last executing test programs: 2m14.545687616s ago: executing program 2 (id=127): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000540)=[{&(0x7f00000002c0)="b5640aae1e407af01eecff9e22e152a958b96c15ffd051d17c6c702f21a8abb26b561e7af56b164829c35642692c102092e1f43782559cb76acaa20f83d5e807ad43b3e153c8df10b894d755e849d01e91b7b49af88a501bc937c19203d32e33610f090c9d9e0d5972ac64142f8f4b71f2d3ce9c43c9bec897b53fee3e5f94497031ff2e460d2c011dfd60030db5a289bde09ac8326a85bc8791473d2828d1e28b5f20e286b061c4dadef878b72e6095841189", 0xb3}, {&(0x7f0000000000)="9eb8a2c0e241fb0402ac8d04ecbc724648d79b443d283855fdba1e1dc6283591a8a07eb1436788b6b641ed5ea90be62fc7499c9b017d2e73973395411b7efb244a226ba0ae7657c57101711c5aa138abd03dec1e0899824e678aced03a92fec128f69d27d84ee2ff2e4ad7a3db73f4f12d0728bada715bf5abce312346bb7d7345e8df1fc10fa733c98030cb193341700961aa2ccb9f0f029190a1d34386c73e7017cf0fe0275d2d6f9531b12f12e29b903f30c3228aa9ab3a503e9512", 0xbd}], 0x2, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000f40)={'dvmrp0\x00', 0x0}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents(r2, 0x0, 0x3b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x9, &(0x7f0000000dc0)=ANY=[@ANYBLOB="180000000a000000000000000000000008490180ff0f0000d752e0ffffffffff18530000030000000000000000940000186f00000000000000000000080000009500000000000000"], &(0x7f0000000e40)='syzkaller\x00', 0xfffffffd, 0xa4, &(0x7f0000000e80)=""/164, 0x41100, 0x24, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000f80)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000fc0)={0x0, 0x1, 0x9, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001000)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0], 0x0, 0x10, 0x7fffffff}, 0x94) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)="96f5", 0x578}], 0x1, 0x0, 0x0, 0x900}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r3, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18) syz_io_uring_setup(0xbdc, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000fc0)={"2ae13cb49f53ec5fce788cdfa528ba6b", 0x0, 0x0, {0xffffffff, 0x76a}, {0x9, 0x8}, 0x2, [0x130, 0x5, 0x0, 0x2, 0x10001, 0x7, 0xd7, 0x7, 0x2, 0x7fffffffffffffff, 0x7add, 0xc, 0x12685d8f, 0xffffffffffff953a, 0x7, 0x2]}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000cc0)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000040)=@framed={{}, [@alu={0x4, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10}, @jmp={0x5, 0x0, 0x3}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x80) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rt_sigpending(0x0, 0x0) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000b80)=0x50d9, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r6, 0x0, 0xc}, 0x18) msgrcv(0x0, 0x0, 0x0, 0x1, 0x3000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000980)={{0x1, 0x1, 0x18, r7, {0x0, 0xee00}}, './file0/file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x2, 0x6, &(0x7f0000000c80)=ANY=[@ANYRES8=r7], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x95, &(0x7f00000008c0)=""/149, 0x0, 0x40, '\x00', r8, @fallback=0x2e, r9, 0x8, &(0x7f0000000a00)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000a40)={0x0, 0x0, 0xd, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x4, 0xfffffffffffffffc, &(0x7f0000000a80)=[{0x3, 0x4, 0x0, 0x5}, {0x3, 0x5, 0xe, 0x2}, {0x5, 0x4, 0x4, 0xa}, {0x1, 0x5, 0x8, 0x6}], 0x10, 0x3}, 0x94) ioctl$IMGETCOUNT(r9, 0x80044943, &(0x7f00000001c0)) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000d80), 0x1, 0x512, &(0x7f0000000380)="$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") 2m13.640121234s ago: executing program 2 (id=134): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) unshare(0x62000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESHEX, @ANYBLOB="c15080fedd1124aaf6f58297effc3bacb0f2d9440af7f362404af23365c8b7ab2c5cf441351aeb514c798fde9d815f19e054fef9498818d24b175f7fa8bc", @ANYRESHEX=r0, @ANYRES16=r2, @ANYRES16=r0, @ANYRESOCT, @ANYRES16=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff63, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x18) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r5) sendmsg$IEEE802154_LLSEC_LIST_DEV(r5, &(0x7f0000000380)={0x0, 0x2b, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r6, 0x701}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200), r4) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="020026bd7000ffdbdf2530000000050035003480050000000a0001007770616e340000006366af3fea1be40701f0205e85702e84b400"/63], 0x30}, 0x1, 0x0, 0x0, 0x400}, 0xe460c286532597e9) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x10) 2m13.462873847s ago: executing program 2 (id=135): socket$netlink(0x10, 0x3, 0x0) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.metacopy\x00', &(0x7f00000001c0)=""/79, 0x4f) writev(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000040)="a1463eb7e653059e993352492e0724b703b2f2d5686f448e68d75e8431379cae86cb3ae04f0f0a25b19c9031c4dcc7bcd62b97a2da709232794e765b410b35d280d3d9de7c682496c1d32a0951", 0x4d}], 0x1) write(0xffffffffffffffff, &(0x7f0000000080)="140000005200", 0x6) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) writev(r0, &(0x7f0000000000), 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000540)=@generic={&(0x7f0000000240)='./file0\x00', r1}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r2, 0x0, 0xcf, &(0x7f0000000280)=0x4, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x62}, 0x94) socket$kcm(0x2, 0xa, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa00008, &(0x7f0000000000), 0x1, 0x7c8, &(0x7f0000001280)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r4, 0x20, 0x0, 0x8000) 2m12.877434999s ago: executing program 2 (id=143): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000200)={0x1d, r5}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0xffff, 0xfff1}, {0x1}}}, 0x24}}, 0x0) 2m12.710537652s ago: executing program 2 (id=147): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000103da2909ca2d9c8a0256f5ca00a847961b66fbfeaf2cc6a08d436734f399b6414cd73b5f61338584b23a8b04392e7f7204e0cff6af94c978028938aee4998afcb670ab8c97c5ed2332bb24a060de56719074db70f4dd4ba06b07d982ed59dc1883a5022f80e90896d2b57a0fb86bb7cfa3a55a8570aa679c393f34635de814022aa5a342933f00"/175], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000001480)=ANY=[@ANYBLOB="18000000005396a2c3b48411899a837e0000004e09e745fdffffff181100000c75012af8669a65209ecf1a1e712dcd8154e46fcd7eb6a2c86dcd6408bdaa8399f84f3c8f123bbfa8", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket(0x10, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x200400, 0x0) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000001640)=r0) sendto$inet6(r3, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = syz_io_uring_setup(0x3b, &(0x7f0000000400)={0x0, 0x2, 0x10100, 0x2, 0x2b5}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000002c0)=0x10) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000300), 0x3800) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r10, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$packet(0x11, 0xa, 0x300) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r13}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r11, &(0x7f0000000380)=ANY=[], 0x3a) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r7, r8, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r14, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1, 0x0, 0x26}, 0x0, 0x80002101}) io_uring_enter(r6, 0xd81, 0x0, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 2m12.516690176s ago: executing program 2 (id=151): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x14010, &(0x7f0000001280)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0x11ee, &(0x7f0000003680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) 2m6.106909122s ago: executing program 4 (id=207): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000c080c00bdad01409bfc68ad639a8ace8680210bc28b805508bc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33", 0x89}, {0x0}], 0x2}, 0xff0f000020000080) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x0, @loopback, 0x7}}, 0x0, 0x0, 0x47, 0x0, "09be2271b78506e6dd938d324c415acd403a4480fd1afa34432bcdfa64d957e93efafd27ad06a6f589bb643f167cf0fcd370239aaa93f6ded3c5032c96ead0cdc68474d402ab73e482db7ec1e0a57489"}, 0xd8) bind$inet6(r1, &(0x7f0000000a00)={0xa, 0x4e20, 0x169, @loopback, 0x5}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffff1, @empty, 0x2}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @empty, 0x9f}, 0x1c) socket$netlink(0x10, 0x3, 0x7) 2m5.784187359s ago: executing program 4 (id=210): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, r1) 2m5.670144531s ago: executing program 4 (id=211): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000480)='kmem_cache_free\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@noinit_itable}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") 2m4.896832986s ago: executing program 4 (id=218): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d1) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1']) (async) chdir(&(0x7f0000000300)='./file0\x00') (async) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4}}, @typedef={0x3, 0x0, 0x0, 0x7}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @typedef={0x4, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x0, 0x2e, 0x5f]}}, 0x0, 0x66}, 0x20) (async, rerun: 32) setreuid(0x0, 0xee00) (rerun: 32) r2 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r2, 0x0, 0x0) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000f00)='p', 0x1}], 0x2}, 0x800) 2m4.812292498s ago: executing program 4 (id=219): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)='F', 0x1}, {&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000000540)="54b63be8f18aed59a6c73b9871cb293ef80b2fda92a2ed925c13faa9a985a63aeec025a15937a280a9277e58c87d65f3110000430748598f41f2b87c529556071d224a21c8793a128c179540e6561310a3caea8a4029ed9ab85129629e6b1222949fe98fc03a1c9622a913fecc49", 0x6e}], 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="2067c3353656be00000000000200035dc7b0ba86000a0004dc85597302000051", @ANYRES32=r4], 0x20, 0x2400e044}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000400)={0x8, 0x7, 0x8000, 0x7, 0x81, 0x6, 0x9, 0x3, r4}, &(0x7f00000004c0)=0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000540)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f00000001c0)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x400}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}}], {0x14}}, 0xa4}}, 0x0) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') 2m4.474801994s ago: executing program 4 (id=220): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, 0x1a, 0x10, 0x70bd25, 0x25dfdbff, {0xd}, [@generic="8ff6b68daf80e80e6a5f2835c853b1d02f338e4f6dc471dfa798bdd3fe6e6d2f7035b31d551d8360d105d2e6561e05a8f81c0166db19baafd1a66451", @typed={0x5, 0x143, 0x0, 0x0, @str='\x00'}, @generic="e08801854b5eeb", @typed={0x8, 0xc1, 0x0, 0x0, @ipv4=@local}, @generic="98f2fd631f2a1d2fb2151ea04e0275e04141aa6f59bb4e212f9cd91112859e480ed32bc2701fbd798f8fec117116dc4d02d8a5da2919b6f9482b4b0aa569aaac02633a8d43926087216d7844c46d32a54ff4879d0be07c66313a626da9f069bced68aa10c777fde645e46e9a0e2fc11e72f58095da41877f0790e6979d68e907d7eeac3a541858941b"]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r3, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x4) sendmsg$tipc(r4, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) socket$key(0xf, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = inotify_init1(0x80000) r7 = inotify_add_watch(r6, &(0x7f0000000200)='.\x00', 0x10000a0) r8 = dup(r6) inotify_rm_watch(r8, r7) accept4(r3, 0x0, 0x0, 0x400000000000000) syz_open_dev$tty20(0xc, 0x4, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m4.447759175s ago: executing program 32 (id=220): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xf0, 0x1a, 0x10, 0x70bd25, 0x25dfdbff, {0xd}, [@generic="8ff6b68daf80e80e6a5f2835c853b1d02f338e4f6dc471dfa798bdd3fe6e6d2f7035b31d551d8360d105d2e6561e05a8f81c0166db19baafd1a66451", @typed={0x5, 0x143, 0x0, 0x0, @str='\x00'}, @generic="e08801854b5eeb", @typed={0x8, 0xc1, 0x0, 0x0, @ipv4=@local}, @generic="98f2fd631f2a1d2fb2151ea04e0275e04141aa6f59bb4e212f9cd91112859e480ed32bc2701fbd798f8fec117116dc4d02d8a5da2919b6f9482b4b0aa569aaac02633a8d43926087216d7844c46d32a54ff4879d0be07c66313a626da9f069bced68aa10c777fde645e46e9a0e2fc11e72f58095da41877f0790e6979d68e907d7eeac3a541858941b"]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r3, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x4) sendmsg$tipc(r4, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) socket$key(0xf, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = inotify_init1(0x80000) r7 = inotify_add_watch(r6, &(0x7f0000000200)='.\x00', 0x10000a0) r8 = dup(r6) inotify_rm_watch(r8, r7) accept4(r3, 0x0, 0x0, 0x400000000000000) syz_open_dev$tty20(0xc, 0x4, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m57.457301413s ago: executing program 33 (id=151): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x14010, &(0x7f0000001280)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05cefeb4ee6d5ae1071124b2c2fb684f5c7ac05000000c7880f67e775c748f6381a3e01e7f93330b30b90bbb4d2b697899a16f2df4fa2a8f06ac2c5352ddcae2b83672ef3d9f532e55f4e798924ac6332751e737383f6890d2dcfcbdbd41940a64c7b4374674e7bb6dd0d1b8d3d62f6d77b0282e166e2ce4c353d2d4d315a81146bf46a1508ef0d2ddc7d0b447fe17b85b292d13cea2256a16cab12d75a852bc680da7ea837480feb2e1e0000000000003bc18c52d0351cd285197b0641569048b5b416ba1c570000000000100083794afff0a9eed63b1226b18c4b455ab222d7ae1be52a22e8ec8bf2c0c7d99770415863f50aa18bcb66061a29bc55105f3482ed752f882d224a386b51836c1b437036b677156e22e174ff516dbab0b2cdf52bee43c4ffffffffffffffffd9487b8663a339b98df63b4bf3e97f02d6f1e7e65f968dd90841506355d9ac40f1b434c8a9b5bd91a70c53a5aadbebd9ed9d0a55bd47a967163e0c02753f8895bfbf1b41b5490667c241068d59983ae1d0f03e650f5357425284b76d793e25a2558fa437e38b8200000000630000000000000000000000000000000000000000000000e911000000000066e073c14bb74617079e0b6ecfc830db14244567fd8f4e4e5903eaf983786e28295783f130b95dc37f59a658000e88047db7783ce8a9cba6c255902cfb83946ea3f5f7a8cee911b2b37ae4b01e65ea86d5ea7ae17b2a9bc250c9b8fc9fbc04617939bdd13457954172d18701768f8a461bee740f2d82ae566d2e30a93ad2b201a6d16a93c75a950cc437e7f25d3aadddb8edd028d84490b6bafd636aa4fb482a8a4b3987dafe58e742448c4b36b03790090198145dee533257bb9050554f8cace210a5bc5c768f83e99019f7c00ff9ca679768dbba3f7d21c545c99c2f7688f7030fe37121d625d1f81018feb74c9d48eebdf1702550b097271ab9bd38c62f4b31fd9482c05ba064dfa60bd7fafb3c22dc057e6f9e2a5eb144290afe5369110a71d4b7fc5937a32e213c443f3b9e506b25cf9e2520999b330fc9e86bde8c8ec78f67c0c7f24db0000000", @ANYRES32], 0x1, 0x11ee, &(0x7f0000003680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) 2.424189793s ago: executing program 1 (id=2215): r0 = timerfd_create(0x8, 0x0) read(r0, &(0x7f00000000c0)=""/252, 0xfc) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x38dc}}, './file0\x00'}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x508, 0x258, 0x380, 0xf8, 0xf8, 0x0, 0x498, 0x498, 0x498, 0x498, 0x498, 0x6, 0x0, {[{{@ip={@local, @broadcast, 0xffffff00, 0x0, 'nicvf0\x00', 'hsr0\x00', {}, {}, 0x6, 0x2, 0xc0}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x7}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x800, 0x1, [0x3f, 0xc, 0x3, 0x24, 0x31, 0x1a, 0x3, 0x2a, 0x14, 0x28, 0x2b, 0x1, 0xd, 0x16, 0x20, 0x2], 0x0, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x5}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x7ff, 0x80000000]}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4, 0x7}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'batadv0\x00', 'vlan0\x00', 0x18, 0x5b8e0b56513f38d7, 0x7, 0x7, 0x9, 0x4, {0x2e21}, {0x8}}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xf, 0x1}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x29}, @remote, 0xff000000, 0xff, 'geneve1\x00', 'ipvlan0\x00', {}, {0xff}, 0xc0, 0x1, 0x11}, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x0, 0x4, 0x1, 0x2, 0x1, 0x1], 0x4, 0x2}}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "818a2b0832e0f711c4bebae1e05496ae03990c38ac15fdbb9e5b5a462f94"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x568) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="120000000100000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000200000202020000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x9a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd6000008000641100fe8000000000000000000000000000bbff02000000000000000000000000000100004e22004d90"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES64=0x0], 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYRES64=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000002d4eab02b6e3c5790018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mlockall(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000005c0)='fsi_master_acf_poll_response_busy\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='setgroups\x00') openat$zero(0xffffffffffffff9c, &(0x7f0000000540), 0x2000, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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") r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x0, 0x1}, {0xffffffff}]}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r1, 0x58, &(0x7f0000000300)}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYRESDEC=r6], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 1.910993592s ago: executing program 1 (id=2225): socket(0x10, 0x803, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x44010) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 1.784172485s ago: executing program 1 (id=2229): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x200, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8a}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r8}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xe8}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x10001, 0x0, 0x0, 0x4000000, 0x7, 0x4}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x4}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x10, 0x6, 0x0, 0x0, 0xfffffff9}, {0x0, 0x404, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x800, 0x4, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x9}, {0x0, 0x2000}, {}, {0x0, 0x401, 0x0, 0x0, 0xffffffff}, {0x0, 0x1000, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0xc, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0xffffff1d, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0xff}, {0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x5, 0x1}, {}, {0x1, 0x8, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0xfffffffd, 0x15, 0x0, 0x48510}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {0x0, 0x0, 0x80}, {0x0, 0xfffefffd, 0x0, 0xffffffff}, {0x0, 0x0, 0x4, 0x2}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x6}, {0x5, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xad}, {0x0, 0xfffffffc, 0x0, 0x3ff, 0x40000000}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {0x0, 0x0, 0x1fd}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x5}, {}, {0x0, 0x0, 0x0, 0x4000, 0x0, 0xfb4}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xfdffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x100000, 0x4000004, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x1, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x7, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x40, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x6, 0x0, 0x4}, {0x0, 0x0, 0x2}, {}, {0x0, 0xfffffffd, 0x0, 0xffffffff}, {0x6}, {0x7f, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x2, 0x10000, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x4000000, 0x0, 0x8}, {0x2, 0x0, 0x20000000, 0x0, 0x1}, {0x0, 0xfffffffc, 0x0, 0x2}, {}, {0x0, 0x4, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x9, 0x101}, {0xfffffffb, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x3, 0x80, 0xfffffffc}, {0x10000000, 0x0, 0x0, 0x4, 0x4}, {0x0, 0x2e9c, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8, 0x1, 0x6}, {}, {0x0, 0x0, 0x0, 0x1000000}, {0x0, 0xf}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x80, 0xd70, 0x0, 0xfffffffc}, {0x0, 0x8000, 0x0, 0xfffffff2}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc, 0x2}, {0x0, 0x80000000, 0x0, 0x7dff800}, {}, {}, {0x0, 0x0, 0x0, 0x9}], [{}, {}, {0x0, 0x1}, {}, {}, {0x4}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {0x0, 0x1}, {}, {}, {}, {0x2, 0x1}, {0x2, 0x1}, {}, {}, {}, {0x4}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {0x4}, {0x7}, {0x2}, {}, {}, {}, {}, {0x3}, {0x5}, {}, {0x0, 0x1}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {0x4}, {0x2}, {}, {}, {0x4}, {0x3}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f00000000000000000000000000002eb8d32db25e6c81416f"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) (fail_nth: 6) r10 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r10, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) 1.701404706s ago: executing program 5 (id=2230): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r3, 0x0, 0x4ab}, 0x18) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r1) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) stat(&(0x7f0000001c40)='./file0\x00', 0x0) 1.148935208s ago: executing program 3 (id=2232): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f00000003c0)={0x5, "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"}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'macvtap0\x00', 0x0}) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r7, @ANYBLOB="140001"], 0x34}}, 0x0) 1.099105608s ago: executing program 5 (id=2233): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) 1.02335557s ago: executing program 3 (id=2235): r0 = timerfd_create(0x8, 0x0) read(r0, &(0x7f00000000c0)=""/252, 0xfc) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x38dc}}, './file0\x00'}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x508, 0x258, 0x380, 0xf8, 0xf8, 0x0, 0x498, 0x498, 0x498, 0x498, 0x498, 0x6, 0x0, {[{{@ip={@local, @broadcast, 0xffffff00, 0x0, 'nicvf0\x00', 'hsr0\x00', {}, {}, 0x6, 0x2, 0xc0}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x7}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x800, 0x1, [0x3f, 0xc, 0x3, 0x24, 0x31, 0x1a, 0x3, 0x2a, 0x14, 0x28, 0x2b, 0x1, 0xd, 0x16, 0x20, 0x2], 0x0, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x5}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x7ff, 0x80000000]}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4, 0x7}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'batadv0\x00', 'vlan0\x00', 0x18, 0x5b8e0b56513f38d7, 0x7, 0x7, 0x9, 0x4, {0x2e21}, {0x8}}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xf, 0x1}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x29}, @remote, 0xff000000, 0xff, 'geneve1\x00', 'ipvlan0\x00', {}, {0xff}, 0xc0, 0x1, 0x11}, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x0, 0x4, 0x1, 0x2, 0x1, 0x1], 0x4, 0x2}}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "818a2b0832e0f711c4bebae1e05496ae03990c38ac15fdbb9e5b5a462f94"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x568) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="120000000100000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000200000202020000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x9a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd6000008000641100fe8000000000000000000000000000bbff02000000000000000000000000000100004e22004d90"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES64=0x0], 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYRES64=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000002d4eab02b6e3c5790018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mlockall(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000005c0)='fsi_master_acf_poll_response_busy\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='setgroups\x00') openat$zero(0xffffffffffffff9c, &(0x7f0000000540), 0x2000, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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") r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x0, 0x1}, {0xffffffff}]}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r1, 0x58, &(0x7f0000000300)}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYRESDEC=r6], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 999.47675ms ago: executing program 6 (id=2238): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r0 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x58) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, 0x0) sendmsg$inet_sctp(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000400)={0x8, 0x7, 0x8000, 0x7, 0x81, 0x6, 0x9, 0x3, r3}, &(0x7f00000004c0)=0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') 969.991201ms ago: executing program 5 (id=2239): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x3, {@ip4=@loopback}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000c40)=ANY=[@ANYBLOB="0c010000", @ANYRES16=0x0, @ANYBLOB="08002cbd7000fddbdf251500000044000180140002006e723000000000000000000000000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="140002007369743000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="58000180080003000300000008000300010000001400020076657468315f746f5f7465616d00000008000100", @ANYRES32=0x0, @ANYBLOB="14000200726f7365300000000000000000000000140002006970766c616e310000000000000000001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000300050000004800018014000200626f6e6430000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1609831971058e402697", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="0800030001000000"], 0x10c}, 0x1, 0x0, 0x0, 0x24000010}, 0x28880) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x1f, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000810a000000000000060000f0181100", @ANYRESHEX=0x0, @ANYBLOB="0000000000000000b702000014002300b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000cd9100001020000018470000fbffffff0000000000000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa10000000000000701000020de11f3bfa400030000000007230000", @ANYRES64=0x0, @ANYBLOB="0000000000000000b7231affcb79a1a40500000800000085000000a5710000bf91000000000000b702000a010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x8001, 0x47, &(0x7f00000007c0)=""/71, 0x40f00, 0x5a, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x6, 0xfff, 0xb08}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080)) 938.950062ms ago: executing program 1 (id=2241): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0xb) syz_usb_disconnect(0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000c00)="d800000018009903e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901223fc6ab007f6f94007100a007a290457f0189b316277ce06bf75c10dde13fb206b33b174e54980ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1000000730d7a5025ccca262f3d40fad956d2b6d5a3a6692ac217e11382e767e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6cc452a92307f00000e970300000000", 0xd8}], 0x1}, 0x20048812) 934.385521ms ago: executing program 6 (id=2242): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e24, @local}}, 0x0, 0x20000000005, 0x2e, 0x0, "00000000000000000000000000000000000000000000000000000000000000000000007fffffff00000000000000230000000900"}, 0xd8) sendto$inet(r1, 0x0, 0x0, 0x240087f9, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r2 = gettid() rt_sigsuspend(&(0x7f0000000040)={[0x3]}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r4 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0xc8, 0x0, 0x4, 0x200, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095", @ANYRES16=r3, @ANYRES8=r5, @ANYRESOCT=r4], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200000000000007c, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x33, '\x00', 0x0, @fallback=0x6, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff2500000010"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r8}, 0x10) write$cgroup_subtree(r7, &(0x7f00000005c0)=ANY=[], 0xfdef) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x18) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r11, 0x2405, r7) tkill(r2, 0x7) r12 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r12, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) syz_io_uring_setup(0x495, &(0x7f0000000a40)={0x0, 0x4661, 0x80, 0x0, 0x20b}, &(0x7f00000000c0)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 704.808336ms ago: executing program 5 (id=2244): r0 = perf_event_open(&(0x7f00000004c0)={0x3, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x505b8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5871, 0x2, @perf_config_ext={0x6, 0x400000008}, 0x4c58, 0x5, 0x0, 0x8, 0x7, 0x20005, 0x10, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x20010, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) (async, rerun: 64) mlock2(&(0x7f0000659000/0x2000)=nil, 0x2000, 0x1) (rerun: 64) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) (async, rerun: 64) perf_event_open(&(0x7f00000001c0)={0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000240)='fib6_table_lookup\x00', r2}, 0x9) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b405000000000000711077000000000006000000000000009500000000000000b4c43502c53c23dd4d9cb8945d35bc94af7ac4674f9c8f41710500005a985aaac94fb99c489fb53055fb7bc7b43affa145bbc0273c475f89cfa4221b741db88ddfc80f0ad8b902fc"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r4 = socket(0x1, 0x2, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000180), &(0x7f00000000c0)=@tcp=r4}, 0x20) r6 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r6, 0x110, 0x4, 0x0, 0x4) (async, rerun: 64) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) (async, rerun: 64) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x2) (async) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8, 0xffffffffffffffff}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r8, @ANYRES32=r9], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='rxrpc_rtt_tx\x00', r10, 0x0, 0x84}, 0x18) readv(r7, &(0x7f0000000000)=[{&(0x7f0000000580)=""/244, 0xf4}], 0x1) ioctl$EXT4_IOC_GETSTATE(r9, 0x40046629, &(0x7f0000000140)) (async, rerun: 64) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) (rerun: 64) 644.654098ms ago: executing program 5 (id=2246): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f00000006c0)={0x102102180, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) 642.324767ms ago: executing program 5 (id=2247): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000340)="$eJzs3U9rK1UUAPAz+TOJukgWrkRwQBeuHu+9rZsUeQ/ErnxkoS60+FqQJggtFKri2JVbNy78DILgB3HjNxDcCu6sUBiZyaRJ2pg2palof79Fe3vnnLlnboZ2WujJx6+O959nsXfy5a/R7SbRGMQgTpPoRyOmvo4Fg28DAPgvOy2K+KOYWCcviYju5soCADboej//W7PhT3dSFgCwQc/e/+Ddre3tJ+9lWTeejr85Gpa/2ZefJ8e39uLTGMVuPIxenEVUDwrtqJ4WyuHToijyVlbqxxvj/GhYZo4/+rk+/9bv9R8LSv3q4/nTRpX/zvaTR9nEXH5e1vFivf6gXP9x9OLl8+SF/MdL8mOYxpuvz9X/IHrxyyfxWYzieVXELP+rR1n2dvHdn198WJZX5if50bBTxc0UzTt8WQAAAAAAAAAAAAAAAAAAAAAA+J97UPfO6UTVv6ecqvvvNM/KL9qRTfUX+/NM8qetfRb6AxVFkVftcib9dR5mWVbUgbP8VrzSmm8sCAAAAAAAAAAAAAAAAAAAAPfX4fHn+zuj0e7BrQym3QBaEfHXs4ibnmcwN/NarA7u1GvujEaNergY05qfieY0JolYWUZ5Ebe0LVcNXrhUcz344cd1T9i9Oqa9fK3D4+ZNX6/84sz07trfSZbvYSemM9160e/TiFlMGtdcPf2nQ0Wsc/ulSw/11t6N9KVqkK+IiWRVYW/9Ntm5eia5eBVptatL09v1YC79wr1xrfs5upP0y98rEt06AAAAAAAAAAAAAAAAAABgo2b//bvk4MnK1EbR2VhZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCnZu//v8Ygj4h2fYIrgtM4OPyXLxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB74O8AAAD//0aWVl0=") setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x1b3a, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 636.152757ms ago: executing program 3 (id=2248): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) 598.767298ms ago: executing program 0 (id=2250): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) 579.560569ms ago: executing program 0 (id=2251): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) readlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x0) 568.187389ms ago: executing program 6 (id=2252): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r0 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x58) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, 0x0) sendmsg$inet_sctp(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000400)={0x8, 0x7, 0x8000, 0x7, 0x81, 0x6, 0x9, 0x3, r3}, &(0x7f00000004c0)=0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') 554.297049ms ago: executing program 6 (id=2253): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000a00)=@file={0x1, './file0\x00'}, 0x6e) statfs(0x0, 0x0) 481.96735ms ago: executing program 6 (id=2254): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x3, {@ip4=@loopback}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000c40)=ANY=[@ANYBLOB="0c010000", @ANYRES16=0x0, @ANYBLOB="08002cbd7000fddbdf251500000044000180140002006e723000000000000000000000000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="140002007369743000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="58000180080003000300000008000300010000001400020076657468315f746f5f7465616d00000008000100", @ANYRES32=0x0, @ANYBLOB="14000200726f7365300000000000000000000000140002006970766c616e310000000000000000001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000300050000004800018014000200626f6e6430000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1609831971058e402697", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="0800030001000000"], 0x10c}, 0x1, 0x0, 0x0, 0x24000010}, 0x28880) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x1f, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000810a000000000000060000f0181100", @ANYRESHEX=0x0, @ANYBLOB="0000000000000000b702000014002300b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000cd9100001020000018470000fbffffff0000000000000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa10000000000000701000020de11f3bfa400030000000007230000", @ANYRES64=0x0, @ANYBLOB="0000000000000000b7231affcb79a1a40500000800000085000000a5710000bf91000000000000b702000a010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x8001, 0x47, &(0x7f00000007c0)=""/71, 0x40f00, 0x5a, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x6, 0xfff, 0xb08}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080)) 481.15473ms ago: executing program 0 (id=2255): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000001c40), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, &(0x7f0000000580)=0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="911023000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x100000004, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r5) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000540)={0x0, 0xa1ff, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x64, r6, 0x100, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffff9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x0, &(0x7f0000000080)={[{@barrier_val={'barrier', 0x3d, 0x7}}]}, 0xc1, 0x7b7, &(0x7f00000007c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006111040000000000731a0eff00000000950000f7ff000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x23}, 0x22) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3801000010000100fcffff0700000000fc01000000000000000000000000000100000000000000000000000000000000000000002000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e0000002000000000000000000000000100000046c000000fe8000000000000000000000000000bb00000000020000000080000000000000000000000000000000004ef3000000000000000000000000487d00000800000000000000000000100000000000000000050000000000000004000000000000000d000000000000000a00000000000000000000000004000000000000fcffffff000000000a000106000000000000000048000300"], 0x138}, 0x1, 0x0, 0x0, 0x50}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='kmem_cache_free\x00', r7, 0x0, 0x7}, 0x18) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000004800010026bd7000fedbdf250a001100", @ANYRES32=0x0, @ANYBLOB="04020000140001"], 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x54) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c4000002400000429bd7000ffdbdf25040000000600048f4b000010"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 404.671452ms ago: executing program 3 (id=2257): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7e) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x19, 0x4, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001b00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r6}, 0x10) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000005800)={0x18, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x0, 0x100804, 0x0, 0xa, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x4}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r9, 0x0, 0xfffffffffffffffe}, 0x18) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)=ANY=[], 0x28) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014400000000c0a01011d000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x0, 0x121428, 0x7fff, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xe}) 280.223294ms ago: executing program 3 (id=2258): r0 = timerfd_create(0x8, 0x0) read(r0, &(0x7f00000000c0)=""/252, 0xfc) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x38dc}}, './file0\x00'}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x508, 0x258, 0x380, 0xf8, 0xf8, 0x0, 0x498, 0x498, 0x498, 0x498, 0x498, 0x6, 0x0, {[{{@ip={@local, @broadcast, 0xffffff00, 0x0, 'nicvf0\x00', 'hsr0\x00', {}, {}, 0x6, 0x2, 0xc0}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x7}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x800, 0x1, [0x3f, 0xc, 0x3, 0x24, 0x31, 0x1a, 0x3, 0x2a, 0x14, 0x28, 0x2b, 0x1, 0xd, 0x16, 0x20, 0x2], 0x0, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x5}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x7ff, 0x80000000]}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4, 0x7}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'batadv0\x00', 'vlan0\x00', 0x18, 0x5b8e0b56513f38d7, 0x7, 0x7, 0x9, 0x4, {0x2e21}, {0x8}}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xf, 0x1}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x29}, @remote, 0xff000000, 0xff, 'geneve1\x00', 'ipvlan0\x00', {}, {0xff}, 0xc0, 0x1, 0x11}, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x0, 0x4, 0x1, 0x2, 0x1, 0x1], 0x4, 0x2}}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "818a2b0832e0f711c4bebae1e05496ae03990c38ac15fdbb9e5b5a462f94"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x568) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="120000000100000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000200000202020000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x9a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd6000008000641100fe8000000000000000000000000000bbff02000000000000000000000000000100004e22004d90"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES64=0x0], 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYRES64=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000002d4eab02b6e3c5790018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mlockall(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000005c0)='fsi_master_acf_poll_response_busy\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='setgroups\x00') openat$zero(0xffffffffffffff9c, &(0x7f0000000540), 0x2000, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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") r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x0, 0x1}, {0xffffffff}]}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r1, 0x58, &(0x7f0000000300)}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYRESDEC=r6], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 154.339397ms ago: executing program 3 (id=2259): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r1, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 144.935007ms ago: executing program 0 (id=2260): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0xc, &(0x7f0000000300)=ANY=[@ANYRES8=r0], &(0x7f00000001c0)='GPL\x00', 0xc9, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socket$kcm(0x29, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x48) socket(0x6, 0x2, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) io_uring_setup(0x5b56, &(0x7f0000000040)={0x0, 0x2df0, 0x8000, 0x20000000, 0x2b2}) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x80089203, &(0x7f0000000a40)={0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r4, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 94.035448ms ago: executing program 0 (id=2261): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) getgid() (fail_nth: 6) 18.777149ms ago: executing program 0 (id=2262): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e24, @local}}, 0x0, 0x20000000005, 0x2e, 0x0, "00000000000000000000000000000000000000000000000000000000000000000000007fffffff00000000000000230000000900"}, 0xd8) sendto$inet(r1, 0x0, 0x0, 0x240087f9, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r2 = gettid() rt_sigsuspend(&(0x7f0000000040)={[0x3]}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r4 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0xc8, 0x0, 0x4, 0x200, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095", @ANYRES16=r3, @ANYRES8=r5, @ANYRESOCT=r4], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200000000000007c, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x33, '\x00', 0x0, @fallback=0x6, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff2500000010"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r8}, 0x10) write$cgroup_subtree(r7, &(0x7f00000005c0)=ANY=[], 0xfdef) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x18) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r11, 0x2405, r7) tkill(r2, 0x7) r12 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r12, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) syz_io_uring_setup(0x495, &(0x7f0000000a40)={0x0, 0x4661, 0x80, 0x0, 0x20b}, &(0x7f00000000c0)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 13.78382ms ago: executing program 1 (id=2263): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r0 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x58) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, 0x0) sendmsg$inet_sctp(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000400)={0x8, 0x7, 0x8000, 0x7, 0x81, 0x6, 0x9, 0x3, r3}, &(0x7f00000004c0)=0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') 0s ago: executing program 1 (id=2264): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) socket(0xa, 0x3, 0x3a) (async) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x8}, 0xc) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='net_prio.prioidx\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_access(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x4e) (async) write$selinux_access(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x4e) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb40000000000004, 0x30046, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x7, 0x5}, 0x0, 0x0, r4, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYRES64=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r8 = socket$netlink(0x10, 0x3, 0x0) preadv(r7, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000380)=""/183, 0xb7}], 0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r6}, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010000104010000003198d47900000000", @ANYRES32=0x0, @ANYBLOB="ffef000040100000140012800b0001006970366772650000040002801400030069703667726530"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000180)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x4}}) (async) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000180)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x4}}) close(r4) kernel console output (not intermixed with test programs): 58'. [ 130.805584][ T8239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.818115][ T8239] ext4 filesystem being mounted at /315/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.872063][ T4618] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.979873][ T8245] netlink: 'syz.5.1560': attribute type 1 has an invalid length. [ 131.010503][ T8245] 8021q: adding VLAN 0 to HW filter on device bond16 [ 131.038190][ T8245] 8021q: adding VLAN 0 to HW filter on device batadv12 [ 131.054688][ T8245] bond16: (slave batadv12): making interface the new active one [ 131.073019][ T8245] bond16: (slave batadv12): Enslaving as an active interface with an up link [ 131.423815][ T8257] loop5: detected capacity change from 0 to 8192 [ 131.444110][ T8257] netlink: 'syz.5.1565': attribute type 58 has an invalid length. [ 131.451978][ T8257] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1565'. [ 131.648298][ T8260] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1565'. [ 131.741866][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.846318][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.936567][ T8275] netlink: 'syz.5.1571': attribute type 1 has an invalid length. [ 131.954760][ T8275] 8021q: adding VLAN 0 to HW filter on device bond17 [ 132.017713][ T8279] netlink: 'syz.6.1573': attribute type 1 has an invalid length. [ 132.053750][ T8279] 8021q: adding VLAN 0 to HW filter on device bond12 [ 132.067407][ T8279] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 132.076333][ T8279] bond12: (slave batadv5): making interface the new active one [ 132.090405][ T8279] bond12: (slave batadv5): Enslaving as an active interface with an up link [ 132.104429][ T8267] IPv6: Can't replace route, no match found [ 132.190109][ T8291] loop3: detected capacity change from 0 to 512 [ 132.207212][ T8290] loop6: detected capacity change from 0 to 128 [ 132.227233][ T8291] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.266830][ T8290] bio_check_eod: 98 callbacks suppressed [ 132.266846][ T8290] syz.6.1578: attempt to access beyond end of device [ 132.266846][ T8290] loop6: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 132.289395][ T8291] ext4 filesystem being mounted at /317/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.329884][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.341381][ T8296] syz.6.1578: attempt to access beyond end of device [ 132.341381][ T8296] loop6: rw=2049, sector=170, nr_sectors = 16 limit=128 [ 132.388230][ T8290] syz.6.1578: attempt to access beyond end of device [ 132.388230][ T8290] loop6: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 132.401750][ T8290] buffer_io_error: 45 callbacks suppressed [ 132.401765][ T8290] Buffer I/O error on dev loop6, logical block 80, lost async page write [ 132.423792][ T8290] syz.6.1578: attempt to access beyond end of device [ 132.423792][ T8290] loop6: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 132.427787][ T8296] syz.6.1578: attempt to access beyond end of device [ 132.427787][ T8296] loop6: rw=2049, sector=202, nr_sectors = 6 limit=128 [ 132.444254][ T8290] syz.6.1578: attempt to access beyond end of device [ 132.444254][ T8290] loop6: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 132.464128][ T8290] Buffer I/O error on dev loop6, logical block 84, lost async page write [ 132.469546][ T8296] syz.6.1578: attempt to access beyond end of device [ 132.469546][ T8296] loop6: rw=2049, sector=206, nr_sectors = 2 limit=128 [ 132.485947][ T8296] Buffer I/O error on dev loop6, logical block 103, lost async page write [ 132.510130][ T8290] syz.6.1578: attempt to access beyond end of device [ 132.510130][ T8290] loop6: rw=2049, sector=234, nr_sectors = 8 limit=128 [ 132.527347][ T8306] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1584'. [ 132.536385][ T8306] IPVS: Error joining to the multicast group [ 132.544771][ T8306] netlink: 'syz.5.1584': attribute type 6 has an invalid length. [ 132.587274][ T8312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1586'. [ 132.603741][ T8312] IPVS: Error joining to the multicast group [ 132.604427][ T8296] syz.6.1578: attempt to access beyond end of device [ 132.604427][ T8296] loop6: rw=2049, sector=208, nr_sectors = 2 limit=128 [ 132.623272][ T8296] Buffer I/O error on dev loop6, logical block 104, lost async page write [ 132.657999][ T8312] netlink: 'syz.3.1586': attribute type 6 has an invalid length. [ 132.664488][ T8314] netlink: 'syz.5.1588': attribute type 1 has an invalid length. [ 132.677780][ T8290] syz.6.1578: attempt to access beyond end of device [ 132.677780][ T8290] loop6: rw=2049, sector=240, nr_sectors = 2 limit=128 [ 132.691187][ T8314] 8021q: adding VLAN 0 to HW filter on device bond18 [ 132.691386][ T8290] Buffer I/O error on dev loop6, logical block 120, lost async page write [ 132.722944][ T8290] Buffer I/O error on dev loop6, logical block 124, lost async page write [ 132.734420][ T8290] Buffer I/O error on dev loop6, logical block 76, lost async page write [ 132.743822][ T8296] Buffer I/O error on dev loop6, logical block 99, lost async page write [ 132.752595][ T8296] Buffer I/O error on dev loop6, logical block 100, lost async page write [ 132.766187][ T8296] Buffer I/O error on dev loop6, logical block 111, lost async page write [ 132.768281][ T8321] netlink: 'syz.0.1589': attribute type 1 has an invalid length. [ 132.831814][ T8321] 8021q: adding VLAN 0 to HW filter on device bond19 [ 132.881760][ T8321] 8021q: adding VLAN 0 to HW filter on device batadv10 [ 132.890996][ T8321] bond19: (slave batadv10): making interface the new active one [ 132.900232][ T8321] bond19: (slave batadv10): Enslaving as an active interface with an up link [ 132.910104][ T8332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1595'. [ 132.940561][ T8332] IPVS: Error joining to the multicast group [ 132.992679][ T8338] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.020311][ T8338] FAT-fs (loop11): unable to read boot sector [ 133.064958][ T29] kauditd_printk_skb: 149 callbacks suppressed [ 133.064971][ T29] audit: type=1326 audit(1757638985.013:7117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8336 comm="syz.0.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76bb89eba9 code=0x7ffc0000 [ 133.110602][ T29] audit: type=1326 audit(1757638985.053:7118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8336 comm="syz.0.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76bb89eba9 code=0x7ffc0000 [ 133.151906][ T29] audit: type=1326 audit(1757638985.103:7119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8344 comm="syz.6.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e492feba9 code=0x7ffc0000 [ 133.194003][ T8351] loop1: detected capacity change from 0 to 128 [ 133.247985][ T29] audit: type=1326 audit(1757638985.103:7120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8344 comm="syz.6.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f3e492feba9 code=0x7ffc0000 [ 133.271396][ T29] audit: type=1326 audit(1757638985.103:7121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8344 comm="syz.6.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e492feba9 code=0x7ffc0000 [ 133.294768][ T29] audit: type=1326 audit(1757638985.103:7122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8344 comm="syz.6.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e492feba9 code=0x7ffc0000 [ 133.318238][ T29] audit: type=1326 audit(1757638985.103:7123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8344 comm="syz.6.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3e492feba9 code=0x7ffc0000 [ 133.341550][ T29] audit: type=1326 audit(1757638985.103:7124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8344 comm="syz.6.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e492feba9 code=0x7ffc0000 [ 133.365020][ T29] audit: type=1326 audit(1757638985.103:7125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8344 comm="syz.6.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3e492feba9 code=0x7ffc0000 [ 133.388324][ T29] audit: type=1326 audit(1757638985.103:7126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8344 comm="syz.6.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e492feba9 code=0x7ffc0000 [ 133.611828][ T8369] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1609'. [ 133.674059][ T8369] IPVS: Error joining to the multicast group [ 133.924410][ T8386] loop6: detected capacity change from 0 to 8192 [ 133.941215][ T8386] netlink: 'syz.6.1616': attribute type 58 has an invalid length. [ 133.949047][ T8386] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1616'. [ 134.022057][ T8399] FAULT_INJECTION: forcing a failure. [ 134.022057][ T8399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.035194][ T8399] CPU: 0 UID: 0 PID: 8399 Comm: syz.1.1621 Not tainted syzkaller #0 PREEMPT(voluntary) [ 134.035220][ T8399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 134.035230][ T8399] Call Trace: [ 134.035236][ T8399] [ 134.035242][ T8399] __dump_stack+0x1d/0x30 [ 134.035340][ T8399] dump_stack_lvl+0xe8/0x140 [ 134.035410][ T8399] dump_stack+0x15/0x1b [ 134.035427][ T8399] should_fail_ex+0x265/0x280 [ 134.035451][ T8399] should_fail+0xb/0x20 [ 134.035467][ T8399] should_fail_usercopy+0x1a/0x20 [ 134.035552][ T8399] _copy_from_user+0x1c/0xb0 [ 134.035617][ T8399] ___sys_sendmsg+0xc1/0x1d0 [ 134.035652][ T8399] __x64_sys_sendmsg+0xd4/0x160 [ 134.035675][ T8399] x64_sys_call+0x191e/0x2ff0 [ 134.035692][ T8399] do_syscall_64+0xd2/0x200 [ 134.035747][ T8399] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 134.035772][ T8399] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 134.035795][ T8399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.035874][ T8399] RIP: 0033:0x7f90958eeba9 [ 134.035890][ T8399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.035906][ T8399] RSP: 002b:00007f909434f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.035922][ T8399] RAX: ffffffffffffffda RBX: 00007f9095b35fa0 RCX: 00007f90958eeba9 [ 134.035933][ T8399] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 134.035943][ T8399] RBP: 00007f909434f090 R08: 0000000000000000 R09: 0000000000000000 [ 134.035954][ T8399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.035964][ T8399] R13: 00007f9095b36038 R14: 00007f9095b35fa0 R15: 00007ffc787e89d8 [ 134.036048][ T8399] [ 134.252908][ T8407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1624'. [ 134.265278][ T8407] IPVS: Error joining to the multicast group [ 134.330436][ T8413] loop5: detected capacity change from 0 to 128 [ 134.555130][ T8427] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 134.576375][ T8427] FAT-fs (loop1): unable to read boot sector [ 134.682882][ T8433] 8021q: adding VLAN 0 to HW filter on device bond13 [ 134.756669][ T8433] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 134.804669][ T8433] bond13: (slave batadv6): making interface the new active one [ 134.860296][ T8433] bond13: (slave batadv6): Enslaving as an active interface with an up link [ 134.957299][ T8441] __nla_validate_parse: 1 callbacks suppressed [ 134.957313][ T8441] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1635'. [ 135.153855][ T8455] loop5: detected capacity change from 0 to 8192 [ 135.165410][ T8464] loop1: detected capacity change from 0 to 512 [ 135.181961][ T8464] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 135.204441][ T8466] loop6: detected capacity change from 0 to 128 [ 135.317363][ T8464] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.1645: corrupted in-inode xattr: overlapping e_value [ 135.370662][ T8470] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1641'. [ 135.380535][ T8464] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1645: couldn't read orphan inode 15 (err -117) [ 135.411249][ T8464] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.476006][ T8473] validate_nla: 1 callbacks suppressed [ 135.476020][ T8473] netlink: 'syz.6.1647': attribute type 1 has an invalid length. [ 135.524345][ T8473] 8021q: adding VLAN 0 to HW filter on device bond14 [ 135.547388][ T8463] ./file0: Can't lookup blockdev [ 135.639626][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.918518][ T8501] netlink: 'syz.6.1660': attribute type 1 has an invalid length. [ 135.940989][ T8501] 8021q: adding VLAN 0 to HW filter on device bond15 [ 135.999912][ T8510] loop6: detected capacity change from 0 to 764 [ 136.119464][ T8519] FAULT_INJECTION: forcing a failure. [ 136.119464][ T8519] name failslab, interval 1, probability 0, space 0, times 0 [ 136.132111][ T8519] CPU: 0 UID: 0 PID: 8519 Comm: syz.1.1666 Not tainted syzkaller #0 PREEMPT(voluntary) [ 136.132135][ T8519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 136.132145][ T8519] Call Trace: [ 136.132152][ T8519] [ 136.132159][ T8519] __dump_stack+0x1d/0x30 [ 136.132176][ T8519] dump_stack_lvl+0xe8/0x140 [ 136.132190][ T8519] dump_stack+0x15/0x1b [ 136.132202][ T8519] should_fail_ex+0x265/0x280 [ 136.132221][ T8519] ? xfrm_policy_inexact_insert_node+0x62f/0x6d0 [ 136.132247][ T8519] should_failslab+0x8c/0xb0 [ 136.132271][ T8519] __kmalloc_cache_noprof+0x4c/0x320 [ 136.132294][ T8519] xfrm_policy_inexact_insert_node+0x62f/0x6d0 [ 136.132319][ T8519] ? __kmalloc_cache_noprof+0x189/0x320 [ 136.132341][ T8519] ? xfrm_policy_inexact_alloc_bin+0x8ca/0x9d0 [ 136.132366][ T8519] xfrm_policy_inexact_alloc_chain+0x3ef/0x670 [ 136.132392][ T8519] xfrm_policy_insert+0xef/0x790 [ 136.132413][ T8519] xfrm_add_policy+0x1aa/0x450 [ 136.132434][ T8519] xfrm_user_rcv_msg+0x563/0x660 [ 136.132453][ T8519] ? __kfree_skb+0x109/0x150 [ 136.132470][ T8519] ? nlmon_xmit+0x4f/0x60 [ 136.132491][ T8519] ? consume_skb+0x49/0x150 [ 136.132516][ T8519] netlink_rcv_skb+0x123/0x220 [ 136.132535][ T8519] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 136.132558][ T8519] xfrm_netlink_rcv+0x48/0x60 [ 136.132576][ T8519] netlink_unicast+0x5bd/0x690 [ 136.132594][ T8519] netlink_sendmsg+0x58b/0x6b0 [ 136.132613][ T8519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.132632][ T8519] __sock_sendmsg+0x142/0x180 [ 136.132656][ T8519] ____sys_sendmsg+0x31e/0x4e0 [ 136.132677][ T8519] ___sys_sendmsg+0x17b/0x1d0 [ 136.132704][ T8519] __x64_sys_sendmsg+0xd4/0x160 [ 136.132726][ T8519] x64_sys_call+0x191e/0x2ff0 [ 136.132742][ T8519] do_syscall_64+0xd2/0x200 [ 136.132765][ T8519] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 136.132784][ T8519] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 136.132805][ T8519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.132820][ T8519] RIP: 0033:0x7f90958eeba9 [ 136.132833][ T8519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.132846][ T8519] RSP: 002b:00007f909434f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.132861][ T8519] RAX: ffffffffffffffda RBX: 00007f9095b35fa0 RCX: 00007f90958eeba9 [ 136.132871][ T8519] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 136.132880][ T8519] RBP: 00007f909434f090 R08: 0000000000000000 R09: 0000000000000000 [ 136.132890][ T8519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.132899][ T8519] R13: 00007f9095b36038 R14: 00007f9095b35fa0 R15: 00007ffc787e89d8 [ 136.132912][ T8519] [ 136.534857][ T8543] loop6: detected capacity change from 0 to 512 [ 136.561768][ T8543] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.576004][ T8548] loop3: detected capacity change from 0 to 256 [ 136.582503][ T8543] ext4 filesystem being mounted at /263/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.761949][ T8552] loop5: detected capacity change from 0 to 512 [ 136.840275][ T8553] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 136.849241][ T8552] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.861773][ T8552] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.927115][ T4618] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.027484][ T8562] sd 0:0:1:0: device reset [ 137.139994][ T8565] loop6: detected capacity change from 0 to 2048 [ 137.191927][ T8565] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.217509][ T8565] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 137.257402][ T8565] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 137.269901][ T8565] EXT4-fs (loop6): This should not happen!! Data will be lost [ 137.269901][ T8565] [ 137.279540][ T8565] EXT4-fs (loop6): Total free blocks count 0 [ 137.285709][ T8565] EXT4-fs (loop6): Free/Dirty block details [ 137.291614][ T8565] EXT4-fs (loop6): free_blocks=66060288 [ 137.297149][ T8565] EXT4-fs (loop6): dirty_blocks=48 [ 137.302259][ T8565] EXT4-fs (loop6): Block reservation details [ 137.308285][ T8565] EXT4-fs (loop6): i_reserved_data_blocks=3 [ 137.599887][ T4618] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.738637][ T8598] gretap0: left allmulticast mode [ 137.743786][ T8598] gretap0: left promiscuous mode [ 137.748841][ T8598] bridge0: port 3(gretap0) entered disabled state [ 137.814790][ T8598] bridge_slave_0: left allmulticast mode [ 137.820573][ T8598] bridge_slave_0: left promiscuous mode [ 137.826335][ T8598] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.848327][ T8598] bridge_slave_1: left allmulticast mode [ 137.854159][ T8598] bridge_slave_1: left promiscuous mode [ 137.859913][ T8598] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.883518][ T8598] bond0: (slave bond_slave_0): Releasing backup interface [ 137.910105][ T8598] bond0: (slave bond_slave_1): Releasing backup interface [ 137.916075][ T4287] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.946235][ T8598] team0: Port device team_slave_0 removed [ 137.955383][ T8598] team0: Port device team_slave_1 removed [ 137.970765][ T8598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.978298][ T8598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.987558][ T8598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.995098][ T8598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.021201][ T8598] bond9: (slave batadv2): Releasing active interface [ 138.031157][ T8598] bond10: (slave batadv3): Releasing active interface [ 138.039473][ T8610] loop5: detected capacity change from 0 to 512 [ 138.046325][ T8598] bond11: (slave batadv4): Releasing active interface [ 138.051907][ T8610] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 138.062906][ T8610] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.1697: corrupted in-inode xattr: overlapping e_value [ 138.077120][ T8610] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1697: couldn't read orphan inode 15 (err -117) [ 138.077215][ T8598] bond12: (slave batadv6): Releasing active interface [ 138.089597][ T8610] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.117738][ T8598] bond14: (slave batadv7): Releasing active interface [ 138.131136][ T8610] ./file0: Can't lookup blockdev [ 138.136860][ T8598] bond17: (slave batadv9): Releasing active interface [ 138.142860][ T8605] IPv6: Can't replace route, no match found [ 138.153851][ T8598] bond19: (slave batadv10): Releasing active interface [ 138.212904][ T29] kauditd_printk_skb: 236 callbacks suppressed [ 138.212933][ T29] audit: type=1326 audit(1757639246.162:7363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8616 comm="syz.1.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90958eeba9 code=0x7ffc0000 [ 138.242603][ T29] audit: type=1326 audit(1757639246.182:7364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8616 comm="syz.1.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f90958eeba9 code=0x7ffc0000 [ 138.266042][ T29] audit: type=1326 audit(1757639246.182:7365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8616 comm="syz.1.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f90958eebe3 code=0x7ffc0000 [ 138.337925][ T8617] loop1: detected capacity change from 0 to 2048 [ 138.357788][ T29] audit: type=1326 audit(1757639246.222:7366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8616 comm="syz.1.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f90958ed65f code=0x7ffc0000 [ 138.381140][ T29] audit: type=1326 audit(1757639246.222:7367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8616 comm="syz.1.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f90958eec37 code=0x7ffc0000 [ 138.404461][ T29] audit: type=1326 audit(1757639246.282:7368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8616 comm="syz.1.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f90958ed510 code=0x7ffc0000 [ 138.421111][ T8617] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.428024][ T29] audit: type=1326 audit(1757639246.282:7369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8616 comm="syz.1.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f90958ee7ab code=0x7ffc0000 [ 138.455195][ T8617] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 138.463571][ T29] audit: type=1326 audit(1757639246.302:7370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8616 comm="syz.1.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f90958ed80a code=0x7ffc0000 [ 138.463593][ T29] audit: type=1326 audit(1757639246.302:7371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8616 comm="syz.1.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f90958ed80a code=0x7ffc0000 [ 138.487364][ T8617] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 138.501346][ T29] audit: type=1326 audit(1757639246.302:7372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8616 comm="syz.1.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f90958ed417 code=0x7ffc0000 [ 138.560518][ T8617] EXT4-fs (loop1): This should not happen!! Data will be lost [ 138.560518][ T8617] [ 138.570719][ T8617] EXT4-fs (loop1): Total free blocks count 0 [ 138.576690][ T8617] EXT4-fs (loop1): Free/Dirty block details [ 138.582721][ T8617] EXT4-fs (loop1): free_blocks=66060288 [ 138.588267][ T8617] EXT4-fs (loop1): dirty_blocks=48 [ 138.593410][ T8617] EXT4-fs (loop1): Block reservation details [ 138.599427][ T8617] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 138.649937][ T4287] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.744551][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.762962][ T8634] FAULT_INJECTION: forcing a failure. [ 138.762962][ T8634] name failslab, interval 1, probability 0, space 0, times 0 [ 138.775657][ T8634] CPU: 0 UID: 0 PID: 8634 Comm: syz.5.1703 Not tainted syzkaller #0 PREEMPT(voluntary) [ 138.775681][ T8634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 138.775741][ T8634] Call Trace: [ 138.775746][ T8634] [ 138.775753][ T8634] __dump_stack+0x1d/0x30 [ 138.775772][ T8634] dump_stack_lvl+0xe8/0x140 [ 138.775787][ T8634] dump_stack+0x15/0x1b [ 138.775804][ T8634] should_fail_ex+0x265/0x280 [ 138.775848][ T8634] should_failslab+0x8c/0xb0 [ 138.775872][ T8634] kmem_cache_alloc_node_noprof+0x57/0x320 [ 138.775959][ T8634] ? __alloc_skb+0x101/0x320 [ 138.775979][ T8634] __alloc_skb+0x101/0x320 [ 138.775997][ T8634] inet6_rt_notify+0x8b/0x1d0 [ 138.776023][ T8634] fib6_del+0x783/0x8b0 [ 138.776110][ T8634] ? fib6_ifdown+0x205/0x330 [ 138.776129][ T8634] fib6_clean_node+0x167/0x280 [ 138.776153][ T8634] fib6_walk_continue+0x39f/0x440 [ 138.776233][ T8634] fib6_walk+0xc5/0x180 [ 138.776249][ T8634] ? __pfx_fib6_ifdown+0x10/0x10 [ 138.776280][ T8634] fib6_clean_all+0xca/0x140 [ 138.776301][ T8634] ? __pfx_fib6_clean_node+0x10/0x10 [ 138.776324][ T8634] ? __pfx_fib6_ifdown+0x10/0x10 [ 138.776350][ T8634] rt6_disable_ip+0xa6/0x580 [ 138.776448][ T8634] ? __queue_work+0x77a/0xb50 [ 138.776466][ T8634] addrconf_ifdown+0xa6/0xf30 [ 138.776487][ T8634] ? queue_work_on+0xf9/0x160 [ 138.776508][ T8634] ? tls_dev_event+0x3d7/0x910 [ 138.776532][ T8634] addrconf_notify+0x222/0x930 [ 138.776557][ T8634] ? __pfx_addrconf_notify+0x10/0x10 [ 138.776600][ T8634] raw_notifier_call_chain+0x6f/0x1b0 [ 138.776621][ T8634] ? call_netdevice_notifiers_info+0x9c/0x100 [ 138.776664][ T8634] call_netdevice_notifiers_info+0xae/0x100 [ 138.776758][ T8634] __dev_notify_flags+0xff/0x1a0 [ 138.776782][ T8634] netif_change_flags+0xac/0xd0 [ 138.776806][ T8634] dev_change_flags+0xce/0x180 [ 138.776878][ T8634] dev_ifsioc+0x44b/0xaa0 [ 138.776915][ T8634] ? __rcu_read_unlock+0x4f/0x70 [ 138.776939][ T8634] dev_ioctl+0x70a/0x960 [ 138.776960][ T8634] sock_do_ioctl+0x197/0x220 [ 138.776987][ T8634] sock_ioctl+0x41b/0x610 [ 138.777076][ T8634] ? __pfx_sock_ioctl+0x10/0x10 [ 138.777098][ T8634] __se_sys_ioctl+0xce/0x140 [ 138.777115][ T8634] __x64_sys_ioctl+0x43/0x50 [ 138.777155][ T8634] x64_sys_call+0x1816/0x2ff0 [ 138.777178][ T8634] do_syscall_64+0xd2/0x200 [ 138.777307][ T8634] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 138.777333][ T8634] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 138.777357][ T8634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.777404][ T8634] RIP: 0033:0x7ff3027aeba9 [ 138.777422][ T8634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.777511][ T8634] RSP: 002b:00007ff30120f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 138.777527][ T8634] RAX: ffffffffffffffda RBX: 00007ff3029f5fa0 RCX: 00007ff3027aeba9 [ 138.777539][ T8634] RDX: 0000200000000280 RSI: 0000000000008914 RDI: 0000000000000004 [ 138.777567][ T8634] RBP: 00007ff30120f090 R08: 0000000000000000 R09: 0000000000000000 [ 138.777581][ T8634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.777592][ T8634] R13: 00007ff3029f6038 R14: 00007ff3029f5fa0 R15: 00007fffaa9fbfc8 [ 138.777608][ T8634] [ 139.099569][ T8633] loop6: detected capacity change from 0 to 512 [ 139.112621][ T8635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1707'. [ 139.121906][ T8635] IPVS: Error joining to the multicast group [ 139.135086][ T8633] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 139.146363][ T8631] netlink: 'syz.3.1707': attribute type 6 has an invalid length. [ 139.201930][ T8633] EXT4-fs (loop6): 1 truncate cleaned up [ 139.207921][ T8633] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.221882][ T8640] loop1: detected capacity change from 0 to 512 [ 139.237897][ T8640] EXT4-fs (loop1): orphan cleanup on readonly fs [ 139.245214][ T8640] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1705: bg 0: block 248: padding at end of block bitmap is not set [ 139.267723][ T8640] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1705: Failed to acquire dquot type 1 [ 139.286939][ T8640] EXT4-fs (loop1): 1 truncate cleaned up [ 139.295849][ T4618] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.315898][ T8640] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 139.342767][ T8645] netlink: 'syz.6.1709': attribute type 1 has an invalid length. [ 139.373707][ T8640] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 139.399061][ T8645] 8021q: adding VLAN 0 to HW filter on device bond16 [ 139.417840][ T8640] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 0 [ 139.474720][ T8640] netlink: 'syz.1.1705': attribute type 13 has an invalid length. [ 139.624529][ T8640] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.631719][ T8640] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.694640][ T8640] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.705074][ T8640] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.791094][ T3796] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.811394][ T3796] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.827675][ T3796] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.863476][ T8640] syz.1.1705 (8640) used greatest stack depth: 9440 bytes left [ 139.879831][ T8663] loop6: detected capacity change from 0 to 2048 [ 139.881044][ T3796] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.929750][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.948150][ T8663] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.997586][ T8663] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 140.022219][ T8666] loop3: detected capacity change from 0 to 512 [ 140.035357][ T8671] loop5: detected capacity change from 0 to 512 [ 140.070898][ T8663] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 140.083219][ T8663] EXT4-fs (loop6): This should not happen!! Data will be lost [ 140.083219][ T8663] [ 140.092867][ T8663] EXT4-fs (loop6): Total free blocks count 0 [ 140.098867][ T8663] EXT4-fs (loop6): Free/Dirty block details [ 140.104893][ T8663] EXT4-fs (loop6): free_blocks=66060288 [ 140.110499][ T8663] EXT4-fs (loop6): dirty_blocks=48 [ 140.115602][ T8663] EXT4-fs (loop6): Block reservation details [ 140.121588][ T8663] EXT4-fs (loop6): i_reserved_data_blocks=3 [ 140.128814][ T8666] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 140.156974][ T8666] EXT4-fs (loop3): orphan cleanup on readonly fs [ 140.174764][ T8671] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.200142][ T8666] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1715: corrupted inode contents [ 140.212270][ T8666] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.1715: mark_inode_dirty error [ 140.230243][ T8671] ext4 filesystem being mounted at /314/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.239326][ T8666] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1715: corrupted inode contents [ 140.252912][ T8666] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.1715: mark_inode_dirty error [ 140.269273][ T8666] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1715: corrupted inode contents [ 140.282629][ T8671] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1713: bg 0: block 328: padding at end of block bitmap is not set [ 140.289784][ T8666] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 140.314110][ T8666] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1715: corrupted inode contents [ 140.402539][ T8678] loop1: detected capacity change from 0 to 2048 [ 140.458521][ T8666] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.1715: mark_inode_dirty error [ 140.471423][ T4618] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.480573][ T8666] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 140.510272][ T8666] EXT4-fs (loop3): 1 truncate cleaned up [ 140.516165][ T3796] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:9: Failed to release dquot type 1 [ 140.537888][ T8666] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 140.551413][ T8678] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.579826][ T8684] sd 0:0:1:0: device reset [ 140.706786][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.752040][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.158561][ T8712] sd 0:0:1:0: device reset [ 141.364723][ T8723] loop3: detected capacity change from 0 to 512 [ 141.389282][ T8723] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 141.397279][ T8723] EXT4-fs (loop3): orphan cleanup on readonly fs [ 141.410509][ T8723] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1732: corrupted inode contents [ 141.449335][ T8723] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.1732: mark_inode_dirty error [ 141.482156][ T8725] loop1: detected capacity change from 0 to 8192 [ 141.536791][ T8723] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1732: corrupted inode contents [ 141.601269][ T8723] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.1732: mark_inode_dirty error [ 141.634240][ T8723] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1732: corrupted inode contents [ 141.670438][ T8738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1735'. [ 141.738962][ T8723] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 141.759795][ T8723] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1732: corrupted inode contents [ 141.772840][ T8723] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.1732: mark_inode_dirty error [ 141.793651][ T8723] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 141.806086][ T8723] EXT4-fs (loop3): 1 truncate cleaned up [ 141.811969][ T3804] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:11: Failed to release dquot type 1 [ 141.829501][ T8723] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 141.921717][ T8747] sd 0:0:1:0: device reset [ 142.067915][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.176242][ T8755] loop6: detected capacity change from 0 to 8192 [ 142.203458][ T8755] netlink: 'syz.6.1746': attribute type 58 has an invalid length. [ 142.211398][ T8755] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1746'. [ 142.237302][ T8759] loop3: detected capacity change from 0 to 2048 [ 142.251294][ T8759] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.333699][ T8759] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 142.379744][ T8767] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1746'. [ 142.404769][ T8759] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 142.417192][ T8759] EXT4-fs (loop3): This should not happen!! Data will be lost [ 142.417192][ T8759] [ 142.427020][ T8759] EXT4-fs (loop3): Total free blocks count 0 [ 142.433064][ T8759] EXT4-fs (loop3): Free/Dirty block details [ 142.438960][ T8759] EXT4-fs (loop3): free_blocks=66060288 [ 142.444532][ T8759] EXT4-fs (loop3): dirty_blocks=48 [ 142.449700][ T8759] EXT4-fs (loop3): Block reservation details [ 142.455741][ T8759] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 142.463118][ T4287] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.586071][ T8775] sd 0:0:1:0: device reset [ 142.604639][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.733997][ T8786] netlink: 'syz.0.1758': attribute type 1 has an invalid length. [ 142.779744][ T8786] 8021q: adding VLAN 0 to HW filter on device bond20 [ 142.887626][ T8788] loop6: detected capacity change from 0 to 512 [ 142.958721][ T8788] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 142.978276][ T8800] loop3: detected capacity change from 0 to 8192 [ 142.985004][ T8788] EXT4-fs (loop6): orphan cleanup on readonly fs [ 142.998194][ T8788] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.1759: corrupted inode contents [ 143.014575][ T8800] netlink: 'syz.3.1762': attribute type 58 has an invalid length. [ 143.022489][ T8800] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1762'. [ 143.031608][ T8788] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #16: comm syz.6.1759: mark_inode_dirty error [ 143.031866][ T8788] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.1759: corrupted inode contents [ 143.064356][ T8793] IPv6: Can't replace route, no match found [ 143.105074][ T8788] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.1759: mark_inode_dirty error [ 143.135675][ T8788] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.1759: corrupted inode contents [ 143.164688][ T8788] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 143.173456][ T8788] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.1759: corrupted inode contents [ 143.187459][ T8810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1762'. [ 143.209335][ T8788] EXT4-fs error (device loop6): ext4_truncate:4666: inode #16: comm syz.6.1759: mark_inode_dirty error [ 143.249529][ T8788] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 143.309532][ T8809] netlink: 'syz.0.1765': attribute type 58 has an invalid length. [ 143.317361][ T8809] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1765'. [ 143.317876][ T8788] EXT4-fs (loop6): 1 truncate cleaned up [ 143.332388][ T3793] __quota_error: 264 callbacks suppressed [ 143.332400][ T3793] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 143.347880][ T3793] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:8: Failed to release dquot type 1 [ 143.369854][ T8788] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 143.382787][ T29] audit: type=1326 audit(1757639251.332:7633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8787 comm="syz.6.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3e492fd510 code=0x7ffc0000 [ 143.389569][ T8811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1765'. [ 143.428175][ T29] audit: type=1326 audit(1757639251.332:7634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8787 comm="syz.6.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f3e492fd8f7 code=0x7ffc0000 [ 143.451593][ T29] audit: type=1326 audit(1757639251.332:7635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8787 comm="syz.6.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3e492fd510 code=0x7ffc0000 [ 143.475102][ T29] audit: type=1326 audit(1757639251.362:7636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8787 comm="syz.6.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e492feba9 code=0x7ffc0000 [ 143.498493][ T29] audit: type=1326 audit(1757639251.362:7637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8787 comm="syz.6.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e492feba9 code=0x7ffc0000 [ 143.556209][ T4618] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.865027][ T8841] loop6: detected capacity change from 0 to 8192 [ 143.889031][ T8835] netlink: 'syz.0.1776': attribute type 58 has an invalid length. [ 143.896889][ T8835] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1776'. [ 143.957595][ T8835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1776'. [ 143.995644][ T8847] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1779'. [ 144.025014][ T8843] IPv6: Can't replace route, no match found [ 144.550420][ T8873] loop6: detected capacity change from 0 to 512 [ 144.574214][ T8877] loop3: detected capacity change from 0 to 512 [ 144.606398][ T8877] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 144.683586][ T8873] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.696233][ T8873] ext4 filesystem being mounted at /296/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.716196][ T8877] EXT4-fs (loop3): 1 truncate cleaned up [ 144.726072][ T8877] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.798345][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.827031][ T8885] loop5: detected capacity change from 0 to 512 [ 144.851316][ T8885] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 144.883049][ T8885] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.1796: corrupted in-inode xattr: overlapping e_value [ 144.926133][ T8885] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1796: couldn't read orphan inode 15 (err -117) [ 144.980774][ T8885] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.085513][ T4287] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.238720][ T8895] loop1: detected capacity change from 0 to 2048 [ 145.264579][ T8895] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.288557][ T8895] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 145.313970][ T8895] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 145.326303][ T8895] EXT4-fs (loop1): This should not happen!! Data will be lost [ 145.326303][ T8895] [ 145.335985][ T8895] EXT4-fs (loop1): Total free blocks count 0 [ 145.341982][ T8895] EXT4-fs (loop1): Free/Dirty block details [ 145.347885][ T8895] EXT4-fs (loop1): free_blocks=66060288 [ 145.353444][ T8895] EXT4-fs (loop1): dirty_blocks=48 [ 145.358546][ T8895] EXT4-fs (loop1): Block reservation details [ 145.364593][ T8895] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 145.429439][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.475682][ T29] audit: type=1326 audit(1757639253.422:7638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8902 comm="syz.3.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76773eba9 code=0x7ffc0000 [ 145.596032][ T29] audit: type=1326 audit(1757639253.452:7639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8902 comm="syz.3.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd76773eba9 code=0x7ffc0000 [ 145.619623][ T29] audit: type=1326 audit(1757639253.452:7640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8902 comm="syz.3.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76773eba9 code=0x7ffc0000 [ 145.643213][ T29] audit: type=1326 audit(1757639253.452:7641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8902 comm="syz.3.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd76773eba9 code=0x7ffc0000 [ 145.745724][ T8916] loop3: detected capacity change from 0 to 128 [ 145.753627][ T4618] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.784406][ T8916] bio_check_eod: 184 callbacks suppressed [ 145.784419][ T8916] syz.3.1808: attempt to access beyond end of device [ 145.784419][ T8916] loop3: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 145.809533][ T8916] syz.3.1808: attempt to access beyond end of device [ 145.809533][ T8916] loop3: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 145.815256][ T8917] loop1: detected capacity change from 0 to 8192 [ 145.823042][ T8916] buffer_io_error: 31 callbacks suppressed [ 145.823054][ T8916] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 145.823928][ T8916] syz.3.1808: attempt to access beyond end of device [ 145.823928][ T8916] loop3: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 145.857317][ T8917] netlink: 'syz.1.1809': attribute type 58 has an invalid length. [ 145.878215][ T8916] syz.3.1808: attempt to access beyond end of device [ 145.878215][ T8916] loop3: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 145.891950][ T8916] Buffer I/O error on dev loop3, logical block 84, lost async page write [ 145.900060][ T8924] syz.3.1808: attempt to access beyond end of device [ 145.900060][ T8924] loop3: rw=2049, sector=186, nr_sectors = 24 limit=128 [ 145.925427][ T8924] syz.3.1808: attempt to access beyond end of device [ 145.925427][ T8924] loop3: rw=2049, sector=210, nr_sectors = 6 limit=128 [ 145.939400][ T8924] syz.3.1808: attempt to access beyond end of device [ 145.939400][ T8924] loop3: rw=2049, sector=214, nr_sectors = 2 limit=128 [ 145.952926][ T8924] Buffer I/O error on dev loop3, logical block 107, lost async page write [ 145.957265][ T8916] syz.3.1808: attempt to access beyond end of device [ 145.957265][ T8916] loop3: rw=2049, sector=218, nr_sectors = 8 limit=128 [ 145.994378][ T8916] syz.3.1808: attempt to access beyond end of device [ 145.994378][ T8916] loop3: rw=2049, sector=226, nr_sectors = 8 limit=128 [ 146.030774][ T8916] syz.3.1808: attempt to access beyond end of device [ 146.030774][ T8916] loop3: rw=2049, sector=232, nr_sectors = 2 limit=128 [ 146.044217][ T8916] Buffer I/O error on dev loop3, logical block 116, lost async page write [ 146.062900][ T8935] sd 0:0:1:0: device reset [ 146.077136][ T8924] Buffer I/O error on dev loop3, logical block 108, lost async page write [ 146.092468][ T8924] Buffer I/O error on dev loop3, logical block 75, lost async page write [ 146.102652][ T8937] loop5: detected capacity change from 0 to 512 [ 146.113879][ T8937] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 146.116521][ T8916] Buffer I/O error on dev loop3, logical block 92, lost async page write [ 146.124020][ T8924] Buffer I/O error on dev loop3, logical block 76, lost async page write [ 146.157566][ T8937] EXT4-fs (loop5): 1 truncate cleaned up [ 146.158011][ T8924] Buffer I/O error on dev loop3, logical block 123, lost async page write [ 146.169388][ T8937] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.171980][ T8924] Buffer I/O error on dev loop3, logical block 124, lost async page write [ 146.215212][ T8932] netlink: 'syz.0.1813': attribute type 58 has an invalid length. [ 146.279941][ T4287] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.363022][ T8953] loop5: detected capacity change from 0 to 512 [ 146.403989][ T8953] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.424641][ T8953] ext4 filesystem being mounted at /332/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.460972][ T4287] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.523481][ T8965] sd 0:0:1:0: device reset [ 146.818584][ T8972] loop6: detected capacity change from 0 to 8192 [ 146.905107][ T8979] loop5: detected capacity change from 0 to 512 [ 146.970896][ T8979] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 146.983368][ T8986] __nla_validate_parse: 4 callbacks suppressed [ 146.983384][ T8986] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1827'. [ 147.013061][ T8979] EXT4-fs (loop5): orphan cleanup on readonly fs [ 147.034009][ T8979] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1828: corrupted inode contents [ 147.081187][ T8979] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.1828: mark_inode_dirty error [ 147.143906][ T8979] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1828: corrupted inode contents [ 147.199888][ T8979] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.1828: mark_inode_dirty error [ 147.231616][ T8979] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1828: corrupted inode contents [ 147.305338][ T8979] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 147.344654][ T8979] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1828: corrupted inode contents [ 147.359900][ T8996] loop1: detected capacity change from 0 to 1024 [ 147.408985][ T8979] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.1828: mark_inode_dirty error [ 147.432586][ T8996] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.465274][ T8979] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 147.507053][ T8979] EXT4-fs (loop5): 1 truncate cleaned up [ 147.513218][ T3804] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:11: Failed to release dquot type 1 [ 147.580240][ T8979] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 147.599980][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.611443][ T9005] loop6: detected capacity change from 0 to 8192 [ 147.644537][ T9005] netlink: 'syz.6.1837': attribute type 58 has an invalid length. [ 147.652646][ T9005] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1837'. [ 147.758119][ T4287] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.836344][ T9023] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1837'. [ 147.924551][ T9027] loop1: detected capacity change from 0 to 8192 [ 148.025024][ T9040] loop6: detected capacity change from 0 to 128 [ 148.043196][ T9043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1846'. [ 148.072285][ T9042] sd 0:0:1:0: device reset [ 148.142813][ T9044] loop3: detected capacity change from 0 to 512 [ 148.173194][ T9044] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 148.190025][ T9044] EXT4-fs (loop3): orphan cleanup on readonly fs [ 148.205092][ T9044] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1849: corrupted inode contents [ 148.223676][ T9044] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.1849: mark_inode_dirty error [ 148.239442][ T9044] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1849: corrupted inode contents [ 148.251674][ T9044] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.1849: mark_inode_dirty error [ 148.263229][ T9044] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1849: corrupted inode contents [ 148.275363][ T9044] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 148.316914][ T9044] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1849: corrupted inode contents [ 148.318107][ T9062] netlink: 'syz.0.1858': attribute type 58 has an invalid length. [ 148.336839][ T9062] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1858'. [ 148.349268][ T9044] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.1849: mark_inode_dirty error [ 148.373490][ T9044] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 148.386437][ T9065] loop6: detected capacity change from 0 to 8192 [ 148.388011][ T9068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1858'. [ 148.395896][ T9065] netlink: 'syz.6.1859': attribute type 58 has an invalid length. [ 148.409826][ T9065] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1859'. [ 148.412225][ T9044] EXT4-fs (loop3): 1 truncate cleaned up [ 148.425543][ T51] __quota_error: 119 callbacks suppressed [ 148.425556][ T51] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 148.441148][ T51] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 1 [ 148.496411][ T29] audit: type=1400 audit(1757639256.442:7760): avc: denied { firmware_load } for pid=9072 comm="syz.0.1861" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 148.545847][ T9074] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=9074 comm=syz.0.1861 [ 148.579303][ T9075] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1859'. [ 148.637379][ T9077] sd 0:0:1:0: device reset [ 148.768233][ T9081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1864'. [ 148.864744][ T9096] loop6: detected capacity change from 0 to 128 [ 148.924461][ T29] audit: type=1326 audit(1757639256.872:7761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9100 comm="syz.3.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76773eba9 code=0x7ffc0000 [ 148.947992][ T29] audit: type=1326 audit(1757639256.872:7762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9100 comm="syz.3.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76773eba9 code=0x7ffc0000 [ 149.011308][ T29] audit: type=1326 audit(1757639256.872:7763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9100 comm="syz.3.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd76773eba9 code=0x7ffc0000 [ 149.034914][ T29] audit: type=1326 audit(1757639256.872:7764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9100 comm="syz.3.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76773eba9 code=0x7ffc0000 [ 149.058333][ T29] audit: type=1326 audit(1757639256.872:7765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9100 comm="syz.3.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76773eba9 code=0x7ffc0000 [ 149.081874][ T29] audit: type=1326 audit(1757639256.872:7766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9100 comm="syz.3.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd76773eba9 code=0x7ffc0000 [ 149.105424][ T29] audit: type=1326 audit(1757639256.932:7767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9100 comm="syz.3.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76773eba9 code=0x7ffc0000 [ 149.129158][ T29] audit: type=1326 audit(1757639256.932:7768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9100 comm="syz.3.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76773eba9 code=0x7ffc0000 [ 149.225693][ T9110] loop6: detected capacity change from 0 to 8192 [ 149.241288][ T9110] netlink: 'syz.6.1877': attribute type 58 has an invalid length. [ 149.249380][ T9110] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1877'. [ 149.293495][ T9114] loop3: detected capacity change from 0 to 8192 [ 149.684551][ T9137] loop5: detected capacity change from 0 to 128 [ 149.700213][ T9139] netlink: 'syz.3.1889': attribute type 1 has an invalid length. [ 149.731435][ T9139] 8021q: adding VLAN 0 to HW filter on device bond7 [ 149.762771][ T9142] loop1: detected capacity change from 0 to 512 [ 149.792376][ T9144] loop6: detected capacity change from 0 to 1024 [ 149.805780][ T9142] ext4 filesystem being mounted at /329/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.848809][ T9144] ext4 filesystem being mounted at /307/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.562691][ T9184] loop6: detected capacity change from 0 to 512 [ 151.233984][ T9201] loop5: detected capacity change from 0 to 512 [ 151.342202][ T9209] loop3: detected capacity change from 0 to 2048 [ 151.481662][ T9184] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.500477][ T9201] ext4 filesystem being mounted at /348/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.523700][ T9209] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 151.578711][ T9209] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 151.591126][ T9209] EXT4-fs (loop3): This should not happen!! Data will be lost [ 151.591126][ T9209] [ 151.600799][ T9209] EXT4-fs (loop3): Total free blocks count 0 [ 151.606819][ T9209] EXT4-fs (loop3): Free/Dirty block details [ 151.612765][ T9209] EXT4-fs (loop3): free_blocks=66060288 [ 151.618300][ T9209] EXT4-fs (loop3): dirty_blocks=48 [ 151.623413][ T9209] EXT4-fs (loop3): Block reservation details [ 151.629411][ T9209] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 151.975021][ T9228] netlink: 'syz.0.1920': attribute type 58 has an invalid length. [ 151.987532][ T9238] netlink: 'syz.6.1924': attribute type 1 has an invalid length. [ 152.014601][ T9238] 8021q: adding VLAN 0 to HW filter on device bond17 [ 152.050607][ T9250] __nla_validate_parse: 3 callbacks suppressed [ 152.050657][ T9250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1920'. [ 152.070910][ T9251] loop5: detected capacity change from 0 to 512 [ 152.099804][ T9251] ext4 filesystem being mounted at /350/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.213775][ T9265] loop3: detected capacity change from 0 to 512 [ 152.248109][ T9265] ext4 filesystem being mounted at /384/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.433332][ T9260] netlink: 'syz.0.1931': attribute type 58 has an invalid length. [ 152.437340][ T9280] netlink: 'syz.6.1939': attribute type 1 has an invalid length. [ 152.441206][ T9260] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1931'. [ 152.491315][ T9283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1931'. [ 152.515896][ T9280] 8021q: adding VLAN 0 to HW filter on device bond18 [ 152.600601][ T9293] loop5: detected capacity change from 0 to 512 [ 152.698254][ T9303] loop1: detected capacity change from 0 to 128 [ 152.709583][ T9303] bio_check_eod: 96 callbacks suppressed [ 152.709596][ T9303] syz.1.1948: attempt to access beyond end of device [ 152.709596][ T9303] loop1: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 152.741085][ T9303] syz.1.1948: attempt to access beyond end of device [ 152.741085][ T9303] loop1: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 152.754633][ T9303] buffer_io_error: 42 callbacks suppressed [ 152.754645][ T9303] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 152.873383][ T9314] syz.1.1948: attempt to access beyond end of device [ 152.873383][ T9314] loop1: rw=2049, sector=170, nr_sectors = 16 limit=128 [ 152.907401][ T9318] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=9318 comm=syz.6.1950 [ 152.929531][ T9303] syz.1.1948: attempt to access beyond end of device [ 152.929531][ T9303] loop1: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 152.978394][ T9314] syz.1.1948: attempt to access beyond end of device [ 152.978394][ T9314] loop1: rw=2049, sector=202, nr_sectors = 6 limit=128 [ 153.032630][ T9303] syz.1.1948: attempt to access beyond end of device [ 153.032630][ T9303] loop1: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 153.046159][ T9303] Buffer I/O error on dev loop1, logical block 84, lost async page write [ 153.125653][ T9314] syz.1.1948: attempt to access beyond end of device [ 153.125653][ T9314] loop1: rw=2049, sector=206, nr_sectors = 2 limit=128 [ 153.139216][ T9314] Buffer I/O error on dev loop1, logical block 103, lost async page write [ 153.208269][ T9323] loop6: detected capacity change from 0 to 512 [ 153.223135][ T9321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1952'. [ 153.234210][ T9303] syz.1.1948: attempt to access beyond end of device [ 153.234210][ T9303] loop1: rw=2049, sector=234, nr_sectors = 8 limit=128 [ 153.268322][ T9314] syz.1.1948: attempt to access beyond end of device [ 153.268322][ T9314] loop1: rw=2049, sector=208, nr_sectors = 2 limit=128 [ 153.281955][ T9314] Buffer I/O error on dev loop1, logical block 104, lost async page write [ 153.343931][ T9303] syz.1.1948: attempt to access beyond end of device [ 153.343931][ T9303] loop1: rw=2049, sector=240, nr_sectors = 2 limit=128 [ 153.357524][ T9303] Buffer I/O error on dev loop1, logical block 120, lost async page write [ 153.385390][ T9331] netlink: 'syz.0.1955': attribute type 1 has an invalid length. [ 153.407825][ T9314] Buffer I/O error on dev loop1, logical block 71, lost async page write [ 153.426209][ T9303] Buffer I/O error on dev loop1, logical block 124, lost async page write [ 153.437255][ T9314] Buffer I/O error on dev loop1, logical block 72, lost async page write [ 153.456271][ T9303] Buffer I/O error on dev loop1, logical block 112, lost async page write [ 153.468981][ T9314] Buffer I/O error on dev loop1, logical block 95, lost async page write [ 153.499921][ T9331] 8021q: adding VLAN 0 to HW filter on device bond21 [ 153.507329][ T9323] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 153.518542][ T9293] ext4 filesystem being mounted at /351/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.535271][ T9323] EXT4-fs (loop6): orphan cleanup on readonly fs [ 153.566768][ T9323] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.1953: corrupted inode contents [ 153.603894][ T9323] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #16: comm syz.6.1953: mark_inode_dirty error [ 153.664208][ T9323] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.1953: corrupted inode contents [ 153.716930][ T9323] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.1953: mark_inode_dirty error [ 153.762503][ T9323] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.1953: corrupted inode contents [ 153.787701][ T9323] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 153.797653][ T9323] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.1953: corrupted inode contents [ 153.811470][ T9323] EXT4-fs error (device loop6): ext4_truncate:4666: inode #16: comm syz.6.1953: mark_inode_dirty error [ 153.823710][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 153.823809][ T29] audit: type=1326 audit(1757639261.782:7948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9345 comm="syz.3.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76773eba9 code=0x7ffc0000 [ 153.853919][ T29] audit: type=1326 audit(1757639261.812:7949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9345 comm="syz.3.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd76773eba9 code=0x7ffc0000 [ 153.877417][ T29] audit: type=1326 audit(1757639261.812:7950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9345 comm="syz.3.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76773eba9 code=0x7ffc0000 [ 153.900854][ T29] audit: type=1326 audit(1757639261.812:7951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9345 comm="syz.3.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76773eba9 code=0x7ffc0000 [ 153.924443][ T9323] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 153.933545][ T29] audit: type=1326 audit(1757639261.812:7952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9345 comm="syz.3.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd76773eba9 code=0x7ffc0000 [ 153.956990][ T29] audit: type=1326 audit(1757639261.812:7953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9345 comm="syz.3.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76773eba9 code=0x7ffc0000 [ 153.980516][ T29] audit: type=1326 audit(1757639261.812:7954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9345 comm="syz.3.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd76773eba9 code=0x7ffc0000 [ 153.982610][ T9323] EXT4-fs (loop6): 1 truncate cleaned up [ 154.004033][ T29] audit: type=1326 audit(1757639261.812:7955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9345 comm="syz.3.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76773eba9 code=0x7ffc0000 [ 154.004067][ T29] audit: type=1326 audit(1757639261.812:7956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9345 comm="syz.3.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd76773eba9 code=0x7ffc0000 [ 154.004166][ T29] audit: type=1326 audit(1757639261.812:7957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9345 comm="syz.3.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76773eba9 code=0x7ffc0000 [ 154.004722][ T9350] loop5: detected capacity change from 0 to 8192 [ 154.037293][ T3809] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:14: Failed to release dquot type 1 [ 154.134475][ T9350] netlink: 'syz.5.1961': attribute type 58 has an invalid length. [ 154.142385][ T9350] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1961'. [ 154.188834][ T9356] netlink: 'syz.0.1964': attribute type 58 has an invalid length. [ 154.196759][ T9356] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1964'. [ 154.272247][ T9356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1964'. [ 154.315590][ T9370] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1961'. [ 154.355056][ T9372] sd 0:0:1:0: device reset [ 154.414529][ T9369] loop1: detected capacity change from 0 to 512 [ 154.438066][ T9369] ext4 filesystem being mounted at /333/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.516880][ T9369] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1965: bg 0: block 328: padding at end of block bitmap is not set [ 154.624196][ T9393] FAULT_INJECTION: forcing a failure. [ 154.624196][ T9393] name failslab, interval 1, probability 0, space 0, times 0 [ 154.636842][ T9393] CPU: 0 UID: 0 PID: 9393 Comm: syz.6.1977 Not tainted syzkaller #0 PREEMPT(voluntary) [ 154.636923][ T9393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 154.636933][ T9393] Call Trace: [ 154.636939][ T9393] [ 154.636946][ T9393] __dump_stack+0x1d/0x30 [ 154.636963][ T9393] dump_stack_lvl+0xe8/0x140 [ 154.637053][ T9393] dump_stack+0x15/0x1b [ 154.637067][ T9393] should_fail_ex+0x265/0x280 [ 154.637087][ T9393] should_failslab+0x8c/0xb0 [ 154.637107][ T9393] kmem_cache_alloc_node_noprof+0x57/0x320 [ 154.637135][ T9393] ? __alloc_skb+0x101/0x320 [ 154.637159][ T9393] __alloc_skb+0x101/0x320 [ 154.637178][ T9393] ? audit_log_start+0x365/0x6c0 [ 154.637261][ T9393] audit_log_start+0x380/0x6c0 [ 154.637354][ T9393] audit_seccomp+0x48/0x100 [ 154.637390][ T9393] ? __seccomp_filter+0x68c/0x10d0 [ 154.637407][ T9393] __seccomp_filter+0x69d/0x10d0 [ 154.637429][ T9393] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 154.637533][ T9393] ? vfs_write+0x7e8/0x960 [ 154.637554][ T9393] ? __rcu_read_unlock+0x4f/0x70 [ 154.637581][ T9393] ? __fget_files+0x184/0x1c0 [ 154.637606][ T9393] __secure_computing+0x82/0x150 [ 154.637623][ T9393] syscall_trace_enter+0xcf/0x1e0 [ 154.637671][ T9393] do_syscall_64+0xac/0x200 [ 154.637703][ T9393] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 154.637722][ T9393] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 154.637791][ T9393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.637816][ T9393] RIP: 0033:0x7f3e492feba9 [ 154.637828][ T9393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.637842][ T9393] RSP: 002b:00007f3e47d5f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ad [ 154.637895][ T9393] RAX: ffffffffffffffda RBX: 00007f3e49545fa0 RCX: 00007f3e492feba9 [ 154.637907][ T9393] RDX: 0000000000000008 RSI: 0000000000000001 RDI: 000000000000003c [ 154.637918][ T9393] RBP: 00007f3e47d5f090 R08: 0000000000000000 R09: 0000000000000000 [ 154.637928][ T9393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.637939][ T9393] R13: 00007f3e49546038 R14: 00007f3e49545fa0 R15: 00007ffe930d4588 [ 154.637956][ T9393] [ 154.911742][ T9404] FAULT_INJECTION: forcing a failure. [ 154.911742][ T9404] name failslab, interval 1, probability 0, space 0, times 0 [ 154.924412][ T9404] CPU: 1 UID: 0 PID: 9404 Comm: syz.5.1980 Not tainted syzkaller #0 PREEMPT(voluntary) [ 154.924449][ T9404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 154.924513][ T9404] Call Trace: [ 154.924519][ T9404] [ 154.924530][ T9404] __dump_stack+0x1d/0x30 [ 154.924553][ T9404] dump_stack_lvl+0xe8/0x140 [ 154.924569][ T9404] dump_stack+0x15/0x1b [ 154.924583][ T9404] should_fail_ex+0x265/0x280 [ 154.924603][ T9404] should_failslab+0x8c/0xb0 [ 154.924643][ T9404] kmem_cache_alloc_node_noprof+0x57/0x320 [ 154.924787][ T9404] ? __alloc_skb+0x101/0x320 [ 154.924835][ T9404] __alloc_skb+0x101/0x320 [ 154.924855][ T9404] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 154.924891][ T9404] alloc_skb_with_frags+0x7d/0x470 [ 154.924985][ T9404] ? __sock_sendmsg+0x102/0x180 [ 154.925013][ T9404] ? ____sys_sendmsg+0x345/0x4e0 [ 154.925037][ T9404] ? ___sys_sendmsg+0x17b/0x1d0 [ 154.925062][ T9404] ? __sys_sendmmsg+0x178/0x300 [ 154.925153][ T9404] ? __x64_sys_sendmmsg+0x57/0x70 [ 154.925172][ T9404] ? x64_sys_call+0x1c4a/0x2ff0 [ 154.925190][ T9404] ? do_syscall_64+0xd2/0x200 [ 154.925238][ T9404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.925255][ T9404] ? percpu_counter_add_batch+0xb6/0x130 [ 154.925275][ T9404] sock_alloc_send_pskb+0x43a/0x4f0 [ 154.925326][ T9404] raw_send_hdrinc+0x186/0xa20 [ 154.925353][ T9404] ? ip_route_output_flow+0xf1/0x130 [ 154.925378][ T9404] raw_sendmsg+0xbe8/0xe60 [ 154.925471][ T9404] ? __pfx_raw_sendmsg+0x10/0x10 [ 154.925494][ T9404] inet_sendmsg+0xc5/0xd0 [ 154.925522][ T9404] __sock_sendmsg+0x102/0x180 [ 154.925582][ T9404] ____sys_sendmsg+0x345/0x4e0 [ 154.925604][ T9404] ___sys_sendmsg+0x17b/0x1d0 [ 154.925681][ T9404] __sys_sendmmsg+0x178/0x300 [ 154.925722][ T9404] __x64_sys_sendmmsg+0x57/0x70 [ 154.925749][ T9404] x64_sys_call+0x1c4a/0x2ff0 [ 154.925767][ T9404] do_syscall_64+0xd2/0x200 [ 154.925921][ T9404] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 154.925946][ T9404] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 154.925974][ T9404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.926046][ T9404] RIP: 0033:0x7ff3027aeba9 [ 154.926059][ T9404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.926074][ T9404] RSP: 002b:00007ff30120f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 154.926091][ T9404] RAX: ffffffffffffffda RBX: 00007ff3029f5fa0 RCX: 00007ff3027aeba9 [ 154.926168][ T9404] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000003 [ 154.926180][ T9404] RBP: 00007ff30120f090 R08: 0000000000000000 R09: 0000000000000000 [ 154.926193][ T9404] R10: 0000000004004040 R11: 0000000000000246 R12: 0000000000000001 [ 154.926207][ T9404] R13: 00007ff3029f6038 R14: 00007ff3029f5fa0 R15: 00007fffaa9fbfc8 [ 154.926226][ T9404] [ 155.229270][ T9406] loop6: detected capacity change from 0 to 512 [ 155.254217][ T9408] sd 0:0:1:0: device reset [ 155.397762][ T9410] loop5: detected capacity change from 0 to 8192 [ 155.618769][ T9420] netlink: 'syz.3.1988': attribute type 1 has an invalid length. [ 155.641862][ T9420] 8021q: adding VLAN 0 to HW filter on device bond8 [ 155.802533][ T9427] loop3: detected capacity change from 0 to 8192 [ 155.891391][ T9406] ext4 filesystem being mounted at /331/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.906153][ T9427] netlink: 'syz.3.1991': attribute type 58 has an invalid length. [ 155.914017][ T9427] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1991'. [ 156.038313][ T9432] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1984'. [ 156.204598][ T9439] loop6: detected capacity change from 0 to 1024 [ 156.211269][ T9439] EXT4-fs: Ignoring removed orlov option [ 156.217003][ T9439] EXT4-fs: Ignoring removed nomblk_io_submit option [ 156.247804][ T9441] sd 0:0:1:0: device reset [ 156.396548][ T9434] netlink: 'syz.0.1994': attribute type 58 has an invalid length. [ 156.638228][ T9465] loop3: detected capacity change from 0 to 512 [ 156.664099][ T9465] ext4 filesystem being mounted at /407/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.839465][ T9471] loop3: detected capacity change from 0 to 8192 [ 156.922896][ T9474] loop6: detected capacity change from 0 to 8192 [ 156.944333][ T9474] netlink: 'syz.6.2005': attribute type 58 has an invalid length. [ 157.113039][ T9478] __nla_validate_parse: 7 callbacks suppressed [ 157.113053][ T9478] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2005'. [ 157.360595][ T9483] sd 0:0:1:0: device reset [ 157.490401][ T9490] loop7: detected capacity change from 0 to 16384 [ 157.575700][ T9493] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2010'. [ 157.675373][ T9492] loop6: detected capacity change from 0 to 8192 [ 157.752545][ T9492] netlink: 'syz.6.2011': attribute type 58 has an invalid length. [ 157.760470][ T9492] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2011'. [ 157.959566][ T9500] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2011'. [ 158.242275][ T9513] loop5: detected capacity change from 0 to 1024 [ 158.266607][ T9515] sd 0:0:1:0: device reset [ 158.281887][ T9513] EXT4-fs mount: 27 callbacks suppressed [ 158.281900][ T9513] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.299791][ T9513] ext4 filesystem being mounted at /365/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.337775][ T9522] loop3: detected capacity change from 0 to 1024 [ 158.351451][ T4287] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.362424][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.372217][ T9522] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.384582][ T9522] ext4 filesystem being mounted at /412/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.434501][ T9530] loop1: detected capacity change from 0 to 8192 [ 158.504971][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.554785][ T9538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2024'. [ 158.769065][ T9552] netlink: 'syz.3.2030': attribute type 1 has an invalid length. [ 158.801450][ T9546] loop1: detected capacity change from 0 to 512 [ 158.810956][ T9552] 8021q: adding VLAN 0 to HW filter on device bond9 [ 158.833653][ T9546] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 158.858188][ T9546] EXT4-fs (loop1): orphan cleanup on readonly fs [ 158.873134][ T9546] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.2027: corrupted inode contents [ 158.889646][ T9546] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.2027: mark_inode_dirty error [ 158.903657][ T9546] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.2027: corrupted inode contents [ 158.935480][ T9546] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.2027: mark_inode_dirty error [ 158.947187][ T9546] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.2027: corrupted inode contents [ 158.960035][ T9562] loop3: detected capacity change from 0 to 1024 [ 158.967284][ T9546] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 158.976458][ T9546] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.2027: corrupted inode contents [ 159.000584][ T9562] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.013923][ T9546] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.2027: mark_inode_dirty error [ 159.016790][ T9562] ext4 filesystem being mounted at /419/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.039595][ T9546] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 159.048979][ T9546] EXT4-fs (loop1): 1 truncate cleaned up [ 159.070813][ T3796] __quota_error: 198 callbacks suppressed [ 159.070827][ T3796] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 159.086478][ T3796] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:9: Failed to release dquot type 1 [ 159.114126][ T9546] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 159.136986][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.146037][ T29] audit: type=1326 audit(1757639267.092:8153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9545 comm="syz.1.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f90958ed510 code=0x7ffc0000 [ 159.169497][ T29] audit: type=1326 audit(1757639267.092:8154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9545 comm="syz.1.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f90958ed8f7 code=0x7ffc0000 [ 159.192795][ T29] audit: type=1326 audit(1757639267.092:8155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9545 comm="syz.1.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f90958ed510 code=0x7ffc0000 [ 159.216337][ T29] audit: type=1326 audit(1757639267.092:8156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9545 comm="syz.1.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90958eeba9 code=0x7ffc0000 [ 159.239868][ T29] audit: type=1326 audit(1757639267.092:8157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9545 comm="syz.1.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90958eeba9 code=0x7ffc0000 [ 159.277017][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.346283][ T9569] loop5: detected capacity change from 0 to 8192 [ 159.369541][ T29] audit: type=1326 audit(1757639267.312:8158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9571 comm="syz.3.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76773eba9 code=0x7ffc0000 [ 159.393028][ T29] audit: type=1326 audit(1757639267.312:8159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9571 comm="syz.3.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76773eba9 code=0x7ffc0000 [ 159.416495][ T29] audit: type=1326 audit(1757639267.312:8160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9571 comm="syz.3.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fd76773eba9 code=0x7ffc0000 [ 159.439901][ T29] audit: type=1326 audit(1757639267.312:8161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9571 comm="syz.3.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76773eba9 code=0x7ffc0000 [ 159.509042][ T9574] loop6: detected capacity change from 0 to 512 [ 159.636050][ T9574] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.666841][ T9585] loop1: detected capacity change from 0 to 512 [ 159.714213][ T9587] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2037'. [ 159.785042][ T9585] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.809329][ T9574] ext4 filesystem being mounted at /339/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.816871][ T9578] netlink: 'syz.0.2039': attribute type 58 has an invalid length. [ 159.827588][ T9578] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2039'. [ 159.869281][ T9585] ext4 filesystem being mounted at /336/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.905341][ T9592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2039'. [ 159.917323][ T9574] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2034: bg 0: block 328: padding at end of block bitmap is not set [ 159.954191][ T9595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2041'. [ 160.313821][ T9612] loop5: detected capacity change from 0 to 8192 [ 160.322810][ T9612] netlink: 'syz.5.2047': attribute type 58 has an invalid length. [ 160.330748][ T9612] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2047'. [ 161.263210][ T9628] loop3: detected capacity change from 0 to 8192 [ 161.642578][ T9658] loop5: detected capacity change from 0 to 1024 [ 161.705730][ T9658] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.762286][ T9644] netlink: 'syz.0.2059': attribute type 10 has an invalid length. [ 161.770183][ T9644] ipvlan0: entered allmulticast mode [ 161.775516][ T9644] veth0_vlan: entered allmulticast mode [ 161.782559][ T9644] team0: Device ipvlan0 failed to register rx_handler [ 161.791796][ T9658] ext4 filesystem being mounted at /381/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.859845][ T4287] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.928429][ T9673] loop5: detected capacity change from 0 to 2048 [ 161.964333][ T9673] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.993298][ T9673] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 162.081410][ T4287] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.460524][ T9694] loop5: detected capacity change from 0 to 8192 [ 162.489375][ T9694] netlink: 'syz.5.2079': attribute type 58 has an invalid length. [ 162.497244][ T9694] __nla_validate_parse: 2 callbacks suppressed [ 162.497255][ T9694] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2079'. [ 162.650446][ T9706] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2079'. [ 162.930966][ T9717] loop5: detected capacity change from 0 to 512 [ 162.937487][ T9717] EXT4-fs: Ignoring removed nobh option [ 162.960742][ T9717] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.2086: corrupted inode contents [ 162.973248][ T9717] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #3: comm syz.5.2086: mark_inode_dirty error [ 162.990844][ T9717] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.2086: corrupted inode contents [ 163.003240][ T9717] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.2086: mark_inode_dirty error [ 163.014975][ T9717] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.2086: Failed to acquire dquot type 0 [ 163.026599][ T9723] loop3: detected capacity change from 0 to 1024 [ 163.036633][ T9717] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.2086: corrupted inode contents [ 163.049452][ T9717] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.2086: mark_inode_dirty error [ 163.061143][ T9717] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.2086: corrupted inode contents [ 163.073370][ T9717] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.2086: mark_inode_dirty error [ 163.084848][ T9717] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.2086: corrupted inode contents [ 163.098277][ T9717] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 163.106281][ T9723] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.118964][ T9723] ext4 filesystem being mounted at /430/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.139540][ T9717] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.2086: corrupted inode contents [ 163.153882][ T9717] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.2086: mark_inode_dirty error [ 163.165237][ T9717] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 163.175149][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.175767][ T9717] EXT4-fs (loop5): 1 truncate cleaned up [ 163.190411][ T9717] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.190539][ T9717] ext4 filesystem being mounted at /387/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.424128][ T9737] loop3: detected capacity change from 0 to 8192 [ 163.455541][ T9737] netlink: 'syz.3.2096': attribute type 58 has an invalid length. [ 163.463443][ T9737] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2096'. [ 163.486959][ T4618] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.558364][ T9740] netlink: 'syz.0.2097': attribute type 58 has an invalid length. [ 163.566247][ T9740] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2097'. [ 163.620314][ T9745] loop6: detected capacity change from 0 to 2048 [ 163.640624][ T9747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2096'. [ 163.658125][ T9746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2097'. [ 163.658444][ T9745] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.690868][ T4287] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.751074][ T9745] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 163.846672][ T4618] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.856371][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.888656][ T9761] loop1: detected capacity change from 0 to 128 [ 163.911582][ T9754] loop5: detected capacity change from 0 to 512 [ 163.930834][ T9754] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 163.937757][ T9761] bio_check_eod: 14 callbacks suppressed [ 163.937771][ T9761] syz.1.2104: attempt to access beyond end of device [ 163.937771][ T9761] loop1: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 163.938932][ T9754] EXT4-fs (loop5): orphan cleanup on readonly fs [ 163.948393][ T9761] syz.1.2104: attempt to access beyond end of device [ 163.948393][ T9761] loop1: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 163.974034][ T9754] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.2100: corrupted inode contents [ 163.977783][ T9761] buffer_io_error: 1 callbacks suppressed [ 163.977796][ T9761] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 163.999393][ T9754] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.2100: mark_inode_dirty error [ 164.023719][ T9762] loop3: detected capacity change from 0 to 8192 [ 164.026510][ T9754] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.2100: corrupted inode contents [ 164.042454][ T9761] syz.1.2104: attempt to access beyond end of device [ 164.042454][ T9761] loop1: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 164.061183][ T9754] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.2100: mark_inode_dirty error [ 164.090647][ T9761] syz.1.2104: attempt to access beyond end of device [ 164.090647][ T9761] loop1: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 164.104145][ T9761] Buffer I/O error on dev loop1, logical block 84, lost async page write [ 164.112239][ T9754] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.2100: corrupted inode contents [ 164.114454][ T9761] syz.1.2104: attempt to access beyond end of device [ 164.114454][ T9761] loop1: rw=2049, sector=186, nr_sectors = 8 limit=128 [ 164.166446][ T9754] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 164.171500][ T9761] syz.1.2104: attempt to access beyond end of device [ 164.171500][ T9761] loop1: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 164.188464][ T9761] Buffer I/O error on dev loop1, logical block 96, lost async page write [ 164.200553][ T9773] syz.1.2104: attempt to access beyond end of device [ 164.200553][ T9773] loop1: rw=2049, sector=202, nr_sectors = 32 limit=128 [ 164.214329][ T9754] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.2100: corrupted inode contents [ 164.226438][ T9761] syz.1.2104: attempt to access beyond end of device [ 164.226438][ T9761] loop1: rw=2049, sector=194, nr_sectors = 8 limit=128 [ 164.269279][ T9754] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.2100: mark_inode_dirty error [ 164.281949][ T9773] syz.1.2104: attempt to access beyond end of device [ 164.281949][ T9773] loop1: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 164.286020][ T9762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2103'. [ 164.313882][ T9754] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 164.317231][ T9761] syz.1.2104: attempt to access beyond end of device [ 164.317231][ T9761] loop1: rw=2049, sector=200, nr_sectors = 2 limit=128 [ 164.329613][ T9773] Buffer I/O error on dev loop1, logical block 87, lost async page write [ 164.336335][ T9761] Buffer I/O error on dev loop1, logical block 100, lost async page write [ 164.350049][ T9761] Buffer I/O error on dev loop1, logical block 72, lost async page write [ 164.358883][ T9777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2109'. [ 164.362664][ T9761] Buffer I/O error on dev loop1, logical block 76, lost async page write [ 164.401166][ T9754] EXT4-fs (loop5): 1 truncate cleaned up [ 164.428180][ T3809] __quota_error: 148 callbacks suppressed [ 164.428233][ T3809] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 164.443809][ T3809] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:14: Failed to release dquot type 1 [ 164.469212][ T9773] Buffer I/O error on dev loop1, logical block 88, lost async page write [ 164.509064][ T9754] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 164.628483][ T9791] loop6: detected capacity change from 0 to 512 [ 164.734308][ T9791] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.747620][ T9791] ext4 filesystem being mounted at /344/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.759581][ T4287] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.771025][ T9791] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2108: bg 0: block 328: padding at end of block bitmap is not set [ 164.861097][ T9800] loop1: detected capacity change from 0 to 1024 [ 164.933759][ T9800] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.961146][ T9795] netlink: 'syz.0.2114': attribute type 58 has an invalid length. [ 164.968977][ T9795] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2114'. [ 164.976441][ T9800] ext4 filesystem being mounted at /338/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.014021][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.032383][ T9804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2114'. [ 165.107019][ T9808] loop5: detected capacity change from 0 to 512 [ 165.130973][ T9808] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.156650][ T9808] ext4 filesystem being mounted at /389/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.346796][ T29] audit: type=1326 audit(1757639273.292:8308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9821 comm="syz.3.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76773eba9 code=0x7ffc0000 [ 165.378882][ T9822] loop3: detected capacity change from 0 to 2048 [ 165.402746][ T29] audit: type=1326 audit(1757639273.322:8309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9821 comm="syz.3.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd76773eba9 code=0x7ffc0000 [ 165.426315][ T29] audit: type=1326 audit(1757639273.322:8310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9821 comm="syz.3.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd76773ebe3 code=0x7ffc0000 [ 165.449585][ T29] audit: type=1326 audit(1757639273.322:8311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9821 comm="syz.3.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd76773d65f code=0x7ffc0000 [ 165.472862][ T29] audit: type=1326 audit(1757639273.322:8312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9821 comm="syz.3.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd76773ec37 code=0x7ffc0000 [ 165.496227][ T29] audit: type=1326 audit(1757639273.322:8313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9821 comm="syz.3.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd76773d510 code=0x7ffc0000 [ 165.519843][ T29] audit: type=1326 audit(1757639273.322:8314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9821 comm="syz.3.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd76773e7ab code=0x7ffc0000 [ 165.554648][ T29] audit: type=1400 audit(1757639273.492:8315): avc: denied { read } for pid=9819 comm="syz.1.2121" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 165.577883][ T29] audit: type=1400 audit(1757639273.492:8316): avc: denied { open } for pid=9819 comm="syz.1.2121" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 165.641446][ T9822] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.717184][ T9822] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 165.889580][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.970385][ T9838] loop3: detected capacity change from 0 to 128 [ 166.005277][ T9838] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 166.014391][ T9838] Buffer I/O error on dev loop3, logical block 84, lost async page write [ 166.466526][ T9847] loop3: detected capacity change from 0 to 8192 [ 167.068606][ T9863] loop3: detected capacity change from 0 to 512 [ 167.080144][ T9863] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 167.119321][ T9863] EXT4-fs (loop3): orphan cleanup on readonly fs [ 167.150521][ T9863] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.2134: corrupted inode contents [ 167.195866][ T9863] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.2134: mark_inode_dirty error [ 167.236756][ T9863] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.2134: corrupted inode contents [ 167.281905][ T9863] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.2134: mark_inode_dirty error [ 167.304076][ T9863] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.2134: corrupted inode contents [ 167.330565][ T9863] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 167.339340][ T9863] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.2134: corrupted inode contents [ 167.382854][ T9863] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.2134: mark_inode_dirty error [ 167.396348][ T9863] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 167.429682][ T9863] EXT4-fs (loop3): 1 truncate cleaned up [ 167.435544][ T51] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 1 [ 167.479836][ T9863] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 167.751062][ T9871] sd 0:0:1:0: device reset [ 167.778463][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.883544][ T9880] netlink: 'syz.3.2138': attribute type 1 has an invalid length. [ 167.920866][ T9880] 8021q: adding VLAN 0 to HW filter on device bond10 [ 168.062458][ T9899] sd 0:0:1:0: device reset [ 168.105255][ T9895] loop3: detected capacity change from 0 to 8192 [ 168.261313][ T9902] netlink: 'syz.0.2149': attribute type 58 has an invalid length. [ 168.269309][ T9902] __nla_validate_parse: 1 callbacks suppressed [ 168.269322][ T9902] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2149'. [ 168.276427][ T9905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2146'. [ 168.371411][ T9906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2149'. [ 168.644460][ T4618] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.702692][ T9910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2151'. [ 168.805640][ T9928] sd 0:0:1:0: device reset [ 168.837485][ T4287] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.860877][ T9932] netlink: 'syz.0.2161': attribute type 1 has an invalid length. [ 168.894761][ T9932] 8021q: adding VLAN 0 to HW filter on device bond22 [ 168.921334][ T9934] loop5: detected capacity change from 0 to 128 [ 168.988756][ T9934] bio_check_eod: 37 callbacks suppressed [ 168.988800][ T9934] syz.5.2162: attempt to access beyond end of device [ 168.988800][ T9934] loop5: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 169.019638][ T9940] loop6: detected capacity change from 0 to 128 [ 169.038981][ T9934] syz.5.2162: attempt to access beyond end of device [ 169.038981][ T9934] loop5: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 169.052509][ T9934] buffer_io_error: 12 callbacks suppressed [ 169.052571][ T9934] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 169.069679][ T9934] syz.5.2162: attempt to access beyond end of device [ 169.069679][ T9934] loop5: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 169.071410][ T9940] syz.6.2164: attempt to access beyond end of device [ 169.071410][ T9940] loop6: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 169.109572][ T9940] syz.6.2164: attempt to access beyond end of device [ 169.109572][ T9940] loop6: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 169.113316][ T9934] syz.5.2162: attempt to access beyond end of device [ 169.113316][ T9934] loop5: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 169.123029][ T9940] Buffer I/O error on dev loop6, logical block 80, lost async page write [ 169.145219][ T9934] Buffer I/O error on dev loop5, logical block 84, lost async page write [ 169.149742][ T9940] syz.6.2164: attempt to access beyond end of device [ 169.149742][ T9940] loop6: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 169.219107][ T9953] syz.6.2164: attempt to access beyond end of device [ 169.219107][ T9953] loop6: rw=2049, sector=170, nr_sectors = 16 limit=128 [ 169.224210][ T9934] syz.5.2162: attempt to access beyond end of device [ 169.224210][ T9934] loop5: rw=2049, sector=186, nr_sectors = 8 limit=128 [ 169.246700][ T9940] syz.6.2164: attempt to access beyond end of device [ 169.246700][ T9940] loop6: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 169.260244][ T9940] Buffer I/O error on dev loop6, logical block 84, lost async page write [ 169.269557][ T9934] Buffer I/O error on dev loop5, logical block 96, lost async page write [ 169.278250][ T9959] loop1: detected capacity change from 0 to 512 [ 169.288486][ T9934] Buffer I/O error on dev loop5, logical block 100, lost async page write [ 169.299785][ T9940] Buffer I/O error on dev loop6, logical block 120, lost async page write [ 169.322147][ T9959] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.336609][ T9934] Buffer I/O error on dev loop5, logical block 112, lost async page write [ 169.346779][ T9953] Buffer I/O error on dev loop6, logical block 75, lost async page write [ 169.356865][ T9940] Buffer I/O error on dev loop6, logical block 124, lost async page write [ 169.379080][ T9959] ext4 filesystem being mounted at /352/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.424026][ T9963] 8021q: adding VLAN 0 to HW filter on device bond11 [ 169.431113][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.456736][ T9954] netlink: 'syz.0.2170': attribute type 58 has an invalid length. [ 169.464691][ T9954] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2170'. [ 169.492583][ T9965] 8021q: adding VLAN 0 to HW filter on device batadv11 [ 169.507909][ T9965] bond11: (slave batadv11): Enslaving as an active interface with an up link [ 169.539283][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 169.539296][ T29] audit: type=1326 audit(1757639277.482:8375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9966 comm="syz.1.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90958eeba9 code=0x7ffc0000 [ 169.568942][ T29] audit: type=1326 audit(1757639277.482:8376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9966 comm="syz.1.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f90958eeba9 code=0x7ffc0000 [ 169.580318][ T9968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2170'. [ 169.592368][ T29] audit: type=1326 audit(1757639277.482:8377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9966 comm="syz.1.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f90958eebe3 code=0x7ffc0000 [ 169.624656][ T29] audit: type=1326 audit(1757639277.482:8378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9966 comm="syz.1.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f90958ed65f code=0x7ffc0000 [ 169.649266][ T9967] loop1: detected capacity change from 0 to 2048 [ 169.696040][ T29] audit: type=1326 audit(1757639277.582:8379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9966 comm="syz.1.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f90958eec37 code=0x7ffc0000 [ 169.719638][ T29] audit: type=1326 audit(1757639277.602:8380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9966 comm="syz.1.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f90958ed510 code=0x7ffc0000 [ 169.743197][ T29] audit: type=1326 audit(1757639277.602:8381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9966 comm="syz.1.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f90958ee7ab code=0x7ffc0000 [ 169.766530][ T29] audit: type=1326 audit(1757639277.602:8382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9966 comm="syz.1.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f90958ed80a code=0x7ffc0000 [ 169.769652][ T9967] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.789821][ T29] audit: type=1326 audit(1757639277.602:8383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9966 comm="syz.1.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f90958ed80a code=0x7ffc0000 [ 169.825066][ T29] audit: type=1326 audit(1757639277.602:8384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9966 comm="syz.1.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f90958ed417 code=0x7ffc0000 [ 169.835437][ T9972] loop3: detected capacity change from 0 to 128 [ 169.974841][ T9967] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 169.999405][ T9967] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 170.011790][ T9967] EXT4-fs (loop1): This should not happen!! Data will be lost [ 170.011790][ T9967] [ 170.021580][ T9967] EXT4-fs (loop1): Total free blocks count 0 [ 170.027821][ T9967] EXT4-fs (loop1): Free/Dirty block details [ 170.033784][ T9967] EXT4-fs (loop1): free_blocks=66060288 [ 170.039416][ T9967] EXT4-fs (loop1): dirty_blocks=48 [ 170.044604][ T9967] EXT4-fs (loop1): Block reservation details [ 170.050649][ T9967] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 170.087174][ T9999] netlink: 'syz.5.2186': attribute type 1 has an invalid length. [ 170.108669][ T9999] 8021q: adding VLAN 0 to HW filter on device bond19 [ 170.126796][ T9999] 8021q: adding VLAN 0 to HW filter on device batadv16 [ 170.135801][ T9999] bond19: (slave batadv16): Enslaving as an active interface with an up link [ 170.146766][T10001] loop6: detected capacity change from 0 to 512 [ 170.176655][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.184844][T10001] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.222414][T10007] loop3: detected capacity change from 0 to 128 [ 170.229318][T10001] ext4 filesystem being mounted at /354/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.277913][ T4618] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.380110][T10020] loop6: detected capacity change from 0 to 8192 [ 170.393387][T10020] netlink: 'syz.6.2190': attribute type 58 has an invalid length. [ 170.401247][T10020] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2190'. [ 170.515525][T10028] loop5: detected capacity change from 0 to 256 [ 170.563327][T10032] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2190'. [ 170.642277][T10040] loop1: detected capacity change from 0 to 128 [ 170.648826][T10036] loop3: detected capacity change from 0 to 2048 [ 170.702911][T10036] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.741518][T10036] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 170.764410][T10036] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 170.776887][T10036] EXT4-fs (loop3): This should not happen!! Data will be lost [ 170.776887][T10036] [ 170.786540][T10036] EXT4-fs (loop3): Total free blocks count 0 [ 170.792527][T10036] EXT4-fs (loop3): Free/Dirty block details [ 170.798432][T10036] EXT4-fs (loop3): free_blocks=66060288 [ 170.803992][T10036] EXT4-fs (loop3): dirty_blocks=48 [ 170.809104][T10036] EXT4-fs (loop3): Block reservation details [ 170.815140][T10036] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 170.881576][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.903114][T10048] loop6: detected capacity change from 0 to 512 [ 170.931328][T10048] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.944120][T10048] ext4 filesystem being mounted at /356/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.973886][ T4618] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.999377][T10057] netlink: 'syz.6.2204': attribute type 1 has an invalid length. [ 171.018060][T10057] 8021q: adding VLAN 0 to HW filter on device bond19 [ 171.055247][T10067] FAULT_INJECTION: forcing a failure. [ 171.055247][T10067] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.068428][T10067] CPU: 1 UID: 0 PID: 10067 Comm: syz.6.2207 Not tainted syzkaller #0 PREEMPT(voluntary) [ 171.068496][T10067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 171.068564][T10067] Call Trace: [ 171.068569][T10067] [ 171.068576][T10067] __dump_stack+0x1d/0x30 [ 171.068594][T10067] dump_stack_lvl+0xe8/0x140 [ 171.068619][T10067] dump_stack+0x15/0x1b [ 171.068632][T10067] should_fail_ex+0x265/0x280 [ 171.068652][T10067] should_fail+0xb/0x20 [ 171.068725][T10067] should_fail_usercopy+0x1a/0x20 [ 171.068751][T10067] _copy_from_user+0x1c/0xb0 [ 171.068861][T10067] __se_sys_mount+0x10d/0x2e0 [ 171.068958][T10067] ? fput+0x8f/0xc0 [ 171.068982][T10067] ? ksys_write+0x192/0x1a0 [ 171.069003][T10067] __x64_sys_mount+0x67/0x80 [ 171.069027][T10067] x64_sys_call+0x2b4d/0x2ff0 [ 171.069109][T10067] do_syscall_64+0xd2/0x200 [ 171.069135][T10067] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 171.069163][T10067] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 171.069232][T10067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.069260][T10067] RIP: 0033:0x7f3e492feba9 [ 171.069276][T10067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.069349][T10067] RSP: 002b:00007f3e47d5f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 171.069368][T10067] RAX: ffffffffffffffda RBX: 00007f3e49545fa0 RCX: 00007f3e492feba9 [ 171.069398][T10067] RDX: 0000200000000240 RSI: 0000200000000040 RDI: 0000000000000000 [ 171.069409][T10067] RBP: 00007f3e47d5f090 R08: 0000200000000440 R09: 0000000000000000 [ 171.069419][T10067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.069429][T10067] R13: 00007f3e49546038 R14: 00007f3e49545fa0 R15: 00007ffe930d4588 [ 171.069447][T10067] [ 171.270815][T10059] loop1: detected capacity change from 0 to 512 [ 171.313380][T10059] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 171.347195][T10059] EXT4-fs (loop1): orphan cleanup on readonly fs [ 171.355329][T10059] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.2205: corrupted inode contents [ 171.371651][T10059] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.2205: mark_inode_dirty error [ 171.383279][T10059] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.2205: corrupted inode contents [ 171.416400][T10079] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2210'. [ 171.426473][T10080] loop5: detected capacity change from 0 to 8192 [ 171.434264][T10059] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.2205: mark_inode_dirty error [ 171.435124][T10080] netlink: 'syz.5.2212': attribute type 58 has an invalid length. [ 171.453454][T10080] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2212'. [ 171.458635][T10059] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.2205: corrupted inode contents [ 171.463000][T10068] IPv6: Can't replace route, no match found [ 171.481740][T10059] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 171.490737][T10059] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.2205: corrupted inode contents [ 171.502826][T10059] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.2205: mark_inode_dirty error [ 171.522335][T10059] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 171.558978][T10059] EXT4-fs (loop1): 1 truncate cleaned up [ 171.565094][ T31] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 1 [ 171.582859][T10059] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 171.594425][T10082] sd 0:0:1:0: device reset [ 171.671661][T10086] netlink: 'syz.0.2214': attribute type 1 has an invalid length. [ 171.693470][T10086] 8021q: adding VLAN 0 to HW filter on device bond23 [ 171.703487][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.711446][T10086] 8021q: adding VLAN 0 to HW filter on device batadv19 [ 171.720842][T10086] bond23: (slave batadv19): Enslaving as an active interface with an up link [ 171.790858][T10095] netlink: 'syz.6.2218': attribute type 1 has an invalid length. [ 171.810168][T10095] 8021q: adding VLAN 0 to HW filter on device bond20 [ 171.832952][T10098] loop1: detected capacity change from 0 to 512 [ 171.874591][T10098] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.889436][T10098] ext4 filesystem being mounted at /361/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.967780][T10116] FAULT_INJECTION: forcing a failure. [ 171.967780][T10116] name failslab, interval 1, probability 0, space 0, times 0 [ 171.980641][T10116] CPU: 1 UID: 0 PID: 10116 Comm: syz.0.2220 Not tainted syzkaller #0 PREEMPT(voluntary) [ 171.980681][T10116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 171.980691][T10116] Call Trace: [ 171.980697][T10116] [ 171.980704][T10116] __dump_stack+0x1d/0x30 [ 171.980724][T10116] dump_stack_lvl+0xe8/0x140 [ 171.980784][T10116] dump_stack+0x15/0x1b [ 171.980797][T10116] should_fail_ex+0x265/0x280 [ 171.980817][T10116] should_failslab+0x8c/0xb0 [ 171.980848][T10116] __kvmalloc_node_noprof+0x123/0x4e0 [ 171.980872][T10116] ? alloc_fdtable+0x10b/0x1d0 [ 171.980961][T10116] alloc_fdtable+0x10b/0x1d0 [ 171.980979][T10116] dup_fd+0x4c7/0x540 [ 171.981036][T10116] copy_files+0x98/0xf0 [ 171.981057][T10116] copy_process+0xc5b/0x2000 [ 171.981118][T10116] kernel_clone+0x16c/0x5c0 [ 171.981139][T10116] ? vfs_write+0x7e8/0x960 [ 171.981158][T10116] __x64_sys_clone+0xe6/0x120 [ 171.981186][T10116] x64_sys_call+0x119c/0x2ff0 [ 171.981270][T10116] do_syscall_64+0xd2/0x200 [ 171.981296][T10116] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 171.981332][T10116] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 171.981355][T10116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.981372][T10116] RIP: 0033:0x7f76bb89eba9 [ 171.981385][T10116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.981478][T10116] RSP: 002b:00007f76ba2bcfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 171.981494][T10116] RAX: ffffffffffffffda RBX: 00007f76bbae6180 RCX: 00007f76bb89eba9 [ 171.981505][T10116] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000041200000 [ 171.981516][T10116] RBP: 00007f76ba2bd090 R08: 0000000000000000 R09: 0000000000000000 [ 171.981526][T10116] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 171.981536][T10116] R13: 00007f76bbae6218 R14: 00007f76bbae6180 R15: 00007ffc34b44cc8 [ 171.981579][T10116] [ 172.209133][T10115] loop6: detected capacity change from 0 to 256 [ 172.250291][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.492678][T10133] FAULT_INJECTION: forcing a failure. [ 172.492678][T10133] name failslab, interval 1, probability 0, space 0, times 0 [ 172.505320][T10133] CPU: 1 UID: 0 PID: 10133 Comm: syz.1.2229 Not tainted syzkaller #0 PREEMPT(voluntary) [ 172.505424][T10133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 172.505434][T10133] Call Trace: [ 172.505440][T10133] [ 172.505522][T10133] __dump_stack+0x1d/0x30 [ 172.505544][T10133] dump_stack_lvl+0xe8/0x140 [ 172.505560][T10133] dump_stack+0x15/0x1b [ 172.505574][T10133] should_fail_ex+0x265/0x280 [ 172.505594][T10133] ? rdma_restrack_init+0x31/0x270 [ 172.505657][T10133] should_failslab+0x8c/0xb0 [ 172.505683][T10133] __kmalloc_cache_noprof+0x4c/0x320 [ 172.505716][T10133] rdma_restrack_init+0x31/0x270 [ 172.505783][T10133] _ib_alloc_device+0x4e/0x460 [ 172.505801][T10133] siw_newlink+0xd6/0x680 [ 172.505853][T10133] nldev_newlink+0x369/0x3f0 [ 172.505911][T10133] ? __pfx_nldev_newlink+0x10/0x10 [ 172.505942][T10133] rdma_nl_rcv+0x479/0x5a0 [ 172.505960][T10133] ? selinux_nlmsg_lookup+0x99/0x890 [ 172.505994][T10133] netlink_unicast+0x5bd/0x690 [ 172.506018][T10133] netlink_sendmsg+0x58b/0x6b0 [ 172.506040][T10133] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.506079][T10133] __sock_sendmsg+0x142/0x180 [ 172.506109][T10133] ____sys_sendmsg+0x31e/0x4e0 [ 172.506133][T10133] ___sys_sendmsg+0x17b/0x1d0 [ 172.506203][T10133] __x64_sys_sendmsg+0xd4/0x160 [ 172.506228][T10133] x64_sys_call+0x191e/0x2ff0 [ 172.506289][T10133] do_syscall_64+0xd2/0x200 [ 172.506321][T10133] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 172.506351][T10133] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 172.506375][T10133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.506395][T10133] RIP: 0033:0x7f90958eeba9 [ 172.506411][T10133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.506429][T10133] RSP: 002b:00007f909430d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.506485][T10133] RAX: ffffffffffffffda RBX: 00007f9095b36180 RCX: 00007f90958eeba9 [ 172.506498][T10133] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 000000000000000b [ 172.506511][T10133] RBP: 00007f909430d090 R08: 0000000000000000 R09: 0000000000000000 [ 172.506525][T10133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.506540][T10133] R13: 00007f9095b36218 R14: 00007f9095b36180 R15: 00007ffc787e89d8 [ 172.506558][T10133] [ 173.057423][T10141] netlink: 'syz.5.2233': attribute type 1 has an invalid length. [ 173.090306][T10141] 8021q: adding VLAN 0 to HW filter on device bond20 [ 173.173489][T10155] loop3: detected capacity change from 0 to 512 [ 173.195281][T10158] FAULT_INJECTION: forcing a failure. [ 173.195281][T10158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.208471][T10158] CPU: 0 UID: 0 PID: 10158 Comm: syz.0.2240 Not tainted syzkaller #0 PREEMPT(voluntary) [ 173.208500][T10158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 173.208510][T10158] Call Trace: [ 173.208515][T10158] [ 173.208597][T10158] __dump_stack+0x1d/0x30 [ 173.208615][T10158] dump_stack_lvl+0xe8/0x140 [ 173.208630][T10158] dump_stack+0x15/0x1b [ 173.208644][T10158] should_fail_ex+0x265/0x280 [ 173.208666][T10158] should_fail+0xb/0x20 [ 173.208701][T10158] should_fail_usercopy+0x1a/0x20 [ 173.208721][T10158] _copy_from_user+0x1c/0xb0 [ 173.208746][T10158] ___sys_sendmsg+0xc1/0x1d0 [ 173.208781][T10158] __x64_sys_sendmsg+0xd4/0x160 [ 173.208883][T10158] x64_sys_call+0x191e/0x2ff0 [ 173.208901][T10158] do_syscall_64+0xd2/0x200 [ 173.208926][T10158] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 173.209023][T10158] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 173.209051][T10158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.209071][T10158] RIP: 0033:0x7f76bb89eba9 [ 173.209167][T10158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.209189][T10158] RSP: 002b:00007f76ba2ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.209209][T10158] RAX: ffffffffffffffda RBX: 00007f76bbae5fa0 RCX: 00007f76bb89eba9 [ 173.209220][T10158] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 173.209230][T10158] RBP: 00007f76ba2ff090 R08: 0000000000000000 R09: 0000000000000000 [ 173.209242][T10158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.209292][T10158] R13: 00007f76bbae6038 R14: 00007f76bbae5fa0 R15: 00007ffc34b44cc8 [ 173.209311][T10158] [ 173.400022][T10156] sd 0:0:1:0: device reset [ 173.408604][T10155] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.432491][T10155] ext4 filesystem being mounted at /458/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.492555][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.576499][T10189] loop5: detected capacity change from 0 to 256 [ 173.622585][T10196] sd 0:0:1:0: device reset [ 173.687985][T10200] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.739825][T10203] __nla_validate_parse: 2 callbacks suppressed [ 173.739854][T10203] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2255'. [ 173.774630][T10200] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.816013][T10207] loop6: detected capacity change from 0 to 2048 [ 173.834165][T10207] EXT4-fs (loop6): blocks per group (262144) and clusters per group (16384) inconsistent [ 173.845308][T10200] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.870556][T10210] loop3: detected capacity change from 0 to 512 [ 173.877792][T10207] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2256'. [ 173.901062][T10210] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.925953][T10210] ext4 filesystem being mounted at /461/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.947733][T10200] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.974038][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.006329][ T3804] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.021468][ T3804] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.043930][T10219] FAULT_INJECTION: forcing a failure. [ 174.043930][T10219] name failslab, interval 1, probability 0, space 0, times 0 [ 174.056595][ T3804] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.056647][T10219] CPU: 0 UID: 0 PID: 10219 Comm: syz.0.2261 Not tainted syzkaller #0 PREEMPT(voluntary) [ 174.056682][T10219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 174.056692][T10219] Call Trace: [ 174.056697][T10219] [ 174.056719][T10219] __dump_stack+0x1d/0x30 [ 174.056741][ T3804] ================================================================== [ 174.056737][T10219] dump_stack_lvl+0xe8/0x140 [ 174.056762][T10219] dump_stack+0x15/0x1b [ 174.056770][ T3804] BUG: KCSAN: data-race in data_push_tail / string [ 174.056779][T10219] should_fail_ex+0x265/0x280 [ 174.056817][ T3804] [ 174.056814][T10219] should_failslab+0x8c/0xb0 [ 174.056823][ T3804] write to 0xffffffff88e28450 of 1 bytes by task 10219 on cpu 0: [ 174.056840][T10219] kmem_cache_alloc_noprof+0x50/0x310 [ 174.056850][ T3804] string+0x187/0x220 [ 174.056870][ T3804] vsnprintf+0x532/0x890 [ 174.056894][ T3804] vscnprintf+0x41/0x90 [ 174.056912][ T3804] printk_sprint+0x30/0x2d0 [ 174.056932][ T3804] vprintk_store+0x599/0x860 [ 174.056932][T10219] ? audit_log_start+0x365/0x6c0 [ 174.056950][ T3804] vprintk_emit+0x178/0x650 [ 174.056963][T10219] audit_log_start+0x365/0x6c0 [ 174.056969][ T3804] vprintk_default+0x26/0x30 [ 174.056987][ T3804] vprintk+0x1d/0x30 [ 174.057007][ T3804] _printk+0x79/0xa0 [ 174.057038][ T3804] dump_stack_print_info+0xee/0x1b0 [ 174.057052][T10219] audit_seccomp+0x48/0x100 [ 174.057063][ T3804] __dump_stack+0x11/0x30 [ 174.057077][T10219] ? __seccomp_filter+0x68c/0x10d0 [ 174.057081][ T3804] dump_stack_lvl+0xe8/0x140 [ 174.057100][ T3804] dump_stack+0x15/0x1b [ 174.057100][T10219] __seccomp_filter+0x69d/0x10d0 [ 174.057118][ T3804] should_fail_ex+0x265/0x280 [ 174.057124][T10219] ? __list_add_valid_or_report+0x38/0xe0 [ 174.057145][ T3804] should_failslab+0x8c/0xb0 [ 174.057170][T10219] ? _raw_spin_unlock+0x26/0x50 [ 174.057176][ T3804] kmem_cache_alloc_noprof+0x50/0x310 [ 174.057207][ T3804] audit_log_start+0x365/0x6c0 [ 174.057230][ T3804] audit_seccomp+0x48/0x100 [ 174.057251][ T3804] __seccomp_filter+0x69d/0x10d0 [ 174.057195][T10219] __secure_computing+0x82/0x150 [ 174.057269][ T3804] __secure_computing+0x82/0x150 [ 174.057290][ T3804] syscall_trace_enter+0xcf/0x1e0 [ 174.057285][T10219] syscall_trace_enter+0xcf/0x1e0 [ 174.057313][ T3804] do_syscall_64+0xac/0x200 [ 174.057319][T10219] do_syscall_64+0xac/0x200 [ 174.057347][T10219] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 174.057345][ T3804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.057374][ T3804] [ 174.057370][T10219] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 174.057381][ T3804] read to 0xffffffff88e28450 of 8 bytes by task 3804 on cpu 1: [ 174.057404][ T3804] data_push_tail+0xfd/0x420 [ 174.057428][ T3804] data_alloc+0xbf/0x2b0 [ 174.057399][T10219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.057467][T10219] RIP: 0033:0x7f76bb89d5bc [ 174.057457][ T3804] prb_reserve+0x808/0xaf0 [ 174.057482][T10219] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 174.057499][ T3804] vprintk_store+0x56d/0x860 [ 174.057513][ T3804] vprintk_emit+0x178/0x650 [ 174.057528][ T3804] dev_vprintk_emit+0x242/0x2a0 [ 174.057551][ T3804] dev_printk_emit+0x84/0xb0 [ 174.057569][T10219] RSP: 002b:00007f76ba2ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 174.057574][ T3804] __netdev_printk+0x35c/0x3e0 [ 174.057588][T10219] RAX: ffffffffffffffda RBX: 00007f76bbae5fa0 RCX: 00007f76bb89d5bc [ 174.057606][ T3804] netdev_info+0x9b/0xd0 [ 174.057602][T10219] RDX: 000000000000000f RSI: 00007f76ba2ff0a0 RDI: 0000000000000003 [ 174.057626][T10219] RBP: 00007f76ba2ff090 R08: 0000000000000000 R09: 0000000000000000 [ 174.057628][ T3804] nsim_udp_tunnel_set_port+0x13b/0x160 [ 174.057639][T10219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.057653][T10219] R13: 00007f76bbae6038 R14: 00007f76bbae5fa0 R15: 00007ffc34b44cc8 [ 174.057652][ T3804] __udp_tunnel_nic_device_sync+0x564/0x9c0 [ 174.057673][ T3804] udp_tunnel_nic_device_sync_work+0x5d/0x5f0 [ 174.057692][ T3804] process_scheduled_works+0x4cb/0x9d0 [ 174.057722][ T3804] worker_thread+0x582/0x770 [ 174.057744][T10219] [ 174.057749][ T3804] kthread+0x489/0x510 [ 174.057766][ T3804] ret_from_fork+0x11f/0x1b0 [ 174.057784][ T3804] ret_from_fork_asm+0x1a/0x30 [ 174.057803][ T3804] [ 174.057807][ T3804] value changed: 0x00000000ffffef50 -> 0x617420746f4e2031 [ 174.057818][ T3804] [ 174.057823][ T3804] Reported by Kernel Concurrency Sanitizer on: [ 174.057839][ T3804] CPU: 1 UID: 0 PID: 3804 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(voluntary) [ 174.057869][ T3804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 174.057884][ T3804] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 174.057918][ T3804] ================================================================== [ 174.546816][T10226] pim6reg: entered allmulticast mode [ 174.557114][ T29] kauditd_printk_skb: 324 callbacks suppressed [ 174.557127][ T29] audit: type=1326 audit(1757639282.502:8706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10199 comm="+}[@S" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e492feba9 code=0x7ffc0000 [ 174.599661][T10231] pim6reg: left allmulticast mode [ 174.614890][ T29] audit: type=1326 audit(1757639282.532:8707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10199 comm="+}[@S" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e492feba9 code=0x7ffc0000 [ 174.639307][ T3804] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0