last executing test programs: 1m13.103216575s ago: executing program 1 (id=248): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x80) futex(&(0x7f000000cffc), 0xa, 0x301, 0x0, 0x0, 0x2) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x2, 0x0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200002, 0x3, &(0x7f0000a00000/0x600000)=nil) 1m12.083478282s ago: executing program 1 (id=259): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000001bf7b6a6797"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f00000005c0)={[{@delalloc}, {@barrier}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@sysvgroups}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x571, &(0x7f0000000f00)="$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") keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000000), 0x1000000000000232, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) write$cgroup_int(r4, &(0x7f00000001c0), 0xfffffdef) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0xfffffffffffff001}, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0x48) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd']) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x7}}, {{@in6=@local, 0x0, 0x6c}, 0x0, @in=@local}}, 0xe8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaf368656e06450000300000000000019078ac1e0001e00000010400907803000000450000000000000000000000ac1414000000000055ba203aa027f3391bc05a2b1f03ce1b"], 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000041000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b704000008000000850000009500000095000000000000009d5158451802e9592e191f16216569f3d02cbef282cb6edd4e89a0e5de902e2d085e42d98afcf9375a15017313db55b739262b99757988f8e69c0439c346654924e68bcd6dd89c1f63efdb94f5077b54e01410bfe2d985cfabf8bbff0e8ca3bd400f63a3d1ea9ff60fab0d78b7b345e73728a7fef7f277ac6ac4fabd2b8706e019e21d222bb8b69b46ced12937d76a3b41109ff5a42b530358697886"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) newfstatat(0xffffffffffffff9c, &(0x7f0000004240)='./file0\x00', &(0x7f00000004c0), 0x400) 1m11.135997678s ago: executing program 1 (id=272): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000ec0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/nfsfs\x00') getdents64(r1, 0x0, 0x43) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e00000404000000040000000900000000000000194309ca48054c2c382f6381c1100b3f757d93bf5c8cd7ac45b9a808c01befc962de8c7b5b5cce9c80ce3331d5894bc31f6bcc0b852ad427679dee0e594be65b6db0906e724818c3911bfed097ff47f74579632bed754180f8375719afa8dc27f2eb8c902aa8775d84f02b673e62ad3527de9d9599b7b3dab0a07955e09a4d5c8e4db33b7831ea8f3ef37defc943f3566415ba1f0c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000005304"], 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) syz_emit_ethernet(0x52, &(0x7f0000000140)={@local, @random, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x13, 0x45, [@private=0x7, @empty, @empty, @local]}, @timestamp={0x44, 0x8, 0x5, 0x3, 0x0, [0x0]}]}}, {{0xfffe, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) pipe(&(0x7f0000000080)) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010004b040000000000005f007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010062726964676500001800028005002600020000000c002e"], 0x48}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {0x1, 0x1}, [{0x2, 0x5}], {0x4, 0x4}, [], {0x10, 0x6}}, 0x2c, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) bind$unix(r2, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r10 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000004c0)={'syz_tun\x00'}) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1m11.125792208s ago: executing program 1 (id=273): ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000900000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0], 0x0, 0xfa, &(0x7f00000004c0), 0x0, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xc7, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000d40)=""/53, 0x35}], 0x1, 0x0, 0x8bd7) mkdirat(r4, &(0x7f0000000b00)='.\x00', 0xe4) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740)=r2, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000a00)={0x0, r5}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2f, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000780), 0x1, 0x43c, &(0x7f0000000280)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000e00)=ANY=[@ANYBLOB="000000004c90020001000000030001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f7ffffff00000000000000000000000000000000000000000000000000ffffffff"]) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r8 = inotify_init1(0x80000) inotify_add_watch(r8, &(0x7f00000002c0)='./file0\x00', 0x500082c) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0xffd7, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000240), &(0x7f0000000280)=0x4) 1m11.036389219s ago: executing program 1 (id=274): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs2/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x922d) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="d30000"], 0x8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) mount(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x20b3020, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)={0x188, r5, 0x2, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_OURS={0x164, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xcb8b}, @ETHTOOL_A_BITSET_BITS={0x94, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x676}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '.-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '!^@^{]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\v\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7316}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@U\x18\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_MASK={0x38, 0x5, "31c3f2585e9eab2557870935bb717dfa953adbf2c0fc932646464c02bed668422a48894c1ba20e7f1eb790ad8852bd4e0a2ebc3f"}, @ETHTOOL_A_BITSET_VALUE={0x6a, 0x4, "d84c152f43910b8d7a6c548e560952024aa2a7e21b5bc73ccb7d4e6bc6a46bf240765b037c8d2690b892a0d24c5ba3293a52c46fbd6fcaf12c104cade3dec5340d51984ec964426f4536f15d771408e009b1b988d7486e8909c536e19ab2271107226897cb83"}, @ETHTOOL_A_BITSET_MASK={0x1e, 0x5, "07cdcba8adeac662dc186e6d83ad6ceccd3842e363614e0a6320"}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}]}, 0x188}, 0x1, 0x0, 0x0, 0x40091}, 0x20044800) r7 = socket$inet(0x2, 0x3, 0x4) r8 = syz_io_uring_setup(0x5de1, &(0x7f0000000380)={0x0, 0x48b2, 0x1000, 0x1, 0x61}, &(0x7f0000000400), &(0x7f0000000680)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r8, 0xb, &(0x7f00000006c0)=[@ioring_restriction_sqe_op={0x1, 0xe}, @ioring_restriction_register_op={0x0, 0xe}, @ioring_restriction_sqe_flags_required={0x3, 0x10}, @ioring_restriction_register_op={0x0, 0xf}, @ioring_restriction_sqe_flags_required={0x3, 0x19}, @ioring_restriction_sqe_flags_allowed={0x2, 0x1f}, @ioring_restriction_sqe_flags_required={0x3, 0x18}], 0x7) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000000)={0x0, 0xffffffffffffff3d, &(0x7f0000000100)={&(0x7f0000000800)={0x20, r5, 0x8, 0x70bd2a, 0x0, {0x1c}, [@HEADER={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x703d33dc4b18a98e}, 0x4000010) 1m10.39776721s ago: executing program 1 (id=287): ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000300)) (async) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x1008002, &(0x7f00000003c0)={[{@errors_remount}, {@sysvgroups}, {@resuid}, {@grpid}, {@grpjquota}, {@dax_never}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x0, 0x5ee, &(0x7f0000000600)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkysHoyYMXT4aEqOFo4prZzpRuO9sfS7sLnc8nWfrmvRnem06/OzNv35sNoLQG038qEXsjYjqJ6E/mF8s6IyscXFjv3j+fnE5fSVSrb/yVRJLl5esn2c++bOOeiPjlpyT2dKysd2buyvnxqanJy9ny8OyF6eGZuSsHz10YPzt5dvLi6Eujx44eOXps5FBT+3W1IO/k9fc/7P9s7O3vvvk3Gfn+97Ekjser2YpL92OzDMZg7XeSrCzqO7bZlbVJR/Z3svQQJ51Fa3a1rlGsW3780qPzVPRHR9w/eP3x6WttbRywpapJRHW5HXkhsL0lwhxKKr8OyO/tl98HV1p+RQK0yt0TCx0AK+O/c6FvMHpqfQM77yWxtFsniYjmeubq7YqI27fGrp+5NXY9tqgfDig2fy0ini6K/6QW/wPREwO1+K/UxX96XXAq+5nmv95k/cu7isU/tM5C/PesGv/RIP7fWRL/7zZZ/+D95Hu9dfHf2+wuAQAAAAAAQGndPBERLxZ9/l9ZHP8TBeN/+iLi+CbUP7hseeXn/5U7m1ANUODuiYhXCsf/VvLRvwMdWeqx2niAruTMuanJQxHxeEQciK4d6fLIKnUc/HzP143KBrPxf/krrf92NhYwa8edzh3120yMz44/6H4DEXevRTxTOP43WTz/J7XhvvNLpwvU3g+m11nHnudvnGpUtnb8A1ul+m3E/sLz//2nViSrP59juHY9MJxfFaz07Mdf/NCo/mbjv/ARE8CGpOf/navH/0Cy9Hk9Mxuv4/BcZ7VBUXez1//dyZu1R850Z3kfjc/OXh6J6E5OdqS5dfmjG28zbEd5POTxksb/gedW7/9LCvr/eiNiftn/nfxdP6c49+R/fX80ao/rf2ifNP4nNnT+33hi9MbAj43qX9/5/0jtXH8gy9H/Bwu+ysO0uz6/IBw7i4pa3V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2A4qEbErksrQYrpSGRqK6IuIJ2JnZerSzOwLZy59cHEiLat9/38l/6bf/oXlJP/+/4Ely6PLlg9HxO6I+LKjt7Y8dPrS1ES7dx4AAAAAAAAAAAAAAAAAAAAeEn0N5v+n/uxod+uALdfZ7gYAbVMQ/7+2ox1A6zn/Q3mJfygv8Q/lJf6hvMQ/lJf4h/IS/1Be4h8AAAAAALaV3ftu/pZExPzLvbVXqjsr62pry4CtVml3A4C28YgfKC9Df6C83OMDyRrlPQ03WmvL1UyffoCNAQAAAAAAAAAAAKB09u81/x/Kyvx/KC/z/6G88vn/+9rcDqD13OMDscZM/sL5/2tuBQAAAAAAAAAAAABsppm5K+fHp6YmLz8KiZ+3tIq32r+DrU5Uq9Wr6V/Bw9KeRzyRD4V/WNqzLJHP9VvfVu17TwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOr9HwAA//87QSCw") openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) (async) lsetxattr$system_posix_acl(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="020000000100020000000000040000000000000008000700", @ANYRES32=0x0, @ANYBLOB="100005000000000020"], 0x2c, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0xa, 0xc, &(0x7f0000000d80)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="180000000000000000380e002236874fda04801832e3ace3bf557bd578def4e4d35537088290d6bf086c64d7b7fc43a946ff0a0d223717480297f688a6dfe7c6f0b2aa5b141feecfe6f6929c5aa0f16a1e5cd161216e9079439ca054e0fd5be4dba704122b6e5300513f9d17ccc4edb11b9f19a76e20f6086e4a82b8584dfca3549858f7a5a18f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) lsetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)=@known='system.sockprotoname\x00', &(0x7f00000002c0)=':%\xcc\xb7', 0x4, 0x1) (async) nanosleep(&(0x7f0000000180)={0x77359400}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) mknod(&(0x7f0000000500)='./file0\x00', 0x4, 0x8) getpid() (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="0b0000000800000002000000040000000500000038b957b39be1272091f2753bab8e9da75f92c938b3b75fbfaefceed29b558f7adfd7fb2a0b0fec13a03f1bbefe0907efd3bbb57c2a938642b1db9db64804f26a491f6fc2da12b4860af5359abd89", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000300)}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x9, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="0d5af0ff10000000186b000000000000000000008104000018240000", @ANYRES32=r0, @ANYBLOB="000000000002fdab04bef7ffff0f0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) (async) r6 = timerfd_create(0x8, 0x0) read(r6, &(0x7f00000000c0)=""/252, 0xfc) open(&(0x7f00000002c0)='./bus\x00', 0x42203, 0x13d) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESOCT=r4, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x178}, 0x18) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 1m10.3671276s ago: executing program 32 (id=287): ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000300)) (async) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x1008002, &(0x7f00000003c0)={[{@errors_remount}, {@sysvgroups}, {@resuid}, {@grpid}, {@grpjquota}, {@dax_never}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x0, 0x5ee, &(0x7f0000000600)="$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") openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) (async) lsetxattr$system_posix_acl(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="020000000100020000000000040000000000000008000700", @ANYRES32=0x0, @ANYBLOB="100005000000000020"], 0x2c, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0xa, 0xc, &(0x7f0000000d80)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="180000000000000000380e002236874fda04801832e3ace3bf557bd578def4e4d35537088290d6bf086c64d7b7fc43a946ff0a0d223717480297f688a6dfe7c6f0b2aa5b141feecfe6f6929c5aa0f16a1e5cd161216e9079439ca054e0fd5be4dba704122b6e5300513f9d17ccc4edb11b9f19a76e20f6086e4a82b8584dfca3549858f7a5a18f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) lsetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)=@known='system.sockprotoname\x00', &(0x7f00000002c0)=':%\xcc\xb7', 0x4, 0x1) (async) nanosleep(&(0x7f0000000180)={0x77359400}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) mknod(&(0x7f0000000500)='./file0\x00', 0x4, 0x8) getpid() (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="0b0000000800000002000000040000000500000038b957b39be1272091f2753bab8e9da75f92c938b3b75fbfaefceed29b558f7adfd7fb2a0b0fec13a03f1bbefe0907efd3bbb57c2a938642b1db9db64804f26a491f6fc2da12b4860af5359abd89", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000300)}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x9, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="0d5af0ff10000000186b000000000000000000008104000018240000", @ANYRES32=r0, @ANYBLOB="000000000002fdab04bef7ffff0f0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) (async) r6 = timerfd_create(0x8, 0x0) read(r6, &(0x7f00000000c0)=""/252, 0xfc) open(&(0x7f00000002c0)='./bus\x00', 0x42203, 0x13d) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESOCT=r4, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x178}, 0x18) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 45.804517402s ago: executing program 4 (id=716): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x78, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) clock_adjtime(0x0, &(0x7f0000000100)={0x5f0827ef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000002, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6}}, 0x20) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000280)=r3, 0x4) 45.765199832s ago: executing program 4 (id=720): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000000000000000000001c0002800c00018008000100030000000c000180080001"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) 45.697127763s ago: executing program 4 (id=723): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b34, 0x3bf) ioctl$KDDISABIO(r0, 0x4b37) socket$inet(0x2, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000180)}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000090000009c0000000b"], 0x50) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r4, 0x10f, 0x84, 0x0, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r4, 0x10f, 0x82, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x8}]}}}, @IFLA_MASTER={0x8, 0x3, r7}]}, 0x54}}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r3, 0x0, 0x200000000000006}, 0x18) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000040)={0x1, 0x1, 0xf, 0x1c, 0xa8, &(0x7f0000000340)}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) io_pgetevents(0x0, 0x200, 0x0, 0x0, 0x0, 0x0) 45.570755405s ago: executing program 4 (id=728): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000a, @void, @value}, 0xff28) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000020100)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x27c, &(0x7f0000000600)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r9 = openat$cgroup_type(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r9, &(0x7f0000000280), 0x9) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_subtree(r10, &(0x7f0000000140), 0x2, 0x0) syz_clone(0x4004000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffd4e) write$cgroup_subtree(r11, &(0x7f0000000300)=ANY=[@ANYBLOB="2b70696473206aa4af0b9c8df7bfd54c8c0cefe2ed8f367f18a6c889f9a58a6d8c3e4eec5abbc6bfc2ba92479b26dc8955"], 0x6) syz_emit_ethernet(0x13e, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0) 45.320347579s ago: executing program 4 (id=731): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000580)='X', 0x1}], 0x1}}], 0x1, 0x4008440) splice(r0, 0x0, r1, 0x0, 0x10500, 0x100000000000000) 44.518467083s ago: executing program 4 (id=741): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) 44.517851603s ago: executing program 33 (id=741): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) 3.475167163s ago: executing program 3 (id=1343): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, r0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x24}}, 0x0) 3.460039363s ago: executing program 3 (id=1344): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) r3 = fsopen(&(0x7f0000000200)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000780)={[{@bsdgroups}, {@nodiscard}, {@oldalloc}, {@grpjquota}, {@nobarrier}, {@noquota}, {@abort}, {@nodiscard}, {@nodiscard}]}, 0x64, 0x50d, &(0x7f0000000200)="$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") open_by_handle_at(0xffffffffffffffff, 0x0, 0x400) unshare(0x68040200) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 1.283589798s ago: executing program 3 (id=1361): syz_io_uring_setup(0xe46, &(0x7f0000000380)={0x0, 0x5f39, 0x0, 0x4001, 0x2b7}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) 1.22026137s ago: executing program 5 (id=1362): open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) unshare(0x8040480) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000b80)={'filter\x00', 0x4, "25cf96f2"}, &(0x7f0000000bc0)=0x2c) read(r0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x38, r4, 0x1, 0xffffffff, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@empty, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.177574331s ago: executing program 6 (id=1365): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x9, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x4, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb1003fff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) pipe(&(0x7f00000001c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000000880)={0xa, 0x2, 0x0, @empty, 0x1b}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xffff8001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 999.125703ms ago: executing program 6 (id=1368): r0 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x3ea}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x6, [@enum64={0xb, 0x7, 0x0, 0x13, 0x0, 0xf73d474b7a66354e, [{0xa, 0x5, 0x7}, {0x5, 0x4, 0x7fff}, {0xd, 0x0, 0x1}, {0x4, 0x9, 0x6}, {0x4, 0x1, 0x6}, {0x4, 0x401, 0x5}, {0x3, 0xa1d, 0x5}]}, @var={0xf, 0x0, 0x0, 0xe, 0x5}, @restrict={0x2, 0x0, 0x0, 0xb, 0x1}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x2, 0x4}, @enum={0xd, 0x3, 0x0, 0x6, 0x4, [{0x5}, {0x4, 0x85}, {0xf, 0x5}]}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xd, 0x2}, {0x4, 0x4}, {0x4, 0x1}, {0xd, 0x2}, {0x8, 0x3}, {0x2}]}]}, {0x0, [0x61, 0x30, 0x0, 0x0]}}, &(0x7f0000000400)=""/137, 0x10a, 0x89, 0x0, 0x9, 0x10000, @value}, 0x28) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) (async) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x182) write$UHID_INPUT(r3, &(0x7f0000000280)={0x8, {"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", 0x1000}}, 0x1006) (async) fallocate(r4, 0x0, 0x800, 0x2000402) (async) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000140)={0xc, r4, 0x0, 0x0, 0x0, 0x2}) (async) write$P9_RMKNOD(r3, &(0x7f0000000200)={0x14, 0x13, 0x1, {0x2, 0x4, 0x4}}, 0x14) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'dummy0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r7, 0x25, 0x17, @void}, 0x10) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@bloom_filter={0x1e, 0xc000, 0x4, 0xfb3, 0x3, r3, 0xb, '\x00', r7, r2, 0x0, 0x6, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r8}, 0x38) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b"], 0x24}}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8051}, 0x20000804) 966.839674ms ago: executing program 5 (id=1369): bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg2\x00'}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}}) tkill(r0, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) (fail_nth: 7) 890.976045ms ago: executing program 6 (id=1370): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000001140)={[{@errors_continue}, {@data_err_abort}, {@init_itable}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b0}}, {@noblock_validity}, {@grpquota}, {@nobh}, {@user_xattr}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f00000004c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x8004) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000140)=0xfffffdfb) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0xffffffff, 0xc9a, 0xfffff001, 0x6, 0x18, "5cadf0fa59ebc3cef90ac43c5c135252e5d962"}) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000040)={0x5, 0xf7af, 0x8000, 0x8, 0x0, "4cb8b210acdc716f64cf76062d59a56f2584c4"}) close(r2) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f0000000280)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5, 0x0, 0x5}, 0x18) mq_unlink(&(0x7f0000000000)='\x00') socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="010029bd70000000000049000000080001007063690011000200303030303a30303a313000300000000008007300000000000e0001006e6574646576"], 0x60}}, 0x24004000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000300)=ANY=[@ANYBLOB='_\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000003000000200001800400028008000300fdffffff0e0001006574683a766c616e30"], 0x68}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000200)=[r6, r4, r2, r4, r6, r8, r0], 0x7) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={0x0, r9}, 0x18) 623.185959ms ago: executing program 5 (id=1375): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x9, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x4, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb1003fff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) pipe(&(0x7f00000001c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000000880)={0xa, 0x2, 0x0, @empty, 0x1b}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xffff8001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 568.04593ms ago: executing program 0 (id=1377): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x81, 0x4200) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000077000000fb000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0xc6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000240)={r4, 0xfffffffe, 0xff, 0x5, 0x9, 0x2, 0x4, 0x8, {0x0, @in6={{0xa, 0x4e21, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x7fff}}, 0xfc0c, 0x34, 0x8, 0x3e, 0xe22}}, &(0x7f0000000140)=0xb0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$selinux_user(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f00000000c0)=0xb, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) io_getevents(0x0, 0x2, 0x0, 0x0, 0x0) 567.43115ms ago: executing program 6 (id=1378): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r1 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffb) sendfile(r1, r1, 0x0, 0x800000009) 503.212661ms ago: executing program 2 (id=1379): socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a00000005010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x4, @empty}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x18) r3 = dup2(r0, r0) write$tun(r3, 0x0, 0x46) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r6, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r8, {0xfff2}, {0xfffd, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x410, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000040)) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f00000004c0)=r8) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) syz_io_uring_setup(0x7a3e, &(0x7f00000002c0)={0x0, 0xbaff, 0x11050, 0x0, 0x389, 0x0, r3}, &(0x7f00000001c0), &(0x7f0000000380)) 486.111572ms ago: executing program 0 (id=1380): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 443.112552ms ago: executing program 0 (id=1381): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff14, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r6}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r5}, 0x10) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r9 = socket(0x400000000010, 0x3, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r11, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xafcc, 0x7, 0xffffffffffffffff, 0x8, 0x8001}, 0x7, 0x1}, [{0xe205, 0x80000001, 0x9, 0x1842, 0x1, 0x8000}, {0xfffffff9, 0x8, 0x7, 0xb145, 0x4, 0x8}, {0x0, 0xf8d5, 0x1ff, 0x87, 0xa, 0x5}, {0xf, 0x7e7, 0x9, 0x7, 0x0, 0xa}, {0x1, 0x101, 0x5c78, 0xffffff56, 0xee, 0x8}, {0x3, 0x73, 0xb, 0x7, 0x2, 0x6}, {0x8, 0x5, 0x4, 0x4, 0x2, 0x8}, {0x1ff, 0x1, 0x2f, 0x7, 0x533f, 0x200}, {0x8, 0x4bd5, 0x5, 0x2, 0x2, 0xf8}, {0x2, 0x8, 0x4, 0x7, 0x32, 0x1000}, {0x6, 0x0, 0x0, 0x20000008, 0x6, 0x5}, {0x5, 0x9, 0x1, 0x10, 0x8, 0x4}, {0x4, 0x0, 0x3, 0x80000000, 0x2, 0x1}, {0x6, 0xfffff800, 0xbf, 0x1, 0xffffffff, 0x8}, {0x48a3, 0x3ff, 0x9, 0x6e, 0x3, 0x8}, {0x4, 0x200000, 0xaeb, 0x360, 0x2, 0x400}, {0x0, 0xffffffff, 0xbe, 0x1, 0x7, 0x8}, {0x5ad, 0xfaec, 0x401, 0x9, 0x8, 0x45}, {0x3, 0x9, 0x400, 0x3, 0x6, 0x5}, {0xde, 0x0, 0x5, 0x8000, 0x2, 0xffff}, {0x80, 0x3491, 0x83, 0x8001, 0x3, 0x165c}, {0x6d, 0x5, 0xf, 0xe, 0x8, 0xec}, {0x6, 0x1, 0xfffffffc, 0x5, 0x0, 0x81}, {0xcd0, 0x9, 0x6, 0x7fffffff, 0x80, 0xfffffff8}, {0x7, 0x3, 0x2b0, 0x5, 0x2, 0xd6}, {0x6, 0x3, 0x0, 0x2, 0xc4}, {0x0, 0x99, 0x200, 0x1b8, 0x4, 0x1}, {0x1cff, 0xc7a9, 0x25, 0xffffffff, 0x7, 0x2}, {0xff, 0x4, 0x7fff, 0x7, 0xfffffff9, 0xd46}, {0x7, 0x2, 0xec, 0x0, 0x8}, {0x3, 0x8, 0x0, 0x6, 0xebc, 0x8}, {0x3, 0xfe9, 0x1, 0x4, 0x0, 0x401}, {0x4, 0x8, 0xd, 0x7fff, 0xb, 0x87c}, {0x4a, 0x1000, 0x1, 0x81, 0x6063, 0x1}, {0xfffffe00, 0xe392, 0x0, 0x9, 0x3, 0x9}, {0x8, 0xff, 0x1, 0x101, 0x10000000, 0x4ac9}, {0x8, 0xffffffdb, 0x3, 0xe4c, 0x3, 0x2ca759d6}, {0x5, 0x4, 0x9, 0x2, 0x2, 0xfffffffa}, {0x0, 0x3, 0x4, 0x1, 0x10001, 0x9}, {0x5f21eb86, 0x1, 0x9, 0x40, 0x4, 0x9}, {0x55f, 0x8, 0x401, 0x5, 0x3, 0x40}, {0x7, 0x6, 0x7, 0x8000, 0x81}, {0x4, 0x9, 0x5, 0x6, 0x3, 0x2}, {0x100, 0x4, 0x7, 0x8, 0x66, 0x9}, {0x5, 0x5, 0x3, 0x7ff, 0x2, 0x80000001}, {0x8, 0x6, 0x88, 0x9, 0x6, 0x1}, {0x7b, 0x74, 0x1, 0xd, 0x8, 0x7fff}, {0x69, 0xcd, 0x7f, 0xd, 0x200006, 0xf}, {0x9, 0x0, 0xe0e, 0x4, 0x3, 0x6}, {0x1, 0x2, 0x4, 0xc9, 0x6, 0xfffffff7}, {0xb, 0x2, 0x5, 0x7fde, 0x101, 0x1}, {0x3, 0x392, 0xb19, 0x1, 0x8d, 0x9}, {0xff, 0x5, 0xffff, 0x6972, 0x1, 0xfffffff9}, {0x6, 0x200, 0xb1, 0x1, 0x1000, 0x401}, {0x8, 0x54a0ee99, 0xfffffffa, 0x2, 0x99, 0x4}, {0x4, 0x2, 0xc979, 0x2, 0x4, 0x7ff}, {0xffffffff, 0x8, 0x7, 0x8, 0x7fffffff, 0x2b25}, {0x5, 0x4, 0xd55, 0xff, 0x0, 0x2}, {0x5, 0x2cfd091, 0x8, 0x9, 0x4, 0x3}, {0x0, 0x8, 0x1b89, 0x7, 0x5, 0x6}, {0x2887b03a, 0xc54, 0x3, 0x0, 0x5, 0x7}, {0x2ee, 0x2, 0x8, 0x7, 0x10001, 0x5}, {0x3, 0x6, 0xe, 0x8, 0x5}, {0x1000, 0x9, 0x6, 0x1, 0x40, 0x7}, {0x9, 0x7fff, 0x4, 0x0, 0x4, 0x10}, {0xffff0001, 0x7, 0x8, 0xe, 0x400, 0xfffff521}, {0x7, 0x6, 0xd65a, 0x2, 0x3, 0xffffff93}, {0x6, 0x7, 0xffffff7d, 0x5, 0x80000000, 0xfffffffc}, {0x7, 0x800, 0xc, 0x7fff, 0x2, 0x4}, {0x0, 0x6c0, 0x2, 0x3ff, 0x8, 0x7fd7}, {0x0, 0x8000010, 0xa52, 0x3, 0x4, 0xd91}, {0x0, 0x80000000, 0x400, 0x2, 0x6, 0x7}, {0x1, 0xad3, 0x9, 0x12000000, 0x7, 0x6}, {0x7, 0x6, 0x4, 0x5, 0x9, 0x9}, {0x9e2, 0x8, 0x5, 0x1, 0x3a, 0x2}, {0x74863fbb, 0x5, 0xffc000, 0x401, 0xffffff8e, 0xfffffff8}, {0xa99b, 0x4, 0x4, 0x5, 0x4, 0xfffffffa}, {0x8001, 0x0, 0xfffffffe, 0x2, 0x0, 0x7}, {0x6, 0x7, 0x0, 0x7, 0x80000000, 0x50}, {0x0, 0x0, 0xc, 0x2, 0x3, 0x4}, {0x1ff, 0x4, 0xb5, 0x7, 0x1cec, 0x8}, {0x5, 0x7, 0x9, 0x1, 0x7, 0x7}, {0x7, 0x2, 0x71e892ab, 0xe8, 0xfffffff8, 0x4}, {0x80000000, 0xb07, 0x1, 0x8, 0x6, 0x3}, {0x9, 0x2, 0x5, 0x2, 0x9, 0xe}, {0xfffffff5, 0x2, 0x0, 0x5, 0x4a3, 0x8}, {0x5, 0x9, 0x4, 0x10000, 0x3, 0x6}, {0x4, 0x3, 0xfff, 0x4, 0x4, 0x1}, {0x1, 0x6, 0x8, 0x4, 0x7, 0x40}, {0x80000001, 0x389, 0x6, 0x400, 0x5, 0x7fffffff}, {0x65, 0x7fffffff, 0x6, 0x6, 0xea8, 0x8}, {0xb, 0x0, 0x4, 0x33, 0xb, 0x7}, {0x4, 0x1, 0x3, 0x1, 0x8, 0xb49}, {0x1, 0xd, 0x1ff, 0x7, 0x9, 0x9}, {0xc98f, 0x2, 0x10004, 0x8, 0x6, 0xc2f}, {0x4, 0x80000000, 0xc, 0x100, 0xe961, 0xffffffff}, {0x1, 0x5, 0x8, 0x9, 0xff, 0x800}, {0x5, 0x6, 0x5, 0x77, 0x0, 0x8}, {0x5, 0x10000, 0x81, 0xb, 0x1ff, 0x5}, {0x1, 0x0, 0xfffffff8, 0xc0c, 0x6fa, 0x8c1}, {0x8, 0x80000000, 0x9, 0x8, 0x0, 0x7}, {0x4, 0x0, 0x2, 0x0, 0x100, 0x5}, {0x2, 0x10001, 0x1, 0x53da, 0x2, 0x8001}, {0x401, 0x68c, 0x9, 0x2, 0x8, 0x7}, {0x5, 0x80000001, 0x7f, 0x5, 0xb0e, 0xeb}, {0x6, 0xad2b, 0x1, 0x85, 0x101, 0x3ff}, {0x93, 0x7, 0x4, 0x99b, 0x5, 0x11aa729f}, {0x8, 0x3, 0x3, 0x4, 0x32a, 0x10001}, {0x5, 0x80000000, 0x6, 0x1000, 0xffffff81, 0x200}, {0xd4, 0x91000, 0x80, 0xc, 0x4, 0x2}, {0x10000, 0xfffffff4, 0x0, 0x1, 0x6, 0xe5}, {0x3, 0x100, 0x6, 0x2, 0x8, 0x1}, {0x1, 0xffff, 0x10001, 0x1ff, 0x3, 0xfffffff5}, {0x4, 0x7, 0xfffffffc, 0x6, 0x6, 0x2}, {0xf74f, 0xd, 0x0, 0x0, 0x3ff, 0x6}, {0xfff, 0xff, 0x3, 0x2, 0x8, 0xc}, {0x5, 0x9, 0x45, 0x1, 0x6, 0x1000}, {0x4, 0x0, 0x1ff, 0xb, 0xa, 0x1}, {0x5, 0x6, 0x6a5, 0x0, 0x7}, {0x0, 0x5, 0x7fffffff, 0x6, 0x9, 0x9}, {0x18152e2c, 0x5, 0x0, 0xff, 0x2, 0xffffffff}, {0x7554, 0xffffffff, 0x5, 0x1, 0xfffffffe, 0x6}, {0xef6, 0x7, 0x61a, 0x0, 0x4, 0x9}, {0x19, 0x10001, 0x3, 0x3, 0x0, 0xfff}, {0x7, 0x4000, 0x100, 0x10000}, {0x57b, 0x2, 0x10e, 0x80, 0x7, 0x5}, {0x9a, 0x5, 0x3, 0x0, 0x3, 0x7fff}, {0x2000000, 0x9, 0x7, 0x0, 0x2, 0x101}], [{0x3}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x4}, {}, {0x3}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x4}, {0x4}, {0x5}, {0x5}, {0x6, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x2}, {0x1}, {0x3}, {0x0, 0x1}, {}, {0x5, 0x3}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0xe, 0x1}, {0x3}, {0x1}, {0x5}, {0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x3}, {0x5}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x2}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0xdcdcfc412ebb7d41}, {0x1, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x2}, {0x3}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x3}, {0x1}, {}, {0x5}, {0x4}, {0xbe9e5652533709fb}, {0x4}, {}, {0x0, 0x1}, {0x3}, {0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xf8}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x4800) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38) 442.490692ms ago: executing program 5 (id=1382): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffff8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x1, 0x0, 0x1f000000, {0x0, 0x0, 0x0, r4, 0x10820, 0x400}}, 0x20}}, 0x4084) 424.595933ms ago: executing program 3 (id=1383): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x9, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x4, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb1003fff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) pipe(&(0x7f00000001c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000000880)={0xa, 0x2, 0x0, @empty, 0x1b}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xffff8001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 418.015103ms ago: executing program 6 (id=1384): ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x80000001, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='sched_switch\x00', r0}, 0x18) syz_create_resource$binfmt(0x0) socket(0x2, 0x80805, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x4, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff, 0xd, 0x5, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x6, 0x8a2d, 0x1000, 0x100, 0xa, 0xc, 'sit0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x290}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0xff03}}}, {{@arp={@multicast2, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r5}, 0x18) unshare(0x2040400) fsopen(&(0x7f0000000440)='cgroup2\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1b, 0xc, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRES32=r7, @ANYRESDEC=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff1a, 0x0, 0x0, 0x0, 0xe90, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x52010500) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8, 0x0, 0xfffffffff7ffffe9}, 0x18) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) 348.298554ms ago: executing program 0 (id=1385): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) mq_notify(0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x4) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r5, 0x0, r6) r7 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_create(r7, &(0x7f0000000480)=@access={'system_u:object_r:dlm_control_device_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x9}, 0x4f) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r6, r8) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) fadvise64(r4, 0x5, 0x4, 0x2) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r9, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r9}}, 0x18) 348.094874ms ago: executing program 0 (id=1386): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r1, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x7, 0x2, 0x3, 0x3, 0x309, 0x38, 0xfffffffc, 0xe, 0x0, 0x20, 0x1, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x4, 0x200004, 0xc, 0x400}]}, 0x58) close(r1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000140)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r2 = syz_open_pts(r0, 0x0) poll(&(0x7f00000000c0)=[{r1, 0x1208}], 0x1, 0x2) (fail_nth: 2) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000000)={0x2, 0xf, 0x0, 0x7, 0x8, "9afce4aeac9acbb49b00541d7d6a304eb7f873", 0xffff, 0x3}) 311.548114ms ago: executing program 3 (id=1387): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socketpair$tipc(0x20, 0x1, 0x0, &(0x7f0000000600)) socketpair(0xa, 0x800, 0x800000, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8930, &(0x7f0000000400)='{\x05T\x82\x89\x98Yi:') syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$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") mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0xa, &(0x7f0000000380)=ANY=[@ANYRES8=r0, @ANYRESOCT=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000000000852000000100000095000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffcfd) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200) timer_create(0xfffffffffffffffc, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000001400)) r5 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x0) ftruncate(r5, 0x2007ffb) sendfile(r5, r5, 0x0, 0x800000009) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b0000000700000001000100090000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc95, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d01040a0000000040000000000000030017"], 0x50}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 296.360265ms ago: executing program 2 (id=1388): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xb, 0xb76a}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc91f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x20000261, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='percpu_free_percpu\x00', r4}, 0x18) fcntl$lock(r5, 0x24, &(0x7f00000009c0)={0x2, 0x1, 0x6, 0x7fffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r6 = socket(0x10, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0xf0b, 0x2000, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44004}, 0x4000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={&(0x7f00000005c0)=""/22, 0x16, 0x0, &(0x7f0000000600)=""/232, 0xe8}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0xc, 0x4, &(0x7f0000000280)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], &(0x7f00000002c0)='GPL\x00', 0x6, 0xb7, &(0x7f0000000380)=""/183, 0x41000, 0x18, '\x00', r7, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0xc, 0x4, 0x5}, 0x10, r8, r3, 0xa, &(0x7f0000000780)=[r2], &(0x7f00000007c0)=[{0x2, 0x4, 0x5, 0x5}, {0x0, 0x2, 0xe, 0xc}, {0x4, 0x5, 0xe, 0x6}, {0x5, 0x2, 0x4, 0x3}, {0x2, 0x2, 0xa, 0xc}, {0x5, 0x1, 0xf, 0x6}, {0x5, 0x3, 0x10, 0xc}, {0x1, 0x4, 0x3, 0xb}, {0x5, 0x2, 0x7, 0x8}, {0x0, 0x4, 0xc, 0x8}], 0x10, 0x400, @void, @value}, 0x94) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') syz_io_uring_setup(0x7219, 0x0, 0x0, &(0x7f00000000c0)) r9 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10) socket(0x10, 0x803, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 248.210755ms ago: executing program 0 (id=1389): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05cefeb4ee6d5ae1071124b2c2fb684f5c7ac05000000c7880f67e775c748f6381a3e01e7f93330b30b90bbb4d2b697899a16f2df4fa2a8f06ac2c5352ddcae2b83672ef3d9f532e55f4e798924ac6332751e737383f6890d2dcfcbdbd41940a64c7b4374674e7bb6dd0d1b8d3d62f6d77b0282e166e2ce4c353d2d4d315a81146bf46a1508ef0d2ddc7d0b447fe17b85b292d13cea2256a16cab12d75a852bc680da7ea837480feb2e1e0000000000003bc18c52d0351cd285197b0641569048b5b416ba1c570000000000100083794afff0a9eed63b1226b18c4b455ab222d7ae1be52a22e8ec8bf2c0c7d99770415863f50aa18bcb66061a29bc55105f3482ed752f882d224a386b51836c1b437036b677156e22e174ff516dbab0b2cdf52bee43c4ffffffffffffffffd9487b8663a339b98df63b4bf3e97f02d6f1e7e65f968dd90841506355d9ac40f1b434c8a9b5bd91a70c53a5aadbebd9ed9d0a55bd47a967163e0c02753f8895bfbf1b41b5490667c241068d59983ae1d0f03e650f5357425284b76d793e25a2558fa437e38b8200000000630000000000000000000000000000000000000000000000e911000000000066e073c14bb74617079e0b6ecfc830db14244567fd8f4e4e5903eaf983786e28295783f130b95dc37f59a658000e88047db7783ce8a9cba6c255902cfb83946ea3f5f7a8cee911b2b37ae4b01e65ea86d5ea7ae17b2a9bc250c9b8fc9fbc04617939bdd13457954172d18701768f8a461bee740f2d82ae566d2e30a93ad2b201a6d16a93c75a950cc437e7f25d3aadddb8edd028d84490b6bafd636aa4fb482a8a4b3987dafe58e742448c4b36b03790090198145dee533257bb9050554f8cace210a5bc5c768f83e99019f7c00ff9ca679768dbba3f7d21c545c99c2f7688f7030fe37121d625d1f81018feb74c9d48eebdf1702550b097271ab9bd38c62f4b31fd9482c05ba064dfa60bd7fafb3c22dc057e6f9e2a5eb144290afe5369110a71d4b7fc5937a32e213c443f3b9e506b25cf9e2520999b330fc9e86bde8c8ec78f67c0c7f24db0000000", @ANYRES16=0xffffffffffffffff], 0x1, 0x11ee, &(0x7f0000002480)="$eJzs3MGLG1UcB/Bf17Xdbt3NqrXagvjQi16GZg9e9BJkC9KA0jZCKwhTd6IhYxIyYSEiVk9e/TvEozdBvOllL/4N3vbisQdxxKS1jUSpSDdSPp9LfvDel997BAZmmDdHr3/5Ub9bZd18EmsnTsTaKCLdTpFiLe76LF557Ycfn796/cblVru9dyWlS61rzVdTStsvfPfuJ1+/+P3kzDvfbH97Kg533jv6Zffnw3OH549+u/Zhr0q9Kg2Gk5Snm8PhJL9ZFmm/V/WzlN4ui7wqUm9QFeOF8W45HI2mKR/sb22OxkVVpXwwTf1imibDNBlPU/5B3hukLMvS1mbwX3S+ul3XdURdPx4no67r+nRsxpl4IrZiOxqxE0/GU/F0nI1n4lw8G8/F+dmsVa8bAAAAAAAAAAAAAAAAAAAAHi3O/wMAAAAAAAAAAAAAAAAAAMDqXb1+43Kr3d67ktJGRPnFQeegM/+dj7e60YsyirgYjfg1Zqf/5+b1pTfbexfTzE58Xt66k7910HlsMd+cfU5gab45z6fF/KnYvD+/G404uzy/uzS/ES+/dF8+i0b89H4Mo4z9+CN7L/9pM6U33mr/JX9hNg8AAAAeBVn609L79yz7u/F5/kGeD6zdbbaQX48L6yvbNndU04/7eVkW44dWnIyH3uKfio2IWF33By/W43+xDIViXqz6ysRxuPenr3olAAAAAAAAAAAA/BvH8Trh0sanj32rAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA7+zAsQAAAACAMH/rNDo2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYKgAA///20tEU") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0x10000000000000, 0xffffff6a) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e000000000000000000000000200000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000435d87c400"], 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0xc001, 0x0, @loopback, 0xd}, 0x1c) io_uring_setup(0x1715, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYRES64=r0, @ANYBLOB="ec059d1704aca27caa896a7463f9826183ce88d078adc89ba94c0a835ed74a8b2bf64539b53d406bd6498f5464dba417443114fdf26e41d337f4e7da411afbd95b51fe4c81e3f5fc9dede10165a582197ee39ea086ca7e31956bda83f6b1d1d4e3f215264d0dab38a653562e8509fcc607b3091ef04b2c973da59ce3e612a8", @ANYRESHEX=r6, @ANYRES32=0x0, @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='kmem_cache_free\x00', r8}, 0x18) open(0x0, 0x145142, 0x0) write$binfmt_script(r6, &(0x7f0000000200), 0xfffffd9d) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f00004c3000/0x2000)=nil, 0x2000, 0x0, 0x10, r5, 0xb1806000) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) 247.730656ms ago: executing program 5 (id=1390): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c000000000101040000000000000000020000002c0001801400018008000100e000000108000200ac1414000c000280050001000000000006000340000400002400028014000180080001000108000200e0e505383c2f320d6ae00000010c00028005000100000000000800"], 0x6c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x2, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x4}, {0x0, 0x3}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x80c4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x4, 0x40, 0x5, 0x3, 0x8, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x1, 0x8001}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x7}, 0x1c) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) setregid(0x0, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_raw(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10) syz_emit_ethernet(0x46, 0x0, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000480), r9) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x7}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}]}}}]}, 0x64}}, 0x0) 154.863117ms ago: executing program 5 (id=1391): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYRESOCT=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) lsm_get_self_attr(0x66, &(0x7f0000000240)={0x0, 0x0, 0xab, 0x8b, ""/139}, &(0x7f0000000040)=0xab, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) unshare(0x400) r2 = perf_event_open(&(0x7f0000002100)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb, 0xa85c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2000000000000000, 0x6}, 0x0, 0xffffffffffffffff, 0x7ffffffd, 0x5, 0x0, 0x0, 0x7}, 0x0, 0xfffffffffeffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x52, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x2, @perf_config_ext={0x8407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x5, 0x2, 0x9, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xfffffffffffffffc, r2, 0x9) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000040)='.\x02\x00', 0xe88022b11028290f) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x7, 0x4, 0x400008, 0x8000, 0x0, 0x6, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, 0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0xfffffffc, 0x0, 0x400, 0x0, 0x30}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x1, 0x400ccd3, &(0x7f000005ffe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) shutdown(r5, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r6 = socket$caif_stream(0x25, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") setxattr$system_posix_acl(&(0x7f0000000340)='./mnt\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="020500000000000000100000000000082de243ffd6044000"/36, @ANYRES16=r0], 0x24, 0x2) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmmsg$inet(r6, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x1000000}], 0x2, 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="12010002a4b402ae068fed370b6ddf91b200000008d90467a00000000000010902240001ffffffff09040006010300f887d10cc4427f257b3d1829b4c9caa30200092193ea71c0cce5fd5ad1c3f08df3099e4df89e937780e7fe8e3795a8ce02666a18c075738c3d8ff31212d174c236d88e6ae5d7b8e7bb59bc8ad3ef17d9683842a27ece24d2c853b684135192a269713995e170f825e28cae2ffca00c673f9831fc8d698b65c94ce09039abcb2c5fff51e8f9b7a76573ed1d5e7c527ea431a9c7bd511cf082aed3dc0d69fb61f8bc7db6570ae9e6613676cc9c206d37f093f680"], 0x0) 151.708297ms ago: executing program 2 (id=1392): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) 128.979268ms ago: executing program 3 (id=1393): syz_io_uring_setup(0xe46, &(0x7f0000000380)={0x0, 0x5f39, 0x0, 0x4001, 0x2b7}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) 93.719218ms ago: executing program 2 (id=1394): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r0}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r1, 0x0, &(0x7f0000002740)=""/4096}, 0x20) 63.027318ms ago: executing program 2 (id=1395): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r0}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r1, 0x0, &(0x7f0000002740)=""/4096}, 0x20) 271.06µs ago: executing program 6 (id=1396): r0 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x80001, 0x84) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e23, 0x0, @dev, 0x7}, 0x80, 0x0}, 0x200ce0c0) socket(0x10, 0x3, 0x0) socket$inet(0xa, 0x801, 0x84) unshare(0x22020400) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x200009}, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x80c, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9d8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x82\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}}, 0x0, 0xe, r3, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x40044) r5 = perf_event_open$cgroup(&(0x7f0000000140)={0x4, 0x80, 0xc3, 0xf5, 0x0, 0x6, 0x0, 0xfffffffffffffff8, 0x860a0, 0xc, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7f, 0x1, @perf_config_ext={0xffffffffffffff16, 0x1000}, 0x4, 0x6, 0xffffffff, 0x9, 0x1, 0xc, 0x18, 0x0, 0x5, 0x0, 0x3d4}, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000300)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}, {@stripe={'stripe', 0x3d, 0x2}}, {@jqfmt_vfsold}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") syz_emit_ethernet(0xfffffdf8, 0x0, 0x0) syz_io_uring_setup(0x111, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174) ioctl$BTRFS_IOC_QUOTA_RESCAN(r5, 0x4040942c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket(0x10, 0x80003, 0x0) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) close_range(r6, 0xffffffffffffffff, 0x0) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000440)='{', 0x34000}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000480)="d9", 0x1}], 0x1}}], 0x2, 0x0) 0s ago: executing program 2 (id=1397): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): .683385][ T36] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 92.690921][ T36] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 92.698352][ T36] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 92.706049][ T36] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 92.713679][ T36] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 92.721179][ T36] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 92.728604][ T36] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 92.736106][ T36] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 92.743668][ T36] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 92.751116][ T36] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 92.758575][ T36] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 92.766041][ T36] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 92.773553][ T36] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 92.781066][ T36] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 92.788471][ T36] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 92.795914][ T36] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 92.803438][ T36] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 92.811105][ T36] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 92.818704][ T36] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 92.826151][ T36] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 92.833698][ T36] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 92.841163][ T36] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 92.848625][ T36] hid-generic 0000:0000:0000.0012: unknown main item tag 0x1 [ 92.857007][ T36] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz0 [ 92.898770][ T6146] fido_id[6146]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 92.916558][ T6149] loop5: detected capacity change from 0 to 128 [ 92.927754][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.969119][ T6149] syz.5.834: attempt to access beyond end of device [ 92.969119][ T6149] loop5: rw=0, sector=121, nr_sectors = 120 limit=128 [ 92.971171][ T6153] loop3: detected capacity change from 0 to 128 [ 93.007964][ T6155] FAULT_INJECTION: forcing a failure. [ 93.007964][ T6155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.021259][ T6155] CPU: 1 UID: 0 PID: 6155 Comm: syz.6.837 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 93.021301][ T6155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 93.021316][ T6155] Call Trace: [ 93.021348][ T6155] [ 93.021356][ T6155] __dump_stack+0x1d/0x30 [ 93.021377][ T6155] dump_stack_lvl+0xe8/0x140 [ 93.021400][ T6155] dump_stack+0x15/0x1b [ 93.021421][ T6155] should_fail_ex+0x265/0x280 [ 93.021461][ T6155] should_fail+0xb/0x20 [ 93.021544][ T6155] should_fail_usercopy+0x1a/0x20 [ 93.021584][ T6155] _copy_from_user+0x1c/0xb0 [ 93.021610][ T6155] ___sys_sendmsg+0xc1/0x1d0 [ 93.021728][ T6155] __x64_sys_sendmsg+0xd4/0x160 [ 93.021753][ T6155] x64_sys_call+0x2999/0x2fb0 [ 93.021799][ T6155] do_syscall_64+0xd2/0x200 [ 93.021822][ T6155] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 93.021855][ T6155] ? clear_bhb_loop+0x40/0x90 [ 93.021880][ T6155] ? clear_bhb_loop+0x40/0x90 [ 93.021909][ T6155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.021929][ T6155] RIP: 0033:0x7f87b463e929 [ 93.021943][ T6155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.021996][ T6155] RSP: 002b:00007f87b2ca7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.022020][ T6155] RAX: ffffffffffffffda RBX: 00007f87b4865fa0 RCX: 00007f87b463e929 [ 93.022035][ T6155] RDX: 0000000020008000 RSI: 0000200000000500 RDI: 0000000000000006 [ 93.022047][ T6155] RBP: 00007f87b2ca7090 R08: 0000000000000000 R09: 0000000000000000 [ 93.022058][ T6155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.022070][ T6155] R13: 0000000000000000 R14: 00007f87b4865fa0 R15: 00007ffe3040bdf8 [ 93.022088][ T6155] [ 93.027907][ T37] kworker/u8:2: attempt to access beyond end of device [ 93.027907][ T37] loop5: rw=1, sector=241, nr_sectors = 800 limit=128 [ 93.040357][ T6153] syz.3.836: attempt to access beyond end of device [ 93.040357][ T6153] loop3: rw=0, sector=121, nr_sectors = 120 limit=128 [ 93.232931][ T3460] kworker/u8:8: attempt to access beyond end of device [ 93.232931][ T3460] loop3: rw=1, sector=241, nr_sectors = 800 limit=128 [ 93.297248][ T6159] loop3: detected capacity change from 0 to 512 [ 93.320834][ T6157] loop5: detected capacity change from 0 to 8192 [ 93.327352][ T6159] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 93.333963][ T6159] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 93.341555][ T6159] vhci_hcd vhci_hcd.0: Device attached [ 93.391360][ T6159] loop3: detected capacity change from 0 to 512 [ 93.413803][ T6159] EXT4-fs (loop3): too many log groups per flexible block group [ 93.416582][ T6165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.421611][ T6159] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 93.427103][ T6159] EXT4-fs (loop3): mount failed [ 93.444331][ T6165] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.462470][ T6165] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 93.480433][ T6169] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 93.490780][ T6159] loop3: detected capacity change from 0 to 2048 [ 93.497324][ T6170] loop5: detected capacity change from 0 to 128 [ 93.546855][ T6159] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.571983][ T6165] syz.5.841: attempt to access beyond end of device [ 93.571983][ T6165] loop5: rw=0, sector=121, nr_sectors = 120 limit=128 [ 93.593727][ T3417] usb 7-1: new low-speed USB device number 2 using vhci_hcd [ 93.604311][ T6162] vhci_hcd: connection reset by peer [ 93.609756][ T37] vhci_hcd: stop threads [ 93.614146][ T37] vhci_hcd: release socket [ 93.618657][ T37] vhci_hcd: disconnect device [ 93.639480][ T3460] kworker/u8:8: attempt to access beyond end of device [ 93.639480][ T3460] loop5: rw=1, sector=241, nr_sectors = 800 limit=128 [ 93.721391][ T36] hid-generic 0000:0000:0000.0013: unknown main item tag 0x7 [ 93.730073][ T36] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 93.737719][ T36] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 93.745315][ T36] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 93.753271][ T36] hid-generic 0000:0000:0000.0013: unknown main item tag 0x2 [ 93.760761][ T36] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 93.768416][ T36] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 93.775903][ T36] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 93.783454][ T36] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 93.790943][ T36] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 93.798547][ T36] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 93.806025][ T36] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 93.813520][ T36] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 93.821368][ T36] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 93.822284][ T6183] netlink: 76 bytes leftover after parsing attributes in process `syz.5.845'. [ 93.828776][ T36] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 93.828806][ T36] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 93.852657][ T36] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 93.860234][ T36] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 93.867892][ T36] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 93.875406][ T36] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 93.882598][ T6186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.847'. [ 93.882849][ T36] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 93.899525][ T36] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 93.907040][ T36] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 93.914508][ T36] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 93.922046][ T36] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 93.929467][ T36] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 93.936934][ T36] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 93.944420][ T36] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 93.944550][ T6188] loop5: detected capacity change from 0 to 256 [ 93.951838][ T36] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 93.951866][ T36] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 93.951893][ T36] hid-generic 0000:0000:0000.0013: unknown main item tag 0x1 [ 93.985002][ T36] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz0] on syz0 [ 93.991480][ T6183] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 94.017136][ T6191] fido_id[6191]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 94.065717][ T6194] loop6: detected capacity change from 0 to 512 [ 94.081661][ T6194] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 94.100826][ T6198] lo speed is unknown, defaulting to 1000 [ 94.107166][ T6194] EXT4-fs (loop6): 1 truncate cleaned up [ 94.108065][ T6198] lo speed is unknown, defaulting to 1000 [ 94.119523][ T6198] lo speed is unknown, defaulting to 1000 [ 94.121908][ T6194] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.149203][ T6194] EXT4-fs error (device loop6): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.6.849: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 94.169269][ T6198] infiniband sz1: set active [ 94.174140][ T6198] infiniband sz1: added lo [ 94.179913][ T36] lo speed is unknown, defaulting to 1000 [ 94.181568][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.191839][ T6194] EXT4-fs (loop6): Remounting filesystem read-only [ 94.201216][ T6194] EXT4-fs warning (device loop6): ext4_rename_delete:3726: inode #2: comm syz.6.849: Deleting old file: nlink 5, error=-117 [ 94.219717][ T6194] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 94.228150][ T6194] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 94.239350][ T6198] RDS/IB: sz1: added [ 94.243803][ T6198] smc: adding ib device sz1 with port count 1 [ 94.251763][ T6198] smc: ib device sz1 port 1 has pnetid [ 94.270881][ T6205] vcan0: left promiscuous mode [ 94.275744][ T6205] vcan0: left allmulticast mode [ 94.281986][ T6205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.283322][ T5677] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.298220][ T6205] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 94.315261][ T36] lo speed is unknown, defaulting to 1000 [ 94.315273][ T10] lo speed is unknown, defaulting to 1000 [ 94.321014][ T36] syz0: Port: 1 Link ACTIVE [ 94.352218][ T6198] lo speed is unknown, defaulting to 1000 [ 94.358295][ T6205] loop3: detected capacity change from 0 to 128 [ 94.393926][ T6211] loop6: detected capacity change from 0 to 736 [ 94.400924][ T6205] syz.3.851: attempt to access beyond end of device [ 94.400924][ T6205] loop3: rw=0, sector=121, nr_sectors = 120 limit=128 [ 94.410398][ T6211] iso9660: Unknown parameter '^'BQ]ӾW\W{y~8%Nrs;y7bYi ƭ` 71o ڕ_Ƭ2' [ 94.425446][ T6198] lo speed is unknown, defaulting to 1000 [ 94.449402][ T31] kworker/u8:1: attempt to access beyond end of device [ 94.449402][ T31] loop3: rw=1, sector=241, nr_sectors = 800 limit=128 [ 94.492773][ T6198] lo speed is unknown, defaulting to 1000 [ 94.522000][ T6216] loop3: detected capacity change from 0 to 128 [ 94.551077][ T6216] syz.3.854: attempt to access beyond end of device [ 94.551077][ T6216] loop3: rw=0, sector=121, nr_sectors = 120 limit=128 [ 94.571032][ T6198] lo speed is unknown, defaulting to 1000 [ 94.588165][ T31] kworker/u8:1: attempt to access beyond end of device [ 94.588165][ T31] loop3: rw=1, sector=241, nr_sectors = 800 limit=128 [ 94.616710][ T6219] loop5: detected capacity change from 0 to 1024 [ 94.619873][ T6221] loop3: detected capacity change from 0 to 128 [ 94.651884][ T6219] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 94.663719][ T6198] lo speed is unknown, defaulting to 1000 [ 94.679267][ T6219] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #3: block 1: comm syz.5.855: lblock 1 mapped to illegal pblock 1 (length 1) [ 94.703614][ T6219] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.855: Failed to acquire dquot type 0 [ 94.716402][ T6219] EXT4-fs error (device loop5): ext4_free_blocks:6587: comm syz.5.855: Freeing blocks not in datazone - block = 0, count = 4096 [ 94.732522][ T6219] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.855: Invalid inode bitmap blk 0 in block_group 0 [ 94.734489][ T6198] lo speed is unknown, defaulting to 1000 [ 94.751230][ T31] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 94.766689][ T6219] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 94.787798][ T31] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 94.809805][ T6219] EXT4-fs (loop5): 1 orphan inode deleted [ 94.823374][ T6219] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.863393][ T6229] netlink: 'syz.3.859': attribute type 5 has an invalid length. [ 94.886639][ T4322] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.913752][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x7 [ 94.921749][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 94.929207][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 94.936655][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 94.944119][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x2 [ 94.951640][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 94.959051][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 94.959222][ T6233] loop2: detected capacity change from 0 to 8192 [ 94.966570][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 94.980434][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 94.987922][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 94.995363][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 95.002901][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 95.010448][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 95.017925][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 95.025584][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 95.033038][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 95.040562][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 95.047975][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 95.055424][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 95.062855][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 95.070304][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 95.077730][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 95.085251][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 95.092692][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 95.100106][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 95.107639][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 95.115094][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 95.118140][ T6241] loop5: detected capacity change from 0 to 1024 [ 95.122524][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 95.122554][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 95.143756][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 95.151195][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x1 [ 95.206738][ T6245] loop6: detected capacity change from 0 to 512 [ 95.220897][ T6245] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 95.242094][ T29] kauditd_printk_skb: 398 callbacks suppressed [ 95.242112][ T29] audit: type=1400 audit(1750178723.432:4709): avc: denied { read } for pid=6244 comm="syz.0.863" dev="nsfs" ino=4026532653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 95.247651][ T6245] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.248378][ T29] audit: type=1400 audit(1750178723.432:4710): avc: denied { open } for pid=6244 comm="syz.0.863" path="net:[4026532653]" dev="nsfs" ino=4026532653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 95.305176][ T29] audit: type=1400 audit(1750178723.432:4711): avc: denied { create } for pid=6244 comm="syz.0.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 95.325225][ T29] audit: type=1400 audit(1750178723.432:4712): avc: denied { write } for pid=6244 comm="syz.0.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 95.327257][ T36] hid-generic 0000:0004:0000.0015: unknown main item tag 0x0 [ 95.345240][ T29] audit: type=1400 audit(1750178723.432:4713): avc: denied { write } for pid=6244 comm="syz.0.863" name="kcm" dev="proc" ino=4026532858 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 95.352621][ T36] hid-generic 0000:0004:0000.0015: unknown main item tag 0x0 [ 95.375148][ T29] audit: type=1400 audit(1750178723.442:4714): avc: denied { unmount } for pid=6244 comm="syz.0.863" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 95.382613][ T36] hid-generic 0000:0004:0000.0015: unknown main item tag 0x0 [ 95.411695][ T10] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz0] on syz0 [ 95.412593][ T6245] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.459611][ T6254] fido_id[6254]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 95.519189][ T36] hid-generic 0000:0004:0000.0015: hidraw0: HID v0.00 Device [syz0] on syz1 [ 95.533227][ T29] audit: type=1326 audit(1750178723.702:4715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6243 comm="syz.6.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87b463e929 code=0x7ffc0000 [ 95.556939][ T29] audit: type=1326 audit(1750178723.702:4716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6243 comm="syz.6.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87b463e929 code=0x7ffc0000 [ 95.580306][ T29] audit: type=1326 audit(1750178723.702:4717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6243 comm="syz.6.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f87b463e929 code=0x7ffc0000 [ 95.581010][ T5677] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.603615][ T29] audit: type=1326 audit(1750178723.702:4718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6243 comm="syz.6.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87b463e929 code=0x7ffc0000 [ 95.733787][ T6266] syzkaller1: entered promiscuous mode [ 95.739422][ T6266] syzkaller1: entered allmulticast mode [ 95.791574][ T6258] loop3: detected capacity change from 0 to 8192 [ 95.909679][ T6269] __nla_validate_parse: 5 callbacks suppressed [ 95.909696][ T6269] netlink: 8 bytes leftover after parsing attributes in process `syz.5.870'. [ 96.100514][ T6288] loop3: detected capacity change from 0 to 512 [ 96.107481][ T6288] msdos: Unknown parameter '01777777777777777777777' [ 96.428118][ T6337] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 96.440166][ T6337] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 96.626724][ T6368] loop5: detected capacity change from 0 to 128 [ 96.706361][ T6381] syzkaller1: entered promiscuous mode [ 96.712100][ T6381] syzkaller1: entered allmulticast mode [ 96.862781][ T6394] loop5: detected capacity change from 0 to 8192 [ 96.872722][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x7 [ 96.880882][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 96.888358][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 96.895865][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 96.903497][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x2 [ 96.910970][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 96.918384][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 96.925938][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 96.933409][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 96.940868][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 96.948376][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 96.955836][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 96.963312][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 96.970751][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 96.978204][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 96.985658][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 96.993138][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 97.000575][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 97.008019][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 97.015506][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 97.023001][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 97.030502][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 97.037916][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 97.045442][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 97.052910][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 97.060369][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 97.067866][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 97.075301][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 97.082778][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 97.090204][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 97.097641][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x1 [ 97.107358][ T10] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz0] on syz0 [ 97.149426][ T6409] fido_id[6409]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 97.170425][ T6412] loop3: detected capacity change from 0 to 128 [ 97.185423][ T6412] ext2: Bad value for 'auto_da_alloc' [ 97.288178][ T6412] random: crng reseeded on system resumption [ 97.420787][ T6417] loop3: detected capacity change from 0 to 128 [ 97.546831][ T6424] netlink: 'wޣ': attribute type 4 has an invalid length. [ 97.554483][ T6424] netlink: 3657 bytes leftover after parsing attributes in process `wޣ'. [ 97.556019][ T6421] netlink: 'syz.3.893': attribute type 33 has an invalid length. [ 97.571106][ T6421] netlink: 152 bytes leftover after parsing attributes in process `syz.3.893'. [ 97.587770][ T6421] loop3: detected capacity change from 0 to 736 [ 97.596998][ T6421] iso9660: Unknown parameter '^'BQ]ӾW\W{y~8%Nrs;y7bYi ƭ` 71o ڕ_Ƭ2' [ 97.722693][ T6429] syzkaller1: entered promiscuous mode [ 97.728280][ T6429] syzkaller1: entered allmulticast mode [ 98.024589][ T6447] netlink: 76 bytes leftover after parsing attributes in process `syz.0.899'. [ 98.566666][ T6457] loop3: detected capacity change from 0 to 1024 [ 98.578327][ T6457] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 98.592661][ T6457] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #3: block 1: comm syz.3.906: lblock 1 mapped to illegal pblock 1 (length 1) [ 98.606799][ T6457] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.906: Failed to acquire dquot type 0 [ 98.618208][ T6457] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.906: Freeing blocks not in datazone - block = 0, count = 4096 [ 98.631618][ T3417] usb 7-1: enqueue for inactive port 0 [ 98.633698][ T6457] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.906: Invalid inode bitmap blk 0 in block_group 0 [ 98.637104][ T3417] usb 7-1: enqueue for inactive port 0 [ 98.656553][ T57] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 98.671028][ T6457] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 98.672305][ T57] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 0 [ 98.692148][ T6457] EXT4-fs (loop3): 1 orphan inode deleted [ 98.698397][ T6457] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.720648][ T3417] vhci_hcd: vhci_device speed not set [ 98.763843][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.791381][ T6473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.907'. [ 98.802539][ T6473] netlink: 'syz.3.907': attribute type 30 has an invalid length. [ 98.868841][ T6473] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.878351][ T6473] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.887911][ T6473] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.897461][ T6473] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.917669][ T6473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.907'. [ 98.929289][ T6473] netlink: 'syz.3.907': attribute type 30 has an invalid length. [ 98.970371][ T6482] syzkaller1: entered promiscuous mode [ 98.975972][ T6482] syzkaller1: entered allmulticast mode [ 99.112443][ T6495] netlink: 'syz.2.915': attribute type 33 has an invalid length. [ 99.120341][ T6495] netlink: 152 bytes leftover after parsing attributes in process `syz.2.915'. [ 99.147963][ T6500] netlink: 120 bytes leftover after parsing attributes in process `syz.6.916'. [ 99.163671][ T6495] loop2: detected capacity change from 0 to 736 [ 99.185985][ T6495] iso9660: Unknown parameter '^'BQ]ӾW\W{y~8%Nrs;y7bYi ƭ` 71o ڕ_Ƭ2' [ 99.204860][ T6510] loop3: detected capacity change from 0 to 1024 [ 99.270605][ T6510] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 99.324105][ T6510] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #3: block 1: comm syz.3.918: lblock 1 mapped to illegal pblock 1 (length 1) [ 99.417773][ T6510] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.918: Failed to acquire dquot type 0 [ 99.430165][ T6510] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.918: Freeing blocks not in datazone - block = 0, count = 4096 [ 99.496178][ T6510] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.918: Invalid inode bitmap blk 0 in block_group 0 [ 99.541468][ T6510] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 99.541506][ T31] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 99.560845][ T6510] EXT4-fs (loop3): 1 orphan inode deleted [ 99.591154][ T6510] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.605296][ T31] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 99.684429][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.787408][ T6548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.924'. [ 99.829263][ T6548] loop3: detected capacity change from 0 to 736 [ 99.842774][ T6548] iso9660: Unknown parameter '^'BQ]ӾW\W{y~8%Nrs;y7bYi ƭ` 71o ڕ_Ƭ2' [ 99.895243][ T6556] netlink: 4 bytes leftover after parsing attributes in process `syz.5.926'. [ 99.998920][ T6556] loop5: detected capacity change from 0 to 736 [ 100.012913][ T6556] iso9660: Unknown parameter '^'BQ]ӾW\W{y~8%Nrs;y7bYi ƭ` 71o ڕ_Ƭ2' [ 100.168238][ T6586] 9pnet: p9_errstr2errno: server reported unknown error @΂0x0000000000000004 [ 100.187961][ T6588] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 100.203560][ T3403] lo speed is unknown, defaulting to 1000 [ 100.229024][ T6586] loop6: detected capacity change from 0 to 1024 [ 100.238518][ T6588] loop2: detected capacity change from 0 to 128 [ 100.252064][ T29] kauditd_printk_skb: 339 callbacks suppressed [ 100.252081][ T29] audit: type=1326 audit(1750178728.482:5052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6587 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634170e929 code=0x7ffc0000 [ 100.288512][ T6586] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.293735][ T29] audit: type=1326 audit(1750178728.482:5053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6587 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f634170e929 code=0x7ffc0000 [ 100.326326][ T29] audit: type=1326 audit(1750178728.542:5054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6587 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634170e929 code=0x7ffc0000 [ 100.332165][ T6602] bio_check_eod: 6 callbacks suppressed [ 100.332213][ T6602] syz.2.931: attempt to access beyond end of device [ 100.332213][ T6602] loop2: rw=0, sector=121, nr_sectors = 120 limit=128 [ 100.349750][ T29] audit: type=1326 audit(1750178728.542:5055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6587 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634170e929 code=0x7ffc0000 [ 100.392137][ T6586] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.411022][ T29] audit: type=1326 audit(1750178728.632:5056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6587 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f634170e929 code=0x7ffc0000 [ 100.434572][ T29] audit: type=1326 audit(1750178728.632:5057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6587 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634170e929 code=0x7ffc0000 [ 100.458050][ T29] audit: type=1326 audit(1750178728.632:5058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6587 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f634170e929 code=0x7ffc0000 [ 100.481663][ T29] audit: type=1326 audit(1750178728.632:5059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6587 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634170e929 code=0x7ffc0000 [ 100.505044][ T29] audit: type=1326 audit(1750178728.632:5060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6587 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f634170e929 code=0x7ffc0000 [ 100.529022][ T29] audit: type=1326 audit(1750178728.632:5061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6587 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634170e929 code=0x7ffc0000 [ 100.602107][ T12] kworker/u8:0: attempt to access beyond end of device [ 100.602107][ T12] loop2: rw=1, sector=241, nr_sectors = 800 limit=128 [ 100.624959][ T6622] loop3: detected capacity change from 0 to 1024 [ 100.656894][ T6622] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 100.676466][ T5677] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.690414][ T6622] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #3: block 1: comm syz.3.934: lblock 1 mapped to illegal pblock 1 (length 1) [ 100.706393][ T6622] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.934: Failed to acquire dquot type 0 [ 100.722084][ T6622] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.934: Freeing blocks not in datazone - block = 0, count = 4096 [ 100.739452][ T6622] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.934: Invalid inode bitmap blk 0 in block_group 0 [ 100.754792][ T12] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 100.761897][ T6622] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 100.779217][ T12] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0 [ 100.779527][ T6622] EXT4-fs (loop3): 1 orphan inode deleted [ 100.826208][ T6622] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.941077][ T6649] netlink: 12 bytes leftover after parsing attributes in process `syz.0.938'. [ 100.958305][ T6650] loop6: detected capacity change from 0 to 512 [ 100.965077][ T6650] EXT4-fs: Ignoring removed oldalloc option [ 100.973015][ T6650] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 101.060691][ T6650] EXT4-fs (loop6): orphan cleanup on readonly fs [ 101.075544][ T6650] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.937: Failed to acquire dquot type 1 [ 101.090305][ T6650] EXT4-fs (loop6): 1 truncate cleaned up [ 101.097473][ T6650] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.178101][ T6658] EXT4-fs error (device loop6): ext4_lookup:1791: inode #2: comm syz.6.937: deleted inode referenced: 12 [ 101.263238][ T6650] lo speed is unknown, defaulting to 1000 [ 101.331376][ T6650] lo speed is unknown, defaulting to 1000 [ 101.919564][ T6665] loop2: detected capacity change from 0 to 256 [ 101.941823][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.995264][ T6665] FAT-fs (loop2): Directory bread(block 1285) failed [ 102.043748][ T6665] FAT-fs (loop2): Directory bread(block 1285) failed [ 102.110822][ T6665] FAT-fs (loop2): Directory bread(block 1285) failed [ 102.153976][ T6665] FAT-fs (loop2): Directory bread(block 1285) failed [ 102.346785][ T6674] netlink: 'syz.2.942': attribute type 33 has an invalid length. [ 102.354771][ T6674] netlink: 152 bytes leftover after parsing attributes in process `syz.2.942'. [ 102.419836][ T6684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.942'. [ 102.632293][ T6694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.945'. [ 102.712262][ T6690] loop2: detected capacity change from 0 to 736 [ 102.742782][ T6690] iso9660: Unknown parameter '^'BQ]ӾW\W{y~8%Nrs;y7bYi ƭ` 71o ڕ_Ƭ2' [ 102.840847][ T5677] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.898837][ T10] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=10 comm=kworker/0:1 [ 102.933158][ T6703] loop5: detected capacity change from 0 to 2048 [ 102.939908][ T6701] 9pnet: p9_errstr2errno: server reported unknown error 184467 [ 102.956889][ T6705] loop6: detected capacity change from 0 to 2048 [ 103.008000][ T6708] Cannot find del_set index 3 as target [ 103.030030][ T6705] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.195050][ T6719] 9pnet: p9_errstr2errno: server reported unknown error [ 103.310326][ T6728] netlink: 16 bytes leftover after parsing attributes in process `syz.5.954'. [ 103.378851][ T6730] loop3: detected capacity change from 0 to 8192 [ 103.394165][ T6737] netlink: 24 bytes leftover after parsing attributes in process `syz.5.954'. [ 103.412071][ T6736] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 103.429952][ T5677] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.571564][ T6745] loop2: detected capacity change from 0 to 1024 [ 103.581196][ T6745] EXT4-fs: Ignoring removed nobh option [ 103.586867][ T6745] EXT4-fs: Ignoring removed bh option [ 103.643969][ T6745] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.952851][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.100984][ T6766] syzkaller1: entered promiscuous mode [ 104.106541][ T6766] syzkaller1: entered allmulticast mode [ 104.144221][ T3417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x7 [ 104.154365][ T3417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 104.162003][ T3417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 104.169416][ T3417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 104.176910][ T3417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x2 [ 104.184459][ T3417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 104.192022][ T3417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 104.199438][ T3417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 104.206976][ T3417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 104.214492][ T3417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 104.222167][ T3417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 104.229585][ T3417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 104.237054][ T3417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 104.244647][ T3417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 104.252084][ T3417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 104.259537][ T3417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 104.267044][ T3417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 104.274481][ T3417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 104.281919][ T3417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 104.285992][ T6773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.966'. [ 104.289309][ T3417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 104.289332][ T3417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 104.313077][ T3417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 104.320507][ T3417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 104.327917][ T3417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 104.335421][ T3417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 104.335448][ T3417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 104.350218][ T3417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 104.357676][ T3417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 104.365126][ T3417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 104.372548][ T3417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 104.379944][ T3417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x1 [ 104.405562][ T3417] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz0] on syz0 [ 104.437357][ T6780] fido_id[6780]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 104.463672][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x7 [ 104.479377][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 104.486989][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 104.494446][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 104.501966][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x2 [ 104.509401][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 104.516848][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 104.524479][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 104.531976][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 104.539382][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 104.546870][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 104.554302][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 104.561727][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 104.569134][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 104.576636][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 104.584096][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 104.589959][ T6786] netlink: 4 bytes leftover after parsing attributes in process `syz.5.970'. [ 104.591522][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 104.607742][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 104.615281][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 104.620636][ T6786] loop5: detected capacity change from 0 to 736 [ 104.622713][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 104.636341][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 104.643778][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 104.651379][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 104.655065][ T6786] iso9660: Unknown parameter '^'BQ]ӾW\W{y~8%Nrs;y7bYi ƭ` 71o ڕ_Ƭ2' [ 104.658856][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 104.680777][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 104.688235][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 104.695688][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 104.703220][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 104.710681][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 104.718164][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 104.725678][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x1 [ 104.736954][ T10] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz0] on syz0 [ 104.781198][ T6801] fido_id[6801]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 104.913030][ T6813] FAULT_INJECTION: forcing a failure. [ 104.913030][ T6813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.917236][ T6811] loop6: detected capacity change from 0 to 8192 [ 104.926295][ T6813] CPU: 1 UID: 0 PID: 6813 Comm: syz.2.980 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 104.926334][ T6813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 104.926355][ T6813] Call Trace: [ 104.926363][ T6813] [ 104.926375][ T6813] __dump_stack+0x1d/0x30 [ 104.926402][ T6813] dump_stack_lvl+0xe8/0x140 [ 104.926446][ T6813] dump_stack+0x15/0x1b [ 104.926469][ T6813] should_fail_ex+0x265/0x280 [ 104.926510][ T6813] should_fail+0xb/0x20 [ 104.926547][ T6813] should_fail_usercopy+0x1a/0x20 [ 104.926701][ T6813] _copy_from_user+0x1c/0xb0 [ 104.926729][ T6813] ___sys_sendmsg+0xc1/0x1d0 [ 104.926836][ T6813] __x64_sys_sendmsg+0xd4/0x160 [ 104.926952][ T6813] x64_sys_call+0x2999/0x2fb0 [ 104.927021][ T6813] do_syscall_64+0xd2/0x200 [ 104.927050][ T6813] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 104.927085][ T6813] ? clear_bhb_loop+0x40/0x90 [ 104.927112][ T6813] ? clear_bhb_loop+0x40/0x90 [ 104.927142][ T6813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.927190][ T6813] RIP: 0033:0x7f634170e929 [ 104.927210][ T6813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.927234][ T6813] RSP: 002b:00007f633fd77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.927324][ T6813] RAX: ffffffffffffffda RBX: 00007f6341935fa0 RCX: 00007f634170e929 [ 104.927341][ T6813] RDX: 0000000004000054 RSI: 0000200000000480 RDI: 0000000000000003 [ 104.927357][ T6813] RBP: 00007f633fd77090 R08: 0000000000000000 R09: 0000000000000000 [ 104.927374][ T6813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.927407][ T6813] R13: 0000000000000000 R14: 00007f6341935fa0 R15: 00007ffec145a708 [ 104.927431][ T6813] [ 104.928059][ T6808] loop3: detected capacity change from 0 to 8192 [ 105.222806][ T6820] netlink: 'syz.6.983': attribute type 3 has an invalid length. [ 105.292660][ T6825] loop6: detected capacity change from 0 to 512 [ 105.319790][ T6825] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 105.328063][ T6825] EXT4-fs (loop6): #clusters per group too big: 8193 [ 105.379802][ T29] kauditd_printk_skb: 238 callbacks suppressed [ 105.379814][ T29] audit: type=1400 audit(1750178733.602:5295): avc: denied { name_bind } for pid=6814 comm="syz.2.982" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 105.449024][ T29] audit: type=1400 audit(1750178733.642:5296): avc: denied { read write } for pid=6824 comm="syz.6.984" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 105.472331][ T29] audit: type=1400 audit(1750178733.642:5297): avc: denied { open } for pid=6824 comm="syz.6.984" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 105.495509][ T29] audit: type=1400 audit(1750178733.642:5298): avc: denied { ioctl } for pid=6824 comm="syz.6.984" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 105.542599][ T6829] loop6: detected capacity change from 0 to 512 [ 105.611735][ T29] audit: type=1400 audit(1750178733.762:5299): avc: denied { create } for pid=6824 comm="syz.6.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 105.631591][ T29] audit: type=1400 audit(1750178733.792:5300): avc: denied { connect } for pid=6824 comm="syz.6.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 105.651455][ T29] audit: type=1400 audit(1750178733.792:5301): avc: denied { read write } for pid=6824 comm="syz.6.984" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 105.674869][ T29] audit: type=1400 audit(1750178733.792:5302): avc: denied { open } for pid=6824 comm="syz.6.984" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 105.698131][ T29] audit: type=1400 audit(1750178733.792:5303): avc: denied { write } for pid=6824 comm="syz.6.984" path="socket:[14715]" dev="sockfs" ino=14715 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 105.757972][ T6834] netlink: 'syz.5.986': attribute type 33 has an invalid length. [ 105.765895][ T6834] netlink: 152 bytes leftover after parsing attributes in process `syz.5.986'. [ 105.786497][ T6834] loop5: detected capacity change from 0 to 736 [ 105.794769][ T29] audit: type=1400 audit(1750178734.022:5304): avc: denied { mount } for pid=6838 comm="syz.2.989" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 105.817583][ T6834] iso9660: Unknown parameter '^'BQ]ӾW\W{y~8%Nrs;y7bYi ƭ` 71o ڕ_Ƭ2' [ 105.856558][ T6854] netlink: 24 bytes leftover after parsing attributes in process `syz.2.992'. [ 105.944728][ T6856] netlink: 'syz.2.994': attribute type 1 has an invalid length. [ 105.952542][ T6856] __nla_validate_parse: 2 callbacks suppressed [ 105.952557][ T6856] netlink: 224 bytes leftover after parsing attributes in process `syz.2.994'. [ 105.958110][ T6861] FAULT_INJECTION: forcing a failure. [ 105.958110][ T6861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.980918][ T6861] CPU: 1 UID: 0 PID: 6861 Comm: syz.3.995 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 105.980982][ T6861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 105.980993][ T6861] Call Trace: [ 105.980997][ T6861] [ 105.981125][ T6861] __dump_stack+0x1d/0x30 [ 105.981147][ T6861] dump_stack_lvl+0xe8/0x140 [ 105.981207][ T6861] dump_stack+0x15/0x1b [ 105.981222][ T6861] should_fail_ex+0x265/0x280 [ 105.981250][ T6861] should_fail+0xb/0x20 [ 105.981277][ T6861] should_fail_usercopy+0x1a/0x20 [ 105.981370][ T6861] _copy_from_user+0x1c/0xb0 [ 105.981392][ T6861] ___sys_recvmsg+0xaa/0x370 [ 105.981413][ T6861] ? 0xffffffff81000000 [ 105.981450][ T6861] ? __rcu_read_unlock+0x4f/0x70 [ 105.981475][ T6861] __x64_sys_recvmsg+0xd1/0x160 [ 105.981494][ T6861] x64_sys_call+0xf19/0x2fb0 [ 105.981513][ T6861] do_syscall_64+0xd2/0x200 [ 105.981532][ T6861] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 105.981585][ T6861] ? clear_bhb_loop+0x40/0x90 [ 105.981603][ T6861] ? clear_bhb_loop+0x40/0x90 [ 105.981622][ T6861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.981692][ T6861] RIP: 0033:0x7f5529d3e929 [ 105.981707][ T6861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.981726][ T6861] RSP: 002b:00007f55283a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 105.981745][ T6861] RAX: ffffffffffffffda RBX: 00007f5529f65fa0 RCX: 00007f5529d3e929 [ 105.981830][ T6861] RDX: 0000000000000000 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 105.981843][ T6861] RBP: 00007f55283a7090 R08: 0000000000000000 R09: 0000000000000000 [ 105.981853][ T6861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.981862][ T6861] R13: 0000000000000000 R14: 00007f5529f65fa0 R15: 00007ffdb176f868 [ 105.981881][ T6861] [ 106.265087][ T6875] loop3: detected capacity change from 0 to 8192 [ 106.397460][ T6888] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1004'. [ 106.606089][ T6900] FAULT_INJECTION: forcing a failure. [ 106.606089][ T6900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.619485][ T6900] CPU: 0 UID: 0 PID: 6900 Comm: syz.6.1009 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 106.619514][ T6900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 106.619526][ T6900] Call Trace: [ 106.619533][ T6900] [ 106.619541][ T6900] __dump_stack+0x1d/0x30 [ 106.619608][ T6900] dump_stack_lvl+0xe8/0x140 [ 106.619632][ T6900] dump_stack+0x15/0x1b [ 106.619652][ T6900] should_fail_ex+0x265/0x280 [ 106.619811][ T6900] should_fail+0xb/0x20 [ 106.619846][ T6900] should_fail_usercopy+0x1a/0x20 [ 106.619934][ T6900] copy_folio_from_iter_atomic+0x278/0x1170 [ 106.619960][ T6900] ? shmem_write_begin+0xa8/0x190 [ 106.619994][ T6900] ? shmem_write_begin+0xe1/0x190 [ 106.620082][ T6900] generic_perform_write+0x2c2/0x490 [ 106.620106][ T6900] shmem_file_write_iter+0xc5/0xf0 [ 106.620178][ T6900] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 106.620201][ T6900] vfs_write+0x4a0/0x8e0 [ 106.620239][ T6900] ksys_write+0xda/0x1a0 [ 106.620322][ T6900] __x64_sys_write+0x40/0x50 [ 106.620340][ T6900] x64_sys_call+0x2cdd/0x2fb0 [ 106.620363][ T6900] do_syscall_64+0xd2/0x200 [ 106.620384][ T6900] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 106.620460][ T6900] ? clear_bhb_loop+0x40/0x90 [ 106.620480][ T6900] ? clear_bhb_loop+0x40/0x90 [ 106.620570][ T6900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.620595][ T6900] RIP: 0033:0x7f87b463d3df [ 106.620612][ T6900] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 106.620633][ T6900] RSP: 002b:00007f87b2ca6df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 106.620652][ T6900] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007f87b463d3df [ 106.620663][ T6900] RDX: 0000000000040000 RSI: 00007f87aa887000 RDI: 0000000000000004 [ 106.620714][ T6900] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000456 [ 106.620732][ T6900] R10: 00000000000003be R11: 0000000000000293 R12: 0000000000000004 [ 106.620742][ T6900] R13: 00007f87b2ca6ef0 R14: 00007f87b2ca6eb0 R15: 00007f87aa887000 [ 106.620758][ T6900] [ 106.881783][ T6900] loop6: detected capacity change from 0 to 512 [ 106.888484][ T6900] journal_path: Non-blockdev passed as './bus' [ 106.894758][ T6900] EXT4-fs: error: could not find journal device path [ 107.158641][ T6920] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=6920 comm=syz.0.1016 [ 107.206585][ T6928] loop3: detected capacity change from 0 to 128 [ 107.239452][ T6928] syz.3.1020: attempt to access beyond end of device [ 107.239452][ T6928] loop3: rw=0, sector=121, nr_sectors = 120 limit=128 [ 107.275979][ T6932] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 107.296983][ T312] kworker/u8:5: attempt to access beyond end of device [ 107.296983][ T312] loop3: rw=1, sector=241, nr_sectors = 800 limit=128 [ 107.312764][ T6932] loop5: detected capacity change from 0 to 128 [ 107.347013][ T6941] netlink: 'syz.2.1023': attribute type 33 has an invalid length. [ 107.354181][ T6940] syzkaller1: entered promiscuous mode [ 107.354952][ T6941] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1023'. [ 107.360440][ T6940] syzkaller1: entered allmulticast mode [ 107.380615][ T6932] syz.5.1022: attempt to access beyond end of device [ 107.380615][ T6932] loop5: rw=0, sector=121, nr_sectors = 120 limit=128 [ 107.385618][ T6934] loop2: detected capacity change from 0 to 736 [ 107.417542][ T6934] iso9660: Unknown parameter '^'BQ]ӾW\W{y~8%Nrs;y7bYi ƭ` 71o ڕ_Ƭ2' [ 107.437090][ T57] kworker/u8:4: attempt to access beyond end of device [ 107.437090][ T57] loop5: rw=1, sector=241, nr_sectors = 800 limit=128 [ 107.484339][ T6945] loop3: detected capacity change from 0 to 1024 [ 107.491336][ T6945] EXT4-fs: inline encryption not supported [ 107.497551][ T6945] EXT4-fs: Ignoring removed bh option [ 107.512058][ T6945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.680345][ T6951] loop5: detected capacity change from 0 to 1024 [ 107.689864][ T6951] ext3: Unknown parameter 'appraise' [ 107.723846][ T6958] loop5: detected capacity change from 0 to 764 [ 107.724675][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.732694][ T6958] iso9660: Unknown parameter '' [ 107.826519][ T6968] netlink: 'syz.3.1033': attribute type 3 has an invalid length. [ 107.865897][ T6974] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.896791][ T6974] loop3: detected capacity change from 0 to 128 [ 107.938619][ T6974] syz.3.1036: attempt to access beyond end of device [ 107.938619][ T6974] loop3: rw=0, sector=121, nr_sectors = 120 limit=128 [ 107.969820][ T12] kworker/u8:0: attempt to access beyond end of device [ 107.969820][ T12] loop3: rw=1, sector=241, nr_sectors = 800 limit=128 [ 108.065432][ T6991] loop3: detected capacity change from 0 to 1764 [ 108.189432][ T7005] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1047'. [ 108.204518][ T7005] loop5: detected capacity change from 0 to 736 [ 108.211727][ T7005] iso9660: Unknown parameter '^'BQ]ӾW\W{y~8%Nrs;y7bYi ƭ` 71o ڕ_Ƭ2' [ 108.347218][ T7020] netlink: 'syz.3.1053': attribute type 10 has an invalid length. [ 108.356600][ T7020] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 108.368654][ T3477] lo speed is unknown, defaulting to 1000 [ 108.374450][ T3477] syz0: Port: 1 Link DOWN [ 108.417682][ T7027] loop3: detected capacity change from 0 to 2048 [ 108.461763][ T3299] Alternate GPT is invalid, using primary GPT. [ 108.468218][ T3299] loop3: p1 p2 p3 [ 108.477676][ T7027] Alternate GPT is invalid, using primary GPT. [ 108.484203][ T7027] loop3: p1 p2 p3 [ 108.584220][ T7029] loop3: detected capacity change from 0 to 512 [ 108.592347][ T7029] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.1056: corrupted in-inode xattr: invalid ea_ino [ 108.606519][ T7029] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.1056: couldn't read orphan inode 15 (err -117) [ 108.618910][ T7029] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.670557][ T7029] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.1056: deleted inode referenced: 15 [ 108.692651][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.716174][ T7035] loop3: detected capacity change from 0 to 164 [ 108.723612][ T7035] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 108.733308][ T7035] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1057'. [ 108.783819][ T7036] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 108.793374][ T7036] rock: directory entry would overflow storage [ 108.799547][ T7036] rock: sig=0x4f50, size=4, remaining=3 [ 108.805161][ T7036] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 108.968128][ T7049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1063'. [ 109.033341][ T7052] $H: entered promiscuous mode [ 109.038525][ T7052] bond_slave_0: entered promiscuous mode [ 109.044325][ T7052] bond_slave_1: entered promiscuous mode [ 109.176631][ T7065] serio: Serial port ptm1 [ 109.198181][ T7069] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1071'. [ 109.230232][ T7069] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1071'. [ 109.269556][ T7069] $H: left promiscuous mode [ 109.274506][ T7069] bond_slave_0: left promiscuous mode [ 109.280056][ T7069] bond_slave_1: left promiscuous mode [ 109.286795][ T7069] 8021q: adding VLAN 0 to HW filter on device $H [ 109.297945][ T7069] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 109.321995][ T7073] FAULT_INJECTION: forcing a failure. [ 109.321995][ T7073] name failslab, interval 1, probability 0, space 0, times 0 [ 109.334761][ T7073] CPU: 0 UID: 0 PID: 7073 Comm: syz.2.1072 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 109.334873][ T7073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 109.334905][ T7073] Call Trace: [ 109.334912][ T7073] [ 109.334938][ T7073] __dump_stack+0x1d/0x30 [ 109.334964][ T7073] dump_stack_lvl+0xe8/0x140 [ 109.335028][ T7073] dump_stack+0x15/0x1b [ 109.335049][ T7073] should_fail_ex+0x265/0x280 [ 109.335089][ T7073] should_failslab+0x8c/0xb0 [ 109.335120][ T7073] kmem_cache_alloc_node_noprof+0x57/0x320 [ 109.335155][ T7073] ? __alloc_skb+0x101/0x320 [ 109.335204][ T7073] __alloc_skb+0x101/0x320 [ 109.335244][ T7073] ? audit_log_start+0x365/0x6c0 [ 109.335277][ T7073] audit_log_start+0x380/0x6c0 [ 109.335380][ T7073] ? probe_sched_wakeup+0x85/0xa0 [ 109.335423][ T7073] audit_seccomp+0x48/0x100 [ 109.335458][ T7073] ? __seccomp_filter+0x68c/0x10d0 [ 109.335487][ T7073] __seccomp_filter+0x69d/0x10d0 [ 109.335542][ T7073] ? save_fpregs_to_fpstate+0x100/0x160 [ 109.335579][ T7073] ? _raw_spin_unlock+0x26/0x50 [ 109.335613][ T7073] __secure_computing+0x82/0x150 [ 109.335643][ T7073] syscall_trace_enter+0xcf/0x1e0 [ 109.335707][ T7073] do_syscall_64+0xac/0x200 [ 109.335724][ T7073] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 109.335774][ T7073] ? clear_bhb_loop+0x40/0x90 [ 109.335828][ T7073] ? clear_bhb_loop+0x40/0x90 [ 109.335851][ T7073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.335877][ T7073] RIP: 0033:0x7f63417058e7 [ 109.335896][ T7073] Code: 0b e9 68 fe ff ff 48 83 c4 18 48 8d 3d b2 6f d6 00 5b 5d 41 5c 41 5d 41 5e 41 5f e9 13 f8 fb ff 0f 1f 00 b8 27 00 00 00 0f 05 0f 1f 84 00 00 00 00 00 b8 6e 00 00 00 0f 05 c3 0f 1f 84 00 00 [ 109.335920][ T7073] RSP: 002b:00007f633fd76a48 EFLAGS: 00000206 ORIG_RAX: 0000000000000027 [ 109.335944][ T7073] RAX: ffffffffffffffda RBX: 00007f633fd76bb0 RCX: 00007f63417058e7 [ 109.335960][ T7073] RDX: 00007f633fd76a80 RSI: 00007f633fd76bb0 RDI: 0000000000000021 [ 109.335973][ T7073] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f633fd76df7 [ 109.336066][ T7073] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 109.336082][ T7073] R13: 0000000000000000 R14: 00007f6341935fa0 R15: 00007ffec145a708 [ 109.336136][ T7073] [ 109.581888][ T7077] loop2: detected capacity change from 0 to 1024 [ 109.588991][ T7077] EXT4-fs: Ignoring removed mblk_io_submit option [ 109.596475][ T7077] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 109.596610][ T7077] EXT4-fs: failed to create workqueue [ 109.611690][ T7077] EXT4-fs (loop2): mount failed [ 109.649108][ T7085] netlink: 'syz.2.1075': attribute type 3 has an invalid length. [ 109.992595][ T7103] loop3: detected capacity change from 0 to 512 [ 110.002054][ T7103] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.1081: corrupted in-inode xattr: invalid ea_ino [ 110.015877][ T7103] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.1081: couldn't read orphan inode 15 (err -117) [ 110.028542][ T7103] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.121538][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.145280][ T7127] loop6: detected capacity change from 0 to 512 [ 110.152130][ T7127] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.159128][ T7127] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 110.170385][ T7127] EXT4-fs (loop6): 1 truncate cleaned up [ 110.170420][ T7129] loop3: detected capacity change from 0 to 128 [ 110.182830][ T7129] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 110.184332][ T7127] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.195121][ T7129] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 110.228920][ T5677] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.253625][ T7133] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 110.262925][ T7133] ip6t_srh: unknown srh match flags 4000 [ 110.267436][ T7139] loop3: detected capacity change from 0 to 128 [ 110.270269][ T7133] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1089'. [ 110.363937][ T7151] loop6: detected capacity change from 0 to 1024 [ 110.370901][ T7151] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.377795][ T7151] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 110.387543][ T7149] vhci_hcd: invalid port number 96 [ 110.388878][ T7151] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.392733][ T7149] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 110.407995][ T29] kauditd_printk_skb: 524 callbacks suppressed [ 110.408015][ T29] audit: type=1400 audit(1750178738.622:5827): avc: denied { setattr } for pid=7150 comm="syz.6.1096" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.443960][ T7149] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1095'. [ 110.479840][ T29] audit: type=1400 audit(1750178738.702:5828): avc: denied { create } for pid=7153 comm="syz.3.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 110.501931][ T29] audit: type=1400 audit(1750178738.702:5829): avc: denied { connect } for pid=7153 comm="syz.3.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 110.521730][ T29] audit: type=1400 audit(1750178738.702:5830): avc: denied { setopt } for pid=7153 comm="syz.3.1097" laddr=::ac14:140b lport=5 faddr=::1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 110.545595][ T29] audit: type=1400 audit(1750178738.712:5831): avc: denied { write } for pid=7153 comm="syz.3.1097" laddr=::ac14:140b lport=5 faddr=::1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 110.573260][ T29] audit: type=1400 audit(1750178738.792:5832): avc: denied { wake_alarm } for pid=7150 comm="syz.6.1096" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 110.705569][ T29] audit: type=1400 audit(1750178738.932:5833): avc: denied { write } for pid=7165 comm="syz.2.1100" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 110.731375][ T29] audit: type=1400 audit(1750178738.932:5834): avc: denied { read } for pid=7165 comm="syz.2.1100" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 110.755725][ T29] audit: type=1400 audit(1750178738.932:5835): avc: denied { open } for pid=7165 comm="syz.2.1100" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 110.783618][ T7168] program syz.2.1100 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.784158][ T29] audit: type=1326 audit(1750178739.012:5836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7165 comm="syz.2.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634170e929 code=0x7ffc0000 [ 110.916413][ T7173] loop2: detected capacity change from 0 to 164 [ 110.946061][ T7173] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38234 sclass=netlink_route_socket pid=7173 comm=syz.2.1102 [ 110.972989][ T7180] loop3: detected capacity change from 0 to 1024 [ 110.980150][ T7180] EXT4-fs: Ignoring removed bh option [ 110.985694][ T7180] EXT4-fs: inline encryption not supported [ 111.005307][ T7180] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 111.030667][ T7180] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 111.050257][ T7180] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.1104: lblock 2 mapped to illegal pblock 2 (length 1) [ 111.063317][ T7188] __nla_validate_parse: 1 callbacks suppressed [ 111.063338][ T7188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1108'. [ 111.083652][ T7188] loop2: detected capacity change from 0 to 736 [ 111.090428][ T7188] iso9660: Unknown parameter '^'BQ]ӾW\W{y~8%Nrs;y7bYi ƭ` 71o ڕ_Ƭ2' [ 111.114109][ T7180] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 48: comm syz.3.1104: lblock 0 mapped to illegal pblock 48 (length 1) [ 111.128647][ T7180] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1104: Failed to acquire dquot type 0 [ 111.140275][ T7180] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 111.149856][ T7180] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.1104: mark_inode_dirty error [ 111.162494][ T7180] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 111.173485][ T7180] EXT4-fs (loop3): 1 orphan inode deleted [ 111.179767][ T7180] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.192992][ T37] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 111.219335][ T10] IPVS: starting estimator thread 0... [ 111.219697][ T37] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 111.239792][ T5677] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.240024][ T7201] loop5: detected capacity change from 0 to 128 [ 111.274368][ T7201] syz.5.1111: attempt to access beyond end of device [ 111.274368][ T7201] loop5: rw=0, sector=121, nr_sectors = 120 limit=128 [ 111.299006][ T57] kworker/u8:4: attempt to access beyond end of device [ 111.299006][ T57] loop5: rw=1, sector=241, nr_sectors = 800 limit=128 [ 111.320542][ T7199] IPVS: using max 2064 ests per chain, 103200 per kthread [ 111.454564][ T7223] loop5: detected capacity change from 0 to 8192 [ 111.495488][ T7225] loop5: detected capacity change from 0 to 512 [ 111.502644][ T7225] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 111.512682][ T7225] EXT4-fs (loop5): orphan cleanup on readonly fs [ 111.519135][ T7225] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #3: comm syz.5.1119: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 111.536831][ T7225] EXT4-fs error (device loop5): ext4_quota_enable:7127: comm syz.5.1119: Bad quota inode: 3, type: 0 [ 111.548091][ T7225] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 111.562888][ T7225] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 111.570128][ T7225] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.596782][ T4322] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.713229][ T7234] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 111.739128][ T7234] loop5: detected capacity change from 0 to 128 [ 111.760266][ T7234] syz.5.1123: attempt to access beyond end of device [ 111.760266][ T7234] loop5: rw=0, sector=121, nr_sectors = 120 limit=128 [ 111.786830][ T37] kworker/u8:2: attempt to access beyond end of device [ 111.786830][ T37] loop5: rw=1, sector=241, nr_sectors = 800 limit=128 [ 111.881180][ T7243] netlink: 'syz.5.1127': attribute type 3 has an invalid length. [ 111.896156][ T7247] netlink: 'syz.2.1129': attribute type 3 has an invalid length. [ 111.973418][ T7261] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1135'. [ 111.984085][ T7261] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1135'. [ 111.993604][ T7261] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1135'. [ 112.020423][ T7268] loop5: detected capacity change from 0 to 512 [ 112.027088][ T7268] ext4: Unknown parameter 'pcr' [ 112.111105][ T7271] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1138'. [ 112.167578][ T7275] netlink: 197276 bytes leftover after parsing attributes in process `syz.2.1140'. [ 112.186948][ T7277] FAULT_INJECTION: forcing a failure. [ 112.186948][ T7277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.200242][ T7277] CPU: 0 UID: 0 PID: 7277 Comm: syz.6.1141 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 112.200270][ T7277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 112.200301][ T7277] Call Trace: [ 112.200307][ T7277] [ 112.200314][ T7277] __dump_stack+0x1d/0x30 [ 112.200337][ T7277] dump_stack_lvl+0xe8/0x140 [ 112.200360][ T7277] dump_stack+0x15/0x1b [ 112.200404][ T7277] should_fail_ex+0x265/0x280 [ 112.200443][ T7277] should_fail+0xb/0x20 [ 112.200482][ T7277] should_fail_usercopy+0x1a/0x20 [ 112.200534][ T7277] _copy_from_user+0x1c/0xb0 [ 112.200560][ T7277] memdup_user_nul+0x5f/0xe0 [ 112.200638][ T7277] sel_write_validatetrans+0x19c/0x370 [ 112.200669][ T7277] ? __pfx_sel_write_validatetrans+0x10/0x10 [ 112.200715][ T7277] vfs_write+0x269/0x8e0 [ 112.200798][ T7277] ? __rcu_read_unlock+0x4f/0x70 [ 112.200818][ T7277] ? __fget_files+0x184/0x1c0 [ 112.200838][ T7277] ksys_write+0xda/0x1a0 [ 112.200855][ T7277] __x64_sys_write+0x40/0x50 [ 112.200876][ T7277] x64_sys_call+0x2cdd/0x2fb0 [ 112.200980][ T7277] do_syscall_64+0xd2/0x200 [ 112.200996][ T7277] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 112.201020][ T7277] ? clear_bhb_loop+0x40/0x90 [ 112.201048][ T7277] ? clear_bhb_loop+0x40/0x90 [ 112.201090][ T7277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.201116][ T7277] RIP: 0033:0x7f87b463e929 [ 112.201134][ T7277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.201156][ T7277] RSP: 002b:00007f87b2ca7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 112.201178][ T7277] RAX: ffffffffffffffda RBX: 00007f87b4865fa0 RCX: 00007f87b463e929 [ 112.201200][ T7277] RDX: 0000000000000062 RSI: 0000200000000040 RDI: 0000000000000007 [ 112.201212][ T7277] RBP: 00007f87b2ca7090 R08: 0000000000000000 R09: 0000000000000000 [ 112.201222][ T7277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.201266][ T7277] R13: 0000000000000000 R14: 00007f87b4865fa0 R15: 00007ffe3040bdf8 [ 112.201354][ T7277] [ 112.415840][ T7281] openvswitch: netlink: Message has 6 unknown bytes. [ 112.428058][ T7281] syzkaller1: entered promiscuous mode [ 112.433599][ T7281] syzkaller1: entered allmulticast mode [ 112.488358][ T7292] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 112.521996][ T7294] vlan2: entered promiscuous mode [ 112.527129][ T7294] bridge0: entered promiscuous mode [ 112.532571][ T7294] vlan2: entered allmulticast mode [ 112.537728][ T7294] bridge0: entered allmulticast mode [ 112.544732][ T7294] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1148'. [ 112.653344][ T7304] FAULT_INJECTION: forcing a failure. [ 112.653344][ T7304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.666519][ T7304] CPU: 1 UID: 0 PID: 7304 Comm: syz.6.1151 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 112.666546][ T7304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 112.666607][ T7304] Call Trace: [ 112.666616][ T7304] [ 112.666665][ T7304] __dump_stack+0x1d/0x30 [ 112.666684][ T7304] dump_stack_lvl+0xe8/0x140 [ 112.666701][ T7304] dump_stack+0x15/0x1b [ 112.666715][ T7304] should_fail_ex+0x265/0x280 [ 112.666743][ T7304] should_fail+0xb/0x20 [ 112.666829][ T7304] should_fail_usercopy+0x1a/0x20 [ 112.666856][ T7304] copy_to_user_nofault+0x7f/0x120 [ 112.666874][ T7304] bpf_probe_write_user+0x83/0xc0 [ 112.666907][ T7304] bpf_prog_19072b5a3fcf5d64+0x41/0x49 [ 112.666921][ T7304] bpf_trace_run2+0x104/0x1c0 [ 112.666946][ T7304] __bpf_trace_sys_enter+0x10/0x30 [ 112.667016][ T7304] trace_sys_enter+0x86/0x110 [ 112.667037][ T7304] syscall_trace_enter+0x13e/0x1e0 [ 112.667058][ T7304] do_syscall_64+0xac/0x200 [ 112.667121][ T7304] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 112.667144][ T7304] ? clear_bhb_loop+0x40/0x90 [ 112.667168][ T7304] ? clear_bhb_loop+0x40/0x90 [ 112.667187][ T7304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.667216][ T7304] RIP: 0033:0x7f87b463e929 [ 112.667229][ T7304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.667245][ T7304] RSP: 002b:00007f87b2ca7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 112.667261][ T7304] RAX: ffffffffffffffda RBX: 00007f87b4865fa0 RCX: 00007f87b463e929 [ 112.667272][ T7304] RDX: 0100000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 112.667283][ T7304] RBP: 00007f87b2ca7090 R08: 0000000000000000 R09: 0000000000000000 [ 112.667299][ T7304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.667365][ T7304] R13: 0000000000000000 R14: 00007f87b4865fa0 R15: 00007ffe3040bdf8 [ 112.667393][ T7304] [ 112.969657][ T7315] loop6: detected capacity change from 0 to 512 [ 112.978142][ T7315] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 112.989632][ T7315] EXT4-fs (loop6): 1 truncate cleaned up [ 112.996502][ T7315] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.155216][ T7325] loop2: detected capacity change from 0 to 1024 [ 113.162088][ T7325] EXT4-fs: Ignoring removed orlov option [ 113.170160][ T7325] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.242085][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.383971][ T7337] loop2: detected capacity change from 0 to 8192 [ 113.461700][ T7339] loop5: detected capacity change from 0 to 8192 [ 113.662572][ T7347] loop5: detected capacity change from 0 to 1024 [ 113.682851][ T7347] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.697380][ T7347] EXT4-fs (loop5): shut down requested (2) [ 113.704011][ T7347] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=16 [ 113.713134][ T7347] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=16 [ 113.734395][ T4322] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.757533][ T7352] netlink: 'syz.5.1167': attribute type 1 has an invalid length. [ 113.765379][ T7352] netlink: 'syz.5.1167': attribute type 1 has an invalid length. [ 113.774238][ T7352] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1167'. [ 113.786003][ T7352] team0: Port device team_slave_0 removed [ 113.808377][ T5677] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.844091][ T7352] loop5: detected capacity change from 0 to 764 [ 113.850918][ T7355] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1169'. [ 113.852639][ T7352] iso9660: Unknown parameter '00000000000000000036Ozc aٸfsM7‰2 ^֎zJkԞ<ɇL[>0'/znLz0Ӄo񠘠#/1j2ttP[Arѵ<#8' [ 113.947448][ T7361] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 113.982792][ T7361] loop6: detected capacity change from 0 to 128 [ 113.989862][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.000927][ T3314] EXT4-fs error (device loop3): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 114.014270][ T3314] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 114.026325][ T3314] EXT4-fs error (device loop3): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 114.033471][ T7361] syz.6.1171: attempt to access beyond end of device [ 114.033471][ T7361] loop6: rw=0, sector=121, nr_sectors = 120 limit=128 [ 114.068304][ T7364] netlink: 'syz.3.1172': attribute type 3 has an invalid length. [ 114.094416][ T12] kworker/u8:0: attempt to access beyond end of device [ 114.094416][ T12] loop6: rw=1, sector=241, nr_sectors = 800 limit=128 [ 114.723292][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1178'. [ 114.813659][ T7382] netlink: 'syz.0.1179': attribute type 33 has an invalid length. [ 114.832315][ T7377] loop5: detected capacity change from 0 to 2048 [ 114.845099][ T7377] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.248759][ T7401] futex_wake_op: syz.2.1184 tries to shift op by 32; fix this program [ 115.502860][ T4322] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.656324][ T29] kauditd_printk_skb: 321 callbacks suppressed [ 115.656339][ T29] audit: type=1326 audit(1750178743.882:6155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7414 comm="syz.0.1190" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc7e808e929 code=0x0 [ 115.733262][ T29] audit: type=1326 audit(1750178743.962:6156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7421 comm="syz.5.1193" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2aae93e929 code=0x0 [ 115.882286][ T7428] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 115.897836][ T3417] lo speed is unknown, defaulting to 1000 [ 115.903948][ T3417] syz0: Port: 1 Link ACTIVE [ 115.924879][ T7428] loop3: detected capacity change from 0 to 128 [ 115.933609][ T29] audit: type=1326 audit(1750178744.162:6157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7427 comm="syz.3.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5529d3e929 code=0x7ffc0000 [ 115.957111][ T7428] syz.3.1195: attempt to access beyond end of device [ 115.957111][ T7428] loop3: rw=0, sector=121, nr_sectors = 120 limit=128 [ 115.970514][ T29] audit: type=1326 audit(1750178744.162:6158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7427 comm="syz.3.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5529d3e929 code=0x7ffc0000 [ 115.993950][ T29] audit: type=1326 audit(1750178744.162:6159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7427 comm="syz.3.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5529d3e929 code=0x7ffc0000 [ 116.021351][ T29] audit: type=1326 audit(1750178744.162:6160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7427 comm="syz.3.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f5529d3e929 code=0x7ffc0000 [ 116.044893][ T29] audit: type=1326 audit(1750178744.162:6161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7427 comm="syz.3.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5529d3e929 code=0x7ffc0000 [ 116.068414][ T29] audit: type=1326 audit(1750178744.162:6162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7427 comm="syz.3.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f5529d3e929 code=0x7ffc0000 [ 116.091949][ T29] audit: type=1326 audit(1750178744.162:6163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7427 comm="syz.3.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5529d3e929 code=0x7ffc0000 [ 116.115446][ T29] audit: type=1326 audit(1750178744.162:6164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7427 comm="syz.3.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f5529d3e929 code=0x7ffc0000 [ 116.141384][ T312] kworker/u8:5: attempt to access beyond end of device [ 116.141384][ T312] loop3: rw=1, sector=241, nr_sectors = 800 limit=128 [ 116.227450][ T7435] netlink: 'syz.3.1198': attribute type 33 has an invalid length. [ 116.235521][ T7435] __nla_validate_parse: 3 callbacks suppressed [ 116.235537][ T7435] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1198'. [ 116.253980][ T7435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1198'. [ 116.267133][ T7435] loop3: detected capacity change from 0 to 736 [ 116.274746][ T7435] iso9660: Unknown parameter '^'BQ]ӾW\W{y~8%Nrs;y7bYi ƭ` 71o ڕ_Ƭ2' [ 116.589735][ T7444] FAULT_INJECTION: forcing a failure. [ 116.589735][ T7444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.602895][ T7444] CPU: 0 UID: 0 PID: 7444 Comm: syz.5.1201 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 116.602929][ T7444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 116.602976][ T7444] Call Trace: [ 116.602984][ T7444] [ 116.602993][ T7444] __dump_stack+0x1d/0x30 [ 116.603064][ T7444] dump_stack_lvl+0xe8/0x140 [ 116.603089][ T7444] dump_stack+0x15/0x1b [ 116.603110][ T7444] should_fail_ex+0x265/0x280 [ 116.603154][ T7444] should_fail+0xb/0x20 [ 116.603260][ T7444] should_fail_usercopy+0x1a/0x20 [ 116.603294][ T7444] _copy_from_user+0x1c/0xb0 [ 116.603315][ T7444] ___sys_recvmsg+0xaa/0x370 [ 116.603336][ T7444] ? 0xffffffff81000000 [ 116.603365][ T7444] ? __rcu_read_unlock+0x4f/0x70 [ 116.603423][ T7444] __x64_sys_recvmsg+0xd1/0x160 [ 116.603503][ T7444] x64_sys_call+0xf19/0x2fb0 [ 116.603529][ T7444] do_syscall_64+0xd2/0x200 [ 116.603585][ T7444] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 116.603619][ T7444] ? clear_bhb_loop+0x40/0x90 [ 116.603639][ T7444] ? clear_bhb_loop+0x40/0x90 [ 116.603660][ T7444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.603732][ T7444] RIP: 0033:0x7f2aae93e929 [ 116.603750][ T7444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.603773][ T7444] RSP: 002b:00007f2aacfa7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 116.603795][ T7444] RAX: ffffffffffffffda RBX: 00007f2aaeb65fa0 RCX: 00007f2aae93e929 [ 116.603806][ T7444] RDX: 0000000000000000 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 116.603818][ T7444] RBP: 00007f2aacfa7090 R08: 0000000000000000 R09: 0000000000000000 [ 116.603842][ T7444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.603858][ T7444] R13: 0000000000000000 R14: 00007f2aaeb65fa0 R15: 00007fff582c14d8 [ 116.603883][ T7444] [ 116.819349][ T7453] syzkaller1: entered promiscuous mode [ 116.824964][ T7453] syzkaller1: entered allmulticast mode [ 116.832354][ T7451] syzkaller1: entered promiscuous mode [ 116.837892][ T7451] syzkaller1: entered allmulticast mode [ 116.966884][ T7464] loop2: detected capacity change from 0 to 8192 [ 117.056509][ T7474] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1212'. [ 117.098550][ T7477] loop5: detected capacity change from 0 to 764 [ 117.238948][ T7484] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1216'. [ 117.282137][ T7484] loop5: detected capacity change from 0 to 736 [ 117.308698][ T7484] iso9660: Unknown parameter '^'BQ]ӾW\W{y~8%Nrs;y7bYi ƭ` 71o ڕ_Ƭ2' [ 117.466395][ T7497] syzkaller1: entered promiscuous mode [ 117.471971][ T7497] syzkaller1: entered allmulticast mode [ 117.586917][ T7501] loop3: detected capacity change from 0 to 128 [ 117.611563][ T7501] netlink: 'syz.3.1222': attribute type 6 has an invalid length. [ 117.774783][ T7504] SELinux: syz.3.1223 (7504) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 117.798437][ T7506] netlink: 'syz.0.1224': attribute type 33 has an invalid length. [ 117.806460][ T7506] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1224'. [ 117.826342][ T7506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1224'. [ 117.979516][ T7514] loop2: detected capacity change from 0 to 128 [ 118.245763][ T7524] syzkaller1: entered promiscuous mode [ 118.251399][ T7524] syzkaller1: entered allmulticast mode [ 118.385964][ T7529] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 118.417808][ T7529] loop5: detected capacity change from 0 to 128 [ 118.447575][ T7529] syz.5.1233: attempt to access beyond end of device [ 118.447575][ T7529] loop5: rw=0, sector=121, nr_sectors = 120 limit=128 [ 118.486201][ T31] kworker/u8:1: attempt to access beyond end of device [ 118.486201][ T31] loop5: rw=1, sector=241, nr_sectors = 800 limit=128 [ 118.519920][ T7532] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 118.551523][ T7532] loop5: detected capacity change from 0 to 128 [ 118.584767][ T7532] syz.5.1234: attempt to access beyond end of device [ 118.584767][ T7532] loop5: rw=0, sector=121, nr_sectors = 120 limit=128 [ 118.598690][ T3417] IPVS: starting estimator thread 0... [ 118.642466][ T31] kworker/u8:1: attempt to access beyond end of device [ 118.642466][ T31] loop5: rw=1, sector=241, nr_sectors = 800 limit=128 [ 118.690672][ T7536] IPVS: using max 2448 ests per chain, 122400 per kthread [ 118.706340][ T7538] syzkaller1: entered promiscuous mode [ 118.711991][ T7538] syzkaller1: entered allmulticast mode [ 118.949682][ T7551] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 118.965491][ T7548] loop5: detected capacity change from 0 to 8192 [ 118.983170][ T7551] loop2: detected capacity change from 0 to 128 [ 119.008635][ T7551] syz.2.1239: attempt to access beyond end of device [ 119.008635][ T7551] loop2: rw=0, sector=121, nr_sectors = 120 limit=128 [ 119.040564][ T7555] loop6: detected capacity change from 0 to 128 [ 119.057871][ T7555] netlink: 'syz.6.1242': attribute type 6 has an invalid length. [ 119.068035][ T37] kworker/u8:2: attempt to access beyond end of device [ 119.068035][ T37] loop2: rw=1, sector=241, nr_sectors = 800 limit=128 [ 119.155931][ T7564] loop2: detected capacity change from 0 to 512 [ 119.170800][ T7564] EXT4-fs: Ignoring removed mblk_io_submit option [ 119.179001][ T7564] EXT4-fs: dax option not supported [ 119.330045][ T7581] syzkaller1: entered promiscuous mode [ 119.335645][ T7581] syzkaller1: entered allmulticast mode [ 119.551075][ T7595] loop6: detected capacity change from 0 to 128 [ 119.582357][ T7595] syz.6.1254: attempt to access beyond end of device [ 119.582357][ T7595] loop6: rw=0, sector=121, nr_sectors = 120 limit=128 [ 119.609767][ T3460] kworker/u8:8: attempt to access beyond end of device [ 119.609767][ T3460] loop6: rw=1, sector=241, nr_sectors = 800 limit=128 [ 119.653298][ T7597] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.688942][ T7597] loop6: detected capacity change from 0 to 128 [ 119.724705][ T7597] syz.6.1255: attempt to access beyond end of device [ 119.724705][ T7597] loop6: rw=0, sector=121, nr_sectors = 120 limit=128 [ 119.759307][ T3460] kworker/u8:8: attempt to access beyond end of device [ 119.759307][ T3460] loop6: rw=1, sector=241, nr_sectors = 800 limit=128 [ 119.836843][ T7602] loop6: detected capacity change from 0 to 128 [ 119.847465][ T7602] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 119.861520][ T7602] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.885737][ T7602] FAULT_INJECTION: forcing a failure. [ 119.885737][ T7602] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 119.899079][ T7602] CPU: 0 UID: 0 PID: 7602 Comm: syz.6.1259 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 119.899112][ T7602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 119.899124][ T7602] Call Trace: [ 119.899129][ T7602] [ 119.899135][ T7602] __dump_stack+0x1d/0x30 [ 119.899153][ T7602] dump_stack_lvl+0xe8/0x140 [ 119.899181][ T7602] dump_stack+0x15/0x1b [ 119.899195][ T7602] should_fail_ex+0x265/0x280 [ 119.899240][ T7602] should_fail_alloc_page+0xf2/0x100 [ 119.899352][ T7602] __alloc_frozen_pages_noprof+0xff/0x360 [ 119.899387][ T7602] alloc_pages_mpol+0xb3/0x250 [ 119.899417][ T7602] folio_alloc_noprof+0x97/0x150 [ 119.899507][ T7602] filemap_alloc_folio_noprof+0x66/0x210 [ 119.899645][ T7602] __filemap_get_folio+0x28f/0x6b0 [ 119.899674][ T7602] ? ext4_writepage_trans_blocks+0x1bf/0x1e0 [ 119.899698][ T7602] ext4_write_begin+0x234/0xd30 [ 119.899764][ T7602] ext4_da_write_begin+0x1e0/0x670 [ 119.899792][ T7602] ? balance_dirty_pages_ratelimited_flags+0x40b/0x5e0 [ 119.899818][ T7602] generic_perform_write+0x184/0x490 [ 119.899841][ T7602] ext4_buffered_write_iter+0x1ee/0x3c0 [ 119.899926][ T7602] ? ext4_file_write_iter+0xfe/0xf00 [ 119.899989][ T7602] ext4_file_write_iter+0x383/0xf00 [ 119.900008][ T7602] ? path_openat+0x1bf8/0x2170 [ 119.900033][ T7602] ? _parse_integer_limit+0x170/0x190 [ 119.900101][ T7602] do_iter_readv_writev+0x421/0x4c0 [ 119.900124][ T7602] vfs_writev+0x2df/0x8b0 [ 119.900193][ T7602] __se_sys_pwritev2+0xfc/0x1c0 [ 119.900213][ T7602] __x64_sys_pwritev2+0x67/0x80 [ 119.900231][ T7602] x64_sys_call+0x1cea/0x2fb0 [ 119.900249][ T7602] do_syscall_64+0xd2/0x200 [ 119.900313][ T7602] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 119.900346][ T7602] ? clear_bhb_loop+0x40/0x90 [ 119.900364][ T7602] ? clear_bhb_loop+0x40/0x90 [ 119.900383][ T7602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.900401][ T7602] RIP: 0033:0x7f87b463e929 [ 119.900414][ T7602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.900531][ T7602] RSP: 002b:00007f87b2ca7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 119.900548][ T7602] RAX: ffffffffffffffda RBX: 00007f87b4865fa0 RCX: 00007f87b463e929 [ 119.900559][ T7602] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000007 [ 119.900569][ T7602] RBP: 00007f87b2ca7090 R08: 0000000000000000 R09: 0000000000000000 [ 119.900579][ T7602] R10: 0000000000000e7b R11: 0000000000000246 R12: 0000000000000001 [ 119.900590][ T7602] R13: 0000000000000000 R14: 00007f87b4865fa0 R15: 00007ffe3040bdf8 [ 119.900607][ T7602] [ 120.186651][ T7612] loop2: detected capacity change from 0 to 128 [ 120.202102][ T7612] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 120.216179][ T5677] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.229804][ T7612] ext4 filesystem being mounted at /254/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.261470][ T7617] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1263'. [ 120.326208][ T7620] lo speed is unknown, defaulting to 1000 [ 120.334750][ T3309] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.342083][ T7619] lo speed is unknown, defaulting to 1000 [ 120.380167][ T7620] lo speed is unknown, defaulting to 1000 [ 120.415002][ T7626] loop6: detected capacity change from 0 to 8192 [ 120.446433][ T7619] lo speed is unknown, defaulting to 1000 [ 120.637317][ T7642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1282'. [ 120.672520][ T7652] loop5: detected capacity change from 0 to 128 [ 120.708052][ T29] kauditd_printk_skb: 557 callbacks suppressed [ 120.708070][ T29] audit: type=1326 audit(1750178748.932:6722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.5.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aae93e929 code=0x7ffc0000 [ 120.751838][ T29] audit: type=1326 audit(1750178748.932:6723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.5.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aae93e929 code=0x7ffc0000 [ 120.775909][ T29] audit: type=1326 audit(1750178748.932:6724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.5.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2aae93e929 code=0x7ffc0000 [ 120.799426][ T29] audit: type=1326 audit(1750178748.932:6725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.5.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aae93e929 code=0x7ffc0000 [ 120.822842][ T29] audit: type=1326 audit(1750178748.932:6726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.5.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aae93e929 code=0x7ffc0000 [ 120.846326][ T29] audit: type=1326 audit(1750178748.932:6727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.5.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f2aae93e929 code=0x7ffc0000 [ 120.869730][ T29] audit: type=1326 audit(1750178748.972:6728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.5.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aae93e929 code=0x7ffc0000 [ 120.876281][ T7652] syz.5.1272: attempt to access beyond end of device [ 120.876281][ T7652] loop5: rw=0, sector=121, nr_sectors = 120 limit=128 [ 120.893169][ T29] audit: type=1326 audit(1750178748.972:6729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.5.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aae93e929 code=0x7ffc0000 [ 120.893205][ T29] audit: type=1326 audit(1750178748.972:6730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.5.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f2aae93e929 code=0x7ffc0000 [ 120.998105][ T29] audit: type=1326 audit(1750178749.012:6731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.5.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aae93e929 code=0x7ffc0000 [ 121.028903][ T7662] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 121.040287][ T7659] SELinux: security_context_str_to_sid () failed with errno=-22 [ 121.105953][ T12] kworker/u8:0: attempt to access beyond end of device [ 121.105953][ T12] loop5: rw=1, sector=241, nr_sectors = 800 limit=128 [ 121.209163][ T7673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1279'. [ 121.209343][ T7675] 9pnet_fd: Insufficient options for proto=fd [ 121.235010][ T7677] syzkaller1: entered promiscuous mode [ 121.240590][ T7677] syzkaller1: entered allmulticast mode [ 121.444908][ T7699] FAULT_INJECTION: forcing a failure. [ 121.444908][ T7699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.458498][ T7699] CPU: 0 UID: 0 PID: 7699 Comm: syz.3.1290 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 121.458534][ T7699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 121.458545][ T7699] Call Trace: [ 121.458550][ T7699] [ 121.458630][ T7699] __dump_stack+0x1d/0x30 [ 121.458655][ T7699] dump_stack_lvl+0xe8/0x140 [ 121.458679][ T7699] dump_stack+0x15/0x1b [ 121.458775][ T7699] should_fail_ex+0x265/0x280 [ 121.458807][ T7699] should_fail+0xb/0x20 [ 121.458836][ T7699] should_fail_usercopy+0x1a/0x20 [ 121.458875][ T7699] _copy_from_user+0x1c/0xb0 [ 121.458959][ T7699] kstrtouint_from_user+0x69/0xf0 [ 121.458996][ T7699] ? 0xffffffff81000000 [ 121.459038][ T7699] ? selinux_file_permission+0x1e4/0x320 [ 121.459072][ T7699] proc_fail_nth_write+0x50/0x160 [ 121.459090][ T7699] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 121.459107][ T7699] vfs_write+0x269/0x8e0 [ 121.459197][ T7699] ? vfs_read+0x47f/0x6f0 [ 121.459240][ T7699] ? __rcu_read_unlock+0x4f/0x70 [ 121.459260][ T7699] ? __fget_files+0x184/0x1c0 [ 121.459335][ T7699] ksys_write+0xda/0x1a0 [ 121.459357][ T7699] __x64_sys_write+0x40/0x50 [ 121.459376][ T7699] x64_sys_call+0x2cdd/0x2fb0 [ 121.459499][ T7699] do_syscall_64+0xd2/0x200 [ 121.459546][ T7699] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 121.459570][ T7699] ? clear_bhb_loop+0x40/0x90 [ 121.459588][ T7699] ? clear_bhb_loop+0x40/0x90 [ 121.459609][ T7699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.459675][ T7699] RIP: 0033:0x7f5529d3d3df [ 121.459691][ T7699] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 121.459770][ T7699] RSP: 002b:00007f55283a7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 121.459791][ T7699] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5529d3d3df [ 121.459861][ T7699] RDX: 0000000000000001 RSI: 00007f55283a70a0 RDI: 0000000000000003 [ 121.459876][ T7699] RBP: 00007f55283a7090 R08: 0000000000000000 R09: 0000000000000000 [ 121.459890][ T7699] R10: 0000000000000066 R11: 0000000000000293 R12: 0000000000000001 [ 121.459905][ T7699] R13: 0000000000000000 R14: 00007f5529f65fa0 R15: 00007ffdb176f868 [ 121.459928][ T7699] [ 121.480178][ T7702] 9pnet_fd: Insufficient options for proto=fd [ 121.731363][ T7714] syzkaller1: entered promiscuous mode [ 121.736912][ T7714] syzkaller1: entered allmulticast mode [ 121.829355][ T7725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1300'. [ 121.830044][ T7732] tc_dump_action: action bad kind [ 121.847969][ T7732] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1303'. [ 121.860321][ T7725] loop3: detected capacity change from 0 to 736 [ 121.879843][ T7725] iso9660: Unknown parameter '^'BQ]ӾW\W{y~8%Nrs;y7bYi ƭ` 71o ڕ_Ƭ2' [ 121.897636][ T7742] netlink: 56 bytes leftover after parsing attributes in process `'. [ 121.901377][ T7744] netlink: 56 bytes leftover after parsing attributes in process `'. [ 121.906837][ T7732] loop6: detected capacity change from 0 to 512 [ 121.915609][ T7744] netlink: 8 bytes leftover after parsing attributes in process `'. [ 121.923360][ T7742] netlink: 8 bytes leftover after parsing attributes in process `'. [ 121.931400][ T7732] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 121.951488][ T7732] EXT4-fs (loop6): 1 truncate cleaned up [ 121.958396][ T7732] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.984728][ T7749] 9pnet_fd: Insufficient options for proto=fd [ 122.037043][ T7751] loop2: detected capacity change from 0 to 8192 [ 122.106719][ T5677] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.226345][ T7760] lo speed is unknown, defaulting to 1000 [ 122.296454][ T7760] lo speed is unknown, defaulting to 1000 [ 122.745717][ T7768] netlink: 'syz.5.1313': attribute type 33 has an invalid length. [ 122.753634][ T7768] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1313'. [ 122.849126][ T7769] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1313'. [ 123.152709][ T7771] loop5: detected capacity change from 0 to 736 [ 123.159358][ T7771] iso9660: Unknown parameter '^'BQ]ӾW\W{y~8%Nrs;y7bYi ƭ` 71o ڕ_Ƭ2' [ 123.315279][ T7773] syzkaller1: entered promiscuous mode [ 123.320923][ T7773] syzkaller1: entered allmulticast mode [ 123.382914][ T7775] FAULT_INJECTION: forcing a failure. [ 123.382914][ T7775] name failslab, interval 1, probability 0, space 0, times 0 [ 123.395728][ T7775] CPU: 1 UID: 0 PID: 7775 Comm: syz.2.1315 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 123.395763][ T7775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 123.395780][ T7775] Call Trace: [ 123.395796][ T7775] [ 123.395804][ T7775] __dump_stack+0x1d/0x30 [ 123.395827][ T7775] dump_stack_lvl+0xe8/0x140 [ 123.395854][ T7775] dump_stack+0x15/0x1b [ 123.395874][ T7775] should_fail_ex+0x265/0x280 [ 123.396064][ T7775] should_failslab+0x8c/0xb0 [ 123.396092][ T7775] kmem_cache_alloc_node_noprof+0x57/0x320 [ 123.396151][ T7775] ? __alloc_skb+0x101/0x320 [ 123.396196][ T7775] __alloc_skb+0x101/0x320 [ 123.396224][ T7775] netlink_alloc_large_skb+0xba/0xf0 [ 123.396249][ T7775] netlink_sendmsg+0x3cf/0x6b0 [ 123.396314][ T7775] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.396335][ T7775] __sock_sendmsg+0x142/0x180 [ 123.396363][ T7775] ____sys_sendmsg+0x31e/0x4e0 [ 123.396399][ T7775] ___sys_sendmsg+0x17b/0x1d0 [ 123.396534][ T7775] __x64_sys_sendmsg+0xd4/0x160 [ 123.396554][ T7775] x64_sys_call+0x2999/0x2fb0 [ 123.396627][ T7775] do_syscall_64+0xd2/0x200 [ 123.396646][ T7775] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 123.396672][ T7775] ? clear_bhb_loop+0x40/0x90 [ 123.396692][ T7775] ? clear_bhb_loop+0x40/0x90 [ 123.396715][ T7775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.396752][ T7775] RIP: 0033:0x7f634170e929 [ 123.396764][ T7775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.396861][ T7775] RSP: 002b:00007f633fd77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.396876][ T7775] RAX: ffffffffffffffda RBX: 00007f6341935fa0 RCX: 00007f634170e929 [ 123.396966][ T7775] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 123.396980][ T7775] RBP: 00007f633fd77090 R08: 0000000000000000 R09: 0000000000000000 [ 123.396990][ T7775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.397078][ T7775] R13: 0000000000000000 R14: 00007f6341935fa0 R15: 00007ffec145a708 [ 123.397101][ T7775] [ 123.726054][ T7782] loop3: detected capacity change from 0 to 512 [ 123.758366][ T7785] 9pnet_fd: Insufficient options for proto=fd [ 123.766048][ T7782] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.789393][ T7782] ext4 filesystem being mounted at /245/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 123.839593][ T7789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1321'. [ 123.869077][ T7782] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.1319: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 123.907006][ T7782] EXT4-fs (loop3): Remounting filesystem read-only [ 123.974415][ T7782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1319'. [ 123.998654][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.111265][ T7804] netlink: 'syz.2.1326': attribute type 4 has an invalid length. [ 124.137449][ T36] lo speed is unknown, defaulting to 1000 [ 124.143411][ T36] sz1: Port: 1 Link DOWN [ 124.156116][ T7804] netlink: 'syz.2.1326': attribute type 4 has an invalid length. [ 124.195779][ T36] lo speed is unknown, defaulting to 1000 [ 124.223724][ T3477] lo speed is unknown, defaulting to 1000 [ 124.229589][ T3477] sz1: Port: 1 Link ACTIVE [ 124.238262][ T7813] loop2: detected capacity change from 0 to 512 [ 124.261601][ T3477] lo speed is unknown, defaulting to 1000 [ 124.285998][ T7813] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 124.297605][ T7815] syzkaller1: entered promiscuous mode [ 124.303289][ T7815] syzkaller1: entered allmulticast mode [ 124.324664][ T7813] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.348887][ T7813] ext4 filesystem being mounted at /276/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.361461][ T7820] hsr_slave_0: left promiscuous mode [ 124.456515][ T7820] futex_wake_op: syz.5.1330 tries to shift op by -1; fix this program [ 124.544495][ T7826] SELinux: syz.3.1332 (7826) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 124.562986][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.592078][ T7837] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 124.634730][ T7837] loop2: detected capacity change from 0 to 128 [ 124.658887][ T7837] syz.2.1337: attempt to access beyond end of device [ 124.658887][ T7837] loop2: rw=0, sector=121, nr_sectors = 120 limit=128 [ 124.694000][ T12] kworker/u8:0: attempt to access beyond end of device [ 124.694000][ T12] loop2: rw=1, sector=241, nr_sectors = 800 limit=128 [ 124.753686][ T7849] syzkaller1: entered promiscuous mode [ 124.759253][ T7849] syzkaller1: entered allmulticast mode [ 124.840208][ T3417] hid-generic 0000:0000:0000.0019: unknown main item tag 0x7 [ 124.847803][ T3417] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 124.855313][ T3417] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 124.862788][ T3417] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 124.870179][ T3417] hid-generic 0000:0000:0000.0019: unknown main item tag 0x2 [ 124.877646][ T3417] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 124.885075][ T3417] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 124.892480][ T3417] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 124.899950][ T3417] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 124.907357][ T3417] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 124.914806][ T3417] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 124.922212][ T3417] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 124.929595][ T3417] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 124.936987][ T3417] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 124.944609][ T3417] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 124.952027][ T3417] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 124.959603][ T3417] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 124.967024][ T3417] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 124.974470][ T3417] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 124.981887][ T3417] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 124.989286][ T3417] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 124.996726][ T3417] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 125.004119][ T3417] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 125.011577][ T3417] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 125.018994][ T3417] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 125.026425][ T3417] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 125.033906][ T3417] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 125.041388][ T3417] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 125.048842][ T3417] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 125.056305][ T3417] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 125.063826][ T3417] hid-generic 0000:0000:0000.0019: unknown main item tag 0x1 [ 125.127134][ T7862] loop3: detected capacity change from 0 to 512 [ 125.133785][ T7862] EXT4-fs: Ignoring removed oldalloc option [ 125.140803][ T7862] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 125.168693][ T7861] loop6: detected capacity change from 0 to 1024 [ 125.179145][ T7862] EXT4-fs (loop3): orphan cleanup on readonly fs [ 125.187310][ T7862] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1344: Failed to acquire dquot type 1 [ 125.199977][ T7862] EXT4-fs (loop3): 1 truncate cleaned up [ 125.209630][ T7862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 125.256841][ T7862] lo speed is unknown, defaulting to 1000 [ 125.307631][ T7862] lo speed is unknown, defaulting to 1000 [ 125.393864][ T7862] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.1344: deleted inode referenced: 12 [ 125.414922][ T7861] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.437098][ T7861] SELinux: syz.6.1346 (7861) set checkreqprot to 1. This is no longer supported. [ 125.507686][ T5677] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.033744][ T3417] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz0] on syz0 [ 126.103112][ T29] kauditd_printk_skb: 635 callbacks suppressed [ 126.103129][ T29] audit: type=1326 audit(1750178754.332:7365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7882 comm="syz.2.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634170e929 code=0x7ffc0000 [ 126.193561][ T7886] pimreg: entered allmulticast mode [ 126.210380][ T7883] 9pnet_fd: Insufficient options for proto=fd [ 126.228948][ T29] audit: type=1326 audit(1750178754.362:7366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7882 comm="syz.2.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634170e929 code=0x7ffc0000 [ 126.252521][ T29] audit: type=1326 audit(1750178754.382:7367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7882 comm="syz.2.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f634170e929 code=0x7ffc0000 [ 126.276030][ T29] audit: type=1326 audit(1750178754.382:7368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7882 comm="syz.2.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634170e929 code=0x7ffc0000 [ 126.299546][ T29] audit: type=1326 audit(1750178754.382:7369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7882 comm="syz.2.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634170e929 code=0x7ffc0000 [ 126.322989][ T29] audit: type=1326 audit(1750178754.382:7370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7882 comm="syz.2.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f634170e929 code=0x7ffc0000 [ 126.346454][ T29] audit: type=1326 audit(1750178754.382:7371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7882 comm="syz.2.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634170e929 code=0x7ffc0000 [ 126.369902][ T29] audit: type=1326 audit(1750178754.382:7372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7882 comm="syz.2.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634170e929 code=0x7ffc0000 [ 126.393391][ T29] audit: type=1326 audit(1750178754.382:7373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7882 comm="syz.2.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f634170e929 code=0x7ffc0000 [ 126.416946][ T29] audit: type=1326 audit(1750178754.382:7374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7882 comm="syz.2.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634170e929 code=0x7ffc0000 [ 126.510943][ T7891] pimreg: left allmulticast mode [ 126.519768][ T7893] xt_hashlimit: max too large, truncated to 1048576 [ 126.599861][ T7890] syzkaller1: entered promiscuous mode [ 126.605511][ T7890] syzkaller1: entered allmulticast mode [ 126.758255][ T7905] loop5: detected capacity change from 0 to 256 [ 126.787909][ T7905] FAT-fs (loop5): Directory bread(block 64) failed [ 126.798790][ T7905] FAT-fs (loop5): Directory bread(block 65) failed [ 126.819119][ T7905] FAT-fs (loop5): Directory bread(block 66) failed [ 126.834921][ T7905] FAT-fs (loop5): Directory bread(block 67) failed [ 126.845073][ T7907] netlink: 'syz.0.1360': attribute type 4 has an invalid length. [ 126.857400][ T7907] netlink: 'syz.0.1360': attribute type 4 has an invalid length. [ 126.867689][ T7905] FAT-fs (loop5): Directory bread(block 68) failed [ 126.883858][ T7905] FAT-fs (loop5): Directory bread(block 69) failed [ 126.897486][ T7905] FAT-fs (loop5): Directory bread(block 70) failed [ 126.911872][ T7905] FAT-fs (loop5): Directory bread(block 71) failed [ 126.928150][ T7905] FAT-fs (loop5): Directory bread(block 72) failed [ 126.944663][ T7905] FAT-fs (loop5): Directory bread(block 73) failed [ 126.988350][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.215910][ T7924] SELinux: syz.2.1364 (7924) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 127.288789][ T7929] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7929 comm=syz.6.1368 [ 127.300006][ T7935] __nla_validate_parse: 4 callbacks suppressed [ 127.300151][ T7935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1366'. [ 127.320970][ T7931] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.339253][ T7935] 9pnet_fd: Insufficient options for proto=fd [ 127.345602][ T7939] loop6: detected capacity change from 0 to 1024 [ 127.350687][ T7937] FAULT_INJECTION: forcing a failure. [ 127.350687][ T7937] name failslab, interval 1, probability 0, space 0, times 0 [ 127.363820][ T7939] EXT4-fs: Ignoring removed nobh option [ 127.364660][ T7937] CPU: 0 UID: 0 PID: 7937 Comm: syz.5.1369 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 127.364726][ T7937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 127.364743][ T7937] Call Trace: [ 127.364751][ T7937] [ 127.364764][ T7937] __dump_stack+0x1d/0x30 [ 127.364851][ T7937] dump_stack_lvl+0xe8/0x140 [ 127.364877][ T7937] dump_stack+0x15/0x1b [ 127.364898][ T7937] should_fail_ex+0x265/0x280 [ 127.364965][ T7937] should_failslab+0x8c/0xb0 [ 127.365047][ T7937] kmem_cache_alloc_node_noprof+0x57/0x320 [ 127.365171][ T7937] ? __alloc_skb+0x101/0x320 [ 127.365213][ T7937] __alloc_skb+0x101/0x320 [ 127.365250][ T7937] ? audit_log_start+0x365/0x6c0 [ 127.365295][ T7937] audit_log_start+0x380/0x6c0 [ 127.365450][ T7937] audit_seccomp+0x48/0x100 [ 127.365566][ T7937] ? __seccomp_filter+0x68c/0x10d0 [ 127.365597][ T7937] __seccomp_filter+0x69d/0x10d0 [ 127.365631][ T7937] ? __pfx_dquot_quota_sync+0x10/0x10 [ 127.365658][ T7937] ? quota_sync_one+0x90/0xb0 [ 127.365825][ T7937] ? __put_super+0x3b/0x140 [ 127.365925][ T7937] ? _raw_spin_unlock+0x26/0x50 [ 127.365956][ T7937] ? __iterate_supers+0x1d6/0x1f0 [ 127.365993][ T7937] ? __pfx_quota_sync_one+0x10/0x10 [ 127.366037][ T7937] __secure_computing+0x82/0x150 [ 127.366124][ T7937] syscall_trace_enter+0xcf/0x1e0 [ 127.366170][ T7937] do_syscall_64+0xac/0x200 [ 127.366205][ T7937] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 127.366332][ T7937] ? clear_bhb_loop+0x40/0x90 [ 127.366364][ T7937] ? clear_bhb_loop+0x40/0x90 [ 127.366392][ T7937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.366420][ T7937] RIP: 0033:0x7f2aae93d33c [ 127.366439][ T7937] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 127.366462][ T7937] RSP: 002b:00007f2aacfa7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 127.366560][ T7937] RAX: ffffffffffffffda RBX: 00007f2aaeb65fa0 RCX: 00007f2aae93d33c [ 127.366577][ T7937] RDX: 000000000000000f RSI: 00007f2aacfa70a0 RDI: 0000000000000007 [ 127.366594][ T7937] RBP: 00007f2aacfa7090 R08: 0000000000000000 R09: 0000000000000000 [ 127.366690][ T7937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.366712][ T7937] R13: 0000000000000000 R14: 00007f2aaeb65fa0 R15: 00007fff582c14d8 [ 127.366736][ T7937] [ 127.390799][ T7931] loop2: detected capacity change from 0 to 128 [ 127.494660][ T7939] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.517658][ T7931] syz.2.1367: attempt to access beyond end of device [ 127.517658][ T7931] loop2: rw=0, sector=121, nr_sectors = 120 limit=128 [ 127.619646][ T7953] SET target dimension over the limit! [ 127.637349][ T7954] netlink: 43 bytes leftover after parsing attributes in process `syz.6.1370'. [ 127.665020][ T7954] tipc: Started in network mode [ 127.669954][ T7954] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 127.677242][ T7954] tipc: Enabled bearer , priority 10 [ 127.682225][ T12] kworker/u8:0: attempt to access beyond end of device [ 127.682225][ T12] loop2: rw=1, sector=241, nr_sectors = 800 limit=128 [ 127.712257][ T5677] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.726159][ T7960] loop2: detected capacity change from 0 to 128 [ 127.745126][ T7962] loop6: detected capacity change from 0 to 128 [ 127.754847][ T7960] syz.2.1376: attempt to access beyond end of device [ 127.754847][ T7960] loop2: rw=0, sector=121, nr_sectors = 120 limit=128 [ 127.781522][ T51] kworker/u8:3: attempt to access beyond end of device [ 127.781522][ T51] loop2: rw=1, sector=241, nr_sectors = 800 limit=128 [ 127.812972][ T7962] syz.6.1378: attempt to access beyond end of device [ 127.812972][ T7962] loop6: rw=0, sector=121, nr_sectors = 120 limit=128 [ 127.867229][ T3460] kworker/u8:8: attempt to access beyond end of device [ 127.867229][ T3460] loop6: rw=1, sector=241, nr_sectors = 800 limit=128 [ 127.879149][ T7969] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1379'. [ 127.899800][ T7973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.949275][ T7969] hub 9-0:1.0: USB hub found [ 127.954265][ T7969] hub 9-0:1.0: 8 ports detected [ 128.000960][ T7986] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1390'. [ 128.010969][ T7986] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1390'. [ 128.020015][ T7986] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1390'. [ 128.039470][ T7983] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 128.078674][ T7983] loop3: detected capacity change from 0 to 128 [ 128.105166][ T7983] syz.3.1387: attempt to access beyond end of device [ 128.105166][ T7983] loop3: rw=0, sector=121, nr_sectors = 120 limit=128 [ 128.156636][ T51] kworker/u8:3: attempt to access beyond end of device [ 128.156636][ T51] loop3: rw=1, sector=241, nr_sectors = 800 limit=128 [ 128.217202][ T7999] loop5: detected capacity change from 0 to 8192 [ 128.295659][ T7999] ================================================================== [ 128.303801][ T7999] BUG: KCSAN: data-race in fat12_ent_put / fat_mirror_bhs [ 128.310939][ T7999] [ 128.313277][ T7999] write to 0xffff88811f0526a7 of 1 bytes by task 8013 on cpu 1: [ 128.320921][ T7999] fat12_ent_put+0x74/0x170 [ 128.325457][ T7999] fat_alloc_clusters+0x4ce/0xa80 [ 128.330519][ T7999] fat_alloc_new_dir+0xbb/0x530 [ 128.335394][ T7999] vfat_mkdir+0x9b/0x1f0 [ 128.339701][ T7999] vfs_mkdir+0x210/0x340 [ 128.343977][ T7999] do_mkdirat+0x132/0x3f0 [ 128.348340][ T7999] __x64_sys_mkdir+0x42/0x50 [ 128.352955][ T7999] x64_sys_call+0x2289/0x2fb0 [ 128.357651][ T7999] do_syscall_64+0xd2/0x200 [ 128.362164][ T7999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.368072][ T7999] [ 128.370397][ T7999] read to 0xffff88811f052600 of 512 bytes by task 7999 on cpu 0: [ 128.378122][ T7999] fat_mirror_bhs+0x1df/0x320 [ 128.382831][ T7999] fat_alloc_clusters+0x98b/0xa80 [ 128.387870][ T7999] fat_get_block+0x258/0x5e0 [ 128.392471][ T7999] __block_write_begin_int+0x3fd/0xf90 [ 128.397955][ T7999] cont_write_begin+0x5fc/0x970 [ 128.402818][ T7999] fat_write_begin+0x4f/0xe0 [ 128.407429][ T7999] cont_write_begin+0x1ad/0x970 [ 128.412307][ T7999] fat_write_begin+0x4f/0xe0 [ 128.416916][ T7999] generic_cont_expand_simple+0xb0/0x150 [ 128.422559][ T7999] fat_cont_expand+0x3e/0x170 [ 128.427252][ T7999] fat_fallocate+0x177/0x1c0 [ 128.431852][ T7999] vfs_fallocate+0x413/0x450 [ 128.436455][ T7999] __x64_sys_fallocate+0x7a/0xd0 [ 128.441445][ T7999] x64_sys_call+0x2b88/0x2fb0 [ 128.446136][ T7999] do_syscall_64+0xd2/0x200 [ 128.450653][ T7999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.456569][ T7999] [ 128.458898][ T7999] Reported by Kernel Concurrency Sanitizer on: [ 128.465054][ T7999] CPU: 0 UID: 0 PID: 7999 Comm: syz.5.1391 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 128.477661][ T7999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 128.487724][ T7999] ================================================================== [ 128.511887][ T8017] loop6: detected capacity change from 0 to 512 [ 128.543628][ T8017] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 128.563696][ T8017] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.600702][ T8017] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.695283][ T8022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.706722][ T7999] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 128.714381][ T7999] FAT-fs (loop5): Filesystem has been set read-only [ 128.724256][ T8022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.735412][ T8013] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 128.782626][ T3403] tipc: Node number set to 10005162 [ 129.120777][ T5677] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.