last executing test programs: 2m24.595280873s ago: executing program 3 (id=174): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000007000000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) close(r1) (fail_nth: 11) 2m24.144796822s ago: executing program 3 (id=179): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a85}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180000", @ANYRES8=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r5}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014400000000c0a010300000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001eaf71354b00000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x1}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x18) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000400)='kmem_cache_free\x00', r7}, 0x18) 2m23.70878871s ago: executing program 3 (id=184): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xa8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 2m22.498315313s ago: executing program 3 (id=189): r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x2e, 0x0, &(0x7f00000064c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0700000004000000080000000100"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES16=r3, @ANYRESHEX=r3, @ANYRES16=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x18) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0)={[{@delalloc}, {@nombcache}, {@barrier}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x8}}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001600)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x20) pwrite64(r5, &(0x7f0000000140)='2', 0x1, 0x8080c61) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r6) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) socket$kcm(0x29, 0x3, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETS(r9, 0x5402, &(0x7f00000001c0)={0xd, 0x7, 0x7, 0x4, 0x9, "dcb17e9b7cffdf7d544ae49703289518ab3a69"}) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 2m21.885217476s ago: executing program 3 (id=193): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r0, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) 2m21.609211991s ago: executing program 3 (id=195): r0 = inotify_init() r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x400008bf) write$binfmt_elf32(r1, 0x0, 0x69) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1, 0x4, 0x1, 0x1}, 0x50) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000440)=""/247, 0x26) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) 2m21.557267141s ago: executing program 32 (id=195): r0 = inotify_init() r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x400008bf) write$binfmt_elf32(r1, 0x0, 0x69) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1, 0x4, 0x1, 0x1}, 0x50) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000440)=""/247, 0x26) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) 3.092850971s ago: executing program 2 (id=1535): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) close_range(r2, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r4}, 0x18) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080)) 2.882288704s ago: executing program 2 (id=1539): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) readv(r1, &(0x7f0000000640)=[{&(0x7f0000000400)=""/244, 0xf4}], 0x1) r2 = open$dir(&(0x7f0000000180)='./file1\x00', 0x800, 0x24) open_tree(r2, &(0x7f00000002c0)='./file1\x00', 0x80001) 2.62290022s ago: executing program 2 (id=1545): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)) timer_delete(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0xfffffffffffffe3c, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000040000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000940)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1.346180044s ago: executing program 4 (id=1557): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x106, 0x8}}, 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) unshare(0x22020600) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x8, r4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r5 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendto$inet6(r5, &(0x7f0000000680)="4f42a02f1592e7d4faf230331def98666c8a995c2e98dfa616b4669424d9553227a7cac868d4ea093ed1caf9b597893bcabb4a978711a954a897a7d4b8387614c82768443205b5ee5346b2792b3bc1a74da297b3b03ea0a0151a2fe8d46c292d3558830a262f01e1f950a90f155ec8b1a64068cb44bff6c8a0ee913c5a86599b5e", 0x81, 0x4000081, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x2000000000000050, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x40000}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) waitid(0x0, 0x0, 0x0, 0x100000e, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x1, 0xfffffffd}]}, 0x8) r9 = syz_pidfd_open(r4, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r9, 0x5000940f, &(0x7f0000000a00)={{r7}, "ebac6d92d3ca2864d366579c728d8275e17cb7c23e88f4ea29fd399a186c22f8a1f0f8a0e66e57ff55184ed73ee40bf24375b3132c19705f32eb900f3b24a5ab78d1585ea2b5bcab5ff6111b029b7c2dac8143c6a551ff5f04c6e3b6e0da1af753306034d5f899028c91903b38a9be2fa54a2f524095076a616e6f5b55a9a48178f2aa141021d1e4f64c991792c5841faf1bd06fe0a81ca261eb9bd0fde8f91bd1aa9894ba1a68ac7411a713430fc6735be4295f09f558212e2b14f6f8e6ef0451127a806904b5d341cf54dfcc80026390f831f2ca83fbf4f26010a6e69db7b88f1a18fe1851301b4cf93f86b3040884a0611b950297b758985e84f43a5badc26175b70d4a4c8982abe16a56effb6180e776ee242de13549fc5f46ebeedba71e0c98307c9b279541fe28c4130430259ba20767898203fd25b9fcc6abcc44bddfed4a414854efe1b158fe966e7586036d9e075a414aa8a64d3f43a465fbe89cc2f4238ee987cf849416a892a5e6e5b98485492bbb23eb1d9bcbe5c2ef166fce9cabe76a8a5a8bdf3633168d767e7d5de28442a7cc50fedd1a94c8dac73b06667a5fe922858702cc7d52175c8d1ab52ce784205245534c6ba499a3b0d6f6546d4009785cca4bb09e3768f170e2205a608f2ddec9974e243b1accb3c10bfbea80c5b5488d79b9dbeb0537a8b6969c52839fa5979255192b18b9c88ef7baa3e84015788cbd08761e63caffdd4596b39e247bc61de937fbe325cdae83c8730885967a4222980ac9dcf3722db2b4dfacc5e183cb73f6d9f9db24b5299c00db588b70e31ef29c0da3f1ddb8316a80afe0398d36f2f5a69fc4b152cc508f7459cdf1a2ee190c9a2d0b720d7ab396e017f27e5d7d3eabe6cd717bbaae915043ab1108dd5a757dea112a7bea72b41abd00d4226112125ffa97a3caeb1121c326c89b2329d6b4dca049820caa3c10a5e4dd63b73313fca2b0c8d78662d14436cd3c6735ad8018e455283eed4ff83629dee87fb584128a38ca9d60521a00a6d84dc58cc4dcd981d7f2d9b91f09326765cb54d07f092fe186b76d22d67e4cf0d379b37e966e554a3e2b4d7082d78ccb70a13bc9695b9cf9a1ecc6fdce4092f613d33e7ca3a3768d419e523bb0b6669c026394f40be927727314628dc5d1e5d23d599a7d647d719ee3710e2b2af670af6823b3e0611010453a889ea55a497616b55fba0a8efcefaca902f1ec4d34feaebbe564542f728a650830c70e40bc09dafa82cef29a9c6a166e2881f506bcb8d7566447dc37a38062dd076c1527a0a46e7bc68a4592024f5d53a84e86857b4410b8319b4e9e90c7dd0e1eeaf2295ae980b40be0c5ff7a27368b8c37985c1b797ad7dcb42220ba32c9439f79135b891bdef819f5584d5230faf5c325293f884d17334ecb43e9a6601b29a343d896399dfa412d065a37fa6919030b3e70ee53d1634d609369aa7df2769d847f99db2670307b46988f37a96414566c37769c05a98366f6f399dd32d05457d8ec7777ca82195e0e5e7f75d19e7000edce3d78ca098e88d3f6ed0103230831388b3943e3bffea723c79b2076889c0242febd082448535c4b13592f09c30d95e0fed4111ae281772feee9eba9b4acfd12faa401b3eabb8eda2e93d41e67dd0c48225c19bce555d731bcd34c1ac273feeaaa5df3e0d10eef2aa6c3d3c9f44403f36cffd852ccd48411ff8df18da9d3783b295dffa30d7f60cbfd5e237db9d31c59fdb2520aadc9bd82eebc007b2fb0b355c9f5fece3e359bf9ed17ba5f648ff48c67ef1551aa113dfceaee6cbf5b3dbc72265082d24a43df1f91be8e4af70bc9cce3c5d2c09807318ac7c9162a95d7ccc5c26de8d45c990f64c54e144a349ddff4cd8a919cab81d12c82b875b7b4a84730910c80a932e8e5b2dfde89a5b224286e0fa4bcc5bbdc073c528c5b564e61337ea90d11d0ae2fa0e2ed30f6bc6f2a89c940ccfe9b1a5c279ac7b6fca59705abe81baf8a77b7e5e50c24fad3131c27c160a0bf75e78528152957921145bc4b4f1a744c53896b4e798b111de45c5ffcfb9d9005a669f7876ea93435c0c2759d47f4dfb933d70188b9e9652eff7cf2b1043f4a6a1a087e08012fbe98fb8d9428fb9e4e046f0be1032e055f256080dd0cb7206af196a23cb9fb253f7f190abdb8374312ec6b59616243d94b897e339d695ba7654faa6b53fe4ebfe49039b581829701643fe14b3a6fe3e6ace88348f4d97745d91df604b255b204bd13a044442960041d0c12deb4dfd09c6f6b5ed5d2dd4b8a0928461da37315eb0c17d9f2beb63066defef88d29093d9ba6fd094eccebe6b317843482012a76397224d95bd1c597c040dcd2a71e81521a33a5e8ccf9eedd985f927a0d9115f4438b9acb71831c158f9e198a7e750efc0b165896344dee84db54b83012881271402632936df9623ff95a992aefbc54d28102633f83cf0b7d46c8f0d3165978b8a8d351d8b429f0c4fee44b1d04c40ce230c392b6636ba0701dfa67c05560b935ead8ab3f23f4dcf7627d5dd268b12be4a2e912490d4ec0aba343eb3f372ee67342673d16280715a4850464f3b8ebb4ca4c1d070ef2899edb95b4b64a8e15f7f2d2a2ac63b2f8a82e413bd8eb35394e4fa01b777305d439b6c8f4335ebdf0f2dbba8bdb2bb9128f5072db8bfb90608392a6aa9a62d0fe8882132cb1be90945b930464bc289f2698b1a8200059901c108e3b87866e0ef8b1b9644ad1787e29f0aed5d3a95c9d74401f6fa4e03cacf676c7d322143f7e96ab8b24345ade465b7d4b4e9772aee596816c2de86689de4229f45e711dee0397832b7fc65834454ce3ee9a37fe08d6887af399f553678bfc3e84dca3a664f4dcea5065be5a32a32cd9363ac3d4d773aebbbbe56a4ef12ca3da444707bc089f20ef79886724c7c9ef1fd518d8a9d4beab96b58a5c77c340c0e8cfd97167b909d90c55eef01f6d71c0ede388e41995a21b843c2a9a23c22c9243fc52f7032d40bfafc89933d17a28ef35738e20358130bd0b7dc9b55f8dc02033cb2743090fc9236e36b5c186f74e8faf427737e350e353958ae7530efcf80078413fece8051c799dde8ac617040ce6ce144c4f27cbb23858b5d7715db02d5df98c1d41317e2f7ac0cb2897ebfee01f0c62d4ebfb06fe34c61269222ce7084f9818f14ca1c07bd07d3484b21de88a09b86266824b79c0c82f436b5b99ff53c79ffe223f20cb02c56613532c6f61f9a0f08110766e17e711f17aef7e48d8a8b128e54c925a0925613396109d9a607a3f141a6b799b2a02025fe9d3219214841dc2a0d87c172da4c928dd7e7b308e1cb97890a32b491be2f99e0a393a0e23317ea31ea61b9a7c01438ca237925a7822e6c82dd5fd3726211db71246f605392c54d3d85da16943d0f168afc0b5f497bba6937532645a3117dec8f33b19b53fe20259fb607f46d6d9822f2b3e9e9e9c12eff34ae3ec509bfdc5a7de1962b24c3e5a356f30c3c22c9fecef21a90bd01ba01f39b417f96ceb91beca33a7b4927c5f63b2b20c6e4dcc0487b6da3f1ae0bd7c63e29d7dae7441e613812555850bad049a98f4e9edf059717182948e3dd41728437574d1cb9cbd4043e5d6b833681b576f68c4a324b6ecad939c15af495d8e3425fd767cbf413fa0a6cd617f762679a3a334738b89689ec1852ddfb02c55d760670c5cd8d785eeb51fbdc1d2d1e2bb8a5a3e5534498f3df7cd4a03c8936db14f0bb4dde17bf20e2abcfe710c8583871cfc2a0f359206d74710963f7a6abecf294b2aecb0067528ee67a6f30c38783557a3766de79a1e630b2334b7e35a8626ffd0e6e2df7914e9f15ebe59c56260cb2f55ec4542e719915aad8e4012ebddda3b74cec48f6645f3eaab69b8d60998903bd3ea61f72109350ffff580f42dabe10b0ea529eaf0bf311f9a119e2e4d17d9bef5a4228a65b391ba84f10ceb6c8a1893d3afe44311b8a391ca275a06eced017522cf92b5034acc38010f0e6da331483b63d13caf9f2bb42174a50638db3166decc3deec21e80bc101ddb51139c5eb1825b059bf5d6022967f1c9993b492ca89eff662f9cf8a287b31c3211ee4233dc5c7bdc4ecba361774fe8483a82116c166377f001703c84186f5e520e0ea7e6fec731179689d1bc08d9a6fa6a600c7e42ecebec0268c7331af11744246e3dc694eecf34199930b5015daa2e6ef2f17db8a5a3ee8dfd7af5152c7d01f5eb20db82b1f783c143790e3aae12bfd4371725092f0f4c2b65f9a916e4525b296ecaa05436cf491dc552532014d7f3309aaa6c8de3650906a831c699b34ec6503ccce92ac9b140880eda01b05661630b6e9eb9c872c942dfa8063e588f80ebd165d6078d20afd6e78b22efdb8b0334b6c2001f90abee16deabfd6b303bd84ee4211999aec9c16abb9c375f67cf924330d71f49634b1a4fef88e630749aea8657d60f6155eb147338fb39b6e3cb99f2ea44565e8b4bc43f7f7382900e0bebfef784e0a0a13b60ee6dc0b17b25be3cbfd185352089a1fba4a31ff2707d8e0686aa96b6e4deaaf948c4d9edb6e939afd817f651f851ef2c246863286eadcfa8adf7015fa3ccc45980d008ef8820d22bef0d7b6fa8f77fdc07b9534951554b45513a3ef5e64e5559fbfc32db21987d8b456762e7fff8f8ad3c30b7e4b65e43488ed68a21d06c5eca47e97fbd1ab8f772a88bb39c98197fb5f7826f286b5b5ee4a275f74b78f43d418dd246edf92803f839c1dafe6642600b10ce099458fedb808329e46ee22b9f511801ce6b2f8acb4d767d3239f257a36de4f4214fc819ebc19e2e9d6137dd36fbff9300418ac13ec1448c44c311d677bba6293c4505eee5daa8608e769e9aef1d01ef1f9f36b183b1f237d3b5467f6e794fb18b406d8b429a8ed36de3e6a3e5a7969a7a221bd76f579fc1f4c25e83de1128e5bd7c7569066cc0c6592a2d55cccb7af00bc4a0bd9617e230086e750644b45bf10c8d07f87f243afeb5616d6f299672908b0f512afc45afb246bd38d33a425c63c465f513afc2afb3a4287cedc72cc7d5616de5130972b680c807d9760f4c57446475d34635f86794ac8e1e491003773afc7e62196d1eb9da8c1c54a804896cf2ccf003dd7b5f22a88c7b539d12aa29d6205cb56cd5ceb01dd350fcc690a858c1329404e2d9919db24a1b63bc09e4f5f2cf22001e7b4fcd0ccd562aaaa679dba7993f9a1a422a93aa624c5032854da3324b2c2190f11a916a61ae074a8805fbaded8acf7289d19513506d640f40d834ebe8eba73d1d86ca66f3b74732be35961f80aa96b6c1f5af75d155174a97524a241e73604003f957051db7b5791a0c4bee729bd3aba9940f6610a90fb16733221ba287b2c6353ef6bf33d6eb0e6acd3a9282fb8de03082f046682b9be2cc820635517a4f2fc288d9a6049d7a6b1aec952afed01ab4bcb669b8e06bd49dcf901c6034ed96a5722506e30354869e2517bccb844dd3ae5fbf58f7d0736baa02ff869ecded888168c0c6848f8c734b4b4fdbe1bad6bbf9b564a53a3ea4bd5a90d792d87e4d4cfb55821d504ee235e2720067651b3a7e5f031ec4c457454b67eb344c219492679e127ceb6da9c98fb13d951bacc7a32afc10744375d943d9a69ca107c9181c159abfff4ec74c43c5087d24cc563bb10593ffbcb567c72a957d2dbdc897610b6cd5780682f339e22b8f063e7b86692461451bab59e57bbc52a4961bfc6a8da94d565c9bcbe31c57287e2ab6e5ae5c1013f561c41264a31a79d0b601"}) pidfd_getfd(r9, 0xffffffffffffffff, 0x0) 1.333965004s ago: executing program 5 (id=1559): listen(0xffffffffffffffff, 0x5) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x3, 0xff, 0x5e, 0x54, 0x0, 0x3, 0xc9090, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_bp={0x0, 0x7}, 0x1a, 0x81, 0x800, 0x6, 0x8, 0x4002}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x800}}, 0x120) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{}, [@ldst={0x4}, @ldst={0x3, 0x0, 0x6, 0x0, 0xa, 0x0, 0xa1}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r2}, 0x18) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0xfffffffffffffe3c, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(0x0, 0x0) fchdir(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) 1.176895318s ago: executing program 0 (id=1562): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect(0x3, 0xb, &(0x7f0000001440)=ANY=[], 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001180), 0x400, 0x0) read$snapshot(r0, &(0x7f00000011c0), 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0xf) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7, 0x2a4, 0x8, 0x0, 0x4000000000000005}) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x40085507, &(0x7f00000000c0)={{}, "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"}) setreuid(0xee01, 0x0) ioprio_get$uid(0x3, 0xee01) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000010c0)='./file0\x00', &(0x7f0000001100)='efivarfs\x00', 0x980a8, &(0x7f0000001140)='*\x00') r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.171435478s ago: executing program 5 (id=1563): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r1, 0x0, 0xfffffffffffffffc}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000300)={[{@jqfmt_vfsv1}, {@dioread_lock}, {@barrier_val}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@errors_continue}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) 1.134132219s ago: executing program 1 (id=1564): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="09000000040000000800000010"], 0x50) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x18000000000002a0, 0xeff, 0xffffffffffffffde, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000002200850000000300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='comm\x00') r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c00048028000180080001006f7366001c0002800800034000e90001080001400000000305240200020000000900010073797a30000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x24008014}, 0x0) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x2}, 0x94) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r8}, 0x10) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=@newqdisc={0x310, 0x24, 0x0, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0xd, 0x3286cbf8a5a87cd5}, {0x9, 0x4}}, [@TCA_STAB={0xf4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x8, 0x2, 0x7, 0x0, 0x9, 0xfffffffe, 0x4}}, {0xc, 0x2, [0xff80, 0xfff8, 0x2, 0x400]}}, {{0x1c, 0x1, {0x4, 0x7, 0x8, 0x3, 0x1, 0x0, 0xfffffff2, 0x5}}, {0xe, 0x2, [0x7, 0x3ff, 0xb52, 0x1, 0x5e9]}}, {{0x1c, 0x1, {0x6, 0x40, 0x2, 0x6, 0x0, 0x80000001, 0x8, 0x1}}, {0x6, 0x2, [0x8000]}}, {{0x1c, 0x1, {0x6, 0x4, 0x8, 0x0, 0x0, 0x4, 0x7, 0x3}}, {0xa, 0x2, [0xfffb, 0x6, 0x200]}}, {{0x1c, 0x1, {0x2, 0x8, 0x6, 0x0, 0x2, 0x9, 0x101, 0x3}}, {0xa, 0x2, [0x2, 0x9, 0xfff8]}}, {{0x1c, 0x1, {0x2, 0x6, 0x4, 0xfffffffc, 0x2, 0xa, 0xfffffffc, 0x3}}, {0xa, 0x2, [0x10, 0x5, 0x7]}}]}, @qdisc_kind_options=@q_fq={{0x7}, {0x54, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0xb}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0xb4}, @TCA_FQ_RATE_ENABLE={0x8}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x2}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x2}, @TCA_FQ_QUANTUM={0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x90e8}, @TCA_FQ_RATE_ENABLE={0x8}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x80000001}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0xffffa558}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x100}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_STAB={0x174, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x80, 0x6, 0x9, 0x985, 0x0, 0x5, 0x9, 0x3}}, {0xa, 0x2, [0x1, 0x1, 0x9]}}, {{0x1c, 0x1, {0x7, 0x8, 0x3, 0xc91, 0x2, 0x4, 0xffffffff, 0x4}}, {0xc, 0x2, [0x100, 0x1, 0xff1, 0x7]}}, {{0x1c, 0x1, {0x10, 0x0, 0x5, 0x2, 0x1, 0x1, 0x1, 0x3}}, {0xa, 0x2, [0xa, 0x1, 0x2]}}, {{0x1c, 0x1, {0x80, 0x1, 0x9, 0x8001, 0x2, 0x0, 0x5, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0xa, 0x6, 0x7, 0xfff, 0x1, 0x98f, 0x30, 0x1}}, {0x6, 0x2, [0xd6]}}, {{0x1c, 0x1, {0x8, 0x2, 0x101, 0x8000, 0x2, 0x6, 0x5f0d, 0x5}}, {0xe, 0x2, [0xadec, 0x1, 0x100, 0x480b, 0xde]}}, {{0x1c, 0x1, {0x4, 0x6, 0x3, 0x3, 0x0, 0x4, 0x4, 0x9}}, {0x16, 0x2, [0x6, 0x4, 0xfff3, 0x3, 0x3ff, 0x28, 0x2, 0x4, 0x2]}}, {{0x1c, 0x1, {0xf, 0x2, 0x6, 0x2, 0x2, 0x6, 0x80000001, 0x4}}, {0xc, 0x2, [0x0, 0x8, 0xb, 0xe698]}}, {{0x1c, 0x1, {0x9, 0x0, 0x1000, 0x8000, 0x0, 0x1, 0x37, 0x4}}, {0xc, 0x2, [0x1821, 0x1, 0x401, 0x40]}}]}, @TCA_RATE={0x6, 0x5, {0x5, 0xe5}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xbd}]}, 0x310}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000004c0)='kfree\x00', r5}, 0x44) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, &(0x7f0000000000)) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r7, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="8b67000226bd7000fddbdf250a0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000080001007063690011f57bf5be3999c4eca0b555cc0a8be43e00303230303a30303a31302e300000000008000300030000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000cd2ed1c57a3ba827d30000"], 0x88}, 0x1, 0x0, 0x0, 0x4008004}, 0x64004000) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000280)) (async) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {0x0, 0x1}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 1.133813568s ago: executing program 4 (id=1565): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r0}, &(0x7f0000000ac0), &(0x7f0000000b00)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0041, &(0x7f0000000000)={[{@errors_continue}, {@data_err_ignore}, {@acl}, {@noinit_itable}, {@norecovery}, {@nodiscard}]}, 0xfe, 0x47d, &(0x7f00000004c0)="$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") 1.068925789s ago: executing program 1 (id=1566): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21481e, &(0x7f0000000300)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@nodiscard}]}, 0x1, 0x4f2, &(0x7f0000000600)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x82e, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @broadcast, 'macvlan1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084) 1.014400931s ago: executing program 2 (id=1567): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0xe0f5, 0x2, 0x2, 0xf2}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r2, 0x12, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x80002, 0x0) listen(r3, 0xc98e) connect$inet6(r3, 0x0, 0x0) sendmmsg$inet6(r3, 0x0, 0x0, 0x4001c00) syz_read_part_table(0x1059, &(0x7f0000000000)="$eJzsz8FNw0AUBNDxYmRbogNa4Ewn7scHCuFMT0hUwDmX6EdeR0oHSQ7v3Uazs9IPD/WRlpxqfG+ZkyXJuWpK8nb0VdVakr+ehtuwP+q2ek3ycoRx2f/JsF3LVv+fa9/VsC++l6/5aH4zZf25150AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8MwuAQAA//9ZkRMF") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd25, 0x25dfdc01, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_virt_wifi\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4009010) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x26, 0x0, 0x1}, 0x28) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000000514010028bd7000fedbdf250800010000c613860521660393000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000ffb4000000000000000095000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r7) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020028bd7000fddbdf250800000006000e000500000006000100080000001400030076657468305f766c616e00000000000006001b004e21000005002200010000000c0010"], 0x54}, 0x1, 0x0, 0x0, 0x10000}, 0x8080) 988.862381ms ago: executing program 4 (id=1568): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000c1010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000059729ec6850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000000)={0x2a, 0x0, 0x2}, 0xc) bind$qrtr(r2, &(0x7f00000000c0)={0x2a, 0x1}, 0xc) 966.773282ms ago: executing program 1 (id=1569): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)={0x2, 0xa, 0x0, 0x3, 0x2}, 0x10}, 0x1, 0x7}, 0x0) 945.452892ms ago: executing program 1 (id=1570): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write$P9_RREAD(r1, &(0x7f0000000580)=ANY=[], 0xa0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, 0x0, 0x20000050) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff95, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000280)="af57883b59b7b239ce5907397d81d719067661498dcaca29b6348d57df61b8259320d4bd4d3393767256889e61779a201d73f78374d199632fc98e6aaea00831fa3b15387ad68744727f7245f51942b9a9365a18c853b6bd84a27bc8835605b8edd37fe281d1cea8a98ea8ae433cd2fcb68553", &(0x7f00000004c0)=@buf="5901b5604638ce03beecd84a0a08f3563001dce8971d6cefbf0bb3baf8e11e1fc600cb8409f85f0e62ea8c851f932c9078fda155c95b8cdf220c4a8c7742ec47176f2ba258bc65c50573695d5c1af45a3ab2c56060868fc384d9c7f716c90952354faacfc07d42811edd8adfdef6bb231e8110373b91c9920cea8d156453e4193610d3b77aff3b0b72a4bca8332da14c8c87f30fd88d1fe2617bfdefcbecc913d862d98e57c4047d7cffc81bbada1acc19dbc066e114ee2855832c5d1220fbb45b2a67f20e4caa1459bf1c0ddb92cd628029ee"}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 923.045412ms ago: executing program 4 (id=1571): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 875.682133ms ago: executing program 5 (id=1572): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21481e, &(0x7f0000000300)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@nodiscard}]}, 0x1, 0x4f2, &(0x7f0000000600)="$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") ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x82e, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000180)={0x18, 0x0, {0x0, @random="0228c46a9b05", 'macvlan1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084) 796.681685ms ago: executing program 4 (id=1573): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000300)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES64], 0xf6, 0xa15, &(0x7f00000010c0)="$eJzs3c1vHOd9B/DvrEiJog1VtlVXFWxrJUM2bbMUSdUSBB9qiVxKdPlSkBRgoS0sw5IKQURd2C1gGz3IQNFTjBhBECDJJfAxJwPOIb4EuiXHnHIIkPg/CIxcohwCBju7lJbkvog0RSrK57MYzdvveduZnUe73J0n/CVbWVkppy2uX/rxTlaWh8/5ya8++/yT+vTxrezNnrxa/DQZSFJN+v5Univ9E5ML87M9MrqZXElyOymS7Etj3sH+NWtXUnw7j99bv53ihzncJtnAJhtHTyv8Vdvt8w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5KE5Ojo2NFZqbnLr1Z7awcArzL/tXsvixH/S6+7FVskRT1KQMDq0N9Hz50b/fT9X+O55nG2jONkb8H8tFjTx987am+ymr6LhXaEe9/+NHNt5eXr713b1N/28C+Zrvqy/t2rHr3b+/Wkl2ozU0vzk/PnrtQq04vzlfPnj49evLi1GJ1ajq1xcuLS7XZ6sRC7dzS/EJ1aOKl6tjZs6eqtZHL85fmLkyOzNRWN575h/HR0dPVN0b+pXZuYXF+7uQbI4sTF6dnZqbnLpQx9d31mDP1E/Gfp5eqS7Vzs9Xq9RvL1071qmQ9aKztnmJt0HivnMZHx8fHxsbHx06/evbVM6OjfRs2jK6TDRG7f9Kye36yrddu+IYqzf4/M5nOXC7lzVTbPiYymYXMZ7bD/qbV/v/EyVrXclv7/9Ve/vC93UdS9v/PNdae69T/d6hL78fKSiPnraZffbyfD/NRbubtLGc51/LeN85xw+OP25RP9Zu3duPjQmqZy3QWM5/pzOZcuaXa3FLN2ZzO6YzmrVzMVBZTzVSmM5NaFnM5i1lKrTyjJrKQWs5lKfNZSDVDmchLqWYsZ3M2p1JNLSO5nPlcylwuZDLnylyu50b5vJ/qUse7QWP3EzTeJWib+/+Vh/F/gjxo234Nh61aafb/ezsGrKwuDU3sWK0AAACA7fT3v8iBQ0/+/DdJf54tP5efmp6pje52tQAAAIBtVH5d75n6rL++9GwK7/8BAADgUVOUv7ErkgzmaGOp8UuoPfEhAAAAADwiyr//P1efDdaXjqa4eyeUK7tdNwAAAGB79L7Hfs+IYnj19r/Vq4351WZE8z6/g1PTM7WRifmZ18byQnmXgfKXBhty25MU/eXPD17OsUbUscHGfHBtjgP1qLGR18byco43GzL0fH32/FCbyPFG5IuNyBe7RJ6qRwLAo+54l/74fvv/lzPciBg+0rc3Sd+RNj3rqJ4VAB4WvcfY6RlR/OO99//9zWzX9P9P5vofGl8pGMk7eTfLuZrh8tcG5TcO1uT6b582PzO4+zWE0Qz3+DRgNfaXZyoZ7vF5wGDLQC/DPT4RaMTm35NTD/5AAMAOOt6hH95M/z/c8v4/G9//3x1a6JqfFALAQ+HuCPYPcGG32wgArKWXBgAAAAAAAAAAAAAAAAAAAAAAAAAAgO23rXf7H9hi8t82x/V7sMMQbFjY33wOtp7Pd5LsXJ2LbS6rsg35rCTZqeO1cws5mGz5WW17Gu9Nsvvt6rnQ13xJ3Hx7ebeuSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOykItnTbnsl2ZdkNMnJna/Vg3Nrtyuw8/6pdaW4kzv5IAd2rzoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI+m5v3/K2nMH2tsSl8lOZHkSpJ/3e06bqc7u12BbbJ/i+la7v9fP+ZZKdLXOOwp+icmF+Zn64e/HPuh8tVnn39Sn1qS77vfcsrAyrrBJZolrI/90eOrS0+UqQYnr71/87/f/a/q5PlUsjfnl6ZmJmcvLLx+L8nTxRdJNY1p1Wp9//fEzz5t0/Iv6i1tb325U+WTM7mx3L9rl7p7ud3cWL42Xi9pqfbm0v/8540PWnY9mWPJ80PJ0NqS/qM+dSjpWPq7lVZ8Xfx/cSDfy5Xy+NefjWKlqB+ivynbv//6jeVrI++8u3y1Q50O5miSq8lA9zp93LL7aHk9aas86yr99VJHy6D6P4d6tLGrlhzHOrThifKUGWy2YW/HNrSqdm5DqeV5r7Tb36jRqQ41eiovtDnSK/uSzjV6ofuRbq/4uvh1cTG/yv+1jP9RqR//E+n86lybRRnZcqZ0jKw0IsuWj7fueGt95O++f1+1bztMDZv1rTUv3krL9b95rLbperRSdL0etZS4udfFuhLXnRVdXhdlj3RoXYrm1adTmmY9DzWiOtTzb/NK0nek21VxQ2/9So8ryt30r7ffvdXX/w+Kofw+t4z/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPPyKZE+77ZXkRJKDq+vVZGUT2e7rtKMyWGy2itvq1t1/HgmVzSYo7uROPsiBB1MdAAAAAAAAAHba+cmvPvv8k/pU7G9uav59v5r0JTlYfHd/JhfmZ3tk1J9cSXK7vjzQZn+XP/fX0+Xxe+u362uHN9sSAOB+/TkAAP//mWBg/A==") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r2, &(0x7f0000000100)=[{&(0x7f0000000140)='1', 0xf}], 0x1) preadv(r2, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/54, 0x36}], 0x1, 0xbbb, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x480}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x1b, 0x0, 0x0, 0xd3}, {0x8, 0x7, 0x0, 0x0, 0x5}, {0x8, 0x1c, 0x0, 0x0, 0x5}]}}]}]}, 0x44}}, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x6, [@union={0x5, 0x6, 0x0, 0x5, 0x1, 0x5, [{0xc, 0x5, 0x1}, {0x10, 0x1, 0xffffffff}, {0x10, 0x5, 0x8}, {0x8, 0x800003, 0xf}, {0x7, 0x4, 0x401}, {0x4, 0x3, 0xb}]}, @ptr={0x10}, @float={0x6, 0x0, 0x0, 0x10, 0x4}, @volatile={0x4, 0x0, 0x0, 0x9, 0x1}, @struct={0x4, 0x4, 0x0, 0x4, 0x0, 0x1, [{0xe, 0x5, 0xa239eee}, {0xe, 0x4}, {0x9, 0x4, 0x3}, {0xe, 0x4, 0x10}]}]}, {0x0, [0x0, 0x6f, 0x2e, 0x61]}}, &(0x7f0000000040)=""/41, 0xd2, 0x29, 0x1, 0xfffffff8}, 0x28) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000001040)={0xe, {"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", 0x1040}}, 0x1006) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'gretap0\x00', 0x0, 0x10, 0x8, 0xd, 0x3, {{0x15, 0x4, 0x1, 0x5, 0x54, 0x64, 0x0, 0xa6, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@timestamp_addr={0x44, 0x2c, 0xd6, 0x1, 0x6, [{@rand_addr=0x64010100}, {@loopback, 0x1}, {@loopback}, {@multicast2, 0x100}, {@remote, 0x7f}]}, @end, @cipso={0x86, 0x10, 0x3, [{0x1, 0xa, "5b09fbc87fb9072a"}]}]}}}}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000740)={0x2, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="0800000000000000300800f0ffffff950000000000000000000000000000000082f652a55fb3709e0b0afcfe408cf0795783382047946f8d253a7e0a7e7ed8bee7c370b9822dffd401174ad93831892d4adeb23c63003eec774b8313d43f1ee29b522d5171e2ffd962260b3d9d32e511f67d1dcdd8e22f6c6282dd898250f2dab052bb303135ea03691a966273d925"], &(0x7f0000000300)='syzkaller\x00', 0x101, 0xd, &(0x7f00000003c0)=""/13, 0x41100, 0x44, '\x00', r12, @fallback=0x22, r5, 0x8, &(0x7f00000006c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x9, 0xcf, 0x2}, 0x10, r13, r11, 0x0, &(0x7f0000000780)=[r6, r6, r6], 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xf, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x8001}, [@func={0x85, 0x0, 0x1, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0xd4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0x8000, 0xda, &(0x7f0000000400)=""/218, 0x40f00, 0x53, '\x00', r3, @fallback=0xe, r4, 0x8, &(0x7f0000000140)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xb, 0x8, 0x3}, 0x10, r13, r0, 0x7, 0x0, &(0x7f0000000500)=[{0x1, 0x2, 0x4, 0xc}, {0x3, 0x5, 0x5, 0x4}, {0x1, 0x3, 0xf, 0x9}, {0x5, 0x4, 0xd}, {0x0, 0x4, 0x4, 0x6}, {0x0, 0x3, 0x0, 0x3}, {0x3, 0x5, 0x5, 0x2}], 0x10, 0x4}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r14}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, &(0x7f00000004c0), &(0x7f0000000300)=r14}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) iopl(0x3) 708.143717ms ago: executing program 2 (id=1574): listen(0xffffffffffffffff, 0x5) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x3, 0xff, 0x5e, 0x54, 0x0, 0x3, 0xc9090, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_bp={0x0, 0x7}, 0x1a, 0x81, 0x800, 0x6, 0x8, 0x4002}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x800}}, 0x120) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{}, [@ldst={0x4}, @ldst={0x3, 0x0, 0x6, 0x0, 0xa, 0x0, 0xa1}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r2}, 0x18) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0xfffffffffffffe3c, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(0x0, 0x0) fchdir(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r4, 0x0, 0xfffffffffffffffe}, 0x18) 693.161187ms ago: executing program 5 (id=1575): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000080000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000000000000000000000000000000000000000000000991a"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32=r0, @ANYBLOB="0300"], 0x50) 624.729888ms ago: executing program 5 (id=1576): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400800142603600e120800160000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x6000}, 0x0) r1 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x430, 0xf, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x11da00, 0x40, 0x0, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_ECN={0x8}, @TCA_PIE_BYTEMODE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000010) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000180)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x70, '\x00', r4, 0x1b, r3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r1, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000004, 0x810, 0xffffffffffffffff, 0x0) r9 = open(&(0x7f0000000280)='./file0\x00', 0x60842, 0x45) r10 = syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0x7a10, 0x80, 0x5, 0x323, 0x0, r9}, &(0x7f0000000000)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0xc, 0x0, r9, 0x0, 0x0, 0x0, 0x8000}) r13 = io_uring_setup(0x40ad, &(0x7f0000000100)={0x0, 0x7282, 0x9, 0x1, 0x50, 0x0, r10}) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r14, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x40) r15 = gettid() process_vm_writev(r15, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r16 = io_uring_register$IORING_REGISTER_PERSONALITY(r13, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r13, 0x1b, 0x20000009, r16) syz_io_uring_submit(r8, r12, &(0x7f0000000ac0)=@IORING_OP_RECVMSG={0xa, 0x29, 0x2, r3, 0x0, &(0x7f0000000980)={&(0x7f0000000200)=@un=@abs, 0x80, &(0x7f0000000780)=[{&(0x7f00000004c0)=""/160, 0xa0}, {&(0x7f0000000380)}, {&(0x7f0000000400)=""/63, 0x3f}, {&(0x7f0000000580)=""/197, 0xc5}, {&(0x7f0000000680)=""/247, 0xf7}], 0x5, &(0x7f0000000a00)=""/152, 0x98}, 0x0, 0x100, 0x0, {0x1, r16}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) 618.993018ms ago: executing program 4 (id=1577): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)) timer_delete(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0xfffffffffffffe3c, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000040000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000940)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 605.507888ms ago: executing program 2 (id=1578): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = syz_io_uring_complete(0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x260903, 0x0) close(r5) r6 = io_uring_setup(0x36a3, &(0x7f0000000340)) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) readv(r4, &(0x7f0000000480)=[{&(0x7f0000000380)=""/2, 0x2}], 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {r0}}, './file0\x00'}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'macsec0\x00', 0x200}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @multicast}, 0x10) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) 465.867971ms ago: executing program 0 (id=1579): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r0}, &(0x7f0000000ac0), &(0x7f0000000b00)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0041, &(0x7f0000000000)={[{@errors_continue}, {@data_err_ignore}, {@acl}, {@noinit_itable}, {@norecovery}, {@nodiscard}]}, 0xfe, 0x47d, &(0x7f00000004c0)="$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") 400.449933ms ago: executing program 5 (id=1580): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) read$watch_queue(r0, &(0x7f00000001c0)=""/178, 0xb2) mknodat$loop(r0, &(0x7f0000000240)='./file0\x00', 0x1000, 0x1) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000200)=""/80) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000640)="390000fa46560200130011186809fc071200000f0000ff3f21000000170a009ea411453cbe3bba3cc1441700e0da8979d2fc6ca9e48270faf047145bc7050b9971ce5ca870bf4c0f13bcbedac0eead49dbecf9", 0x53}], 0x1) r1 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r1]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="180000ffffffffde0000000000000500180100002020702500000000002020207b1af8ff00000000f2a100000000000007010000f8ffffffb702000008000000b70300000000006c33553e782b83010095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000005c0), 0x10) recvmmsg(r4, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000340)=""/97, 0x61}], 0x2}, 0x7f}], 0x1, 0x10103, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000001040)='net/packet\x00') r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x2e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r7, 0x0, 0xfffffffffffffffd}, 0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x50, r9, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) pread64(r6, &(0x7f0000000000)=""/232, 0xe8, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000700)={'syztnl2\x00', 0x0, 0x2f, 0x7, 0xe1, 0x0, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x8000, 0x5, 0x7fff}}) 398.173233ms ago: executing program 0 (id=1581): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)={0x2, 0xa, 0x0, 0x3, 0x2}, 0x10}, 0x1, 0x7}, 0x0) 212.055526ms ago: executing program 0 (id=1582): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, 0x0) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000a80)={0x0, 0x0, 0x5, 0x1}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 170.979927ms ago: executing program 0 (id=1583): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/4153], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x5, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 93.177449ms ago: executing program 0 (id=1584): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0xe0f5, 0x2, 0x2, 0xf2}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r2, 0x12, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x80002, 0x0) listen(r3, 0xc98e) connect$inet6(r3, 0x0, 0x0) sendmmsg$inet6(r3, 0x0, 0x0, 0x4001c00) syz_read_part_table(0x1059, &(0x7f0000000000)="$eJzsz8FNw0AUBNDxYmRbogNa4Ewn7scHCuFMT0hUwDmX6EdeR0oHSQ7v3Uazs9IPD/WRlpxqfG+ZkyXJuWpK8nb0VdVakr+ehtuwP+q2ek3ycoRx2f/JsF3LVv+fa9/VsC++l6/5aH4zZf25150AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8MwuAQAA//9ZkRMF") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd25, 0x25dfdc01, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_virt_wifi\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4009010) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x26, 0x0, 0x1}, 0x28) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000000514010028bd7000fedbdf250800010000c613860521660393000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000ffb4000000000000000095000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r7) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020028bd7000fddbdf250800000006000e000500000006000100080000001400030076657468305f766c616e00000000000006001b004e21000005002200010000000c0010"], 0x54}, 0x1, 0x0, 0x0, 0x10000}, 0x8080) 65.164839ms ago: executing program 1 (id=1585): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000c1010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000059729ec6850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000000)={0x2a, 0x0, 0x2}, 0xc) bind$qrtr(r2, &(0x7f00000000c0)={0x2a, 0x1}, 0xc) 0s ago: executing program 1 (id=1586): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x13, 0x20000000000001e3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa3d831f8b8d271d4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000400)='itimer_state\x00', r3}, 0x18) setitimer(0x2, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r6, 0x0, 0xfffffffffffffffd}, 0x18) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x3ec, 0x20, 0x70bd2b, 0x25dfdbfe}, 0x10}}, 0x24000008) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r8) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="bbfb2bbd7000fddbdf21670000000800c400020000000800c3"], 0x24}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): validate_block_bitmap:441: comm syz.2.949: bg 0: block 248: padding at end of block bitmap is not set [ 140.796786][ T6858] EXT4-fs: quotafile must be on filesystem root [ 140.814430][ T6837] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 140.836832][ T6837] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.949: Failed to acquire dquot type 1 [ 140.850974][ T6837] EXT4-fs (loop2): 1 orphan inode deleted [ 140.872635][ T6837] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.885934][ T6837] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.913854][ T6837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.928444][ T6865] loop5: detected capacity change from 0 to 1024 [ 140.953303][ T6865] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 140.968883][ T6856] netlink: 24 bytes leftover after parsing attributes in process `syz.1.955'. [ 140.978111][ T6856] netlink: 24 bytes leftover after parsing attributes in process `syz.1.955'. [ 141.004059][ T6874] loop4: detected capacity change from 0 to 512 [ 141.014197][ T6874] EXT4-fs: Ignoring removed mblk_io_submit option [ 141.021529][ T6874] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 141.033879][ T6865] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.049761][ T6874] EXT4-fs (loop4): 1 truncate cleaned up [ 141.056256][ T6874] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.071713][ T6837] tipc: Enabling of bearer rejected, already enabled [ 141.098241][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.173601][ T6883] loop2: detected capacity change from 0 to 2048 [ 141.219034][ T6883] Alternate GPT is invalid, using primary GPT. [ 141.222979][ T4125] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.225763][ T6883] loop2: p1 p2 p3 [ 141.239232][ T6883] loop2: partition table partially beyond EOD, truncated [ 141.291628][ T6885] loop5: detected capacity change from 0 to 1024 [ 141.386013][ T6895] loop2: detected capacity change from 0 to 1024 [ 141.415025][ T6895] EXT4-fs: quotafile must be on filesystem root [ 141.486790][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 141.486810][ T29] audit: type=1326 audit(1759235587.782:7733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6903 comm="syz.5.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6905eec9 code=0x7ffc0000 [ 141.718062][ T29] audit: type=1326 audit(1759235587.832:7734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6903 comm="syz.5.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f6905eec9 code=0x7ffc0000 [ 141.742157][ T29] audit: type=1326 audit(1759235587.832:7735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6903 comm="syz.5.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6905eec9 code=0x7ffc0000 [ 141.766234][ T29] audit: type=1326 audit(1759235587.832:7736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6903 comm="syz.5.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6905eec9 code=0x7ffc0000 [ 141.790334][ T29] audit: type=1326 audit(1759235587.852:7737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6903 comm="syz.5.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f6905eec9 code=0x7ffc0000 [ 141.814328][ T29] audit: type=1326 audit(1759235587.852:7738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6903 comm="syz.5.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6905eec9 code=0x7ffc0000 [ 141.837941][ T29] audit: type=1326 audit(1759235587.852:7739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6903 comm="syz.5.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6905eec9 code=0x7ffc0000 [ 141.861626][ T29] audit: type=1326 audit(1759235587.852:7740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6903 comm="syz.5.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2f6905eec9 code=0x7ffc0000 [ 141.885077][ T29] audit: type=1326 audit(1759235587.852:7741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6903 comm="syz.5.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6905eec9 code=0x7ffc0000 [ 141.910024][ T29] audit: type=1326 audit(1759235587.852:7742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6903 comm="syz.5.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2f6905eec9 code=0x7ffc0000 [ 141.993050][ T6912] loop5: detected capacity change from 0 to 512 [ 142.035553][ T6912] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.084507][ T6912] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.114016][ T6916] siw: device registration error -23 [ 142.122703][ T6916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.975'. [ 142.136361][ T6912] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.974: corrupted xattr block 19: overlapping e_value [ 142.165146][ T6922] tipc: Enabled bearer , priority 0 [ 142.174047][ T6922] syzkaller0: entered promiscuous mode [ 142.180421][ T6922] syzkaller0: entered allmulticast mode [ 142.189993][ T6912] EXT4-fs (loop5): Remounting filesystem read-only [ 142.196831][ T6912] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 142.207733][ T6924] netlink: 16 bytes leftover after parsing attributes in process `syz.1.978'. [ 142.217408][ T6924] netlink: 16 bytes leftover after parsing attributes in process `syz.1.978'. [ 142.228833][ T6912] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 142.239868][ T6912] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 142.239899][ T6922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.977'. [ 142.259522][ T6924] netlink: 16 bytes leftover after parsing attributes in process `syz.1.978'. [ 142.281125][ T6921] tipc: Resetting bearer [ 142.301378][ T6921] tipc: Disabling bearer [ 142.319041][ T4125] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.544875][ T6938] loop5: detected capacity change from 0 to 1024 [ 142.613973][ T6942] serio: Serial port ptm0 [ 142.629150][ T6955] 9pnet_fd: Insufficient options for proto=fd [ 142.742600][ T6953] lo speed is unknown, defaulting to 1000 [ 143.445849][ T6947] loop4: detected capacity change from 0 to 512 [ 143.461595][ T6938] EXT4-fs: quotafile must be on filesystem root [ 143.519558][ T6947] EXT4-fs (loop4): orphan cleanup on readonly fs [ 143.559039][ T6947] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.986: iget: bad extended attribute block 1 [ 143.603815][ T6965] netlink: 'syz.5.992': attribute type 12 has an invalid length. [ 143.621547][ T6947] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.986: couldn't read orphan inode 15 (err -117) [ 143.851237][ T6969] __nla_validate_parse: 3 callbacks suppressed [ 143.851254][ T6969] netlink: 36 bytes leftover after parsing attributes in process `syz.2.995'. [ 143.868140][ T6947] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 144.159415][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.321268][ T6973] lo speed is unknown, defaulting to 1000 [ 144.396176][ T6985] loop4: detected capacity change from 0 to 8192 [ 144.547378][ T6985] siw: device registration error -23 [ 144.554768][ T6985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.999'. [ 144.718312][ T6998] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1000'. [ 144.826821][ T6995] loop2: detected capacity change from 0 to 1024 [ 144.927953][ T6998] lo speed is unknown, defaulting to 1000 [ 145.237177][ T7006] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1005'. [ 145.397319][ T7012] loop5: detected capacity change from 0 to 128 [ 145.548409][ T7012] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 145.785893][ T6995] EXT4-fs: quotafile must be on filesystem root [ 146.195495][ T7012] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 146.330709][ T5276] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 146.534317][ T7035] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1012'. [ 146.569893][ T6992] loop4: detected capacity change from 0 to 4096 [ 146.622660][ T7037] lo speed is unknown, defaulting to 1000 [ 146.975299][ T7041] loop5: detected capacity change from 0 to 128 [ 147.001785][ T7041] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 147.081142][ T7041] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 147.186465][ T5261] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 147.332145][ T7044] pim6reg1: entered promiscuous mode [ 147.337608][ T7044] pim6reg1: entered allmulticast mode [ 147.462290][ T6992] EXT4-fs: Ignoring removed nomblk_io_submit option [ 147.465103][ T7046] loop2: detected capacity change from 0 to 512 [ 147.501874][ T7046] EXT4-fs: Ignoring removed mblk_io_submit option [ 147.509084][ T6992] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.527871][ T7046] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 147.571158][ T7046] EXT4-fs (loop2): 1 truncate cleaned up [ 147.585403][ T7046] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.620492][ T7046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1017'. [ 147.636962][ T29] kauditd_printk_skb: 317 callbacks suppressed [ 147.636977][ T29] audit: type=1326 audit(1759235593.932:8060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7055 comm="syz.0.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee7a0eec9 code=0x7ffc0000 [ 147.668480][ T29] audit: type=1326 audit(1759235593.932:8061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7055 comm="syz.0.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee7a0eec9 code=0x7ffc0000 [ 147.749035][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.757845][ T29] audit: type=1326 audit(1759235594.002:8062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7055 comm="syz.0.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7feee7a0eec9 code=0x7ffc0000 [ 147.782597][ T29] audit: type=1326 audit(1759235594.002:8063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7055 comm="syz.0.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee7a0eec9 code=0x7ffc0000 [ 147.806909][ T29] audit: type=1326 audit(1759235594.002:8064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7055 comm="syz.0.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee7a0eec9 code=0x7ffc0000 [ 147.927876][ T29] audit: type=1400 audit(1759235594.162:8065): avc: denied { mounton } for pid=7057 comm="syz.0.1021" path="/201/file0" dev="ramfs" ino=16741 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 147.930508][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.950736][ T29] audit: type=1400 audit(1759235594.162:8066): avc: denied { mount } for pid=7057 comm="syz.0.1021" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 147.982121][ T29] audit: type=1400 audit(1759235594.192:8067): avc: denied { unmount } for pid=7057 comm="syz.0.1021" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 148.107871][ T29] audit: type=1400 audit(1759235594.302:8068): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 148.128045][ T29] audit: type=1326 audit(1759235594.322:8069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7065 comm="syz.2.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266ec2eec9 code=0x7ffc0000 [ 148.251868][ T7074] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1029'. [ 148.611646][ T7082] lo speed is unknown, defaulting to 1000 [ 148.743542][ T7068] siw: device registration error -23 [ 148.758750][ T7068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1027'. [ 149.248827][ T7102] netlink: 'syz.1.1036': attribute type 1 has an invalid length. [ 149.269044][ T7104] FAULT_INJECTION: forcing a failure. [ 149.269044][ T7104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.282635][ T7104] CPU: 0 UID: 0 PID: 7104 Comm: syz.0.1037 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 149.282714][ T7104] Tainted: [W]=WARN [ 149.282723][ T7104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 149.282776][ T7104] Call Trace: [ 149.282783][ T7104] [ 149.282792][ T7104] __dump_stack+0x1d/0x30 [ 149.282818][ T7104] dump_stack_lvl+0xe8/0x140 [ 149.282844][ T7104] dump_stack+0x15/0x1b [ 149.282885][ T7104] should_fail_ex+0x265/0x280 [ 149.282924][ T7104] should_fail+0xb/0x20 [ 149.282957][ T7104] should_fail_usercopy+0x1a/0x20 [ 149.282992][ T7104] _copy_from_iter+0xd2/0xe80 [ 149.283098][ T7104] ? __build_skb_around+0x1a0/0x200 [ 149.283194][ T7104] ? __alloc_skb+0x223/0x320 [ 149.283234][ T7104] netlink_sendmsg+0x471/0x6b0 [ 149.283276][ T7104] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.283312][ T7104] __sock_sendmsg+0x145/0x180 [ 149.283352][ T7104] ____sys_sendmsg+0x31e/0x4e0 [ 149.283396][ T7104] ___sys_sendmsg+0x17b/0x1d0 [ 149.283454][ T7104] __x64_sys_sendmsg+0xd4/0x160 [ 149.283490][ T7104] x64_sys_call+0x191e/0x2ff0 [ 149.283560][ T7104] do_syscall_64+0xd2/0x200 [ 149.283582][ T7104] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 149.283721][ T7104] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 149.283796][ T7104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.283843][ T7104] RIP: 0033:0x7feee7a0eec9 [ 149.283864][ T7104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.283886][ T7104] RSP: 002b:00007feee6477038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.283905][ T7104] RAX: ffffffffffffffda RBX: 00007feee7c65fa0 RCX: 00007feee7a0eec9 [ 149.283967][ T7104] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000006 [ 149.283984][ T7104] RBP: 00007feee6477090 R08: 0000000000000000 R09: 0000000000000000 [ 149.284000][ T7104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.284016][ T7104] R13: 00007feee7c66038 R14: 00007feee7c65fa0 R15: 00007ffecedf28f8 [ 149.284038][ T7104] [ 149.530633][ T7099] tipc: Enabling of bearer rejected, already enabled [ 149.798306][ T7108] loop5: detected capacity change from 0 to 8192 [ 149.905249][ T7108] siw: device registration error -23 [ 149.953012][ T7108] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1039'. [ 150.365443][ T7126] loop5: detected capacity change from 0 to 512 [ 150.390267][ T7126] EXT4-fs: Ignoring removed nobh option [ 150.403508][ T7128] loop2: detected capacity change from 0 to 512 [ 150.412697][ T7128] EXT4-fs (loop2): orphan cleanup on readonly fs [ 150.425834][ T7128] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1044: iget: bad extended attribute block 1 [ 150.454342][ T7128] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1044: couldn't read orphan inode 15 (err -117) [ 150.470028][ T7128] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 150.489984][ T7126] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.1046: corrupted inode contents [ 150.522923][ T7126] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #3: comm syz.5.1046: mark_inode_dirty error [ 150.551548][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.648504][ T7126] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.1046: corrupted inode contents [ 150.681948][ T7126] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.1046: mark_inode_dirty error [ 150.694067][ T7126] EXT4-fs error (device loop5): ext4_acquire_dquot:6943: comm syz.5.1046: Failed to acquire dquot type 0 [ 150.707215][ T7126] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1046: corrupted inode contents [ 150.725539][ T7126] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.1046: mark_inode_dirty error [ 150.740650][ T7126] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1046: corrupted inode contents [ 150.756071][ T7142] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1049'. [ 150.757562][ T7143] FAULT_INJECTION: forcing a failure. [ 150.757562][ T7143] name failslab, interval 1, probability 0, space 0, times 0 [ 150.779281][ T7143] CPU: 1 UID: 0 PID: 7143 Comm: syz.4.1052 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 150.779324][ T7143] Tainted: [W]=WARN [ 150.779333][ T7143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 150.779350][ T7143] Call Trace: [ 150.779358][ T7143] [ 150.779369][ T7143] __dump_stack+0x1d/0x30 [ 150.779438][ T7143] dump_stack_lvl+0xe8/0x140 [ 150.779458][ T7143] dump_stack+0x15/0x1b [ 150.779478][ T7143] should_fail_ex+0x265/0x280 [ 150.779516][ T7143] should_failslab+0x8c/0xb0 [ 150.779549][ T7143] kmem_cache_alloc_noprof+0x50/0x310 [ 150.779651][ T7143] ? skb_clone+0x151/0x1f0 [ 150.779691][ T7143] skb_clone+0x151/0x1f0 [ 150.779761][ T7143] __netlink_deliver_tap+0x2c9/0x500 [ 150.779801][ T7143] netlink_unicast+0x66b/0x690 [ 150.779913][ T7143] netlink_sendmsg+0x58b/0x6b0 [ 150.779954][ T7143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.779993][ T7143] __sock_sendmsg+0x145/0x180 [ 150.780071][ T7143] ____sys_sendmsg+0x31e/0x4e0 [ 150.780130][ T7143] ___sys_sendmsg+0x17b/0x1d0 [ 150.780201][ T7143] __x64_sys_sendmsg+0xd4/0x160 [ 150.780289][ T7143] x64_sys_call+0x191e/0x2ff0 [ 150.780312][ T7143] do_syscall_64+0xd2/0x200 [ 150.780381][ T7143] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 150.780415][ T7143] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 150.780453][ T7143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.780476][ T7143] RIP: 0033:0x7f891095eec9 [ 150.780503][ T7143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.780524][ T7143] RSP: 002b:00007f890f3c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.780547][ T7143] RAX: ffffffffffffffda RBX: 00007f8910bb5fa0 RCX: 00007f891095eec9 [ 150.780564][ T7143] RDX: 0000000000048040 RSI: 00002000000002c0 RDI: 0000000000000004 [ 150.780580][ T7143] RBP: 00007f890f3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 150.780642][ T7143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.780659][ T7143] R13: 00007f8910bb6038 R14: 00007f8910bb5fa0 R15: 00007ffc8ccdee68 [ 150.780680][ T7143] [ 150.781173][ T7143] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1052'. [ 151.022728][ T7126] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.1046: mark_inode_dirty error [ 151.070589][ T7126] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1046: corrupted inode contents [ 151.147564][ T7126] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 151.157356][ T7126] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1046: corrupted inode contents [ 151.184039][ T7126] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.1046: mark_inode_dirty error [ 151.195836][ T7126] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 151.206192][ T7126] EXT4-fs (loop5): 1 truncate cleaned up [ 151.236719][ T7126] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.254659][ T7126] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.333785][ T7163] loop4: detected capacity change from 0 to 1024 [ 151.351652][ T7163] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 151.380569][ T7163] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.500674][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.774195][ T7181] loop2: detected capacity change from 0 to 8192 [ 151.865511][ T7181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1063'. [ 151.905674][ T7168] EXT4-fs: Ignoring removed orlov option [ 151.922217][ T7185] loop4: detected capacity change from 0 to 8192 [ 151.949927][ T7168] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 151.963828][ T7168] EXT4-fs (loop5): can't enable nombcache during remount [ 152.013066][ T7185] siw: device registration error -23 [ 152.040399][ T7185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1064'. [ 152.071994][ T7189] loop2: detected capacity change from 0 to 512 [ 152.142637][ T7189] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.143484][ T7191] loop4: detected capacity change from 0 to 128 [ 152.168136][ T7189] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.198505][ T7189] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.1065: corrupted xattr block 19: overlapping e_value [ 152.203187][ T7191] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 152.228328][ T7189] EXT4-fs (loop2): Remounting filesystem read-only [ 152.235230][ T7189] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 152.235573][ T7195] pimreg: entered allmulticast mode [ 152.244314][ T7191] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 152.244619][ T7189] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 152.268295][ T7189] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 152.269687][ T4125] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.289909][ T7195] pimreg: left allmulticast mode [ 152.307349][ T2099] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 152.335324][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.358053][ T7200] loop4: detected capacity change from 0 to 512 [ 152.378596][ T7200] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.396106][ T7200] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.417619][ T7200] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1069: corrupted xattr block 19: overlapping e_value [ 152.433583][ T7213] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1073'. [ 152.443541][ T7200] EXT4-fs (loop4): Remounting filesystem read-only [ 152.450119][ T7200] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 152.460727][ T7200] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 152.470238][ T7200] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 152.499387][ T7208] lo speed is unknown, defaulting to 1000 [ 152.507069][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.520833][ T7217] SELinux: policydb version 0 does not match my version range 15-35 [ 152.531350][ T7217] SELinux: failed to load policy [ 152.551227][ T7221] loop4: detected capacity change from 0 to 512 [ 152.573358][ T7221] EXT4-fs: Ignoring removed mblk_io_submit option [ 152.588139][ T7221] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 152.620881][ T7221] EXT4-fs (loop4): 1 truncate cleaned up [ 152.634898][ T7221] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.668758][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 152.668778][ T29] audit: type=1326 audit(1759235598.972:8272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7227 comm="syz.0.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee7a0eec9 code=0x7ffc0000 [ 152.676613][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1074'. [ 152.699869][ T29] audit: type=1326 audit(1759235598.972:8273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7227 comm="syz.0.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee7a0eec9 code=0x7ffc0000 [ 152.734315][ T29] audit: type=1326 audit(1759235599.012:8274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7227 comm="syz.0.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feee7a0eec9 code=0x7ffc0000 [ 152.758779][ T29] audit: type=1326 audit(1759235599.012:8275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7227 comm="syz.0.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee7a0eec9 code=0x7ffc0000 [ 152.782548][ T29] audit: type=1326 audit(1759235599.012:8276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7227 comm="syz.0.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee7a0eec9 code=0x7ffc0000 [ 152.806080][ T29] audit: type=1326 audit(1759235599.012:8277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7227 comm="syz.0.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feee7a0eec9 code=0x7ffc0000 [ 152.830593][ T29] audit: type=1326 audit(1759235599.012:8278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7227 comm="syz.0.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee7a0eec9 code=0x7ffc0000 [ 152.854503][ T29] audit: type=1326 audit(1759235599.012:8279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7227 comm="syz.0.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee7a0eec9 code=0x7ffc0000 [ 152.878441][ T29] audit: type=1326 audit(1759235599.012:8280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7227 comm="syz.0.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feee7a0eec9 code=0x7ffc0000 [ 152.902071][ T29] audit: type=1326 audit(1759235599.012:8281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7227 comm="syz.0.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee7a0eec9 code=0x7ffc0000 [ 152.931762][ T7230] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1077'. [ 152.964948][ T7237] loop2: detected capacity change from 0 to 128 [ 152.972602][ T7237] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 152.990685][ T7237] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 153.029661][ T51] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 153.066011][ T7241] syzkaller1: entered promiscuous mode [ 153.071687][ T7241] syzkaller1: entered allmulticast mode [ 153.361492][ T7254] FAULT_INJECTION: forcing a failure. [ 153.361492][ T7254] name failslab, interval 1, probability 0, space 0, times 0 [ 153.374479][ T7254] CPU: 0 UID: 0 PID: 7254 Comm: syz.2.1087 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 153.374521][ T7254] Tainted: [W]=WARN [ 153.374530][ T7254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 153.374545][ T7254] Call Trace: [ 153.374552][ T7254] [ 153.374563][ T7254] __dump_stack+0x1d/0x30 [ 153.374610][ T7254] dump_stack_lvl+0xe8/0x140 [ 153.374631][ T7254] dump_stack+0x15/0x1b [ 153.374647][ T7254] should_fail_ex+0x265/0x280 [ 153.374676][ T7254] ? __genradix_ptr_alloc+0x169/0x340 [ 153.374711][ T7254] should_failslab+0x8c/0xb0 [ 153.374763][ T7254] __kmalloc_cache_noprof+0x4c/0x320 [ 153.374804][ T7254] __genradix_ptr_alloc+0x169/0x340 [ 153.374846][ T7254] proc_map_files_readdir+0x368/0x690 [ 153.374978][ T7254] iterate_dir+0x114/0x330 [ 153.375004][ T7254] ? mutex_lock+0xd/0x30 [ 153.375044][ T7254] __se_sys_getdents64+0x88/0x1b0 [ 153.375063][ T7254] ? __pfx_filldir64+0x10/0x10 [ 153.375164][ T7254] __x64_sys_getdents64+0x43/0x50 [ 153.375191][ T7254] x64_sys_call+0x2d9f/0x2ff0 [ 153.375215][ T7254] do_syscall_64+0xd2/0x200 [ 153.375236][ T7254] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 153.375304][ T7254] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 153.375348][ T7254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.375377][ T7254] RIP: 0033:0x7f266ec2eec9 [ 153.375420][ T7254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.375439][ T7254] RSP: 002b:00007f266d68f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 153.375458][ T7254] RAX: ffffffffffffffda RBX: 00007f266ee85fa0 RCX: 00007f266ec2eec9 [ 153.375541][ T7254] RDX: 000000000000005f RSI: 0000200000000080 RDI: 0000000000000005 [ 153.375554][ T7254] RBP: 00007f266d68f090 R08: 0000000000000000 R09: 0000000000000000 [ 153.375570][ T7254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.375585][ T7254] R13: 00007f266ee86038 R14: 00007f266ee85fa0 R15: 00007ffe7a8d2fe8 [ 153.375605][ T7254] [ 153.623303][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.678039][ T7262] pim6reg1: entered promiscuous mode [ 153.683628][ T7262] pim6reg1: entered allmulticast mode [ 153.769223][ T7270] loop4: detected capacity change from 0 to 128 [ 153.776572][ T7270] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 153.789498][ T7270] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 153.813519][ T5261] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 153.876896][ T7272] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1094'. [ 153.910609][ T7276] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1096'. [ 153.917674][ T7278] loop5: detected capacity change from 0 to 512 [ 153.929922][ T7278] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.943781][ T7278] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.137446][ T7287] loop4: detected capacity change from 0 to 512 [ 154.146960][ T7287] EXT4-fs (loop4): orphan cleanup on readonly fs [ 154.219784][ T7287] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1100: iget: bad extended attribute block 1 [ 154.257297][ T7287] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1100: couldn't read orphan inode 15 (err -117) [ 154.306079][ T7287] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 154.425353][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.901008][ T7301] loop2: detected capacity change from 0 to 128 [ 154.926695][ T4125] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.927188][ T7301] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 154.982888][ T7301] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 155.013493][ T7307] __nla_validate_parse: 1 callbacks suppressed [ 155.013508][ T7307] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1108'. [ 155.029159][ T7307] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1108'. [ 155.038181][ T7307] netlink: 'syz.0.1108': attribute type 4 has an invalid length. [ 155.046902][ T2099] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 155.096290][ T7307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1108'. [ 155.133669][ T7315] loop5: detected capacity change from 0 to 512 [ 155.160021][ T7315] EXT4-fs (loop5): orphan cleanup on readonly fs [ 155.183236][ T7315] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.1111: iget: bad extended attribute block 1 [ 155.220652][ T7321] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1110'. [ 155.230427][ T7315] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1111: couldn't read orphan inode 15 (err -117) [ 155.279966][ T7325] netlink: 'syz.0.1115': attribute type 1 has an invalid length. [ 155.320936][ T7325] tipc: Enabling of bearer rejected, already enabled [ 155.348086][ T7331] pim6reg1: entered promiscuous mode [ 155.353450][ T7331] pim6reg1: entered allmulticast mode [ 155.371206][ T7333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1118'. [ 155.419496][ T7337] loop5: detected capacity change from 0 to 2048 [ 155.489249][ T7337] Alternate GPT is invalid, using primary GPT. [ 155.493987][ T7343] pim6reg1: entered promiscuous mode [ 155.495881][ T7337] loop5: p1 p2 p3 [ 155.501017][ T7343] pim6reg1: entered allmulticast mode [ 155.504695][ T7337] loop5: partition table partially beyond EOD, truncated [ 155.578543][ T7347] loop5: detected capacity change from 0 to 1024 [ 155.604364][ T7347] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 155.655063][ T7356] loop4: detected capacity change from 0 to 512 [ 155.680479][ T7356] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.820871][ T7364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1130'. [ 155.830042][ T7364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1130'. [ 155.881736][ T7364] FAULT_INJECTION: forcing a failure. [ 155.881736][ T7364] name failslab, interval 1, probability 0, space 0, times 0 [ 155.894865][ T7364] CPU: 1 UID: 0 PID: 7364 Comm: syz.1.1130 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 155.894905][ T7364] Tainted: [W]=WARN [ 155.894912][ T7364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 155.894925][ T7364] Call Trace: [ 155.894933][ T7364] [ 155.894941][ T7364] __dump_stack+0x1d/0x30 [ 155.894990][ T7364] dump_stack_lvl+0xe8/0x140 [ 155.895009][ T7364] dump_stack+0x15/0x1b [ 155.895026][ T7364] should_fail_ex+0x265/0x280 [ 155.895057][ T7364] should_failslab+0x8c/0xb0 [ 155.895138][ T7364] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 155.895171][ T7364] ? debugfs_alloc_inode+0x34/0x40 [ 155.895208][ T7364] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 155.895261][ T7364] debugfs_alloc_inode+0x34/0x40 [ 155.895300][ T7364] alloc_inode+0x40/0x170 [ 155.895389][ T7364] new_inode+0x1d/0xe0 [ 155.895420][ T7364] __debugfs_create_file+0x109/0x330 [ 155.895450][ T7364] debugfs_create_file_full+0x3f/0x60 [ 155.895488][ T7364] ? __pfx_macsec_setup+0x10/0x10 [ 155.895527][ T7364] ref_tracker_dir_debugfs+0x100/0x1e0 [ 155.895584][ T7364] alloc_netdev_mqs+0x1a2/0xa30 [ 155.895634][ T7364] rtnl_create_link+0x239/0x710 [ 155.895675][ T7364] rtnl_newlink_create+0x14c/0x620 [ 155.895699][ T7364] ? __schedule+0x6b9/0xb30 [ 155.895804][ T7364] rtnl_newlink+0xf29/0x12d0 [ 155.895860][ T7364] ? xas_load+0x413/0x430 [ 155.895905][ T7364] ? __memcg_slab_free_hook+0x135/0x230 [ 155.896038][ T7364] ? __rcu_read_unlock+0x4f/0x70 [ 155.896061][ T7364] ? avc_has_perm_noaudit+0x1b1/0x200 [ 155.896144][ T7364] ? cred_has_capability+0x210/0x280 [ 155.896172][ T7364] ? selinux_capable+0x31/0x40 [ 155.896236][ T7364] ? security_capable+0x83/0x90 [ 155.896263][ T7364] ? ns_capable+0x7d/0xb0 [ 155.896289][ T7364] ? __pfx_rtnl_newlink+0x10/0x10 [ 155.896340][ T7364] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 155.896432][ T7364] netlink_rcv_skb+0x123/0x220 [ 155.896465][ T7364] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 155.896584][ T7364] rtnetlink_rcv+0x1c/0x30 [ 155.896696][ T7364] netlink_unicast+0x5bd/0x690 [ 155.896733][ T7364] netlink_sendmsg+0x58b/0x6b0 [ 155.896774][ T7364] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.896860][ T7364] __sock_sendmsg+0x145/0x180 [ 155.896888][ T7364] ____sys_sendmsg+0x31e/0x4e0 [ 155.896930][ T7364] ___sys_sendmsg+0x17b/0x1d0 [ 155.897112][ T7364] __x64_sys_sendmsg+0xd4/0x160 [ 155.897157][ T7364] x64_sys_call+0x191e/0x2ff0 [ 155.897187][ T7364] do_syscall_64+0xd2/0x200 [ 155.897236][ T7364] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 155.897291][ T7364] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 155.897412][ T7364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.897451][ T7364] RIP: 0033:0x7f2c2197eec9 [ 155.897471][ T7364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.897489][ T7364] RSP: 002b:00007f2c203df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.897511][ T7364] RAX: ffffffffffffffda RBX: 00007f2c21bd5fa0 RCX: 00007f2c2197eec9 [ 155.897529][ T7364] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 155.897545][ T7364] RBP: 00007f2c203df090 R08: 0000000000000000 R09: 0000000000000000 [ 155.897560][ T7364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.897575][ T7364] R13: 00007f2c21bd6038 R14: 00007f2c21bd5fa0 R15: 00007fff9e95c7e8 [ 155.897599][ T7364] [ 155.897607][ T7364] debugfs: out of free dentries, can not create file 'netdev@ffff8881198aa550' [ 156.387963][ T7368] lo speed is unknown, defaulting to 1000 [ 156.454013][ T7374] serio: Serial port ptm0 [ 156.547644][ T7386] pim6reg1: entered promiscuous mode [ 156.553301][ T7386] pim6reg1: entered allmulticast mode [ 156.788196][ T7397] FAULT_INJECTION: forcing a failure. [ 156.788196][ T7397] name failslab, interval 1, probability 0, space 0, times 0 [ 156.800978][ T7397] CPU: 0 UID: 0 PID: 7397 Comm: syz.4.1141 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 156.801048][ T7397] Tainted: [W]=WARN [ 156.801057][ T7397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 156.801074][ T7397] Call Trace: [ 156.801082][ T7397] [ 156.801092][ T7397] __dump_stack+0x1d/0x30 [ 156.801117][ T7397] dump_stack_lvl+0xe8/0x140 [ 156.801173][ T7397] dump_stack+0x15/0x1b [ 156.801262][ T7397] should_fail_ex+0x265/0x280 [ 156.801291][ T7397] ? getname_flags+0x208/0x3b0 [ 156.801319][ T7397] should_failslab+0x8c/0xb0 [ 156.801373][ T7397] __kmalloc_cache_noprof+0x4c/0x320 [ 156.801415][ T7397] getname_flags+0x208/0x3b0 [ 156.801506][ T7397] __getname_maybe_null+0x66/0x1a0 [ 156.801536][ T7397] __se_sys_statx+0x80/0x1b0 [ 156.801619][ T7397] ? vfs_write+0x7e8/0x960 [ 156.801655][ T7397] ? __rcu_read_unlock+0x4f/0x70 [ 156.801681][ T7397] ? __fget_files+0x184/0x1c0 [ 156.801707][ T7397] ? fput+0x8f/0xc0 [ 156.801806][ T7397] ? ksys_write+0x192/0x1a0 [ 156.801838][ T7397] __x64_sys_statx+0x67/0x80 [ 156.801881][ T7397] x64_sys_call+0x2cb8/0x2ff0 [ 156.801909][ T7397] do_syscall_64+0xd2/0x200 [ 156.801930][ T7397] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 156.801986][ T7397] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 156.802045][ T7397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.802108][ T7397] RIP: 0033:0x7f891095eec9 [ 156.802132][ T7397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.802152][ T7397] RSP: 002b:00007f890f3c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 156.802177][ T7397] RAX: ffffffffffffffda RBX: 00007f8910bb5fa0 RCX: 00007f891095eec9 [ 156.802194][ T7397] RDX: 0000000000001000 RSI: 0000200000002340 RDI: ffffffffffffffff [ 156.802210][ T7397] RBP: 00007f890f3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 156.802302][ T7397] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 156.802318][ T7397] R13: 00007f8910bb6038 R14: 00007f8910bb5fa0 R15: 00007ffc8ccdee68 [ 156.802350][ T7397] [ 157.167266][ T7402] loop4: detected capacity change from 0 to 1024 [ 157.618413][ T7402] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 158.234159][ T7422] loop5: detected capacity change from 0 to 2048 [ 158.266187][ T7427] pim6reg1: entered promiscuous mode [ 158.271739][ T7427] pim6reg1: entered allmulticast mode [ 158.350212][ T7431] serio: Serial port ptm1 [ 158.388660][ T7422] Alternate GPT is invalid, using primary GPT. [ 158.395142][ T7422] loop5: p1 p2 p3 [ 158.398948][ T7422] loop5: partition table partially beyond EOD, truncated [ 158.448734][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 158.448753][ T29] audit: type=1326 audit(1759235604.752:8387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7437 comm="syz.2.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266ec2eec9 code=0x7ffc0000 [ 158.479836][ T29] audit: type=1326 audit(1759235604.782:8388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7437 comm="syz.2.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266ec2eec9 code=0x7ffc0000 [ 158.547554][ T29] audit: type=1326 audit(1759235604.802:8389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7437 comm="syz.2.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f266ec2eec9 code=0x7ffc0000 [ 158.571468][ T29] audit: type=1326 audit(1759235604.802:8390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7437 comm="syz.2.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266ec2eec9 code=0x7ffc0000 [ 158.595108][ T29] audit: type=1326 audit(1759235604.802:8391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7437 comm="syz.2.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266ec2eec9 code=0x7ffc0000 [ 158.644274][ T7442] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1157'. [ 158.647974][ T7443] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1157'. [ 158.709501][ T29] audit: type=1326 audit(1759235605.002:8392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.2.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266ec2eec9 code=0x7ffc0000 [ 158.733810][ T29] audit: type=1326 audit(1759235605.002:8393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.2.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266ec2eec9 code=0x7ffc0000 [ 158.757810][ T29] audit: type=1326 audit(1759235605.002:8394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.2.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f266ec2eec9 code=0x7ffc0000 [ 158.781662][ T29] audit: type=1326 audit(1759235605.002:8395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.2.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266ec2eec9 code=0x7ffc0000 [ 158.806298][ T29] audit: type=1326 audit(1759235605.002:8396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.2.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266ec2eec9 code=0x7ffc0000 [ 159.098401][ T7444] lo speed is unknown, defaulting to 1000 [ 159.338672][ T7459] loop2: detected capacity change from 0 to 1024 [ 159.345721][ T7459] EXT4-fs: quotafile must be on filesystem root [ 159.414120][ T7464] loop5: detected capacity change from 0 to 1024 [ 159.438178][ T7464] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 159.466338][ T7468] loop2: detected capacity change from 0 to 2048 [ 159.536070][ T7468] Alternate GPT is invalid, using primary GPT. [ 159.542633][ T7468] loop2: p1 p2 p3 [ 159.546376][ T7468] loop2: partition table partially beyond EOD, truncated [ 159.697731][ T7478] pim6reg1: entered promiscuous mode [ 159.703413][ T7478] pim6reg1: entered allmulticast mode [ 159.776962][ T7485] loop5: detected capacity change from 0 to 512 [ 159.794199][ T7485] EXT4-fs (loop5): orphan cleanup on readonly fs [ 159.801095][ T7485] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.1173: iget: bad extended attribute block 1 [ 159.824269][ T7485] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1173: couldn't read orphan inode 15 (err -117) [ 159.826325][ T7480] serio: Serial port ptm0 [ 159.936629][ T7499] loop5: detected capacity change from 0 to 512 [ 159.944796][ T7499] EXT4-fs: Ignoring removed mblk_io_submit option [ 159.951711][ T7500] loop4: detected capacity change from 0 to 1024 [ 159.959085][ T7500] EXT4-fs: quotafile must be on filesystem root [ 160.003441][ T7504] loop4: detected capacity change from 0 to 128 [ 160.010531][ T7504] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 160.023465][ T7499] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 160.033832][ T7504] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 160.061749][ T7499] EXT4-fs (loop5): 1 truncate cleaned up [ 160.068178][ T7499] EXT4-fs mount: 12 callbacks suppressed [ 160.068218][ T7499] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.088896][ T5276] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 160.112752][ T4125] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.122133][ T7507] loop4: detected capacity change from 0 to 2048 [ 160.133665][ T7509] loop5: detected capacity change from 0 to 128 [ 160.141713][ T7509] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 160.158268][ T7509] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 160.171209][ T7507] Alternate GPT is invalid, using primary GPT. [ 160.177631][ T7507] loop4: p1 p2 p3 [ 160.181555][ T7507] loop4: partition table partially beyond EOD, truncated [ 160.222798][ T5276] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 160.237797][ T7514] pim6reg1: entered promiscuous mode [ 160.243248][ T7514] pim6reg1: entered allmulticast mode [ 160.274113][ T7518] syzkaller1: entered promiscuous mode [ 160.279859][ T7518] syzkaller1: entered allmulticast mode [ 160.441117][ T7525] loop4: detected capacity change from 0 to 1024 [ 160.448271][ T7525] EXT4-fs: quotafile must be on filesystem root [ 160.480105][ T7529] netlink: 'syz.5.1191': attribute type 27 has an invalid length. [ 160.500435][ T7535] loop4: detected capacity change from 0 to 512 [ 160.509195][ T7535] EXT4-fs: Ignoring removed mblk_io_submit option [ 160.519821][ T7535] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 160.533621][ T7535] EXT4-fs (loop4): 1 truncate cleaned up [ 160.540657][ T7535] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.611068][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.691714][ T7541] loop4: detected capacity change from 0 to 128 [ 160.703135][ T7541] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 160.720879][ T7541] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 160.745143][ T5276] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 160.755929][ T7543] netlink: 5828 bytes leftover after parsing attributes in process `syz.5.1195'. [ 160.777342][ T7546] loop4: detected capacity change from 0 to 2048 [ 160.839889][ T7546] Alternate GPT is invalid, using primary GPT. [ 160.846190][ T7546] loop4: p1 p2 p3 [ 160.850011][ T7546] loop4: partition table partially beyond EOD, truncated [ 160.915101][ T7550] netlink: 'syz.1.1198': attribute type 1 has an invalid length. [ 160.934055][ T7550] tipc: Enabling of bearer rejected, already enabled [ 161.036949][ T7575] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1209'. [ 161.052529][ T7575] SELinux: failed to load policy [ 161.074840][ T7579] loop4: detected capacity change from 0 to 2048 [ 161.129623][ T7579] Alternate GPT is invalid, using primary GPT. [ 161.136086][ T7579] loop4: p1 p2 p3 [ 161.139863][ T7579] loop4: partition table partially beyond EOD, truncated [ 161.203791][ T7591] FAULT_INJECTION: forcing a failure. [ 161.203791][ T7591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.217488][ T7591] CPU: 1 UID: 0 PID: 7591 Comm: syz.4.1216 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 161.217643][ T7591] Tainted: [W]=WARN [ 161.217649][ T7591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 161.217741][ T7591] Call Trace: [ 161.217747][ T7591] [ 161.217754][ T7591] __dump_stack+0x1d/0x30 [ 161.217784][ T7591] dump_stack_lvl+0xe8/0x140 [ 161.217809][ T7591] dump_stack+0x15/0x1b [ 161.217859][ T7591] should_fail_ex+0x265/0x280 [ 161.217892][ T7591] should_fail+0xb/0x20 [ 161.217922][ T7591] should_fail_usercopy+0x1a/0x20 [ 161.217957][ T7591] _copy_from_user+0x1c/0xb0 [ 161.218039][ T7591] ___sys_sendmsg+0xc1/0x1d0 [ 161.218106][ T7591] __x64_sys_sendmsg+0xd4/0x160 [ 161.218137][ T7591] x64_sys_call+0x191e/0x2ff0 [ 161.218158][ T7591] do_syscall_64+0xd2/0x200 [ 161.218184][ T7591] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 161.218296][ T7591] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 161.218331][ T7591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.218387][ T7591] RIP: 0033:0x7f891095eec9 [ 161.218401][ T7591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.218417][ T7591] RSP: 002b:00007f890f3c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.218435][ T7591] RAX: ffffffffffffffda RBX: 00007f8910bb5fa0 RCX: 00007f891095eec9 [ 161.218447][ T7591] RDX: 0000000020004000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 161.218458][ T7591] RBP: 00007f890f3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 161.218469][ T7591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.218535][ T7591] R13: 00007f8910bb6038 R14: 00007f8910bb5fa0 R15: 00007ffc8ccdee68 [ 161.218556][ T7591] [ 161.460359][ T7597] serio: Serial port ptm0 [ 161.469549][ T7596] 9pnet_fd: Insufficient options for proto=fd [ 161.500967][ T7602] loop2: detected capacity change from 0 to 512 [ 161.529186][ T7607] loop4: detected capacity change from 0 to 512 [ 161.533905][ T7602] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.536067][ T7607] EXT4-fs: Ignoring removed mblk_io_submit option [ 161.554881][ T7602] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.558807][ T7607] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 161.567725][ T7602] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.1220: corrupted xattr block 19: overlapping e_value [ 161.579632][ T7607] EXT4-fs (loop4): 1 truncate cleaned up [ 161.590657][ T7602] EXT4-fs (loop2): Remounting filesystem read-only [ 161.595851][ T7607] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.602080][ T7602] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 161.602795][ T7602] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 161.634427][ T7602] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 161.647428][ T7607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1222'. [ 161.674660][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.771697][ T7619] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1225'. [ 161.886860][ T7623] loop2: detected capacity change from 0 to 512 [ 161.916600][ T7623] EXT4-fs: Ignoring removed mblk_io_submit option [ 161.937102][ T7623] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 161.950491][ T7623] EXT4-fs (loop2): 1 truncate cleaned up [ 161.956751][ T7623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.979273][ T7623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1227'. [ 162.390703][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.537526][ T7639] netlink: 'syz.4.1235': attribute type 1 has an invalid length. [ 162.554247][ T7639] loop4: detected capacity change from 0 to 512 [ 162.575423][ T7639] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.1235: Failed to acquire dquot type 1 [ 162.598679][ T7639] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.1235: Failed to acquire dquot type 1 [ 162.611730][ T7639] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1235: bg 0: block 248: padding at end of block bitmap is not set [ 162.637930][ T7639] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 162.647012][ T7639] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.1235: Failed to acquire dquot type 1 [ 162.679199][ T7639] EXT4-fs (loop4): 1 orphan inode deleted [ 162.685720][ T7639] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.698923][ T7639] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.722596][ T7639] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.748607][ T7639] tipc: Bearer : already 2 bearers with priority 10 [ 162.756192][ T7639] tipc: Bearer : trying with adjusted priority [ 162.763426][ T7639] tipc: Enabling of bearer rejected, failed to enable media [ 162.874340][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.880008][ T7660] serio: Serial port ptm0 [ 163.048253][ T7657] siw: device registration error -23 [ 163.059905][ T7657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1240'. [ 163.070399][ T7672] loop2: detected capacity change from 0 to 512 [ 163.090734][ T7672] EXT4-fs (loop2): orphan cleanup on readonly fs [ 163.100288][ T7672] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1244: iget: bad extended attribute block 1 [ 163.114939][ T7672] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1244: couldn't read orphan inode 15 (err -117) [ 163.129734][ T7672] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 163.187172][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.266675][ T7691] netlink: 'syz.0.1252': attribute type 1 has an invalid length. [ 163.268149][ T7699] loop4: detected capacity change from 0 to 512 [ 163.289832][ T7691] tipc: Enabling of bearer rejected, already enabled [ 163.292783][ T7699] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.312987][ T7699] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.327604][ T7701] syzkaller1: entered promiscuous mode [ 163.333393][ T7701] syzkaller1: entered allmulticast mode [ 163.384650][ T7708] serio: Serial port ptm0 [ 163.476551][ T7717] loop2: detected capacity change from 0 to 512 [ 163.528984][ T7717] EXT4-fs (loop2): orphan cleanup on readonly fs [ 163.536457][ T7717] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1261: iget: bad extended attribute block 1 [ 163.549625][ T7717] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1261: couldn't read orphan inode 15 (err -117) [ 163.562499][ T7717] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 164.037893][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.047310][ T7724] loop5: detected capacity change from 0 to 512 [ 164.071449][ T7724] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.072833][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 164.072851][ T29] audit: type=1326 audit(1759235610.372:8530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.2.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266ec2eec9 code=0x7ffc0000 [ 164.108903][ T7724] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.128496][ T29] audit: type=1326 audit(1759235610.412:8531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.2.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f266ec2eec9 code=0x7ffc0000 [ 164.152643][ T29] audit: type=1326 audit(1759235610.412:8532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.2.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266ec2eec9 code=0x7ffc0000 [ 164.177048][ T29] audit: type=1326 audit(1759235610.412:8533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.2.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266ec2eec9 code=0x7ffc0000 [ 164.200843][ T29] audit: type=1326 audit(1759235610.412:8534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.2.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f266ec2eec9 code=0x7ffc0000 [ 164.204567][ T7724] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.1263: corrupted xattr block 19: overlapping e_value [ 164.224656][ T29] audit: type=1326 audit(1759235610.412:8535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.2.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266ec2eec9 code=0x7ffc0000 [ 164.224696][ T29] audit: type=1326 audit(1759235610.412:8536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.2.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266ec2eec9 code=0x7ffc0000 [ 164.285569][ T29] audit: type=1326 audit(1759235610.412:8537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.2.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f266ec2eec9 code=0x7ffc0000 [ 164.304719][ T7724] EXT4-fs (loop5): Remounting filesystem read-only [ 164.309592][ T29] audit: type=1326 audit(1759235610.412:8538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.2.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266ec2eec9 code=0x7ffc0000 [ 164.316397][ T7724] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 164.340652][ T29] audit: type=1326 audit(1759235610.412:8539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.2.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266ec2eec9 code=0x7ffc0000 [ 164.357525][ T7724] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 164.394261][ T7724] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 164.414079][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.444611][ T4125] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.475013][ T7743] FAULT_INJECTION: forcing a failure. [ 164.475013][ T7743] name failslab, interval 1, probability 0, space 0, times 0 [ 164.488033][ T7743] CPU: 0 UID: 0 PID: 7743 Comm: syz.4.1267 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 164.488142][ T7743] Tainted: [W]=WARN [ 164.488152][ T7743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 164.488248][ T7743] Call Trace: [ 164.488257][ T7743] [ 164.488267][ T7743] __dump_stack+0x1d/0x30 [ 164.488296][ T7743] dump_stack_lvl+0xe8/0x140 [ 164.488334][ T7743] dump_stack+0x15/0x1b [ 164.488358][ T7743] should_fail_ex+0x265/0x280 [ 164.488407][ T7743] should_failslab+0x8c/0xb0 [ 164.488442][ T7743] kmem_cache_alloc_noprof+0x50/0x310 [ 164.488487][ T7743] ? audit_log_start+0x365/0x6c0 [ 164.488531][ T7743] audit_log_start+0x365/0x6c0 [ 164.488615][ T7743] audit_seccomp+0x48/0x100 [ 164.488646][ T7743] ? __seccomp_filter+0x68c/0x10d0 [ 164.488676][ T7743] __seccomp_filter+0x69d/0x10d0 [ 164.488707][ T7743] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 164.488785][ T7743] ? vfs_write+0x7e8/0x960 [ 164.488815][ T7743] ? __rcu_read_unlock+0x4f/0x70 [ 164.488912][ T7743] ? __fget_files+0x184/0x1c0 [ 164.489037][ T7743] __secure_computing+0x82/0x150 [ 164.489066][ T7743] syscall_trace_enter+0xcf/0x1e0 [ 164.489116][ T7743] do_syscall_64+0xac/0x200 [ 164.489143][ T7743] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 164.489175][ T7743] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 164.489266][ T7743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.489289][ T7743] RIP: 0033:0x7f891095eec9 [ 164.489304][ T7743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.489367][ T7743] RSP: 002b:00007f890f3c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 164.489393][ T7743] RAX: ffffffffffffffda RBX: 00007f8910bb5fa0 RCX: 00007f891095eec9 [ 164.489435][ T7743] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 00002000000006c0 [ 164.489492][ T7743] RBP: 00007f890f3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 164.489509][ T7743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.489525][ T7743] R13: 00007f8910bb6038 R14: 00007f8910bb5fa0 R15: 00007ffc8ccdee68 [ 164.489551][ T7743] [ 164.737071][ T7740] netlink: 'syz.2.1268': attribute type 1 has an invalid length. [ 164.753185][ T7740] loop2: detected capacity change from 0 to 512 [ 164.764006][ T7749] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1272'. [ 164.774992][ T7740] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.1268: Failed to acquire dquot type 1 [ 164.792422][ T7740] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.1268: Failed to acquire dquot type 1 [ 164.830133][ T7740] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1268: bg 0: block 248: padding at end of block bitmap is not set [ 164.872431][ T7740] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 164.988287][ T7740] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.1268: Failed to acquire dquot type 1 [ 165.011039][ T7773] loop4: detected capacity change from 0 to 1024 [ 165.229802][ T7740] EXT4-fs (loop2): 1 orphan inode deleted [ 165.238386][ T7773] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 165.255381][ T7740] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.270546][ T7740] ext4 filesystem being mounted at /256/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.284381][ T7773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.481964][ T7740] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.511173][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.552753][ T7740] tipc: Enabling of bearer rejected, already enabled [ 165.579809][ T1034] hid_parser_main: 18 callbacks suppressed [ 165.579832][ T1034] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 165.593353][ T1034] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 165.601130][ T1034] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 165.614245][ T1034] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 165.621790][ T1034] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 165.629289][ T1034] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 165.636774][ T1034] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 165.637506][ T7785] loop2: detected capacity change from 0 to 512 [ 165.644284][ T1034] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 165.644313][ T1034] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 165.644336][ T1034] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 165.646610][ T1034] hid-generic 0000:0000:0000.0003: hidraw0: HID v8.00 Device [syz0] on syz1 [ 165.730576][ T7792] loop4: detected capacity change from 0 to 2048 [ 165.752627][ T7785] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.770451][ T7792] Alternate GPT is invalid, using primary GPT. [ 165.777070][ T7792] loop4: p1 p2 p3 [ 165.780883][ T7792] loop4: partition table partially beyond EOD, truncated [ 165.788280][ T7785] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.801636][ T7785] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.1281: corrupted xattr block 19: overlapping e_value [ 165.824650][ T7785] EXT4-fs (loop2): Remounting filesystem read-only [ 165.831281][ T7785] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 165.843662][ T7785] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 165.853498][ T7785] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 165.888986][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.950720][ T7811] serio: Serial port ptm0 [ 165.985814][ T7815] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1294'. [ 166.004458][ T7818] loop2: detected capacity change from 0 to 2048 [ 166.212656][ T7827] bridge: RTM_NEWNEIGH with invalid ether address [ 166.380924][ T7818] loop2: p2 < > p4 [ 166.385378][ T7830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1291'. [ 166.419494][ T7818] loop2: p4 size 262144 extends beyond EOD, truncated [ 166.740155][ T7839] loop2: detected capacity change from 0 to 1024 [ 166.749964][ T7838] loop4: detected capacity change from 0 to 1024 [ 166.757089][ T7839] EXT4-fs: quotafile must be on filesystem root [ 166.765143][ T7838] EXT4-fs: Ignoring removed orlov option [ 166.800135][ T7838] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.837146][ T7845] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1303'. [ 166.891231][ T7847] loop5: detected capacity change from 0 to 512 [ 166.913032][ T7847] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.932363][ T7847] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.969637][ T7847] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.1304: corrupted xattr block 19: overlapping e_value [ 166.984294][ T7847] EXT4-fs (loop5): Remounting filesystem read-only [ 166.991404][ T7847] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 167.003934][ T7847] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 167.014100][ T7847] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 167.015089][ T7851] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1305'. [ 167.027232][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.063561][ T4125] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.214116][ T7862] syzkaller1: entered promiscuous mode [ 167.219738][ T7862] syzkaller1: entered allmulticast mode [ 167.467088][ T7867] siw: device registration error -23 [ 167.503659][ T7867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1307'. [ 167.741491][ T7869] pim6reg1: entered promiscuous mode [ 167.747046][ T7869] pim6reg1: entered allmulticast mode [ 167.747301][ T7860] loop4: detected capacity change from 0 to 8192 [ 167.897142][ T7881] loop2: detected capacity change from 0 to 1024 [ 168.012424][ T7881] EXT4-fs: quotafile must be on filesystem root [ 168.031957][ T7871] lo speed is unknown, defaulting to 1000 [ 168.273787][ T7887] lo speed is unknown, defaulting to 1000 [ 169.042709][ T7901] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1321'. [ 169.092111][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 169.092130][ T29] audit: type=1326 audit(1759235614.492:8645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7888 comm="syz.0.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee7a0eec9 code=0x7ffc0000 [ 169.433162][ T7909] pim6reg1: entered promiscuous mode [ 169.438801][ T7909] pim6reg1: entered allmulticast mode [ 169.475346][ T7917] syzkaller1: entered promiscuous mode [ 169.481186][ T7917] syzkaller1: entered allmulticast mode [ 169.529465][ T7915] serio: Serial port ptm0 [ 169.587057][ T7921] loop4: detected capacity change from 0 to 1024 [ 169.618359][ T7921] EXT4-fs: Ignoring removed orlov option [ 169.624238][ T7921] EXT4-fs: Ignoring removed nomblk_io_submit option [ 169.752974][ T7921] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.072157][ T7935] lo speed is unknown, defaulting to 1000 [ 170.762003][ T7939] loop5: detected capacity change from 0 to 512 [ 170.770555][ T7939] EXT4-fs: Ignoring removed nobh option [ 170.780634][ T7939] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.1332: corrupted inode contents [ 170.820966][ T7939] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #3: comm syz.5.1332: mark_inode_dirty error [ 170.839856][ T7939] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.1332: corrupted inode contents [ 170.862213][ T7939] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.1332: mark_inode_dirty error [ 170.890718][ T7939] Quota error (device loop5): write_blk: dquota write failed [ 170.920831][ T7939] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 170.964503][ T7939] EXT4-fs error (device loop5): ext4_acquire_dquot:6943: comm syz.5.1332: Failed to acquire dquot type 0 [ 170.991620][ T7956] siw: device registration error -23 [ 170.998314][ T7939] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1332: corrupted inode contents [ 171.014077][ T7956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1338'. [ 171.024270][ T7939] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.1332: mark_inode_dirty error [ 171.050949][ T7939] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1332: corrupted inode contents [ 171.072653][ T29] audit: type=1326 audit(1759235617.282:8688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7954 comm="syz.1.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2197eec9 code=0x7ffc0000 [ 171.096715][ T29] audit: type=1326 audit(1759235617.282:8689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7954 comm="syz.1.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2197eec9 code=0x7ffc0000 [ 171.120588][ T29] audit: type=1326 audit(1759235617.292:8690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7954 comm="syz.1.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c2197eec9 code=0x7ffc0000 [ 171.144307][ T29] audit: type=1326 audit(1759235617.292:8691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7954 comm="syz.1.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2197eec9 code=0x7ffc0000 [ 171.168280][ T29] audit: type=1326 audit(1759235617.292:8692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7954 comm="syz.1.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c2197eec9 code=0x7ffc0000 [ 171.192011][ T29] audit: type=1326 audit(1759235617.292:8693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7954 comm="syz.1.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2197eec9 code=0x7ffc0000 [ 171.215918][ T29] audit: type=1326 audit(1759235617.292:8694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7954 comm="syz.1.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c2197eec9 code=0x7ffc0000 [ 171.251066][ T7939] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.1332: mark_inode_dirty error [ 171.264418][ T7939] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1332: corrupted inode contents [ 171.276883][ T7939] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 171.287496][ T7939] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1332: corrupted inode contents [ 171.322479][ T7939] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.1332: mark_inode_dirty error [ 171.335545][ T7939] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 171.348222][ T7939] EXT4-fs (loop5): 1 truncate cleaned up [ 171.354600][ T7939] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.370678][ T7939] ext4 filesystem being mounted at /217/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.545491][ T7963] pim6reg1: entered promiscuous mode [ 171.550871][ T7963] pim6reg1: entered allmulticast mode [ 171.559770][ T7962] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1339'. [ 171.577262][ T7957] tipc: Enabled bearer , priority 0 [ 171.605247][ T7957] syzkaller0: entered promiscuous mode [ 171.611408][ T7957] syzkaller0: entered allmulticast mode [ 171.650668][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.685977][ T7959] tipc: Resetting bearer [ 171.699534][ T7968] syzkaller1: entered promiscuous mode [ 171.705163][ T7968] syzkaller1: entered allmulticast mode [ 171.738974][ T7955] tipc: Resetting bearer [ 171.748515][ T7955] tipc: Disabling bearer [ 171.759753][ T7974] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1342'. [ 171.839155][ T7966] EXT4-fs: Ignoring removed orlov option [ 171.854037][ T7966] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 171.884181][ T7979] loop2: detected capacity change from 0 to 1024 [ 171.902142][ T7979] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 171.920612][ T7966] EXT4-fs (loop5): can't enable nombcache during remount [ 171.938840][ T7979] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.002951][ T7984] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 172.013193][ T7984] gretap1: entered allmulticast mode [ 172.209745][ T7985] lo speed is unknown, defaulting to 1000 [ 172.480976][ T4125] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.525445][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.814741][ T8000] serio: Serial port ptm0 [ 173.043750][ T8007] pim6reg1: entered promiscuous mode [ 173.049461][ T8007] pim6reg1: entered allmulticast mode [ 173.127041][ T8014] syzkaller1: entered promiscuous mode [ 173.132889][ T8014] syzkaller1: entered allmulticast mode [ 173.184877][ T8019] loop2: detected capacity change from 0 to 512 [ 173.195086][ T8019] EXT4-fs: Ignoring removed nobh option [ 173.210642][ T8019] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.1357: corrupted inode contents [ 173.223162][ T8019] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.1357: mark_inode_dirty error [ 173.236492][ T8019] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.1357: corrupted inode contents [ 173.250387][ T8019] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.1357: mark_inode_dirty error [ 173.262719][ T8019] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.1357: Failed to acquire dquot type 0 [ 173.278207][ T8019] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1357: corrupted inode contents [ 173.295461][ T8019] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.1357: mark_inode_dirty error [ 173.355516][ T8019] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1357: corrupted inode contents [ 173.371424][ T8026] loop4: detected capacity change from 0 to 1024 [ 173.387945][ T8019] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.1357: mark_inode_dirty error [ 173.399500][ T8026] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 173.414685][ T8019] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1357: corrupted inode contents [ 173.420499][ T8026] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.451707][ T8019] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 173.466390][ T8019] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1357: corrupted inode contents [ 173.481240][ T8019] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.1357: mark_inode_dirty error [ 173.500099][ T8019] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 173.538366][ T8019] EXT4-fs (loop2): 1 truncate cleaned up [ 173.549369][ T8019] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.562782][ T8031] tipc: Enabled bearer , priority 0 [ 173.570216][ T8031] syzkaller0: entered promiscuous mode [ 173.575704][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.576955][ T8031] syzkaller0: entered allmulticast mode [ 173.587612][ T8019] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.602462][ T8031] syzkaller0: mtu greater than device maximum [ 173.610804][ T8030] tipc: Resetting bearer [ 173.630546][ T8030] tipc: Disabling bearer [ 173.643664][ T8036] loop4: detected capacity change from 0 to 512 [ 173.662032][ T8036] EXT4-fs (loop4): orphan cleanup on readonly fs [ 173.678010][ T8036] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1362: iget: bad extended attribute block 1 [ 173.703222][ T8036] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1362: couldn't read orphan inode 15 (err -117) [ 173.746406][ T8036] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 173.797737][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.216214][ T8049] lo speed is unknown, defaulting to 1000 [ 174.390663][ T8019] EXT4-fs: Ignoring removed orlov option [ 174.396517][ T8019] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 174.408499][ T8019] EXT4-fs (loop2): can't enable nombcache during remount [ 174.430262][ T8046] serio: Serial port ptm1 [ 174.517397][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.545055][ T8056] syzkaller1: entered promiscuous mode [ 174.550944][ T8056] syzkaller1: entered allmulticast mode [ 174.751166][ T8060] netlink: 'syz.5.1371': attribute type 7 has an invalid length. [ 174.759623][ T8060] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1371'. [ 174.970009][ T8060] bridge2: port 1(bond1) entered blocking state [ 174.976325][ T8060] bridge2: port 1(bond1) entered disabled state [ 174.983183][ T8060] bond1: entered allmulticast mode [ 175.003305][ T8060] loop5: detected capacity change from 0 to 1764 [ 175.007926][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 175.007946][ T29] audit: type=1400 audit(1759235621.262:8803): avc: denied { create } for pid=8059 comm="syz.5.1371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 175.038285][ T29] audit: type=1400 audit(1759235621.262:8804): avc: denied { write } for pid=8059 comm="syz.5.1371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 175.394148][ T8061] lo speed is unknown, defaulting to 1000 [ 175.650974][ T8082] netlink: 'syz.0.1374': attribute type 1 has an invalid length. [ 175.681528][ T8082] tipc: Enabling of bearer rejected, already enabled [ 175.956993][ T8087] loop5: detected capacity change from 0 to 512 [ 175.988758][ T8087] EXT4-fs (loop5): orphan cleanup on readonly fs [ 176.014754][ T8087] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.1378: iget: bad extended attribute block 1 [ 176.067368][ T8087] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1378: couldn't read orphan inode 15 (err -117) [ 176.127914][ T29] audit: type=1326 audit(1759235622.412:8805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8091 comm="syz.1.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2197eec9 code=0x7ffc0000 [ 176.151899][ T29] audit: type=1326 audit(1759235622.422:8806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8091 comm="syz.1.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f2c2197eec9 code=0x7ffc0000 [ 176.176023][ T29] audit: type=1326 audit(1759235622.422:8807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8091 comm="syz.1.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2197eec9 code=0x7ffc0000 [ 176.200123][ T29] audit: type=1326 audit(1759235622.422:8808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8091 comm="syz.1.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2197eec9 code=0x7ffc0000 [ 176.285193][ T8093] lo speed is unknown, defaulting to 1000 [ 176.298803][ T8087] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 176.438454][ T4125] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.124497][ T8105] syzkaller1: entered promiscuous mode [ 177.130519][ T8105] syzkaller1: entered allmulticast mode [ 177.167016][ T29] audit: type=1326 audit(1759235623.462:8809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.1.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2197eec9 code=0x7ffc0000 [ 177.191246][ T29] audit: type=1326 audit(1759235623.462:8810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.1.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2197eec9 code=0x7ffc0000 [ 177.230370][ T8112] lo speed is unknown, defaulting to 1000 [ 177.257640][ T29] audit: type=1326 audit(1759235623.522:8811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.1.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c2197eec9 code=0x7ffc0000 [ 177.281635][ T29] audit: type=1326 audit(1759235623.522:8812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.1.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2197eec9 code=0x7ffc0000 [ 177.323728][ T8111] siw: device registration error -23 [ 177.329870][ T8111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1383'. [ 177.670536][ T8119] serio: Serial port ptm0 [ 177.901130][ T8132] siw: device registration error -23 [ 177.975538][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1387'. [ 178.087000][ T8134] loop4: detected capacity change from 0 to 1024 [ 178.319287][ T8134] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 178.401641][ T8134] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.498112][ T8142] netlink: 'syz.1.1390': attribute type 1 has an invalid length. [ 178.522547][ T8147] serio: Serial port ptm0 [ 178.550055][ T8142] tipc: Enabling of bearer rejected, already enabled [ 178.596080][ T8150] lo speed is unknown, defaulting to 1000 [ 178.632698][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.699955][ T8158] syzkaller0: entered promiscuous mode [ 178.705849][ T8158] syzkaller0: entered allmulticast mode [ 178.861639][ T8167] netlink: 'syz.5.1399': attribute type 13 has an invalid length. [ 178.900235][ T8167] gretap0: refused to change device tx_queue_len [ 178.928927][ T8167] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 179.041005][ T8172] serio: Serial port ptm1 [ 179.252981][ T8182] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1404'. [ 179.407534][ T8187] netlink: 'syz.5.1405': attribute type 1 has an invalid length. [ 179.494708][ T8185] loop5: detected capacity change from 0 to 512 [ 179.528742][ T8185] EXT4-fs error (device loop5): ext4_acquire_dquot:6943: comm syz.5.1405: Failed to acquire dquot type 1 [ 179.541728][ T8185] EXT4-fs error (device loop5): ext4_acquire_dquot:6943: comm syz.5.1405: Failed to acquire dquot type 1 [ 179.562308][ T8185] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1405: bg 0: block 248: padding at end of block bitmap is not set [ 179.580005][ T8185] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 179.589512][ T8185] EXT4-fs error (device loop5): ext4_acquire_dquot:6943: comm syz.5.1405: Failed to acquire dquot type 1 [ 179.605707][ T8185] EXT4-fs (loop5): 1 orphan inode deleted [ 179.613634][ T8185] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.627209][ T8185] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.687263][ T8185] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.705894][ T8185] tipc: Enabling of bearer rejected, already enabled [ 179.757691][ T8199] serio: Serial port ptm0 [ 180.042255][ T8206] lo speed is unknown, defaulting to 1000 [ 180.219065][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 180.219084][ T29] audit: type=1326 audit(1759235626.522:8954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8207 comm="syz.5.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6905eec9 code=0x7ffc0000 [ 180.249722][ T29] audit: type=1326 audit(1759235626.522:8955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8207 comm="syz.5.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f2f6905eec9 code=0x7ffc0000 [ 180.273451][ T29] audit: type=1326 audit(1759235626.522:8956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8207 comm="syz.5.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6905eec9 code=0x7ffc0000 [ 180.327010][ T8208] lo speed is unknown, defaulting to 1000 [ 180.390033][ T29] audit: type=1326 audit(1759235626.592:8957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8207 comm="syz.5.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6905eec9 code=0x7ffc0000 [ 180.659805][ T8220] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1413'. [ 180.966615][ T8227] serio: Serial port ptm0 [ 181.677737][ T8240] lo speed is unknown, defaulting to 1000 [ 181.964841][ T8245] pim6reg1: entered promiscuous mode [ 181.970249][ T8245] pim6reg1: entered allmulticast mode [ 182.037441][ T8249] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1424'. [ 182.121510][ T8251] loop5: detected capacity change from 0 to 512 [ 182.234268][ T8255] syzkaller1: entered promiscuous mode [ 182.240052][ T8255] syzkaller1: entered allmulticast mode [ 182.275510][ T29] audit: type=1326 audit(1759235628.572:8958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.4.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891095eec9 code=0x7ffc0000 [ 182.299317][ T29] audit: type=1326 audit(1759235628.572:8959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.4.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891095eec9 code=0x7ffc0000 [ 182.323595][ T29] audit: type=1326 audit(1759235628.572:8960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.4.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f891095eec9 code=0x7ffc0000 [ 182.347399][ T29] audit: type=1326 audit(1759235628.572:8961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.4.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891095eec9 code=0x7ffc0000 [ 182.371575][ T29] audit: type=1326 audit(1759235628.572:8962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.4.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891095eec9 code=0x7ffc0000 [ 182.457671][ T8257] lo speed is unknown, defaulting to 1000 [ 182.555703][ T8251] EXT4-fs (loop5): orphan cleanup on readonly fs [ 182.578535][ T8251] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.1425: iget: bad extended attribute block 1 [ 182.636633][ T8251] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1425: couldn't read orphan inode 15 (err -117) [ 182.699142][ T8251] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 182.753822][ T29] audit: type=1326 audit(1759235629.052:8963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8268 comm="syz.4.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891095eec9 code=0x7ffc0000 [ 182.788425][ T8265] serio: Serial port ptm0 [ 182.832809][ T8271] syzkaller1: entered promiscuous mode [ 182.838708][ T8271] syzkaller1: entered allmulticast mode [ 182.855355][ T4125] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.872657][ T8272] loop2: detected capacity change from 0 to 1024 [ 182.899689][ T8272] EXT4-fs: Ignoring removed orlov option [ 182.905734][ T8272] EXT4-fs: Ignoring removed nomblk_io_submit option [ 183.017251][ T8272] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.861670][ T8290] lo speed is unknown, defaulting to 1000 [ 184.288421][ T8295] netlink: 'syz.1.1439': attribute type 1 has an invalid length. [ 184.305378][ T8295] tipc: Enabling of bearer rejected, already enabled [ 184.546298][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.557895][ T8297] loop5: detected capacity change from 0 to 512 [ 184.633944][ T8301] lo speed is unknown, defaulting to 1000 [ 184.710856][ T8297] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.749047][ T8297] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.786605][ T8309] netlink: 'syz.0.1444': attribute type 21 has an invalid length. [ 184.794612][ T8309] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1444'. [ 184.828428][ T8309] netlink: 'syz.0.1444': attribute type 6 has an invalid length. [ 184.836573][ T8309] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1444'. [ 184.849506][ T4125] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.960237][ T8316] serio: Serial port ptm0 [ 185.167865][ T8327] loop2: detected capacity change from 0 to 512 [ 185.177351][ T8327] EXT4-fs (loop2): orphan cleanup on readonly fs [ 185.184189][ T8327] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1451: iget: bad extended attribute block 1 [ 185.202559][ T8327] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1451: couldn't read orphan inode 15 (err -117) [ 185.220211][ T8327] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 185.223122][ T36] hid_parser_main: 18 callbacks suppressed [ 185.223148][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 185.246362][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 185.254057][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 185.383087][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.404290][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 185.404309][ T29] audit: type=1326 audit(1759235631.702:9026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8336 comm="syz.5.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6905eec9 code=0x7ffc0000 [ 185.668220][ T8338] lo speed is unknown, defaulting to 1000 [ 185.813423][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 185.821281][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 185.829215][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 185.836718][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 185.844324][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 185.851866][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 185.859672][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 185.881793][ T3467] hid-generic 0000:0000:0000.0005: hidraw0: HID v8.00 Device [syz0] on syz1 [ 185.909227][ T36] hid-generic 0000:0000:0000.0004: hidraw0: HID v8.00 Device [syz0] on syz1 [ 186.091434][ T8337] lo speed is unknown, defaulting to 1000 [ 186.288836][ T8366] pim6reg1: entered promiscuous mode [ 186.294268][ T8366] pim6reg1: entered allmulticast mode [ 186.572524][ T29] audit: type=1326 audit(1759235631.742:9027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8336 comm="syz.5.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f2f6905eec9 code=0x7ffc0000 [ 186.596481][ T29] audit: type=1326 audit(1759235631.742:9028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8336 comm="syz.5.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6905eec9 code=0x7ffc0000 [ 186.620324][ T29] audit: type=1326 audit(1759235631.742:9029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8336 comm="syz.5.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6905eec9 code=0x7ffc0000 [ 186.643971][ T29] audit: type=1326 audit(1759235632.362:9030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8353 comm="syz.4.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891095eec9 code=0x7ffc0000 [ 186.667436][ T29] audit: type=1326 audit(1759235632.362:9031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8353 comm="syz.4.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891095eec9 code=0x7ffc0000 [ 186.691584][ T29] audit: type=1326 audit(1759235632.362:9032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8353 comm="syz.4.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f891095eec9 code=0x7ffc0000 [ 186.715919][ T29] audit: type=1326 audit(1759235632.362:9033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8353 comm="syz.4.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891095eec9 code=0x7ffc0000 [ 186.740500][ T29] audit: type=1326 audit(1759235632.362:9034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8353 comm="syz.4.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891095eec9 code=0x7ffc0000 [ 186.764240][ T29] audit: type=1326 audit(1759235632.362:9035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8353 comm="syz.4.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f891095eec9 code=0x7ffc0000 [ 186.842109][ T8378] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1467'. [ 187.056665][ T8358] loop2: detected capacity change from 0 to 4096 [ 187.065064][ T8358] EXT4-fs: Ignoring removed nomblk_io_submit option [ 187.154383][ T8386] loop4: detected capacity change from 0 to 128 [ 187.202712][ T8386] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 187.229064][ T8386] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 187.279380][ T8382] lo speed is unknown, defaulting to 1000 [ 187.316888][ T8358] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.331041][ T51] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 187.578439][ T8409] pim6reg1: entered promiscuous mode [ 187.583819][ T8409] pim6reg1: entered allmulticast mode [ 187.611917][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.621350][ T8403] lo speed is unknown, defaulting to 1000 [ 187.765499][ T8416] netlink: 'syz.2.1480': attribute type 1 has an invalid length. [ 187.844798][ T8415] loop2: detected capacity change from 0 to 512 [ 187.880836][ T8415] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.1480: Failed to acquire dquot type 1 [ 187.908745][ T8415] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.1480: Failed to acquire dquot type 1 [ 187.938764][ T8415] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1480: bg 0: block 248: padding at end of block bitmap is not set [ 187.957001][ T8415] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 187.977728][ T8415] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.1480: Failed to acquire dquot type 1 [ 187.996343][ T8427] loop4: detected capacity change from 0 to 8192 [ 187.997891][ T8415] EXT4-fs (loop2): 1 orphan inode deleted [ 188.018247][ T8415] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.038085][ T8415] ext4 filesystem being mounted at /290/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.051631][ T8415] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.091801][ T8427] siw: device registration error -23 [ 188.093712][ T8415] tipc: Enabling of bearer rejected, already enabled [ 188.121222][ T8427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1484'. [ 188.428209][ T8456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1492'. [ 188.465223][ T8447] loop4: detected capacity change from 0 to 8192 [ 188.654509][ T8456] lo speed is unknown, defaulting to 1000 [ 188.958636][ T8461] siw: device registration error -23 [ 188.979467][ T8461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1491'. [ 189.000044][ T8463] pim6reg1: entered promiscuous mode [ 189.005414][ T8463] pim6reg1: entered allmulticast mode [ 189.295987][ T8488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1500'. [ 189.326579][ T8489] loop2: detected capacity change from 0 to 512 [ 189.344358][ T8489] EXT4-fs: Ignoring removed nobh option [ 189.371087][ T8489] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.1505: corrupted inode contents [ 189.391276][ T8486] lo speed is unknown, defaulting to 1000 [ 189.397602][ T8489] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.1505: mark_inode_dirty error [ 189.427789][ T8489] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.1505: corrupted inode contents [ 189.450841][ T8489] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.1505: mark_inode_dirty error [ 189.482790][ T8489] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.1505: Failed to acquire dquot type 0 [ 189.622455][ T8489] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1505: corrupted inode contents [ 189.648246][ T8489] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.1505: mark_inode_dirty error [ 189.900373][ T8498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1507'. [ 190.113953][ T8500] lo speed is unknown, defaulting to 1000 [ 190.172197][ T8489] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1505: corrupted inode contents [ 190.279992][ T8502] loop4: detected capacity change from 0 to 128 [ 190.287575][ T8502] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 190.308312][ T8502] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 190.438718][ T8489] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.1505: mark_inode_dirty error [ 190.548231][ T8489] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1505: corrupted inode contents [ 190.605840][ T2099] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 190.645900][ T8489] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 190.675154][ T8509] serio: Serial port ptm0 [ 190.692167][ T8489] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1505: corrupted inode contents [ 190.765921][ T8489] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.1505: mark_inode_dirty error [ 190.826279][ T8489] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 190.908255][ T8489] EXT4-fs (loop2): 1 truncate cleaned up [ 190.958323][ T8489] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.000971][ T8524] netlink: 'syz.1.1517': attribute type 2 has an invalid length. [ 191.040988][ T8489] ext4 filesystem being mounted at /296/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.128205][ T3527] hid_parser_main: 46 callbacks suppressed [ 191.128225][ T3527] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 191.142163][ T3527] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 191.149653][ T3527] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 191.180659][ T8521] loop4: detected capacity change from 0 to 8192 [ 191.222212][ T29] kauditd_printk_skb: 195 callbacks suppressed [ 191.222228][ T29] audit: type=1326 audit(1759235637.512:9223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8520 comm="syz.4.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891095eec9 code=0x7ffc0000 [ 191.253009][ T29] audit: type=1326 audit(1759235637.512:9224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8520 comm="syz.4.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891095eec9 code=0x7ffc0000 [ 191.277430][ T29] audit: type=1326 audit(1759235637.522:9225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8520 comm="syz.4.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f891095eec9 code=0x7ffc0000 [ 191.301207][ T29] audit: type=1326 audit(1759235637.522:9226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8520 comm="syz.4.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891095eec9 code=0x7ffc0000 [ 191.325321][ T29] audit: type=1326 audit(1759235637.522:9227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8520 comm="syz.4.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891095eec9 code=0x7ffc0000 [ 191.349783][ T29] audit: type=1326 audit(1759235637.522:9228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8520 comm="syz.4.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f891095eec9 code=0x7ffc0000 [ 191.373991][ T29] audit: type=1326 audit(1759235637.522:9229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8520 comm="syz.4.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891095eec9 code=0x7ffc0000 [ 191.398404][ T29] audit: type=1326 audit(1759235637.522:9230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8520 comm="syz.4.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891095eec9 code=0x7ffc0000 [ 191.435694][ T3527] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 191.444176][ T3527] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 191.451851][ T3527] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 191.452634][ T29] audit: type=1326 audit(1759235637.732:9231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8520 comm="syz.4.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f891095eec9 code=0x7ffc0000 [ 191.460118][ T3527] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 191.485296][ T29] audit: type=1326 audit(1759235637.732:9232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8520 comm="syz.4.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891095eec9 code=0x7ffc0000 [ 191.517275][ T3527] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 191.524924][ T3527] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 191.532365][ T3527] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 191.536578][ T8533] siw: device registration error -23 [ 191.578221][ T8521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1516'. [ 191.597490][ T8535] pim6reg: entered allmulticast mode [ 191.611896][ T8535] pim6reg: left allmulticast mode [ 191.652829][ T8539] pim6reg1: entered promiscuous mode [ 191.658406][ T8539] pim6reg1: entered allmulticast mode [ 191.664153][ T3527] hid-generic 0000:0000:0000.0006: hidraw0: HID v8.00 Device [syz0] on syz1 [ 191.747214][ T8542] serio: Serial port ptm0 [ 191.791587][ T8548] FAULT_INJECTION: forcing a failure. [ 191.791587][ T8548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.804988][ T8548] CPU: 1 UID: 0 PID: 8548 Comm: syz.4.1525 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 191.805030][ T8548] Tainted: [W]=WARN [ 191.805039][ T8548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 191.805055][ T8548] Call Trace: [ 191.805064][ T8548] [ 191.805125][ T8548] __dump_stack+0x1d/0x30 [ 191.805147][ T8548] dump_stack_lvl+0xe8/0x140 [ 191.805167][ T8548] dump_stack+0x15/0x1b [ 191.805188][ T8548] should_fail_ex+0x265/0x280 [ 191.805291][ T8548] should_fail+0xb/0x20 [ 191.805326][ T8548] should_fail_usercopy+0x1a/0x20 [ 191.805423][ T8548] _copy_from_iter+0xd2/0xe80 [ 191.805541][ T8548] ? __build_skb_around+0x1a0/0x200 [ 191.805572][ T8548] ? __alloc_skb+0x223/0x320 [ 191.805667][ T8548] netlink_sendmsg+0x471/0x6b0 [ 191.805781][ T8548] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.805889][ T8548] __sock_sendmsg+0x145/0x180 [ 191.805910][ T8548] ____sys_sendmsg+0x31e/0x4e0 [ 191.805954][ T8548] ___sys_sendmsg+0x17b/0x1d0 [ 191.806010][ T8548] __x64_sys_sendmsg+0xd4/0x160 [ 191.806075][ T8548] x64_sys_call+0x191e/0x2ff0 [ 191.806135][ T8548] do_syscall_64+0xd2/0x200 [ 191.806159][ T8548] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 191.806184][ T8548] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 191.806218][ T8548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.806259][ T8548] RIP: 0033:0x7f891095eec9 [ 191.806338][ T8548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.806364][ T8548] RSP: 002b:00007f890f3c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.806388][ T8548] RAX: ffffffffffffffda RBX: 00007f8910bb5fa0 RCX: 00007f891095eec9 [ 191.806405][ T8548] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 191.806421][ T8548] RBP: 00007f890f3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 191.806435][ T8548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.806447][ T8548] R13: 00007f8910bb6038 R14: 00007f8910bb5fa0 R15: 00007ffc8ccdee68 [ 191.806472][ T8548] [ 192.240002][ T8555] loop4: detected capacity change from 0 to 512 [ 192.269331][ T8555] EXT4-fs (loop4): orphan cleanup on readonly fs [ 192.276085][ T8532] EXT4-fs: Ignoring removed orlov option [ 192.286204][ T8555] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1527: iget: bad extended attribute block 1 [ 192.347949][ T8532] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 192.364542][ T8555] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1527: couldn't read orphan inode 15 (err -117) [ 192.387855][ T8532] EXT4-fs (loop2): can't enable nombcache during remount [ 192.488700][ T8567] lo speed is unknown, defaulting to 1000 [ 193.048383][ T8571] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1529'. [ 193.057603][ T8571] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1529'. [ 193.073260][ T8573] loop5: detected capacity change from 0 to 4096 [ 193.084639][ T8573] EXT4-fs: Ignoring removed nomblk_io_submit option [ 193.133872][ T8573] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.359122][ T8555] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 193.429813][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.552251][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.691801][ T4125] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.741410][ T8587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1538'. [ 193.753087][ T8587] FAULT_INJECTION: forcing a failure. [ 193.753087][ T8587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.766931][ T8587] CPU: 1 UID: 0 PID: 8587 Comm: syz.1.1538 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 193.767041][ T8587] Tainted: [W]=WARN [ 193.767050][ T8587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 193.767090][ T8578] siw: device registration error -23 [ 193.767110][ T8587] Call Trace: [ 193.767118][ T8587] [ 193.767126][ T8587] __dump_stack+0x1d/0x30 [ 193.767153][ T8587] dump_stack_lvl+0xe8/0x140 [ 193.767182][ T8587] dump_stack+0x15/0x1b [ 193.767207][ T8587] should_fail_ex+0x265/0x280 [ 193.767253][ T8587] should_fail+0xb/0x20 [ 193.767364][ T8587] should_fail_usercopy+0x1a/0x20 [ 193.767414][ T8587] _copy_from_user+0x1c/0xb0 [ 193.767442][ T8587] ___sys_sendmsg+0xc1/0x1d0 [ 193.767503][ T8587] __x64_sys_sendmsg+0xd4/0x160 [ 193.767596][ T8587] x64_sys_call+0x191e/0x2ff0 [ 193.767754][ T8587] do_syscall_64+0xd2/0x200 [ 193.767782][ T8587] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 193.767818][ T8587] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 193.767865][ T8587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.767911][ T8587] RIP: 0033:0x7f2c2197eec9 [ 193.767933][ T8587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.767960][ T8587] RSP: 002b:00007f2c203df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.768057][ T8587] RAX: ffffffffffffffda RBX: 00007f2c21bd5fa0 RCX: 00007f2c2197eec9 [ 193.768088][ T8587] RDX: 0000000000000000 RSI: 0000200000000d80 RDI: 0000000000000003 [ 193.768106][ T8587] RBP: 00007f2c203df090 R08: 0000000000000000 R09: 0000000000000000 [ 193.768122][ T8587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.768158][ T8587] R13: 00007f2c21bd6038 R14: 00007f2c21bd5fa0 R15: 00007fff9e95c7e8 [ 193.768187][ T8587] [ 193.856209][ T8597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1533'. [ 193.879301][ T8592] serio: Serial port ptm0 [ 193.970547][ T8602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1541'. [ 194.060160][ T8607] netlink: 'syz.1.1543': attribute type 1 has an invalid length. [ 194.078355][ T8607] tipc: Enabling of bearer rejected, already enabled [ 194.095922][ T3527] hid-generic 0000:0000:0000.0007: hidraw0: HID v8.00 Device [syz0] on syz1 [ 194.106603][ T8613] loop2: detected capacity change from 0 to 512 [ 194.116139][ T8613] EXT4-fs: Ignoring removed nobh option [ 194.130404][ T8613] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.1545: corrupted inode contents [ 194.152611][ T8613] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.1545: mark_inode_dirty error [ 194.166903][ T8613] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.1545: corrupted inode contents [ 194.182841][ T8613] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.1545: mark_inode_dirty error [ 194.195630][ T8613] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.1545: Failed to acquire dquot type 0 [ 194.208449][ T8624] loop5: detected capacity change from 0 to 4096 [ 194.210488][ T8613] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1545: corrupted inode contents [ 194.219305][ T8624] EXT4-fs: Ignoring removed nomblk_io_submit option [ 194.234383][ T8613] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.1545: mark_inode_dirty error [ 194.251635][ T8624] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.277567][ T8613] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1545: corrupted inode contents [ 194.278609][ T8617] serio: Serial port ptm0 [ 194.292282][ T8613] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.1545: mark_inode_dirty error [ 194.321148][ T8613] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1545: corrupted inode contents [ 194.333320][ T8613] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 194.344273][ T8613] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1545: corrupted inode contents [ 194.360521][ T8613] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.1545: mark_inode_dirty error [ 194.405958][ T8613] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 194.424956][ T8613] EXT4-fs (loop2): 1 truncate cleaned up [ 194.458238][ T8613] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.488003][ T8613] ext4 filesystem being mounted at /299/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.828998][ T8639] siw: device registration error -23 [ 194.878650][ T8639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1553'. [ 195.034477][ T4125] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.044290][ T8636] loop4: detected capacity change from 0 to 8192 [ 195.067521][ T8641] FAULT_INJECTION: forcing a failure. [ 195.067521][ T8641] name failslab, interval 1, probability 0, space 0, times 0 [ 195.080474][ T8641] CPU: 1 UID: 0 PID: 8641 Comm: syz.0.1555 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 195.080517][ T8641] Tainted: [W]=WARN [ 195.080526][ T8641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 195.080543][ T8641] Call Trace: [ 195.080551][ T8641] [ 195.080559][ T8641] __dump_stack+0x1d/0x30 [ 195.080581][ T8641] dump_stack_lvl+0xe8/0x140 [ 195.080611][ T8641] dump_stack+0x15/0x1b [ 195.080630][ T8641] should_fail_ex+0x265/0x280 [ 195.080659][ T8641] should_failslab+0x8c/0xb0 [ 195.080685][ T8641] kmem_cache_alloc_node_noprof+0x57/0x320 [ 195.080730][ T8641] ? __alloc_skb+0x101/0x320 [ 195.080756][ T8641] __alloc_skb+0x101/0x320 [ 195.080778][ T8641] ? audit_log_start+0x365/0x6c0 [ 195.080813][ T8641] audit_log_start+0x380/0x6c0 [ 195.080878][ T8641] audit_seccomp+0x48/0x100 [ 195.080912][ T8641] ? __seccomp_filter+0x68c/0x10d0 [ 195.080934][ T8641] __seccomp_filter+0x69d/0x10d0 [ 195.081026][ T8641] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 195.081065][ T8641] ? vfs_write+0x7e8/0x960 [ 195.081100][ T8641] __secure_computing+0x82/0x150 [ 195.081136][ T8641] syscall_trace_enter+0xcf/0x1e0 [ 195.081240][ T8641] do_syscall_64+0xac/0x200 [ 195.081338][ T8641] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 195.081392][ T8641] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 195.081487][ T8641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.081563][ T8641] RIP: 0033:0x7feee7a0eec9 [ 195.081579][ T8641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.081599][ T8641] RSP: 002b:00007feee6477038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 195.081763][ T8641] RAX: ffffffffffffffda RBX: 00007feee7c65fa0 RCX: 00007feee7a0eec9 [ 195.081779][ T8641] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 195.081845][ T8641] RBP: 00007feee6477090 R08: 0000000000000000 R09: 0000000000000000 [ 195.081858][ T8641] R10: 0400000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.081871][ T8641] R13: 00007feee7c66038 R14: 00007feee7c65fa0 R15: 00007ffecedf28f8 [ 195.081890][ T8641] [ 195.359400][ T8649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1558'. [ 195.417304][ T3385] hid-generic 0000:0000:0000.0008: hidraw0: HID v8.00 Device [syz0] on syz1 [ 195.432472][ T8650] EXT4-fs: Ignoring removed orlov option [ 195.451711][ T8650] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 195.478385][ T8650] EXT4-fs (loop2): can't enable nombcache during remount [ 195.538329][ T8663] loop5: detected capacity change from 0 to 1024 [ 195.555002][ T8663] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 195.570249][ T8672] loop4: detected capacity change from 0 to 512 [ 195.579232][ T8672] EXT4-fs (loop4): orphan cleanup on readonly fs [ 195.586841][ T8672] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1565: iget: bad extended attribute block 1 [ 195.604792][ T8672] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1565: couldn't read orphan inode 15 (err -117) [ 195.622664][ T8663] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.628613][ T8672] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 195.653349][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.692890][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.812559][ T4125] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.826474][ T8680] loop2: detected capacity change from 0 to 8192 [ 195.868196][ T8691] loop4: detected capacity change from 0 to 1764 [ 195.875121][ T8693] loop5: detected capacity change from 0 to 512 [ 195.889206][ T8691] iso9660: Bad value for 'gid' [ 195.893110][ T8680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1567'. [ 195.894031][ T8691] iso9660: Bad value for 'gid' [ 195.920851][ T8693] EXT4-fs (loop5): too many log groups per flexible block group [ 195.930112][ T8693] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 195.937162][ T8693] EXT4-fs (loop5): mount failed [ 196.018719][ T3385] hid-generic 0000:0000:0000.0009: hidraw0: HID v8.00 Device [syz0] on syz1 [ 196.043964][ T8701] netlink: 'syz.5.1576': attribute type 21 has an invalid length. [ 196.079507][ T8703] loop4: detected capacity change from 0 to 512 [ 196.095371][ T8703] EXT4-fs: Ignoring removed nobh option [ 196.123150][ T8703] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.1577: corrupted inode contents [ 196.145809][ T8703] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.1577: mark_inode_dirty error [ 196.168446][ T8703] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.1577: corrupted inode contents [ 196.195842][ T8703] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.1577: mark_inode_dirty error [ 196.223088][ T8703] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.1577: Failed to acquire dquot type 0 [ 196.255385][ T8703] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1577: corrupted inode contents [ 196.270799][ T8713] program syz.5.1580 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.277584][ T8703] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.1577: mark_inode_dirty error [ 196.293997][ T8703] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1577: corrupted inode contents [ 196.308505][ T8703] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.1577: mark_inode_dirty error [ 196.310446][ T29] kauditd_printk_skb: 478 callbacks suppressed [ 196.310482][ T29] audit: type=1400 audit(1759235642.612:9705): avc: denied { read } for pid=8712 comm="syz.5.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 196.322608][ T8703] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1577: corrupted inode contents [ 196.362550][ T8703] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 196.371524][ T8703] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1577: corrupted inode contents [ 196.385233][ T8703] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.1577: mark_inode_dirty error [ 196.396927][ T8703] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 196.407820][ T8703] EXT4-fs (loop4): 1 truncate cleaned up [ 196.414116][ T8703] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.430410][ T8703] ext4 filesystem being mounted at /319/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.705015][ T8723] ================================================================== [ 196.713292][ T8723] BUG: KCSAN: data-race in getrusage / vms_clear_ptes [ 196.720442][ T8723] [ 196.722799][ T8723] write to 0xffff88810432cc18 of 8 bytes by task 8722 on cpu 0: [ 196.730793][ T8723] vms_clear_ptes+0x18f/0x2d0 [ 196.735502][ T8723] vms_complete_munmap_vmas+0x159/0x440 [ 196.741157][ T8723] do_vmi_align_munmap+0x383/0x3d0 [ 196.746377][ T8723] do_vmi_munmap+0x1db/0x220 [ 196.751177][ T8723] __vm_munmap+0x1a1/0x280 [ 196.755699][ T8723] __x64_sys_munmap+0x36/0x50 [ 196.760389][ T8723] x64_sys_call+0x9c0/0x2ff0 [ 196.765076][ T8723] do_syscall_64+0xd2/0x200 [ 196.769584][ T8723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.775511][ T8723] [ 196.778066][ T8723] read to 0xffff88810432cc18 of 8 bytes by task 8723 on cpu 1: [ 196.785812][ T8723] getrusage+0xa52/0xbb0 [ 196.790163][ T8723] io_sq_thread+0x5dd/0x1190 [ 196.794766][ T8723] ret_from_fork+0x11f/0x1b0 [ 196.799383][ T8723] ret_from_fork_asm+0x1a/0x30 [ 196.804532][ T8723] [ 196.807137][ T8723] value changed: 0x000000000000151c -> 0x0000000000001706 [ 196.814530][ T8723] [ 196.816979][ T8723] Reported by Kernel Concurrency Sanitizer on: [ 196.823473][ T8723] CPU: 1 UID: 0 PID: 8723 Comm: iou-sqp-8722 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 196.834950][ T8723] Tainted: [W]=WARN [ 196.838762][ T8723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 196.849010][ T8723] ================================================================== [ 196.861027][ T29] audit: type=1326 audit(1759235643.162:9706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8721 comm="syz.0.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee7a0eec9 code=0x7ffc0000 [ 196.885107][ T29] audit: type=1326 audit(1759235643.162:9707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8721 comm="syz.0.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee7a0eec9 code=0x7ffc0000 [ 196.909337][ T29] audit: type=1326 audit(1759235643.162:9708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8721 comm="syz.0.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feee7a0eec9 code=0x7ffc0000 [ 196.933540][ T29] audit: type=1326 audit(1759235643.162:9709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8721 comm="syz.0.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee7a0eec9 code=0x7ffc0000 [ 196.958362][ T29] audit: type=1326 audit(1759235643.162:9710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8721 comm="syz.0.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee7a0eec9 code=0x7ffc0000 [ 196.982559][ T29] audit: type=1326 audit(1759235643.162:9711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8721 comm="syz.0.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feee7a0eec9 code=0x7ffc0000 [ 197.006625][ T29] audit: type=1326 audit(1759235643.162:9712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8721 comm="syz.0.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee7a0eec9 code=0x7ffc0000 [ 197.030242][ T29] audit: type=1326 audit(1759235643.162:9713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8721 comm="syz.0.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee7a0eec9 code=0x7ffc0000 [ 197.032035][ T8728] syz.1.1586 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 197.057395][ T8729] siw: device registration error -23 [ 197.073478][ T8729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1584'. [ 197.139814][ T29] audit: type=1326 audit(1759235643.352:9714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8721 comm="syz.0.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feee7a0eec9 code=0x7ffc0000 [ 197.234388][ T8726] EXT4-fs: Ignoring removed orlov option [ 197.241730][ T8726] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 197.252272][ T8726] EXT4-fs (loop4): can't enable nombcache during remount [ 197.342672][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.371873][ T8716] syz.5.1580 (8716) used greatest stack depth: 7096 bytes left