last executing test programs: 2m11.958066093s ago: executing program 32 (id=87): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) (async, rerun: 32) r1 = socket$kcm(0x10, 0x2, 0x4) (rerun: 32) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700", 0x5a}, {&(0x7f0000000680)="ffaf", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4080) (async) pipe(&(0x7f0000000300)) (async, rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x18) (async, rerun: 64) r4 = semget$private(0x0, 0x6, 0x0) (rerun: 64) semtimedop(r4, &(0x7f0000000000)=[{0x4, 0x8, 0x1800}, {0x1, 0xd11f, 0x1800}], 0x4d, 0x0) (async, rerun: 64) r5 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r7}, 0x10) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYRES32=r5, @ANYBLOB], 0x48}}, 0x40000) (async) r8 = openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r9}, 0x8) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r10}, &(0x7f0000000000), 0x0}, 0x20) (async) preadv(r8, 0x0, 0x0, 0x8001, 0x5) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r12, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x8000002, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c) (async) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r13}, 0x18) 1m58.965523524s ago: executing program 4 (id=218): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000000280)={0x0, "296f3b4d57f0ee3a2d9347e6ee0d8bb45a4c59ae038cae3fb422381d2865e94ba9d5d2be9dbf3cfa36134284370f6a823423834c92c364f12eea5cdef69219f2", 0x1a}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r2, r3, r4, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xfe, &(0x7f00000001c0)=[{&(0x7f00000007c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x20000800) 1m58.764862768s ago: executing program 4 (id=220): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) ioctl$EVIOCRMFF(r0, 0x41015500, &(0x7f0000000500)) 1m58.432588293s ago: executing program 33 (id=228): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) socket$inet_smc(0x2b, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1018000, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16, @ANYRES64, @ANYRES32, @ANYRESDEC], 0x1, 0x2f2, &(0x7f0000000b00)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) 1m58.044386909s ago: executing program 4 (id=235): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0xffffffffffffffff}, 0x13) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0xfffffffc, 0xa2e}}) brk(0x400000ffc000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r4}, 0x10) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m57.132528523s ago: executing program 34 (id=245): getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) vmsplice(r2, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r4}, 0x18) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) kexec_load(0x4, 0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="0400000004000000040000000500010000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB='\x00'/24], 0x48) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x3000002, 0x6031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x60, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x2000000000000088}}, 0x40) 1m57.005168065s ago: executing program 4 (id=247): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x128000, 0x800}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, 0x0, 0x200000, 0x125) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x4) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$ENABLE_STATS(0x20, &(0x7f0000000180), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1f, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r7}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m56.614736121s ago: executing program 4 (id=252): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x13, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000200)=ANY=[@ANYBLOB="2b1174cd80c2d3ec81b43a779cea8e92ef757761582c00"]) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x59}, {0x0, 0x900}], 0x2) clock_gettime(0x5, &(0x7f0000000140)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) epoll_pwait2(r2, &(0x7f0000000340)=[{}, {}], 0x2, &(0x7f0000000380)={0x0, 0x3938700}, &(0x7f00000003c0)={[0xfd0]}, 0x8) write$evdev(r2, &(0x7f0000000280)=[{{0x0, 0xea60}, 0x15, 0x7, 0x4}, {{0x0, 0x2710}, 0x3, 0xfff3, 0x5}, {{}, 0x1, 0x700, 0x2}, {{r3, r4/1000+60000}, 0x1, 0x6, 0x3}, {{r5, r6/1000+10000}, 0x15, 0x7fff, 0x8}, {{r7, r8/1000+60000}, 0x15, 0x3, 0x6}, {{0x0, 0xea60}, 0x16, 0x0, 0xffff9509}], 0xa8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) r9 = open(&(0x7f0000000080)='./file0\x00', 0x20000, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[@ANYBLOB="0384c2000000bbbbbbbbbbbb0a001ddb2c3224b0340000019078ac1e0001ac1414aa030490781206183f0000000200186371ae9b1c0300"/70], 0x0) mount_setattr(r2, &(0x7f0000000000)='./file0\x00', 0x500, &(0x7f0000000100)={0x9, 0x6, 0x80000, {r9}}, 0x20) 1m56.295381076s ago: executing program 4 (id=259): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b705000008000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x36) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000700)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20000) 1m56.245313037s ago: executing program 35 (id=259): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b705000008000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x36) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000700)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20000) 1m56.237311787s ago: executing program 5 (id=261): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) 1m56.160758388s ago: executing program 5 (id=262): syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x1) r0 = creat(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e23, 0x0, @local, 0xe}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = syz_io_uring_setup(0x3e, 0x0, 0x0, &(0x7f00000003c0)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r5, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0, 0x80002101}) io_uring_enter(r4, 0xd81, 0x0, 0x0, 0x0, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(r8, 0x545c, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r7) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x187842, 0x0) r11 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r11, 0x0, 0x0, 0x1001f0) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000000240)={0x3920e, r9, 0x3, 0x1, 0x5}) 1m55.325483751s ago: executing program 5 (id=265): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) socket$inet(0x2, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r5, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) r6 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r10 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r10, &(0x7f00000004c0)="0600", 0x2) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r12}, 0x10) sendfile(r10, r10, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)) 1m54.411615275s ago: executing program 5 (id=269): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x128000, 0x800}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, 0x0, 0x200000, 0x125) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x4) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$ENABLE_STATS(0x20, &(0x7f0000000180), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1f, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r7}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m54.256088847s ago: executing program 5 (id=271): perf_event_open(&(0x7f0000000e00)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8a5d0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0x5, 0x0, 0x1, 0x6, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x4, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f00000000c0)={0x5}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x5c}}, 0x0) 1m53.886379013s ago: executing program 7 (id=272): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70200000000000085000000510000"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000040), 0xe09) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x9, 0x40000) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000080190000000000000800", [0x0, 0x2000000000001]}}) 1m53.859654154s ago: executing program 7 (id=273): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x101, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x62, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xa}, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xca02}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x6, &(0x7f0000000100), 0x4) close(r5) socket$netlink(0x10, 0x3, 0x0) preadv(r6, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x3}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000380), 0xfe, 0x571, &(0x7f0000001180)="$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") rmdir(0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='mm_page_free\x00', r8}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x2200054, &(0x7f00000015c0)={[], [{@appraise}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fowner_lt}, {@hash}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, '\\&:#}#\'-\\]-\\/'}}, {@hash}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}, 0x3, 0x246, &(0x7f0000001640)="$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") mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 1m53.702288946s ago: executing program 5 (id=276): openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x30}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) unlink(0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r4}, 0x10) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) sendmsg$inet(r7, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x38}, 0x10) 1m53.701907606s ago: executing program 36 (id=276): openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x30}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) unlink(0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r4}, 0x10) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) sendmsg$inet(r7, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x38}, 0x10) 1m53.319270762s ago: executing program 7 (id=283): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=0x0, @ANYRES8=r1, @ANYRESDEC=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x6}, 0x18) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cgroup.freeze\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000240), &(0x7f00000003c0)=r8}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r4, 0x25, 0x2, @void}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) r10 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r10) ioctl$EVIOCRMFF(r10, 0x41015500, &(0x7f0000000500)) 1m52.252056929s ago: executing program 7 (id=290): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x128000, 0x800}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, 0x0, 0x200000, 0x125) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x4) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$ENABLE_STATS(0x20, &(0x7f0000000180), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1f, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r8}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m52.096477141s ago: executing program 7 (id=292): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000181100000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000001d80)=[{{&(0x7f0000000000)={0xa, 0x0, 0x7fff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000240)='\f', 0x1}], 0x1}}], 0x1, 0x4008055) 1m51.864861505s ago: executing program 6 (id=294): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r1, 0x0, 0x415}, 0x18) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900"], 0xfc}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 1m51.746670876s ago: executing program 7 (id=295): socket(0x15, 0x5, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = mq_open(0x0, 0x40, 0x110, 0x0) mq_timedreceive(r0, 0x0, 0xfffffffffffffee3, 0x2000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x68040200) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) 1m51.689124387s ago: executing program 37 (id=295): socket(0x15, 0x5, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = mq_open(0x0, 0x40, 0x110, 0x0) mq_timedreceive(r0, 0x0, 0xfffffffffffffee3, 0x2000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x68040200) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) 1m50.924897499s ago: executing program 6 (id=300): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) rmdir(0x0) (fail_nth: 5) 1m50.89260897s ago: executing program 6 (id=301): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x1, 0x203}, &(0x7f0000000380), &(0x7f00000003c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)) io_uring_enter(r2, 0xd81, 0x0, 0x0, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMIWAIT(r3, 0x545c, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x187842, 0x0) r6 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r6, 0x0, 0x0, 0x1001f0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000240)={0x3920e, r4, 0x3, 0x1, 0x5}) 1m49.884973145s ago: executing program 6 (id=308): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x128000, 0x800}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, 0x0, 0x200000, 0x125) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x4) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$ENABLE_STATS(0x20, &(0x7f0000000180), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r8}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m49.6047808s ago: executing program 6 (id=312): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x8, &(0x7f0000000000), 0x1, 0x51a, &(0x7f0000000a40)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c000000"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r4 = inotify_init1(0x0) r5 = inotify_add_watch(r4, &(0x7f0000000080)='./file0\x00', 0x40000022) write$binfmt_elf32(r3, &(0x7f0000000000)=ANY=[@ANYRES64=r5], 0x69) close(r3) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000400"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000380)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@i_version}]}, 0x6, 0x5fc, &(0x7f0000000600)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000e8001100ac14140c000000000000000000000000fc00000000000001fc020000000000000000000000000004fe8000000000000000000000000000aaff0000000e00000002000a00ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000ac1e0001000000000000000000000000ff040000003500000a00080000000000000000000000ffff7f000001fc020000000000000000000000060000a6fc0200000000000000000000000000003c0000000000000008000200"], 0x138}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@barrier}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50e, &(0x7f0000000940)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1m49.328772324s ago: executing program 6 (id=318): bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, 0x0, 0x48) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x15) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x80, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r1, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r1, 0x0, 0x0, 0x0, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x29}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x8000, 0xfffffffc}}) 1m49.270135095s ago: executing program 38 (id=318): bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, 0x0, 0x48) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x15) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x80, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r1, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r1, 0x0, 0x0, 0x0, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x29}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x8000, 0xfffffffc}}) 1m49.256820805s ago: executing program 8 (id=323): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) 1m48.157654092s ago: executing program 8 (id=340): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000080000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000d40)={0x0, 0x7000003, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r6, 0x400, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='leases_conflict\x00', r7}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00'}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r8}, 0x10) syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x6ef2, 0x400, 0xa, 0xffffff}, &(0x7f0000000380), &(0x7f0000000b00)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getpgid(0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) socket(0x8, 0x803, 0x4000003) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00\x00\x00\x00\x00\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) 1m47.914031976s ago: executing program 8 (id=341): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r2, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x7, 0x2, 0x3, 0x3, 0x309, 0x38, 0xfffffffc, 0xe, 0x0, 0x20, 0x1, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x4, 0x200004, 0xc, 0x400}]}, 0x58) close(r2) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 1m47.912866536s ago: executing program 8 (id=342): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x128000, 0x800}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, 0x0, 0x200000, 0x125) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x4) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r7}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m47.835853537s ago: executing program 8 (id=343): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27, 0x2, 0x4}, 0x6) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r1, 0x3) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) 1m47.448784933s ago: executing program 8 (id=348): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) 1m47.448404583s ago: executing program 39 (id=348): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) 2.833677596s ago: executing program 3 (id=2164): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r3}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 2.787343337s ago: executing program 3 (id=2165): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1, 0x0, 0x385}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f0000004000), 0x0}, 0x20) rt_sigpending(&(0x7f0000000400), 0xffffffffffffff2b) 2.732495027s ago: executing program 3 (id=2167): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000005b80)={@loopback, 0x33, r3}) perf_event_open(&(0x7f0000000f40)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0xd}, 0x4c58, 0xfffc, 0x8, 0x1, 0x8, 0x100, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) 2.666123868s ago: executing program 3 (id=2170): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'macsec0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x3, 0x6, @remote}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @remote}, 0x10) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000000640)={@private1, @mcast1, @mcast2, 0x9, 0x2, 0x1, 0x480, 0x248e, 0x200004, r3}) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r7, &(0x7f0000000000)={0x10, @short}, 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r3, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000003c0)={0x4, r1, 'id1\x00'}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r10}, 0x10) r11 = syz_io_uring_setup(0x5ff3, &(0x7f0000000040)={0x0, 0xc731, 0x40, 0x0, 0x263}, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r11, 0xb, &(0x7f00000002c0), 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0xfffffff8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x19, 0x12, &(0x7f0000000780)=ANY=[@ANYBLOB="185700000d0000000000000000000000003d0900ffffffff180000000333000000000000060000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f80500000002000008000000b703000005000000850000000600000018460000faffffff00000000000000003445feff0000000018550000060000000000000000000000c4be3b68abc86455f507c8b760b8474e04afc508811daca1f0dbb496f99171d3fee0c42dc0cca88956903b56544aa3896f90de04fe0ce333f5b3b554266257361fb3c20134156b8bd3d401f6dcfffc0f918847b7a9d07d427b24007c16aeb1cd33ed0bac68b8d5bcf4992d5ffa4cf0a713ba8dff6ab738967f7dc0"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x3c, &(0x7f0000000180)=""/60, 0x41100, 0x2, '\x00', r3, @cgroup_sockopt=0x16, r8, 0x8, &(0x7f00000001c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0x8, 0x6, 0x80000001}, 0x10, 0x0, r1, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r12], &(0x7f0000000540)=[{0x3, 0x4, 0x7, 0x1}, {0x4, 0x3, 0x0, 0x4}], 0x10, 0xfffffff0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYRESOCT=0x0, @ANYRESDEC=r11, @ANYRESOCT=r13, @ANYRES16=r0], &(0x7f0000000700)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x922ecd2af26a348e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), r8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000008c0)='kfree\x00', r10, 0x0, 0x185fffffffffd}, 0x18) r14 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r14, 0x89ef, &(0x7f0000000000)=0x800) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) 1.580711275s ago: executing program 0 (id=2189): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200454, &(0x7f0000000000), 0x1, 0x236, &(0x7f0000000300)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) write$UHID_INPUT(r1, &(0x7f0000000280)={0x8, {"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", 0x1000}}, 0x1006) fallocate(r0, 0x0, 0x803, 0x2000404) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000140)={0xc, r1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000080)=0x14) 1.545719406s ago: executing program 3 (id=2191): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 1.540522546s ago: executing program 0 (id=2192): socket(0x10, 0x2, 0x0) r0 = fsopen(&(0x7f0000000180)='ext4\x00', 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0xd}, 0xdbb, 0xc0, &(0x7f0000000040)="102434ae5518dd83fb8bf83fc1e8d1e25f84fdc500bc9c7dcea9a9", 0x1b, 0xa2fe, 0x9, 0x0, 0x8, 0x8, &(0x7f0000000140)="588fe6c7ff9ce91008d5dc0e3b04994f37414f2069832e541a1ea7b8b1fbe5c9b27172472c4a1af2c1412f13eccceb9bdd37d65535135dd556c55282b1b21b095fc85499ca0f8ae5b4c04681ae78366efc74d5aa20c1cd51064c0783dbd761bf18770c916709bb6523c21027f6c3860f4aed04253a82517975d534e96d86233fd63b5152eedfc85b295197bd614bf110cb0de96cdebba15bb06a5626563633fafeca809875"}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) utime(0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x8, 0x3, 0x7ffffdbd}]}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000009e40)=ANY=[@ANYBLOB="380000001a000100000000000000000081808000000000000000000014000100fc00000000000000000000000000000008000f"], 0x38}}, 0x0) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000080)=0x6) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(r6, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x4, 0xbc, 0x2, 0x4, 0x1d, @mcast1, @local, 0x8000, 0x8000, 0x4, 0xe}}) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r9, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0x6}, {0xffffffffffffff7f, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x1}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xf384}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffffffff}, @TCA_FQ_CODEL_FLOWS={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_ECN={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x4}}]}, 0x78}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r2, 0x0, &(0x7f00000008c0)=""/148, 0x4}, 0x20) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1.392008498s ago: executing program 0 (id=2196): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r1}, 0x18) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r4, 0x0, r4, &(0x7f0000000080)='./mnt\x00', 0x154) recvfrom$rxrpc(r4, &(0x7f00000001c0)=""/88, 0x58, 0x40010000, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) 875.487076ms ago: executing program 0 (id=2208): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a010102"], 0x40}, 0x20000000) 817.408367ms ago: executing program 0 (id=2209): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400000}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400000}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r1, 0x2285, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) r2 = gettid() clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) (async) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) rt_sigqueueinfo(r2, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) 766.535528ms ago: executing program 9 (id=2210): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x2}, 0x18) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 736.881118ms ago: executing program 2 (id=2211): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x2, 0x800, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r2, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 735.180168ms ago: executing program 9 (id=2212): creat(&(0x7f00000005c0)='./file2\x00', 0xf94854f365095a5b) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val={'init_itable', 0x3d, 0x8000}}, {@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {}, {@nobarrier}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") (fail_nth: 12) 694.729329ms ago: executing program 2 (id=2214): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x9}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x38}}, 0x0) 622.47068ms ago: executing program 3 (id=2215): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x3e, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)) io_uring_enter(r2, 0xd81, 0x0, 0x0, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMIWAIT(r3, 0x545c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x187842, 0x0) r5 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r5, 0x0, 0x0, 0x1001f0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, 0x0) 521.799322ms ago: executing program 2 (id=2216): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x40}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x3, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @remote, 0x9}}}, 0x108) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x4c2201, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) dup3(r1, r2, 0x0) read(r2, &(0x7f0000001a80)=""/4086, 0xff6) io_setup(0x4082, &(0x7f0000000380)) syz_io_uring_setup(0x1002940, &(0x7f0000001400)={0x0, 0x0, 0x10}, &(0x7f0000001480), &(0x7f00000014c0)) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x10000003, 0x0, 0x81, 0x1ff, 0x1}, 0x1c) recvmmsg(r3, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/82, 0x52}, {&(0x7f00000016c0)=""/4096}], 0x60}, 0x81}], 0x1, 0x2100, 0x0) recvmmsg$unix(r3, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x9200000000000000) 425.975883ms ago: executing program 9 (id=2217): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x2}, 0x18) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000300)='./file0\x00', 0x20) 425.628363ms ago: executing program 1 (id=2218): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) 412.139314ms ago: executing program 9 (id=2219): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r1}, 0x18) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r4, 0x0, r4, &(0x7f0000000080)='./mnt\x00', 0x154) recvfrom$rxrpc(r4, &(0x7f00000001c0)=""/88, 0x58, 0x40010000, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) 386.898944ms ago: executing program 1 (id=2220): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x340, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2a0, 0x2e8, 0x0, {0x200003ae, 0x7f00}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4d8) 386.668004ms ago: executing program 1 (id=2221): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = epoll_create1(0x80000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) epoll_pwait2(r2, &(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 383.539454ms ago: executing program 2 (id=2222): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00'}, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) r4 = dup2(r3, r3) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r4, 0x1276, 0x0) 221.513726ms ago: executing program 2 (id=2223): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x2}, 0x18) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 207.398246ms ago: executing program 1 (id=2224): syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@newtfilter={0xa54, 0x2c, 0xd27, 0xffefffff, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xa28, 0x2, [@TCA_U32_SEL={0x2b4, 0x5, {0x9, 0x6, 0x7f, 0x5, 0x1, 0x6, 0x4, 0x0, [{0x8, 0x0, 0x7, 0x4}, {0x800, 0x9, 0x1, 0x4}, {0x7, 0x66c3, 0x100, 0x1}, {0x80000001, 0x6, 0x6, 0x1}, {0x4, 0x1f9be952, 0x6}, {0xc, 0x3, 0x6, 0xb83c}, {0x2, 0x3, 0xfffffffb, 0x5}, {0x8, 0x3, 0x5, 0x10001}, {0xde, 0x80000000, 0x1, 0x5}, {0x0, 0x0, 0x1, 0xffffffff}, {0x1, 0x9, 0x2, 0x3}, {0x6, 0x1, 0xfffffffc, 0x7ff}, {0x80, 0x14cb3f5e, 0x4, 0x3}, {0x8, 0x6, 0x200, 0x2}, {0x3, 0x3, 0x4558, 0x80000001}, {0x1, 0x6, 0x1, 0xe}, {0x0, 0x5e641fb2, 0x2, 0x3f0fab6e}, {0x3ff, 0x4, 0x6464, 0x5}, {0x5, 0x1, 0x7, 0x42fa}, {0x4, 0x8000, 0x4, 0x3}, {0x0, 0x6, 0x6, 0x8000}, {0x4, 0x6, 0x2, 0x5}, {0xd160, 0xf, 0x8001, 0x7}, {0x200, 0x5, 0x9, 0x101}, {0x6, 0x200, 0x80, 0x5}, {0x93, 0xe, 0xffffffff, 0x9}, {0x8, 0x6, 0x4e3, 0x4}, {0x7, 0x4, 0x5, 0xfffffffc}, {0x4, 0xfa8, 0x2, 0x6}, {0x6, 0x2, 0x7, 0x1}, {0x5, 0x0, 0x2, 0x8}, {0xffff, 0xffffff98, 0xf}, {0xb08c, 0x7, 0xffff, 0x1f5d4bc3}, {0xfffffffa, 0x3f1, 0x10000, 0x5}, {0x8, 0x7, 0x8, 0x1}, {0x2, 0x0, 0x9ae, 0x80000000}, {0x9, 0x9, 0x8, 0xe}, {0x81, 0x7, 0x0, 0x2}, {0x9, 0x5, 0x4, 0x91c}, {0x101, 0x7f, 0x4, 0x3}, {0x4, 0xbc, 0xf, 0x1}, {0xd, 0x7fffffff, 0x80000000, 0x5}]}}, @TCA_U32_POLICE={0x408, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x8eed, 0x0, 0xe, 0x8, 0xfffffffd, 0x81, 0x40, 0x4, 0x8001, 0x3, 0x3, 0x1, 0x6, 0x0, 0x8, 0x4, 0x6, 0xfffffffc, 0x54, 0x5, 0x8000, 0x7baf, 0x401, 0xffffff81, 0x10000, 0x401, 0x5, 0x4, 0xa, 0xffffffff, 0x7, 0x4, 0x401, 0x2, 0x8, 0x7, 0x5, 0x800, 0x3, 0x7ff, 0x473208b2, 0x6, 0x1e56cb06, 0x65, 0x4, 0x7fffffff, 0x2, 0x5, 0x7fffffff, 0x7, 0xffff, 0x1, 0x7, 0x4, 0x6, 0x6, 0x3, 0x80, 0x1, 0x3, 0xa50, 0xa961, 0x4, 0x7a, 0x0, 0x9, 0x200, 0x100, 0x3, 0x5, 0x200, 0x5, 0x4, 0x7, 0x63b, 0xfff, 0x1, 0x4, 0xfe7d, 0x6f8, 0x0, 0x5, 0x60, 0x9, 0xf14, 0x80, 0x2, 0x7, 0x5, 0xfffffff9, 0x7, 0x3, 0x7, 0xf6, 0x7, 0x6257, 0x5, 0x7, 0xc, 0x5, 0xfffffffb, 0x42, 0x8000, 0x0, 0x10, 0x5, 0x3, 0x6, 0x9, 0x3e, 0x1, 0x46, 0x7, 0x80, 0x9, 0x6, 0xe, 0x0, 0x8, 0x101, 0x3, 0xfffffffe, 0x5, 0x6, 0x7, 0x6, 0x9e, 0x703, 0x8000, 0xd, 0x0, 0x4, 0x0, 0x6, 0x400, 0x1, 0x1, 0xb9, 0x1, 0x5, 0x9aec, 0xeb9, 0x1, 0x2, 0x3, 0x2e46, 0x8000, 0x3, 0x7fffffff, 0x0, 0x7, 0x6, 0x6, 0x10001, 0xf, 0x8, 0x6, 0xfffffffa, 0x7, 0x4, 0x5, 0x1c9, 0x8, 0x3ff, 0x70, 0x7ff, 0x5b89, 0x80000001, 0x199, 0x800, 0x1f, 0xd86c, 0x7, 0xa4c, 0x4, 0x6, 0xffffff01, 0xffffffff, 0x598, 0x1d89c5e2, 0x1, 0x40, 0x499b, 0x3, 0x3a7, 0x8, 0x8, 0x1ff, 0x0, 0x3, 0x7, 0x101, 0x100, 0x993, 0x1, 0xc, 0x1000000, 0x2, 0x3, 0x8, 0x3, 0x8, 0x80000000, 0xf, 0x5, 0x4, 0x1cc, 0xfffffff8, 0xb8, 0x9, 0xa, 0x45c2, 0x289, 0xfffffffa, 0x2, 0x1, 0x4, 0x800, 0xfffffffb, 0xfffffffe, 0x0, 0x9, 0x1, 0x34e, 0x9, 0x10000000, 0x80000001, 0x1, 0x5, 0x7, 0xffffff40, 0x0, 0x7ff, 0x5, 0x0, 0xfffffff6, 0x81, 0x7, 0x6, 0x8, 0x4, 0x800000, 0x80, 0x1, 0x8, 0x3, 0x8, 0x0, 0xf, 0x4, 0x81, 0x6, 0x2, 0xffff, 0x5, 0x9]}]}, @TCA_U32_POLICE={0x60, 0x6, [@TCA_POLICE_RATE64={0xc, 0x8, 0x56}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10001}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffff6, 0x7, 0x0, 0x4, 0x7ff, {0x5, 0x2, 0xfc6e, 0x6b87, 0x4, 0x1}, {0x1, 0x0, 0x2, 0x7, 0xb, 0xac0d}, 0x400, 0x7, 0x1ff}}, @TCA_POLICE_AVRATE={0x8}]}, @TCA_U32_SEL={0x2f4, 0x5, {0xe, 0x81, 0x2, 0x3, 0xff, 0x101, 0x5, 0x6, [{0x3, 0x8ce0, 0x10, 0x4}, {0x6, 0x8, 0xa52}, {0x9, 0x7, 0x7ff, 0x4}, {0x10001, 0x0, 0x7, 0x4040}, {0x1, 0x6, 0xffff}, {0x8, 0xbc0, 0x6, 0x7}, {0x7ff, 0x3, 0x1, 0x9}, {0x101, 0x9, 0x3, 0x8001}, {0x9, 0x100}, {0x6, 0xc, 0x9, 0xe76}, {0x3, 0x3}, {0x0, 0xffffffff, 0x40, 0x2}, {0x1, 0x9, 0x5, 0x9}, {0xfe000000, 0x5af, 0x0, 0xb40}, {0x3, 0x1342, 0x800000, 0xca1}, {0x4, 0x3, 0x6, 0x1}, {0x3, 0xfffffffd, 0x6, 0xfffff800}, {0x85, 0x3, 0xab2, 0x3}, {0x5, 0xfffffc4e, 0x1, 0xfffffffc}, {0x7fff, 0x2, 0x8, 0xfffffffc}, {0x5, 0x3, 0x8, 0x4}, {0x4, 0x80000000, 0xf8, 0x8}, {0x81, 0x6, 0x3, 0x8}, {0x0, 0x80000001, 0x8000, 0x2}, {0x3, 0x83, 0x9, 0xc5}, {0xd, 0x1, 0x4, 0x8}, {0x9, 0x7, 0x7, 0x1d1}, {0x6, 0x0, 0x1, 0x7}, {0x4, 0xb, 0xf31, 0xffff}, {0x1, 0x2, 0xffffff01, 0xe597}, {0x0, 0xb, 0xfffffff7, 0xe5}, {0x2b, 0x81, 0x101, 0x40}, {0x1, 0x2000, 0x8, 0x80000000}, {0x7, 0x4, 0x4af1, 0x4}, {0x7, 0x5ea, 0x1, 0x4000}, {0xfffffffc, 0x1, 0xfd, 0x6}, {0x800, 0x0, 0x7}, {0xfff, 0x8, 0x0, 0x7ff}, {0x1ff, 0x4, 0xe2, 0xfffffffc}, {0x20, 0x1, 0x8001, 0x5}, {0x2, 0x800, 0x800, 0x7ad}, {0x8, 0xe, 0x2, 0x3}, {0x8000, 0x10, 0x0, 0x6}, {0x87b, 0x9, 0xb, 0x7}, {0x0, 0x0, 0xc0f2, 0x8}, {0x71f, 0xb07, 0x2, 0x3}]}}, @TCA_U32_INDEV={0x14, 0x8, 'ip_vti0\x00'}]}}]}, 0xa54}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r6, &(0x7f0000000000)={0x23, 0x16, 0x4, 0x3}, 0x10) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) epoll_create(0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={r8, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa, &(0x7f0000001500)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x56, &(0x7f0000001540), 0x0, 0x10, &(0x7f0000000380), &(0x7f0000000a80), 0x8, 0xc5, 0x8, 0x8, &(0x7f00000014c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 207.056796ms ago: executing program 9 (id=2225): bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0x78) sendfile(r0, r1, &(0x7f00000001c0), 0x8) fcntl$addseals(r1, 0x409, 0x8) fallocate(r1, 0x3, 0x9100, 0x3) 196.136207ms ago: executing program 2 (id=2226): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) ftruncate(0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x34, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xffe0}, {}, {0xc, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48080}, 0x24000840) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, [@map_fd={0x18, 0x2}, @generic={0x8, 0x0, 0x6, 0x200}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffff2c8}, @jmp={0x5, 0x0, 0xb, 0xa, 0x8, 0x10, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x4, 0x1, 0x1, 0x0, 0x4}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @ldst={0x1, 0x3, 0x2, 0x7, 0xb, 0xfffffffffffffff8, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x1, 0x3, 0x9, 0x80, 0xfffffffffffffffc}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0xa0, &(0x7f0000000500)=""/160, 0x41000, 0x53, '\x00', r5, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0xe, 0x7, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000680)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000700)=[{0x1, 0x2, 0xb}, {0x0, 0x2, 0x8, 0x5}, {0x3, 0x5, 0x5, 0x4}]}, 0x94) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c1rXFUbAPDnTpKmTfu+yQsv+LEKCBoonZgaWwUXFRciWCjo2naYTEPNJFMyk9KEgBYR3AgqLgTddO1H3bn1Y6v/hQuxVE2LFRcSuZN722kzkyZpkqnO7wcnc869d3LOM/fOPWfmHu4E0LNG0z+FiEci4r0kYjhbnkTEQDPXH3FibbubK8vlNCWxuvrKr0lzmxsry+VoeU7qYFZ4OCK+fTvicGF9vfXFpZlStVqZz8rjjdnz4/XFpSPnZkvTlenK3LGJycmjx58+fmznYv39h6VDV99/8YkvTvz51kNX3v0uiRNxKFvXGsdOGY3R7DUZSF/CO7yw05V1WdLtBrAthSz1R3oOGI6+Zg4A+Dd7IyJWAYAek+j/AaDH5N8D3FhZLuepu99I7K1rz0fE/rX48+uba2v6s2t2+5vXQYduJHdcGUkiYmQH6h+NiE++eu2zNMUuXYcEaOfNSxFxZmR0/fk/WTdnYaue3GDdvuxx9K7lzn+wd75Oxz/PtBv/FW6Nf6LN+GewzXt3O+75/j+wA5VsIB3/Pdcyt+1mS/yZkb6s9J/mmG8gOXuuWknPbf+NiLEYGEzLExvUMXb9r+ud1rWO/3774PVP0/rTx9tbFH7uH7zzOVOlRul+Ym517VLEo/3t4k9u7f+kw/j31CbreOnZdz7utC6NP403T+vjj2x20u5YvRzxeNv9f3tGW7Lh/MTx5uEwnh8UbXz540dDnepv3f9pSuvPPwvshXT/D20c/0jSOl+zvvU6vr88/E2ndfeOv/3xvy95tZnPxxEXS43G/ETEvuTl9cuP3n5uXs63T+Mfe6z9+3+j4z/9THhmk/H3X/3l8+3Hv7vS+Ke2tP+3nrlyc6avU/2b2/+TzdxYtmQz57/NNvB+XjsAAAAAAAAAAAAAAAAAAAAAAAAA2KxCRByKpFC8lS8UisW13/D+fwwVqrV64/DZ2sLcVDR/K3skBgr5rS6HW+6HOpHdDz8vH72r/FRE/C8iPhw8kOT3UZzqcuwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkDvY4ff/Uz8Ndrt1AMCu2d/tBgAAe07/DwC9R/8PAL1H/w8AvUf/DwC9R/8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADALjt18mSaVv9YWS6n5akLiwsztQtHpir1meLsQrlYrs2fL07XatPVSrFcm73X/6vWaucnY27h4nijUm+M1xeXTs/WFuYap8/NlqYrpysDexIVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGxNfXFpplStVuZltpFZfTCa0f1MX3Y4PSjt2dNM8mA0Y4czXT4xAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPxD/B0AAP//2nYi/g==") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r6}, &(0x7f00000003c0), &(0x7f0000000800)=r7}, 0x20) signalfd4(r3, &(0x7f0000000140)={[0x4]}, 0x8, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) syz_clone3(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r8 = io_uring_setup(0x37ae, &(0x7f00000003c0)={0x0, 0x800000, 0x0, 0x2, 0x22a}) io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, &(0x7f0000000740)={&(0x7f0000002000)={[{0x0, 0x0, 0x3}, {0x0}, {0x0, 0x0, 0xfffe}, {0x0}]}, 0x4}, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r8, 0x17, &(0x7f0000000300)={0x0}, 0x1) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) 116.719218ms ago: executing program 1 (id=2227): socket$nl_audit(0x10, 0x3, 0x9) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000006c0)='cachefiles_coherency\x00', r0, 0x0, 0x7ff}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x40}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c000280050001"], 0x80}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x2e, 0x1, @thr={&(0x7f0000000380)="24779291ed5f95f2f34c174cb8255513ab575750e7b6eb0001d86e306b57ce5d655265d0c1398ab897cbc32220c4b72ed253dc79875ecbfc0e40b03e3427772b1178968860381dbecf2a1a013ed2289e383f957f688d58dcb7853120a414c375c05e73d5441debc6a3d67ef7c5bfad", &(0x7f0000000580)="04bc393ab4a82fd10d37f47b82f33edafbe6c897a094572c9f50d086ac275749bb056cfcb07910e647302601de52ae262277b010c485f9d58b19bf347d300e4c1ef192aedd39a67f820df02bf46bad57921dff288d838539729a7ee208840b28d24a74d5610aff06441b78fa6fbfff98cdffe206c83b18ab5fad5b0bdde7bf487956c368d7c1f832dd5af159284b7626bd1a0b25206e75f0ffd8413dc1ddf79b4e03c321dac9d8d73de74c38e875062eee57c5922123e666"}}, &(0x7f0000000680)) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010028bd7000fcdbdf25020000000800090002"], 0x1c}}, 0x20000050) 116.354538ms ago: executing program 1 (id=2228): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0xc1, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x2, 0xff}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x6, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc010) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) gettid() syz_usb_connect$uac1(0x2, 0x9c, 0x0, 0x0) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) statx(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x2000, 0x1, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x4, &(0x7f0000000800)=[r5, r5, r5, r6]) setregid(0x0, r5) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r7 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r8 = signalfd4(r2, &(0x7f00000001c0)={[0x7]}, 0x8, 0xc0000) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="b0000000090601080000000000000000010000040900020073797a31000000000900020073797a320000000014000880100007800a001100aaaaaaaaaa2a00004c0007801800148014000240fc0100000000000000000000000000000c001b4000000000000000050c00168008000140ac1e010108000840000000010500150001000000050003003b0000000c0007800500150003000000080009400000000605000100070000ea0e00000007000000"], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x9, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket(0x10, 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6b}]}, {0x4}, {0xc}, {0xc, 0x4, {0x2}}}}]}]}, 0x60}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r7, 0x40045402, &(0x7f0000000140)=0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 10.26342ms ago: executing program 0 (id=2229): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYRESHEX=r0, @ANYBLOB="199a4176ab45ee2cda38cc14b0574386b233f1b1467f9d54146fb66956f7249fe5d24d099664459fb8c96a78545b41ad87d2ed3902e974b96b5ac4f6eac1ac13095e5ba09f51df532e8faa71e2304c711d4b00f1e62c9a3ba13275e84bcbccb6bc9d023b5a367b33739907b13522d6270e60915edf2d036fae84ee74f765f80e48a398c266ed59fce71702ea7f5b21a7e50ef922d53759596d4059c2398826e62b46a0aa6bc19f7a7e17", @ANYBLOB="cfc8329b13c06d8e0d1014899ee054f71a4f3e748edb7e196cb1023aeecdd730d18ea99e4470f9e19d0e46cf95d5a375b469025d2f11989121dd2fa4bc92ffd6599b4f587da8174d4437abca81ae4603916ba55c5eb2714e571c2bbd5b33dd39", @ANYRESOCT=r0, @ANYRES64=0x0, @ANYRESDEC=r0, @ANYBLOB="02d39b0a465d0b84cee357f8568b82d594ffc04241a66193b999e4989301db81ca7e68b120850fbd3f8fc63cd838e800692f88be62b0e4ef59a341cc39efd40511b492a229b51b8e823d5b2525eb11ec06114b50b6ab339d5754315babfd56d7504e41dd4ec89e959ffeb90223efb345ba5666837e5a3586479db79e5fbf1ae58530a6e87e4acc9b211823745eac83f9c0d068c1bca21b428b04fd9ee81182dd7c", @ANYRESDEC=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='ext4_ext_show_extent\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0xfe, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x2, 0x1, 0x8, 0x1020009, 0x2b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) pipe(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x6}, 0x18) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x103a02, 0x0) ioctl$RTC_UIE_ON(r5, 0x7003) ioctl$RTC_SET_TIME(r5, 0x4024700a, 0x0) bind$inet(r3, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000640)={'bond_slave_1\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmmsg$inet(r6, &(0x7f0000000300)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @private=0xa010100}, 0x10, 0x0, 0xa}}], 0x1, 0x2000c044) getdents64(0xffffffffffffff9c, &(0x7f0000000040)=""/79, 0x4f) socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000e20000000061"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2}, 0x94) r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000005c0), 0x1a1c02, 0x0) pwrite64(r7, 0x0, 0x0, 0x200) 0s ago: executing program 9 (id=2230): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) 0s ago: executing program 9 (id=2231): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000600)={[{@jqfmt_vfsv1}, {@nomblk_io_submit}, {@abort}, {@norecovery}, {@bh}, {@resuid}, {@nodiscard}, {@acl}, {@nobh}], [{@smackfsroot={'smackfsroot', 0x3d, '--p'}}, {@subj_user={'subj_user', 0x3d, 'nomblk_io_submit'}}, {@uid_gt}, {@obj_role}]}, 0xfc, 0x572, &(0x7f0000000e40)="$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") (async) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000c00000001000000", @ANYRES32, @ANYBLOB="000068b524caecc9fe31587ffa935c0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xe, 0x3}, {}, {0x5, 0x2}}}, 0x24}}, 0x40004) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000480)=ANY=[@ANYBLOB="180000007ec047c200"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200000085000000060000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000180), &(0x7f0000000200)='%pS \x00'}, 0x20) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x37) (async) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15) r8 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=r0, @ANYRES16=r0], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2, r6}, 0x94) (async) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r11 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r10, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800080000000f0000000000000045"], 0xffbf) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109"], 0x0) r12 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33) (async) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r14}, 0x10) kernel console output (not intermixed with test programs): 5.503:4095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8322 comm="syz.2.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b1a50e929 code=0x7ffc0000 [ 130.682683][ T29] audit: type=1326 audit(1752081955.503:4096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8322 comm="syz.2.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1a50e929 code=0x7ffc0000 [ 130.706141][ T29] audit: type=1326 audit(1752081955.503:4097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8322 comm="syz.2.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1a50e929 code=0x7ffc0000 [ 130.729586][ T29] audit: type=1326 audit(1752081955.503:4098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8322 comm="syz.2.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b1a50e929 code=0x7ffc0000 [ 130.753021][ T29] audit: type=1326 audit(1752081955.503:4099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8322 comm="syz.2.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1a50e929 code=0x7ffc0000 [ 130.776481][ T29] audit: type=1326 audit(1752081955.503:4100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8322 comm="syz.2.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b1a50e929 code=0x7ffc0000 [ 130.809434][ T8339] loop0: detected capacity change from 0 to 1024 [ 130.852990][ T8306] uprobe: syz.1.1514:8306 failed to unregister, leaking uprobe [ 130.874891][ T8339] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 130.885259][ T8339] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 130.893732][ T8339] System zones: 0-1, 3-36 [ 130.899303][ T8339] EXT4-fs (loop0): orphan cleanup on readonly fs [ 130.906688][ T8339] EXT4-fs (loop0): 1 orphan inode deleted [ 130.913415][ T8339] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 130.942612][ T4722] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.123458][ T8352] loop1: detected capacity change from 0 to 1024 [ 131.130381][ T8352] EXT4-fs: Invalid want_extra_isize 1021 [ 131.229927][ T8365] loop9: detected capacity change from 0 to 2048 [ 131.237677][ T8367] loop1: detected capacity change from 0 to 512 [ 131.245848][ T8367] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.1538: casefold flag without casefold feature [ 131.259393][ T8367] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.1538: couldn't read orphan inode 15 (err -117) [ 131.274492][ T8365] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.290651][ T8367] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.312013][ T8365] EXT4-fs error (device loop9): ext4_ext_precache:649: inode #2: comm syz.9.1537: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 131.334197][ T8365] EXT4-fs (loop9): Remounting filesystem read-only [ 131.341758][ T8365] netlink: 100 bytes leftover after parsing attributes in process `syz.9.1537'. [ 131.619288][ T4820] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.678186][ T4633] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.714566][ T8387] loop9: detected capacity change from 0 to 1024 [ 131.727060][ T8391] loop3: detected capacity change from 0 to 1024 [ 131.734433][ T8387] EXT4-fs: Ignoring removed orlov option [ 131.738023][ T8391] EXT4-fs: Invalid want_extra_isize 1021 [ 131.778029][ T8387] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.852268][ T8407] FAULT_INJECTION: forcing a failure. [ 131.852268][ T8407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.865395][ T8407] CPU: 1 UID: 0 PID: 8407 Comm: syz.3.1553 Tainted: G W 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(voluntary) [ 131.865500][ T8407] Tainted: [W]=WARN [ 131.865506][ T8407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 131.865519][ T8407] Call Trace: [ 131.865525][ T8407] [ 131.865532][ T8407] __dump_stack+0x1d/0x30 [ 131.865549][ T8407] dump_stack_lvl+0xe8/0x140 [ 131.865655][ T8407] dump_stack+0x15/0x1b [ 131.865672][ T8407] should_fail_ex+0x265/0x280 [ 131.865703][ T8407] should_fail+0xb/0x20 [ 131.865726][ T8407] should_fail_usercopy+0x1a/0x20 [ 131.865832][ T8407] _copy_from_user+0x1c/0xb0 [ 131.865849][ T8407] sock_do_ioctl+0xe6/0x220 [ 131.865902][ T8407] sock_ioctl+0x41b/0x610 [ 131.865920][ T8407] ? __pfx_sock_ioctl+0x10/0x10 [ 131.865938][ T8407] __se_sys_ioctl+0xce/0x140 [ 131.865967][ T8407] __x64_sys_ioctl+0x43/0x50 [ 131.866063][ T8407] x64_sys_call+0x19a8/0x2fb0 [ 131.866085][ T8407] do_syscall_64+0xd2/0x200 [ 131.866118][ T8407] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 131.866140][ T8407] ? clear_bhb_loop+0x40/0x90 [ 131.866160][ T8407] ? clear_bhb_loop+0x40/0x90 [ 131.866239][ T8407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.866329][ T8407] RIP: 0033:0x7ff4ad3be929 [ 131.866342][ T8407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.866413][ T8407] RSP: 002b:00007ff4aba27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.866431][ T8407] RAX: ffffffffffffffda RBX: 00007ff4ad5e5fa0 RCX: 00007ff4ad3be929 [ 131.866443][ T8407] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000007 [ 131.866457][ T8407] RBP: 00007ff4aba27090 R08: 0000000000000000 R09: 0000000000000000 [ 131.866470][ T8407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.866483][ T8407] R13: 0000000000000000 R14: 00007ff4ad5e5fa0 R15: 00007fffc347fa48 [ 131.866550][ T8407] [ 132.068210][ T4633] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.182993][ T8425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.193730][ T8425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.211672][ T8429] loop0: detected capacity change from 0 to 1024 [ 132.220716][ T8429] EXT4-fs: Invalid want_extra_isize 1021 [ 132.226691][ T8431] loop9: detected capacity change from 0 to 1024 [ 132.233373][ T8431] EXT4-fs: Ignoring removed orlov option [ 132.244440][ T8433] loop1: detected capacity change from 0 to 512 [ 132.302943][ T8431] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.323677][ T8433] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.1565: casefold flag without casefold feature [ 132.336540][ T8433] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.1565: couldn't read orphan inode 15 (err -117) [ 132.349292][ T8433] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.364240][ T4633] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.471646][ T8447] FAULT_INJECTION: forcing a failure. [ 132.471646][ T8447] name failslab, interval 1, probability 0, space 0, times 0 [ 132.484302][ T8447] CPU: 1 UID: 0 PID: 8447 Comm: syz.2.1569 Tainted: G W 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(voluntary) [ 132.484364][ T8447] Tainted: [W]=WARN [ 132.484371][ T8447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 132.484385][ T8447] Call Trace: [ 132.484391][ T8447] [ 132.484398][ T8447] __dump_stack+0x1d/0x30 [ 132.484445][ T8447] dump_stack_lvl+0xe8/0x140 [ 132.484463][ T8447] dump_stack+0x15/0x1b [ 132.484477][ T8447] should_fail_ex+0x265/0x280 [ 132.484565][ T8447] ? llc_sap_open+0x99/0x230 [ 132.484626][ T8447] should_failslab+0x8c/0xb0 [ 132.484656][ T8447] __kmalloc_cache_noprof+0x4c/0x320 [ 132.484706][ T8447] llc_sap_open+0x99/0x230 [ 132.484728][ T8447] llc_ui_autobind+0x17a/0x380 [ 132.484794][ T8447] ? sysvec_reschedule_ipi+0x4f/0x70 [ 132.484821][ T8447] llc_ui_connect+0x103/0x6c0 [ 132.484899][ T8447] ? __pfx_llc_ui_connect+0x10/0x10 [ 132.484928][ T8447] ? __pfx_llc_ui_connect+0x10/0x10 [ 132.484954][ T8447] __sys_connect+0x1ef/0x2b0 [ 132.485047][ T8447] __x64_sys_connect+0x3f/0x50 [ 132.485147][ T8447] x64_sys_call+0x1daa/0x2fb0 [ 132.485165][ T8447] do_syscall_64+0xd2/0x200 [ 132.485194][ T8447] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 132.485228][ T8447] ? clear_bhb_loop+0x40/0x90 [ 132.485321][ T8447] ? clear_bhb_loop+0x40/0x90 [ 132.485339][ T8447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.485362][ T8447] RIP: 0033:0x7f3b1a50e929 [ 132.485431][ T8447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.485449][ T8447] RSP: 002b:00007f3b18b77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 132.485488][ T8447] RAX: ffffffffffffffda RBX: 00007f3b1a735fa0 RCX: 00007f3b1a50e929 [ 132.485499][ T8447] RDX: 0000000000000010 RSI: 0000200000000640 RDI: 0000000000000006 [ 132.485509][ T8447] RBP: 00007f3b18b77090 R08: 0000000000000000 R09: 0000000000000000 [ 132.485521][ T8447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.485531][ T8447] R13: 0000000000000000 R14: 00007f3b1a735fa0 R15: 00007ffca4b10bf8 [ 132.485546][ T8447] [ 132.910087][ T4820] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.992433][ T8473] loop2: detected capacity change from 0 to 1024 [ 132.999289][ T8473] EXT4-fs: Ignoring removed orlov option [ 133.007038][ T8473] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.013609][ T8475] loop9: detected capacity change from 0 to 1024 [ 133.027159][ T8475] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 133.100744][ T4918] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.221470][ T8504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1588'. [ 133.249289][ T8504] loop1: detected capacity change from 0 to 2048 [ 133.282034][ T8504] loop1: p2 p3 p7 [ 133.534993][ T8514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.545220][ T8514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.912106][ T8520] loop0: detected capacity change from 0 to 1024 [ 133.933746][ T8520] EXT4-fs: Ignoring removed orlov option [ 134.003022][ T8520] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.225530][ T8532] loop2: detected capacity change from 0 to 512 [ 134.257357][ T8532] /dev/loop2: Can't open blockdev [ 134.291245][ T4722] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.300373][ T8533] loop9: detected capacity change from 0 to 8192 [ 134.325933][ T8536] loop0: detected capacity change from 0 to 2048 [ 134.340200][ T8536] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.355701][ T8536] EXT4-fs error (device loop0): ext4_ext_precache:649: inode #2: comm syz.0.1598: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 134.372472][ T8536] EXT4-fs (loop0): Remounting filesystem read-only [ 134.381211][ T8536] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1598'. [ 134.491485][ T4722] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.532117][ T8544] loop0: detected capacity change from 0 to 128 [ 134.540509][ T8544] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 134.553432][ T8544] ext4 filesystem being mounted at /233/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 134.770592][ T8544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.779242][ T8544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.057791][ T8551] loop9: detected capacity change from 0 to 1024 [ 135.066617][ T8553] SELinux: syz.2.1604 (8553) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 135.081844][ T8551] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.182237][ T8566] loop2: detected capacity change from 0 to 512 [ 135.190194][ T8566] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.1608: casefold flag without casefold feature [ 135.204169][ T8566] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.1608: couldn't read orphan inode 15 (err -117) [ 135.216956][ T8566] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.245093][ T8569] loop3: detected capacity change from 0 to 1024 [ 135.252392][ T8569] EXT4-fs: Invalid want_extra_isize 1021 [ 135.314587][ T4722] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 135.379721][ T4918] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.385074][ T8579] loop0: detected capacity change from 0 to 2048 [ 135.403028][ T8579] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.417033][ T8579] EXT4-fs error (device loop0): ext4_ext_precache:649: inode #2: comm syz.0.1614: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 135.431579][ T8573] SELinux: syz.3.1611 (8573) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 135.460179][ T8579] EXT4-fs (loop0): Remounting filesystem read-only [ 135.471604][ T8579] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1614'. [ 135.531474][ T8590] loop2: detected capacity change from 0 to 1024 [ 135.538364][ T8590] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 135.590399][ T8597] loop3: detected capacity change from 0 to 1024 [ 135.597196][ T8597] EXT4-fs: Invalid want_extra_isize 1021 [ 135.633476][ T4722] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.674317][ T8608] loop0: detected capacity change from 0 to 512 [ 135.679998][ T8610] loop3: detected capacity change from 0 to 1024 [ 135.689407][ T8608] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.698814][ T8610] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.702671][ T8608] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.727708][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 135.727721][ T29] audit: type=1326 audit(1752081960.673:4195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8609 comm="syz.3.1627" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff4ad3be929 code=0x0 [ 135.822790][ T8620] loop2: detected capacity change from 0 to 512 [ 135.839634][ T8620] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.852230][ T8620] ext4 filesystem being mounted at /265/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.895417][ T4633] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.913743][ T29] audit: type=1326 audit(1752081960.853:4196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8623 comm="syz.9.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f361343e929 code=0x7ffc0000 [ 135.941276][ T29] audit: type=1326 audit(1752081960.853:4197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8623 comm="syz.9.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f361343e929 code=0x7ffc0000 [ 135.964898][ T29] audit: type=1326 audit(1752081960.853:4198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8623 comm="syz.9.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f361343e929 code=0x7ffc0000 [ 135.988268][ T29] audit: type=1326 audit(1752081960.853:4199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8623 comm="syz.9.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f361343e929 code=0x7ffc0000 [ 136.011758][ T29] audit: type=1326 audit(1752081960.853:4200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8623 comm="syz.9.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f361343e929 code=0x7ffc0000 [ 136.035208][ T29] audit: type=1326 audit(1752081960.853:4201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8623 comm="syz.9.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f361343e929 code=0x7ffc0000 [ 136.058641][ T29] audit: type=1326 audit(1752081960.853:4202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8623 comm="syz.9.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f361343e929 code=0x7ffc0000 [ 136.082227][ T29] audit: type=1326 audit(1752081960.853:4203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8623 comm="syz.9.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f361343e929 code=0x7ffc0000 [ 136.105698][ T29] audit: type=1326 audit(1752081960.853:4204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8623 comm="syz.9.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f361343e929 code=0x7ffc0000 [ 136.284655][ T8631] loop9: detected capacity change from 0 to 1024 [ 136.291559][ T8631] EXT4-fs: Invalid want_extra_isize 1021 [ 136.327229][ T8633] loop9: detected capacity change from 0 to 2048 [ 136.338923][ T8633] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.351968][ T8633] EXT4-fs error (device loop9): ext4_ext_precache:649: inode #2: comm syz.9.1634: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 136.368667][ T8633] EXT4-fs (loop9): Remounting filesystem read-only [ 136.375661][ T8633] netlink: 100 bytes leftover after parsing attributes in process `syz.9.1634'. [ 136.491995][ T8639] SELinux: syz.9.1636 (8639) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 136.557771][ T8645] loop9: detected capacity change from 0 to 1024 [ 136.564441][ T8645] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 136.697307][ T8667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.707712][ T8666] lo speed is unknown, defaulting to 1000 [ 136.713465][ T8666] lo speed is unknown, defaulting to 1000 [ 136.714126][ T8667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.731951][ T8666] lo speed is unknown, defaulting to 1000 [ 136.775384][ T8670] SELinux: syz.3.1646 (8670) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 136.797658][ T8666] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 136.805271][ T8666] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 136.813979][ T8669] loop0: detected capacity change from 0 to 2048 [ 136.828469][ T8672] loop1: detected capacity change from 0 to 512 [ 136.835201][ T8672] EXT4-fs: Ignoring removed orlov option [ 136.858687][ T8672] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 136.869955][ T8666] lo speed is unknown, defaulting to 1000 [ 136.870993][ T8674] SELinux: syz.9.1651 (8674) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 136.876012][ T8666] lo speed is unknown, defaulting to 1000 [ 136.895521][ T8666] lo speed is unknown, defaulting to 1000 [ 136.901531][ T8672] EXT4-fs (loop1): orphan cleanup on readonly fs [ 136.901801][ T8666] lo speed is unknown, defaulting to 1000 [ 136.909198][ T8672] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1649: bg 0: block 248: padding at end of block bitmap is not set [ 136.914317][ T8666] lo speed is unknown, defaulting to 1000 [ 136.930928][ T8669] EXT4-fs error (device loop0): ext4_ext_precache:649: inode #2: comm syz.0.1650: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 136.974983][ T8672] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1649: Failed to acquire dquot type 1 [ 136.994190][ T8672] EXT4-fs (loop1): 1 truncate cleaned up [ 137.000753][ T8669] EXT4-fs (loop0): Remounting filesystem read-only [ 137.012690][ T8669] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1650'. [ 137.358959][ T8680] SELinux: syz.9.1652 (8680) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 137.482030][ T8698] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1659'. [ 137.503577][ T8698] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1659'. [ 137.512741][ T8701] loop3: detected capacity change from 0 to 1024 [ 137.512919][ T8703] loop0: detected capacity change from 0 to 1024 [ 137.538445][ T8698] loop9: detected capacity change from 0 to 2048 [ 137.581994][ T8698] loop9: p2 p3 p7 [ 137.730925][ T8717] loop9: detected capacity change from 0 to 2048 [ 137.759705][ T8715] EXT4-fs error (device loop9): ext4_ext_precache:649: inode #2: comm syz.9.1664: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 137.776338][ T8715] EXT4-fs (loop9): Remounting filesystem read-only [ 137.783373][ T8715] netlink: 100 bytes leftover after parsing attributes in process `syz.9.1664'. [ 137.907322][ T8721] loop9: detected capacity change from 0 to 512 [ 137.915273][ T8721] EXT4-fs error (device loop9): ext4_orphan_get:1393: inode #15: comm syz.9.1665: casefold flag without casefold feature [ 137.929000][ T8721] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.1665: couldn't read orphan inode 15 (err -117) [ 137.999088][ T8731] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1669'. [ 138.089872][ T8733] SELinux: syz.9.1670 (8733) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 138.216002][ T8742] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1674'. [ 138.231884][ T8742] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1674'. [ 138.253258][ T8742] loop9: detected capacity change from 0 to 2048 [ 138.274783][ T8748] loop1: detected capacity change from 0 to 2048 [ 138.281261][ T8742] loop9: p2 p3 p7 [ 138.302974][ T8748] EXT4-fs error (device loop1): ext4_ext_precache:649: inode #2: comm syz.1.1676: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 138.319944][ T8748] EXT4-fs (loop1): Remounting filesystem read-only [ 138.326949][ T8748] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1676'. [ 138.364627][ T8754] loop0: detected capacity change from 0 to 1024 [ 138.371733][ T8754] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 138.417943][ T8759] loop3: detected capacity change from 0 to 1024 [ 138.424794][ T8759] EXT4-fs: Invalid want_extra_isize 1021 [ 138.468746][ T8764] tipc: Enabled bearer , priority 0 [ 138.493460][ T8768] SELinux: syz.1.1684 (8768) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 138.665188][ T8787] loop0: detected capacity change from 0 to 1024 [ 138.672924][ T8787] EXT4-fs: Ignoring removed orlov option [ 138.834529][ T8792] loop0: detected capacity change from 0 to 2048 [ 138.859634][ T8792] EXT4-fs error (device loop0): ext4_ext_precache:649: inode #2: comm syz.0.1692: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 138.879727][ T8792] EXT4-fs (loop0): Remounting filesystem read-only [ 139.003373][ T8803] SELinux: syz.1.1696 (8803) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 139.091288][ T8809] loop9: detected capacity change from 0 to 1024 [ 139.098378][ T8813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.109210][ T8813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.125665][ T8809] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 139.586167][ T8825] loop9: detected capacity change from 0 to 1024 [ 139.629188][ T8825] EXT4-fs: Ignoring removed orlov option [ 139.775242][ T8832] loop3: detected capacity change from 0 to 1024 [ 139.790966][ T8832] EXT4-fs: Ignoring removed orlov option [ 139.831475][ T8845] loop9: detected capacity change from 0 to 1024 [ 139.866502][ T8835] loop2: detected capacity change from 0 to 8192 [ 139.880169][ T8853] SELinux: syz.3.1711 (8853) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 139.916083][ T8855] loop3: detected capacity change from 0 to 1024 [ 139.922804][ T8855] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 140.187546][ T8861] loop3: detected capacity change from 0 to 8192 [ 140.859451][ T8875] loop9: detected capacity change from 0 to 256 [ 140.871607][ T8875] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 140.945487][ T8871] SELinux: syz.2.1717 (8871) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 141.118938][ T8880] loop3: detected capacity change from 0 to 1024 [ 141.127992][ T8880] EXT4-fs: Ignoring removed orlov option [ 141.245415][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 141.245464][ T29] audit: type=1400 audit(1752081966.183:4276): avc: denied { ioctl } for pid=8888 comm="syz.3.1720" path="socket:[24115]" dev="sockfs" ino=24115 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 141.294387][ T29] audit: type=1400 audit(1752081966.223:4277): avc: denied { listen } for pid=8888 comm="syz.3.1720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 141.332044][ T8891] loop2: detected capacity change from 0 to 1024 [ 141.339014][ T8891] EXT4-fs: Ignoring removed orlov option [ 141.395594][ T8902] __nla_validate_parse: 1 callbacks suppressed [ 141.395608][ T8902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1725'. [ 141.425865][ T8902] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1725'. [ 141.455600][ T8902] loop3: detected capacity change from 0 to 2048 [ 141.494859][ T8908] loop2: detected capacity change from 0 to 1024 [ 141.505721][ T8902] loop3: p2 p3 p7 [ 141.539414][ T29] audit: type=1326 audit(1752081966.483:4278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8907 comm="syz.2.1727" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3b1a50e929 code=0x0 [ 141.625724][ T8915] loop1: detected capacity change from 0 to 1024 [ 141.632632][ T8915] EXT4-fs: Invalid want_extra_isize 1021 [ 141.673842][ T8921] SELinux: syz.1.1731 (8921) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 141.695307][ T8924] SELinux: syz.9.1732 (8924) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 141.744969][ T8931] @: renamed from vlan0 [ 141.777337][ T8933] loop1: detected capacity change from 0 to 1024 [ 141.794526][ T29] audit: type=1326 audit(1752081966.733:4279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8932 comm="syz.1.1736" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0242f0e929 code=0x0 [ 141.839964][ T8942] loop9: detected capacity change from 0 to 1024 [ 141.904664][ T29] audit: type=1326 audit(1752081966.843:4280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8941 comm="syz.9.1739" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f361343e929 code=0x0 [ 142.354612][ T8959] SELinux: syz.2.1744 (8959) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 142.431092][ T8965] loop2: detected capacity change from 0 to 2048 [ 142.447156][ T8972] loop0: detected capacity change from 0 to 128 [ 142.457262][ T8965] EXT4-fs error (device loop2): ext4_ext_precache:649: inode #2: comm syz.2.1746: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 142.457508][ T8972] ext4 filesystem being mounted at /257/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 142.474937][ T8965] EXT4-fs (loop2): Remounting filesystem read-only [ 142.496642][ T8965] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1746'. [ 142.517228][ T8980] loop3: detected capacity change from 0 to 1024 [ 142.524211][ T8980] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 142.603775][ T8983] loop2: detected capacity change from 0 to 2048 [ 142.631236][ T8983] EXT4-fs error (device loop2): ext4_ext_precache:649: inode #2: comm syz.2.1751: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 142.648055][ T8985] loop1: detected capacity change from 0 to 1024 [ 142.648418][ T8983] EXT4-fs (loop2): Remounting filesystem read-only [ 142.654834][ T8985] EXT4-fs: Invalid want_extra_isize 1021 [ 142.682780][ T8983] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1751'. [ 142.693850][ T8989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.702327][ T8989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.712837][ T8972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.723361][ T8991] loop9: detected capacity change from 0 to 1024 [ 142.729862][ T8972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.745641][ T8993] loop3: detected capacity change from 0 to 512 [ 142.811716][ T8993] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.1755: casefold flag without casefold feature [ 142.835096][ T8993] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.1755: couldn't read orphan inode 15 (err -117) [ 142.855405][ T29] audit: type=1326 audit(1752081967.793:4281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8990 comm="syz.9.1753" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f361343e929 code=0x0 [ 143.005132][ T9002] SELinux: syz.2.1756 (9002) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 143.347546][ T29] audit: type=1400 audit(1752081968.283:4282): avc: denied { mounton } for pid=9012 comm="syz.0.1760" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 143.390559][ T29] audit: type=1400 audit(1752081968.333:4283): avc: denied { unmount } for pid=4722 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 143.549972][ T9017] loop0: detected capacity change from 0 to 2048 [ 143.560317][ T9017] EXT4-fs error (device loop0): ext4_ext_precache:649: inode #2: comm syz.0.1761: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 143.577213][ T9017] EXT4-fs (loop0): Remounting filesystem read-only [ 143.585877][ T9017] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1761'. [ 143.733706][ T9032] SELinux: syz.9.1767 (9032) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 143.763978][ T9034] FAULT_INJECTION: forcing a failure. [ 143.763978][ T9034] name failslab, interval 1, probability 0, space 0, times 0 [ 143.776733][ T9034] CPU: 1 UID: 0 PID: 9034 Comm: syz.9.1768 Tainted: G W 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(voluntary) [ 143.776777][ T9034] Tainted: [W]=WARN [ 143.776785][ T9034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 143.776811][ T9034] Call Trace: [ 143.776818][ T9034] [ 143.776824][ T9034] __dump_stack+0x1d/0x30 [ 143.776843][ T9034] dump_stack_lvl+0xe8/0x140 [ 143.776859][ T9034] dump_stack+0x15/0x1b [ 143.776873][ T9034] should_fail_ex+0x265/0x280 [ 143.776905][ T9034] should_failslab+0x8c/0xb0 [ 143.776928][ T9034] kmem_cache_alloc_node_noprof+0x57/0x320 [ 143.776956][ T9034] ? __alloc_skb+0x101/0x320 [ 143.777024][ T9034] ? avc_has_perm+0xd3/0x150 [ 143.777046][ T9034] __alloc_skb+0x101/0x320 [ 143.777113][ T9034] sock_wmalloc+0x7e/0xc0 [ 143.777147][ T9034] pppol2tp_sendmsg+0xfb/0x440 [ 143.777290][ T9034] ? __pfx_pppol2tp_sendmsg+0x10/0x10 [ 143.777395][ T9034] __sock_sendmsg+0x142/0x180 [ 143.777420][ T9034] sock_write_iter+0x165/0x1b0 [ 143.777446][ T9034] do_iter_readv_writev+0x421/0x4c0 [ 143.777525][ T9034] vfs_writev+0x2df/0x8b0 [ 143.777555][ T9034] do_writev+0xe7/0x210 [ 143.777577][ T9034] __x64_sys_writev+0x45/0x50 [ 143.777597][ T9034] x64_sys_call+0x2006/0x2fb0 [ 143.777620][ T9034] do_syscall_64+0xd2/0x200 [ 143.777660][ T9034] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 143.777688][ T9034] ? clear_bhb_loop+0x40/0x90 [ 143.777711][ T9034] ? clear_bhb_loop+0x40/0x90 [ 143.777729][ T9034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.777763][ T9034] RIP: 0033:0x7f361343e929 [ 143.777779][ T9034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.777798][ T9034] RSP: 002b:00007f3611aa7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 143.777869][ T9034] RAX: ffffffffffffffda RBX: 00007f3613665fa0 RCX: 00007f361343e929 [ 143.777879][ T9034] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000004 [ 143.777889][ T9034] RBP: 00007f3611aa7090 R08: 0000000000000000 R09: 0000000000000000 [ 143.777943][ T9034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.777955][ T9034] R13: 0000000000000000 R14: 00007f3613665fa0 R15: 00007ffd0eb2c758 [ 143.778094][ T9034] [ 144.029497][ T9038] loop2: detected capacity change from 0 to 128 [ 144.037831][ T9038] ext4 filesystem being mounted at /281/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 144.252561][ T9038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.261447][ T9038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.274254][ T9047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1772'. [ 144.759898][ T9051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1774'. [ 144.774341][ T9051] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1774'. [ 144.793623][ T9051] loop3: detected capacity change from 0 to 2048 [ 144.821486][ T9051] loop3: p2 p3 p7 [ 144.881624][ T9064] loop9: detected capacity change from 0 to 1024 [ 144.916606][ T29] audit: type=1326 audit(1752081969.853:4284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9063 comm="syz.9.1780" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f361343e929 code=0x0 [ 144.953398][ T9062] SELinux: syz.3.1779 (9062) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 145.009661][ T9074] loop3: detected capacity change from 0 to 512 [ 145.017275][ T9074] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.1783: casefold flag without casefold feature [ 145.030373][ T9074] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.1783: couldn't read orphan inode 15 (err -117) [ 145.057127][ T9072] loop2: detected capacity change from 0 to 2048 [ 145.069201][ T9072] EXT4-fs error (device loop2): ext4_ext_precache:649: inode #2: comm syz.2.1782: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 145.085842][ T9072] EXT4-fs (loop2): Remounting filesystem read-only [ 145.092848][ T9072] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1782'. [ 145.172042][ T9082] loop3: detected capacity change from 0 to 128 [ 145.179802][ T9082] ext4 filesystem being mounted at /375/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 145.321443][ T9087] loop2: detected capacity change from 0 to 512 [ 145.339038][ T9087] ext4 filesystem being mounted at /288/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.393100][ T9082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.401583][ T9082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.741490][ T29] audit: type=1326 audit(1752081970.683:4285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9091 comm="syz.1.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0242f0e929 code=0x7ffc0000 [ 145.786495][ T9097] SELinux: syz.0.1790 (9097) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 145.885348][ T9110] loop1: detected capacity change from 0 to 1024 [ 145.892214][ T9110] EXT4-fs: Ignoring removed orlov option [ 145.937912][ T9106] SELinux: syz.0.1793 (9106) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 146.006313][ T9121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.025282][ T9121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.039098][ T9127] loop1: detected capacity change from 0 to 1024 [ 146.369981][ T9135] SELinux: syz.3.1804 (9135) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 146.528607][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 146.528630][ T29] audit: type=1326 audit(1752081971.473:4304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9140 comm="syz.2.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1a50e929 code=0x7ffc0000 [ 146.558295][ T9139] loop3: detected capacity change from 0 to 8192 [ 146.565024][ T29] audit: type=1326 audit(1752081971.503:4305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9140 comm="syz.2.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3b1a50e929 code=0x7ffc0000 [ 146.588422][ T29] audit: type=1326 audit(1752081971.503:4306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9140 comm="syz.2.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1a50e929 code=0x7ffc0000 [ 146.611857][ T29] audit: type=1326 audit(1752081971.503:4307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9140 comm="syz.2.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b1a50e929 code=0x7ffc0000 [ 146.635320][ T29] audit: type=1326 audit(1752081971.503:4308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9140 comm="syz.2.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1a50e929 code=0x7ffc0000 [ 146.658805][ T29] audit: type=1326 audit(1752081971.503:4309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9140 comm="syz.2.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b1a50e929 code=0x7ffc0000 [ 146.682320][ T29] audit: type=1326 audit(1752081971.503:4310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9140 comm="syz.2.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1a50e929 code=0x7ffc0000 [ 146.705815][ T29] audit: type=1326 audit(1752081971.503:4311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9140 comm="syz.2.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b1a50e929 code=0x7ffc0000 [ 146.729203][ T29] audit: type=1326 audit(1752081971.503:4312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9140 comm="syz.2.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1a50e929 code=0x7ffc0000 [ 146.752550][ T29] audit: type=1326 audit(1752081971.503:4313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9140 comm="syz.2.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b1a50e929 code=0x7ffc0000 [ 146.817204][ T9145] loop0: detected capacity change from 0 to 1024 [ 146.824272][ T9145] EXT4-fs: Invalid want_extra_isize 1021 [ 146.842897][ T9148] loop2: detected capacity change from 0 to 512 [ 146.854185][ T9148] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.1807: casefold flag without casefold feature [ 146.869283][ T9148] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.1807: couldn't read orphan inode 15 (err -117) [ 146.909572][ T9154] loop0: detected capacity change from 0 to 2048 [ 146.944800][ T9157] loop1: detected capacity change from 0 to 1024 [ 146.951512][ T9157] EXT4-fs: Ignoring removed orlov option [ 146.960059][ T9154] EXT4-fs error (device loop0): ext4_ext_precache:649: inode #2: comm syz.0.1811: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 147.013805][ T9154] EXT4-fs (loop0): Remounting filesystem read-only [ 147.023065][ T9162] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1811'. [ 147.099794][ T9164] loop1: detected capacity change from 0 to 512 [ 147.109541][ T9168] SELinux: syz.2.1815 (9168) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 147.208727][ T9164] ext4 filesystem being mounted at /278/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.473787][ T9198] loop0: detected capacity change from 0 to 512 [ 147.493422][ T9198] ext4 filesystem being mounted at /272/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.506242][ T9202] SELinux: syz.3.1826 (9202) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 147.547229][ T9206] loop3: detected capacity change from 0 to 2048 [ 147.559911][ T9206] EXT4-fs error (device loop3): ext4_ext_precache:649: inode #2: comm syz.3.1828: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 147.578523][ T9206] EXT4-fs (loop3): Remounting filesystem read-only [ 147.586591][ T9206] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1828'. [ 147.656959][ T9218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.665522][ T9218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.041888][ T9231] SELinux: syz.3.1838 (9231) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 148.204032][ T9235] loop3: detected capacity change from 0 to 128 [ 148.212985][ T9235] ext4 filesystem being mounted at /389/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 148.401271][ T9256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1847'. [ 148.422941][ T9256] loop1: detected capacity change from 0 to 2048 [ 148.481804][ T9256] loop1: p2 p3 p7 [ 148.715051][ T9264] loop1: detected capacity change from 0 to 1024 [ 148.721711][ T9264] EXT4-fs: Invalid want_extra_isize 1021 [ 148.776045][ T9270] loop1: detected capacity change from 0 to 128 [ 148.784290][ T9270] ext4 filesystem being mounted at /291/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 148.796217][ T9270] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #2: comm syz.1.1853: No space for directory leaf checksum. Please run e2fsck -D. [ 148.811627][ T9270] EXT4-fs error (device loop1): htree_dirblock_to_tree:1051: inode #2: comm syz.1.1853: Directory block failed checksum [ 148.827863][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 148.835317][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 148.842866][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 148.850329][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 148.857731][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 148.865106][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 148.872501][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 148.879889][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 148.887313][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 148.894707][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 148.902114][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 148.909550][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 148.916909][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 148.924280][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 148.931676][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 148.939079][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 148.946463][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 148.953872][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 148.961465][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 148.968847][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 148.976213][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 148.983769][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 148.991162][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 148.998568][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.005925][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.013354][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.020747][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.028141][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.035530][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.042975][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.050374][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.057771][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.065260][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.072711][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.080146][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.087546][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.095000][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.102426][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.109892][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.117315][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.124714][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.132090][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.139568][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.146936][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.154463][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.161935][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.169336][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.176709][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.184153][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.191672][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.199121][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.206496][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.213874][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.221328][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.228721][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.236085][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.243498][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.250928][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.258334][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.265698][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.273138][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.280514][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.287916][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.295287][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.302669][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.310174][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.317610][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.324984][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.332361][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.339737][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.347095][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.354508][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.361965][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.369400][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.376756][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.384246][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.391686][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.399137][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.406558][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.413934][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.421305][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.428728][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.436102][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.443555][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.450929][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.458354][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.465713][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.473119][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.480488][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.487957][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.495327][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.502749][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.510134][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.517595][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.525037][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.532471][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.539841][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.547198][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.554660][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.562086][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.569471][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.576956][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.584325][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.591715][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.599239][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.606605][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.613979][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.621375][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.628842][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.636208][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.643605][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.650983][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.658382][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.665929][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.673357][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.680732][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.688117][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.695536][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.702929][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.710428][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.717815][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.725211][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.732589][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.740045][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.747444][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.754946][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.762320][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.769755][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.777179][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.784616][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.792021][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.799462][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.806895][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.814437][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.821891][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.829321][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.836685][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.844155][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.851530][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.858919][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.866280][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.873663][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.881036][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.888430][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.895814][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.903306][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.910708][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.918158][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.925606][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.933092][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.940494][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.947884][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.955347][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.962723][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.970106][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.977613][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.984987][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.992391][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 149.999769][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.007138][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.014527][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.021897][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.029370][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.036736][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.044160][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.051542][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.058928][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.066303][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.073699][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.081072][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.088582][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.095981][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.103365][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.110748][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.118141][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.125501][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.132880][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.140374][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.147913][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.155318][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.162699][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.170078][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.177532][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.184915][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.192292][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.199706][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.207126][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.214527][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.221919][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.229363][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.236727][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.244127][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.251516][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.258902][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.266384][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.273762][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.281162][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.288538][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.295900][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.303388][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.310778][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.318189][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.325557][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.333042][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.340418][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.347814][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.355185][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.362615][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.370019][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.377447][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.384813][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.392184][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.399635][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.407000][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.414381][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.421793][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.429199][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.436560][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.443979][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.451384][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.458769][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.466223][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.473682][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.481072][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.488467][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.495905][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.503288][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.510824][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.518240][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.525674][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.533047][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.540457][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.547953][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.555347][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.562723][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.570255][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.577839][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.585213][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.592586][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.600029][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.607422][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.614793][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.622270][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.629797][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.637170][ T810] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 150.702210][ T810] hid-generic 01FF:0001:0008.0001: hidraw0: HID v4.b6 Device [syz1] on syz1 [ 150.742153][ T9281] x_tables: duplicate underflow at hook 1 [ 150.783033][ T9286] loop9: detected capacity change from 0 to 512 [ 150.790342][ T9286] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 150.795474][ T9288] loop3: detected capacity change from 0 to 1024 [ 150.817761][ T9286] EXT4-fs (loop9): 1 truncate cleaned up [ 150.820668][ T9288] EXT4-fs: Invalid want_extra_isize 1021 [ 150.899494][ T9302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.917739][ T9302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.936017][ T9304] blktrace: Concurrent blktraces are not allowed on loop7 [ 150.972822][ T9306] SELinux: syz.3.1868 (9306) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 151.008201][ T9308] FAULT_INJECTION: forcing a failure. [ 151.008201][ T9308] name failslab, interval 1, probability 0, space 0, times 0 [ 151.020872][ T9308] CPU: 0 UID: 0 PID: 9308 Comm: syz.3.1870 Tainted: G W 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(voluntary) [ 151.020903][ T9308] Tainted: [W]=WARN [ 151.020909][ T9308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 151.020920][ T9308] Call Trace: [ 151.020926][ T9308] [ 151.020933][ T9308] __dump_stack+0x1d/0x30 [ 151.020953][ T9308] dump_stack_lvl+0xe8/0x140 [ 151.020971][ T9308] dump_stack+0x15/0x1b [ 151.021025][ T9308] should_fail_ex+0x265/0x280 [ 151.021054][ T9308] should_failslab+0x8c/0xb0 [ 151.021075][ T9308] kmem_cache_alloc_noprof+0x50/0x310 [ 151.021126][ T9308] ? dst_alloc+0xbd/0x100 [ 151.021151][ T9308] dst_alloc+0xbd/0x100 [ 151.021182][ T9308] ip_route_input_rcu+0x177d/0x1d00 [ 151.021217][ T9308] ip_route_input_noref+0x5f/0x90 [ 151.021247][ T9308] ip_rcv_finish_core+0x315/0xb40 [ 151.021284][ T9308] ? iptable_mangle_hook+0x119/0x260 [ 151.021319][ T9308] ip_rcv_finish+0x100/0x1a0 [ 151.021426][ T9308] ip_rcv+0x62/0x140 [ 151.021520][ T9308] ? __pfx_ip_rcv_finish+0x10/0x10 [ 151.021546][ T9308] ? __pfx_ip_rcv+0x10/0x10 [ 151.021612][ T9308] __netif_receive_skb+0xff/0x270 [ 151.021630][ T9308] ? tun_rx_batched+0xc7/0x430 [ 151.021668][ T9308] netif_receive_skb+0x4b/0x2e0 [ 151.021684][ T9308] ? tun_rx_batched+0xc7/0x430 [ 151.021743][ T9308] tun_rx_batched+0xfc/0x430 [ 151.021766][ T9308] tun_get_user+0x1e5a/0x2500 [ 151.021790][ T9308] ? ref_tracker_alloc+0x1f2/0x2f0 [ 151.021817][ T9308] tun_chr_write_iter+0x15e/0x210 [ 151.021915][ T9308] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 151.021935][ T9308] vfs_write+0x4a0/0x8e0 [ 151.021963][ T9308] ksys_write+0xda/0x1a0 [ 151.021992][ T9308] __x64_sys_write+0x40/0x50 [ 151.022017][ T9308] x64_sys_call+0x2cdd/0x2fb0 [ 151.022034][ T9308] do_syscall_64+0xd2/0x200 [ 151.022102][ T9308] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 151.022124][ T9308] ? clear_bhb_loop+0x40/0x90 [ 151.022141][ T9308] ? clear_bhb_loop+0x40/0x90 [ 151.022159][ T9308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.022207][ T9308] RIP: 0033:0x7ff4ad3bd3df [ 151.022220][ T9308] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 151.022289][ T9308] RSP: 002b:00007ff4aba27000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 151.022348][ T9308] RAX: ffffffffffffffda RBX: 00007ff4ad5e5fa0 RCX: 00007ff4ad3bd3df [ 151.022358][ T9308] RDX: 0000000000000032 RSI: 0000200000000300 RDI: 00000000000000c8 [ 151.022369][ T9308] RBP: 00007ff4aba27090 R08: 0000000000000000 R09: 0000000000000000 [ 151.022379][ T9308] R10: 0000000000000032 R11: 0000000000000293 R12: 0000000000000001 [ 151.022389][ T9308] R13: 0000000000000000 R14: 00007ff4ad5e5fa0 R15: 00007fffc347fa48 [ 151.022468][ T9308] [ 151.330461][ T9316] blktrace: Concurrent blktraces are not allowed on loop19 [ 151.359390][ T9318] pim6reg1: entered promiscuous mode [ 151.364722][ T9318] pim6reg1: entered allmulticast mode [ 151.372640][ T9318] program syz.2.1875 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 151.411336][ T9323] loop3: detected capacity change from 0 to 1024 [ 151.419694][ T9323] EXT4-fs: Invalid want_extra_isize 1021 [ 151.570754][ T9330] loop2: detected capacity change from 0 to 512 [ 151.714204][ T9330] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.1878: casefold flag without casefold feature [ 151.755564][ T9330] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.1878: couldn't read orphan inode 15 (err -117) [ 151.769327][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 151.769341][ T29] audit: type=1400 audit(1752081976.713:4452): avc: denied { getopt } for pid=9333 comm="syz.3.1880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 151.890126][ T9347] loop1: detected capacity change from 0 to 8192 [ 151.907083][ T29] audit: type=1400 audit(1752081976.843:4453): avc: denied { block_suspend } for pid=9349 comm="syz.2.1886" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 151.930903][ T9350] loop2: detected capacity change from 0 to 256 [ 151.937349][ T29] audit: type=1326 audit(1752081976.873:4454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9346 comm="syz.1.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0242f0e929 code=0x7ffc0000 [ 151.960846][ T29] audit: type=1326 audit(1752081976.873:4455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9346 comm="syz.1.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0242f0e929 code=0x7ffc0000 [ 151.967327][ T9352] loop9: detected capacity change from 0 to 1024 [ 151.991013][ T9350] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 152.004979][ T9350] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 152.006462][ T9352] EXT4-fs: Invalid want_extra_isize 1021 [ 152.013561][ T9350] FAT-fs (loop2): Filesystem has been set read-only [ 152.036935][ T29] audit: type=1400 audit(1752081976.973:4456): avc: denied { read } for pid=9349 comm="syz.2.1886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 152.920560][ T9353] uprobe: syz.9.1889:9353 failed to unregister, leaking uprobe [ 153.019443][ T9381] loop3: detected capacity change from 0 to 1024 [ 153.036563][ T9381] EXT4-fs: Invalid want_extra_isize 1021 [ 153.120782][ T29] audit: type=1326 audit(1752081978.063:4457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9382 comm="syz.3.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4ad3be929 code=0x7ffc0000 [ 153.144232][ T29] audit: type=1326 audit(1752081978.063:4458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9382 comm="syz.3.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff4ad3be929 code=0x7ffc0000 [ 153.167800][ T29] audit: type=1326 audit(1752081978.063:4459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9382 comm="syz.3.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4ad3be929 code=0x7ffc0000 [ 153.198597][ T29] audit: type=1326 audit(1752081978.113:4460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9382 comm="syz.3.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4ad3be929 code=0x7ffc0000 [ 153.277987][ T29] audit: type=1326 audit(1752081978.223:4461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9388 comm="syz.2.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1a50e929 code=0x7ffc0000 [ 153.307339][ T9393] 9pnet_fd: Insufficient options for proto=fd [ 153.336878][ T9401] loop1: detected capacity change from 0 to 512 [ 153.356437][ T9401] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.1906: casefold flag without casefold feature [ 153.369392][ T9401] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.1906: couldn't read orphan inode 15 (err -117) [ 153.486049][ T9409] loop1: detected capacity change from 0 to 128 [ 153.494602][ T9409] ext4 filesystem being mounted at /302/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 153.560920][ T9415] loop9: detected capacity change from 0 to 2048 [ 153.584651][ T9419] loop1: detected capacity change from 0 to 512 [ 153.602012][ T9415] loop9: p2 p3 p7 [ 153.623081][ T9419] ext4 filesystem being mounted at /304/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.891209][ T9439] loop3: detected capacity change from 0 to 128 [ 153.960931][ T9437] SELinux: syz.9.1921 (9437) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 153.984343][ T9442] loop0: detected capacity change from 0 to 1024 [ 154.006787][ T9442] EXT4-fs: Invalid want_extra_isize 1021 [ 154.012618][ T9439] ext4 filesystem being mounted at /412/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 154.096104][ T9447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.104710][ T9447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.144107][ T9449] loop0: detected capacity change from 0 to 2048 [ 154.193474][ T9449] loop0: p2 p3 p7 [ 154.311045][ T9464] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1933'. [ 154.339867][ T9468] loop2: detected capacity change from 0 to 1024 [ 154.346451][ T9468] EXT4-fs: Invalid want_extra_isize 1021 [ 154.373436][ T9472] FAULT_INJECTION: forcing a failure. [ 154.373436][ T9472] name failslab, interval 1, probability 0, space 0, times 0 [ 154.386169][ T9472] CPU: 0 UID: 0 PID: 9472 Comm: syz.9.1937 Tainted: G W 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(voluntary) [ 154.386314][ T9472] Tainted: [W]=WARN [ 154.386321][ T9472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 154.386334][ T9472] Call Trace: [ 154.386341][ T9472] [ 154.386349][ T9472] __dump_stack+0x1d/0x30 [ 154.386370][ T9472] dump_stack_lvl+0xe8/0x140 [ 154.386391][ T9472] dump_stack+0x15/0x1b [ 154.386408][ T9472] should_fail_ex+0x265/0x280 [ 154.386484][ T9472] ? ftrace_profile_set_filter+0xc2/0x190 [ 154.386551][ T9472] should_failslab+0x8c/0xb0 [ 154.386590][ T9472] __kmalloc_cache_noprof+0x4c/0x320 [ 154.386620][ T9472] ftrace_profile_set_filter+0xc2/0x190 [ 154.386640][ T9472] perf_ioctl+0x7b3/0x12e0 [ 154.386672][ T9472] ? ioctl_has_perm+0x289/0x2a0 [ 154.386691][ T9472] ? do_vfs_ioctl+0x9df/0x11d0 [ 154.386831][ T9472] ? selinux_file_ioctl+0x2e3/0x370 [ 154.386853][ T9472] ? __fget_files+0x184/0x1c0 [ 154.386873][ T9472] ? __pfx_perf_ioctl+0x10/0x10 [ 154.386897][ T9472] __se_sys_ioctl+0xce/0x140 [ 154.386980][ T9472] __x64_sys_ioctl+0x43/0x50 [ 154.387002][ T9472] x64_sys_call+0x19a8/0x2fb0 [ 154.387021][ T9472] do_syscall_64+0xd2/0x200 [ 154.387066][ T9472] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 154.387094][ T9472] ? clear_bhb_loop+0x40/0x90 [ 154.387150][ T9472] ? clear_bhb_loop+0x40/0x90 [ 154.387172][ T9472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.387204][ T9472] RIP: 0033:0x7f361343e929 [ 154.387219][ T9472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.387237][ T9472] RSP: 002b:00007f3611aa7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.387256][ T9472] RAX: ffffffffffffffda RBX: 00007f3613665fa0 RCX: 00007f361343e929 [ 154.387269][ T9472] RDX: 0000200000000000 RSI: 0000000040082406 RDI: 0000000000000003 [ 154.387280][ T9472] RBP: 00007f3611aa7090 R08: 0000000000000000 R09: 0000000000000000 [ 154.387292][ T9472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.387321][ T9472] R13: 0000000000000000 R14: 00007f3613665fa0 R15: 00007ffd0eb2c758 [ 154.387379][ T9472] [ 154.756393][ T9477] SELinux: syz.0.1940 (9477) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 155.181658][ T9506] xt_hashlimit: max too large, truncated to 1048576 [ 155.362474][ T9505] SELinux: syz.3.1949 (9505) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 155.421334][ T9517] loop0: detected capacity change from 0 to 128 [ 155.436284][ T9517] msdos: Unknown parameter '' [ 155.451022][ T9517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1953'. [ 155.491945][ T9519] loop9: detected capacity change from 0 to 1024 [ 155.518183][ T9519] EXT4-fs: Invalid want_extra_isize 1021 [ 155.609130][ T9522] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1955'. [ 155.639202][ T9522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1955'. [ 155.651717][ T9522] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.660562][ T9522] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.669322][ T9522] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.678181][ T9522] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.693809][ T9522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1955'. [ 155.743251][ T9530] loop1: detected capacity change from 0 to 512 [ 155.760992][ T9530] ext4 filesystem being mounted at /307/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.791614][ T9537] loop9: detected capacity change from 0 to 2048 [ 155.875262][ T9548] loop1: detected capacity change from 0 to 1024 [ 155.893768][ T9537] loop9: p2 p3 p7 [ 155.944799][ T9554] loop9: detected capacity change from 0 to 512 [ 155.952537][ T9554] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 155.964600][ T9554] EXT4-fs (loop9): 1 truncate cleaned up [ 156.012235][ T9558] loop2: detected capacity change from 0 to 128 [ 156.029274][ T9558] ext4 filesystem being mounted at /321/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 156.049042][ T9546] SELinux: syz.3.1965 (9546) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 156.095082][ T9565] loop9: detected capacity change from 0 to 512 [ 156.108787][ T9565] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 156.128408][ T9565] EXT4-fs (loop9): 1 truncate cleaned up [ 156.168772][ T9569] loop3: detected capacity change from 0 to 8192 [ 156.306219][ T9566] SELinux: syz.2.1971 (9566) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 156.380604][ T9585] FAULT_INJECTION: forcing a failure. [ 156.380604][ T9585] name failslab, interval 1, probability 0, space 0, times 0 [ 156.393412][ T9585] CPU: 1 UID: 0 PID: 9585 Comm: syz.9.1978 Tainted: G W 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(voluntary) [ 156.393451][ T9585] Tainted: [W]=WARN [ 156.393458][ T9585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 156.393471][ T9585] Call Trace: [ 156.393478][ T9585] [ 156.393486][ T9585] __dump_stack+0x1d/0x30 [ 156.393506][ T9585] dump_stack_lvl+0xe8/0x140 [ 156.393527][ T9585] dump_stack+0x15/0x1b [ 156.393606][ T9585] should_fail_ex+0x265/0x280 [ 156.393639][ T9585] should_failslab+0x8c/0xb0 [ 156.393663][ T9585] kmem_cache_alloc_noprof+0x50/0x310 [ 156.393689][ T9585] ? skb_clone+0x151/0x1f0 [ 156.393767][ T9585] skb_clone+0x151/0x1f0 [ 156.393797][ T9585] __netlink_deliver_tap+0x2c9/0x500 [ 156.393847][ T9585] netlink_unicast+0x64c/0x670 [ 156.393872][ T9585] netlink_sendmsg+0x58b/0x6b0 [ 156.393961][ T9585] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.393990][ T9585] __sock_sendmsg+0x142/0x180 [ 156.394014][ T9585] ____sys_sendmsg+0x31e/0x4e0 [ 156.394122][ T9585] ___sys_sendmsg+0x17b/0x1d0 [ 156.394201][ T9585] __x64_sys_sendmsg+0xd4/0x160 [ 156.394238][ T9585] x64_sys_call+0x2999/0x2fb0 [ 156.394268][ T9585] do_syscall_64+0xd2/0x200 [ 156.394295][ T9585] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 156.394350][ T9585] ? clear_bhb_loop+0x40/0x90 [ 156.394368][ T9585] ? clear_bhb_loop+0x40/0x90 [ 156.394386][ T9585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.394503][ T9585] RIP: 0033:0x7f361343e929 [ 156.394516][ T9585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.394534][ T9585] RSP: 002b:00007f3611aa7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.394553][ T9585] RAX: ffffffffffffffda RBX: 00007f3613665fa0 RCX: 00007f361343e929 [ 156.394567][ T9585] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 156.394633][ T9585] RBP: 00007f3611aa7090 R08: 0000000000000000 R09: 0000000000000000 [ 156.394645][ T9585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.394655][ T9585] R13: 0000000000000000 R14: 00007f3613665fa0 R15: 00007ffd0eb2c758 [ 156.394672][ T9585] [ 156.394683][ T9585] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1978'. [ 156.656829][ T9587] loop2: detected capacity change from 0 to 2048 [ 156.669131][ T9587] EXT4-fs mount: 103 callbacks suppressed [ 156.669140][ T9587] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.690535][ T9587] EXT4-fs error (device loop2): ext4_ext_precache:649: inode #2: comm syz.2.1979: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 156.718732][ T4820] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.718766][ T9587] EXT4-fs (loop2): Remounting filesystem read-only [ 156.735738][ T9587] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1979'. [ 156.777539][ T4918] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.890746][ T9598] SELinux: syz.9.1983 (9598) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 156.949445][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 156.949460][ T29] audit: type=1326 audit(1752081981.893:4634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9601 comm="syz.2.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1a50e929 code=0x7ffc0000 [ 157.016609][ T9602] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1982'. [ 157.061105][ T29] audit: type=1326 audit(1752081981.933:4635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9601 comm="syz.2.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1a50e929 code=0x7ffc0000 [ 157.084760][ T29] audit: type=1326 audit(1752081981.933:4636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9601 comm="syz.2.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f3b1a50e929 code=0x7ffc0000 [ 157.108543][ T29] audit: type=1326 audit(1752081981.933:4637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9601 comm="syz.2.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1a50e929 code=0x7ffc0000 [ 157.132092][ T29] audit: type=1326 audit(1752081981.933:4638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9601 comm="syz.2.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1a50e929 code=0x7ffc0000 [ 157.155507][ T29] audit: type=1326 audit(1752081981.933:4639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9601 comm="syz.2.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3b1a50e929 code=0x7ffc0000 [ 157.178988][ T29] audit: type=1326 audit(1752081981.933:4640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9601 comm="syz.2.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1a50e929 code=0x7ffc0000 [ 157.187523][ T9610] SELinux: syz.0.1989 (9610) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 157.202396][ T29] audit: type=1326 audit(1752081981.933:4641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9601 comm="syz.2.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3b1a50e929 code=0x7ffc0000 [ 157.202423][ T29] audit: type=1326 audit(1752081981.933:4642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9601 comm="syz.2.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1a50e929 code=0x7ffc0000 [ 157.262871][ T29] audit: type=1326 audit(1752081981.933:4643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9601 comm="syz.2.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1a50e929 code=0x7ffc0000 [ 157.359368][ T9608] SELinux: syz.9.1988 (9608) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 157.379814][ T9624] loop3: detected capacity change from 0 to 1024 [ 157.405145][ T9624] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.418898][ T9628] loop0: detected capacity change from 0 to 2048 [ 157.429928][ T9632] FAULT_INJECTION: forcing a failure. [ 157.429928][ T9632] name failslab, interval 1, probability 0, space 0, times 0 [ 157.442745][ T9632] CPU: 1 UID: 0 PID: 9632 Comm: syz.9.1996 Tainted: G W 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(voluntary) [ 157.442772][ T9632] Tainted: [W]=WARN [ 157.442779][ T9632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 157.442792][ T9632] Call Trace: [ 157.442799][ T9632] [ 157.442807][ T9632] __dump_stack+0x1d/0x30 [ 157.442827][ T9632] dump_stack_lvl+0xe8/0x140 [ 157.442854][ T9632] dump_stack+0x15/0x1b [ 157.442873][ T9632] should_fail_ex+0x265/0x280 [ 157.442905][ T9632] should_failslab+0x8c/0xb0 [ 157.442928][ T9632] kmem_cache_alloc_noprof+0x50/0x310 [ 157.442950][ T9632] ? getname_flags+0x80/0x3b0 [ 157.442973][ T9632] getname_flags+0x80/0x3b0 [ 157.443011][ T9632] do_sys_openat2+0x60/0x110 [ 157.443038][ T9632] __x64_sys_openat+0xf2/0x120 [ 157.443096][ T9632] x64_sys_call+0x1af/0x2fb0 [ 157.443118][ T9632] do_syscall_64+0xd2/0x200 [ 157.443152][ T9632] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 157.443256][ T9632] ? clear_bhb_loop+0x40/0x90 [ 157.443278][ T9632] ? clear_bhb_loop+0x40/0x90 [ 157.443300][ T9632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.443323][ T9632] RIP: 0033:0x7f361343e929 [ 157.443339][ T9632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.443432][ T9632] RSP: 002b:00007f3611aa7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 157.443445][ T9632] RAX: ffffffffffffffda RBX: 00007f3613665fa0 RCX: 00007f361343e929 [ 157.443452][ T9632] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: ffffffffffffff9c [ 157.443459][ T9632] RBP: 00007f3611aa7090 R08: 0000000000000000 R09: 0000000000000000 [ 157.443466][ T9632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.443529][ T9632] R13: 0000000000000000 R14: 00007f3613665fa0 R15: 00007ffd0eb2c758 [ 157.443539][ T9632] [ 157.639301][ T9628] loop0: p2 p3 p7 [ 157.648157][ T9621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.657541][ T9621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.678658][ T9621] loop1: detected capacity change from 0 to 1024 [ 157.697994][ T9621] EXT4-fs: Ignoring removed nobh option [ 157.700307][ T9642] loop0: detected capacity change from 0 to 128 [ 157.713119][ T9621] EXT4-fs: Ignoring removed bh option [ 157.719204][ T9642] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 157.727549][ T9621] ext4: Unknown parameter 'fsuuid' [ 157.736970][ T9642] ext4 filesystem being mounted at /301/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 157.746477][ T9621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1992'. [ 157.777549][ T4722] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 157.796384][ T9621] veth1_macvtap: left promiscuous mode [ 158.168112][ T9653] vhci_hcd: invalid port number 11 [ 158.173280][ T9653] vhci_hcd: default hub control req: 6031 v0000 i000b l2 [ 158.199518][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.287918][ T9655] SELinux: syz.3.2005 (9655) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 158.308214][ T9658] loop9: detected capacity change from 0 to 1024 [ 158.315057][ T9658] EXT4-fs: Invalid want_extra_isize 1021 [ 158.384684][ T9665] loop3: detected capacity change from 0 to 2048 [ 158.411709][ T9669] loop3: p2 p3 p7 [ 158.417447][ T9669] blktrace: Concurrent blktraces are not allowed on loop3 [ 158.423508][ T9665] loop3: p2 p3 p7 [ 158.449335][ T9672] loop1: detected capacity change from 0 to 512 [ 158.456021][ T9672] EXT4-fs: Ignoring removed oldalloc option [ 158.458746][ T9674] loop3: detected capacity change from 0 to 128 [ 158.462980][ T9672] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 158.470842][ T9674] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 158.476821][ T9672] System zones: 1-2, 4-12, 8-8 [ 158.489519][ T9674] ext4 filesystem being mounted at /425/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 158.494709][ T9672] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.2012: iget: bad i_size value: 38620345925642 [ 158.516186][ T9672] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.2012: couldn't read orphan inode 15 (err -117) [ 158.529623][ T9672] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.543512][ T3315] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 158.572658][ T9678] loop3: detected capacity change from 0 to 2048 [ 158.589305][ T9678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.601986][ T4820] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.602987][ T9678] EXT4-fs error (device loop3): ext4_ext_precache:649: inode #2: comm syz.3.2014: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 158.628811][ T9678] EXT4-fs (loop3): Remounting filesystem read-only [ 158.638803][ T9678] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2014'. [ 158.693785][ T9686] loop2: detected capacity change from 0 to 1024 [ 158.714615][ T9686] EXT4-fs: Invalid want_extra_isize 1021 [ 158.742813][ T9694] FAULT_INJECTION: forcing a failure. [ 158.742813][ T9694] name failslab, interval 1, probability 0, space 0, times 0 [ 158.743259][ T9692] loop1: detected capacity change from 0 to 512 [ 158.755499][ T9694] CPU: 0 UID: 0 PID: 9694 Comm: syz.2.2021 Tainted: G W 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(voluntary) [ 158.755608][ T9694] Tainted: [W]=WARN [ 158.755614][ T9694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 158.755626][ T9694] Call Trace: [ 158.755633][ T9694] [ 158.755640][ T9694] __dump_stack+0x1d/0x30 [ 158.755661][ T9694] dump_stack_lvl+0xe8/0x140 [ 158.755680][ T9694] dump_stack+0x15/0x1b [ 158.755696][ T9694] should_fail_ex+0x265/0x280 [ 158.755742][ T9694] should_failslab+0x8c/0xb0 [ 158.755770][ T9694] kmem_cache_alloc_noprof+0x50/0x310 [ 158.755795][ T9694] ? security_file_alloc+0x32/0x100 [ 158.755852][ T9694] security_file_alloc+0x32/0x100 [ 158.755883][ T9694] init_file+0x5c/0x1d0 [ 158.755935][ T9694] alloc_empty_file+0x8b/0x200 [ 158.755993][ T9694] alloc_file_pseudo+0xc6/0x160 [ 158.756019][ T9694] sock_alloc_file+0x9c/0x1e0 [ 158.756041][ T9694] do_accept+0x1e4/0x3a0 [ 158.756081][ T9694] __sys_accept4+0xbf/0x140 [ 158.756187][ T9694] __x64_sys_accept+0x42/0x50 [ 158.756266][ T9694] x64_sys_call+0x2f50/0x2fb0 [ 158.756287][ T9694] do_syscall_64+0xd2/0x200 [ 158.756319][ T9694] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 158.756356][ T9694] ? clear_bhb_loop+0x40/0x90 [ 158.756377][ T9694] ? clear_bhb_loop+0x40/0x90 [ 158.756399][ T9694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.756420][ T9694] RIP: 0033:0x7f3b1a50e929 [ 158.756435][ T9694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.756452][ T9694] RSP: 002b:00007f3b18b77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 158.756471][ T9694] RAX: ffffffffffffffda RBX: 00007f3b1a735fa0 RCX: 00007f3b1a50e929 [ 158.756554][ T9694] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 158.756566][ T9694] RBP: 00007f3b18b77090 R08: 0000000000000000 R09: 0000000000000000 [ 158.756578][ T9694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.756590][ T9694] R13: 0000000000000000 R14: 00007f3b1a735fa0 R15: 00007ffca4b10bf8 [ 158.756608][ T9694] [ 158.965668][ T9703] loop2: detected capacity change from 0 to 128 [ 158.979288][ T9703] /dev/loop2: Can't open blockdev [ 158.991743][ T9692] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.005215][ T9692] ext4 filesystem being mounted at /317/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.016509][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.124234][ T9712] SELinux: syz.0.2026 (9712) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 159.396120][ T9729] loop9: detected capacity change from 0 to 2048 [ 159.433443][ T9729] loop9: p2 p3 p7 [ 159.482898][ T9731] lo speed is unknown, defaulting to 1000 [ 159.568043][ T9735] lo speed is unknown, defaulting to 1000 [ 159.596296][ T4820] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.679195][ T9754] __nla_validate_parse: 2 callbacks suppressed [ 159.679210][ T9754] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2040'. [ 159.766063][ T9748] SELinux: syz.0.2039 (9748) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 159.779332][ T9758] loop9: detected capacity change from 0 to 8192 [ 159.900559][ T9766] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2044'. [ 160.111796][ T9788] loop0: detected capacity change from 0 to 512 [ 160.149815][ T9788] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 160.178811][ T9788] EXT4-fs (loop0): 1 truncate cleaned up [ 160.185242][ T9788] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.438329][ T9786] SELinux: syz.2.2053 (9786) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 160.601290][ T4722] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.051665][ T9864] loop9: detected capacity change from 0 to 512 [ 161.060599][ T9864] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.073530][ T9864] ext4 filesystem being mounted at /410/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.392809][ T9875] SELinux: syz.3.2068 (9875) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 161.449946][ T9878] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=9878 comm=syz.3.2069 [ 161.462881][ T9805] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 161.464598][ T9878] openvswitch: netlink: Message has 6 unknown bytes. [ 161.596739][ T9886] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2073'. [ 161.621869][ T9890] loop2: detected capacity change from 0 to 1024 [ 161.632781][ T9890] EXT4-fs: Invalid want_extra_isize 1021 [ 161.648972][ T9896] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9896 comm=syz.3.2078 [ 161.760871][ T9898] SELinux: syz.2.2079 (9898) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 161.822317][ T9914] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2084'. [ 161.906645][ T4633] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.925176][ T9924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.941410][ T9924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.942697][ T9928] blktrace: Concurrent blktraces are not allowed on loop19 [ 161.951522][ T9926] loop3: detected capacity change from 0 to 512 [ 161.978038][ T9926] EXT4-fs: Ignoring removed mblk_io_submit option [ 161.984563][ T9926] EXT4-fs: Ignoring removed nomblk_io_submit option [ 161.995765][ T9926] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 162.004242][ T9926] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 162.055093][ T9926] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.2090: Allocating blocks 41-42 which overlap fs metadata [ 162.081672][ T9926] __quota_error: 277 callbacks suppressed [ 162.081691][ T9926] Quota error (device loop3): write_blk: dquota write failed [ 162.094871][ T9926] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 162.106862][ T9926] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.2090: Allocating blocks 41-42 which overlap fs metadata [ 162.126772][ T9926] Quota error (device loop3): write_blk: dquota write failed [ 162.134910][ T9926] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 162.145363][ T9926] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2090: Failed to acquire dquot type 1 [ 162.159411][ T9926] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 162.176447][ T9926] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #12: comm syz.3.2090: corrupted inode contents [ 162.261776][ T9926] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #12: comm syz.3.2090: mark_inode_dirty error [ 162.305946][ T9949] loop9: detected capacity change from 0 to 512 [ 162.364392][ T9926] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #12: comm syz.3.2090: corrupted inode contents [ 162.421653][ T9949] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.440022][ T9956] blktrace: Concurrent blktraces are not allowed on loop5 [ 162.453540][ T9959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.462710][ T9926] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.2090: mark_inode_dirty error [ 162.475946][ T9949] ext4 filesystem being mounted at /414/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.479625][ T9959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.492461][ T9926] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #12: comm syz.3.2090: corrupted inode contents [ 162.511684][ T9926] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 162.521023][ T9926] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #12: comm syz.3.2090: corrupted inode contents [ 162.533435][ T9926] EXT4-fs error (device loop3): ext4_truncate:4597: inode #12: comm syz.3.2090: mark_inode_dirty error [ 162.545558][ T9926] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 162.555012][ T9926] EXT4-fs (loop3): 1 truncate cleaned up [ 162.563398][ T9926] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.584533][ T9926] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 162.654187][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.743081][ T29] audit: type=1400 audit(1752081987.683:4921): avc: denied { read } for pid=9972 comm="syz.3.2109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 162.810740][ T9975] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.821083][ T9975] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.881441][ T9975] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.891828][ T9975] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.981277][ T9975] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.991692][ T9975] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.012950][ T9967] FAULT_INJECTION: forcing a failure. [ 163.012950][ T9967] name failslab, interval 1, probability 0, space 0, times 0 [ 163.025639][ T9967] CPU: 1 UID: 0 PID: 9967 Comm: syz.2.2106 Tainted: G W 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(voluntary) [ 163.025671][ T9967] Tainted: [W]=WARN [ 163.025744][ T9967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 163.025755][ T9967] Call Trace: [ 163.025778][ T9967] [ 163.025786][ T9967] __dump_stack+0x1d/0x30 [ 163.025805][ T9967] dump_stack_lvl+0xe8/0x140 [ 163.025825][ T9967] dump_stack+0x15/0x1b [ 163.025843][ T9967] should_fail_ex+0x265/0x280 [ 163.025874][ T9967] should_failslab+0x8c/0xb0 [ 163.025908][ T9967] kmem_cache_alloc_noprof+0x50/0x310 [ 163.025936][ T9967] ? copy_fs_struct+0x31/0x110 [ 163.025962][ T9967] copy_fs_struct+0x31/0x110 [ 163.026029][ T9967] ksys_unshare+0x2c6/0x6d0 [ 163.026058][ T9967] ? ksys_write+0x192/0x1a0 [ 163.026107][ T9967] __x64_sys_unshare+0x1f/0x30 [ 163.026136][ T9967] x64_sys_call+0x2d4b/0x2fb0 [ 163.026158][ T9967] do_syscall_64+0xd2/0x200 [ 163.026227][ T9967] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 163.026272][ T9967] ? clear_bhb_loop+0x40/0x90 [ 163.026292][ T9967] ? clear_bhb_loop+0x40/0x90 [ 163.026315][ T9967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.026335][ T9967] RIP: 0033:0x7f3b1a50e929 [ 163.026403][ T9967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.026502][ T9967] RSP: 002b:00007f3b18b77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 163.026520][ T9967] RAX: ffffffffffffffda RBX: 00007f3b1a735fa0 RCX: 00007f3b1a50e929 [ 163.026535][ T9967] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068040200 [ 163.026547][ T9967] RBP: 00007f3b18b77090 R08: 0000000000000000 R09: 0000000000000000 [ 163.026605][ T9967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.026612][ T9967] R13: 0000000000000000 R14: 00007f3b1a735fa0 R15: 00007ffca4b10bf8 [ 163.026623][ T9967] [ 163.228916][ T4633] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.239119][ T9975] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.249510][ T9975] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.278714][ T9981] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2111'. [ 163.289916][ T29] audit: type=1107 audit(1752081988.233:4922): pid=9980 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 163.311651][ T9975] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.319959][ T9975] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.323348][ T9983] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2112'. [ 163.331946][ T9975] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.345335][ T9975] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.357023][ T9975] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.365272][ T9975] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.377148][ T9975] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.381013][ T9985] loop9: detected capacity change from 0 to 2048 [ 163.385421][ T9975] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.441659][ T9985] loop9: p2 p3 p7 [ 163.464897][ T9987] blktrace: Concurrent blktraces are not allowed on loop19 [ 163.547692][ T9993] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2117'. [ 163.561703][ T9993] xt_CT: You must specify a L4 protocol and not use inversions on it [ 163.693193][T10002] loop2: detected capacity change from 0 to 512 [ 163.699959][T10002] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 163.711627][T10002] EXT4-fs (loop2): 1 truncate cleaned up [ 163.717989][T10002] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.156914][ T4918] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.157128][T10009] loop9: detected capacity change from 0 to 128 [ 164.173849][T10009] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 164.187199][T10009] ext4 filesystem being mounted at /422/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 164.196806][T10012] loop2: detected capacity change from 0 to 2048 [ 164.212951][ T4633] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 164.223776][T10012] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.239761][T10012] FAULT_INJECTION: forcing a failure. [ 164.239761][T10012] name failslab, interval 1, probability 0, space 0, times 0 [ 164.252499][T10012] CPU: 1 UID: 0 PID: 10012 Comm: syz.2.2122 Tainted: G W 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(voluntary) [ 164.252579][T10012] Tainted: [W]=WARN [ 164.252640][T10012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 164.252652][T10012] Call Trace: [ 164.252659][T10012] [ 164.252667][T10012] __dump_stack+0x1d/0x30 [ 164.252688][T10012] dump_stack_lvl+0xe8/0x140 [ 164.252709][T10012] dump_stack+0x15/0x1b [ 164.252726][T10012] should_fail_ex+0x265/0x280 [ 164.252786][T10012] should_failslab+0x8c/0xb0 [ 164.252806][T10012] __kmalloc_noprof+0xa5/0x3e0 [ 164.252881][T10012] ? __register_sysctl_table+0x79c/0xc00 [ 164.252963][T10012] __register_sysctl_table+0x79c/0xc00 [ 164.253077][T10012] setup_ipc_sysctls+0x842/0x880 [ 164.253101][T10012] copy_ipcs+0x23e/0x3b0 [ 164.253150][T10012] create_new_namespaces+0x12a/0x3d0 [ 164.253180][T10012] unshare_nsproxy_namespaces+0xe8/0x120 [ 164.253220][T10012] ksys_unshare+0x3d0/0x6d0 [ 164.253246][T10012] ? ksys_write+0x192/0x1a0 [ 164.253311][T10012] __x64_sys_unshare+0x1f/0x30 [ 164.253338][T10012] x64_sys_call+0x2d4b/0x2fb0 [ 164.253459][T10012] do_syscall_64+0xd2/0x200 [ 164.253492][T10012] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 164.253520][T10012] ? clear_bhb_loop+0x40/0x90 [ 164.253614][T10012] ? clear_bhb_loop+0x40/0x90 [ 164.253634][T10012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.253816][T10012] RIP: 0033:0x7f3b1a50e929 [ 164.253833][T10012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.253850][T10012] RSP: 002b:00007f3b18b77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 164.253867][T10012] RAX: ffffffffffffffda RBX: 00007f3b1a735fa0 RCX: 00007f3b1a50e929 [ 164.253880][T10012] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 164.253890][T10012] RBP: 00007f3b18b77090 R08: 0000000000000000 R09: 0000000000000000 [ 164.253967][T10012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 164.253978][T10012] R13: 0000000000000000 R14: 00007f3b1a735fa0 R15: 00007ffca4b10bf8 [ 164.253994][T10012] [ 164.254000][T10012] sysctl could not get directory: /kernel -12 [ 164.552007][ T4918] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.560431][ T29] audit: type=1326 audit(1752081989.503:4923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10018 comm="syz.3.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4ad3be929 code=0x7ffc0000 [ 164.585349][ T29] audit: type=1326 audit(1752081989.523:4924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10018 comm="syz.3.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4ad3be929 code=0x7ffc0000 [ 164.608944][ T29] audit: type=1326 audit(1752081989.523:4925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10018 comm="syz.3.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7ff4ad3be929 code=0x7ffc0000 [ 164.616684][T10019] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2124'. [ 164.632431][ T29] audit: type=1326 audit(1752081989.523:4926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10018 comm="syz.3.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4ad3be929 code=0x7ffc0000 [ 164.720762][T10023] loop9: detected capacity change from 0 to 512 [ 164.728779][T10023] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 164.780695][T10023] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2123: bg 0: block 435: padding at end of block bitmap is not set [ 164.797317][T10023] EXT4-fs (loop9): 1 truncate cleaned up [ 164.803761][T10023] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.835276][T10021] loop2: detected capacity change from 0 to 2048 [ 164.912921][T10021] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.982491][T10021] EXT4-fs error (device loop2): ext4_ext_precache:649: inode #2: comm syz.2.2125: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 165.021558][T10021] EXT4-fs (loop2): Remounting filesystem read-only [ 165.036671][T10021] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2125'. [ 165.096401][T10033] loop1: detected capacity change from 0 to 8192 [ 165.217024][ T4918] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.926971][T10057] loop3: detected capacity change from 0 to 128 [ 165.943325][T10057] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 165.970334][T10057] ext4 filesystem being mounted at /449/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 166.025768][ T3315] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 166.084578][ T4633] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.088333][T10066] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2141'. [ 166.142771][T10075] SELinux: syz.2.2145 (10075) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 166.216862][T10084] loop0: detected capacity change from 0 to 512 [ 166.225949][T10082] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2149'. [ 166.245117][T10084] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 166.273439][T10084] EXT4-fs (loop0): 1 truncate cleaned up [ 166.280076][T10091] loop2: detected capacity change from 0 to 128 [ 166.286806][T10084] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.301114][T10091] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 166.322204][T10091] ext4 filesystem being mounted at /367/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 166.347544][ T4918] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 166.364744][T10083] SELinux: syz.9.2147 (10083) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 166.403793][T10096] loop2: detected capacity change from 0 to 8192 [ 166.412887][ T4722] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.528208][T10108] loop0: detected capacity change from 0 to 1024 [ 166.540119][T10108] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.553242][T10108] FAULT_INJECTION: forcing a failure. [ 166.553242][T10108] name failslab, interval 1, probability 0, space 0, times 0 [ 166.565965][T10108] CPU: 0 UID: 0 PID: 10108 Comm: syz.0.2156 Tainted: G W 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(voluntary) [ 166.566006][T10108] Tainted: [W]=WARN [ 166.566013][T10108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 166.566074][T10108] Call Trace: [ 166.566080][T10108] [ 166.566087][T10108] __dump_stack+0x1d/0x30 [ 166.566105][T10108] dump_stack_lvl+0xe8/0x140 [ 166.566152][T10108] dump_stack+0x15/0x1b [ 166.566166][T10108] should_fail_ex+0x265/0x280 [ 166.566268][T10108] ? alloc_pipe_info+0xae/0x350 [ 166.566300][T10108] should_failslab+0x8c/0xb0 [ 166.566465][T10108] __kmalloc_cache_noprof+0x4c/0x320 [ 166.566491][T10108] alloc_pipe_info+0xae/0x350 [ 166.566518][T10108] splice_direct_to_actor+0x592/0x680 [ 166.566553][T10108] ? __pfx_direct_splice_actor+0x10/0x10 [ 166.566584][T10108] ? __htab_map_lookup_elem+0x129/0x150 [ 166.566610][T10108] ? avc_policy_seqno+0x15/0x30 [ 166.566673][T10108] ? selinux_file_permission+0x1e4/0x320 [ 166.566699][T10108] do_splice_direct+0xda/0x150 [ 166.566725][T10108] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 166.566756][T10108] do_sendfile+0x380/0x650 [ 166.566784][T10108] __x64_sys_sendfile64+0x105/0x150 [ 166.566808][T10108] x64_sys_call+0xb39/0x2fb0 [ 166.566846][T10108] do_syscall_64+0xd2/0x200 [ 166.566874][T10108] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 166.567005][T10108] ? clear_bhb_loop+0x40/0x90 [ 166.567028][T10108] ? clear_bhb_loop+0x40/0x90 [ 166.567051][T10108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.567146][T10108] RIP: 0033:0x7fafabd7e929 [ 166.567158][T10108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.567173][T10108] RSP: 002b:00007fafaa3e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 166.567192][T10108] RAX: ffffffffffffffda RBX: 00007fafabfa5fa0 RCX: 00007fafabd7e929 [ 166.567204][T10108] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 166.567217][T10108] RBP: 00007fafaa3e7090 R08: 0000000000000000 R09: 0000000000000000 [ 166.567230][T10108] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001 [ 166.567242][T10108] R13: 0000000000000000 R14: 00007fafabfa5fa0 R15: 00007fffc98da2f8 [ 166.567309][T10108] [ 166.802776][T10108] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2156'. [ 166.827549][ T4722] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.902130][T10125] loop0: detected capacity change from 0 to 1024 [ 166.909358][T10125] EXT4-fs: Invalid want_extra_isize 1021 [ 166.956456][T10129] loop0: detected capacity change from 0 to 512 [ 166.963986][T10129] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 166.975268][T10129] EXT4-fs (loop0): 1 truncate cleaned up [ 166.981443][T10129] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.070547][ T4722] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.148762][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 167.148777][ T29] audit: type=1326 audit(1752081992.093:5027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10140 comm="syz.0.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafabd7e929 code=0x7ffc0000 [ 167.203688][T10147] macsec0: entered promiscuous mode [ 167.225489][ T29] audit: type=1326 audit(1752081992.093:5028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10140 comm="syz.0.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fafabd7e929 code=0x7ffc0000 [ 167.231412][T10147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2170'. [ 167.249024][ T29] audit: type=1326 audit(1752081992.093:5029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10140 comm="syz.0.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafabd7e929 code=0x7ffc0000 [ 167.249107][ T29] audit: type=1326 audit(1752081992.093:5030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10140 comm="syz.0.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafabd7e929 code=0x7ffc0000 [ 167.262299][T10141] loop0: detected capacity change from 0 to 2048 [ 167.281373][ T29] audit: type=1326 audit(1752081992.093:5031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10140 comm="syz.0.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fafabd7e929 code=0x7ffc0000 [ 167.281400][ T29] audit: type=1326 audit(1752081992.093:5032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10145 comm="syz.0.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fafabd7e929 code=0x7ffc0000 [ 167.358205][ T29] audit: type=1326 audit(1752081992.093:5033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10140 comm="syz.0.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafabd7e929 code=0x7ffc0000 [ 167.382012][ T29] audit: type=1326 audit(1752081992.093:5034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10140 comm="syz.0.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafabd7e929 code=0x7ffc0000 [ 167.405668][ T29] audit: type=1326 audit(1752081992.153:5035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10140 comm="syz.0.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fafabd7e929 code=0x7ffc0000 [ 167.429178][ T29] audit: type=1326 audit(1752081992.153:5036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10140 comm="syz.0.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafabd7e929 code=0x7ffc0000 [ 167.452989][T10147] veth1_macvtap: left promiscuous mode [ 167.521058][T10141] loop0: p3 p4 < > [ 167.738728][T10182] loop9: detected capacity change from 0 to 8192 [ 167.785847][T10186] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2184'. [ 167.907629][T10193] loop1: detected capacity change from 0 to 2048 [ 167.920621][T10193] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.934237][T10193] EXT4-fs error (device loop1): ext4_ext_precache:649: inode #2: comm syz.1.2186: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 167.952439][T10193] EXT4-fs (loop1): Remounting filesystem read-only [ 167.968218][T10193] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2186'. [ 168.185017][ T4820] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.231289][T10206] loop0: detected capacity change from 0 to 128 [ 168.240712][T10206] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 168.253269][T10206] ext4 filesystem being mounted at /337/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 168.306328][ T4722] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 168.413001][T10169] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 168.511492][T10228] loop1: detected capacity change from 0 to 128 [ 168.569188][T10228] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 168.598673][T10228] ext4 filesystem being mounted at /352/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 168.729605][ T4820] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 168.761053][T10224] SELinux: syz.0.2196 (10224) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 168.794965][T10245] loop2: detected capacity change from 0 to 128 [ 168.814761][T10245] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 168.842091][T10245] ext4 filesystem being mounted at /374/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 168.878313][ T4918] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 168.989496][T10258] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 168.989496][T10258] program syz.0.2209 not setting count and/or reply_len properly [ 169.009975][T10260] blktrace: Concurrent blktraces are not allowed on loop3 [ 169.020546][T10262] blktrace: Concurrent blktraces are not allowed on loop5 [ 169.117081][T10271] FAULT_INJECTION: forcing a failure. [ 169.117081][T10271] name failslab, interval 1, probability 0, space 0, times 0 [ 169.129790][T10271] CPU: 1 UID: 0 PID: 10271 Comm: +}[@ Tainted: G W 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(voluntary) [ 169.129895][T10271] Tainted: [W]=WARN [ 169.129902][T10271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 169.129916][T10271] Call Trace: [ 169.129922][T10271] [ 169.129929][T10271] __dump_stack+0x1d/0x30 [ 169.129952][T10271] dump_stack_lvl+0xe8/0x140 [ 169.129973][T10271] dump_stack+0x15/0x1b [ 169.129990][T10271] should_fail_ex+0x265/0x280 [ 169.130021][T10271] should_failslab+0x8c/0xb0 [ 169.130076][T10271] kmem_cache_alloc_noprof+0x50/0x310 [ 169.130147][T10271] ? __anon_vma_prepare+0xcd/0x2f0 [ 169.130175][T10271] __anon_vma_prepare+0xcd/0x2f0 [ 169.130234][T10271] do_wp_page+0x1838/0x2400 [ 169.130253][T10271] ? __rcu_read_lock+0x37/0x50 [ 169.130284][T10271] handle_mm_fault+0x77d/0x2be0 [ 169.130328][T10271] ? mas_walk+0xf2/0x120 [ 169.130357][T10271] do_user_addr_fault+0x636/0x1090 [ 169.130393][T10271] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 169.130503][T10271] exc_page_fault+0x62/0xa0 [ 169.130584][T10271] asm_exc_page_fault+0x26/0x30 [ 169.130605][T10271] RIP: 0033:0x7f3613300ca3 [ 169.130621][T10271] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 169.130641][T10271] RSP: 002b:00007f3611aa64a0 EFLAGS: 00010202 [ 169.130657][T10271] RAX: 0000000000000400 RBX: 00007f3611aa6540 RCX: 00007f3609687000 [ 169.130668][T10271] RDX: 00007f3611aa66e0 RSI: 0000000000000000 RDI: 00007f3611aa65e0 [ 169.130678][T10271] RBP: 00000000000000f9 R08: 0000000000000008 R09: 00000000000000a4 [ 169.130689][T10271] R10: 00000000000000be R11: 00007f3611aa6540 R12: 0000000000000001 [ 169.130736][T10271] R13: 00007f36134dc3a0 R14: 0000000000000020 R15: 00007f3611aa65e0 [ 169.130755][T10271] [ 169.130765][T10271] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 169.164142][T10274] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2214'. [ 169.212510][T10271] loop9: detected capacity change from 0 to 512 [ 169.232218][T10277] loop3: detected capacity change from 0 to 512 [ 169.234825][T10271] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 169.269741][T10277] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.282163][T10271] EXT4-fs (loop9): 1 truncate cleaned up [ 169.288402][T10277] ext4 filesystem being mounted at /458/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.297174][T10271] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.395597][T10271] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.563372][T10298] SELinux: syz.9.2219 (10298) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 169.649071][T10307] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 169.667056][T10309] 8021q: adding VLAN 0 to HW filter on device bond2 [ 169.690080][T10309] loop2: detected capacity change from 0 to 2048 [ 169.698807][T10312] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2227'. [ 169.719079][T10309] EXT4-fs (loop2): failed to initialize system zone (-117) [ 169.726312][T10309] EXT4-fs (loop2): mount failed [ 169.729516][T10317] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 169.738619][T10317] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 169.746016][T10317] vhci_hcd: invalid port number 255 [ 169.751300][T10317] vhci_hcd: invalid port number 255 [ 169.881053][T10323] ================================================================== [ 169.889156][T10323] BUG: KCSAN: data-race in call_rcu / mas_state_walk [ 169.895845][T10323] [ 169.898170][T10323] write to 0xffff888107817010 of 8 bytes by task 10324 on cpu 1: [ 169.905873][T10323] call_rcu+0x44/0x3f0 [ 169.909940][T10323] mas_wmb_replace+0xf7a/0x14a0 [ 169.914781][T10323] mas_wr_store_entry+0x1773/0x2b50 [ 169.919978][T10323] mas_store_prealloc+0x74d/0x9e0 [ 169.925008][T10323] vma_iter_store_new+0x1c5/0x200 [ 169.930024][T10323] mmap_region+0x102c/0x1580 [ 169.934604][T10323] do_mmap+0x9b3/0xbe0 [ 169.938672][T10323] vm_mmap_pgoff+0x17a/0x2e0 [ 169.943261][T10323] ksys_mmap_pgoff+0xc2/0x310 [ 169.947935][T10323] x64_sys_call+0x1602/0x2fb0 [ 169.952614][T10323] do_syscall_64+0xd2/0x200 [ 169.957132][T10323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.963030][T10323] [ 169.965353][T10323] read to 0xffff888107817010 of 8 bytes by task 10323 on cpu 0: [ 169.972971][T10323] mas_state_walk+0x2f5/0x650 [ 169.977650][T10323] mas_walk+0x30/0x120 [ 169.981718][T10323] lock_vma_under_rcu+0xa2/0x2f0 [ 169.986650][T10323] do_user_addr_fault+0x233/0x1090 [ 169.991767][T10323] exc_page_fault+0x62/0xa0 [ 169.996267][T10323] asm_exc_page_fault+0x26/0x30 [ 170.001107][T10323] [ 170.003416][T10323] value changed: 0x00007f3611a65fff -> 0xffffffff855ec850 [ 170.010507][T10323] [ 170.012816][T10323] Reported by Kernel Concurrency Sanitizer on: [ 170.018958][T10323] CPU: 0 UID: 0 PID: 10323 Comm: syz.9.2231 Tainted: G W 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(voluntary) [ 170.033017][T10323] Tainted: [W]=WARN [ 170.036803][T10323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 170.046848][T10323] ================================================================== [ 170.082530][T10324] loop9: detected capacity change from 0 to 1024 [ 170.089367][T10324] EXT4-fs: Ignoring removed nomblk_io_submit option [ 170.090642][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.095967][T10324] EXT4-fs: Ignoring removed bh option [ 170.110729][T10324] EXT4-fs: Ignoring removed nobh option [ 170.116477][T10324] ext3: Unknown parameter 'smackfsroot'