last executing test programs: 44.908980154s ago: executing program 2 (id=81): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0xd, &(0x7f0000000480)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xa4, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) r7 = socket$inet(0xa, 0x801, 0x0) accept4(r7, 0x0, 0x0, 0x800) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x44, 0x6, 0x460, 0x98, 0x160, 0x160, 0x0, 0x220, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0xff, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x6, 0x0, 0x40}, 0x0, 0x98, 0xc8, 0x0, {}, [@common=@unspec=@state={{0x28}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@ip={@private=0xa010102, @multicast1, 0xffffffff, 0xff000000, 'veth1\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0xff, 0x1, 0xc}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x7}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00', {0xff}}, 0x0, 0xb8, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@socket0={{0x20}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x0, 0xffff]}}]}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, 0x40810, 0x24445}, [@IFLA_PORT_SELF={0x4}, @IFLA_CARRIER={0x5, 0x21, 0x9b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r11 = socket$pptp(0x18, 0x1, 0x2) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) close_range(r11, 0xffffffffffffffff, 0x0) 44.015601342s ago: executing program 2 (id=91): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000005304"], 0x14}, 0x1, 0x0, 0x0, 0x24000841}, 0x4008840) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001003d48644ff72b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') read(r5, &(0x7f00000005c0)=""/4096, 0x1000) preadv(r5, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/133, 0xcd}], 0x1, 0xa6, 0x200) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x13, 0x1c, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000007000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf09000000000000009500000000000000b7080000000000007b9af8ff00000000b509050002000000dbaaf0ff00000000bda804000000000007080000f8ffffffbfa400000000000007000000f0ffffffb7020000080000001822000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000080000004600000076000000bf91000000000000b6080000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0}, 0x94) listen(r3, 0xfff) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000140)=ANY=[@ANYBLOB='^ '], 0x110) syz_extract_tcp_res$synack(&(0x7f0000000080)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaae3aaaa48ffa4318cfae1d6f295d31800140600fc000000000000000000000000000001fe8000000000800000000000000000aafffe4001", @ANYRES32=0x41424344, @ANYRES32=r7, @ANYBLOB="5002000090780000"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaa9a00000000000086dd600000000014060014810000000000100000000fce12670020389420dadb3c5000000000000000000000007100004e228a15053a12a661de67517d257610001dda5073307079d8", @ANYRES32=r7, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r8, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r11}}) write$P9_RVERSION(r12, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0xfffffd97) 43.964149794s ago: executing program 2 (id=93): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000940)={'wg2\x00', &(0x7f0000000900)=@ethtool_sset_info={0x37, 0x5, 0x2, [0x8, 0xfffffff8]}}) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0xb2a, 0x6, 0x0, 0x0, 0x8000008, 0x20005, 0xfffe, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty}, @can, @nl=@unspec, 0xa00, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="50010000", @ANYRES16=r5, @ANYBLOB="000427bd7000fcdbdf25190000005800018008000100", @ANYRES32=r3, @ANYBLOB="140002007866726d3000000000000000000000001400020064766d72703000000000000000000000080003000100000014000200766574683100000000000000000000000800030003000000340001801400020076657468315f746f5f62617461647600140002006772653001000000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="0c000180080001003ed3df20092dd1c503d74fbe47e7ae7a0f6f477e8cb2e41d1cd61fdff50628d8ba23acf7dae320e91f0ebc1ed5003e0ddde0a7465ec7e6695890f958c67621a884e3f7f8969fdd6b0113b0b9d8a842387fd30a1b5b74f40b3a3db85d2dbb733ee25735ce07e361f2910fb68822e3036d60578f2904dbcc2b53d1549d95c18278195e59092b8e5d932fcf1d09fc3c9ac680ccae16d7fb1d3fdbeb4997e152bcae9db2369a3513ee33c6d85512e6f88b8554cdceaea3f8f91360d641166a46f2c80bf476b5ddfe72007c3c20313c3c2ab5f2aba497676ad3626917", @ANYRES32=r6, @ANYBLOB="380001800800030001000000080003000200000008000100", @ANYRES32=r3, @ANYBLOB="140002006d6163766c616e30000000000000000008000300020000002800018014000200627269646765300000000000000000000800030002000000080003000200000044000180080003000300000008000100", @ANYRES32=r3, @ANYBLOB="080003000000000014000200000000000000000000000000000000001400020077673200"/48], 0x150}, 0x1, 0x0, 0x0, 0x20008084}, 0x804) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e21, 0x7, @mcast2, 0x208fc000}, {0xa, 0x0, 0xb, @loopback}, 0xffffffffffffffff, 0x4}}, 0x48) r7 = syz_open_dev$vcsn(&(0x7f0000000500), 0x6, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000008c0)={r7, 0x20, &(0x7f0000000600)={&(0x7f0000000540)=""/49, 0x31, 0x0, &(0x7f0000000580)=""/71, 0x47}}, 0x10) acct(0xfffffffffffffffe) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r3, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100fb8417b71280077877aa6f80e0866809274feef35f33065efbcb9cc05f8308eb06d0d281880d4b5ef734f31811cf7d7eb363d65532f02ad97be4dc5725789422bb19075286b9939ca234738a929fbda8b73194ba8d16972dc7b40ab7d27fa6b5c43428bf", @ANYRESOCT=r2, @ANYBLOB="14000600fe8000000000000000000000000000bb14000700fe8000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) syz_open_dev$mouse(&(0x7f00000004c0), 0x1ff, 0x20000) sendmmsg$inet(r0, &(0x7f0000000100)=[{{&(0x7f0000000040)={0x2, 0x4e25, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x11, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @private=0xa010101}}}], 0x14}}], 0x1, 0xc0) bpf$MAP_CREATE(0x0, 0x0, 0x50) setreuid(0xee01, 0x0) ioprio_get$uid(0x3, 0xee01) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r9, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) 43.867629528s ago: executing program 2 (id=94): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000040)=""/249) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTqhfYCQlUlRMWJQxsSN4pi11Hsiib0kB65V6ISJ+A/4MYBqScO3LjBjUs5IBWoQA0SB6MZT1I3sZNAnbiJfz9pMvPeTP29F/e953mR5wUwtC5ExGZEnImIOxExlecn+RbX2lt63csXDxe2XjxcSKLVuvX3JDuf5kXHv0m9k7/meER8/zsRP0r2xm2sb6zMV6uVtTw93aytTjfWNy4vF/Kc8tzs3MynVz4p962uH9R+/fzbyzd+8NvffOnZHza/+ZO0WJM/PZed66xHP7WrXozJjrzRiLhxFMEGZDT//8PJk7a2z0TEh1n7n4qR7N0EAE6zVmsqWlOdaQDgtEvv/ycjKZTyuYDJKBRKpfYc3vsxUajWG81LU/X79xYjm8M6H8XC3eVqZSafKzwfxSRNz2bHr9Ll19KPK1ci4r2IeDx2NjtfWqhXFwf5wQcAhtg7u8b/f421x/9OxUEVDgA4OuODLgAAcOyM/wAwfIz/ADB8/ofx37cDAeCUcP8PAMPH+A8Aw+fA8f/R8ZQDADgW37t5M91aW+3nX28/qfvyYqWxUqrdXygt1NdWS0v1+lK1UlpotQ56vWq9vjr78U6ysb5xu1a/f695e7k2v1S5XfEsAQAYvPc+ePqndNDfvHo226JjLQdjNZxuhUEXABiYkUEXABgY3+eB4XWIe3zTAHDKdVmity2fIEh6XfDE4q9wUl38vPl/GFZvMv9v7gBOtv9v/v9bfS8HcPyM4TC8Wq3Emv8AMGTM8QM9//6f6/mIkCf9LwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcFJPZlhRK2Vrgm+nPQqkUcS4izkcxubtcrcxExLsR8cex4lianh10oQGAN1T4a5Kv/3Vx6qPJ3WfPJP8ey/YR8eOf3/rZg/lmc202zf/HTn7zSZp/trlWPjOICgAAna7tzcrG73K+77iRf/ni4cL2dpxFfH69vbhoGncr39pnRmM0249HMSIm/pnk6bb088pIH+JvPoqIz23XfzwedESYzOZA2iuf7o6fxj7X9/idv//d8Quv1beQnUv3xex38dnYVTjgQE+vt/vJvO2lTTxvf4W4kO27t//xrId6c2n/lzbXrT39X2Gn/xvZEz/J2vyFnfT+JXn+8e++uyezNdU+9yjiC6Pd4ic78ZPu/W/xo0PW8c9f/PKHvc61fhFxsWv9t1ekrmXd7HSztjrdWN+4vFybX6osVe6Vy3OzczOfXvmkPJ3NUbd//r5bjL9dvfRur/hp/Sd6xB/fv/7xtUPW/5f/ufPDr+wT/xtf7f7+v79P/HRM/Poh489PXOu5fHcaf7FH/Q94/+PSIeM/+8vG4iEvBQCOQWN9Y2W+Wq2sHXCQftY86BoHhz9I7+3fgmJkB7EZ0a8XzCYlIqLrNekn6rejykd1kAws+q/6/YKD7pmAo/aq0Q+6JAAAAAAAAAAAAAAAQC+N9Y2Vse7f1urbwaDrCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn13wAAAP//KHnENg==") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x20) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01012abc7000fddbdf2531e3000000050036000000000005003300010000000a0001007770616e3100000005003500800000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000080000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000000600000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000200)='mm_page_alloc\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0xfffffffffffffe3c, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$rxrpc(0x21, 0x2, 0xa) r6 = syz_io_uring_setup(0x12ab, &(0x7f0000000140)={0x0, 0x7496, 0x0, 0x2, 0x1f6}, &(0x7f0000000740)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000440)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000180)='./file2\x00', &(0x7f0000000280), &(0x7f00000007c0)=ANY=[@ANYBLOB="0200193086d36034a30ba30f03003eb3575ca441ddbc2aae878ab0fb0b50efae3cda49a30adf34e7d09166f5e8a39557d604c37f01a712d5327bdf4a07c382973970f2e7bfb6b526aad144882c1788bcab707db6644c2c5a2af92638991b45c51af934f612f6a1cd7f89ee4c72de47ba1801505cc42f78df2f5ce40e9e90f249ebff06fc958082"], 0x9, 0x0) getdents64(r4, &(0x7f0000000580)=""/90, 0x5a) cachestat(r6, &(0x7f00000003c0)={0x3, 0x8}, &(0x7f0000000540), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x187842, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000940)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x54, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x10, 0x7ffc1ffb}]}) lchown(0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(&(0x7f00000003c0)={0x122125000, &(0x7f00000000c0), 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) 43.343934151s ago: executing program 2 (id=101): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000400)='.\x00', 0xa4000021) close_range(r2, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000180)={0x0, 0x0}) prlimit64(r4, 0xc, &(0x7f00000001c0)={0x800000008, 0x120}, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 42.051522366s ago: executing program 2 (id=113): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0xc}]}) umount2(&(0x7f0000000580)='./file0\x00', 0x2) socket$packet(0x11, 0x3, 0x300) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0xc, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6bf}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7}, 0x18) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) close_range(r4, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000140)=@usbdevfs_driver={0x9, 0x0, &(0x7f0000000900)="f908127d5960636bc88c2415990190bf7bb8a0ce9048b4ab3dbb6213b60ea920a75ece4287b6589ac329f86a2a3465d85c4f8767d836476f316b3f0db8d7aea629e81304f130edbba9c1f04cdfcf290ef5a009cf0bc92a6b07d9d28e8f61c87b3ffd102d0149899641470bcb6cbc73a75eba0de6ad58e4c696549df0126a26876e2601d05461084367f523c520223271a83b52c5bedb5f8ab34f2977879ab0fb52459d0e845607498724734642a07fab"}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000005c0)=ANY=[@ANYBLOB="0806030988bf060c0003aaaaaaaaaabb56c3a2020d5d88ce013ec3f996c59bb80000"], 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRESHEX=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r8, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9, 0x0, 0x7}, 0x18) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) 42.051312207s ago: executing program 32 (id=113): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0xc}]}) umount2(&(0x7f0000000580)='./file0\x00', 0x2) socket$packet(0x11, 0x3, 0x300) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0xc, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6bf}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7}, 0x18) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) close_range(r4, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000140)=@usbdevfs_driver={0x9, 0x0, &(0x7f0000000900)="f908127d5960636bc88c2415990190bf7bb8a0ce9048b4ab3dbb6213b60ea920a75ece4287b6589ac329f86a2a3465d85c4f8767d836476f316b3f0db8d7aea629e81304f130edbba9c1f04cdfcf290ef5a009cf0bc92a6b07d9d28e8f61c87b3ffd102d0149899641470bcb6cbc73a75eba0de6ad58e4c696549df0126a26876e2601d05461084367f523c520223271a83b52c5bedb5f8ab34f2977879ab0fb52459d0e845607498724734642a07fab"}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000005c0)=ANY=[@ANYBLOB="0806030988bf060c0003aaaaaaaaaabb56c3a2020d5d88ce013ec3f996c59bb80000"], 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRESHEX=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r8, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9, 0x0, 0x7}, 0x18) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) 38.302099508s ago: executing program 1 (id=159): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7050000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x5a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x13604, 0x0, 0x0, 0x6, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r2], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000380)='cpu==-||!') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000480)=ANY=[@ANYRESOCT=r3, @ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x40000) prctl$PR_SET_NAME(0xf, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x641, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10) fcntl$lock(r4, 0x5, &(0x7f0000000a80)={0x1, 0x0, 0x0, 0x8, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x10}]}}, 0x0, 0x26}, 0x28) unshare(0x2a020600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) sendmsg$nl_route(r7, 0x0, 0x0) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) syz_usb_disconnect(r8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d", @ANYRES16, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 37.478017874s ago: executing program 1 (id=165): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x1006, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) link(0x0, 0x0) 37.409859977s ago: executing program 1 (id=169): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'bond_slave_0\x00', &(0x7f00000003c0)=@ethtool_link_settings={0x4d, 0xffff0249, 0xf4, 0x46, 0xb, 0xb, 0x8, 0x6, 0x30, 0x7, [0x1, 0x8d06, 0xf72, 0x5, 0x400, 0x0, 0x1, 0xff]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r1, @ANYRESDEC=r1], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 37.353225079s ago: executing program 1 (id=170): openat$ptmx(0xffffffffffffff9c, 0x0, 0x20d00, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setitimer(0x0, 0xfffffffffffffffc, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0xcc04, &(0x7f0000000880)=ANY=[], 0x1, 0x217, &(0x7f0000019580)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000c80)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000001a40)={[{@discard}, {@min_batch_time={'min_batch_time', 0x3d, 0xa33b}}, {@noblock_validity}]}, 0x2c, 0x52c, &(0x7f0000000640)="$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") syz_clone(0x809300, &(0x7f0000000000)="b56cc12932aff0bf096aaa54a1cc419a4e68b93f336dd740b887ebeae896cf411c797f4560", 0x25, &(0x7f0000000300), &(0x7f00000004c0), &(0x7f0000000500)="2833bcd9e4") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x19, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000026001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, 0x0, &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r5}, 0x9) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000580)={0x500, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020200090f000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000002000100000004d20000020300000020050005002f8000000a00000000000000ff0100000000000000000000000000010000000000000000010018"], 0x78}}, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_tables_targets\x00') bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000f1940000000000000000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 37.185987376s ago: executing program 1 (id=174): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0xeb0, 0x30, 0xb, 0x0, 0x0, {}, [{0xe9c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x6, 0x40000003, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x8001, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x0, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0x7, 0x3, 0x3fc, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x81, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0xb}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000, 0xcb06}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x10000002, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x0, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0x1}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0xffffffff, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0x4, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x101, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x6, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x80006, 0x1, 0x3, 0x8}, {0xfffffff7, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x21, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x9, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x8000006, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x61c5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0xfffffffe, 0x6, 0x80000000}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xae82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdc}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x19a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d8, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x4581, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xfffffff9}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb0}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x80000007, 0x1, 0x8, 0x20005, 0x1b, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x10, 0x3a, 0xff, @private1, @mcast2, {[], @ni={0x8b, 0x0, 0x0, 0x2006, 0x96f9, 0x7}}}}}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) io_uring_setup(0x1962, &(0x7f0000000100)={0x0, 0x0, 0x100, 0x0, 0x214}) 36.936772247s ago: executing program 1 (id=176): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x470a, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {0x0, 0x0, 0x0, 0x200}, {}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x13f, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x8000}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 36.935993427s ago: executing program 33 (id=176): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x470a, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {0x0, 0x0, 0x0, 0x200}, {}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x13f, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x8000}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 34.358691099s ago: executing program 5 (id=199): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80006f, 0x81501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0xecff, 0x0, &(0x7f0000000080)={0x4b5a9da54893e123, 0x3, 0x5, 0xffff}, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0}) 34.227781314s ago: executing program 5 (id=204): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000005304"], 0x14}, 0x1, 0x0, 0x0, 0x24000841}, 0x4008840) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001003d48644ff72b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') read(r5, &(0x7f00000005c0)=""/4096, 0x1000) preadv(r5, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/133, 0xcd}], 0x1, 0xa6, 0x200) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x13, 0x1c, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000007000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf09000000000000009500000000000000b7080000000000007b9af8ff00000000b509050002000000dbaaf0ff00000000bda804000000000007080000f8ffffffbfa400000000000007000000f0ffffffb7020000080000001822000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000080000004600000076000000bf91000000000000b6080000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0}, 0x94) listen(r3, 0xfff) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000140)=ANY=[@ANYBLOB='^ '], 0x110) syz_extract_tcp_res$synack(&(0x7f0000000080)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaae3aaaa48ffa4318cfae1d6f295d31800140600fc000000000000000000000000000001fe8000000000800000000000000000aafffe4001", @ANYRES32=0x41424344, @ANYRES32=r7, @ANYBLOB="5002000090780000"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaa9a00000000000086dd600000000014060014810000000000100000000fce12670020389420dadb3c5000000000000000000000007100004e228a15053a12a661de67517d257610001dda5073307079d8", @ANYRES32=r7, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) writev(0xffffffffffffffff, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000500)) 34.166692667s ago: executing program 5 (id=206): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0900000004000000040000000c"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x80003, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x141040, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r3, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048000}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r4 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000680)=[{0x0}, {0x0}], 0x2) ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x88}], 0x1, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x2]}, 0x8, 0x800) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 33.299316714s ago: executing program 5 (id=215): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) sendfile(r1, r0, 0x0, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000004c0)="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"}, 0x20) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000007dbe00000008000a00", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r4, 0xf505, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000fc0)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001dc0)=@newtaction={0x44, 0x58, 0x284f, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0xd, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52e, &(0x7f0000000480)="$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") r8 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r9 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r9, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='usrjquota=') pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 32.331263816s ago: executing program 5 (id=224): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x10001, 0x3a, '\\', 0x3a, '', 0x3a, './file0'}, 0x28) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000400)='io_uring_create\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000500)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x8, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x99089e6a87f181e9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x4}, 0x18) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x105142, 0x1c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r6, 0x0) 32.039791328s ago: executing program 5 (id=228): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x6c, 0x0, &(0x7f0000000080)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000540)=@ethtool_link_settings={0x4d, 0x0, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3]}}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x5, 0x9}}, './file0\x00'}) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000380), &(0x7f00000003c0)=r7}, 0x20) r8 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x17, 0x80000000, 0x4e, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x700, 0x7, 0x8, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r9 = io_uring_setup(0x516, &(0x7f0000000640)={0x0, 0xddaa, 0x1, 0x503fa, 0x8100014e}) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendmsg$rds(r10, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x44, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r12}, 0x10) fstatfs(0xffffffffffffffff, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r13, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 32.039421919s ago: executing program 34 (id=228): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x6c, 0x0, &(0x7f0000000080)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000540)=@ethtool_link_settings={0x4d, 0x0, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3]}}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x5, 0x9}}, './file0\x00'}) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000380), &(0x7f00000003c0)=r7}, 0x20) r8 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x17, 0x80000000, 0x4e, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x700, 0x7, 0x8, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r9 = io_uring_setup(0x516, &(0x7f0000000640)={0x0, 0xddaa, 0x1, 0x503fa, 0x8100014e}) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendmsg$rds(r10, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x44, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r12}, 0x10) fstatfs(0xffffffffffffffff, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r13, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.903916615s ago: executing program 7 (id=633): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vlan0\x00'}) fchmodat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x120) 2.887024036s ago: executing program 7 (id=634): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1, 0x307, &(0x7f0000000a00)="$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") write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000100)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x24b}}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) wait4(r4, 0x0, 0x40000000, 0x0) ptrace$getsig(0x4202, r4, 0x9, &(0x7f0000000200)) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000019580)=@newtaction={0x594, 0x30, 0xffff, 0xfffffffe, 0x80, {}, [{0x580, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x6, 0x5, 0x9, 0xffffffdb, 0x3, 0x1, 0xd, 0x34f, 0x3, 0x6, 0x7, 0x986b, 0x40, 0x8, 0xeea, 0x3, 0x8, 0x9, 0x9, 0x2, 0x3, 0x86, 0x6, 0x5, 0x532c, 0xfffffffb, 0x0, 0xedba, 0x6, 0x2, 0x8, 0x8001, 0xffff, 0xffff7f6f, 0x6, 0x0, 0x8, 0x4, 0x3, 0x1000, 0x9, 0x5, 0x7, 0x5, 0xfffffffb, 0xfff, 0x5, 0x8, 0x7fe703d2, 0x4, 0x8001, 0x55e, 0x3, 0x7, 0x6, 0xe, 0xe2f6, 0x3, 0xfffffc14, 0x4, 0xfffffff1, 0x2, 0x5, 0x6, 0xc5, 0x0, 0xd, 0x8, 0x5, 0xdcc, 0x300000, 0xffff, 0x10001, 0xfffffffd, 0x5a, 0x3e88, 0x2, 0x1, 0x0, 0x9, 0x1, 0x4, 0xf, 0x800, 0x1b4, 0x7, 0xf, 0x81c5, 0xfffffffa, 0xd, 0x9, 0xfffffffd, 0x6, 0x10001, 0x1021000, 0x4, 0x22c5, 0x401, 0x2, 0x0, 0x9aa7, 0x14a476c4, 0xd54, 0x1, 0x39e, 0x2, 0x3ff, 0x0, 0x5d02, 0x8, 0x7, 0xff, 0x2dd8, 0x7, 0x3, 0xff, 0x6, 0x3, 0x6, 0x7, 0x713a, 0x9, 0x400, 0x1, 0x1000004e, 0x80, 0x9, 0x8, 0x8, 0x80000000, 0x8, 0x6, 0x3, 0x5, 0x2, 0x2, 0x6, 0x7fff, 0x4, 0x2, 0x6cc, 0x2, 0x8, 0x6, 0x1, 0x4, 0x5, 0xfffffffe, 0x10, 0x8, 0x0, 0xfe5, 0x8, 0xee, 0x2, 0x8, 0x10000000, 0x400, 0x7, 0xe45, 0x5, 0x2, 0x80, 0x3, 0x398, 0x40, 0x2e, 0x2d4, 0x3, 0x7, 0x6, 0x26, 0x200, 0x1bb, 0x1ff, 0x7, 0x800000, 0x502e, 0x3, 0x8, 0x4, 0x7, 0x80000001, 0xce, 0x9, 0x1, 0x9, 0x1002, 0xffff, 0x7, 0x2, 0x2, 0x5, 0x9, 0x10000000, 0xfffffffd, 0xd, 0x6, 0xdf3, 0x1, 0x910, 0x3ff, 0x9, 0x8, 0x4, 0x1ff, 0x7fff, 0x401, 0x6249d0db, 0x2e01, 0x1, 0x9, 0x5, 0x7fffffff, 0x361, 0xfffffc01, 0x6, 0x337, 0x28, 0x6, 0x1, 0x6fa, 0x8001, 0x400, 0x0, 0x7, 0xffffffff, 0xfffffff7, 0xfffffff9, 0x7a2, 0x0, 0xb05, 0x200, 0xa40, 0x4, 0xfff, 0x1, 0x3, 0x3, 0xf, 0x400, 0x4, 0x4b4, 0x0, 0x7e, 0x5, 0x960, 0x8, 0xff, 0x98e, 0xfffffff9, 0x800, 0x2, 0x9, 0x1a]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x81, 0x2, 0x4, 0x8, 0xf, {0xd, 0x0, 0x2, 0x4, 0x0, 0x3}, {0x2, 0x2, 0x5, 0x7, 0x2}, 0x23a, 0x7, 0xd000000}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xa8, 0x12, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1514, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0xb6a, 0x1, 0x2, 0x698}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xc45, 0x7}}]}, {0x4b, 0x6, "4d5c4297509b75dc2c36f4255708b7df68a4984818a1ede285db5160f8d827f7bb6b37e508d5bc3daa0541018f6553e2db4f8a9afe76e8d759f988cbe3204342b999e15a3e638d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_mpls={0x64, 0x16, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x8864}, @TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_BOS={0x5}]}, {0xd, 0x6, "4ddff0aacf73fd4a1a"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x594}, 0x1, 0x0, 0x0, 0x40000}, 0x0) memfd_secret(0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff9e7b000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x138) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 1.965421926s ago: executing program 7 (id=647): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x8000007beb, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0), 0x0) 1.493288076s ago: executing program 0 (id=650): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getuid() ioprio_get$uid(0x3, 0xee01) 1.465579447s ago: executing program 0 (id=652): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xb) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYRES16], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f600000085"], 0x0, 0x0, 0x0, 0x0, 0x20780, 0x40, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000008c0)='rxrpc_call_reset\x00', r1, 0x0, 0x1}, 0x18) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000840)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x2, 0x1}, 0x10) sendmsg$tipc(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000090}, 0x95) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000000), 0x4) r4 = dup3(r2, r3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000faffffff840000002d00000095ef"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000000000900000000060015000200000014001680100008800c00018006000180"], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x4000000) socket$kcm(0x11, 0x200000000000002, 0x300) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x569, &(0x7f00000002c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000940)=ANY=[], 0x361, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) 1.39841942s ago: executing program 4 (id=654): syz_mount_image$ext4(&(0x7f0000002180)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008802, &(0x7f0000000000)={[{@jqfmt_vfsv1}, {@abort}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@data_ordered}, {@mblk_io_submit}, {@usrquota}, {@nodioread_nolock}, {@errors_remount}, {}, {@auto_da_alloc}]}, 0x9, 0x606, &(0x7f0000000600)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', '', [], 0xa, "fedabe6027d203102223c8dd4ddc7ab7b97d085e609f53c66bc8fb2dc535f53ad02c5ed8781f4d9a708173a3b6cfb453610a635a46699d7a49df508f54ba22e3a944abf35560fb24ef9b2ace0791d7e5b77c61bbdde7538f6ff730f133f33708c7f1eaf0ee690b71e473"}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1.288052015s ago: executing program 4 (id=655): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socket$inet6(0xa, 0x80002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r2}, 0x18) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000001580)={[{@map_off}, {@session={'session', 0x3d, 0x17}, 0x0}, {@sbsector={'sbsector', 0x3d, 0x100000001}}, {@sbsector={'sbsector', 0x3d, 0x5}}, {@session={'session', 0x3d, 0x62}}, {@nojoliet, 0x41}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@session={'session', 0x3d, 0x58}}, {@showassoc}, {@mode={'mode', 0x3d, 0xfffffffffffffffe}}, {}]}, 0xfa, 0x69f, &(0x7f0000000840)="$eJzs3c9v2+Ydx/EP5V+yOwTFNhRBkB9PkhVwsEyR5MaBkQEtR1E2N0kUSHmwgQFF1thFEDndkg5YfOl82Q+gA3berZcddts/MKDn/he7bUCx3QZsBw4kRVmyRMlqHLdZ3y8jEUV++Txfkgq/oSU+EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkOXUyuWKpYbX2t4x+Zxa4DcnLE9bW9CtdOLW1H4lK/6jYlEX01kXv328+I34rxu6nD67rGL8UNTha2+8fv9b84Vs/QkJfRGatcFnzw8fP+h2956eInZOMzf/ZVLhFEGbbssLfa9pb7rGC32zsb5evrNVD03da7jhbthxm8YJ3ELHD8yqc8tUNjbWjFva9bdbmzW74WYz732vWi6vmx8upQdaUil0trxGw2ttJjHx4jjmnvn4J2mAazeN2X/U3VublmQcVMlbWBgIqk5rqVquViuVarWyfnfj7r1yeX5kRjlmlfs0EnHmL1q8Ys7u5A28oEJc//9mSQ0V1dK2dmTG/jiqKZCvZs7ynqz+v3nHndjvYP3PqvxF6e3e4ktK6v/V9NnVvPqfk4uRSVYYt8TKmT/bz0KSkdEzPdehHuuBuupqT0/PoG0jc+1MWjmHn025aslTKF+emrKTOaY3x2hD61pXWe9qS3WFMqrLU0OuQu0qVEdu8opyFMiVrY58BTJalaNbMqpoQxtak5Grknbla1stbaomW/+Oomhfj5L9vjYhR2VBlZyApcGg6oSW8ur/Tz9KX6e9+l+m/n9dpa+DpfThs0kxwFdA1Lv+n9G1l5MNAAAAAAB4Gazkt+9W8t79FUmR6l7DLeevsHie2QEAAAAAgLNgKVrSZVnx9b+kK7KmXP8DAAAAAIBXjpXcY2dJWkk+1G8d3wl1ml8CzJ1DigAAAAAA4AUld/5fXZSiZNCKa7Jmuv4HAAAAAACvgN8OjLE/n42xG2Vv6xckhe0l66//XFKwYB21d75jHdjxEvtgrpCEjHwCoFO/ZIV/SAfqTcbrXZSUPHPcy1avt94gmP1xBz/fnzbWvxWcSGBxbrCBEwlc6K1txT2vz/ee6WNdf3so9uFhQcmStJeVutdwS47fuF+RbV8odNydzi+ePPqlFPS3c/9Rd6/03gfdh0kuR/Gso4M4j4+ydP6y2Nt1w7kkD/1c/hulpCtjt3hZ9azL37WaK1bSbznb/jnZB4XjY5S7/cN96te6kR6zGytp7Mphf8T9ePuL8fZXSskhG9r6YME6zqJycsvHHYicLIpJFjfTmJurN9OHLL+4nYJV/O6cVC2NHoOhLKqDWUzfF9a/RvbFpCx6+2ItzuLTuKGcLNZmy2LkiADAl2U/GfUnufMvGcR8pO5m5SE7qX2hujO9ur8zXN0//GNcGdP/Xsz33puY2EtR8Rl91Urq0KKSE+v8pZEzerY19oWics7o5ReobnFffz7+DqRe2iNZ/CeKovuVpN/fn6iqn8QrfJLbb9hId/udDw9+lgyAH3t/7/29J9Xq2nr5rXL5blULyWb0HuZE7QEAjJj+HTtTI6y3dD2NuP7wH2+mU0MV75v9jxSU9J4+UFcPtZB9hcC18a2uDHwM4XZ61aqBq1bzxuv3l6WTsRXdzr2qS2rpQGy1H7ugbJXhSn0cu/aSjwIAAOfrxpQ6PL7+F4fq/22tphGrl8Zedw/X8t7Vcf+SPi+2Mj35d856bwAA8PXgBp9bK53fWEHgtd+tbGxU7M6WawLf+ZEJvNqma7xWxw2cLbu16Zp24Hd8x2+YdqAlr+aGJtxut/2gY+p+YNp+6O0k3/xuel/9HrpNu9XxnLDdcO3QNY7f6thOx9S80DHt7R80vHDLDZKVw7breHXPsTue3zKhvx04bsmY0HUHAr2a2+p4dS+ebJl24DXtYNf82G9sN11Tc0Mn8NodP20w68tr1f2gmTRbUjTzFx0CAPD/6Nnzw8cPut29pycnluNL83TOkXJiRicWxzTIGEEAAHzFHJfrGVYq9qc+jV5KVgAAAAAAAAAAAAAAAAAAAAAAYND0W/pmnFgYd7Og1J/z8wu9OfqVjm8xHGnH0lknNstEYda1slsiDh9/NiF4uT8n2/2DMUfntoF//4b0WjJH6Zz5ccHF/Has6X0tTzi4p5yYi3fQaYO/v5/u0dyYeOHYRUv9YzF/9v8c4oknf8pZFEVRNHn1peF9uDhpA4cn5iU9XXyBQ3D+5yIA5+t/AQAA//+xxzz3") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) 1.277307995s ago: executing program 0 (id=656): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xb) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYRES16], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f600000085"], 0x0, 0x0, 0x0, 0x0, 0x20780, 0x40, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000008c0)='rxrpc_call_reset\x00', r1, 0x0, 0x1}, 0x18) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000840)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x2, 0x1}, 0x10) sendmsg$tipc(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000090}, 0x95) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000000), 0x4) r4 = dup3(r2, r3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000faffffff840000002d00000095ef"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000000000900000000060015000200000014001680100008800c00018006000180"], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x4000000) socket$kcm(0x11, 0x200000000000002, 0x300) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000940)=ANY=[], 0x361, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) 1.237236107s ago: executing program 4 (id=657): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x8000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x22, 0x4, 0x7ffc1ffb}]}) ustat(0x801, &(0x7f0000000240)) 1.219074418s ago: executing program 3 (id=658): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0900000004000000040000000c"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x80003, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x141040, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r3, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048000}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r4 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000680)=[{0x0}, {0x0}], 0x2) ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x88}], 0x1, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x2]}, 0x8, 0x800) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 1.212842638s ago: executing program 4 (id=659): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000001940)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}], [], 0x6b}}) 1.154324001s ago: executing program 6 (id=660): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01030000000000000000010000000800010014000000080003"], 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x44) 1.107363863s ago: executing program 4 (id=661): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x99089e6a87f181e9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x105142, 0x1c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r1, 0x0) 1.098791203s ago: executing program 6 (id=662): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getuid() ioprio_get$uid(0x3, 0xee01) 1.058042114s ago: executing program 0 (id=663): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0xa, 0x2) socket$key(0xf, 0x3, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r1, 0x0, 0x25, 0xe, @val=@netkit={@void, @value=r3}}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r4, &(0x7f00000019c0)=""/4097, 0x1001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030002100000002cbd7000fcdbdf2502000800080000001c0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000004d3f600070c0000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x34, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x1, 0xfc}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x34}}, 0x0) 1.057854065s ago: executing program 7 (id=664): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180100001c000000000000000000000c850000006d00000095"], &(0x7f0000001800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='9p_protocol_dump\x00', r3}, 0x10) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000001940)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}], [], 0x6b}}) 1.032633616s ago: executing program 6 (id=665): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x8000}, 0x18) faccessat2(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x2, 0x1200) 939.65255ms ago: executing program 6 (id=666): r0 = syz_open_dev$sg(0x0, 0x0, 0x22c01) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r1, 0x1000) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)=ANY=[]) 938.60179ms ago: executing program 6 (id=667): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x99089e6a87f181e9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x105142, 0x1c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r1, 0x0) 928.90459ms ago: executing program 7 (id=668): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() pipe(0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000000206010200000000000000000000000014000780080012404b3762bc080008400000003716000300686173683a6e65742c706f72742c6e6574000000050005000a00000005000400000000000900020073797a31000080000500010007"], 0x64}}, 0x0) 369.657664ms ago: executing program 3 (id=669): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x8000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x22, 0x4, 0x7ffc1ffb}]}) ustat(0x801, &(0x7f0000000240)) 339.284525ms ago: executing program 3 (id=670): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x18000, &(0x7f0000002cc0)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64=0x0, @ANYRESHEX], 0x8, 0x2f7, &(0x7f0000000180)="$eJzs3M9PE2kYwPGnPyhtCbSHzW52kw1vdi+7lwlUz0pjIDE2kSA1/khMBphq07ElnQZTY0RPXo1/hAfDkRuJ8g9w8aYXL964mHiQg3FMpzOUttOipbQI309C5mHe95m+T6eQ520ouzee3y/kLC2nVyQYVRIQEdkTSUpQPAH3GHTiiBz0RP4f+/zu72s3b11JZzKzC0rNpRfPpZRSE5OvHzyKudO2RmUneWf3U+rjzu87f+5+W7yXt1TeUsWSrXS1VPpQ0ZdMQ63krYKm1Lxp6Jah8kXLKFec8VJ9PGeWVlerSi+ujMdXy4ZlKb1YVQWjqiolVSlXVeiuni8qTdPUeFzQLNZ2JvtqYUFP93i55SMvCANRLqf1UIf7P5QFAQCAoWrt/4Oi+tn/b/yzXRm7vjnh9v9bkbb+v6L08+/r12rq/6Mi4tv/e4/v2//rvv1/slP17R3R2XKk/h8nw2Sk7VSgEdYGy2k97v78Op7e3phyAvp/AAAAAAAAAAAAAAAAAAAAAAB+BXu2nbBtO+Edva9REYmKiPe9T2pIRC4OYcnooyPcf5wCjQ/uhSdEzGdr2bVs/ehO2BYRUwyZkoR8dV4PrlrsffJI1STljbnu5q+vZUPOSDoneSd/WhIj0ppv23OXM7PTqq45f0TiB/NTkpDf/PNTvvkR+e/fA/maJOTtspTElBVnHY38x9NKXbqaacmPOfMAAAAAADgNNLXPd/+uaZ3G6/n7++vW9wdCjf31lO/+PCx/hYdbOwAAAAAAZ4VVfVjQTdModwlicvic3oPwMV3Zq/BHs7y/ZTi+SrsE3oM3DUXdk31/WgI/8bR0CILSS9ZkrRrlM9RWe7fAe9uo0xyZnxn8HXSCP168/NK/C17YjB5Sae9BqPsLYGRQv38AAAAADE6j6ffOzAx3QQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnEGD+O9ow64RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCm+BwAA//9xZQQZ") mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='btrfs_set_extent_bit\x00', r0, 0x0, 0x2}, 0x18) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 277.504859ms ago: executing program 3 (id=671): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaae3aaaa48ffa4318cfae1d6f295d31800140600fc000000000000000000000000000001fe8000000000800000000000000000aafffe4001", @ANYRES32=0x41424344, @ANYRES32, @ANYBLOB="5002000090780000"], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RVERSION(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0xfffffd97) 185.395662ms ago: executing program 3 (id=672): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0xa}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8090}, 0x4) 123.117795ms ago: executing program 4 (id=673): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 122.213535ms ago: executing program 3 (id=674): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000240)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x19, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x4, 0x0, 0xa, 0x7, 0x1, 0x18, 0xfffffffffffffff0}, @map_fd={0x18, 0x8, 0x1, 0x0, r1}, @map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x571406af}, @map_val={0x18, 0x4, 0x2, 0x0, r1}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x55}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x1000, &(0x7f0000000ac0)=""/4096, 0x41000, 0x22, '\x00', 0x0, @xdp=0x25, r0, 0x8, &(0x7f0000000040)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r2, 0x1, &(0x7f0000000300)=[r1, r1, r3, r1, r0], &(0x7f00000003c0)=[{0x0, 0x5, 0x7, 0x5}], 0x10, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r2}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x5f}, 0x18) removexattr(&(0x7f0000000340)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000400)=@known='user.incfs.size\x00') r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x10290, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x808000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 94.410156ms ago: executing program 0 (id=675): socket$nl_audit(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaa9a00000000000086dd600000000014060014810000000000100000000fce12670020389420dadb3c5000000000000000000000007100004e228a15053a12a661de67517d257610001dda5073307079d8", @ANYRES32, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) writev(0xffffffffffffffff, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000500)) 18.97349ms ago: executing program 7 (id=676): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.3557ms ago: executing program 6 (id=677): r0 = syz_open_dev$sg(0x0, 0x0, 0x22c01) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r1, 0x1000) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)=ANY=[]) 0s ago: executing program 0 (id=678): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6}]}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r3}, 0x18) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000001580)={[{@map_off}, {@session={'session', 0x3d, 0x17}, 0x0}, {@sbsector={'sbsector', 0x3d, 0x100000001}}, {@sbsector={'sbsector', 0x3d, 0x5}}, {@session={'session', 0x3d, 0x62}}, {@nojoliet, 0x41}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@session={'session', 0x3d, 0x58}}, {@showassoc}, {@mode={'mode', 0x3d, 0xfffffffffffffffe}}, {}]}, 0xfa, 0x69f, &(0x7f0000000840)="$eJzs3c9v2+Ydx/EP5V+yOwTFNhRBkB9PkhVwsEyR5MaBkQEtR1E2N0kUSHmwgQFF1thFEDndkg5YfOl82Q+gA3berZcddts/MKDn/he7bUCx3QZsBw4kRVmyRMlqHLdZ3y8jEUV++Txfkgq/oSU+EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkOXUyuWKpYbX2t4x+Zxa4DcnLE9bW9CtdOLW1H4lK/6jYlEX01kXv328+I34rxu6nD67rGL8UNTha2+8fv9b84Vs/QkJfRGatcFnzw8fP+h2956eInZOMzf/ZVLhFEGbbssLfa9pb7rGC32zsb5evrNVD03da7jhbthxm8YJ3ELHD8yqc8tUNjbWjFva9bdbmzW74WYz732vWi6vmx8upQdaUil0trxGw2ttJjHx4jjmnvn4J2mAazeN2X/U3VublmQcVMlbWBgIqk5rqVquViuVarWyfnfj7r1yeX5kRjlmlfs0EnHmL1q8Ys7u5A28oEJc//9mSQ0V1dK2dmTG/jiqKZCvZs7ynqz+v3nHndjvYP3PqvxF6e3e4ktK6v/V9NnVvPqfk4uRSVYYt8TKmT/bz0KSkdEzPdehHuuBuupqT0/PoG0jc+1MWjmHn025aslTKF+emrKTOaY3x2hD61pXWe9qS3WFMqrLU0OuQu0qVEdu8opyFMiVrY58BTJalaNbMqpoQxtak5Grknbla1stbaomW/+Oomhfj5L9vjYhR2VBlZyApcGg6oSW8ur/Tz9KX6e9+l+m/n9dpa+DpfThs0kxwFdA1Lv+n9G1l5MNAAAAAAB4Gazkt+9W8t79FUmR6l7DLeevsHie2QEAAAAAgLNgKVrSZVnx9b+kK7KmXP8DAAAAAIBXjpXcY2dJWkk+1G8d3wl1ml8CzJ1DigAAAAAA4AUld/5fXZSiZNCKa7Jmuv4HAAAAAACvgN8OjLE/n42xG2Vv6xckhe0l66//XFKwYB21d75jHdjxEvtgrpCEjHwCoFO/ZIV/SAfqTcbrXZSUPHPcy1avt94gmP1xBz/fnzbWvxWcSGBxbrCBEwlc6K1txT2vz/ee6WNdf3so9uFhQcmStJeVutdwS47fuF+RbV8odNydzi+ePPqlFPS3c/9Rd6/03gfdh0kuR/Gso4M4j4+ydP6y2Nt1w7kkD/1c/hulpCtjt3hZ9azL37WaK1bSbznb/jnZB4XjY5S7/cN96te6kR6zGytp7Mphf8T9ePuL8fZXSskhG9r6YME6zqJycsvHHYicLIpJFjfTmJurN9OHLL+4nYJV/O6cVC2NHoOhLKqDWUzfF9a/RvbFpCx6+2ItzuLTuKGcLNZmy2LkiADAl2U/GfUnufMvGcR8pO5m5SE7qX2hujO9ur8zXN0//GNcGdP/Xsz33puY2EtR8Rl91Urq0KKSE+v8pZEzerY19oWics7o5ReobnFffz7+DqRe2iNZ/CeKovuVpN/fn6iqn8QrfJLbb9hId/udDw9+lgyAH3t/7/29J9Xq2nr5rXL5blULyWb0HuZE7QEAjJj+HTtTI6y3dD2NuP7wH2+mU0MV75v9jxSU9J4+UFcPtZB9hcC18a2uDHwM4XZ61aqBq1bzxuv3l6WTsRXdzr2qS2rpQGy1H7ugbJXhSn0cu/aSjwIAAOfrxpQ6PL7+F4fq/22tphGrl8Zedw/X8t7Vcf+SPi+2Mj35d856bwAA8PXgBp9bK53fWEHgtd+tbGxU7M6WawLf+ZEJvNqma7xWxw2cLbu16Zp24Hd8x2+YdqAlr+aGJtxut/2gY+p+YNp+6O0k3/xuel/9HrpNu9XxnLDdcO3QNY7f6thOx9S80DHt7R80vHDLDZKVw7breHXPsTue3zKhvx04bsmY0HUHAr2a2+p4dS+ebJl24DXtYNf82G9sN11Tc0Mn8NodP20w68tr1f2gmTRbUjTzFx0CAPD/6Nnzw8cPut29pycnluNL83TOkXJiRicWxzTIGEEAAHzFHJfrGVYq9qc+jV5KVgAAAAAAAAAAAAAAAAAAAAAAYND0W/pmnFgYd7Og1J/z8wu9OfqVjm8xHGnH0lknNstEYda1slsiDh9/NiF4uT8n2/2DMUfntoF//4b0WjJH6Zz5ccHF/Has6X0tTzi4p5yYi3fQaYO/v5/u0dyYeOHYRUv9YzF/9v8c4oknf8pZFEVRNHn1peF9uDhpA4cn5iU9XXyBQ3D+5yIA5+t/AQAA//+xxzz3") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) kernel console output (not intermixed with test programs): 512 [ 34.517015][ T3809] netlink: 40 bytes leftover after parsing attributes in process `syz.2.93'. [ 34.538330][ T3811] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 34.562208][ T3814] loop3: detected capacity change from 0 to 512 [ 34.582227][ T3811] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c119, mo2=0002] [ 34.604676][ T3821] loop2: detected capacity change from 0 to 512 [ 34.618575][ T3811] System zones: 1-12 [ 34.632753][ T3814] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.651931][ T3811] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.92: corrupted in-inode xattr: e_value size too large [ 34.691039][ T3814] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.707095][ T3821] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.719800][ T3825] loop4: detected capacity change from 0 to 4096 [ 34.721788][ T3811] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.92: couldn't read orphan inode 15 (err -117) [ 34.726713][ T3821] ext4 filesystem being mounted at /21/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.762600][ T3825] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 34.775232][ T3821] netlink: 36 bytes leftover after parsing attributes in process `syz.2.94'. [ 34.781610][ T3811] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.802434][ T3825] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.842167][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.887968][ T3832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.95'. [ 35.070761][ T3321] EXT4-fs error (device loop2): ext4_empty_dir:3077: inode #12: comm syz-executor: invalid size [ 35.081722][ T3321] EXT4-fs error (device loop2): ext4_empty_dir:3077: inode #12: comm syz-executor: invalid size [ 35.097145][ T3321] EXT4-fs error (device loop2): ext4_empty_dir:3077: inode #12: comm syz-executor: invalid size [ 35.107929][ T3321] EXT4-fs error (device loop2): ext4_empty_dir:3077: inode #12: comm syz-executor: invalid size [ 35.151370][ T3321] EXT4-fs error (device loop2): ext4_empty_dir:3077: inode #12: comm syz-executor: invalid size [ 35.251710][ T3321] EXT4-fs error (device loop2): ext4_empty_dir:3077: inode #12: comm syz-executor: invalid size [ 35.349295][ T3321] EXT4-fs error (device loop2): ext4_empty_dir:3077: inode #12: comm syz-executor: invalid size [ 35.363513][ T3852] xt_TPROXY: Can be used only with -p tcp or -p udp [ 35.374008][ T3852] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 35.393541][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.425948][ T3321] EXT4-fs error (device loop2): ext4_empty_dir:3077: inode #12: comm syz-executor: invalid size [ 35.497171][ T3321] EXT4-fs error (device loop2): ext4_empty_dir:3077: inode #12: comm syz-executor: invalid size [ 35.583221][ T3321] EXT4-fs error (device loop2): ext4_empty_dir:3077: inode #12: comm syz-executor: invalid size [ 35.704499][ T3859] loop1: detected capacity change from 0 to 1024 [ 35.721709][ T3859] EXT4-fs: Ignoring removed mblk_io_submit option [ 35.728497][ T3859] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 35.752374][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.776098][ T3859] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.827423][ T3855] program syz.1.105 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 35.949843][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.978128][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.121002][ T3874] FAULT_INJECTION: forcing a failure. [ 36.121002][ T3874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 36.134083][ T3874] CPU: 1 UID: 0 PID: 3874 Comm: syz.4.111 Not tainted syzkaller #0 PREEMPT(voluntary) [ 36.134164][ T3874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 36.134237][ T3874] Call Trace: [ 36.134243][ T3874] [ 36.134251][ T3874] __dump_stack+0x1d/0x30 [ 36.134286][ T3874] dump_stack_lvl+0xe8/0x140 [ 36.134304][ T3874] dump_stack+0x15/0x1b [ 36.134319][ T3874] should_fail_ex+0x265/0x280 [ 36.134370][ T3874] should_fail+0xb/0x20 [ 36.134389][ T3874] should_fail_usercopy+0x1a/0x20 [ 36.134412][ T3874] _copy_to_user+0x20/0xa0 [ 36.134438][ T3874] simple_read_from_buffer+0xb5/0x130 [ 36.134503][ T3874] proc_fail_nth_read+0x10e/0x150 [ 36.134542][ T3874] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 36.134575][ T3874] vfs_read+0x1a8/0x770 [ 36.134598][ T3874] ? __cond_resched+0x4e/0x90 [ 36.134652][ T3874] ksys_read+0xda/0x1a0 [ 36.134673][ T3874] __x64_sys_read+0x40/0x50 [ 36.134747][ T3874] x64_sys_call+0x27c0/0x3000 [ 36.134771][ T3874] do_syscall_64+0xd2/0x200 [ 36.134864][ T3874] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 36.134895][ T3874] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 36.134926][ T3874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.134975][ T3874] RIP: 0033:0x7fd7c82be15c [ 36.134991][ T3874] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 36.135010][ T3874] RSP: 002b:00007fd7c6d27030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 36.135070][ T3874] RAX: ffffffffffffffda RBX: 00007fd7c8515fa0 RCX: 00007fd7c82be15c [ 36.135131][ T3874] RDX: 000000000000000f RSI: 00007fd7c6d270a0 RDI: 0000000000000003 [ 36.135142][ T3874] RBP: 00007fd7c6d27090 R08: 0000000000000000 R09: 0000000000000000 [ 36.135153][ T3874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.135218][ T3874] R13: 00007fd7c8516038 R14: 00007fd7c8515fa0 R15: 00007ffcfd912938 [ 36.135238][ T3874] [ 36.348798][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.382354][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.415113][ T3872] loop0: detected capacity change from 0 to 2048 [ 36.431440][ T3872] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.432214][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.498564][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.581709][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.609770][ T3904] x_tables: duplicate underflow at hook 1 [ 36.656981][ T3909] netlink: 168 bytes leftover after parsing attributes in process `syz.3.118'. [ 36.729100][ T3923] FAULT_INJECTION: forcing a failure. [ 36.729100][ T3923] name failslab, interval 1, probability 0, space 0, times 0 [ 36.741855][ T3923] CPU: 0 UID: 0 PID: 3923 Comm: syz.4.125 Not tainted syzkaller #0 PREEMPT(voluntary) [ 36.741935][ T3923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 36.741946][ T3923] Call Trace: [ 36.741951][ T3923] [ 36.741957][ T3923] __dump_stack+0x1d/0x30 [ 36.741975][ T3923] dump_stack_lvl+0xe8/0x140 [ 36.741992][ T3923] dump_stack+0x15/0x1b [ 36.742007][ T3923] should_fail_ex+0x265/0x280 [ 36.742129][ T3923] should_failslab+0x8c/0xb0 [ 36.742196][ T3923] kmem_cache_alloc_noprof+0x50/0x480 [ 36.742226][ T3923] ? audit_log_start+0x342/0x720 [ 36.742245][ T3923] audit_log_start+0x342/0x720 [ 36.742262][ T3923] ? kstrtouint+0x76/0xc0 [ 36.742346][ T3923] audit_seccomp+0x48/0x100 [ 36.742371][ T3923] ? __seccomp_filter+0x82d/0x1250 [ 36.742417][ T3923] __seccomp_filter+0x83e/0x1250 [ 36.742440][ T3923] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 36.742493][ T3923] ? vfs_write+0x7e8/0x960 [ 36.742513][ T3923] ? __rcu_read_unlock+0x4f/0x70 [ 36.742534][ T3923] ? __fget_files+0x184/0x1c0 [ 36.742558][ T3923] __secure_computing+0x82/0x150 [ 36.742613][ T3923] syscall_trace_enter+0xcf/0x1e0 [ 36.742637][ T3923] do_syscall_64+0xac/0x200 [ 36.742655][ T3923] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 36.742710][ T3923] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 36.742736][ T3923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.742754][ T3923] RIP: 0033:0x7fd7c82bf749 [ 36.742767][ T3923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.742781][ T3923] RSP: 002b:00007fd7c6d27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 36.742828][ T3923] RAX: ffffffffffffffda RBX: 00007fd7c8515fa0 RCX: 00007fd7c82bf749 [ 36.742838][ T3923] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 36.742849][ T3923] RBP: 00007fd7c6d27090 R08: 0000000000000000 R09: 0000000000000000 [ 36.742859][ T3923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.742870][ T3923] R13: 00007fd7c8516038 R14: 00007fd7c8515fa0 R15: 00007ffcfd912938 [ 36.742885][ T3923] [ 37.080662][ T12] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 37.089457][ T12] bond0 (unregistering): Released all slaves [ 37.108194][ T3887] chnl_net:caif_netlink_parms(): no params data found [ 37.162775][ T12] hsr_slave_0: left promiscuous mode [ 37.169403][ T12] hsr_slave_1: left promiscuous mode [ 37.175289][ T12] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 37.182485][ T12] batman_adv: batadv0: Removing interface: veth1_vlan [ 37.197496][ T12] veth1_macvtap: left promiscuous mode [ 37.220181][ T12] veth0_macvtap: left promiscuous mode [ 37.228674][ T12] veth1_vlan: left promiscuous mode [ 37.241988][ T12] veth0_vlan: left promiscuous mode [ 37.259222][ T3947] netlink: 168 bytes leftover after parsing attributes in process `syz.0.130'. [ 37.367628][ T3961] netlink: 'syz.4.132': attribute type 21 has an invalid length. [ 37.380274][ T3961] netlink: 'syz.4.132': attribute type 6 has an invalid length. [ 37.388059][ T3961] netlink: 132 bytes leftover after parsing attributes in process `syz.4.132'. [ 37.441401][ T3887] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.448587][ T3887] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.480533][ T3887] bridge_slave_0: entered allmulticast mode [ 37.501794][ T3970] loop4: detected capacity change from 0 to 1024 [ 37.507565][ T3887] bridge_slave_0: entered promiscuous mode [ 37.515734][ T3887] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.522838][ T3887] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.531319][ T3887] bridge_slave_1: entered allmulticast mode [ 37.537859][ T3887] bridge_slave_1: entered promiscuous mode [ 37.544489][ T3970] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 37.555391][ T3970] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 37.563715][ T3970] EXT4-fs (loop4): orphan cleanup on readonly fs [ 37.570496][ T3974] netlink: 'syz.3.135': attribute type 13 has an invalid length. [ 37.577093][ T3970] __quota_error: 497 callbacks suppressed [ 37.577105][ T3970] Quota error (device loop4): v2_read_file_info: Free block number 2147483648 out of range (1, 6). [ 37.578223][ T29] audit: type=1326 audit(1763950939.598:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3971 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dd24af749 code=0x7ffc0000 [ 37.584526][ T3970] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 37.594665][ T29] audit: type=1326 audit(1763950939.598:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3971 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dd24af749 code=0x7ffc0000 [ 37.617507][ T3970] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 37.663770][ T3887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.675679][ T3970] EXT4-fs error (device loop4): ext4_free_blocks:6706: comm syz.4.132: Freeing blocks not in datazone - block = 0, count = 4096 [ 37.677360][ T3887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.694721][ T29] audit: type=1326 audit(1763950939.718:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3971 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7dd24af749 code=0x7ffc0000 [ 37.720831][ T29] audit: type=1326 audit(1763950939.718:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3971 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dd24af749 code=0x7ffc0000 [ 37.743773][ T29] audit: type=1326 audit(1763950939.718:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3971 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dd24af749 code=0x7ffc0000 [ 37.766636][ T29] audit: type=1326 audit(1763950939.718:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3971 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7dd24af749 code=0x7ffc0000 [ 37.780334][ T3970] EXT4-fs (loop4): Remounting filesystem read-only [ 37.789677][ T29] audit: type=1326 audit(1763950939.718:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3971 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dd24af749 code=0x7ffc0000 [ 37.799325][ T3970] EXT4-fs (loop4): 1 truncate cleaned up [ 37.818977][ T29] audit: type=1326 audit(1763950939.718:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3971 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dd24af749 code=0x7ffc0000 [ 37.837022][ T3970] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 37.847500][ T29] audit: type=1326 audit(1763950939.718:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3971 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7dd24af749 code=0x7ffc0000 [ 37.912076][ T3992] loop1: detected capacity change from 0 to 1024 [ 37.912234][ T3996] FAULT_INJECTION: forcing a failure. [ 37.912234][ T3996] name failslab, interval 1, probability 0, space 0, times 0 [ 37.919222][ T3992] EXT4-fs: Ignoring removed mblk_io_submit option [ 37.931211][ T3996] CPU: 1 UID: 0 PID: 3996 Comm: syz.3.137 Not tainted syzkaller #0 PREEMPT(voluntary) [ 37.931300][ T3996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 37.931313][ T3996] Call Trace: [ 37.931319][ T3996] [ 37.931326][ T3996] __dump_stack+0x1d/0x30 [ 37.931354][ T3996] dump_stack_lvl+0xe8/0x140 [ 37.931378][ T3996] dump_stack+0x15/0x1b [ 37.931396][ T3996] should_fail_ex+0x265/0x280 [ 37.931429][ T3996] should_failslab+0x8c/0xb0 [ 37.931482][ T3996] __kmalloc_noprof+0xa5/0x570 [ 37.931510][ T3996] ? io_cache_alloc_new+0x2a/0xb0 [ 37.931680][ T3996] io_cache_alloc_new+0x2a/0xb0 [ 37.931705][ T3996] io_uring_cmd_prep+0x1cd/0x240 [ 37.931729][ T3996] io_submit_sqes+0x5ef/0x1060 [ 37.931783][ T3996] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 37.931815][ T3996] ? 0xffffffff81000000 [ 37.931828][ T3996] ? __rcu_read_unlock+0x4f/0x70 [ 37.931854][ T3996] ? get_pid_task+0x96/0xd0 [ 37.931949][ T3996] ? proc_fail_nth_write+0x13b/0x160 [ 37.931979][ T3996] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 37.932054][ T3996] ? vfs_write+0x7e8/0x960 [ 37.932078][ T3996] ? __rcu_read_unlock+0x4f/0x70 [ 37.932102][ T3996] ? __fget_files+0x184/0x1c0 [ 37.932164][ T3996] ? fput+0x8f/0xc0 [ 37.932183][ T3996] __x64_sys_io_uring_enter+0x78/0x90 [ 37.932272][ T3996] x64_sys_call+0x2df0/0x3000 [ 37.932294][ T3996] do_syscall_64+0xd2/0x200 [ 37.932315][ T3996] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 37.932427][ T3996] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 37.932460][ T3996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.932485][ T3996] RIP: 0033:0x7f7dd24af749 [ 37.932498][ T3996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.932514][ T3996] RSP: 002b:00007f7dd0f17038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 37.932554][ T3996] RAX: ffffffffffffffda RBX: 00007f7dd2705fa0 RCX: 00007f7dd24af749 [ 37.932567][ T3996] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 37.932579][ T3996] RBP: 00007f7dd0f17090 R08: 0000000000000000 R09: 0000000000000000 [ 37.932591][ T3996] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 37.932604][ T3996] R13: 00007f7dd2706038 R14: 00007f7dd2705fa0 R15: 00007ffec55782e8 [ 37.932623][ T3996] [ 38.166149][ T3992] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 38.180030][ T3992] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.193307][ T3887] team0: Port device team_slave_0 added [ 38.200055][ T3887] team0: Port device team_slave_1 added [ 38.230264][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.242307][ T3887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.249354][ T3887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.275327][ T3887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.287465][ T3992] program syz.1.136 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 38.287812][ T3887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.303543][ T3887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.317630][ T4004] loop0: detected capacity change from 0 to 1024 [ 38.329514][ T3887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.381864][ T4004] 8021q: adding VLAN 0 to HW filter on device bond1 [ 38.391914][ T4004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.140'. [ 38.400793][ T4004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.140'. [ 38.413939][ T4004] netlink: 36 bytes leftover after parsing attributes in process `syz.0.140'. [ 38.429260][ T3887] hsr_slave_0: entered promiscuous mode [ 38.435485][ T3887] hsr_slave_1: entered promiscuous mode [ 38.435996][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.441312][ T3887] debugfs: 'hsr0' already exists in 'hsr' [ 38.455788][ T3887] Cannot create hsr debugfs directory [ 38.541756][ T4026] loop1: detected capacity change from 0 to 512 [ 38.580411][ T4026] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.613363][ T3887] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 38.622099][ T4026] EXT4-fs (loop1): shut down requested (0) [ 38.630171][ T3887] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 38.637153][ T4019] loop0: detected capacity change from 0 to 8192 [ 38.648396][ T3887] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 38.667070][ T4019] bio_check_eod: 10405 callbacks suppressed [ 38.667082][ T4019] syz.0.142: attempt to access beyond end of device [ 38.667082][ T4019] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 38.686447][ T4019] buffer_io_error: 10405 callbacks suppressed [ 38.686460][ T4019] Buffer I/O error on dev loop0, logical block 57847, async page read [ 38.701240][ T4019] syz.0.142: attempt to access beyond end of device [ 38.701240][ T4019] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 38.714572][ T4019] Buffer I/O error on dev loop0, logical block 57847, async page read [ 38.722915][ T4019] syz.0.142: attempt to access beyond end of device [ 38.722915][ T4019] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 38.725590][ T3887] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 38.736244][ T4019] Buffer I/O error on dev loop0, logical block 57847, async page read [ 38.736305][ T4019] syz.0.142: attempt to access beyond end of device [ 38.736305][ T4019] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 38.743530][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.751191][ T4019] Buffer I/O error on dev loop0, logical block 57847, async page read [ 38.781688][ T4019] syz.0.142: attempt to access beyond end of device [ 38.781688][ T4019] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 38.794997][ T4019] Buffer I/O error on dev loop0, logical block 57847, async page read [ 38.803262][ T4019] syz.0.142: attempt to access beyond end of device [ 38.803262][ T4019] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 38.816573][ T4019] Buffer I/O error on dev loop0, logical block 57847, async page read [ 38.824938][ T4019] syz.0.142: attempt to access beyond end of device [ 38.824938][ T4019] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 38.838280][ T4019] Buffer I/O error on dev loop0, logical block 57847, async page read [ 38.848487][ T4019] syz.0.142: attempt to access beyond end of device [ 38.848487][ T4019] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 38.861821][ T4019] Buffer I/O error on dev loop0, logical block 57847, async page read [ 38.904521][ T4019] syz.0.142: attempt to access beyond end of device [ 38.904521][ T4019] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 38.917870][ T4019] Buffer I/O error on dev loop0, logical block 57847, async page read [ 38.944522][ T4019] syz.0.142: attempt to access beyond end of device [ 38.944522][ T4019] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 38.957856][ T4019] Buffer I/O error on dev loop0, logical block 57847, async page read [ 38.966522][ T3887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.977373][ T3887] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.084453][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.091554][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.127673][ T3887] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.138083][ T3887] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.162240][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.169377][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.327658][ T3887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.580944][ T4094] loop4: detected capacity change from 0 to 1024 [ 39.634456][ T4094] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.710333][ T4094] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 39.747888][ T4094] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.773028][ T3887] veth0_vlan: entered promiscuous mode [ 39.781086][ T3887] veth1_vlan: entered promiscuous mode [ 39.795675][ T3887] veth0_macvtap: entered promiscuous mode [ 39.803380][ T3887] veth1_macvtap: entered promiscuous mode [ 39.803786][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.814257][ T3887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.832748][ T3887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.843746][ T41] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.855879][ T41] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.866992][ T41] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.876212][ T41] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.914070][ T4116] loop5: detected capacity change from 0 to 128 [ 39.926025][ T4116] mmap: syz.5.114 (4116) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 39.995035][ T4117] netlink: 168 bytes leftover after parsing attributes in process `syz.4.155'. [ 40.097783][ T4124] netlink: 92 bytes leftover after parsing attributes in process `syz.5.158'. [ 40.106807][ T4124] netlink: 48 bytes leftover after parsing attributes in process `syz.5.158'. [ 40.458711][ T4130] netlink: 'syz.0.160': attribute type 1 has an invalid length. [ 40.477255][ T4130] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 40.488241][ T4130] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 40.528206][ T4132] bond2: (slave bridge2): Enslaving as an active interface with a down link [ 40.546479][ T4130] macvlan2: entered promiscuous mode [ 40.551868][ T4130] macvlan2: entered allmulticast mode [ 40.557555][ T4130] bond2: entered promiscuous mode [ 40.563099][ T4130] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 40.571151][ T4130] bond2: left promiscuous mode [ 40.795742][ T4144] bridge_slave_0: left allmulticast mode [ 40.801424][ T4144] bridge_slave_0: left promiscuous mode [ 40.807129][ T4144] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.816345][ T4144] bridge_slave_1: left allmulticast mode [ 40.822128][ T4144] bridge_slave_1: left promiscuous mode [ 40.827840][ T4144] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.838901][ T4144] bond0: (slave bond_slave_0): Releasing backup interface [ 40.848220][ T4144] bond0: (slave bond_slave_1): Releasing backup interface [ 40.860598][ T4144] team0: Port device team_slave_0 removed [ 40.868903][ T4144] team0: Port device team_slave_1 removed [ 40.875395][ T4144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.882825][ T4144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.892353][ T4144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.899775][ T4144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.910478][ T4144] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 41.072252][ T4158] loop1: detected capacity change from 0 to 256 [ 41.451056][ T4174] loop3: detected capacity change from 0 to 512 [ 41.457801][ T4174] ext4: Unknown parameter 'obj_role' [ 41.481884][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.614667][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.695349][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.712405][ T4178] chnl_net:caif_netlink_parms(): no params data found [ 41.743973][ T4192] netlink: 168 bytes leftover after parsing attributes in process `syz.0.179'. [ 41.882519][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.895623][ T4178] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.902885][ T4178] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.912372][ T4178] bridge_slave_0: entered allmulticast mode [ 41.919955][ T4178] bridge_slave_0: entered promiscuous mode [ 41.927784][ T4178] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.934870][ T4178] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.943458][ T4178] bridge_slave_1: entered allmulticast mode [ 41.953068][ T4178] bridge_slave_1: entered promiscuous mode [ 42.001341][ T52] bridge_slave_1: left allmulticast mode [ 42.007015][ T52] bridge_slave_1: left promiscuous mode [ 42.012689][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.038853][ T52] bridge_slave_0: left allmulticast mode [ 42.044533][ T52] bridge_slave_0: left promiscuous mode [ 42.050242][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.130869][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 42.141182][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 42.160575][ T52] bond0 (unregistering): Released all slaves [ 42.173595][ T4200] netlink: 'syz.4.180': attribute type 12 has an invalid length. [ 42.200690][ T4178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.211731][ T4178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.226128][ T52] hsr_slave_0: left promiscuous mode [ 42.232334][ T52] hsr_slave_1: left promiscuous mode [ 42.237911][ T4207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.180'. [ 42.246782][ T4207] netlink: 'syz.4.180': attribute type 15 has an invalid length. [ 42.248503][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.261927][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.269379][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.276750][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.285764][ T52] veth1_macvtap: left promiscuous mode [ 42.291274][ T52] veth0_macvtap: left promiscuous mode [ 42.296889][ T52] veth1_vlan: left promiscuous mode [ 42.302665][ T52] veth0_vlan: left promiscuous mode [ 42.377856][ T52] team0 (unregistering): Port device team_slave_1 removed [ 42.391086][ T52] team0 (unregistering): Port device team_slave_0 removed [ 42.468469][ T4207] vxlan0: entered promiscuous mode [ 42.484957][ T4178] team0: Port device team_slave_0 added [ 42.499644][ T1623] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.508781][ T1623] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.519596][ T4178] team0: Port device team_slave_1 added [ 42.525244][ T1623] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.558982][ T1623] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.579716][ T4178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.581091][ T29] kauditd_printk_skb: 580 callbacks suppressed [ 42.581103][ T29] audit: type=1326 audit(1763950944.598:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4213 comm="syz.0.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1376b0f749 code=0x7ffc0000 [ 42.586662][ T4178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.592838][ T29] audit: type=1326 audit(1763950944.608:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4213 comm="syz.0.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1376b0f749 code=0x7ffc0000 [ 42.616211][ T4178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.666848][ T29] audit: type=1400 audit(1763950944.688:1635): avc: denied { read open } for pid=4216 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.755790][ T29] audit: type=1326 audit(1763950944.708:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4205 comm="syz.5.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f25e6b12005 code=0x7ffc0000 [ 42.779166][ T29] audit: type=1326 audit(1763950944.728:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4205 comm="syz.5.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f25e6b12005 code=0x7ffc0000 [ 42.802568][ T29] audit: type=1326 audit(1763950944.728:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4211 comm="syz.5.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f25e6adf749 code=0x7ffc0000 [ 42.807674][ T4178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.825820][ T29] audit: type=1326 audit(1763950944.728:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4205 comm="syz.5.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e6adf749 code=0x7ffc0000 [ 42.825849][ T29] audit: type=1326 audit(1763950944.728:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4205 comm="syz.5.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e6adf749 code=0x7ffc0000 [ 42.832795][ T4178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.832824][ T4178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.915992][ T29] audit: type=1326 audit(1763950944.738:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4213 comm="syz.0.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1376b0f749 code=0x7ffc0000 [ 42.939140][ T29] audit: type=1326 audit(1763950944.738:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4213 comm="syz.0.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1376b0f749 code=0x7ffc0000 [ 42.982510][ T4178] hsr_slave_0: entered promiscuous mode [ 42.993930][ T4178] hsr_slave_1: entered promiscuous mode [ 43.013013][ T4178] debugfs: 'hsr0' already exists in 'hsr' [ 43.018801][ T4178] Cannot create hsr debugfs directory [ 43.116742][ T4246] netlink: 'syz.5.190': attribute type 29 has an invalid length. [ 43.167639][ T4249] netlink: 'syz.5.190': attribute type 29 has an invalid length. [ 43.209009][ T4246] netlink: 596 bytes leftover after parsing attributes in process `syz.5.190'. [ 43.236426][ T4178] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 43.266935][ T4178] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 43.282214][ T4178] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 43.293715][ T4178] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 43.434600][ T4178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.450625][ T4178] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.464917][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.472012][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.494263][ T4178] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 43.504618][ T4178] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.538711][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.545790][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.847324][ T4298] loop5: detected capacity change from 0 to 1024 [ 43.939839][ T4178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.967445][ T4298] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.083426][ T3887] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.136302][ T4339] vhci_hcd: invalid port number 255 [ 44.141544][ T4339] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 44.201728][ T4178] veth0_vlan: entered promiscuous mode [ 44.211157][ T4178] veth1_vlan: entered promiscuous mode [ 44.231127][ T4347] loop4: detected capacity change from 0 to 1024 [ 44.268814][ T4178] veth0_macvtap: entered promiscuous mode [ 44.277180][ T4178] veth1_macvtap: entered promiscuous mode [ 44.288875][ T4347] EXT4-fs: Ignoring removed orlov option [ 44.303695][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.312245][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.329161][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.340754][ T4347] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.361567][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.375957][ T4351] loop3: detected capacity change from 0 to 8192 [ 44.382454][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.392371][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.396578][ T4351] bio_check_eod: 13518 callbacks suppressed [ 44.396591][ T4351] syz.3.202: attempt to access beyond end of device [ 44.396591][ T4351] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 44.396684][ T4351] buffer_io_error: 13518 callbacks suppressed [ 44.396714][ T4351] Buffer I/O error on dev loop3, logical block 57847, async page read [ 44.397638][ T4351] syz.3.202: attempt to access beyond end of device [ 44.397638][ T4351] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 44.397663][ T4351] Buffer I/O error on dev loop3, logical block 57847, async page read [ 44.397722][ T4351] syz.3.202: attempt to access beyond end of device [ 44.397722][ T4351] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 44.397743][ T4351] Buffer I/O error on dev loop3, logical block 57847, async page read [ 44.397822][ T4351] syz.3.202: attempt to access beyond end of device [ 44.397822][ T4351] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 44.397843][ T4351] Buffer I/O error on dev loop3, logical block 57847, async page read [ 44.397871][ T4351] syz.3.202: attempt to access beyond end of device [ 44.397871][ T4351] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 44.397939][ T4351] Buffer I/O error on dev loop3, logical block 57847, async page read [ 44.398032][ T4351] syz.3.202: attempt to access beyond end of device [ 44.398032][ T4351] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 44.398054][ T4351] Buffer I/O error on dev loop3, logical block 57847, async page read [ 44.398077][ T4351] syz.3.202: attempt to access beyond end of device [ 44.398077][ T4351] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 44.398096][ T4351] Buffer I/O error on dev loop3, logical block 57847, async page read [ 44.398147][ T4351] syz.3.202: attempt to access beyond end of device [ 44.398147][ T4351] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 44.398170][ T4351] Buffer I/O error on dev loop3, logical block 57847, async page read [ 44.398243][ T4351] syz.3.202: attempt to access beyond end of device [ 44.398243][ T4351] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 44.398265][ T4351] Buffer I/O error on dev loop3, logical block 57847, async page read [ 44.398294][ T4351] syz.3.202: attempt to access beyond end of device [ 44.398294][ T4351] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 44.398367][ T4351] Buffer I/O error on dev loop3, logical block 57847, async page read [ 44.444883][ T4363] 9pnet_fd: Insufficient options for proto=fd [ 44.834414][ T4375] loop0: detected capacity change from 0 to 2048 [ 44.861188][ T4375] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.927476][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.026833][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.255585][ T4396] xt_TPROXY: Can be used only with -p tcp or -p udp [ 45.320970][ T4395] bridge_slave_0: left allmulticast mode [ 45.326733][ T4395] bridge_slave_0: left promiscuous mode [ 45.332432][ T4395] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.362645][ T4401] x_tables: duplicate underflow at hook 1 [ 45.557170][ T4398] netlink: 'syz.5.215': attribute type 1 has an invalid length. [ 45.592708][ T4395] bridge_slave_1: left allmulticast mode [ 45.598430][ T4395] bridge_slave_1: left promiscuous mode [ 45.604059][ T4395] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.613881][ T4398] loop5: detected capacity change from 0 to 512 [ 45.623964][ T4398] EXT4-fs (loop5): orphan cleanup on readonly fs [ 45.631726][ T4398] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.215: bad orphan inode 13 [ 45.642049][ T4395] bond0: (slave bond_slave_0): Releasing backup interface [ 45.649438][ T4398] ext4_test_bit(bit=12, block=18) = 1 [ 45.654915][ T4398] is_bad_inode(inode)=0 [ 45.659091][ T4398] NEXT_ORPHAN(inode)=2130706432 [ 45.663922][ T4398] max_ino=32 [ 45.667196][ T4398] i_nlink=1 [ 45.673887][ T4395] bond0: (slave bond_slave_1): Releasing backup interface [ 45.681474][ T4398] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.706507][ T4398] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 45.717953][ T4395] team0: Port device team_slave_0 removed [ 45.727989][ T4395] team0: Port device team_slave_1 removed [ 45.736598][ T4395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.744070][ T4395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.752790][ T4398] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.215: bg 0: block 248: padding at end of block bitmap is not set [ 45.767753][ T4398] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.215: Failed to acquire dquot type 1 [ 45.780005][ T4398] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 45.780474][ T4395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.800369][ T4423] debugfs: Bad value for 'uid' [ 45.802169][ T4395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.806820][ T4423] debugfs: Bad value for 'uid' [ 45.823037][ T4395] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 45.839164][ T4396] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 45.854736][ T4424] loop3: detected capacity change from 0 to 2048 [ 45.877751][ T4413] syzkaller0: entered promiscuous mode [ 45.883258][ T4413] syzkaller0: entered allmulticast mode [ 45.883882][ T4423] loop4: detected capacity change from 0 to 128 [ 45.950907][ T4432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.222'. [ 45.998713][ T4398] syz.5.215 (4398) used greatest stack depth: 9248 bytes left [ 46.045970][ T4424] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.082147][ T3887] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 12 [ 46.103198][ T3887] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 12 [ 46.129868][ T4436] bridge0: entered promiscuous mode [ 46.135208][ T4436] macvtap1: entered allmulticast mode [ 46.140617][ T4436] bridge0: entered allmulticast mode [ 46.147286][ T4436] batman_adv: batadv0: Adding interface: macvtap1 [ 46.153797][ T4436] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.190273][ T4436] batman_adv: batadv0: Interface activated: macvtap1 [ 46.209747][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.279879][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.305443][ T9] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 46.487880][ T52] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.542547][ T52] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.593808][ T52] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.657271][ T4449] chnl_net:caif_netlink_parms(): no params data found [ 46.689107][ T52] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.769996][ T4449] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.777119][ T4449] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.784656][ T4449] bridge_slave_0: entered allmulticast mode [ 46.793042][ T4449] bridge_slave_0: entered promiscuous mode [ 46.799885][ T4449] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.806982][ T4449] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.814485][ T4449] bridge_slave_1: entered allmulticast mode [ 46.821077][ T4449] bridge_slave_1: entered promiscuous mode [ 46.839988][ T4449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.854656][ T4449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.874256][ T4449] team0: Port device team_slave_0 added [ 46.888914][ T4449] team0: Port device team_slave_1 added [ 47.211177][ T4472] FAULT_INJECTION: forcing a failure. [ 47.211177][ T4472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.224281][ T4472] CPU: 1 UID: 0 PID: 4472 Comm: syz.0.232 Not tainted syzkaller #0 PREEMPT(voluntary) [ 47.224310][ T4472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 47.224321][ T4472] Call Trace: [ 47.224326][ T4472] [ 47.224333][ T4472] __dump_stack+0x1d/0x30 [ 47.224432][ T4472] dump_stack_lvl+0xe8/0x140 [ 47.224493][ T4472] dump_stack+0x15/0x1b [ 47.224513][ T4472] should_fail_ex+0x265/0x280 [ 47.224549][ T4472] should_fail+0xb/0x20 [ 47.224581][ T4472] should_fail_usercopy+0x1a/0x20 [ 47.224604][ T4472] _copy_from_user+0x1c/0xb0 [ 47.224627][ T4472] do_ip_getsockopt+0x12a/0xfe0 [ 47.224721][ T4472] ? _parse_integer+0x27/0x40 [ 47.224746][ T4472] ? __rcu_read_unlock+0x4f/0x70 [ 47.224768][ T4472] ? avc_has_perm_noaudit+0x1b1/0x200 [ 47.224787][ T4472] ? avc_has_perm+0xf7/0x180 [ 47.224850][ T4472] ip_getsockopt+0x5c/0x180 [ 47.224881][ T4472] ? selinux_socket_getsockopt+0x130/0x1b0 [ 47.224904][ T4472] ? selinux_socket_getsockopt+0x130/0x1b0 [ 47.224940][ T4472] tcp_getsockopt+0xad/0xe0 [ 47.224963][ T4472] sock_common_getsockopt+0x60/0x70 [ 47.224992][ T4472] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 47.225026][ T4472] do_sock_getsockopt+0x200/0x240 [ 47.225150][ T4472] __x64_sys_getsockopt+0x11e/0x1a0 [ 47.225232][ T4472] x64_sys_call+0x2bca/0x3000 [ 47.225251][ T4472] do_syscall_64+0xd2/0x200 [ 47.225270][ T4472] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 47.225295][ T4472] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 47.225387][ T4472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.225456][ T4472] RIP: 0033:0x7f1376b0f749 [ 47.225472][ T4472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.225492][ T4472] RSP: 002b:00007f1375556038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 47.225511][ T4472] RAX: ffffffffffffffda RBX: 00007f1376d66090 RCX: 00007f1376b0f749 [ 47.225600][ T4472] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 47.225611][ T4472] RBP: 00007f1375556090 R08: 0000200000000100 R09: 0000000000000000 [ 47.225622][ T4472] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.225633][ T4472] R13: 00007f1376d66128 R14: 00007f1376d66090 R15: 00007ffca0f05a78 [ 47.225648][ T4472] [ 47.531053][ T52] bond0 (unregistering): Released all slaves [ 47.541698][ T4449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.548717][ T4449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.574637][ T4449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.586871][ T4449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.593837][ T4449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.619733][ T4449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.674905][ T29] kauditd_printk_skb: 433 callbacks suppressed [ 47.674917][ T29] audit: type=1400 audit(1763950949.698:2074): avc: denied { search } for pid=3044 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.702422][ T29] audit: type=1400 audit(1763950949.698:2075): avc: denied { search } for pid=3044 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.702526][ T4474] loop3: detected capacity change from 0 to 2048 [ 47.724030][ T29] audit: type=1400 audit(1763950949.698:2076): avc: denied { search } for pid=3044 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.752134][ T29] audit: type=1400 audit(1763950949.698:2077): avc: denied { read } for pid=3044 comm="dhcpcd" name="n35" dev="tmpfs" ino=1929 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 47.774172][ T29] audit: type=1400 audit(1763950949.698:2078): avc: denied { open } for pid=3044 comm="dhcpcd" path="/run/udev/data/n35" dev="tmpfs" ino=1929 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 47.797303][ T29] audit: type=1400 audit(1763950949.698:2079): avc: denied { getattr } for pid=3044 comm="dhcpcd" path="/run/udev/data/n35" dev="tmpfs" ino=1929 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 47.848257][ T29] audit: type=1326 audit(1763950949.858:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4483 comm="syz.6.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74f792f749 code=0x7ffc0000 [ 47.871736][ T29] audit: type=1326 audit(1763950949.858:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4483 comm="syz.6.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74f792f749 code=0x7ffc0000 [ 47.895129][ T29] audit: type=1326 audit(1763950949.858:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4483 comm="syz.6.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74f792f749 code=0x7ffc0000 [ 47.918425][ T29] audit: type=1326 audit(1763950949.858:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4483 comm="syz.6.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74f792f749 code=0x7ffc0000 [ 47.947421][ T4449] hsr_slave_0: entered promiscuous mode [ 47.958175][ T4449] hsr_slave_1: entered promiscuous mode [ 47.970829][ T4474] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.987257][ T4449] debugfs: 'hsr0' already exists in 'hsr' [ 47.993001][ T4449] Cannot create hsr debugfs directory [ 48.023158][ T52] hsr_slave_0: left promiscuous mode [ 48.033330][ T52] hsr_slave_1: left promiscuous mode [ 48.044669][ T52] veth1_macvtap: left promiscuous mode [ 48.050577][ T52] veth0_macvtap: left promiscuous mode [ 48.059366][ T52] veth1_vlan: left promiscuous mode [ 48.069612][ T52] veth0_vlan: left promiscuous mode [ 48.133897][ T4506] FAULT_INJECTION: forcing a failure. [ 48.133897][ T4506] name failslab, interval 1, probability 0, space 0, times 0 [ 48.146605][ T4506] CPU: 1 UID: 0 PID: 4506 Comm: syz.4.237 Not tainted syzkaller #0 PREEMPT(voluntary) [ 48.146632][ T4506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 48.146699][ T4506] Call Trace: [ 48.146706][ T4506] [ 48.146713][ T4506] __dump_stack+0x1d/0x30 [ 48.146737][ T4506] dump_stack_lvl+0xe8/0x140 [ 48.146760][ T4506] dump_stack+0x15/0x1b [ 48.146778][ T4506] should_fail_ex+0x265/0x280 [ 48.146808][ T4506] ? __se_sys_mount+0xef/0x2e0 [ 48.146834][ T4506] should_failslab+0x8c/0xb0 [ 48.146859][ T4506] __kmalloc_cache_noprof+0x4c/0x4a0 [ 48.146926][ T4506] ? memdup_user+0x99/0xd0 [ 48.146952][ T4506] __se_sys_mount+0xef/0x2e0 [ 48.146973][ T4506] ? fput+0x8f/0xc0 [ 48.146989][ T4506] ? ksys_write+0x192/0x1a0 [ 48.147060][ T4506] __x64_sys_mount+0x67/0x80 [ 48.147084][ T4506] x64_sys_call+0x2b51/0x3000 [ 48.147103][ T4506] do_syscall_64+0xd2/0x200 [ 48.147124][ T4506] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 48.147196][ T4506] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 48.147229][ T4506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.147249][ T4506] RIP: 0033:0x7fd7c82bf749 [ 48.147264][ T4506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.147280][ T4506] RSP: 002b:00007fd7c6d27038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 48.147419][ T4506] RAX: ffffffffffffffda RBX: 00007fd7c8515fa0 RCX: 00007fd7c82bf749 [ 48.147433][ T4506] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 48.147470][ T4506] RBP: 00007fd7c6d27090 R08: 0000200000000240 R09: 0000000000000000 [ 48.147503][ T4506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.147514][ T4506] R13: 00007fd7c8516038 R14: 00007fd7c8515fa0 R15: 00007ffcfd912938 [ 48.147532][ T4506] [ 48.420803][ T4508] gre1: entered promiscuous mode [ 48.425783][ T4508] gre1: entered allmulticast mode [ 48.448952][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.568957][ T4517] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 48.601597][ T4449] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 48.612908][ T4517] ip6t_srh: unknown srh match flags 4000 [ 48.632910][ T4449] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 48.644622][ T4449] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 48.701763][ T4449] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 48.833322][ T4449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.865165][ T4449] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.882599][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.885459][ T4555] tmpfs: Bad value for 'mpol' [ 48.889796][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.911411][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.918489][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.014317][ T4449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.179863][ T4449] veth0_vlan: entered promiscuous mode [ 49.190168][ T4449] veth1_vlan: entered promiscuous mode [ 49.220671][ T4449] veth0_macvtap: entered promiscuous mode [ 49.233407][ T4449] veth1_macvtap: entered promiscuous mode [ 49.245532][ T4449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.260284][ T4449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.271116][ T1728] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.280176][ T1728] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.290136][ T1728] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.299873][ T1728] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.360377][ T4612] x_tables: duplicate underflow at hook 1 [ 49.893230][ T4640] xt_TPROXY: Can be used only with -p tcp or -p udp [ 49.981262][ T4643] FAULT_INJECTION: forcing a failure. [ 49.981262][ T4643] name failslab, interval 1, probability 0, space 0, times 0 [ 49.993905][ T4643] CPU: 0 UID: 0 PID: 4643 Comm: syz.4.259 Not tainted syzkaller #0 PREEMPT(voluntary) [ 49.994007][ T4643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 49.994075][ T4643] Call Trace: [ 49.994081][ T4643] [ 49.994087][ T4643] __dump_stack+0x1d/0x30 [ 49.994113][ T4643] dump_stack_lvl+0xe8/0x140 [ 49.994132][ T4643] dump_stack+0x15/0x1b [ 49.994194][ T4643] should_fail_ex+0x265/0x280 [ 49.994226][ T4643] should_failslab+0x8c/0xb0 [ 49.994251][ T4643] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 49.994332][ T4643] ? __alloc_skb+0x101/0x320 [ 49.994358][ T4643] __alloc_skb+0x101/0x320 [ 49.994461][ T4643] netlink_alloc_large_skb+0xbf/0xf0 [ 49.994490][ T4643] netlink_sendmsg+0x3cf/0x6b0 [ 49.994513][ T4643] ? __pfx_netlink_sendmsg+0x10/0x10 [ 49.994536][ T4643] __sock_sendmsg+0x145/0x180 [ 49.994702][ T4643] ____sys_sendmsg+0x31e/0x4e0 [ 49.994726][ T4643] ___sys_sendmsg+0x17b/0x1d0 [ 49.994758][ T4643] __x64_sys_sendmsg+0xd4/0x160 [ 49.994780][ T4643] x64_sys_call+0x191e/0x3000 [ 49.994800][ T4643] do_syscall_64+0xd2/0x200 [ 49.994893][ T4643] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 49.994918][ T4643] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 49.994953][ T4643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.994997][ T4643] RIP: 0033:0x7fd7c82bf749 [ 49.995013][ T4643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.995031][ T4643] RSP: 002b:00007fd7c6d27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.995054][ T4643] RAX: ffffffffffffffda RBX: 00007fd7c8515fa0 RCX: 00007fd7c82bf749 [ 49.995065][ T4643] RDX: 000000000000c0b0 RSI: 0000200000000280 RDI: 0000000000000003 [ 49.995076][ T4643] RBP: 00007fd7c6d27090 R08: 0000000000000000 R09: 0000000000000000 [ 49.995087][ T4643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.995100][ T4643] R13: 00007fd7c8516038 R14: 00007fd7c8515fa0 R15: 00007ffcfd912938 [ 49.995140][ T4643] [ 50.249104][ T4656] x_tables: duplicate underflow at hook 1 [ 50.300615][ T4662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.265'. [ 50.371739][ T4662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.265'. [ 50.649583][ T4701] netlink: 32 bytes leftover after parsing attributes in process `syz.3.273'. [ 50.694766][ T4714] SELinux: security_context_str_to_sid () failed with errno=-22 [ 50.716746][ T4717] netlink: 168 bytes leftover after parsing attributes in process `syz.4.272'. [ 50.730007][ T4720] x_tables: duplicate underflow at hook 1 [ 51.476344][ T4754] netlink: 8 bytes leftover after parsing attributes in process `syz.7.283'. [ 51.485920][ T4754] xt_CT: You must specify a L4 protocol and not use inversions on it [ 51.505586][ T4754] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.522813][ T4759] netlink: 8 bytes leftover after parsing attributes in process `syz.6.285'. [ 51.537070][ T4761] x_tables: duplicate underflow at hook 1 [ 51.545347][ T4759] xt_CT: You must specify a L4 protocol and not use inversions on it [ 51.582087][ T4759] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.679054][ T4759] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.704944][ T4771] loop4: detected capacity change from 0 to 1024 [ 51.722556][ T4771] EXT4-fs: Ignoring removed mblk_io_submit option [ 51.729822][ T4771] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 51.740207][ T4771] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.754903][ T4759] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.783635][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.840681][ T4759] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.944938][ T12] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.960894][ T12] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.980338][ T31] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.992251][ T31] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.116782][ T4804] netlink: 8 bytes leftover after parsing attributes in process `syz.6.296'. [ 52.143446][ T4806] netlink: 4 bytes leftover after parsing attributes in process `syz.6.297'. [ 52.152586][ T4806] netlink: 12 bytes leftover after parsing attributes in process `syz.6.297'. [ 52.192468][ T4811] x_tables: duplicate underflow at hook 1 [ 52.247677][ T4817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.302'. [ 52.375767][ T4827] netlink: 28 bytes leftover after parsing attributes in process `syz.3.305'. [ 52.474638][ T4831] loop6: detected capacity change from 0 to 164 [ 52.536638][ T4839] x_tables: duplicate underflow at hook 1 [ 52.616045][ T4842] loop0: detected capacity change from 0 to 1024 [ 52.626574][ T4842] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.647243][ T4842] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 52.657661][ T4842] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.691691][ T29] kauditd_printk_skb: 1592 callbacks suppressed [ 52.691774][ T29] audit: type=1400 audit(1763950954.708:3672): avc: denied { mount } for pid=4836 comm="syz.0.310" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 52.719826][ T29] audit: type=1400 audit(1763950954.718:3673): avc: denied { add_name } for pid=4836 comm="syz.0.310" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.741666][ T29] audit: type=1400 audit(1763950954.718:3674): avc: denied { create } for pid=4836 comm="syz.0.310" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 52.765770][ T29] audit: type=1400 audit(1763950954.718:3675): avc: denied { read append open } for pid=4836 comm="syz.0.310" path="/63/file0/cgroup.controllers" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 52.790665][ T29] audit: type=1400 audit(1763950954.718:3676): avc: denied { map } for pid=4836 comm="syz.0.310" path="/63/file0/cgroup.controllers" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 52.814341][ T29] audit: type=1400 audit(1763950954.718:3677): avc: denied { write } for pid=4836 comm="syz.0.310" path="/63/file0/cgroup.controllers" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 52.838094][ T29] audit: type=1326 audit(1763950954.768:3678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4851 comm="syz.4.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7c82bf749 code=0x7ffc0000 [ 52.861458][ T29] audit: type=1326 audit(1763950954.768:3679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4851 comm="syz.4.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7c82bf749 code=0x7ffc0000 [ 52.884824][ T29] audit: type=1326 audit(1763950954.768:3680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4851 comm="syz.4.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fd7c82bf749 code=0x7ffc0000 [ 52.908185][ T29] audit: type=1326 audit(1763950954.768:3681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4851 comm="syz.4.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7c82bf749 code=0x7ffc0000 [ 52.957266][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.959202][ T4857] loop6: detected capacity change from 0 to 512 [ 52.975656][ T4858] loop3: detected capacity change from 0 to 512 [ 52.982745][ T4858] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 52.997554][ T4857] FAT-fs (loop6): bogus number of FAT sectors [ 53.003692][ T4857] FAT-fs (loop6): Can't find a valid FAT filesystem [ 53.014470][ T4858] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 53.022560][ T4858] EXT4-fs (loop3): orphan cleanup on readonly fs [ 53.030433][ T4858] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.319: corrupted inode contents [ 53.042477][ T4858] EXT4-fs (loop3): Remounting filesystem read-only [ 53.049176][ T4858] EXT4-fs (loop3): 1 truncate cleaned up [ 53.055345][ T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 53.065992][ T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 53.077054][ T12] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 53.116696][ T4858] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.129598][ T4858] FAULT_INJECTION: forcing a failure. [ 53.129598][ T4858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.142676][ T4858] CPU: 0 UID: 0 PID: 4858 Comm: syz.3.319 Not tainted syzkaller #0 PREEMPT(voluntary) [ 53.142734][ T4858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 53.142747][ T4858] Call Trace: [ 53.142753][ T4858] [ 53.142761][ T4858] __dump_stack+0x1d/0x30 [ 53.142782][ T4858] dump_stack_lvl+0xe8/0x140 [ 53.142805][ T4858] dump_stack+0x15/0x1b [ 53.142839][ T4858] should_fail_ex+0x265/0x280 [ 53.142868][ T4858] should_fail+0xb/0x20 [ 53.142929][ T4858] should_fail_usercopy+0x1a/0x20 [ 53.142953][ T4858] _copy_from_user+0x1c/0xb0 [ 53.143006][ T4858] memdup_user+0x5e/0xd0 [ 53.143033][ T4858] strndup_user+0x68/0xb0 [ 53.143083][ T4858] __se_sys_request_key+0x11e/0x290 [ 53.143112][ T4858] ? fput+0x8f/0xc0 [ 53.143129][ T4858] __x64_sys_request_key+0x55/0x70 [ 53.143165][ T4858] x64_sys_call+0x1d98/0x3000 [ 53.143194][ T4858] do_syscall_64+0xd2/0x200 [ 53.143216][ T4858] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 53.143248][ T4858] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 53.143292][ T4858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.143311][ T4858] RIP: 0033:0x7f7dd24af749 [ 53.143326][ T4858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.143421][ T4858] RSP: 002b:00007f7dd0f17038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 53.143442][ T4858] RAX: ffffffffffffffda RBX: 00007f7dd2705fa0 RCX: 00007f7dd24af749 [ 53.143456][ T4858] RDX: 00002000000003c0 RSI: 0000200000000380 RDI: 0000200000000340 [ 53.143470][ T4858] RBP: 00007f7dd0f17090 R08: 0000000000000000 R09: 0000000000000000 [ 53.143482][ T4858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.143496][ T4858] R13: 00007f7dd2706038 R14: 00007f7dd2705fa0 R15: 00007ffec55782e8 [ 53.143516][ T4858] [ 53.333504][ T4754] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.344472][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.445999][ T4754] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.585316][ T4754] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.599471][ T4880] netlink: '+}[@': attribute type 13 has an invalid length. [ 53.606936][ T4885] loop4: detected capacity change from 0 to 8192 [ 53.630161][ T4885] bio_check_eod: 17105 callbacks suppressed [ 53.630176][ T4885] syz.4.327: attempt to access beyond end of device [ 53.630176][ T4885] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 53.649371][ T4885] buffer_io_error: 17105 callbacks suppressed [ 53.649416][ T4885] Buffer I/O error on dev loop4, logical block 57847, async page read [ 53.700287][ T4885] syz.4.327: attempt to access beyond end of device [ 53.700287][ T4885] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 53.713712][ T4885] Buffer I/O error on dev loop4, logical block 57847, async page read [ 53.764002][ T4889] netlink: 12 bytes leftover after parsing attributes in process `syz.6.328'. [ 53.773188][ T12] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.819624][ T12] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.846991][ T4888] netlink: 12 bytes leftover after parsing attributes in process `syz.6.328'. [ 53.865642][ T4885] syz.4.327: attempt to access beyond end of device [ 53.865642][ T4885] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 53.878971][ T4885] Buffer I/O error on dev loop4, logical block 57847, async page read [ 53.897851][ T12] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.923612][ T12] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.942420][ T4885] syz.4.327: attempt to access beyond end of device [ 53.942420][ T4885] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 53.955790][ T4885] Buffer I/O error on dev loop4, logical block 57847, async page read [ 53.969398][ T4885] syz.4.327: attempt to access beyond end of device [ 53.969398][ T4885] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 53.982848][ T4885] Buffer I/O error on dev loop4, logical block 57847, async page read [ 53.991165][ T4885] syz.4.327: attempt to access beyond end of device [ 53.991165][ T4885] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 54.004470][ T4885] Buffer I/O error on dev loop4, logical block 57847, async page read [ 54.012880][ T4885] syz.4.327: attempt to access beyond end of device [ 54.012880][ T4885] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 54.026411][ T4885] Buffer I/O error on dev loop4, logical block 57847, async page read [ 54.035163][ T4885] syz.4.327: attempt to access beyond end of device [ 54.035163][ T4885] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 54.048560][ T4885] Buffer I/O error on dev loop4, logical block 57847, async page read [ 54.056885][ T4885] syz.4.327: attempt to access beyond end of device [ 54.056885][ T4885] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 54.070286][ T4885] Buffer I/O error on dev loop4, logical block 57847, async page read [ 54.078537][ T4885] syz.4.327: attempt to access beyond end of device [ 54.078537][ T4885] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 54.091923][ T4885] Buffer I/O error on dev loop4, logical block 57847, async page read [ 54.225543][ T4898] loop7: detected capacity change from 0 to 128 [ 54.232561][ T4898] FAT-fs (loop7): invalid media value (0x00) [ 54.238655][ T4898] FAT-fs (loop7): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 54.247932][ T4898] FAT-fs (loop7): Can't find a valid FAT filesystem [ 54.425800][ T4920] loop6: detected capacity change from 0 to 512 [ 54.439709][ T4920] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 54.447714][ T4920] EXT4-fs (loop6): orphan cleanup on readonly fs [ 54.455595][ T4920] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm {/}\: corrupted inode contents [ 54.467233][ T4920] EXT4-fs (loop6): Remounting filesystem read-only [ 54.473862][ T4920] EXT4-fs (loop6): 1 truncate cleaned up [ 54.479639][ T12] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 54.490201][ T12] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 54.520902][ T12] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 54.548224][ T4920] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 54.563021][ T4916] FAULT_INJECTION: forcing a failure. [ 54.563021][ T4916] name failslab, interval 1, probability 0, space 0, times 0 [ 54.575750][ T4916] CPU: 1 UID: 0 PID: 4916 Comm: syz.3.334 Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.575832][ T4916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 54.575842][ T4916] Call Trace: [ 54.575848][ T4916] [ 54.575854][ T4916] __dump_stack+0x1d/0x30 [ 54.575874][ T4916] dump_stack_lvl+0xe8/0x140 [ 54.575899][ T4916] dump_stack+0x15/0x1b [ 54.575914][ T4916] should_fail_ex+0x265/0x280 [ 54.575946][ T4916] ? do_blk_trace_setup+0x122/0x4d0 [ 54.576038][ T4916] should_failslab+0x8c/0xb0 [ 54.576121][ T4916] __kmalloc_cache_noprof+0x4c/0x4a0 [ 54.576154][ T4916] do_blk_trace_setup+0x122/0x4d0 [ 54.576195][ T4916] blk_trace_setup+0xa5/0x140 [ 54.576217][ T4916] ? __pfx_blkdev_ioctl+0x10/0x10 [ 54.576237][ T4916] blk_trace_ioctl+0xf5/0x300 [ 54.576340][ T4916] ? do_vfs_ioctl+0x866/0xe10 [ 54.576364][ T4916] ? selinux_file_ioctl+0x308/0x3a0 [ 54.576394][ T4916] ? __pfx_blkdev_ioctl+0x10/0x10 [ 54.576414][ T4916] blkdev_ioctl+0x25f/0x440 [ 54.576441][ T4916] ? __pfx_blkdev_ioctl+0x10/0x10 [ 54.576523][ T4916] __se_sys_ioctl+0xce/0x140 [ 54.576545][ T4916] __x64_sys_ioctl+0x43/0x50 [ 54.576594][ T4916] x64_sys_call+0x1816/0x3000 [ 54.576618][ T4916] do_syscall_64+0xd2/0x200 [ 54.576640][ T4916] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 54.576679][ T4916] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 54.576737][ T4916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.576761][ T4916] RIP: 0033:0x7f7dd24af749 [ 54.576776][ T4916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.576795][ T4916] RSP: 002b:00007f7dd0f17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.576815][ T4916] RAX: ffffffffffffffda RBX: 00007f7dd2705fa0 RCX: 00007f7dd24af749 [ 54.576899][ T4916] RDX: 0000200000000000 RSI: 00000000c0481273 RDI: 000000000000000e [ 54.576913][ T4916] RBP: 00007f7dd0f17090 R08: 0000000000000000 R09: 0000000000000000 [ 54.576926][ T4916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.576939][ T4916] R13: 00007f7dd2706038 R14: 00007f7dd2705fa0 R15: 00007ffec55782e8 [ 54.577027][ T4916] [ 54.808782][ T4178] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.865138][ T4934] FAULT_INJECTION: forcing a failure. [ 54.865138][ T4934] name failslab, interval 1, probability 0, space 0, times 0 [ 54.877961][ T4934] CPU: 0 UID: 0 PID: 4934 Comm: syz.0.340 Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.877989][ T4934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 54.878000][ T4934] Call Trace: [ 54.878005][ T4934] [ 54.878012][ T4934] __dump_stack+0x1d/0x30 [ 54.878032][ T4934] dump_stack_lvl+0xe8/0x140 [ 54.878096][ T4934] dump_stack+0x15/0x1b [ 54.878116][ T4934] should_fail_ex+0x265/0x280 [ 54.878243][ T4934] ? audit_log_d_path+0x8d/0x150 [ 54.878262][ T4934] should_failslab+0x8c/0xb0 [ 54.878287][ T4934] __kmalloc_cache_noprof+0x4c/0x4a0 [ 54.878324][ T4934] audit_log_d_path+0x8d/0x150 [ 54.878435][ T4934] audit_log_d_path_exe+0x42/0x70 [ 54.878459][ T4934] audit_log_task+0x1e9/0x250 [ 54.878492][ T4934] ? kstrtouint+0x76/0xc0 [ 54.878541][ T4934] audit_seccomp+0x61/0x100 [ 54.878602][ T4934] ? __seccomp_filter+0x82d/0x1250 [ 54.878631][ T4934] __seccomp_filter+0x83e/0x1250 [ 54.878703][ T4934] ? vfs_write+0x7e8/0x960 [ 54.878723][ T4934] ? __rcu_read_unlock+0x4f/0x70 [ 54.878770][ T4934] ? __fget_files+0x184/0x1c0 [ 54.878795][ T4934] __secure_computing+0x82/0x150 [ 54.878817][ T4934] syscall_trace_enter+0xcf/0x1e0 [ 54.878840][ T4934] do_syscall_64+0xac/0x200 [ 54.878858][ T4934] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 54.879023][ T4934] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 54.879086][ T4934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.879104][ T4934] RIP: 0033:0x7f1376b0f749 [ 54.879117][ T4934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.879131][ T4934] RSP: 002b:00007f1375577038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 54.879182][ T4934] RAX: ffffffffffffffda RBX: 00007f1376d65fa0 RCX: 00007f1376b0f749 [ 54.879192][ T4934] RDX: 0000000000000015 RSI: 0000000000800000 RDI: 0000200000000000 [ 54.879203][ T4934] RBP: 00007f1375577090 R08: 0000000000000000 R09: 0000000000000000 [ 54.879213][ T4934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.879224][ T4934] R13: 00007f1376d66038 R14: 00007f1376d65fa0 R15: 00007ffca0f05a78 [ 54.879239][ T4934] [ 54.882891][ T4938] netlink: 8 bytes leftover after parsing attributes in process `syz.6.339'. [ 54.991719][ T4944] xt_CT: You must specify a L4 protocol and not use inversions on it [ 55.146491][ T4953] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.218229][ T4946] loop0: detected capacity change from 0 to 8192 [ 55.250044][ T4953] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.551020][ T4953] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.616194][ T4978] 9pnet_fd: Insufficient options for proto=fd [ 55.661447][ T4953] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.886321][ T5005] x_tables: duplicate underflow at hook 1 [ 55.886380][ T5001] loop7: detected capacity change from 0 to 4096 [ 55.908417][ T5001] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.974337][ T5014] loop3: detected capacity change from 0 to 256 [ 55.997078][ T5008] loop4: detected capacity change from 0 to 8192 [ 56.014943][ T5012] loop0: detected capacity change from 0 to 8192 [ 56.049134][ T5017] 9pnet_fd: Insufficient options for proto=fd [ 56.159111][ T5034] IPv6: NLM_F_CREATE should be specified when creating new route [ 56.475832][ T5042] loop3: detected capacity change from 0 to 8192 [ 56.488511][ T4449] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.695946][ T5048] x_tables: duplicate underflow at hook 1 [ 56.860561][ T5054] loop7: detected capacity change from 0 to 8192 [ 57.073194][ T5065] xt_TPROXY: Can be used only with -p tcp or -p udp [ 57.805867][ T29] kauditd_printk_skb: 371 callbacks suppressed [ 57.805888][ T29] audit: type=1400 audit(1763950959.828:4041): avc: denied { read } for pid=5063 comm="syz.7.374" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 57.835360][ T29] audit: type=1400 audit(1763950959.828:4042): avc: denied { open } for pid=5063 comm="syz.7.374" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 58.108397][ T5088] netlink: 12 bytes leftover after parsing attributes in process `syz.7.383'. [ 58.124086][ T5084] loop0: detected capacity change from 0 to 1024 [ 58.152440][ T5084] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.167987][ T5082] loop4: detected capacity change from 0 to 8192 [ 58.347823][ T5084] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 58.492347][ T5084] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.545366][ T5079] program syz.0.380 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.617752][ T29] audit: type=1400 audit(1763950960.638:4043): avc: denied { read } for pid=5094 comm="syz.7.385" name="mISDNtimer" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.618540][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.640622][ T29] audit: type=1400 audit(1763950960.638:4044): avc: denied { open } for pid=5094 comm="syz.7.385" path="/dev/mISDNtimer" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.719945][ T29] audit: type=1400 audit(1763950960.748:4045): avc: denied { append } for pid=5104 comm="syz.4.388" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 58.746703][ T29] audit: type=1400 audit(1763950960.768:4046): avc: denied { write } for pid=5094 comm="syz.7.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 58.765957][ T29] audit: type=1400 audit(1763950960.768:4047): avc: denied { create } for pid=5104 comm="syz.4.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 58.793929][ T5096] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.812531][ T5096] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.867113][ T5096] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.877392][ T5096] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.927767][ T5121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.396'. [ 58.934313][ T29] audit: type=1326 audit(1763950960.918:4048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5116 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dd24af749 code=0x7ffc0000 [ 58.959877][ T29] audit: type=1326 audit(1763950960.918:4049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5116 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7dd24af749 code=0x7ffc0000 [ 58.983293][ T29] audit: type=1326 audit(1763950960.918:4050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5116 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dd24af749 code=0x7ffc0000 [ 59.009615][ T5115] xt_TPROXY: Can be used only with -p tcp or -p udp [ 59.009645][ T5123] geneve2: entered promiscuous mode [ 59.021476][ T5123] geneve2: entered allmulticast mode [ 59.069228][ T109] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 59.079050][ T109] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 59.080893][ T5125] loop6: detected capacity change from 0 to 128 [ 59.088049][ T109] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 59.104090][ T109] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 59.143399][ T5127] x_tables: duplicate underflow at hook 1 [ 59.210729][ T5137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.403'. [ 59.230257][ T5137] xt_CT: You must specify a L4 protocol and not use inversions on it [ 59.246861][ T5137] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 59.257253][ T5137] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.297150][ T5140] loop0: detected capacity change from 0 to 1024 [ 59.323102][ T5137] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 59.333450][ T5137] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.365430][ T5140] EXT4-fs: Ignoring removed mblk_io_submit option [ 59.396552][ T5140] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 59.397091][ T5137] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 59.415523][ T5137] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.530582][ T5140] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.560166][ T5129] program syz.0.399 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.571851][ T5137] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 59.582188][ T5137] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.597225][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.985017][ T5156] xt_TPROXY: Can be used only with -p tcp or -p udp [ 60.179860][ T52] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.188069][ T52] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.212957][ T5158] netlink: '+}[@': attribute type 13 has an invalid length. [ 60.239742][ T52] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.247934][ T52] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.259387][ T52] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.267576][ T52] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.370125][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.377579][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.384973][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.392413][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.399800][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.407264][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.414656][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.422169][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.429562][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.437071][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.454895][ T52] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.463100][ T52] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.510151][ T5173] loop6: detected capacity change from 0 to 164 [ 60.516613][ T5163] loop3: detected capacity change from 0 to 8192 [ 60.555030][ T9] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 60.610052][ T5167] FAULT_INJECTION: forcing a failure. [ 60.610052][ T5167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.617543][ T5180] fido_id[5180]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 60.623142][ T5167] CPU: 0 UID: 0 PID: 5167 Comm: syz.7.411 Not tainted syzkaller #0 PREEMPT(voluntary) [ 60.623170][ T5167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 60.623182][ T5167] Call Trace: [ 60.623188][ T5167] [ 60.623194][ T5167] __dump_stack+0x1d/0x30 [ 60.623238][ T5167] dump_stack_lvl+0xe8/0x140 [ 60.623321][ T5167] dump_stack+0x15/0x1b [ 60.623341][ T5167] should_fail_ex+0x265/0x280 [ 60.623375][ T5167] should_fail+0xb/0x20 [ 60.623448][ T5167] should_fail_usercopy+0x1a/0x20 [ 60.623470][ T5167] strncpy_from_user+0x25/0x230 [ 60.623499][ T5167] strncpy_from_user_nofault+0x68/0xf0 [ 60.623522][ T5167] bpf_probe_read_user_str+0x2a/0x70 [ 60.623593][ T5167] bpf_prog_7f11bb5dfa26a882+0x43/0x49 [ 60.623610][ T5167] bpf_trace_run2+0x107/0x1c0 [ 60.623639][ T5167] ? dev_uevent+0x1e7/0x400 [ 60.623667][ T5167] ? dev_uevent+0x1e7/0x400 [ 60.623697][ T5167] kfree+0x351/0x400 [ 60.623723][ T5167] dev_uevent+0x1e7/0x400 [ 60.623762][ T5167] kobject_uevent_env+0x379/0x570 [ 60.623824][ T5167] ? device_pm_check_callbacks+0x683/0x6a0 [ 60.623853][ T5167] kobject_uevent+0x1d/0x30 [ 60.623886][ T5167] device_del+0x710/0x790 [ 60.624008][ T5167] device_destroy+0x66/0xa0 [ 60.624030][ T5167] drop_ref+0xbf/0x1a0 [ 60.624090][ T5167] hidraw_disconnect+0x39/0x50 [ 60.624125][ T5167] hid_device_remove+0x158/0x210 [ 60.624144][ T5167] ? __pfx_hid_device_remove+0x10/0x10 [ 60.624165][ T5167] device_release_driver_internal+0x2be/0x4e0 [ 60.624191][ T5167] device_release_driver+0x19/0x20 [ 60.624213][ T5167] bus_remove_device+0x26d/0x290 [ 60.624322][ T5167] device_del+0x36a/0x790 [ 60.624344][ T5167] hid_destroy_device+0x54/0x120 [ 60.624385][ T5167] uhid_dev_destroy+0x6a/0xb0 [ 60.624413][ T5167] uhid_char_write+0x3aa/0x650 [ 60.624441][ T5167] ? __pfx_uhid_char_write+0x10/0x10 [ 60.624479][ T5167] vfs_write+0x269/0x960 [ 60.624503][ T5167] ? __rcu_read_unlock+0x4f/0x70 [ 60.624530][ T5167] ? __fget_files+0x184/0x1c0 [ 60.624559][ T5167] ksys_write+0xda/0x1a0 [ 60.624584][ T5167] __x64_sys_write+0x40/0x50 [ 60.624648][ T5167] x64_sys_call+0x2802/0x3000 [ 60.624685][ T5167] do_syscall_64+0xd2/0x200 [ 60.624707][ T5167] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 60.624734][ T5167] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 60.624817][ T5167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.624839][ T5167] RIP: 0033:0x7f911b75f749 [ 60.624854][ T5167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.624876][ T5167] RSP: 002b:00007f911a19e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 60.624904][ T5167] RAX: ffffffffffffffda RBX: 00007f911b9b6090 RCX: 00007f911b75f749 [ 60.624917][ T5167] RDX: 0000000000000004 RSI: 0000200000000080 RDI: 0000000000000004 [ 60.624930][ T5167] RBP: 00007f911a19e090 R08: 0000000000000000 R09: 0000000000000000 [ 60.624973][ T5167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.624985][ T5167] R13: 00007f911b9b6128 R14: 00007f911b9b6090 R15: 00007ffc62f09a58 [ 60.625003][ T5167] [ 60.919425][ T5202] loop3: detected capacity change from 0 to 1024 [ 61.007433][ T5206] netlink: '+}[@': attribute type 13 has an invalid length. [ 61.041784][ T5202] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.082240][ T5213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.420'. [ 61.137988][ T5220] loop4: detected capacity change from 0 to 128 [ 61.148700][ T5220] FAT-fs (loop4): invalid media value (0x00) [ 61.154715][ T5220] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 61.164007][ T5220] FAT-fs (loop4): Can't find a valid FAT filesystem [ 61.580889][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.082950][ T5251] loop3: detected capacity change from 0 to 8192 [ 62.195348][ T5268] netlink: '+}[@': attribute type 13 has an invalid length. [ 62.276266][ T5284] program syz.4.435 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.592212][ T5300] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 62.598741][ T5300] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 62.606264][ T5300] vhci_hcd vhci_hcd.0: Device attached [ 62.781287][ T5313] loop4: detected capacity change from 0 to 164 [ 62.798407][ T2968] vhci_hcd: vhci_device speed not set [ 62.868412][ T2968] usb 13-1: new full-speed USB device number 2 using vhci_hcd [ 62.911089][ T5315] loop4: detected capacity change from 0 to 8192 [ 62.957157][ T5320] loop4: detected capacity change from 0 to 128 [ 62.964212][ T5320] FAT-fs (loop4): invalid media value (0x00) [ 62.970366][ T5320] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 62.980033][ T5320] FAT-fs (loop4): Can't find a valid FAT filesystem [ 63.207257][ T5306] vhci_hcd: connection reset by peer [ 63.209284][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 63.209296][ T29] audit: type=1326 audit(1763950965.238:4223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5325 comm="syz.7.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911b75f749 code=0x7ffc0000 [ 63.212882][ T5096] vhci_hcd: stop threads [ 63.220220][ T29] audit: type=1326 audit(1763950965.248:4224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5325 comm="syz.7.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f911b75f749 code=0x7ffc0000 [ 63.242138][ T5096] vhci_hcd: release socket [ 63.242153][ T5096] vhci_hcd: disconnect device [ 63.285425][ T29] audit: type=1326 audit(1763950965.268:4225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5325 comm="syz.7.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911b75f749 code=0x7ffc0000 [ 63.308817][ T29] audit: type=1326 audit(1763950965.268:4226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5325 comm="syz.7.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f911b75f749 code=0x7ffc0000 [ 63.332193][ T29] audit: type=1400 audit(1763950965.268:4227): avc: denied { read } for pid=5325 comm="syz.7.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 63.351351][ T29] audit: type=1326 audit(1763950965.268:4228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5325 comm="syz.7.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911b75f749 code=0x7ffc0000 [ 63.374621][ T29] audit: type=1326 audit(1763950965.268:4229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5325 comm="syz.7.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f911b75f749 code=0x7ffc0000 [ 63.397826][ T29] audit: type=1326 audit(1763950965.268:4230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5325 comm="syz.7.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911b75f749 code=0x7ffc0000 [ 63.421101][ T29] audit: type=1326 audit(1763950965.268:4231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5325 comm="syz.7.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f911b75f749 code=0x7ffc0000 [ 63.444367][ T29] audit: type=1326 audit(1763950965.268:4232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5325 comm="syz.7.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911b75f749 code=0x7ffc0000 [ 63.760710][ T5337] loop6: detected capacity change from 0 to 128 [ 63.799484][ T5339] netlink: '+}[@': attribute type 13 has an invalid length. [ 63.849877][ T5347] xt_TPROXY: Can be used only with -p tcp or -p udp [ 64.889187][ T5367] loop0: detected capacity change from 0 to 128 [ 64.898820][ T5367] FAT-fs (loop0): invalid media value (0x00) [ 64.904841][ T5367] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 64.914172][ T5367] FAT-fs (loop0): Can't find a valid FAT filesystem [ 64.986361][ T5363] netlink: 12 bytes leftover after parsing attributes in process `syz.6.463'. [ 65.000781][ T5371] netlink: 'syz.3.464': attribute type 12 has an invalid length. [ 65.111082][ T5385] bridge_slave_0: left allmulticast mode [ 65.116772][ T5385] bridge_slave_0: left promiscuous mode [ 65.118870][ T5389] netlink: 'syz.7.469': attribute type 1 has an invalid length. [ 65.122495][ T5385] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.139866][ T5385] bridge_slave_1: left allmulticast mode [ 65.145506][ T5385] bridge_slave_1: left promiscuous mode [ 65.151246][ T5385] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.160722][ T5385] bond0: (slave bond_slave_0): Releasing backup interface [ 65.160815][ T5389] loop7: detected capacity change from 0 to 512 [ 65.176637][ T5389] EXT4-fs (loop7): orphan cleanup on readonly fs [ 65.183881][ T5389] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.469: bad orphan inode 13 [ 65.184309][ T5385] bond0: (slave bond_slave_1): Releasing backup interface [ 65.198736][ T5389] ext4_test_bit(bit=12, block=18) = 1 [ 65.206370][ T5389] is_bad_inode(inode)=0 [ 65.210587][ T5389] NEXT_ORPHAN(inode)=2130706432 [ 65.215536][ T5389] max_ino=32 [ 65.218760][ T5389] i_nlink=1 [ 65.224207][ T5389] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 65.337344][ T5385] team0: Port device team_slave_0 removed [ 65.358703][ T5385] team0: Port device team_slave_1 removed [ 65.367811][ T5385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.375274][ T5385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.385827][ T5385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.393322][ T5385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.404166][ T5385] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 65.519044][ T4449] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.649926][ T5396] netlink: 12 bytes leftover after parsing attributes in process `syz.6.472'. [ 65.817023][ T5410] loop3: detected capacity change from 0 to 1024 [ 65.912151][ T5410] EXT4-fs: Ignoring removed mblk_io_submit option [ 65.936907][ T5410] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 66.085693][ T5426] loop4: detected capacity change from 0 to 128 [ 66.144340][ T5427] loop0: detected capacity change from 0 to 1024 [ 66.152796][ T5427] EXT4-fs: Ignoring removed mblk_io_submit option [ 66.191745][ T5410] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.220059][ T5427] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 66.319445][ T5427] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.373223][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.390149][ T5418] program syz.0.482 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.435090][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.448488][ T5436] x_tables: duplicate underflow at hook 1 [ 66.478620][ T5432] loop4: detected capacity change from 0 to 1024 [ 66.489967][ T5432] EXT4-fs: Ignoring removed mblk_io_submit option [ 66.520761][ T5432] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 66.543382][ T5432] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.563144][ T5438] loop3: detected capacity change from 0 to 8192 [ 66.607092][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.636560][ T5453] netlink: 'syz.7.492': attribute type 12 has an invalid length. [ 67.078684][ T5461] loop4: detected capacity change from 0 to 1024 [ 67.106762][ T5461] EXT4-fs: Ignoring removed mblk_io_submit option [ 67.154586][ T5461] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 67.194295][ T5461] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.220054][ T5468] loop3: detected capacity change from 0 to 1024 [ 67.231225][ T5468] EXT4-fs: Ignoring removed mblk_io_submit option [ 67.241722][ T5468] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 67.278662][ T5468] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.301647][ T5474] loop6: detected capacity change from 0 to 164 [ 67.302422][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.341916][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.351901][ T5474] ISOFS: unable to read i-node block [ 67.421948][ T5482] loop0: detected capacity change from 0 to 164 [ 67.555230][ T5495] 9pnet_fd: Insufficient options for proto=fd [ 67.564311][ T5497] loop7: detected capacity change from 0 to 164 [ 67.578171][ T5497] ISOFS: unable to read i-node block [ 67.931398][ T5505] netlink: 168 bytes leftover after parsing attributes in process `syz.7.512'. [ 67.948337][ T2968] usb 13-1: enqueue for inactive port 0 [ 67.954029][ T2968] usb 13-1: enqueue for inactive port 0 [ 68.028458][ T2968] vhci_hcd: vhci_device speed not set [ 68.106364][ T5507] loop3: detected capacity change from 0 to 1024 [ 68.126481][ T5507] EXT4-fs: Ignoring removed mblk_io_submit option [ 68.174809][ T5507] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 68.193667][ T5507] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.226859][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.253534][ T5515] loop3: detected capacity change from 0 to 164 [ 68.263549][ T29] kauditd_printk_skb: 269 callbacks suppressed [ 68.263562][ T29] audit: type=1326 audit(1763950970.288:4502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5512 comm="syz.4.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7c82bf749 code=0x7ffc0000 [ 68.331824][ T29] audit: type=1326 audit(1763950970.298:4503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5512 comm="syz.4.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7c82bf749 code=0x7ffc0000 [ 68.355325][ T29] audit: type=1326 audit(1763950970.298:4504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5512 comm="syz.4.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd7c82bf783 code=0x7ffc0000 [ 68.358530][ T5518] x_tables: duplicate underflow at hook 1 [ 68.378517][ T29] audit: type=1326 audit(1763950970.298:4505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5512 comm="syz.4.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fd7c82bf807 code=0x7ffc0000 [ 68.407446][ T29] audit: type=1326 audit(1763950970.298:4506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5512 comm="syz.4.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd7c8276bdd code=0x7ffc0000 [ 68.430793][ T29] audit: type=1326 audit(1763950970.298:4507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5512 comm="syz.4.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fd7c82f3e89 code=0x7ffc0000 [ 68.451175][ T5520] loop3: detected capacity change from 0 to 164 [ 68.454092][ T29] audit: type=1326 audit(1763950970.298:4508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5512 comm="syz.4.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd7c8276c47 code=0x7ffc0000 [ 68.483492][ T29] audit: type=1326 audit(1763950970.298:4509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5512 comm="syz.4.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7c82bf749 code=0x7ffc0000 [ 68.507015][ T29] audit: type=1326 audit(1763950970.298:4510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5512 comm="syz.4.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7c82bf749 code=0x7ffc0000 [ 68.530390][ T29] audit: type=1326 audit(1763950970.308:4511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5512 comm="syz.4.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fd7c8276357 code=0x7ffc0000 [ 68.564499][ T5520] ISOFS: unable to read i-node block [ 68.710174][ T5531] loop3: detected capacity change from 0 to 1024 [ 68.749153][ T5531] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.761618][ T5533] loop7: detected capacity change from 0 to 8192 [ 68.790199][ T5533] bio_check_eod: 44451 callbacks suppressed [ 68.790213][ T5533] syz.7.524: attempt to access beyond end of device [ 68.790213][ T5533] loop7: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 68.796377][ T5534] loop0: detected capacity change from 0 to 1024 [ 68.809526][ T5533] buffer_io_error: 44451 callbacks suppressed [ 68.809582][ T5533] Buffer I/O error on dev loop7, logical block 57847, async page read [ 68.830261][ T5533] syz.7.524: attempt to access beyond end of device [ 68.830261][ T5533] loop7: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 68.843571][ T5533] Buffer I/O error on dev loop7, logical block 57847, async page read [ 68.854592][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.878404][ T5533] syz.7.524: attempt to access beyond end of device [ 68.878404][ T5533] loop7: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 68.891797][ T5533] Buffer I/O error on dev loop7, logical block 57847, async page read [ 68.913015][ T5533] syz.7.524: attempt to access beyond end of device [ 68.913015][ T5533] loop7: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 68.926467][ T5533] Buffer I/O error on dev loop7, logical block 57847, async page read [ 68.935246][ T5533] syz.7.524: attempt to access beyond end of device [ 68.935246][ T5533] loop7: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 68.948566][ T5533] Buffer I/O error on dev loop7, logical block 57847, async page read [ 68.956800][ T5533] syz.7.524: attempt to access beyond end of device [ 68.956800][ T5533] loop7: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 68.970237][ T5533] Buffer I/O error on dev loop7, logical block 57847, async page read [ 68.980311][ T5533] syz.7.524: attempt to access beyond end of device [ 68.980311][ T5533] loop7: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 68.980797][ T5534] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.993708][ T5533] Buffer I/O error on dev loop7, logical block 57847, async page read [ 69.014211][ T5533] syz.7.524: attempt to access beyond end of device [ 69.014211][ T5533] loop7: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 69.027606][ T5533] Buffer I/O error on dev loop7, logical block 57847, async page read [ 69.036006][ T5533] syz.7.524: attempt to access beyond end of device [ 69.036006][ T5533] loop7: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 69.049355][ T5533] Buffer I/O error on dev loop7, logical block 57847, async page read [ 69.057633][ T5533] syz.7.524: attempt to access beyond end of device [ 69.057633][ T5533] loop7: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 69.070945][ T5533] Buffer I/O error on dev loop7, logical block 57847, async page read [ 69.153545][ T5544] loop6: detected capacity change from 0 to 128 [ 69.169648][ T5544] FAT-fs (loop6): invalid media value (0x00) [ 69.175723][ T5544] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 69.185051][ T5544] FAT-fs (loop6): Can't find a valid FAT filesystem [ 69.237792][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.908713][ T5575] loop6: detected capacity change from 0 to 8192 [ 69.929918][ T5578] loop0: detected capacity change from 0 to 1024 [ 69.953429][ T5578] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.965284][ T5578] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 69.979737][ T5580] x_tables: duplicate underflow at hook 1 [ 69.998716][ T5578] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.081310][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.213794][ T5600] loop3: detected capacity change from 0 to 164 [ 70.228725][ T5598] netlink: 12 bytes leftover after parsing attributes in process `syz.0.546'. [ 70.325615][ T5609] x_tables: duplicate underflow at hook 1 [ 70.399283][ T5615] netlink: 'syz.0.557': attribute type 12 has an invalid length. [ 70.420602][ T5621] loop4: detected capacity change from 0 to 128 [ 70.428631][ T5621] FAT-fs (loop4): invalid media value (0x00) [ 70.434628][ T5621] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 70.444027][ T5621] FAT-fs (loop4): Can't find a valid FAT filesystem [ 70.519896][ T5631] program syz.4.562 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.591114][ T5633] netlink: 12 bytes leftover after parsing attributes in process `syz.4.563'. [ 70.659564][ T5639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.566'. [ 70.669105][ T5639] xt_CT: You must specify a L4 protocol and not use inversions on it [ 70.681053][ T5639] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.690809][ T5639] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.763315][ T5642] x_tables: duplicate underflow at hook 1 [ 70.783602][ T5644] loop7: detected capacity change from 0 to 164 [ 70.790899][ T5639] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.800703][ T5639] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.850189][ T5639] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.860075][ T5639] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.896949][ T5654] program syz.7.573 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.966377][ T5656] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 70.983399][ T5639] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.987649][ T5656] netlink: 'syz.7.574': attribute type 1 has an invalid length. [ 70.993266][ T5639] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.006293][ T5656] loop7: detected capacity change from 0 to 512 [ 71.023697][ T5656] EXT4-fs (loop7): orphan cleanup on readonly fs [ 71.030309][ T5656] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.574: bad orphan inode 13 [ 71.040544][ T5656] ext4_test_bit(bit=12, block=18) = 1 [ 71.045991][ T5656] is_bad_inode(inode)=0 [ 71.050163][ T5656] NEXT_ORPHAN(inode)=2130706432 [ 71.055075][ T5656] max_ino=32 [ 71.058277][ T5656] i_nlink=1 [ 71.061879][ T5656] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.075638][ T5656] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 71.090853][ T5664] loop6: detected capacity change from 0 to 128 [ 71.112965][ T1623] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.121255][ T1623] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.139945][ T31] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.148155][ T31] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.156410][ T5656] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 71.165209][ T31] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.173408][ T31] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.184691][ T31] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.192909][ T31] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.249039][ T5677] loop4: detected capacity change from 0 to 164 [ 71.314593][ T5683] program syz.4.584 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.772747][ T4449] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.986513][ T5701] xt_TPROXY: Can be used only with -p tcp or -p udp [ 72.368975][ T5708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.591'. [ 72.381804][ T5708] xt_CT: You must specify a L4 protocol and not use inversions on it [ 72.404621][ T5708] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.421706][ T5711] loop6: detected capacity change from 0 to 164 [ 72.430411][ T5713] program syz.4.596 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.459663][ T5708] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.531568][ T5708] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.232003][ T5708] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.320863][ T29] kauditd_printk_skb: 891 callbacks suppressed [ 73.320875][ T29] audit: type=1326 audit(1763950975.338:5403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5732 comm="syz.7.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911b75f749 code=0x7ffc0000 [ 73.350440][ T29] audit: type=1326 audit(1763950975.338:5404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5732 comm="syz.7.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f911b75f783 code=0x7ffc0000 [ 73.373620][ T29] audit: type=1326 audit(1763950975.338:5405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5732 comm="syz.7.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f911b75f807 code=0x7ffc0000 [ 73.396982][ T29] audit: type=1326 audit(1763950975.338:5406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5732 comm="syz.7.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f911b716bdd code=0x7ffc0000 [ 73.420318][ T29] audit: type=1326 audit(1763950975.338:5407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5732 comm="syz.7.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f911b793e89 code=0x7ffc0000 [ 73.443706][ T29] audit: type=1326 audit(1763950975.338:5408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5732 comm="syz.7.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f911b716c47 code=0x7ffc0000 [ 73.466997][ T29] audit: type=1326 audit(1763950975.338:5409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5732 comm="syz.7.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911b75f749 code=0x7ffc0000 [ 73.490304][ T29] audit: type=1326 audit(1763950975.338:5410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5732 comm="syz.7.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911b75f749 code=0x7ffc0000 [ 73.513665][ T29] audit: type=1326 audit(1763950975.338:5411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5732 comm="syz.7.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f911b716357 code=0x7ffc0000 [ 73.536948][ T29] audit: type=1326 audit(1763950975.338:5412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5732 comm="syz.7.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f911b7163b6 code=0x7ffc0000 [ 73.636888][ T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.648295][ T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.666433][ T5743] loop6: detected capacity change from 0 to 128 [ 73.666637][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.690059][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.710724][ T5743] FAT-fs (loop6): invalid media value (0x00) [ 73.716786][ T5743] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 73.726202][ T5743] FAT-fs (loop6): Can't find a valid FAT filesystem [ 73.735257][ T5748] program syz.4.608 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.837146][ T5757] loop6: detected capacity change from 0 to 8192 [ 73.852281][ T5757] bio_check_eod: 13416 callbacks suppressed [ 73.852293][ T5757] syz.6.612: attempt to access beyond end of device [ 73.852293][ T5757] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 73.871639][ T5757] buffer_io_error: 13416 callbacks suppressed [ 73.871650][ T5757] Buffer I/O error on dev loop6, logical block 57847, async page read [ 73.886790][ T5757] syz.6.612: attempt to access beyond end of device [ 73.886790][ T5757] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 73.900136][ T5757] Buffer I/O error on dev loop6, logical block 57847, async page read [ 73.911057][ T5757] syz.6.612: attempt to access beyond end of device [ 73.911057][ T5757] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 73.924531][ T5757] Buffer I/O error on dev loop6, logical block 57847, async page read [ 73.942109][ T5757] syz.6.612: attempt to access beyond end of device [ 73.942109][ T5757] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 73.955599][ T5757] Buffer I/O error on dev loop6, logical block 57847, async page read [ 73.963819][ T5757] syz.6.612: attempt to access beyond end of device [ 73.963819][ T5757] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 73.977259][ T5757] Buffer I/O error on dev loop6, logical block 57847, async page read [ 73.985551][ T5757] syz.6.612: attempt to access beyond end of device [ 73.985551][ T5757] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 73.998935][ T5757] Buffer I/O error on dev loop6, logical block 57847, async page read [ 74.007265][ T5757] syz.6.612: attempt to access beyond end of device [ 74.007265][ T5757] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 74.020981][ T5757] Buffer I/O error on dev loop6, logical block 57847, async page read [ 74.078420][ T5757] syz.6.612: attempt to access beyond end of device [ 74.078420][ T5757] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 74.091791][ T5757] Buffer I/O error on dev loop6, logical block 57847, async page read [ 74.106607][ T5757] syz.6.612: attempt to access beyond end of device [ 74.106607][ T5757] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 74.120008][ T5757] Buffer I/O error on dev loop6, logical block 57847, async page read [ 74.228055][ T5757] syz.6.612: attempt to access beyond end of device [ 74.228055][ T5757] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 74.241447][ T5757] Buffer I/O error on dev loop6, logical block 57847, async page read [ 74.282794][ T5763] loop0: detected capacity change from 0 to 8192 [ 74.446380][ T5769] loop3: detected capacity change from 0 to 164 [ 75.076053][ T5799] x_tables: duplicate underflow at hook 1 [ 75.600293][ T5813] loop7: detected capacity change from 0 to 128 [ 75.611252][ T5813] FAT-fs (loop7): invalid media value (0x00) [ 75.617279][ T5813] FAT-fs (loop7): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 75.626643][ T5813] FAT-fs (loop7): Can't find a valid FAT filesystem [ 75.985703][ T5824] netlink: 'syz.0.637': attribute type 1 has an invalid length. [ 76.019883][ T5817] bridge_slave_0: left allmulticast mode [ 76.025533][ T5817] bridge_slave_0: left promiscuous mode [ 76.031245][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.043351][ T5824] loop0: detected capacity change from 0 to 512 [ 76.059092][ T5824] EXT4-fs (loop0): orphan cleanup on readonly fs [ 76.075765][ T5824] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.637: bad orphan inode 13 [ 76.116656][ T5817] bridge_slave_1: left allmulticast mode [ 76.122346][ T5817] bridge_slave_1: left promiscuous mode [ 76.128056][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.136281][ T5824] ext4_test_bit(bit=12, block=18) = 1 [ 76.141736][ T5824] is_bad_inode(inode)=0 [ 76.145896][ T5824] NEXT_ORPHAN(inode)=2130706432 [ 76.150820][ T5824] max_ino=32 [ 76.154006][ T5824] i_nlink=1 [ 76.158726][ T5824] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.191955][ T5824] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 76.212608][ T5817] bond0: (slave bond_slave_0): Releasing backup interface [ 76.222229][ T5832] netlink: 'syz.4.640': attribute type 1 has an invalid length. [ 76.234617][ T5817] bond0: (slave bond_slave_1): Releasing backup interface [ 76.242213][ T5832] loop4: detected capacity change from 0 to 512 [ 76.249388][ T5824] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 76.269058][ T5817] team0: Port device team_slave_0 removed [ 76.278057][ T5817] team0: Port device team_slave_1 removed [ 76.283987][ T5832] EXT4-fs (loop4): orphan cleanup on readonly fs [ 76.290961][ T5832] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.640: bad orphan inode 13 [ 76.301454][ T5817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.308866][ T5817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.316619][ T5832] ext4_test_bit(bit=12, block=18) = 1 [ 76.322027][ T5832] is_bad_inode(inode)=0 [ 76.326234][ T5832] NEXT_ORPHAN(inode)=2130706432 [ 76.331163][ T5832] max_ino=32 [ 76.334346][ T5832] i_nlink=1 [ 76.338160][ T5832] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.344544][ T5817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.357913][ T5817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.368341][ T5832] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 76.380935][ T5817] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 76.400675][ T5841] loop6: detected capacity change from 0 to 164 [ 76.473551][ T5832] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 76.523302][ T5829] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 76.692673][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.959758][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.066748][ T5872] loop4: detected capacity change from 0 to 1024 [ 77.088462][ T3408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.097006][ T5872] EXT4-fs: Ignoring removed mblk_io_submit option [ 77.103520][ T5870] loop0: detected capacity change from 0 to 1024 [ 77.107867][ T5872] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 77.121631][ T5872] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.137143][ T5870] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.161995][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.172826][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.192789][ T5877] loop4: detected capacity change from 0 to 164 [ 77.248502][ T3419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.306024][ T5889] netlink: 12 bytes leftover after parsing attributes in process `syz.6.660'. [ 77.407011][ T5891] loop4: detected capacity change from 0 to 8192 [ 77.505288][ T3680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.538451][ T4471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.546654][ T4471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.637797][ T3378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.660182][ T5907] loop6: detected capacity change from 0 to 8192 [ 78.057419][ T3378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.124645][ T5914] loop3: detected capacity change from 0 to 128 [ 78.264339][ T3378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.467159][ T3005] ================================================================== [ 78.475258][ T3005] BUG: KCSAN: data-race in d_delete / lookup_fast [ 78.481668][ T3005] [ 78.483970][ T3005] read-write to 0xffff888100773000 of 4 bytes by task 3735 on cpu 0: [ 78.492016][ T3005] d_delete+0x15a/0x180 [ 78.496161][ T3005] d_delete_notify+0x32/0x100 [ 78.500832][ T3005] vfs_unlink+0x30b/0x420 [ 78.505154][ T3005] do_unlinkat+0x24e/0x480 [ 78.509571][ T3005] __x64_sys_unlink+0x2e/0x40 [ 78.514240][ T3005] x64_sys_call+0x2dcf/0x3000 [ 78.518913][ T3005] do_syscall_64+0xd2/0x200 [ 78.523404][ T3005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.529281][ T3005] [ 78.531587][ T3005] read to 0xffff888100773000 of 4 bytes by task 3005 on cpu 1: [ 78.539109][ T3005] lookup_fast+0xf0/0x320 [ 78.543434][ T3005] walk_component+0x3f/0x220 [ 78.548011][ T3005] path_lookupat+0xfe/0x2a0 [ 78.552506][ T3005] filename_lookup+0x147/0x340 [ 78.557262][ T3005] do_readlinkat+0x7d/0x320 [ 78.561756][ T3005] __x64_sys_readlink+0x47/0x60 [ 78.566597][ T3005] x64_sys_call+0x28de/0x3000 [ 78.571262][ T3005] do_syscall_64+0xd2/0x200 [ 78.575752][ T3005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.581630][ T3005] [ 78.583943][ T3005] value changed: 0x00300180 -> 0x00004080 [ 78.589648][ T3005] [ 78.591951][ T3005] Reported by Kernel Concurrency Sanitizer on: [ 78.598099][ T3005] CPU: 1 UID: 0 PID: 3005 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 78.607390][ T3005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 78.617429][ T3005] ================================================================== [ 78.654550][ T5932] loop0: detected capacity change from 0 to 164 [ 82.179078][ T3419] net_ratelimit: 7 callbacks suppressed [ 82.179095][ T3419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.218739][ T3378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.468702][ T4471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.258567][ T1095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.298493][ T1095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.338577][ T3378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.498725][ T3680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.299824][ T3419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.378803][ T3419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.418616][ T1095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog