][ T4759] [ 64.176200][ T4761] netlink: 132 bytes leftover after parsing attributes in process `syz.4.443'. [ 64.212212][ T4763] netlink: 'syz.4.444': attribute type 7 has an invalid length. [ 64.279742][ T3322] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 64.290549][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.360769][ T4777] netlink: 12 bytes leftover after parsing attributes in process `syz.1.447'. [ 64.405489][ T4785] netlink: 132 bytes leftover after parsing attributes in process `syz.2.455'. [ 64.442207][ T4793] loop3: detected capacity change from 0 to 128 [ 64.464337][ T4793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.458'. [ 64.512816][ T4793] team0 (unregistering): Port device C removed [ 64.526004][ T4793] team0 (unregistering): Port device team_slave_1 removed [ 64.706293][ T4809] loop3: detected capacity change from 0 to 1024 [ 64.725561][ T4809] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.767055][ T4815] loop0: detected capacity change from 0 to 1024 [ 64.858482][ T4815] EXT4-fs: inline encryption not supported [ 64.864382][ T4815] EXT4-fs: Ignoring removed orlov option [ 64.905231][ T4815] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 64.927424][ T4815] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 64.942255][ T4815] System zones: 0-1, 3-12 [ 64.947233][ T4815] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.975243][ T4815] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 64.987785][ T4815] EXT4-fs (loop0): This should not happen!! Data will be lost [ 64.987785][ T4815] [ 64.997684][ T4815] EXT4-fs (loop0): Total free blocks count 0 [ 65.003797][ T4815] EXT4-fs (loop0): Free/Dirty block details [ 65.009831][ T4815] EXT4-fs (loop0): free_blocks=0 [ 65.014861][ T4815] EXT4-fs (loop0): dirty_blocks=0 [ 65.019950][ T4815] EXT4-fs (loop0): Block reservation details [ 65.025961][ T4815] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 65.091080][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.211032][ T4834] loop2: detected capacity change from 0 to 1024 [ 65.219086][ T4834] EXT4-fs: inline encryption not supported [ 65.224996][ T4834] EXT4-fs: Ignoring removed orlov option [ 65.232201][ T4834] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 65.332697][ T4802] FAULT_INJECTION: forcing a failure. [ 65.332697][ T4802] name fail_futex, interval 1, probability 0, space 0, times 1 [ 65.345740][ T4802] CPU: 0 UID: 0 PID: 4802 Comm: syz.4.462 Not tainted syzkaller #0 PREEMPT(voluntary) [ 65.345843][ T4802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 65.345856][ T4802] Call Trace: [ 65.345863][ T4802] [ 65.345871][ T4802] __dump_stack+0x1d/0x30 [ 65.345904][ T4802] dump_stack_lvl+0x95/0xd0 [ 65.345981][ T4802] dump_stack+0x15/0x1b [ 65.346008][ T4802] should_fail_ex+0x265/0x280 [ 65.346059][ T4802] should_fail+0xb/0x20 [ 65.346086][ T4802] get_futex_key+0x130/0xc00 [ 65.346120][ T4802] futex_wake+0x7d/0x360 [ 65.346156][ T4802] ? perf_lock_task_context+0x260/0x2d0 [ 65.346198][ T4802] do_futex+0x323/0x380 [ 65.346331][ T4802] mm_release+0xa1/0x190 [ 65.346351][ T4802] exit_mm_release+0x25/0x30 [ 65.346375][ T4802] exit_mm+0x38/0x180 [ 65.346400][ T4802] do_exit+0x3fb/0x1590 [ 65.346509][ T4802] do_group_exit+0xff/0x140 [ 65.346549][ T4802] ? get_signal+0xe50/0xf70 [ 65.346578][ T4802] get_signal+0xe58/0xf70 [ 65.346676][ T4802] arch_do_signal_or_restart+0x96/0x450 [ 65.346716][ T4802] exit_to_user_mode_loop+0x6a/0x740 [ 65.346745][ T4802] do_syscall_64+0x1e1/0x2b0 [ 65.346823][ T4802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.346853][ T4802] RIP: 0033:0x7fc5685ff749 [ 65.346870][ T4802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.346963][ T4802] RSP: 002b:00007fc56705f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 65.347041][ T4802] RAX: fffffffffffffffc RBX: 00007fc568855fa0 RCX: 00007fc5685ff749 [ 65.347056][ T4802] RDX: 000000000000001b RSI: 0000200000000200 RDI: 0000000000000004 [ 65.347068][ T4802] RBP: 00007fc56705f090 R08: 0000000000000000 R09: 0000000000000000 [ 65.347081][ T4802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.347129][ T4802] R13: 00007fc568856038 R14: 00007fc568855fa0 R15: 00007ffcaa57cf58 [ 65.347156][ T4802] [ 65.574065][ T4839] ALSA: seq fatal error: cannot create timer (-22) [ 65.581499][ T4834] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 65.591566][ T4834] System zones: 0-1, 3-12 [ 65.596657][ T4834] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.638375][ T4834] FAULT_INJECTION: forcing a failure. [ 65.638375][ T4834] name failslab, interval 1, probability 0, space 0, times 0 [ 65.651277][ T4834] CPU: 1 UID: 0 PID: 4834 Comm: syz.2.472 Not tainted syzkaller #0 PREEMPT(voluntary) [ 65.651317][ T4834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 65.651334][ T4834] Call Trace: [ 65.651342][ T4834] [ 65.651352][ T4834] __dump_stack+0x1d/0x30 [ 65.651383][ T4834] dump_stack_lvl+0x95/0xd0 [ 65.651405][ T4834] dump_stack+0x15/0x1b [ 65.651527][ T4834] should_fail_ex+0x265/0x280 [ 65.651642][ T4834] should_failslab+0x8c/0xb0 [ 65.651666][ T4834] __kmalloc_noprof+0xb9/0x5a0 [ 65.651695][ T4834] ? ext4_find_extent+0x16b/0x7a0 [ 65.651753][ T4834] ext4_find_extent+0x16b/0x7a0 [ 65.651790][ T4834] ext4_ext_map_blocks+0x11f/0x38a0 [ 65.651842][ T4834] ? __es_insert_extent+0xc27/0xee0 [ 65.651885][ T4834] ? ext4_fc_track_inode+0x76/0x530 [ 65.651970][ T4834] ext4_map_blocks+0x626/0xd20 [ 65.652010][ T4834] _ext4_get_block+0x10a/0x350 [ 65.652045][ T4834] ext4_get_block_unwritten+0x2a/0xb0 [ 65.652122][ T4834] ext4_block_write_begin+0x650/0xcf0 [ 65.652196][ T4834] ? __pfx_ext4_get_block_unwritten+0x10/0x10 [ 65.652234][ T4834] ? folio_mapping+0xb9/0xe0 [ 65.652257][ T4834] ext4_write_begin+0x636/0xe90 [ 65.652373][ T4834] ext4_da_write_begin+0x1f0/0x6b0 [ 65.652400][ T4834] ? inode_to_bdi+0x47/0xa0 [ 65.652419][ T4834] ? balance_dirty_pages_ratelimited_flags+0x40b/0x5e0 [ 65.652596][ T4834] generic_perform_write+0x184/0x490 [ 65.652631][ T4834] ext4_buffered_write_iter+0x1ee/0x3c0 [ 65.652742][ T4834] ? ext4_file_write_iter+0xfe/0xf60 [ 65.652779][ T4834] ext4_file_write_iter+0x387/0xf60 [ 65.652823][ T4834] ? kstrtouint_from_user+0x9f/0xf0 [ 65.652847][ T4834] ? 0xffffffff81000000 [ 65.652861][ T4834] ? __rcu_read_unlock+0x4f/0x70 [ 65.652937][ T4834] ? avc_policy_seqno+0x15/0x30 [ 65.652992][ T4834] ? selinux_file_permission+0x1e2/0x320 [ 65.653029][ T4834] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 65.653089][ T4834] vfs_write+0x52a/0x960 [ 65.653115][ T4834] __x64_sys_pwrite64+0xfd/0x150 [ 65.653139][ T4834] x64_sys_call+0x9f7/0x3000 [ 65.653182][ T4834] do_syscall_64+0xca/0x2b0 [ 65.653220][ T4834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.653243][ T4834] RIP: 0033:0x7fd35385f749 [ 65.653258][ T4834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.653309][ T4834] RSP: 002b:00007fd3522c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 65.653330][ T4834] RAX: ffffffffffffffda RBX: 00007fd353ab5fa0 RCX: 00007fd35385f749 [ 65.653343][ T4834] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000006 [ 65.653356][ T4834] RBP: 00007fd3522c7090 R08: 0000000000000000 R09: 0000000000000000 [ 65.653369][ T4834] R10: 000000000000fecc R11: 0000000000000246 R12: 0000000000000002 [ 65.653425][ T4834] R13: 00007fd353ab6038 R14: 00007fd353ab5fa0 R15: 00007ffd2ade0a18 [ 65.653446][ T4834] [ 65.654559][ T4834] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 5 with error 28 [ 65.951354][ T4834] EXT4-fs (loop2): This should not happen!! Data will be lost [ 65.951354][ T4834] [ 65.961047][ T4834] EXT4-fs (loop2): Total free blocks count 0 [ 65.967054][ T4834] EXT4-fs (loop2): Free/Dirty block details [ 65.973045][ T4834] EXT4-fs (loop2): free_blocks=0 [ 65.978018][ T4834] EXT4-fs (loop2): dirty_blocks=0 [ 65.983101][ T4834] EXT4-fs (loop2): Block reservation details [ 65.989132][ T4834] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 66.018281][ T3331] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.020459][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.115277][ T4857] netlink: 'syz.4.482': attribute type 10 has an invalid length. [ 66.123723][ T4857] veth1_vlan: left promiscuous mode [ 66.130043][ T4857] batman_adv: batadv0: Adding interface: veth1_vlan [ 66.136898][ T4857] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.163728][ T4857] batman_adv: batadv0: Interface activated: veth1_vlan [ 66.173022][ T4859] serio: Serial port ptm1 [ 66.230849][ T4871] loop0: detected capacity change from 0 to 1024 [ 66.237607][ T4871] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.251735][ T4871] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.332813][ T4859] serio: Serial port ptm1 [ 66.462989][ T4883] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 66.488888][ T4887] netlink: 'syz.4.493': attribute type 10 has an invalid length. [ 66.490181][ T4885] lo speed is unknown, defaulting to 1000 [ 66.498736][ T4887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.511520][ T4887] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 66.532020][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.561767][ T4887] IPv6: NLM_F_CREATE should be specified when creating new route [ 66.668461][ T4899] loop0: detected capacity change from 0 to 164 [ 66.682780][ T4899] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 66.698350][ T4903] ext4: Unknown parameter 'uid<00000000000000000000' [ 66.711433][ T4899] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 66.724383][ T4901] netlink: 'syz.1.499': attribute type 6 has an invalid length. [ 66.743660][ T4899] rock: directory entry would overflow storage [ 66.749890][ T4899] rock: sig=0x4f50, size=4, remaining=3 [ 66.755543][ T4899] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 67.018931][ T4924] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 67.030108][ T4924] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 67.056783][ T4924] JBD2: no valid journal superblock found [ 67.062629][ T4924] EXT4-fs (loop4): Could not load journal inode [ 67.072546][ T4924] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 67.082537][ T4933] 9p: Bad value for 'wfdno' [ 67.096761][ T29] kauditd_printk_skb: 244 callbacks suppressed [ 67.096776][ T29] audit: type=1401 audit(1766944619.746:1378): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 67.119905][ T29] audit: type=1326 audit(1766944619.746:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.3.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4e37f749 code=0x7ffc0000 [ 67.143405][ T29] audit: type=1326 audit(1766944619.746:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.3.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4e37f749 code=0x7ffc0000 [ 67.166926][ T29] audit: type=1326 audit(1766944619.746:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.3.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0a4e37f749 code=0x7ffc0000 [ 67.190432][ T29] audit: type=1326 audit(1766944619.746:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.3.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4e37f749 code=0x7ffc0000 [ 67.213839][ T29] audit: type=1326 audit(1766944619.755:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.3.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f0a4e3815dc code=0x7ffc0000 [ 67.238382][ T29] audit: type=1326 audit(1766944619.755:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.3.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0a4e381514 code=0x7ffc0000 [ 67.261821][ T29] audit: type=1326 audit(1766944619.755:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.3.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0a4e381514 code=0x7ffc0000 [ 67.285133][ T29] audit: type=1326 audit(1766944619.755:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.3.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4e37f749 code=0x7ffc0000 [ 67.308600][ T29] audit: type=1326 audit(1766944619.755:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.3.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0a4e37f749 code=0x7ffc0000 [ 67.378490][ T4937] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 67.387475][ T4937] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 67.403798][ T4937] rock: directory entry would overflow storage [ 67.410185][ T4937] rock: sig=0x4f50, size=4, remaining=3 [ 67.415802][ T4937] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 67.598001][ T4919] Set syz1 is full, maxelem 65536 reached [ 67.656173][ T4948] lo speed is unknown, defaulting to 1000 [ 67.845865][ T4946] __nla_validate_parse: 10 callbacks suppressed [ 67.845886][ T4946] netlink: 60 bytes leftover after parsing attributes in process `syz.1.514'. [ 67.861172][ T4946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.514'. [ 67.870194][ T4946] netlink: 60 bytes leftover after parsing attributes in process `syz.1.514'. [ 67.908396][ T4960] netlink: 'syz.4.518': attribute type 16 has an invalid length. [ 67.916191][ T4960] netlink: 156 bytes leftover after parsing attributes in process `syz.4.518'. [ 67.927856][ T4946] netlink: 60 bytes leftover after parsing attributes in process `syz.1.514'. [ 67.936969][ T4946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.514'. [ 67.946223][ T4946] netlink: 60 bytes leftover after parsing attributes in process `syz.1.514'. [ 68.019473][ T4946] netlink: 60 bytes leftover after parsing attributes in process `syz.1.514'. [ 68.028537][ T4946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.514'. [ 68.037544][ T4946] netlink: 60 bytes leftover after parsing attributes in process `syz.1.514'. [ 68.082086][ T4965] set_capacity_and_notify: 3 callbacks suppressed [ 68.082106][ T4965] loop4: detected capacity change from 0 to 128 [ 68.128130][ T4965] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 68.217474][ T4971] xt_hashlimit: max too large, truncated to 1048576 [ 68.323832][ T4965] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.438349][ T3323] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.629730][ T4993] netlink: 'syz.1.529': attribute type 16 has an invalid length. [ 68.705639][ T5004] loop1: detected capacity change from 0 to 164 [ 68.713313][ T5004] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 68.739468][ T5006] capability: warning: `syz.1.534' uses 32-bit capabilities (legacy support in use) [ 68.789359][ T5014] atomic_op ffff88811b278d28 conn xmit_atomic 0000000000000000 [ 68.813004][ T5014] tipc: Resetting bearer [ 68.829722][ T5014] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.837119][ T5014] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.847540][ T5018] netlink: 'syz.3.540': attribute type 16 has an invalid length. [ 68.886930][ T5014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.897294][ T5014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.927102][ T5014] veth2: left promiscuous mode [ 68.931944][ T5014] veth2: left allmulticast mode [ 68.937029][ T5014] veth4: left promiscuous mode [ 68.941860][ T5014] veth4: left allmulticast mode [ 68.947679][ T3512] lo speed is unknown, defaulting to 1000 [ 68.953702][ T3512] syz2: Port: 1 Link DOWN [ 68.958604][ T5023] netlink: 'syz.3.541': attribute type 3 has an invalid length. [ 68.966852][ T1602] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.986910][ T1602] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.002069][ T1602] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.014912][ T1602] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.037927][ T5030] loop1: detected capacity change from 0 to 128 [ 69.048720][ T5030] FAT-fs (loop1): Directory bread(block 32) failed [ 69.055812][ T5030] FAT-fs (loop1): Directory bread(block 33) failed [ 69.063248][ T5030] FAT-fs (loop1): Directory bread(block 34) failed [ 69.070063][ T5030] FAT-fs (loop1): Directory bread(block 35) failed [ 69.077126][ T5030] FAT-fs (loop1): Directory bread(block 36) failed [ 69.083993][ T5030] FAT-fs (loop1): Directory bread(block 37) failed [ 69.090684][ T5030] FAT-fs (loop1): Directory bread(block 38) failed [ 69.097353][ T5030] FAT-fs (loop1): Directory bread(block 39) failed [ 69.104153][ T5030] FAT-fs (loop1): Directory bread(block 40) failed [ 69.110878][ T5030] FAT-fs (loop1): Directory bread(block 41) failed [ 69.142627][ T5028] lo speed is unknown, defaulting to 1000 [ 69.323253][ T5037] bio_check_eod: 40 callbacks suppressed [ 69.323272][ T5037] syz.1.544: attempt to access beyond end of device [ 69.323272][ T5037] loop1: rw=8388608, sector=4108, nr_sectors = 4 limit=128 [ 69.363213][ T5037] syz.1.544: attempt to access beyond end of device [ 69.363213][ T5037] loop1: rw=8388608, sector=4600, nr_sectors = 4 limit=128 [ 69.649866][ T5053] netlink: 'syz.1.551': attribute type 16 has an invalid length. [ 69.742070][ T5055] loop4: detected capacity change from 0 to 2048 [ 69.760046][ T5055] EXT4-fs: Ignoring removed oldalloc option [ 69.766136][ T5055] EXT4-fs: Ignoring removed nobh option [ 69.771801][ T5055] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.783937][ T5064] loop3: detected capacity change from 0 to 164 [ 69.793686][ T5055] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.793720][ T5064] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 69.795548][ T5064] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 69.809335][ T5067] SET target dimension over the limit! [ 69.830413][ T5064] rock: directory entry would overflow storage [ 69.836620][ T5064] rock: sig=0x4f50, size=4, remaining=3 [ 69.842286][ T5064] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 69.850801][ T5070] netlink: 'syz.1.555': attribute type 4 has an invalid length. [ 69.853211][ T5055] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.553: bg 0: block 234: padding at end of block bitmap is not set [ 69.873005][ T5055] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 69.885404][ T5055] EXT4-fs (loop4): This should not happen!! Data will be lost [ 69.885404][ T5055] [ 69.906814][ T37] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1025 with max blocks 1 with error 28 [ 69.919334][ T37] EXT4-fs (loop4): This should not happen!! Data will be lost [ 69.919334][ T37] [ 69.929259][ T37] EXT4-fs (loop4): Total free blocks count 0 [ 69.935520][ T37] EXT4-fs (loop4): Free/Dirty block details [ 69.941643][ T37] EXT4-fs (loop4): free_blocks=0 [ 69.946723][ T37] EXT4-fs (loop4): dirty_blocks=16 [ 69.951907][ T37] EXT4-fs (loop4): Block reservation details [ 70.017721][ T5079] 9p: Bad value for 'wfdno' [ 70.097544][ T5088] netlink: 'syz.1.565': attribute type 16 has an invalid length. [ 70.118932][ T5085] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 70.126300][ T5085] vhci_hcd vhci_hcd.2: invalid port number 96 [ 70.132538][ T5085] vhci_hcd vhci_hcd.2: default hub control req: 030b vfffa i0060 l0 [ 70.253644][ T5102] loop3: detected capacity change from 0 to 164 [ 70.264476][ T5102] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 70.273606][ T5102] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 70.282750][ T5102] rock: directory entry would overflow storage [ 70.288966][ T5102] rock: sig=0x4f50, size=4, remaining=3 [ 70.294664][ T5102] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 70.699221][ T5133] program syz.1.583 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.727115][ T5133] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 70.760031][ T5129] veth0_to_team: entered promiscuous mode [ 71.035742][ T5144] veth2: entered promiscuous mode [ 71.040901][ T5144] veth2: entered allmulticast mode [ 71.050177][ T5148] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 71.120914][ T5151] loop2: detected capacity change from 0 to 1024 [ 71.127555][ T5155] loop3: detected capacity change from 0 to 512 [ 71.128266][ T5151] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.141491][ T5155] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 71.155435][ T5155] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.594: invalid indirect mapped block 4294967295 (level 0) [ 71.169850][ T5155] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.594: invalid indirect mapped block 4294967295 (level 1) [ 71.184485][ T5155] EXT4-fs (loop3): 1 orphan inode deleted [ 71.190306][ T5155] EXT4-fs (loop3): 1 truncate cleaned up [ 71.212584][ T5155] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.226921][ T5155] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 71.256159][ T5151] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.310985][ T3331] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.502680][ T5175] FAULT_INJECTION: forcing a failure. [ 71.502680][ T5175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.515846][ T5175] CPU: 0 UID: 0 PID: 5175 Comm: syz.0.599 Not tainted syzkaller #0 PREEMPT(voluntary) [ 71.515872][ T5175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 71.515888][ T5175] Call Trace: [ 71.515894][ T5175] [ 71.515901][ T5175] __dump_stack+0x1d/0x30 [ 71.515933][ T5175] dump_stack_lvl+0x95/0xd0 [ 71.515953][ T5175] dump_stack+0x15/0x1b [ 71.516021][ T5175] should_fail_ex+0x265/0x280 [ 71.516043][ T5175] should_fail+0xb/0x20 [ 71.516139][ T5175] should_fail_usercopy+0x1a/0x20 [ 71.516162][ T5175] copy_to_user_nofault+0x7f/0x120 [ 71.516338][ T5175] bpf_probe_write_user+0x83/0xc0 [ 71.516362][ T5175] bpf_prog_8f5dadf009f59a0a+0x44/0x4c [ 71.516379][ T5175] bpf_trace_run4+0x117/0x1e0 [ 71.516436][ T5175] __traceiter_sched_switch+0x3f/0x60 [ 71.516456][ T5175] __schedule+0xb0f/0xcd0 [ 71.516501][ T5175] ? avc_has_perm_noaudit+0xab/0x130 [ 71.516522][ T5175] __cond_resched+0x31/0x60 [ 71.516543][ T5175] down_write+0x20/0xc0 [ 71.516638][ T5175] key_link+0x78/0x3d0 [ 71.516663][ T5175] ? selinux_key_permission+0x161/0x190 [ 71.516689][ T5175] ? security_key_permission+0x27/0x80 [ 71.516765][ T5175] ? key_task_permission+0x2ac/0x2c0 [ 71.516850][ T5175] request_key_and_link+0x1b2/0xd70 [ 71.516871][ T5175] ? ktime_get_real_seconds+0x15/0x30 [ 71.516899][ T5175] ? __pfx_key_default_cmp+0x10/0x10 [ 71.516939][ T5175] ? __pfx_keyring_search_iterator+0x10/0x10 [ 71.516967][ T5175] __se_sys_request_key+0x1df/0x290 [ 71.517148][ T5175] ? fput+0x8f/0xc0 [ 71.517174][ T5175] __x64_sys_request_key+0x55/0x70 [ 71.517275][ T5175] x64_sys_call+0x2321/0x3000 [ 71.517337][ T5175] do_syscall_64+0xca/0x2b0 [ 71.517393][ T5175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.517484][ T5175] RIP: 0033:0x7fc71bc2f749 [ 71.517517][ T5175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.517534][ T5175] RSP: 002b:00007fc71a68f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 71.517552][ T5175] RAX: ffffffffffffffda RBX: 00007fc71be85fa0 RCX: 00007fc71bc2f749 [ 71.517563][ T5175] RDX: 0000000000000000 RSI: 0000200000001e80 RDI: 0000200000000000 [ 71.517575][ T5175] RBP: 00007fc71a68f090 R08: 0000000000000000 R09: 0000000000000000 [ 71.517600][ T5175] R10: 0000000020c4cf15 R11: 0000000000000246 R12: 0000000000000001 [ 71.517611][ T5175] R13: 00007fc71be86038 R14: 00007fc71be85fa0 R15: 00007fff579a7678 [ 71.517629][ T5175] [ 71.777556][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.949685][ T5186] veth8: entered promiscuous mode [ 71.954831][ T5186] veth8: entered allmulticast mode [ 72.139691][ T5170] lo speed is unknown, defaulting to 1000 [ 72.183682][ T5193] loop2: detected capacity change from 0 to 512 [ 72.252253][ T5195] pim6reg: entered allmulticast mode [ 72.268886][ T5197] validate_nla: 2 callbacks suppressed [ 72.268902][ T5197] netlink: 'syz.0.607': attribute type 12 has an invalid length. [ 72.282216][ T5197] netlink: 'syz.0.607': attribute type 29 has an invalid length. [ 72.289974][ T5197] netlink: 'syz.0.607': attribute type 1 has an invalid length. [ 72.297699][ T5197] netlink: 'syz.0.607': attribute type 2 has an invalid length. [ 72.309600][ T5173] Set syz1 is full, maxelem 65536 reached [ 72.443485][ T5211] loop1: detected capacity change from 0 to 164 [ 72.460445][ T5211] rock: directory entry would overflow storage [ 72.466679][ T5211] rock: sig=0x4543, size=28, remaining=18 [ 72.486514][ T5213] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 72.995405][ T29] kauditd_printk_skb: 2311 callbacks suppressed [ 72.995425][ T29] audit: type=1400 audit(1766944625.275:3696): avc: denied { read } for pid=5224 comm="syz.1.616" dev="sockfs" ino=10940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.995939][ T5225] 9p: Bad value for 'rfdno' [ 73.084776][ T29] audit: type=1400 audit(1766944625.359:3697): avc: denied { read } for pid=5224 comm="syz.1.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 73.159407][ T29] audit: type=1400 audit(1766944625.425:3698): avc: denied { bind } for pid=5224 comm="syz.1.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 73.194238][ T5226] batman_adv: batadv0: Adding interface: dummy0 [ 73.200580][ T5226] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.225982][ T5226] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 73.315701][ T5231] xt_hashlimit: max too large, truncated to 1048576 [ 73.343426][ T29] audit: type=1326 audit(1766944625.593:3699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.3.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4e37f749 code=0x7ffc0000 [ 73.366945][ T29] audit: type=1326 audit(1766944625.593:3700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.3.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4e37f749 code=0x7ffc0000 [ 73.376785][ T5233] netlink: 'syz.3.618': attribute type 9 has an invalid length. [ 73.398067][ T5233] netlink: 'syz.3.618': attribute type 7 has an invalid length. [ 73.405791][ T5233] netlink: 'syz.3.618': attribute type 8 has an invalid length. [ 73.435410][ T5233] __nla_validate_parse: 28 callbacks suppressed [ 73.435430][ T5233] netlink: 660 bytes leftover after parsing attributes in process `syz.3.618'. [ 73.475232][ T5235] netlink: 'syz.1.619': attribute type 10 has an invalid length. [ 73.483421][ T5235] netlink: 40 bytes leftover after parsing attributes in process `syz.1.619'. [ 73.485793][ T29] audit: type=1326 audit(1766944625.593:3701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.3.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f0a4e37f749 code=0x7ffc0000 [ 73.516127][ T29] audit: type=1326 audit(1766944625.593:3702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.3.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4e37f749 code=0x7ffc0000 [ 73.539795][ T29] audit: type=1326 audit(1766944625.593:3703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.3.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4e37f749 code=0x7ffc0000 [ 73.563391][ T29] audit: type=1326 audit(1766944625.631:3704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.3.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a4e37f749 code=0x7ffc0000 [ 73.586881][ T29] audit: type=1326 audit(1766944625.631:3705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.3.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4e37f749 code=0x7ffc0000 [ 73.639395][ T5235] team0: Port device geneve1 added [ 73.650117][ T2940] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.678956][ T2940] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.700444][ T2940] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.732171][ T2940] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.740558][ T5241] netlink: 16 bytes leftover after parsing attributes in process `syz.1.621'. [ 73.803841][ T5233] infiniband sy: set down [ 73.808336][ T5233] infiniband sy: added bond_slave_0 [ 73.937607][ T5233] RDS/IB: sy: added [ 73.941621][ T5233] smc: adding ib device sy with port count 1 [ 73.947796][ T5233] smc: ib device sy port 1 has no pnetid [ 73.979754][ T5244] loop1: detected capacity change from 0 to 1024 [ 74.144173][ T5244] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 74.214914][ T5244] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.287776][ T5239] Set syz1 is full, maxelem 65536 reached [ 74.390110][ T5254] loop2: detected capacity change from 0 to 164 [ 74.421573][ T5254] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 74.447595][ T5254] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 74.483398][ T5254] rock: directory entry would overflow storage [ 74.489632][ T5254] rock: sig=0x4f50, size=4, remaining=3 [ 74.495275][ T5254] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 74.638102][ T5274] loop2: detected capacity change from 0 to 164 [ 74.702552][ T5278] loop3: detected capacity change from 0 to 2048 [ 74.758561][ T5278] loop3: p1 < > p4 [ 74.763377][ T5278] loop3: p4 size 8388608 extends beyond EOD, truncated [ 74.843936][ T5284] loop2: detected capacity change from 0 to 1024 [ 74.896944][ T5244] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 3: comm syz.1.622: lblock 3 mapped to illegal pblock 3 (length 3) [ 74.911467][ T5244] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 74.923917][ T5244] EXT4-fs (loop1): This should not happen!! Data will be lost [ 74.923917][ T5244] [ 74.951642][ T52] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 74.967252][ T52] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 74.979977][ T52] EXT4-fs (loop1): This should not happen!! Data will be lost [ 74.979977][ T52] [ 74.995647][ T5292] netlink: 'syz.0.640': attribute type 1 has an invalid length. [ 75.003356][ T5292] netlink: 'syz.0.640': attribute type 4 has an invalid length. [ 75.011228][ T5292] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.640'. [ 75.025072][ T52] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 112: padding at end of block bitmap is not set [ 75.025166][ T5292] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.640'. [ 75.048980][ T52] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2060 with max blocks 2048 with error 117 [ 75.061873][ T52] EXT4-fs (loop1): This should not happen!! Data will be lost [ 75.061873][ T52] [ 75.072621][ T5296] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1073 sclass=netlink_audit_socket pid=5296 comm=syz.4.642 [ 75.085223][ T5296] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5296 comm=syz.4.642 [ 75.160492][ T5302] process 'syz.2.643' launched '/dev/fd/5' with NULL argv: empty string added [ 75.182274][ T5296] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5296 comm=syz.4.642 [ 75.329684][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 75.372042][ T5319] lo speed is unknown, defaulting to 1000 [ 75.437350][ T5336] bridge0: port 3(batadv1) entered blocking state [ 75.443921][ T5336] bridge0: port 3(batadv1) entered disabled state [ 75.450523][ T5336] batadv1: entered allmulticast mode [ 75.456633][ T5336] batadv1: entered promiscuous mode [ 75.467266][ T5339] loop4: detected capacity change from 0 to 164 [ 75.481316][ T5339] rock: directory entry would overflow storage [ 75.487636][ T5339] rock: sig=0x4543, size=28, remaining=18 [ 75.705822][ T5364] netlink: 132 bytes leftover after parsing attributes in process `syz.0.665'. [ 75.777315][ T5362] lo speed is unknown, defaulting to 1000 [ 75.929916][ T5371] Invalid option length (5293) for dns_resolver key [ 75.954925][ T5374] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 76.015659][ T52] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 76.024929][ T52] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 76.192422][ T5379] loop0: detected capacity change from 0 to 512 [ 76.349490][ T5379] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.364619][ T5381] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 76.379924][ T5379] ext4 filesystem being mounted at /159/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.383745][ T5381] block device autoloading is deprecated and will be removed. [ 76.494928][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.545258][ T5392] netlink: 16 bytes leftover after parsing attributes in process `syz.0.674'. [ 76.554317][ T5392] netlink: 16 bytes leftover after parsing attributes in process `syz.0.674'. [ 76.563221][ T5392] tipc: MTU too low for tipc bearer [ 76.580090][ T5392] loop0: detected capacity change from 0 to 512 [ 76.588888][ T5392] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 76.611760][ T5394] loop1: detected capacity change from 0 to 1024 [ 76.622530][ T5394] EXT4-fs: Ignoring removed bh option [ 76.658045][ T5396] loop2: detected capacity change from 0 to 512 [ 76.666185][ T5392] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #17: comm syz.0.674: inode has both inline data and extents flags [ 76.679158][ T5396] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.676: error while reading EA inode 32 err=-116 [ 76.681344][ T5394] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 76.695530][ T5396] EXT4-fs (loop2): Remounting filesystem read-only [ 76.708156][ T5392] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.674: couldn't read orphan inode 17 (err -117) [ 76.722154][ T5396] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 76.735252][ T5394] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.748281][ T5392] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.769536][ T5396] EXT4-fs (loop2): 1 orphan inode deleted [ 76.777799][ T5394] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 3: comm syz.1.675: lblock 3 mapped to illegal pblock 3 (length 3) [ 76.779323][ T5396] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.805001][ T5394] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 76.817413][ T5394] EXT4-fs (loop1): This should not happen!! Data will be lost [ 76.817413][ T5394] [ 76.832981][ T5392] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.674: bg 0: block 65: padding at end of block bitmap is not set [ 76.847556][ T5392] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.674: Failed to acquire dquot type 0 [ 76.879314][ T37] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 76.907211][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.916247][ T37] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 76.916328][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.937734][ T37] EXT4-fs (loop1): This should not happen!! Data will be lost [ 76.937734][ T37] [ 76.954755][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 77.028567][ T5409] veth6: entered promiscuous mode [ 77.033705][ T5409] veth6: entered allmulticast mode [ 77.069970][ T5423] netlink: 28 bytes leftover after parsing attributes in process `syz.2.686'. [ 77.090826][ T5419] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.103878][ T5419] ext4 filesystem being mounted at /140/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.246842][ T5439] FAULT_INJECTION: forcing a failure. [ 77.246842][ T5439] name failslab, interval 1, probability 0, space 0, times 0 [ 77.259652][ T5439] CPU: 1 UID: 0 PID: 5439 Comm: syz.0.691 Not tainted syzkaller #0 PREEMPT(voluntary) [ 77.259687][ T5439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 77.259703][ T5439] Call Trace: [ 77.259772][ T5439] [ 77.259782][ T5439] __dump_stack+0x1d/0x30 [ 77.259816][ T5439] dump_stack_lvl+0x95/0xd0 [ 77.259846][ T5439] dump_stack+0x15/0x1b [ 77.259871][ T5439] should_fail_ex+0x265/0x280 [ 77.259896][ T5439] should_failslab+0x8c/0xb0 [ 77.259968][ T5439] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 77.259995][ T5439] ? __alloc_skb+0x2ff/0x4b0 [ 77.260023][ T5439] __alloc_skb+0x2ff/0x4b0 [ 77.260046][ T5439] ? __alloc_skb+0x228/0x4b0 [ 77.260115][ T5439] sock_omalloc+0x81/0xf0 [ 77.260161][ T5439] msg_zerocopy_realloc+0x84/0x420 [ 77.260199][ T5439] ? xa_load+0xb1/0xe0 [ 77.260285][ T5439] __ip_append_data+0x676/0x2440 [ 77.260321][ T5439] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 77.260347][ T5439] ? __rcu_read_unlock+0x4f/0x70 [ 77.260449][ T5439] ? avc_has_perm+0xf7/0x180 [ 77.260478][ T5439] ip_append_data+0xd6/0x130 [ 77.260514][ T5439] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 77.260542][ T5439] udp_sendmsg+0x36e/0x13c0 [ 77.260624][ T5439] ? __rcu_read_unlock+0x4f/0x70 [ 77.260651][ T5439] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 77.260689][ T5439] ? avc_has_perm+0xf7/0x180 [ 77.260739][ T5439] ? __pfx_udp_sendmsg+0x10/0x10 [ 77.260772][ T5439] inet_sendmsg+0xac/0xd0 [ 77.260803][ T5439] __sock_sendmsg+0x102/0x180 [ 77.260831][ T5439] __sys_sendto+0x268/0x330 [ 77.260899][ T5439] __x64_sys_sendto+0x76/0x90 [ 77.260930][ T5439] x64_sys_call+0x29a7/0x3000 [ 77.260992][ T5439] do_syscall_64+0xca/0x2b0 [ 77.261039][ T5439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.261118][ T5439] RIP: 0033:0x7fc71bc2f749 [ 77.261139][ T5439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.261176][ T5439] RSP: 002b:00007fc71a68f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 77.261200][ T5439] RAX: ffffffffffffffda RBX: 00007fc71be85fa0 RCX: 00007fc71bc2f749 [ 77.261212][ T5439] RDX: 000000000000fdbe RSI: 0000200000000100 RDI: 0000000000000005 [ 77.261228][ T5439] RBP: 00007fc71a68f090 R08: 0000000000000000 R09: 0000000011000a00 [ 77.261248][ T5439] R10: 0000000004004084 R11: 0000000000000246 R12: 0000000000000001 [ 77.261271][ T5439] R13: 00007fc71be86038 R14: 00007fc71be85fa0 R15: 00007fff579a7678 [ 77.261333][ T5439] [ 77.556661][ T5445] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 77.651851][ T5452] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.665963][ T5452] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.742857][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.760389][ T5456] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.807807][ T5447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.818998][ T5447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.906101][ T5456] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.924216][ T5472] rock: directory entry would overflow storage [ 77.930458][ T5472] rock: sig=0x4543, size=28, remaining=18 [ 77.980980][ T5456] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.036576][ T5456] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.092153][ T420] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.105308][ T420] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.118634][ T420] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.133159][ T420] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.263530][ T3331] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.702756][ T5519] Set syz1 is full, maxelem 65536 reached [ 78.753360][ T29] kauditd_printk_skb: 245 callbacks suppressed [ 78.753380][ T29] audit: type=1400 audit(1766944630.654:3949): avc: denied { ioctl } for pid=5562 comm="syz.4.707" path="socket:[11733]" dev="sockfs" ino=11733 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 78.845123][ T5574] validate_nla: 4 callbacks suppressed [ 78.845138][ T5574] netlink: 'syz.0.709': attribute type 12 has an invalid length. [ 78.877156][ T5567] infiniband syz1: set down [ 78.881724][ T5567] infiniband syz1: added veth0_to_bond [ 78.922818][ T29] audit: type=1326 audit(1766944630.748:3950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5573 comm="syz.0.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71bc2f749 code=0x7ffc0000 [ 78.946345][ T29] audit: type=1326 audit(1766944630.748:3951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5573 comm="syz.0.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71bc2f749 code=0x7ffc0000 [ 78.969883][ T29] audit: type=1326 audit(1766944630.748:3952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5573 comm="syz.0.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc71bc2f749 code=0x7ffc0000 [ 78.993232][ T29] audit: type=1326 audit(1766944630.748:3953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5573 comm="syz.0.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71bc2f749 code=0x7ffc0000 [ 79.016617][ T29] audit: type=1326 audit(1766944630.748:3954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5573 comm="syz.0.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71bc2f749 code=0x7ffc0000 [ 79.039977][ T29] audit: type=1326 audit(1766944630.748:3955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5573 comm="syz.0.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc71bc2f749 code=0x7ffc0000 [ 79.063507][ T29] audit: type=1326 audit(1766944630.748:3956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5573 comm="syz.0.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71bc2f749 code=0x7ffc0000 [ 79.067454][ T5567] RDS/IB: syz1: added [ 79.086900][ T29] audit: type=1326 audit(1766944630.748:3957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5573 comm="syz.0.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc71bc2f749 code=0x7ffc0000 [ 79.092511][ T5567] smc: adding ib device syz1 with port count 1 [ 79.114255][ T29] audit: type=1326 audit(1766944630.748:3958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5573 comm="syz.0.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71bc2f749 code=0x7ffc0000 [ 79.150141][ T5567] smc: ib device syz1 port 1 has no pnetid [ 79.666610][ T5635] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5635 comm=syz.3.714 [ 79.902432][ T5641] netlink: 32 bytes leftover after parsing attributes in process `syz.4.719'. [ 80.311145][ T5650] lo speed is unknown, defaulting to 1000 [ 80.525594][ T5670] netlink: 7 bytes leftover after parsing attributes in process `syz.1.732'. [ 80.535261][ T5670] netlink: 7 bytes leftover after parsing attributes in process `syz.1.732'. [ 80.563894][ T5674] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 80.614166][ T5678] set_capacity_and_notify: 3 callbacks suppressed [ 80.614189][ T5678] loop2: detected capacity change from 0 to 512 [ 80.650651][ T5678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.677101][ T5678] ext4 filesystem being mounted at /136/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.695895][ T5686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.739'. [ 80.723352][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.802642][ T5692] loop1: detected capacity change from 0 to 1024 [ 80.811579][ T5694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.743'. [ 80.822549][ T5692] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 80.835118][ T5692] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.052267][ T5716] loop2: detected capacity change from 0 to 512 [ 81.076579][ T5716] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.089430][ T5716] ext4 filesystem being mounted at /142/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.120868][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.224020][ T5726] syzkaller1: entered promiscuous mode [ 81.229798][ T5726] syzkaller1: entered allmulticast mode [ 81.387282][ T5692] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 3: comm syz.1.742: lblock 3 mapped to illegal pblock 3 (length 3) [ 81.401543][ T5692] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 81.413882][ T5692] EXT4-fs (loop1): This should not happen!! Data will be lost [ 81.413882][ T5692] [ 81.442515][ T5733] lo speed is unknown, defaulting to 1000 [ 81.508788][ T37] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 81.523593][ T37] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 81.536051][ T37] EXT4-fs (loop1): This should not happen!! Data will be lost [ 81.536051][ T37] [ 81.556230][ T420] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 112: padding at end of block bitmap is not set [ 81.571105][ T420] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2060 with max blocks 2048 with error 117 [ 81.583963][ T420] EXT4-fs (loop1): This should not happen!! Data will be lost [ 81.583963][ T420] [ 81.675359][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 81.762782][ T5742] lo speed is unknown, defaulting to 1000 [ 82.062505][ T5755] loop4: detected capacity change from 0 to 128 [ 82.084287][ T5755] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 82.119914][ T5760] loop3: detected capacity change from 0 to 164 [ 82.128588][ T5760] rock: directory entry would overflow storage [ 82.134935][ T5760] rock: sig=0x4543, size=28, remaining=18 [ 82.177707][ T5766] 9p: Bad value for 'wfdno' [ 82.253098][ T5773] loop3: detected capacity change from 0 to 512 [ 82.260280][ T5773] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 82.269822][ T5773] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.773: bg 0: block 255: padding at end of block bitmap is not set [ 82.284515][ T5773] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 82.293578][ T5773] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.773: invalid indirect mapped block 1 (level 1) [ 82.309602][ T5773] EXT4-fs (loop3): 1 truncate cleaned up [ 82.321936][ T5773] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.381780][ T3331] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.427935][ T5778] loop1: detected capacity change from 0 to 8192 [ 82.442111][ T5784] tipc: Enabling of bearer rejected, already enabled [ 82.553845][ T5779] loop2: detected capacity change from 0 to 32768 [ 82.578634][ T5794] netlink: 'syz.3.779': attribute type 1 has an invalid length. [ 82.593382][ T5779] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 82.599929][ T5779] loop2: p1 start 460800 is beyond EOD, truncated [ 82.606527][ T5779] loop2: p2 size 83886080 extends beyond EOD, truncated [ 82.615794][ T5779] loop2: p5 start 460800 is beyond EOD, truncated [ 82.622303][ T5779] loop2: p6 size 83886080 extends beyond EOD, truncated [ 82.638550][ T5799] loop3: detected capacity change from 0 to 256 [ 82.683538][ T5799] FAT-fs (loop3): Directory bread(block 64) failed [ 82.690277][ T5799] FAT-fs (loop3): Directory bread(block 65) failed [ 82.697132][ T5799] FAT-fs (loop3): Directory bread(block 66) failed [ 82.704282][ T5799] FAT-fs (loop3): Directory bread(block 67) failed [ 82.711131][ T5799] FAT-fs (loop3): Directory bread(block 68) failed [ 82.717895][ T5799] FAT-fs (loop3): Directory bread(block 69) failed [ 82.724705][ T5799] FAT-fs (loop3): Directory bread(block 70) failed [ 82.731330][ T5799] FAT-fs (loop3): Directory bread(block 71) failed [ 82.738018][ T5799] FAT-fs (loop3): Directory bread(block 72) failed [ 82.744705][ T5799] FAT-fs (loop3): Directory bread(block 73) failed [ 82.757659][ T5798] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 82.766249][ T5798] FAT-fs (loop3): Filesystem has been set read-only [ 82.783427][ T5798] syz.3.780: attempt to access beyond end of device [ 82.783427][ T5798] loop3: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 82.797670][ T5798] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 82.806284][ T5798] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 82.815493][ T5798] syz.3.780: attempt to access beyond end of device [ 82.815493][ T5798] loop3: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 83.064317][ T5850] lo speed is unknown, defaulting to 1000 [ 83.542659][ T5888] lo speed is unknown, defaulting to 1000 [ 83.707391][ T5916] netlink: 256 bytes leftover after parsing attributes in process `syz.0.801'. [ 83.782233][ T5922] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 83.934502][ T5936] netlink: 132 bytes leftover after parsing attributes in process `syz.0.805'. [ 83.964771][ T5940] veth2: entered promiscuous mode [ 83.969949][ T5940] veth2: entered allmulticast mode [ 84.069607][ T5951] batadv_slave_1: entered promiscuous mode [ 84.077368][ T5950] batadv_slave_1: left promiscuous mode [ 84.134063][ T5957] 9p: Bad value for 'wfdno' [ 84.151477][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 84.151563][ T29] audit: type=1401 audit(1766944635.706:4114): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 84.327831][ T5984] loop2: detected capacity change from 0 to 256 [ 84.475833][ T6002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.815'. [ 84.485320][ T6002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.815'. [ 84.538282][ T6005] netlink: 24 bytes leftover after parsing attributes in process `syz.4.816'. [ 84.574012][ T6005] macvtap1: entered promiscuous mode [ 84.579450][ T6005] macvtap1: entered allmulticast mode [ 84.633418][ T3748] IPVS: starting estimator thread 0... [ 84.705038][ T29] audit: type=1326 audit(1766944636.230:4115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.4.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5685ff749 code=0x7ffc0000 [ 84.728638][ T29] audit: type=1326 audit(1766944636.230:4116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.4.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc5685ff749 code=0x7ffc0000 [ 84.752108][ T29] audit: type=1326 audit(1766944636.230:4117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.4.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5685ff749 code=0x7ffc0000 [ 84.775958][ T29] audit: type=1326 audit(1766944636.230:4118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.4.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc5685ff749 code=0x7ffc0000 [ 84.799574][ T29] audit: type=1326 audit(1766944636.230:4119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.4.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5685ff749 code=0x7ffc0000 [ 84.806362][ T6015] IPVS: using max 2352 ests per chain, 117600 per kthread [ 84.823096][ T29] audit: type=1326 audit(1766944636.230:4120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.4.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fc5685ff749 code=0x7ffc0000 [ 84.853578][ T29] audit: type=1326 audit(1766944636.230:4121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.4.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5685ff749 code=0x7ffc0000 [ 84.880577][ T29] audit: type=1326 audit(1766944636.230:4122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.4.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc5685ff749 code=0x7ffc0000 [ 84.904145][ T29] audit: type=1326 audit(1766944636.230:4123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.4.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5685ff749 code=0x7ffc0000 [ 85.016045][ T6033] bridge0: port 3(batadv1) entered blocking state [ 85.022712][ T6033] bridge0: port 3(batadv1) entered disabled state [ 85.030358][ T6033] batadv1: entered allmulticast mode [ 85.036292][ T6033] batadv1: entered promiscuous mode [ 85.163571][ T6051] bond0: (slave batadv0): Releasing backup interface [ 85.173005][ T6051] bridge_slave_0: left allmulticast mode [ 85.178726][ T6051] bridge_slave_0: left promiscuous mode [ 85.184543][ T6051] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.193474][ T6051] bridge_slave_1: left allmulticast mode [ 85.199214][ T6051] bridge_slave_1: left promiscuous mode [ 85.205064][ T6051] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.212735][ T6053] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.833: EA inode hash validation failed [ 85.224215][ T6062] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 85.233890][ T6064] netlink: 'syz.4.832': attribute type 10 has an invalid length. [ 85.234142][ T6053] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.833: corrupted inode contents [ 85.256439][ T6053] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.833: mark_inode_dirty error [ 85.266683][ T6051] bond0: (slave bond_slave_0): Releasing backup interface [ 85.276113][ T6053] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.833: corrupted inode contents [ 85.288933][ T6051] bond0: (slave bond_slave_1): Releasing backup interface [ 85.298710][ T6053] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3000: inode #15: comm syz.0.833: mark_inode_dirty error [ 85.311292][ T6051] team0: Port device team_slave_0 removed [ 85.318738][ T6053] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3003: inode #15: comm syz.0.833: mark inode dirty (error -117) [ 85.330263][ T6051] team0: Port device team_slave_1 removed [ 85.337508][ T6053] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 85.342691][ T6051] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.347228][ T6053] EXT4-fs (loop0): 1 orphan inode deleted [ 85.360098][ T6053] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.373074][ T6051] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.374848][ T6053] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.390073][ T6051] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 85.437095][ T6069] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000 [ 85.470284][ T6076] __nla_validate_parse: 11 callbacks suppressed [ 85.470301][ T6076] netlink: 132 bytes leftover after parsing attributes in process `syz.0.839'. [ 85.511148][ T6079] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.525705][ T6079] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.553833][ T52] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 85.563106][ T52] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 85.572680][ T6079] ext4 filesystem being mounted at /188/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.595991][ T6089] ipt_ECN: cannot use operation on non-tcp rule [ 85.611922][ T6079] tipc: Enabled bearer , priority 1 [ 85.620549][ T6079] netlink: 40 bytes leftover after parsing attributes in process `syz.0.840'. [ 85.632556][ T6079] tipc: Enabled bearer , priority 10 [ 85.654637][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.712971][ T6106] EXT4-fs: inline encryption not supported [ 85.718942][ T6106] EXT4-fs: Ignoring removed orlov option [ 85.724253][ T6103] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.725778][ T6106] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 85.747535][ T6103] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.760943][ T6106] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 85.776936][ T6112] msdos: Unknown parameter 'fluqh' [ 85.778335][ T6106] System zones: 0-1, 3-12 [ 85.787056][ T6106] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.794946][ T6112] netlink: 16 bytes leftover after parsing attributes in process `syz.3.848'. [ 85.821734][ T6106] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 85.834395][ T6106] EXT4-fs (loop1): This should not happen!! Data will be lost [ 85.834395][ T6106] [ 85.844195][ T6106] EXT4-fs (loop1): Total free blocks count 0 [ 85.850279][ T6106] EXT4-fs (loop1): Free/Dirty block details [ 85.856257][ T6106] EXT4-fs (loop1): free_blocks=0 [ 85.861241][ T6106] EXT4-fs (loop1): dirty_blocks=0 [ 85.866400][ T6106] EXT4-fs (loop1): Block reservation details [ 85.872423][ T6106] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 85.880728][ T6113] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 16: comm syz.0.844: path /189/file0: bad entry in directory: directory entry overrun - offset=108, inode=646161, rec_len=4096, size=4096 fake=0 [ 85.881814][ T6112] netlink: 204 bytes leftover after parsing attributes in process `syz.3.848'. [ 85.907203][ T6113] EXT4-fs (loop0): Remounting filesystem read-only [ 85.937738][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.969509][ T6112] set_capacity_and_notify: 5 callbacks suppressed [ 85.969538][ T6112] loop3: detected capacity change from 0 to 256 [ 85.986709][ T6112] vfat: Unknown parameter 'L' [ 86.003670][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.103096][ T6128] loop0: detected capacity change from 0 to 512 [ 86.110439][ T6128] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 86.121460][ T6128] EXT4-fs (loop0): 1 truncate cleaned up [ 86.127625][ T6128] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.162360][ T6125] SELinux: policydb version 1650553717 does not match my version range 15-35 [ 86.176929][ T6125] SELinux: failed to load policy [ 86.182254][ T6125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.849'. [ 86.193450][ T6125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.204657][ T6132] ext4: Unknown parameter '01777777777777777777777Xcv:Q' [ 86.229547][ T6125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.237458][ T6125] batman_adv: batadv0: Removing interface: dummy0 [ 86.256930][ T6134] loop3: detected capacity change from 0 to 512 [ 86.264454][ T6134] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 86.284878][ T6134] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.297683][ T6134] ext4 filesystem being mounted at /161/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.377014][ T6144] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 86.407195][ T6144] netlink: 'syz.4.859': attribute type 10 has an invalid length. [ 86.415178][ T6144] netlink: 40 bytes leftover after parsing attributes in process `syz.4.859'. [ 86.424947][ T6146] lo speed is unknown, defaulting to 1000 [ 86.501587][ T6153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.863'. [ 86.540042][ T6155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.864'. [ 86.562947][ T3331] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.572730][ T6155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.864'. [ 86.581706][ T6155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.864'. [ 86.639069][ T6161] loop3: detected capacity change from 0 to 512 [ 86.646674][ T6161] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 86.658743][ T6161] EXT4-fs (loop3): 1 truncate cleaned up [ 86.664916][ T6161] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.746448][ T6166] wireguard0: entered promiscuous mode [ 86.752020][ T6166] wireguard0: entered allmulticast mode [ 86.821113][ T6173] loop1: detected capacity change from 0 to 764 [ 86.829152][ T6173] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 86.951128][ T3331] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.054846][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.138468][ T6192] lo speed is unknown, defaulting to 1000 [ 87.434915][ T6192] loop1: detected capacity change from 0 to 1024 [ 87.443637][ T6192] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 87.478589][ T6192] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 87.486934][ T6192] EXT4-fs (loop1): orphan cleanup on readonly fs [ 87.493689][ T6192] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.874: Freeing blocks not in datazone - block = 0, count = 4096 [ 87.507293][ T6192] EXT4-fs (loop1): 1 orphan inode deleted [ 87.514438][ T6192] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 87.601351][ T6206] loop3: detected capacity change from 0 to 2048 [ 87.656963][ T6206] loop3: unable to read partition table [ 87.662741][ T6206] loop3: partition table beyond EOD, truncated [ 87.668999][ T6206] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 87.768900][ T6209] veth4: entered promiscuous mode [ 87.768919][ T6209] veth4: entered allmulticast mode [ 87.858421][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.871068][ T6219] loop4: detected capacity change from 0 to 164 [ 87.886748][ T6219] rock: directory entry would overflow storage [ 87.892999][ T6219] rock: sig=0x4543, size=28, remaining=18 [ 87.998643][ T6232] netlink: 'syz.1.892': attribute type 1 has an invalid length. [ 88.092078][ T6245] ip6t_rpfilter: unknown options [ 88.106798][ T6232] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.197699][ T6242] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.207884][ T6242] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 88.219270][ T6242] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 88.416136][ T6273] loop0: detected capacity change from 0 to 164 [ 88.423742][ T6273] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 88.432678][ T6273] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 88.443523][ T6273] rock: directory entry would overflow storage [ 88.449879][ T6273] rock: sig=0x4f50, size=4, remaining=3 [ 88.455547][ T6273] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 88.468865][ T6274] loop3: detected capacity change from 0 to 164 [ 88.483708][ T6274] rock: directory entry would overflow storage [ 88.489932][ T6274] rock: sig=0x4543, size=28, remaining=18 [ 88.499574][ T6267] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 88.514508][ T6267] EXT4-fs (loop2): 1 truncate cleaned up [ 88.522833][ T6267] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.612196][ T6286] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 88.625732][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.649658][ T6286] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 88.666594][ T6286] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.911: bg 0: block 248: padding at end of block bitmap is not set [ 88.681454][ T6286] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.911: Failed to acquire dquot type 1 [ 88.695167][ T6286] EXT4-fs (loop3): 1 truncate cleaned up [ 88.709454][ T6286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 88.734969][ T6286] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 88.759789][ T3331] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 88.807941][ T6302] xt_TPROXY: Can be used only with -p tcp or -p udp [ 88.986082][ T6313] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 89.009614][ T6311] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.036050][ T6311] ext4 filesystem being mounted at /180/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.081715][ T6318] loop3: p3 p4 < > [ 89.085751][ T6318] loop3: p3 start 11362048 is beyond EOD, truncated [ 89.405670][ T6328] EXT4-fs: Ignoring removed oldalloc option [ 89.411722][ T6328] EXT4-fs: Ignoring removed nobh option [ 89.417441][ T6328] EXT4-fs: Ignoring removed mblk_io_submit option [ 89.435774][ T6328] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.455012][ T6328] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.925: bg 0: block 234: padding at end of block bitmap is not set [ 89.469787][ T6328] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 89.482303][ T6328] EXT4-fs (loop0): This should not happen!! Data will be lost [ 89.482303][ T6328] [ 89.504253][ T37] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1025 with max blocks 1 with error 28 [ 89.516963][ T37] EXT4-fs (loop0): This should not happen!! Data will be lost [ 89.516963][ T37] [ 89.526681][ T37] EXT4-fs (loop0): Total free blocks count 0 [ 89.532773][ T37] EXT4-fs (loop0): Free/Dirty block details [ 89.538704][ T37] EXT4-fs (loop0): free_blocks=0 [ 89.543734][ T37] EXT4-fs (loop0): dirty_blocks=16 [ 89.548896][ T37] EXT4-fs (loop0): Block reservation details [ 89.559387][ T6334] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 89.569044][ T6334] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 89.577932][ T6334] rock: directory entry would overflow storage [ 89.584252][ T6334] rock: sig=0x4f50, size=4, remaining=3 [ 89.589863][ T6334] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 89.593274][ T3427] kernel read not supported for file bpf-prog (pid: 3427 comm: kworker/0:5) [ 89.693126][ T29] kauditd_printk_skb: 408 callbacks suppressed [ 89.693145][ T29] audit: type=1400 audit(1766944640.898:4530): avc: denied { override_creds } for pid=6346 comm="syz.2.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 89.737066][ T6350] ================================================================== [ 89.745411][ T6350] BUG: KCSAN: data-race in sg_common_write / sg_finish_rem_req [ 89.752993][ T6350] [ 89.755340][ T6350] write to 0xffff88810b2b331d of 1 bytes by task 3512 on cpu 1: [ 89.762991][ T6350] sg_finish_rem_req+0x11f/0x270 [ 89.767952][ T6350] sg_rq_end_io_usercontext+0x38/0x1c0 [ 89.773439][ T6350] process_scheduled_works+0x4ce/0x9d0 [ 89.778938][ T6350] worker_thread+0x582/0x770 [ 89.783560][ T6350] kthread+0x489/0x510 [ 89.787677][ T6350] ret_from_fork+0x149/0x290 [ 89.792323][ T6350] ret_from_fork_asm+0x1a/0x30 [ 89.797123][ T6350] [ 89.799462][ T6350] read to 0xffff88810b2b331d of 1 bytes by task 6350 on cpu 0: [ 89.807071][ T6350] sg_common_write+0x94e/0xc30 [ 89.811857][ T6350] sg_new_write+0x7e4/0x8c0 [ 89.816397][ T6350] sg_ioctl+0xb81/0x1360 [ 89.820668][ T6350] __se_sys_ioctl+0xce/0x140 [ 89.825380][ T6350] __x64_sys_ioctl+0x43/0x50 [ 89.830008][ T6350] x64_sys_call+0x14b0/0x3000 [ 89.834711][ T6350] do_syscall_64+0xca/0x2b0 [ 89.839256][ T6350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.845180][ T6350] [ 89.847527][ T6350] value changed: 0x01 -> 0x00 [ 89.852212][ T6350] [ 89.854557][ T6350] Reported by Kernel Concurrency Sanitizer on: [ 89.860726][ T6350] CPU: 0 UID: 0 PID: 6350 Comm: syz.2.933 Not tainted syzkaller #0 PREEMPT(voluntary) [ 89.870470][ T6350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 89.880568][ T6350] ================================================================== [ 89.929514][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.