last executing test programs: 2.865831311s ago: executing program 4 (id=815): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) lsm_set_self_attr(0x69, 0x0, 0x42, 0x0) 2.834744653s ago: executing program 4 (id=817): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x7, 0x5, 0x7, 0xc1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, &(0x7f0000000340), &(0x7f00000004c0)=""/192}, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}, [@mark={0xc, 0x15, {0x35075b, 0x81}}]}, 0xc4}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, @in=@empty, 0x0, 0x0, 0x4e23, 0xfffc, 0xa, 0x10}, {0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffa, 0x4, 0x3}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4) sched_setscheduler(0x0, 0x2, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0x20) mmap$xdp(&(0x7f0000ca6000/0x4000)=nil, 0x4000, 0x2, 0x42032, r5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) readv(r4, &(0x7f0000000000)=[{0x0}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYRES32], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./bus\x00', &(0x7f0000000300), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0xb, &(0x7f0000000f00)=ANY=[@ANYBLOB="18020000010000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='syzkaller\x00'}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x2, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==") 1.944757095s ago: executing program 4 (id=830): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000010000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_9p2000}]}}) 1.794283087s ago: executing program 4 (id=834): socket(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x40010, r0, 0x10000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x2000000000000329, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r6}, 0x10) r7 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [], 0x6b}}) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x2040600) r8 = semget$private(0x0, 0x5, 0x0) semop(r8, &(0x7f0000000000)=[{0x3, 0xfff7, 0x1000}], 0x1) semop(r8, &(0x7f00000000c0)=[{0x3, 0xa78d, 0x1000}], 0x1) semctl$SETALL(r8, 0x0, 0x11, &(0x7f00000001c0)) pipe(&(0x7f0000000240)) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ppoll(&(0x7f0000000100)=[{r3, 0xa206}], 0x1, &(0x7f0000000140)={0x77359400}, &(0x7f0000000200)={[0x705d]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = dup(0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r10, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x4, 0x1ffe, 0x0, 0x5, 0x0}) 1.721552423s ago: executing program 0 (id=835): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0x1}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0xff, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x3}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYRES32=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r4}, 0x18) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYBLOB="fdffffffffcf3b316b9cffffffffffff7f"]) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000500)=0x20000, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, 0x4}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r6, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r3, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='f2fs_unlink_enter\x00', r8, 0x0, 0xfffffffffffffff7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000003c0)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x0, 0x2, 0x698a}]}) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) getrandom(&(0x7f0000000340)=""/29, 0x1d, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='sched_pi_setprio\x00'}, 0x18) write$selinux_load(0xffffffffffffffff, 0x0, 0xfffffed9) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 1.38111272s ago: executing program 3 (id=841): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@bridge_setlink={0x38, 0x13, 0x127, 0x70bd2b, 0x44000000, {0x7, 0x0, 0x68, r1, 0x940, 0x22265}, [@IFLA_LINKINFO={0x18, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x8, 0x4, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}]}}}]}, 0x38}}, 0x8004) 1.340076783s ago: executing program 3 (id=842): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000"], 0x0, 0x7ff, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.263627319s ago: executing program 1 (id=844): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a060f0200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c100000000200ffffffff", 0x58}], 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r5) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a4010000", @ANYRES16=r6, @ANYBLOB="cd3e2cbd7000ffdbdf250100000008000200050000007e01010043"], 0x1a4}, 0x1, 0x0, 0x0, 0x2}, 0x4000840) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x68001, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r10}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) preadv2(r9, &(0x7f0000000e00)=[{&(0x7f0000000380)=""/163, 0xa3}, {&(0x7f0000000280)}, {&(0x7f0000000800)=""/155, 0x9b}, {&(0x7f0000000a40)=""/234, 0xea}, {&(0x7f00000008c0)=""/101, 0x65}, {&(0x7f0000000b40)=""/155, 0x9b}, {&(0x7f0000000c00)=""/241, 0xf1}, {&(0x7f0000000d00)=""/254, 0xfe}, {&(0x7f00000002c0)=""/57, 0x39}], 0x9, 0x400, 0x4, 0x4) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r12}, 0x10) r13 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x43501) close_range(r13, 0xffffffffffffffff, 0x0) r14 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r15 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r15, @ANYBLOB=',wfdno=', @ANYRESHEX=r14, @ANYBLOB]) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r11, 0x8008f512, &(0x7f0000000280)) io_submit(r4, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x2, r3, &(0x7f00000001c0)='V', 0x1}]) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r15, 0xc0502100, &(0x7f0000000ec0)) 1.25597058s ago: executing program 3 (id=845): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010001fff00000000000000f6ff060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x0) r4 = semget(0x1, 0x5, 0x6b4) pipe2$9p(&(0x7f0000000080), 0x800) semop(r4, &(0x7f0000000040)=[{0x1, 0x0, 0x1800}], 0x12) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000000)=[0xc, 0x2]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000280)=ANY=[@ANYRESHEX=r3], 0x0, 0x0, 0x19, 0x0, 0x0, 0xa1b96aadc3618c7a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000ffff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='cachefiles_mkdir\x00', r1, 0x0, 0x4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000001000000080000000c0002800800038004000180180001801400020073797a5f74756e000000000000000000"], 0x38}}, 0x4012) 1.049862896s ago: executing program 2 (id=847): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000025c0)=@delchain={0x644, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0x0, 0xe}, {0x6, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x614, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0x16c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x11c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x68, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x7}, "645809825d93df900fa8fae387fbed6313a639f20b0238ccdd4da9fde2f0be34e659ba729925eff5ebd76dec200e0c6b209649b549944fb335b53ad7e5b0f72af98dbb05ee1778a3e952122289a807cd7b48f87fa52a56b8fa"}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x4}, {0x4, 0x1, 0x6, "eb"}}}, @TCF_EM_CONTAINER={0xc, 0x3, 0x0, 0x0, {{0x4, 0x0, 0xb}}}, @TCF_EM_META={0x90, 0x2, 0x0, 0x0, {{0xbe0, 0x4, 0x7}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x9, 0x2}, {0x1000, 0x3, 0x1}}}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x7, 0x1}, {0x7, 0x97, 0x2}}}, @TCA_EM_META_RVALUE={0x31, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="230fb355f7156343", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="c3f4be5ef3de514e", @TCF_META_TYPE_VAR="b78850fcae", @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_VAR="cffe", @TCF_META_TYPE_VAR='Y', @TCF_META_TYPE_VAR="bd5577acf3e3", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR="7e181233dc49", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="80e1d0"]}]}}]}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xffd3, 0x8, 0x8}, {0x3, 0x6}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xf0a, 0x3, 0x6c0}, {0x5, 0x0, 0x3, 0x7ff}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xf, 0x7, 0x7f}, {{0x4, 0x1, 0x0, 0x1}, {0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x47c, 0x9, 0x0, 0x1, [@m_gact={0x140, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x9d, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2ca8b8d7ec1784b0, 0x2680, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1abe}}]}, {0xed, 0x6, "f2984ea5ae0b0909ca5198b5e56548da1af4efe458d68e8346a5ad6fa8d75b3efbcec03667694b23e57efb5dea177c9fec912eda500f92ad241d4a3e1eb9b05c2461a1e89e99a22f43eb3b64257b78512c9df802c3ea23ede5e978e8db3be47630f9b48cdfcee2130369da2ce7473e6324d4fc0342cb38a9e544eb6f4e0148acb294b877f68eb4b6b13e38196c311c9ebb06d7a5ee9ead5689128fa35472611715963d35fb43d3014ff74e144932866ca97f5c001aab6053dd7ce7d38a407074614c2a21063cc49a687085d3ab9d042fcc913d8377863381be46ad8fade1f71945e9d5053fd5d1123d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x94, 0x1b, 0x0, 0x0, {{0x7}, {0x4}, {0x69, 0x6, "effbbfbb9975b98b391b34602a99202c04f8aff0f475c3649e7f9024793790e685860edfb7d78570905ca6acc9165a1fb42c399f209c0f00a8f4866f081cd17e904ddc3210cc30ec49b70f2b1fb3ead1fe143d5356ac58b602d03fa75b270e66d3b14a3b76"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbmod={0x108, 0x1f, 0x0, 0x0, {{0xb}, {0x4}, {0xd9, 0x6, "364a95306a0125f7c7762d651b8604a6d91ec4567f627089ed8d3453859a3d2c79d3d70f085dca8af621c4a5da976ca910f38151f1a68c0e0730e7273e6af4eab8e2ea5df8cb0f6ab249f7561ea8c0dd3e562e5e6a1db3a546a7f7c5f1d0ae94557d9f43b53f0c2e3edaf804191d2d3a1cbdae068d8e342ed2d4e751b25b639e2536238fb6a4824a50b9c6bb62944110874faeed2eb2a6db4dfa6ff7d67302260dd8c80e3c4c3a3a11f1d204106eec615119eaaa73bd0bb3e2d774039d9c7e0d445019a712cc0c16707a7b8505b7c94133ceccee82"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0xa4, 0x3, 0x0, 0x0, {{0xf}, {0x5c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010101}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x54, 0xffffffffffffffff, 0x10, 0xfffff001}, 0x2}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x80000000}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0xffffffff, 0x10000000, 0x3, 0x3ff}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}]}, {0x19, 0x6, "6c73dc20ec0f1f62d72faf3465d04d6e1f1e4cf9b5"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_xt={0xf8, 0xe, 0x0, 0x0, {{0x7}, {0x4}, {0xcd, 0x6, "2a0caebad864038ff40a5d287f3088600ceb92031a440f806744f2c29cd762b34d1c3e200652a37a380abee23790e6050e067b4335afeb4ae4a0dfe9fa72cc1df85464324a30272ee56c17d0913025ba5b385f50249552b3d0baa66c6ffc89df47949c8e52874be2547d84a88eaf65c1a57f44be2ac8409dc80a1286dc54b446bceacb288bceeb018feed674cd3991cf602a4e1e2de9b27bb4036b0ac3e4a6048cdd4ebfc8b92c63ac0f4245eecd529108a46a7eaf202777861df68712f67c7f83338caa73ec2f351f"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x644}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.00293228s ago: executing program 2 (id=848): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r0}, 0x10) statfs(&(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 974.137752ms ago: executing program 1 (id=849): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, 0x0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r4) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0xa, 0x3, 0x3a) r7 = socket$netlink(0x10, 0x3, 0xb) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, r8}, 0xc) write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="201a0200ffffffff850000003700000005ecffff0100000049765ea171cd9993a999edf3ff38e5caca0461a99594839fe78cf101ff34cbb9ca054e154184f3c9152735b725657cdcf00c481ab47151c04b770f5f0ab7c3bc71a750bb86b6ecf6a08caccf61e2de412a302700bc02"], &(0x7f0000000280)='GPL\x00', 0x4, 0x3c, &(0x7f00000002c0)=""/60, 0x1e00, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x80000000, 0x2, 0xee8}) setsockopt$MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000100)={{0xa, 0x4e20, 0x4, @mcast1, 0x7}, {0xa, 0x4e24, 0x8001, @private1}, 0x1, {[0x5, 0xf, 0x2, 0x5, 0xe06, 0x1, 0x1, 0x31]}}, 0x5c) connect$unix(r9, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r10 = syz_clone(0x80200, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r10, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r11}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') 958.130374ms ago: executing program 3 (id=850): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a060f0200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c100000000200ffffffff", 0x58}], 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r5) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a4010000", @ANYRES16=r6, @ANYBLOB="cd3e2cbd7000ffdbdf250100000008000200050000007e010100"], 0x1a4}, 0x1, 0x0, 0x0, 0x2}, 0x4000840) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x68001, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r10}, 0x10) preadv2(r9, &(0x7f0000000e00)=[{&(0x7f0000000380)=""/163, 0xa3}, {&(0x7f0000000280)}, {&(0x7f0000000800)=""/155, 0x9b}, {&(0x7f0000000a40)=""/234, 0xea}, {&(0x7f00000008c0)=""/101, 0x65}, {&(0x7f0000000b40)=""/155, 0x9b}, {&(0x7f0000000c00)=""/241, 0xf1}, {&(0x7f0000000d00)=""/254, 0xfe}, {&(0x7f00000002c0)=""/57, 0x39}], 0x9, 0x400, 0x4, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r11}, 0x10) r12 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x43501) close_range(r12, 0xffffffffffffffff, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r13, @ANYBLOB]) io_submit(r4, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x2, r3, &(0x7f00000001c0)='V', 0x1}]) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000ec0)) 934.429746ms ago: executing program 4 (id=851): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, 0x0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r4) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0xa, 0x3, 0x3a) r7 = socket$netlink(0x10, 0x3, 0xb) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4084004}, 0x10000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, r8}, 0xc) write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="201a0200ffffffff850000003700000005ecffff0100000049765ea171cd9993a999edf3ff38e5caca0461a99594839fe78cf101ff34cbb9ca054e154184f3c9152735b725657cdcf00c481ab47151c04b770f5f0ab7c3bc71a750bb86b6ecf6a08caccf61e2de412a302700bc02"], &(0x7f0000000280)='GPL\x00', 0x4, 0x3c, &(0x7f00000002c0)=""/60, 0x1e00, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x80000000, 0x2, 0xee8}) setsockopt$MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000100)={{0xa, 0x4e20, 0x4, @mcast1, 0x7}, {0xa, 0x4e24, 0x8001, @private1}, 0x1, {[0x5, 0xf, 0x2, 0x5, 0xe06, 0x1, 0x1, 0x31]}}, 0x5c) connect$unix(r9, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r10 = syz_clone(0x80200, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r10, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r11}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') 930.815946ms ago: executing program 2 (id=852): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7040000000000008500000001000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_9p2000}]}}) 839.839573ms ago: executing program 2 (id=853): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x82, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x200000000000, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 797.639447ms ago: executing program 0 (id=854): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000b80)='./file0\x00', 0x90, &(0x7f0000000980)=ANY=[], 0x2, 0x699, &(0x7f0000000140)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 722.286563ms ago: executing program 0 (id=855): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000600)='kfree\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000c80)={[{@discard}, {@bh}, {@noblock_validity}]}, 0x2c, 0x52c, &(0x7f0000000640)="$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") 678.914876ms ago: executing program 2 (id=856): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000c80)={[{@discard}, {@bh}, {@noblock_validity}]}, 0x2c, 0x52c, &(0x7f0000000640)="$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") 557.658046ms ago: executing program 4 (id=857): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000600)='kfree\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000c80)={[{@discard}, {@bh}, {@noblock_validity}]}, 0x2c, 0x52c, &(0x7f0000000640)="$eJzs3d9rY1kdAPBvMv2Rdjrbru7DKuqO6+oowyRtZrcs+6DriyDLssK6TyKzpc2U0qQpTbpua8EO+Oar4IBP+if4IPggzJPvvumbLyMojDo4TAWRyE1uOm2adMq0aWaazwcuOefc2/s9J3DP6T1J7glgaF2NiN2IGIuIjyNiOi3PpFu829qS4x4/3Fnce7izmIlG48N/jqRH7iy2j2+7nJ4zF/FBkh/vEre2tb26UC6XNtJ8oV5ZL9S2tm+sVBaWS8ultWJxfm5+9u2bbxXPrK2vVX7z4Dsr7330+9998f4fd7/x46TO32rtGkvadmaBDmi9L6MxdaAseefe60ewAbiUtmds0BXhmWQj4jMR8Xqa3pcbXJ0AgP5qNKajMX0w31vmBMcAAM+/5J5/KjLZfHr/PxXZbD7fnMPLvRKT2XK1Vr9+u7q5thTNOayZGM3eXimXZtO5wpkYzST5uWb6Sb7Ykb8ZES9HxM/HJ5r5/GK1vDSof3oAYMhd7hj/H423xv8T8AkBALzIjOQAMHyOjv+jA6kHAHB+3P8DwPA5MP53+60uAHAB5Tp++w8AXHwH7v9Huh7wavzkh+dXHQDgHPj8HwCGyvfefz/ZGnvp86+XPtnaXK1+cmOpVFvNVzYX84vVjfX8crW63HxmT+Vp5ytXq+tzb8bmp4V6qVYv1La2b1Wqm2v1W83net8q+WEBAAzey6/d+3MmInbfmWhu0V7LwRcC4MJzmcPwujToCgAD0/37PsAwMB8PZJ6yv+dXhO72/puJU9QH6L9rn+sx/9/tf4M7+6n/Nc6vikCfmP+H4XW6+X+zB/AiM/8Pw6vRyFjPHwCGzAnu4H1FEC64Z/78HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIbYVHPLZPPpWuBTkc3m8xFXImJmYjRze6Vcmo2IlyLiT+Oj40l+btCVBgBOKfv3TLr+17XpN6Y6945l/jPefI2IH/3yw198ulCvb8wl5f/aL6/fTcuLXQOM978NAMABI50F7XG6PY631/d9/HBnsb2dZwUffLu1uGgSdy/d2lVvVT4XoxEx+e/MocZkzmhh4t07EfFqZ/uz+/tn0pVPO+Mnsa/0LX40Wzh1KH72UPxsc1/rNXkvPnsGdYFhcy/pf97tdv1l42rzNb3+Moc701z87Gjn+gza/d9eo7P/a13vH1zJNfuabv3f1ZPGePMP3+25786lxudHIvaO9L/tFaFzzdSR+CMRb3Q74U+/+Wizo+gvX/jS673iN34VcS2Oi99KFeqV9UJta/vGSmVhubRcWisW5+fmZ9+++Vax0JyjLrRnqo/6xzvXX+rd/ojJHvFzx7U/Ir7a66Qdfv3fj3/w5WPif/0r3eJn45Vj4idj4tdOGH9h8rc9l+9O4i/1aP/Iofhjh/4uKbt+wvj3/7q9dMJDAYBzUNvaXl0ol0sbEqdN5Pp15svPSQMleiT+9tGha2rg9TmTxMC6JOCcPLnoB10TAAAAAAAAAAAAAACgl9r300f+9fHHcINuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfX/wMAAP//OkHLZw==") 446.921165ms ago: executing program 1 (id=858): socket$inet_mptcp(0x2, 0x1, 0x106) kcmp(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x51, &(0x7f0000000280)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xf7, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) rt_sigqueueinfo(r2, 0x21, &(0x7f0000000ac0)={0x0, 0x9, 0xfffffffe}) 349.745433ms ago: executing program 3 (id=859): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000025c0)=@delchain={0x644, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0x0, 0xe}, {0x6, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x614, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0x16c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x11c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x68, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x7}, "645809825d93df900fa8fae387fbed6313a639f20b0238ccdd4da9fde2f0be34e659ba729925eff5ebd76dec200e0c6b209649b549944fb335b53ad7e5b0f72af98dbb05ee1778a3e952122289a807cd7b48f87fa52a56b8fa"}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x4}, {0x4, 0x1, 0x6, "eb"}}}, @TCF_EM_CONTAINER={0xc, 0x3, 0x0, 0x0, {{0x4, 0x0, 0xb}}}, @TCF_EM_META={0x90, 0x2, 0x0, 0x0, {{0xbe0, 0x4, 0x7}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x9, 0x2}, {0x1000, 0x3, 0x1}}}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x7, 0x1}, {0x7, 0x97, 0x2}}}, @TCA_EM_META_RVALUE={0x31, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="230fb355f7156343", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="c3f4be5ef3de514e", @TCF_META_TYPE_VAR="b78850fcae", @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_VAR="cffe", @TCF_META_TYPE_VAR='Y', @TCF_META_TYPE_VAR="bd5577acf3e3", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR="7e181233dc49", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="80e1d0"]}]}}]}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xffd3, 0x8, 0x8}, {0x3, 0x6}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xf0a, 0x3, 0x6c0}, {0x5, 0x0, 0x3, 0x7ff}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xf, 0x7, 0x7f}, {{0x4, 0x1, 0x0, 0x1}, {0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x47c, 0x9, 0x0, 0x1, [@m_gact={0x140, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x9d, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2ca8b8d7ec1784b0, 0x2680, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1abe}}]}, {0xed, 0x6, "f2984ea5ae0b0909ca5198b5e56548da1af4efe458d68e8346a5ad6fa8d75b3efbcec03667694b23e57efb5dea177c9fec912eda500f92ad241d4a3e1eb9b05c2461a1e89e99a22f43eb3b64257b78512c9df802c3ea23ede5e978e8db3be47630f9b48cdfcee2130369da2ce7473e6324d4fc0342cb38a9e544eb6f4e0148acb294b877f68eb4b6b13e38196c311c9ebb06d7a5ee9ead5689128fa35472611715963d35fb43d3014ff74e144932866ca97f5c001aab6053dd7ce7d38a407074614c2a21063cc49a687085d3ab9d042fcc913d8377863381be46ad8fade1f71945e9d5053fd5d1123d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x94, 0x1b, 0x0, 0x0, {{0x7}, {0x4}, {0x69, 0x6, "effbbfbb9975b98b391b34602a99202c04f8aff0f475c3649e7f9024793790e685860edfb7d78570905ca6acc9165a1fb42c399f209c0f00a8f4866f081cd17e904ddc3210cc30ec49b70f2b1fb3ead1fe143d5356ac58b602d03fa75b270e66d3b14a3b76"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbmod={0x108, 0x1f, 0x0, 0x0, {{0xb}, {0x4}, {0xd9, 0x6, "364a95306a0125f7c7762d651b8604a6d91ec4567f627089ed8d3453859a3d2c79d3d70f085dca8af621c4a5da976ca910f38151f1a68c0e0730e7273e6af4eab8e2ea5df8cb0f6ab249f7561ea8c0dd3e562e5e6a1db3a546a7f7c5f1d0ae94557d9f43b53f0c2e3edaf804191d2d3a1cbdae068d8e342ed2d4e751b25b639e2536238fb6a4824a50b9c6bb62944110874faeed2eb2a6db4dfa6ff7d67302260dd8c80e3c4c3a3a11f1d204106eec615119eaaa73bd0bb3e2d774039d9c7e0d445019a712cc0c16707a7b8505b7c94133ceccee82"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0xa4, 0x3, 0x0, 0x0, {{0xf}, {0x5c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010101}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x54, 0xffffffffffffffff, 0x10, 0xfffff001}, 0x2}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x80000000}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0xffffffff, 0x10000000, 0x3, 0x3ff}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}]}, {0x19, 0x6, "6c73dc20ec0f1f62d72faf3465d04d6e1f1e4cf9b5"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_xt={0xf8, 0xe, 0x0, 0x0, {{0x7}, {0x4}, {0xcd, 0x6, "2a0caebad864038ff40a5d287f3088600ceb92031a440f806744f2c29cd762b34d1c3e200652a37a380abee23790e6050e067b4335afeb4ae4a0dfe9fa72cc1df85464324a30272ee56c17d0913025ba5b385f50249552b3d0baa66c6ffc89df47949c8e52874be2547d84a88eaf65c1a57f44be2ac8409dc80a1286dc54b446bceacb288bceeb018feed674cd3991cf602a4e1e2de9b27bb4036b0ac3e4a6048cdd4ebfc8b92c63ac0f4245eecd529108a46a7eaf202777861df68712f67c7f83338caa73ec2f351f"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x644}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 241.480581ms ago: executing program 0 (id=860): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000025c0)=@delchain={0x66c, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0x0, 0xe}, {0x6, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x63c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0x170, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x120, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x68, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x7}, "645809825d93df900fa8fae387fbed6313a639f20b0238ccdd4da9fde2f0be34e659ba729925eff5ebd76dec200e0c6b209649b549944fb335b53ad7e5b0f72af98dbb05ee1778a3e952122289a807cd7b48f87fa52a56b8fa"}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x4}, {0x4, 0x1, 0x6, "eb"}}}, @TCF_EM_CONTAINER={0x18, 0x3, 0x0, 0x0, {{0x4, 0x0, 0xb}, "d0fa3d16cd50d147ba"}}, @TCF_EM_META={0x88, 0x2, 0x0, 0x0, {{0xbe0, 0x4, 0x7}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x9, 0x2}, {0x1000, 0x3, 0x1}}}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x7, 0x1}, {0x7, 0x97, 0x2}}}, @TCA_EM_META_RVALUE={0x31, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="230fb355f7156343", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="c3f4be5ef3de514e", @TCF_META_TYPE_VAR="b78850fcae", @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_VAR='Y', @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR="7e181233dc49", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="80e1d0", @TCF_META_TYPE_VAR]}]}}]}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xffd3, 0x8, 0x8}, {0x3, 0x6}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xf0a, 0x3, 0x6c0}, {0x5, 0x0, 0x3, 0x7ff}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xf, 0x7, 0x7f}, {{0x4, 0x1, 0x0, 0x1}, {0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x4a0, 0x9, 0x0, 0x1, [@m_gact={0x140, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x9d, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2ca8b8d7ec1784b0, 0x2680, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1abe}}]}, {0xed, 0x6, "f2984ea5ae0b0909ca5198b5e56548da1af4efe458d68e8346a5ad6fa8d75b3efbcec03667694b23e57efb5dea177c9fec912eda500f92ad241d4a3e1eb9b05c2461a1e89e99a22f43eb3b64257b78512c9df802c3ea23ede5e978e8db3be47630f9b48cdfcee2130369da2ce7473e6324d4fc0342cb38a9e544eb6f4e0148acb294b877f68eb4b6b13e38196c311c9ebb06d7a5ee9ead5689128fa35472611715963d35fb43d3014ff74e144932866ca97f5c001aab6053dd7ce7d38a407074614c2a21063cc49a687085d3ab9d042fcc913d8377863381be46ad8fade1f71945e9d5053fd5d1123d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0xb4, 0x1b, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0xffff}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010101}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x30}}]}, {0x69, 0x6, "effbbfbb9975b98b391b34602a99202c04f8aff0f475c3649e7f9024793790e685860edfb7d78570905ca6acc9165a1fb42c399f209c0f00a8f4866f081cd17e904ddc3210cc30ec49b70f2b1fb3ead1fe143d5356ac58b602d03fa75b270e66d3b14a3b76"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbmod={0x108, 0x1f, 0x0, 0x0, {{0xb}, {0x4}, {0xd9, 0x6, "364a95306a0125f7c7762d651b8604a6d91ec4567f627089ed8d3453859a3d2c79d3d70f085dca8af621c4a5da976ca910f38151f1a68c0e0730e7273e6af4eab8e2ea5df8cb0f6ab249f7561ea8c0dd3e562e5e6a1db3a546a7f7c5f1d0ae94557d9f43b53f0c2e3edaf804191d2d3a1cbdae068d8e342ed2d4e751b25b639e2536238fb6a4824a50b9c6bb62944110874faeed2eb2a6db4dfa6ff7d67302260dd8c80e3c4c3a3a11f1d204106eec615119eaaa73bd0bb3e2d774039d9c7e0d445019a712cc0c16707a7b8505b7c94133ceccee82"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0xa4, 0x3, 0x0, 0x0, {{0xf}, {0x5c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010101}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x54, 0xffffffffffffffff, 0x10, 0xfffff001}, 0x2}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x80000000}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0xffffffff, 0x10000000, 0x3, 0x3ff}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}]}, {0x19, 0x6, "6c73dc20ec0f1f62d72faf3465d04d6e1f1e4cf9b5"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_xt={0xfc, 0xe, 0x0, 0x0, {{0x7}, {0x4}, {0xd1, 0x6, "2a0caebad864038ff40a5d287f3088600ceb92031a440f806744f2c29cd762b34d1c3e200652a37a380abee23790e6050e067b4335afeb4ae4a0dfe9fa72cc1df85464324a30272ee56c17d0913025ba5b385f50249552b3d0baa66c6ffc89df47949c8e52874be2547d84a88eaf65c1a57f44be2ac8409dc80a1286dc54b446bceacb288bceeb018feed674cd3991cf602a4e1e2de9b27bb4036b0ac3e4a6048cdd4ebfc8b92c63ac0f4245eecd529108a46a7eaf202777861df68712f67c7f83338caa73ec2f351fdbe40e46"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 239.405442ms ago: executing program 1 (id=861): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000025c0)=@delchain={0x638, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0x0, 0xe}, {0x6, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x608, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0x140, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xf0, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x68, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x7}, "645809825d93df900fa8fae387fbed6313a639f20b0238ccdd4da9fde2f0be34e659ba729925eff5ebd76dec200e0c6b209649b549944fb335b53ad7e5b0f72af98dbb05ee1778a3e952122289a807cd7b48f87fa52a56b8fa"}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x4}, {0x4, 0x1, 0x6, "eb"}}}, @TCF_EM_CONTAINER={0x18, 0x3, 0x0, 0x0, {{0x4, 0x0, 0xb}, "d0fa3d16cd50d147ba"}}, @TCF_EM_META={0x58, 0x2, 0x0, 0x0, {{0xbe0, 0x4, 0x7}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x9, 0x2}, {0x1000, 0x3, 0x1}}}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x7, 0x1}, {0x7, 0x97, 0x2}}}, @TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_VAR="cffe", @TCF_META_TYPE_VAR='Y', @TCF_META_TYPE_VAR="bd5577acf3e3", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_VAR="7e181233dc49", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="80e1d0", @TCF_META_TYPE_VAR]}]}}]}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xffd3, 0x8, 0x8}, {0x3, 0x6}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xf0a, 0x3, 0x6c0}, {0x5, 0x0, 0x3, 0x7ff}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xf, 0x7, 0x7f}, {{0x4, 0x1, 0x0, 0x1}, {0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x49c, 0x9, 0x0, 0x1, [@m_gact={0x140, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x9d, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2ca8b8d7ec1784b0, 0x2680, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1abe}}]}, {0xed, 0x6, "f2984ea5ae0b0909ca5198b5e56548da1af4efe458d68e8346a5ad6fa8d75b3efbcec03667694b23e57efb5dea177c9fec912eda500f92ad241d4a3e1eb9b05c2461a1e89e99a22f43eb3b64257b78512c9df802c3ea23ede5e978e8db3be47630f9b48cdfcee2130369da2ce7473e6324d4fc0342cb38a9e544eb6f4e0148acb294b877f68eb4b6b13e38196c311c9ebb06d7a5ee9ead5689128fa35472611715963d35fb43d3014ff74e144932866ca97f5c001aab6053dd7ce7d38a407074614c2a21063cc49a687085d3ab9d042fcc913d8377863381be46ad8fade1f71945e9d5053fd5d1123d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0xb4, 0x1b, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0xffff}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010101}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x30}}]}, {0x69, 0x6, "effbbfbb9975b98b391b34602a99202c04f8aff0f475c3649e7f9024793790e685860edfb7d78570905ca6acc9165a1fb42c399f209c0f00a8f4866f081cd17e904ddc3210cc30ec49b70f2b1fb3ead1fe143d5356ac58b602d03fa75b270e66d3b14a3b76"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbmod={0x108, 0x1f, 0x0, 0x0, {{0xb}, {0x4}, {0xd9, 0x6, "364a95306a0125f7c7762d651b8604a6d91ec4567f627089ed8d3453859a3d2c79d3d70f085dca8af621c4a5da976ca910f38151f1a68c0e0730e7273e6af4eab8e2ea5df8cb0f6ab249f7561ea8c0dd3e562e5e6a1db3a546a7f7c5f1d0ae94557d9f43b53f0c2e3edaf804191d2d3a1cbdae068d8e342ed2d4e751b25b639e2536238fb6a4824a50b9c6bb62944110874faeed2eb2a6db4dfa6ff7d67302260dd8c80e3c4c3a3a11f1d204106eec615119eaaa73bd0bb3e2d774039d9c7e0d445019a712cc0c16707a7b8505b7c94133ceccee82"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0xa4, 0x3, 0x0, 0x0, {{0xf}, {0x5c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010101}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x54, 0xffffffffffffffff, 0x10, 0xfffff001}, 0x2}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x80000000}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0xffffffff, 0x10000000, 0x3, 0x3ff}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}]}, {0x19, 0x6, "6c73dc20ec0f1f62d72faf3465d04d6e1f1e4cf9b5"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_xt={0xf8, 0xe, 0x0, 0x0, {{0x7}, {0x4}, {0xce, 0x6, "2a0caebad864038ff40a5d287f3088600ceb92031a440f806744f2c29cd762b34d1c3e200652a37a380abee23790e6050e067b4335afeb4ae4a0dfe9fa72cc1df85464324a30272ee56c17d0913025ba5b385f50249552b3d0baa66c6ffc89df47949c8e52874be2547d84a88eaf65c1a57f44be2ac8409dc80a1286dc54b446bceacb288bceeb018feed674cd3991cf602a4e1e2de9b27bb4036b0ac3e4a6048cdd4ebfc8b92c63ac0f4245eecd529108a46a7eaf202777861df68712f67c7f83338caa73ec2f351fdb"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x638}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 216.475723ms ago: executing program 3 (id=862): socket(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x40010, r0, 0x10000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x2000000000000329, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r6}, 0x10) r7 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [], 0x6b}}) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x2040600) r8 = semget$private(0x0, 0x5, 0x0) semop(r8, &(0x7f0000000000)=[{0x3, 0xfff7, 0x1000}], 0x1) semop(r8, &(0x7f00000000c0)=[{0x3, 0xa78d, 0x1000}], 0x1) semctl$SETALL(r8, 0x0, 0x11, &(0x7f00000001c0)) pipe(&(0x7f0000000240)) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ppoll(&(0x7f0000000100)=[{r3, 0xa206}], 0x1, &(0x7f0000000140)={0x77359400}, &(0x7f0000000200)={[0x705d]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = dup(0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r10, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x4, 0x1ffe, 0x0, 0x5, 0x0}) 174.007187ms ago: executing program 1 (id=863): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000"], 0x0, 0x7ff, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 142.573479ms ago: executing program 0 (id=864): socket$inet_mptcp(0x2, 0x1, 0x106) kcmp(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x51, &(0x7f0000000280)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xf7, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_emit_ethernet(0x56, &(0x7f0000000700)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x8, 0xf989, "fe2e80ee"}, @mss={0x2, 0x4, 0x2}]}}}}}}}}, 0x0) 62.874915ms ago: executing program 2 (id=865): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) dup(0xffffffffffffffff) timerfd_settime(0xffffffffffffffff, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f0000000700)={[{@user_xattr}, {@nodioread_nolock}, {@noquota}]}, 0x1, 0x576, &(0x7f0000000140)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0xbf39) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001000006176b800500000000000000fe8d2b13e6a16de2a58cc89f0be81535fb790adc9da7"], 0x1c}}, 0x4) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x1, 0x0, 0x4004, 0x100000000001}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000), 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x3, &(0x7f0000000140)=[{0x3, 0x5, 0x4, 0xc}, {0x0, 0x8, 0x40, 0x5}, {0x1, 0xdd, 0x7, 0x468}]}) r2 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0}, 0x94) 42.414017ms ago: executing program 0 (id=866): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) lsm_set_self_attr(0x69, 0x0, 0x42, 0x0) 0s ago: executing program 1 (id=867): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000100)='veth1_to_hsr\x00') getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000080)=""/30, &(0x7f00000000c0)=0x1e) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@bridge_setlink={0x38, 0x13, 0x127, 0x70bd2b, 0x44000000, {0x7, 0x0, 0x68, r1, 0x940, 0x22265}, [@IFLA_LINKINFO={0x18, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x8, 0x4, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}]}}}]}, 0x38}}, 0x8004) kernel console output (not intermixed with test programs): 9] bridge_slave_0: left allmulticast mode [ 43.968356][ T3639] bridge_slave_0: left promiscuous mode [ 43.974590][ T3639] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.974756][ T3645] loop3: detected capacity change from 0 to 2048 [ 43.994598][ T3650] loop4: detected capacity change from 0 to 164 [ 44.223209][ T3650] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 44.237696][ T3645] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.265156][ T29] kauditd_printk_skb: 334 callbacks suppressed [ 44.265171][ T29] audit: type=1400 audit(1755430785.566:425): avc: denied { create } for pid=3646 comm="syz.1.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.265406][ T3639] bridge0 (unregistering): left allmulticast mode [ 44.350900][ T29] audit: type=1400 audit(1755430785.656:426): avc: denied { add_name } for pid=3644 comm="syz.3.52" name="cgroup.stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.374471][ T29] audit: type=1400 audit(1755430785.656:427): avc: denied { create } for pid=3644 comm="syz.3.52" name="cgroup.stat" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 44.578866][ T3645] syzkaller0: entered promiscuous mode [ 44.585123][ T3645] syzkaller0: entered allmulticast mode [ 44.599947][ T29] audit: type=1400 audit(1755430785.706:428): avc: denied { ioctl } for pid=3644 comm="syz.3.52" path="socket:[6337]" dev="sockfs" ino=6337 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.630206][ T29] audit: type=1400 audit(1755430785.706:429): avc: denied { bind } for pid=3644 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.653690][ T29] audit: type=1400 audit(1755430785.716:430): avc: denied { read append open } for pid=3644 comm="syz.3.52" path="/8/file2/cgroup.stat" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 44.684415][ T29] audit: type=1400 audit(1755430785.846:431): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 44.869287][ T29] audit: type=1400 audit(1755430786.156:432): avc: denied { ioctl } for pid=3646 comm="syz.1.54" path="socket:[6360]" dev="sockfs" ino=6360 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.900043][ T3668] loop2: detected capacity change from 0 to 8192 [ 44.964610][ T29] audit: type=1326 audit(1755430786.266:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3666 comm="syz.4.59" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ceba8ebe9 code=0x0 [ 44.992926][ T3668] loop2: p1 p2[DM] p4 [ 44.997620][ T3668] loop2: p1 size 196608 extends beyond EOD, truncated [ 45.041592][ T3668] loop2: p2 start 4292936063 is beyond EOD, truncated [ 45.049267][ T3668] loop2: p4 size 50331648 extends beyond EOD, truncated [ 45.071045][ T29] audit: type=1400 audit(1755430786.366:434): avc: denied { create } for pid=3666 comm="syz.4.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 45.085733][ T3679] FAULT_INJECTION: forcing a failure. [ 45.085733][ T3679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 45.108039][ T3679] CPU: 0 UID: 0 PID: 3679 Comm: syz.0.62 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 45.108137][ T3679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 45.108152][ T3679] Call Trace: [ 45.108160][ T3679] [ 45.108169][ T3679] __dump_stack+0x1d/0x30 [ 45.108196][ T3679] dump_stack_lvl+0xe8/0x140 [ 45.108222][ T3679] dump_stack+0x15/0x1b [ 45.108244][ T3679] should_fail_ex+0x265/0x280 [ 45.108341][ T3679] should_fail+0xb/0x20 [ 45.108364][ T3679] should_fail_usercopy+0x1a/0x20 [ 45.108393][ T3679] _copy_to_user+0x20/0xa0 [ 45.108460][ T3679] simple_read_from_buffer+0xb5/0x130 [ 45.108484][ T3679] proc_fail_nth_read+0x10e/0x150 [ 45.108583][ T3679] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 45.108617][ T3679] vfs_read+0x1a5/0x770 [ 45.108718][ T3679] ? __rcu_read_unlock+0x4f/0x70 [ 45.108745][ T3679] ? __fget_files+0x184/0x1c0 [ 45.108773][ T3679] ksys_read+0xda/0x1a0 [ 45.108845][ T3679] __x64_sys_read+0x40/0x50 [ 45.108879][ T3679] x64_sys_call+0x27bc/0x2ff0 [ 45.108906][ T3679] do_syscall_64+0xd2/0x200 [ 45.108934][ T3679] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 45.108974][ T3679] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 45.109007][ T3679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.109032][ T3679] RIP: 0033:0x7f4eeb06d5fc [ 45.109115][ T3679] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 45.109139][ T3679] RSP: 002b:00007f4ee9ab6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 45.109163][ T3679] RAX: ffffffffffffffda RBX: 00007f4eeb296090 RCX: 00007f4eeb06d5fc [ 45.109179][ T3679] RDX: 000000000000000f RSI: 00007f4ee9ab60a0 RDI: 0000000000000003 [ 45.109263][ T3679] RBP: 00007f4ee9ab6090 R08: 0000000000000000 R09: 0000000000000000 [ 45.109357][ T3679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.109372][ T3679] R13: 00007f4eeb296128 R14: 00007f4eeb296090 R15: 00007ffddc0cd1d8 [ 45.109432][ T3679] [ 45.514730][ T3690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.64'. [ 45.521380][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 45.528050][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 45.915796][ T3708] bridge0: entered allmulticast mode [ 45.923312][ T3708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.72'. [ 45.933024][ T3708] bridge_slave_1: left allmulticast mode [ 45.939235][ T3708] bridge_slave_1: left promiscuous mode [ 45.946005][ T3708] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.022330][ T3708] bridge_slave_0: left allmulticast mode [ 46.028981][ T3708] bridge_slave_0: left promiscuous mode [ 46.036197][ T3708] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.072679][ T3717] random: crng reseeded on system resumption [ 46.136987][ T3717] 9pnet_fd: Insufficient options for proto=fd [ 46.162324][ T3708] bridge0 (unregistering): left allmulticast mode [ 46.208094][ T3718] loop4: detected capacity change from 0 to 8192 [ 46.299774][ T3294] loop4: p1 p2[DM] p4 [ 46.304377][ T3294] loop4: p1 size 196608 extends beyond EOD, truncated [ 46.330354][ T3724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.78'. [ 46.366043][ T3294] loop4: p2 start 4292936063 is beyond EOD, truncated [ 46.374026][ T3294] loop4: p4 size 50331648 extends beyond EOD, truncated [ 46.408913][ T3718] loop4: p1 p2[DM] p4 [ 46.414158][ T3718] loop4: p1 size 196608 extends beyond EOD, truncated [ 46.436105][ T3718] loop4: p2 start 4292936063 is beyond EOD, truncated [ 46.443833][ T3718] loop4: p4 size 50331648 extends beyond EOD, truncated [ 46.639841][ T3738] syz.2.81 uses obsolete (PF_INET,SOCK_PACKET) [ 46.724849][ T3738] syz.2.81 (3738) used greatest stack depth: 10008 bytes left [ 47.032633][ T3760] random: crng reseeded on system resumption [ 47.060084][ T3760] 9pnet_fd: Insufficient options for proto=fd [ 47.069162][ T3761] loop0: detected capacity change from 0 to 1024 [ 47.211340][ T3761] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.249772][ T3761] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.281727][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.295850][ T3765] loop1: detected capacity change from 0 to 8192 [ 47.363535][ T3294] loop1: p1 p2[DM] p4 [ 47.383000][ T3294] loop1: p1 size 196608 extends beyond EOD, truncated [ 47.409286][ T3294] loop1: p2 start 4292936063 is beyond EOD, truncated [ 47.416980][ T3294] loop1: p4 size 50331648 extends beyond EOD, truncated [ 47.458591][ T3765] loop1: p1 p2[DM] p4 [ 47.469748][ T3765] loop1: p1 size 196608 extends beyond EOD, truncated [ 47.482167][ T3765] loop1: p2 start 4292936063 is beyond EOD, truncated [ 47.491356][ T3765] loop1: p4 size 50331648 extends beyond EOD, truncated [ 47.579130][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 47.581754][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 47.644244][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 47.644324][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 47.752580][ T3784] FAULT_INJECTION: forcing a failure. [ 47.752580][ T3784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.769809][ T3784] CPU: 1 UID: 0 PID: 3784 Comm: syz.2.98 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 47.769843][ T3784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 47.769859][ T3784] Call Trace: [ 47.769947][ T3784] [ 47.769956][ T3784] __dump_stack+0x1d/0x30 [ 47.769980][ T3784] dump_stack_lvl+0xe8/0x140 [ 47.770004][ T3784] dump_stack+0x15/0x1b [ 47.770026][ T3784] should_fail_ex+0x265/0x280 [ 47.770052][ T3784] should_fail+0xb/0x20 [ 47.770074][ T3784] should_fail_usercopy+0x1a/0x20 [ 47.770155][ T3784] _copy_from_user+0x1c/0xb0 [ 47.770320][ T3784] ___sys_sendmsg+0xc1/0x1d0 [ 47.770387][ T3784] __x64_sys_sendmsg+0xd4/0x160 [ 47.770419][ T3784] x64_sys_call+0x191e/0x2ff0 [ 47.770441][ T3784] do_syscall_64+0xd2/0x200 [ 47.770539][ T3784] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 47.770570][ T3784] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 47.770602][ T3784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.770628][ T3784] RIP: 0033:0x7fbffb53ebe9 [ 47.770674][ T3784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.770692][ T3784] RSP: 002b:00007fbff9fa7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.770747][ T3784] RAX: ffffffffffffffda RBX: 00007fbffb765fa0 RCX: 00007fbffb53ebe9 [ 47.770761][ T3784] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 47.770850][ T3784] RBP: 00007fbff9fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 47.770866][ T3784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.770882][ T3784] R13: 00007fbffb766038 R14: 00007fbffb765fa0 R15: 00007ffca63cf188 [ 47.770907][ T3784] [ 48.004093][ T3577] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 48.061190][ T3577] EXT4-fs (loop3): Remounting filesystem read-only [ 48.092299][ T3789] netlink: 'syz.2.101': attribute type 1 has an invalid length. [ 48.130196][ T3789] netlink: 3 bytes leftover after parsing attributes in process `syz.2.101'. [ 48.178556][ T3794] FAULT_INJECTION: forcing a failure. [ 48.178556][ T3794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.183772][ T3789] batadv1: entered promiscuous mode [ 48.195453][ T3794] CPU: 0 UID: 0 PID: 3794 Comm: syz.4.103 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 48.195523][ T3794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 48.195540][ T3794] Call Trace: [ 48.195549][ T3794] [ 48.195561][ T3794] __dump_stack+0x1d/0x30 [ 48.195615][ T3794] dump_stack_lvl+0xe8/0x140 [ 48.195643][ T3794] dump_stack+0x15/0x1b [ 48.195666][ T3794] should_fail_ex+0x265/0x280 [ 48.195697][ T3794] should_fail+0xb/0x20 [ 48.195765][ T3794] should_fail_usercopy+0x1a/0x20 [ 48.195796][ T3794] _copy_from_user+0x1c/0xb0 [ 48.195836][ T3794] do_sock_getsockopt+0xf1/0x240 [ 48.195904][ T3794] __x64_sys_getsockopt+0x11e/0x1a0 [ 48.195969][ T3794] x64_sys_call+0x2bc6/0x2ff0 [ 48.195999][ T3794] do_syscall_64+0xd2/0x200 [ 48.196038][ T3794] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 48.196082][ T3794] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 48.196117][ T3794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.196210][ T3794] RIP: 0033:0x7f3ceba8ebe9 [ 48.196232][ T3794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.196258][ T3794] RSP: 002b:00007f3cea4ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 48.196284][ T3794] RAX: ffffffffffffffda RBX: 00007f3cebcb5fa0 RCX: 00007f3ceba8ebe9 [ 48.196362][ T3794] RDX: 0000000000000003 RSI: 000000000000011a RDI: 0000000000000003 [ 48.196379][ T3794] RBP: 00007f3cea4ef090 R08: 0000000000000000 R09: 0000000000000000 [ 48.196397][ T3794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.196413][ T3794] R13: 00007f3cebcb6038 R14: 00007f3cebcb5fa0 R15: 00007fff55486898 [ 48.196466][ T3794] [ 48.196697][ T3795] netlink: 3 bytes leftover after parsing attributes in process `syz.2.101'. [ 48.203484][ T3789] batadv1: entered allmulticast mode [ 48.457572][ T3795] batadv1: entered promiscuous mode [ 48.465559][ T3795] batadv1: entered allmulticast mode [ 48.470419][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.496070][ T3797] random: crng reseeded on system resumption [ 48.625183][ T3801] FAULT_INJECTION: forcing a failure. [ 48.625183][ T3801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.641121][ T3801] CPU: 0 UID: 0 PID: 3801 Comm: syz.0.106 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 48.641406][ T3801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 48.641424][ T3801] Call Trace: [ 48.641433][ T3801] [ 48.641443][ T3801] __dump_stack+0x1d/0x30 [ 48.641473][ T3801] dump_stack_lvl+0xe8/0x140 [ 48.641552][ T3801] dump_stack+0x15/0x1b [ 48.641572][ T3801] should_fail_ex+0x265/0x280 [ 48.641608][ T3801] should_fail+0xb/0x20 [ 48.641625][ T3801] should_fail_usercopy+0x1a/0x20 [ 48.641699][ T3801] _copy_from_user+0x1c/0xb0 [ 48.641727][ T3801] ___sys_sendmsg+0xc1/0x1d0 [ 48.641770][ T3801] __x64_sys_sendmsg+0xd4/0x160 [ 48.641871][ T3801] x64_sys_call+0x191e/0x2ff0 [ 48.641910][ T3801] do_syscall_64+0xd2/0x200 [ 48.641996][ T3801] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 48.642026][ T3801] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 48.642084][ T3801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.642108][ T3801] RIP: 0033:0x7f4eeb06ebe9 [ 48.642125][ T3801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.642161][ T3801] RSP: 002b:00007f4ee9ad7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.642185][ T3801] RAX: ffffffffffffffda RBX: 00007f4eeb295fa0 RCX: 00007f4eeb06ebe9 [ 48.642201][ T3801] RDX: 000000000000c000 RSI: 0000200000000080 RDI: 0000000000000006 [ 48.642217][ T3801] RBP: 00007f4ee9ad7090 R08: 0000000000000000 R09: 0000000000000000 [ 48.642230][ T3801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.642241][ T3801] R13: 00007f4eeb296038 R14: 00007f4eeb295fa0 R15: 00007ffddc0cd1d8 [ 48.642261][ T3801] [ 48.978029][ T3807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.109'. [ 49.196329][ T3822] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.253741][ T3822] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.481791][ T3822] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.547470][ T3822] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.655283][ T51] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.713891][ T51] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.786340][ T52] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.861053][ T52] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.998497][ T3810] kexec: Could not allocate control_code_buffer [ 50.112574][ T3830] pim6reg1: entered promiscuous mode [ 50.120662][ T3830] pim6reg1: entered allmulticast mode [ 50.182779][ T3830] 9pnet_fd: Insufficient options for proto=fd [ 50.200798][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 50.200817][ T29] audit: type=1400 audit(1755430791.486:524): avc: denied { append } for pid=3829 comm="syz.4.116" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 50.254745][ T3838] FAULT_INJECTION: forcing a failure. [ 50.254745][ T3838] name failslab, interval 1, probability 0, space 0, times 0 [ 50.272123][ T3838] CPU: 0 UID: 0 PID: 3838 Comm: syz.2.120 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 50.272162][ T3838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 50.272178][ T3838] Call Trace: [ 50.272187][ T3838] [ 50.272198][ T3838] __dump_stack+0x1d/0x30 [ 50.272274][ T3838] dump_stack_lvl+0xe8/0x140 [ 50.272313][ T3838] dump_stack+0x15/0x1b [ 50.272334][ T3838] should_fail_ex+0x265/0x280 [ 50.272360][ T3838] should_failslab+0x8c/0xb0 [ 50.272391][ T3838] kmem_cache_alloc_noprof+0x50/0x310 [ 50.272426][ T3838] ? getname_flags+0x80/0x3b0 [ 50.272522][ T3838] getname_flags+0x80/0x3b0 [ 50.272583][ T3838] do_sys_openat2+0x60/0x110 [ 50.272626][ T3838] __x64_sys_openat+0xf2/0x120 [ 50.272667][ T3838] x64_sys_call+0x2e9c/0x2ff0 [ 50.272734][ T3838] do_syscall_64+0xd2/0x200 [ 50.272769][ T3838] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 50.272800][ T3838] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 50.272902][ T3838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.272928][ T3838] RIP: 0033:0x7fbffb53d550 [ 50.272961][ T3838] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 50.272984][ T3838] RSP: 002b:00007fbff9fa6f70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 50.273009][ T3838] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbffb53d550 [ 50.273026][ T3838] RDX: 0000000000000000 RSI: 00007fbffb5c1f06 RDI: 00000000ffffff9c [ 50.273045][ T3838] RBP: 00007fbffb5c1f06 R08: 0000000000000000 R09: 0000000000000000 [ 50.273060][ T3838] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 50.273075][ T3838] R13: 00007fbffb766038 R14: 00007fbffb765fa0 R15: 00007ffca63cf188 [ 50.273100][ T3838] [ 50.552630][ T3838] loop2: detected capacity change from 0 to 512 [ 50.690151][ T3840] random: crng reseeded on system resumption [ 50.813143][ T3838] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.120: bg 0: block 248: padding at end of block bitmap is not set [ 50.835379][ T3848] loop3: detected capacity change from 0 to 1764 [ 50.860009][ T29] audit: type=1400 audit(1755430792.166:525): avc: denied { mount } for pid=3843 comm="syz.1.122" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 50.887563][ T3838] Quota error (device loop2): write_blk: dquota write failed [ 50.896560][ T3838] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 50.992331][ T3855] 9pnet_fd: Insufficient options for proto=fd [ 51.000140][ T3838] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.120: Failed to acquire dquot type 1 [ 51.076077][ T3838] EXT4-fs (loop2): 1 truncate cleaned up [ 51.234959][ T29] audit: type=1326 audit(1755430792.536:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3856 comm="syz.3.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053df9ebe9 code=0x7ffc0000 [ 51.263309][ T29] audit: type=1326 audit(1755430792.536:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3856 comm="syz.3.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f053df9ebe9 code=0x7ffc0000 [ 51.294300][ T29] audit: type=1326 audit(1755430792.536:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3856 comm="syz.3.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053df9ebe9 code=0x7ffc0000 [ 51.322960][ T29] audit: type=1326 audit(1755430792.536:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3856 comm="syz.3.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053df9ebe9 code=0x7ffc0000 [ 51.331653][ T3838] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.352905][ T29] audit: type=1326 audit(1755430792.536:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3856 comm="syz.3.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f053df9ebe9 code=0x7ffc0000 [ 51.397715][ T29] audit: type=1326 audit(1755430792.536:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3856 comm="syz.3.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053df9ebe9 code=0x7ffc0000 [ 51.409263][ T3838] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.524845][ T3838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.602429][ T3866] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.680661][ T3838] syz.2.120 (3838) used greatest stack depth: 9472 bytes left [ 51.704070][ T3866] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.783969][ T3866] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.008137][ T3866] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.120775][ T3882] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.329487][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.378477][ T3882] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.416087][ T3894] 9pnet_fd: Insufficient options for proto=fd [ 52.442282][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.460843][ T3890] 9pnet_fd: Insufficient options for proto=fd [ 52.489242][ T3891] pim6reg1: entered promiscuous mode [ 52.496458][ T3891] pim6reg1: entered allmulticast mode [ 52.518742][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.528917][ T3897] random: crng reseeded on system resumption [ 52.543231][ T3882] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.574063][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.638638][ T3882] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.758840][ T3903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.142'. [ 52.853210][ T3910] loop3: detected capacity change from 0 to 8192 [ 52.901045][ T3294] loop3: p1 p2[DM] p4 [ 52.908199][ T3294] loop3: p1 size 196608 extends beyond EOD, truncated [ 52.942860][ T3918] loop1: detected capacity change from 0 to 1024 [ 52.966611][ T3294] loop3: p2 start 4292936063 is beyond EOD, truncated [ 52.975492][ T3294] loop3: p4 size 50331648 extends beyond EOD, truncated [ 53.023382][ T51] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.035546][ T51] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.049409][ T3918] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.069365][ T3910] loop3: p1 p2[DM] p4 [ 53.074984][ T3910] loop3: p1 size 196608 extends beyond EOD, truncated [ 53.097269][ T3918] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.109734][ T3910] loop3: p2 start 4292936063 is beyond EOD, truncated [ 53.117681][ T3910] loop3: p4 size 50331648 extends beyond EOD, truncated [ 53.128801][ T52] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.202440][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.216953][ T52] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.236980][ T3923] syzkaller1: entered promiscuous mode [ 53.244016][ T3923] syzkaller1: entered allmulticast mode [ 53.296974][ T3498] udevd[3498]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 53.297748][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 53.381123][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 53.382635][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 53.450022][ T3933] random: crng reseeded on system resumption [ 53.466590][ T3933] 9pnet_fd: Insufficient options for proto=fd [ 53.629190][ T3938] pim6reg1: entered promiscuous mode [ 53.636117][ T3938] pim6reg1: entered allmulticast mode [ 53.647570][ T3938] 9pnet_fd: Insufficient options for proto=fd [ 53.683466][ T3944] loop2: detected capacity change from 0 to 164 [ 53.694366][ T3944] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 53.751330][ T3947] loop2: detected capacity change from 0 to 1764 [ 53.784369][ T3941] loop1: detected capacity change from 0 to 8192 [ 53.830010][ T3292] loop1: p1 p2[DM] p4 [ 53.845239][ T3948] loop0: detected capacity change from 0 to 512 [ 53.859648][ T3292] loop1: p1 size 196608 extends beyond EOD, truncated [ 53.900700][ T3292] loop1: p2 start 4292936063 is beyond EOD, truncated [ 53.910160][ T3292] loop1: p4 size 50331648 extends beyond EOD, truncated [ 53.964815][ T3948] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.159: bg 0: block 248: padding at end of block bitmap is not set [ 53.985337][ T3941] loop1: p1 p2[DM] p4 [ 54.001220][ T3941] loop1: p1 size 196608 extends beyond EOD, truncated [ 54.008469][ T3948] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.159: Failed to acquire dquot type 1 [ 54.021439][ T3941] loop1: p2 start 4292936063 is beyond EOD, truncated [ 54.033516][ T3941] loop1: p4 size 50331648 extends beyond EOD, truncated [ 54.126205][ T3961] random: crng reseeded on system resumption [ 54.152982][ T3961] 9pnet_fd: Insufficient options for proto=fd [ 54.212646][ T3948] EXT4-fs (loop0): 1 truncate cleaned up [ 54.232106][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 54.248146][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 54.317895][ T3948] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.348034][ T3498] udevd[3498]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 54.362528][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 54.391540][ T3948] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.510667][ T3948] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.871701][ T3948] syz.0.159 (3948) used greatest stack depth: 9200 bytes left [ 55.148651][ T3986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.174'. [ 55.211477][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 55.211557][ T29] audit: type=1326 audit(1755430796.516:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3980 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f4eeb06ebe9 code=0x7ffc0000 [ 55.250735][ T29] audit: type=1326 audit(1755430796.556:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3980 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f4eeb06ebe9 code=0x7ffc0000 [ 55.279076][ T29] audit: type=1326 audit(1755430796.586:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3980 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f4eeb06ebe9 code=0x7ffc0000 [ 55.378068][ T29] audit: type=1326 audit(1755430796.616:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3980 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f4eeb06ebe9 code=0x7ffc0000 [ 55.406641][ T29] audit: type=1326 audit(1755430796.616:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3980 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f4eeb06ebe9 code=0x7ffc0000 [ 55.434173][ T29] audit: type=1326 audit(1755430796.626:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3980 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f4eeb06ebe9 code=0x7ffc0000 [ 55.463995][ T29] audit: type=1326 audit(1755430796.636:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3980 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f4eeb06ebe9 code=0x7ffc0000 [ 55.493005][ T29] audit: type=1326 audit(1755430796.646:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3980 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f4eeb06ebe9 code=0x7ffc0000 [ 55.524791][ T29] audit: type=1326 audit(1755430796.656:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3980 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f4eeb06ebe9 code=0x7ffc0000 [ 55.553136][ T29] audit: type=1326 audit(1755430796.666:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3980 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f4eeb06ebe9 code=0x7ffc0000 [ 55.692717][ T4000] random: crng reseeded on system resumption [ 55.700885][ T4000] 9pnet_fd: Insufficient options for proto=fd [ 55.840966][ T4004] bridge0: entered allmulticast mode [ 55.847808][ T4004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.180'. [ 55.893244][ T4004] bridge_slave_1: left allmulticast mode [ 55.899972][ T4004] bridge_slave_1: left promiscuous mode [ 55.907263][ T4004] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.968586][ T4004] bridge_slave_0: left allmulticast mode [ 55.975727][ T4004] bridge_slave_0: left promiscuous mode [ 55.977149][ T4016] loop0: detected capacity change from 0 to 1024 [ 55.983196][ T4004] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.023136][ T4016] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.054949][ T4025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.184'. [ 56.080945][ T4004] bridge0 (unregistering): left allmulticast mode [ 56.147163][ T4029] sg_write: data in/out 1048540/10 bytes for SCSI command 0xc0-- guessing data in; [ 56.147163][ T4029] program syz.0.185 not setting count and/or reply_len properly [ 56.185138][ T4012] bridge0: entered allmulticast mode [ 56.221150][ T4025] bridge_slave_1: left allmulticast mode [ 56.227866][ T4025] bridge_slave_1: left promiscuous mode [ 56.233781][ T4025] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.297884][ T4025] bridge_slave_0: left allmulticast mode [ 56.305019][ T4025] bridge_slave_0: left promiscuous mode [ 56.311911][ T4025] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.420518][ T4025] bridge0 (unregistering): left allmulticast mode [ 56.600313][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.682803][ T4043] 9pnet_fd: Insufficient options for proto=fd [ 56.919972][ T4048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.192'. [ 57.705444][ T4081] 9pnet_fd: Insufficient options for proto=fd [ 57.920306][ T4086] pim6reg1: entered promiscuous mode [ 57.926858][ T4086] pim6reg1: entered allmulticast mode [ 57.961400][ T4086] 9pnet_fd: Insufficient options for proto=fd [ 58.046534][ T4097] loop2: detected capacity change from 0 to 512 [ 58.078001][ T4097] EXT4-fs: Ignoring removed bh option [ 58.158151][ T4097] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 58.168382][ T4097] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 58.362452][ T4097] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 58.413912][ T4097] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 58.527782][ T4097] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.630695][ T4097] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.868222][ T4114] loop4: detected capacity change from 0 to 2048 [ 58.931567][ T4114] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.938331][ T4115] 9pnet_fd: Insufficient options for proto=fd [ 58.971662][ T4114] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 59.058820][ T4114] EXT4-fs (loop4): Remounting filesystem read-only [ 59.210079][ T4122] loop8: detected capacity change from 0 to 7 [ 59.246910][ T4112] loop1: detected capacity change from 0 to 8192 [ 59.371688][ T4114] syzkaller0: entered promiscuous mode [ 59.378492][ T4114] syzkaller0: entered allmulticast mode [ 59.389813][ T4112] loop1: p1 p2[DM] p4 [ 59.442953][ T4112] loop1: p1 size 196608 extends beyond EOD, truncated [ 59.465789][ T4136] 9pnet_fd: Insufficient options for proto=fd [ 59.476128][ T4112] loop1: p2 start 4292936063 is beyond EOD, truncated [ 59.483778][ T4112] loop1: p4 size 50331648 extends beyond EOD, truncated [ 59.538512][ T4133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.224'. [ 59.562599][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.770907][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 59.785141][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 59.940257][ T4153] 9pnet_fd: Insufficient options for proto=fd [ 60.004591][ T4158] loop0: detected capacity change from 0 to 1024 [ 60.051796][ T4158] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.264038][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.501857][ T4172] loop4: detected capacity change from 0 to 8192 [ 60.530927][ T3294] loop4: p1 p2[DM] p4 [ 60.540452][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 60.540498][ T29] audit: type=1326 audit(1755430801.846:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4177 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8d3bebe9 code=0x7ffc0000 [ 60.587225][ T3294] loop4: p1 size 196608 extends beyond EOD, truncated [ 60.625433][ T3294] loop4: p2 start 4292936063 is beyond EOD, truncated [ 60.633872][ T3294] loop4: p4 size 50331648 extends beyond EOD, truncated [ 60.634126][ T29] audit: type=1326 audit(1755430801.876:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4177 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f8d3bebe9 code=0x7ffc0000 [ 60.674635][ T29] audit: type=1326 audit(1755430801.876:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4177 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8d3bebe9 code=0x7ffc0000 [ 60.703413][ T29] audit: type=1326 audit(1755430801.876:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4177 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f8d3bebe9 code=0x7ffc0000 [ 60.734684][ T29] audit: type=1326 audit(1755430801.876:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4177 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8d3bebe9 code=0x7ffc0000 [ 60.761567][ T29] audit: type=1326 audit(1755430801.876:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4177 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f8d3bebe9 code=0x7ffc0000 [ 60.789967][ T29] audit: type=1326 audit(1755430801.876:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4177 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8d3bebe9 code=0x7ffc0000 [ 60.817385][ T29] audit: type=1326 audit(1755430801.876:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4177 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5f8d3bd69f code=0x7ffc0000 [ 60.846611][ T29] audit: type=1326 audit(1755430801.876:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4177 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8d3bebe9 code=0x7ffc0000 [ 60.880841][ T4172] loop4: p1 p2[DM] p4 [ 60.887825][ T4172] loop4: p1 size 196608 extends beyond EOD, truncated [ 60.954980][ T4172] loop4: p2 start 4292936063 is beyond EOD, truncated [ 60.965408][ T4172] loop4: p4 size 50331648 extends beyond EOD, truncated [ 60.984321][ T4185] random: crng reseeded on system resumption [ 61.102840][ T4193] 9pnet_fd: Insufficient options for proto=fd [ 61.423900][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 61.452759][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 61.558119][ T4206] udevd[4206]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 61.561978][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 61.633381][ T4218] random: crng reseeded on system resumption [ 61.680199][ T4220] loop1: detected capacity change from 0 to 1764 [ 61.792671][ T4226] random: crng reseeded on system resumption [ 61.858104][ T4222] loop1: detected capacity change from 0 to 8192 [ 61.910253][ T3294] loop1: p1 p2[DM] p4 [ 61.916055][ T3294] loop1: p1 size 196608 extends beyond EOD, truncated [ 61.937664][ T3294] loop1: p2 start 4292936063 is beyond EOD, truncated [ 61.947375][ T3294] loop1: p4 size 50331648 extends beyond EOD, truncated [ 61.979683][ T4222] loop1: p1 p2[DM] p4 [ 61.984671][ T4222] loop1: p1 size 196608 extends beyond EOD, truncated [ 62.000362][ T4222] loop1: p2 start 4292936063 is beyond EOD, truncated [ 62.009966][ T4222] loop1: p4 size 50331648 extends beyond EOD, truncated [ 62.046256][ T29] audit: type=1326 audit(1755430803.346:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4234 comm="syz.1.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8d3bebe9 code=0x7ffc0000 [ 62.051369][ T4233] loop4: detected capacity change from 0 to 2048 [ 62.117283][ T4206] udevd[4206]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 62.133495][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 62.153178][ T4206] udevd[4206]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 62.166973][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 62.203089][ T4233] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.224021][ T4233] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 62.244523][ T4233] EXT4-fs (loop4): Remounting filesystem read-only [ 62.254170][ T4233] loop8: detected capacity change from 0 to 7 [ 62.305210][ T4233] syzkaller0: entered promiscuous mode [ 62.312526][ T4233] syzkaller0: entered allmulticast mode [ 62.410897][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.430498][ T4248] random: crng reseeded on system resumption [ 62.508589][ T4253] loop0: detected capacity change from 0 to 1024 [ 62.532879][ T4253] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.557835][ T4250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.268'. [ 62.676941][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.870579][ T4272] loop4: detected capacity change from 0 to 1024 [ 62.889546][ T4274] loop0: detected capacity change from 0 to 1024 [ 62.936499][ T4272] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.970304][ T4274] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.997945][ T4287] random: crng reseeded on system resumption [ 62.998512][ T4274] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.021233][ T4272] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.131356][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.193681][ T4296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.281'. [ 63.335402][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.620281][ T4321] random: crng reseeded on system resumption [ 63.755677][ T4328] loop2: detected capacity change from 0 to 512 [ 63.789891][ T4328] EXT4-fs: Ignoring removed bh option [ 63.806248][ C1] hrtimer: interrupt took 119286 ns [ 63.820105][ T4328] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 63.834042][ T4328] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 63.844970][ T4325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.292'. [ 63.896908][ T4328] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 64.023616][ T4328] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 64.102585][ T4328] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.125960][ T4338] loop0: detected capacity change from 0 to 1024 [ 64.177769][ T4328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.196999][ T4340] loop1: detected capacity change from 0 to 1764 [ 64.213006][ T4338] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.285436][ T4338] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.412592][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.566322][ T4351] 9pnet_fd: Insufficient options for proto=fd [ 64.646533][ T4362] loop0: detected capacity change from 0 to 1024 [ 64.695048][ T4354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.301'. [ 64.711633][ T4362] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.768238][ T4362] sg_write: data in/out 1048540/10 bytes for SCSI command 0xc0-- guessing data in; [ 64.768238][ T4362] program syz.0.304 not setting count and/or reply_len properly [ 64.943668][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.995650][ T4374] loop3: detected capacity change from 0 to 2048 [ 65.092355][ T4380] random: crng reseeded on system resumption [ 65.152669][ T4374] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.287382][ T4384] loop4: detected capacity change from 0 to 512 [ 65.352267][ T4384] EXT4-fs: Ignoring removed bh option [ 65.368510][ T4374] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 65.420375][ T4384] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 65.434761][ T4384] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 65.434888][ T4374] EXT4-fs (loop3): Remounting filesystem read-only [ 65.533234][ T4391] loop8: detected capacity change from 0 to 7 [ 65.601358][ T4384] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 65.658549][ T4391] syzkaller0: entered promiscuous mode [ 65.667753][ T4391] syzkaller0: entered allmulticast mode [ 65.680977][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 65.681015][ T29] audit: type=1400 audit(1755430806.986:1218): avc: denied { create } for pid=4393 comm="syz.0.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 65.718429][ T4384] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 65.810297][ T4384] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.828103][ T29] audit: type=1400 audit(1755430807.126:1219): avc: denied { write } for pid=4393 comm="syz.0.316" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 65.860413][ T4403] vhci_hcd: invalid port number 254 [ 65.866366][ T4403] vhci_hcd: invalid port number 254 [ 65.923062][ T29] audit: type=1326 audit(1755430807.186:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4397 comm="syz.2.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbffb53ebe9 code=0x7ffc0000 [ 65.923072][ T4402] loop1: detected capacity change from 0 to 512 [ 65.938864][ T4402] EXT4-fs: Ignoring removed bh option [ 65.951954][ T29] audit: type=1326 audit(1755430807.186:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4397 comm="syz.2.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fbffb53ebe9 code=0x7ffc0000 [ 65.995131][ T29] audit: type=1326 audit(1755430807.186:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4397 comm="syz.2.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbffb53ebe9 code=0x7ffc0000 [ 66.054334][ T4384] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.090739][ T4402] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 66.102340][ T4402] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 66.120128][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.171269][ T4402] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 66.260538][ T29] audit: type=1326 audit(1755430807.556:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4406 comm="syz.3.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053df9ebe9 code=0x7ffc0000 [ 66.344369][ T4402] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 66.389329][ T4402] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.406517][ T29] audit: type=1326 audit(1755430807.586:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4406 comm="syz.3.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f053df9ebe9 code=0x7ffc0000 [ 66.433839][ T29] audit: type=1326 audit(1755430807.596:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4406 comm="syz.3.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053df9ebe9 code=0x7ffc0000 [ 66.460496][ T29] audit: type=1326 audit(1755430807.596:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4406 comm="syz.3.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053df9ebe9 code=0x7ffc0000 [ 66.489647][ T29] audit: type=1326 audit(1755430807.636:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4406 comm="syz.3.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f053df9ebe9 code=0x7ffc0000 [ 66.524993][ T4402] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.626387][ T4420] loop0: detected capacity change from 0 to 1024 [ 66.656993][ T4422] loop2: detected capacity change from 0 to 512 [ 66.682475][ T4420] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.697755][ T4422] netlink: 'syz.2.326': attribute type 13 has an invalid length. [ 66.831382][ T4430] sg_write: data in/out 1048540/10 bytes for SCSI command 0xc0-- guessing data in; [ 66.831382][ T4430] program syz.0.325 not setting count and/or reply_len properly [ 66.946772][ T4439] loop2: detected capacity change from 0 to 1024 [ 66.991491][ T4439] EXT4-fs: inline encryption not supported [ 66.997763][ T4439] EXT4-fs: Ignoring removed i_version option [ 67.032983][ T4439] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 67.098878][ T4439] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #3: block 1: comm syz.2.326: lblock 1 mapped to illegal pblock 1 (length 1) [ 67.171308][ T4439] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.326: Failed to acquire dquot type 0 [ 67.229811][ T4439] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.326: Freeing blocks not in datazone - block = 0, count = 4096 [ 67.266553][ T4439] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.326: Invalid inode bitmap blk 0 in block_group 0 [ 67.287606][ T52] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 67.321359][ T4439] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 67.337491][ T52] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 0 [ 67.367128][ T4439] EXT4-fs (loop2): 1 orphan inode deleted [ 67.383537][ T4439] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.433594][ T4422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.488460][ T4422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.643220][ T4417] pim6reg1: entered promiscuous mode [ 67.650532][ T4417] pim6reg1: entered allmulticast mode [ 67.681398][ T404] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.694897][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.717279][ T404] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.750733][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.769999][ T404] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.794253][ T404] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.862590][ T4456] loop3: detected capacity change from 0 to 164 [ 67.914889][ T4456] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 68.238177][ T4475] wireguard0: entered promiscuous mode [ 68.247716][ T4475] wireguard0: entered allmulticast mode [ 68.329731][ T4488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.345'. [ 68.440840][ T4494] loop3: detected capacity change from 0 to 164 [ 68.471903][ T4494] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 68.587159][ T4496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.350'. [ 68.792683][ T4511] loop3: detected capacity change from 0 to 164 [ 68.839969][ T4511] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 68.941129][ T4522] loop0: detected capacity change from 0 to 164 [ 68.973100][ T4522] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 69.062061][ T4526] loop0: detected capacity change from 0 to 1024 [ 69.101198][ T4526] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.132280][ T4528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.363'. [ 69.132539][ T4526] sg_write: data in/out 1048540/10 bytes for SCSI command 0xc0-- guessing data in; [ 69.132539][ T4526] program syz.0.362 not setting count and/or reply_len properly [ 69.402213][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.462019][ T4547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.366'. [ 69.589257][ T4552] loop4: detected capacity change from 0 to 2048 [ 69.658846][ T4552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.800257][ T4552] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 69.834323][ T4559] loop0: detected capacity change from 0 to 1024 [ 69.852484][ T4559] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.929565][ T4559] sg_write: data in/out 1048540/10 bytes for SCSI command 0xc0-- guessing data in; [ 69.929565][ T4559] program syz.0.370 not setting count and/or reply_len properly [ 69.980814][ T4552] EXT4-fs (loop4): Remounting filesystem read-only [ 70.006113][ T4567] loop2: detected capacity change from 0 to 164 [ 70.010019][ T4565] loop8: detected capacity change from 0 to 7 [ 70.036793][ T4567] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 70.046640][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.129115][ T4552] syzkaller0: entered promiscuous mode [ 70.130918][ T4570] loop2: detected capacity change from 0 to 512 [ 70.135910][ T4552] syzkaller0: entered allmulticast mode [ 70.174159][ T4570] EXT4-fs: Ignoring removed bh option [ 70.210289][ T4570] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 70.220509][ T4570] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 70.258535][ T4570] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 70.315090][ T4570] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 70.374302][ T4570] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.389887][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.453321][ T4579] loop3: detected capacity change from 0 to 512 [ 70.506456][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.556998][ T4579] EXT4-fs: Ignoring removed bh option [ 70.578935][ T4589] loop4: detected capacity change from 0 to 512 [ 70.610119][ T4589] EXT4-fs: Ignoring removed bh option [ 70.611298][ T4579] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 70.626131][ T4579] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 70.658314][ T4589] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 70.668735][ T4589] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 70.680083][ T4579] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 70.709302][ T4589] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 70.721828][ T4579] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 70.732003][ T4589] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 70.770994][ T4589] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.791828][ T4579] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.838510][ T4589] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.868729][ T4579] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.149966][ T4611] FAULT_INJECTION: forcing a failure. [ 71.149966][ T4611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.165100][ T4611] CPU: 0 UID: 0 PID: 4611 Comm: syz.1.387 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 71.165215][ T4611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 71.165228][ T4611] Call Trace: [ 71.165237][ T4611] [ 71.165247][ T4611] __dump_stack+0x1d/0x30 [ 71.165328][ T4611] dump_stack_lvl+0xe8/0x140 [ 71.165380][ T4611] dump_stack+0x15/0x1b [ 71.165401][ T4611] should_fail_ex+0x265/0x280 [ 71.165424][ T4611] should_fail+0xb/0x20 [ 71.165495][ T4611] should_fail_usercopy+0x1a/0x20 [ 71.165591][ T4611] _copy_from_user+0x1c/0xb0 [ 71.165652][ T4611] get_sg_io_hdr+0x82/0x360 [ 71.165680][ T4611] ? path_openat+0x1bf8/0x2170 [ 71.165702][ T4611] ? __rcu_read_unlock+0x4f/0x70 [ 71.165728][ T4611] sg_new_write+0xc3/0x890 [ 71.165845][ T4611] ? do_vfs_ioctl+0x866/0xe10 [ 71.165930][ T4611] sg_ioctl+0xb81/0x1360 [ 71.166033][ T4611] ? __pfx_sg_ioctl+0x10/0x10 [ 71.166062][ T4611] __se_sys_ioctl+0xcb/0x140 [ 71.166171][ T4611] __x64_sys_ioctl+0x43/0x50 [ 71.166322][ T4611] x64_sys_call+0x1816/0x2ff0 [ 71.166344][ T4611] do_syscall_64+0xd2/0x200 [ 71.166371][ T4611] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 71.166517][ T4611] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 71.166549][ T4611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.166575][ T4611] RIP: 0033:0x7f5f8d3bebe9 [ 71.166611][ T4611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.166633][ T4611] RSP: 002b:00007f5f8bddd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 71.166675][ T4611] RAX: ffffffffffffffda RBX: 00007f5f8d5e6180 RCX: 00007f5f8d3bebe9 [ 71.166691][ T4611] RDX: 0000200000000040 RSI: 0000000000002285 RDI: 0000000000000006 [ 71.166704][ T4611] RBP: 00007f5f8bddd090 R08: 0000000000000000 R09: 0000000000000000 [ 71.166715][ T4611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.166727][ T4611] R13: 00007f5f8d5e6218 R14: 00007f5f8d5e6180 R15: 00007ffd64d47fe8 [ 71.166746][ T4611] [ 71.507316][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 71.507337][ T29] audit: type=1326 audit(1755430812.766:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4615 comm="syz.2.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbffb53ebe9 code=0x7ffc0000 [ 71.543310][ T29] audit: type=1326 audit(1755430812.766:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4615 comm="syz.2.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbffb53ebe9 code=0x7ffc0000 [ 71.567892][ T29] audit: type=1326 audit(1755430812.766:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4615 comm="syz.2.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbffb53ebe9 code=0x7ffc0000 [ 71.592800][ T29] audit: type=1326 audit(1755430812.766:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4615 comm="syz.2.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbffb53ebe9 code=0x7ffc0000 [ 71.620677][ T29] audit: type=1326 audit(1755430812.766:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4615 comm="syz.2.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbffb53ebe9 code=0x7ffc0000 [ 71.647006][ T29] audit: type=1326 audit(1755430812.766:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4615 comm="syz.2.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fbffb53ebe9 code=0x7ffc0000 [ 71.676389][ T29] audit: type=1326 audit(1755430812.766:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4615 comm="syz.2.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbffb53ebe9 code=0x7ffc0000 [ 71.736163][ T4623] loop4: detected capacity change from 0 to 164 [ 71.829857][ T4629] 9pnet_fd: Insufficient options for proto=fd [ 71.869469][ T29] audit: type=1400 audit(1755430813.166:1305): avc: denied { read append } for pid=4626 comm="syz.1.397" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 71.895215][ T29] audit: type=1400 audit(1755430813.166:1306): avc: denied { open } for pid=4626 comm="syz.1.397" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 71.961356][ T4631] loop2: detected capacity change from 0 to 1024 [ 72.033040][ T4631] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.057283][ T29] audit: type=1400 audit(1755430813.236:1307): avc: denied { ioctl } for pid=4626 comm="syz.1.397" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 72.136406][ T4648] loop0: detected capacity change from 0 to 1024 [ 72.168430][ T4631] sg_write: data in/out 1048540/10 bytes for SCSI command 0xc0-- guessing data in; [ 72.168430][ T4631] program syz.2.398 not setting count and/or reply_len properly [ 72.188503][ T4651] random: crng reseeded on system resumption [ 72.240366][ T4648] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.310868][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.322754][ T4648] sg_write: data in/out 1048540/10 bytes for SCSI command 0xc0-- guessing data in; [ 72.322754][ T4648] program syz.0.403 not setting count and/or reply_len properly [ 72.478014][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.532866][ T4644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.402'. [ 72.850834][ T4692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.419'. [ 72.876612][ T4703] loop2: detected capacity change from 0 to 2048 [ 72.915788][ T4701] loop0: detected capacity change from 0 to 8192 [ 72.967410][ T4703] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.989858][ T3294] loop0: p1 p2[DM] p4 [ 72.994969][ T3294] loop0: p1 size 196608 extends beyond EOD, truncated [ 73.013029][ T4703] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 73.031069][ T3294] loop0: p2 start 4292936063 is beyond EOD, truncated [ 73.039077][ T3294] loop0: p4 size 50331648 extends beyond EOD, truncated [ 73.082680][ T4701] loop0: p1 p2[DM] p4 [ 73.089825][ T4701] loop0: p1 size 196608 extends beyond EOD, truncated [ 73.131464][ T4703] EXT4-fs (loop2): Remounting filesystem read-only [ 73.132552][ T4701] loop0: p2 start 4292936063 is beyond EOD, truncated [ 73.148283][ T4701] loop0: p4 size 50331648 extends beyond EOD, truncated [ 73.186403][ T4703] loop8: detected capacity change from 0 to 7 [ 73.304530][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 73.304557][ T4206] udevd[4206]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 73.366606][ T4703] syzkaller0: entered promiscuous mode [ 73.372791][ T4703] syzkaller0: entered allmulticast mode [ 73.403458][ T4719] netlink: 12 bytes leftover after parsing attributes in process `syz.0.427'. [ 73.558513][ T4721] loop1: detected capacity change from 0 to 1024 [ 73.579109][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 73.582089][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.604807][ T4206] udevd[4206]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 73.659304][ T4721] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.734601][ T4721] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.846909][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.863690][ T4725] loop3: detected capacity change from 0 to 2048 [ 73.900163][ T4735] pim6reg1: entered promiscuous mode [ 73.906584][ T4735] pim6reg1: entered allmulticast mode [ 73.962646][ T4735] 9pnet_fd: Insufficient options for proto=fd [ 73.977946][ T4741] loop1: detected capacity change from 0 to 8192 [ 74.007950][ T4725] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.019997][ T4206] loop1: p1 p2[DM] p4 [ 74.029621][ T4206] loop1: p1 size 196608 extends beyond EOD, truncated [ 74.046154][ T4206] loop1: p2 start 4292936063 is beyond EOD, truncated [ 74.054543][ T4206] loop1: p4 size 50331648 extends beyond EOD, truncated [ 74.088845][ T4741] loop1: p1 p2[DM] p4 [ 74.095251][ T4741] loop1: p1 size 196608 extends beyond EOD, truncated [ 74.156691][ T4751] 9pnet_fd: Insufficient options for proto=fd [ 74.172493][ T4741] loop1: p2 start 4292936063 is beyond EOD, truncated [ 74.180178][ T4741] loop1: p4 size 50331648 extends beyond EOD, truncated [ 74.280496][ T4755] loop0: detected capacity change from 0 to 1764 [ 74.281379][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 74.288397][ T4206] udevd[4206]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 74.336649][ T4760] loop1: detected capacity change from 0 to 164 [ 74.380662][ T4760] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 74.465332][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 74.467182][ T4206] udevd[4206]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 74.522358][ T4768] loop0: detected capacity change from 0 to 512 [ 74.545787][ T4768] EXT4-fs: Ignoring removed bh option [ 74.573425][ T4768] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 74.584240][ T4768] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 74.605346][ T4768] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 74.718839][ T4773] loop1: detected capacity change from 0 to 1024 [ 74.726466][ T4768] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 74.745935][ T4768] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.773769][ T4773] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.806791][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.818453][ T4768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.845063][ T4773] sg_write: data in/out 1048540/10 bytes for SCSI command 0xc0-- guessing data in; [ 74.845063][ T4773] program syz.1.450 not setting count and/or reply_len properly [ 74.880787][ T4777] loop2: detected capacity change from 0 to 8192 [ 74.920074][ T4206] loop2: p1 p2[DM] p4 [ 74.928328][ T4206] loop2: p1 size 196608 extends beyond EOD, truncated [ 74.957416][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.960121][ T4206] loop2: p2 start 4292936063 is beyond EOD, truncated [ 74.975221][ T4206] loop2: p4 size 50331648 extends beyond EOD, truncated [ 75.000657][ T4777] loop2: p1 p2[DM] p4 [ 75.005231][ T4777] loop2: p1 size 196608 extends beyond EOD, truncated [ 75.031314][ T4777] loop2: p2 start 4292936063 is beyond EOD, truncated [ 75.038970][ T4777] loop2: p4 size 50331648 extends beyond EOD, truncated [ 75.041360][ T4788] loop1: detected capacity change from 0 to 1764 [ 75.160154][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 75.172914][ T4206] udevd[4206]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 75.188412][ T4786] loop0: detected capacity change from 0 to 8192 [ 75.317952][ T4794] loop1: detected capacity change from 0 to 512 [ 75.430043][ T4786] loop0: p1 p2[DM] p4 [ 75.438159][ T4786] loop0: p1 size 196608 extends beyond EOD, truncated [ 75.457191][ T4786] loop0: p2 start 4292936063 is beyond EOD, truncated [ 75.465015][ T4786] loop0: p4 size 50331648 extends beyond EOD, truncated [ 75.474536][ T4794] EXT4-fs: Ignoring removed bh option [ 75.511381][ T4794] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 75.523163][ T4794] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 75.561070][ T4800] random: crng reseeded on system resumption [ 75.578372][ T4794] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 75.578973][ T4794] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 75.583490][ T4794] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.623336][ T4794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.721509][ T4808] netlink: 180 bytes leftover after parsing attributes in process `syz.0.460'. [ 75.725022][ T4808] netlink: 180 bytes leftover after parsing attributes in process `syz.0.460'. [ 75.799401][ T4811] loop4: detected capacity change from 0 to 8192 [ 75.850787][ T3294] loop4: p1 p2[DM] p4 [ 75.856210][ T3294] loop4: p1 size 196608 extends beyond EOD, truncated [ 75.865057][ T3294] loop4: p2 start 4292936063 is beyond EOD, truncated [ 75.874349][ T3294] loop4: p4 size 50331648 extends beyond EOD, truncated [ 75.903112][ T4811] loop4: p1 p2[DM] p4 [ 75.929809][ T4811] loop4: p1 size 196608 extends beyond EOD, truncated [ 75.949979][ T4811] loop4: p2 start 4292936063 is beyond EOD, truncated [ 75.958697][ T4811] loop4: p4 size 50331648 extends beyond EOD, truncated [ 76.009123][ T4817] loop1: detected capacity change from 0 to 512 [ 76.016950][ T4817] EXT4-fs: Ignoring removed bh option [ 76.040379][ T4817] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 76.050310][ T4817] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 76.092469][ T4817] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 76.153042][ T4820] loop2: detected capacity change from 0 to 8192 [ 76.169704][ T4817] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 76.216804][ T4817] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.245778][ T4824] loop3: detected capacity change from 0 to 164 [ 76.274754][ T4817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.286442][ T4205] loop2: p1 p2[DM] p4 [ 76.291496][ T4205] loop2: p1 size 196608 extends beyond EOD, truncated [ 76.317573][ T4205] loop2: p2 start 4292936063 is beyond EOD, truncated [ 76.325589][ T4205] loop2: p4 size 50331648 extends beyond EOD, truncated [ 76.381372][ T4820] loop2: p1 p2[DM] p4 [ 76.386237][ T4820] loop2: p1 size 196608 extends beyond EOD, truncated [ 76.413358][ T4824] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 76.442237][ T4820] loop2: p2 start 4292936063 is beyond EOD, truncated [ 76.450217][ T4820] loop2: p4 size 50331648 extends beyond EOD, truncated [ 76.518660][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 76.518678][ T29] audit: type=1326 audit(1755430817.816:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4838 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8d3bebe9 code=0x7ffc0000 [ 76.581292][ T4843] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 76.589872][ T4843] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 76.646478][ T4843] vhci_hcd: invalid port number 14 [ 76.652605][ T4843] vhci_hcd: default hub control req: 000e v000e i000e l0 [ 76.709967][ T29] audit: type=1400 audit(1755430817.866:1481): avc: denied { ioctl } for pid=4839 comm="syz.0.473" path="socket:[9373]" dev="sockfs" ino=9373 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 76.738119][ T29] audit: type=1400 audit(1755430817.866:1482): avc: denied { setopt } for pid=4839 comm="syz.0.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 76.762643][ T29] audit: type=1326 audit(1755430817.876:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4838 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f5f8d3bebe9 code=0x7ffc0000 [ 76.791800][ T29] audit: type=1326 audit(1755430817.876:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4838 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8d3bebe9 code=0x7ffc0000 [ 76.817680][ T29] audit: type=1326 audit(1755430817.876:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4838 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5f8d3bebe9 code=0x7ffc0000 [ 76.844100][ T29] audit: type=1326 audit(1755430817.876:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4838 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8d3bebe9 code=0x7ffc0000 [ 76.868247][ T29] audit: type=1326 audit(1755430817.876:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4838 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5f8d3bebe9 code=0x7ffc0000 [ 76.893358][ T29] audit: type=1400 audit(1755430817.876:1488): avc: denied { connect } for pid=4836 comm="syz.4.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 76.915435][ T29] audit: type=1326 audit(1755430817.916:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4836 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ceba8ebe9 code=0x7ffc0000 [ 77.230032][ T4868] FAULT_INJECTION: forcing a failure. [ 77.230032][ T4868] name failslab, interval 1, probability 0, space 0, times 0 [ 77.243332][ T4868] CPU: 1 UID: 0 PID: 4868 Comm: syz.0.480 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 77.243451][ T4868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 77.243467][ T4868] Call Trace: [ 77.243474][ T4868] [ 77.243484][ T4868] __dump_stack+0x1d/0x30 [ 77.243507][ T4868] dump_stack_lvl+0xe8/0x140 [ 77.243605][ T4868] dump_stack+0x15/0x1b [ 77.243624][ T4868] should_fail_ex+0x265/0x280 [ 77.243645][ T4868] should_failslab+0x8c/0xb0 [ 77.243669][ T4868] kmem_cache_alloc_noprof+0x50/0x310 [ 77.243708][ T4868] ? getname_flags+0x80/0x3b0 [ 77.243741][ T4868] ? fput+0x8f/0xc0 [ 77.243775][ T4868] getname_flags+0x80/0x3b0 [ 77.243804][ T4868] __x64_sys_mknod+0x40/0x60 [ 77.243907][ T4868] x64_sys_call+0x2d47/0x2ff0 [ 77.243934][ T4868] do_syscall_64+0xd2/0x200 [ 77.243965][ T4868] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 77.243995][ T4868] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 77.244115][ T4868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.244219][ T4868] RIP: 0033:0x7f4eeb06ebe9 [ 77.244235][ T4868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.244252][ T4868] RSP: 002b:00007f4ee9ad7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 77.244274][ T4868] RAX: ffffffffffffffda RBX: 00007f4eeb295fa0 RCX: 00007f4eeb06ebe9 [ 77.244290][ T4868] RDX: 0000000000000701 RSI: 0000000000000400 RDI: 00002000000001c0 [ 77.244328][ T4868] RBP: 00007f4ee9ad7090 R08: 0000000000000000 R09: 0000000000000000 [ 77.244339][ T4868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.244351][ T4868] R13: 00007f4eeb296038 R14: 00007f4eeb295fa0 R15: 00007ffddc0cd1d8 [ 77.244372][ T4868] [ 77.670053][ T4877] vhci_hcd: invalid port number 254 [ 77.676221][ T4877] vhci_hcd: invalid port number 254 [ 77.971021][ T4893] loop4: detected capacity change from 0 to 1024 [ 78.051473][ T4893] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.103933][ T4893] sg_write: data in/out 1048540/10 bytes for SCSI command 0xc0-- guessing data in; [ 78.103933][ T4893] program syz.4.489 not setting count and/or reply_len properly [ 78.292024][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.317406][ T4913] loop1: detected capacity change from 0 to 164 [ 78.332880][ T4902] netlink: 16 bytes leftover after parsing attributes in process `syz.3.492'. [ 78.381534][ T4913] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 78.397654][ T4912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.495'. [ 78.408547][ T4903] netlink: 20 bytes leftover after parsing attributes in process `syz.3.492'. [ 78.684467][ T4937] netlink: 5 bytes leftover after parsing attributes in process `syz.1.504'. [ 78.801950][ T4944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.502'. [ 78.832521][ T4537] syz.3.363 (4537) used greatest stack depth: 8880 bytes left [ 79.099668][ T4551] syz.3.366 (4551) used greatest stack depth: 8584 bytes left [ 79.451274][ T4959] loop0: detected capacity change from 0 to 164 [ 79.472390][ T4959] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 79.535723][ T4963] loop0: detected capacity change from 0 to 1024 [ 79.572673][ T4963] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.676752][ T4963] sg_write: data in/out 1048540/10 bytes for SCSI command 0xc0-- guessing data in; [ 79.676752][ T4963] program syz.0.514 not setting count and/or reply_len properly [ 79.764735][ T4975] random: crng reseeded on system resumption [ 79.835731][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.026606][ T4986] loop3: detected capacity change from 0 to 512 [ 80.081480][ T4991] loop0: detected capacity change from 0 to 164 [ 80.095057][ T4986] EXT4-fs: Ignoring removed bh option [ 80.137830][ T4991] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 80.176713][ T4986] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 80.187373][ T4986] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 80.259617][ T4994] loop1: detected capacity change from 0 to 8192 [ 80.299890][ T3294] loop1: p1 p2[DM] p4 [ 80.304454][ T3294] loop1: p1 size 196608 extends beyond EOD, truncated [ 80.308776][ T4986] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 80.330131][ T3294] loop1: p2 start 4292936063 is beyond EOD, truncated [ 80.337221][ T3294] loop1: p4 size 50331648 extends beyond EOD, truncated [ 80.372550][ T4994] loop1: p1 p2[DM] p4 [ 80.377725][ T4994] loop1: p1 size 196608 extends beyond EOD, truncated [ 80.434832][ T4994] loop1: p2 start 4292936063 is beyond EOD, truncated [ 80.442692][ T4994] loop1: p4 size 50331648 extends beyond EOD, truncated [ 80.472185][ T4986] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 80.482631][ T5009] pim6reg1: entered promiscuous mode [ 80.488384][ T5009] pim6reg1: entered allmulticast mode [ 80.505013][ T5005] 9pnet_fd: Insufficient options for proto=fd [ 80.531034][ T4986] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.589215][ T5015] loop0: detected capacity change from 0 to 1024 [ 80.613773][ T5015] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.639662][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 80.641174][ T4206] udevd[4206]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 80.687067][ T5015] sg_write: data in/out 1048540/10 bytes for SCSI command 0xc0-- guessing data in; [ 80.687067][ T5015] program syz.0.534 not setting count and/or reply_len properly [ 80.698817][ T4986] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.741974][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 80.743994][ T4205] udevd[4205]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 80.806109][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.828807][ T5020] loop4: detected capacity change from 0 to 2048 [ 80.905995][ T5020] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.932072][ T5020] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 80.980728][ T5020] EXT4-fs (loop4): Remounting filesystem read-only [ 81.006549][ T5027] loop8: detected capacity change from 0 to 7 [ 81.087394][ T5020] syzkaller0: entered promiscuous mode [ 81.094295][ T5020] syzkaller0: entered allmulticast mode [ 81.145492][ T5030] loop1: detected capacity change from 0 to 164 [ 81.219817][ T5030] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 81.291390][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.383925][ T5033] pim6reg1: entered promiscuous mode [ 81.390075][ T5033] pim6reg1: entered allmulticast mode [ 81.434809][ T5033] 9pnet_fd: Insufficient options for proto=fd [ 81.532748][ T29] kauditd_printk_skb: 202 callbacks suppressed [ 81.532766][ T29] audit: type=1326 audit(1755430822.836:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5048 comm="syz.3.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053df9ebe9 code=0x7ffc0000 [ 81.567887][ T29] audit: type=1326 audit(1755430822.836:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5048 comm="syz.3.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053df9ebe9 code=0x7ffc0000 [ 81.639184][ T5058] 9pnet_fd: Insufficient options for proto=fd [ 81.649541][ T5059] loop3: detected capacity change from 0 to 2048 [ 81.688925][ T29] audit: type=1326 audit(1755430822.836:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5048 comm="syz.3.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f053df9ebe9 code=0x7ffc0000 [ 81.714996][ T29] audit: type=1326 audit(1755430822.836:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5048 comm="syz.3.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053df9ebe9 code=0x7ffc0000 [ 81.825208][ T5059] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.871018][ T29] audit: type=1326 audit(1755430823.116:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbffb53ebe9 code=0x7ffc0000 [ 81.900351][ T29] audit: type=1326 audit(1755430823.116:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbffb53ebe9 code=0x7ffc0000 [ 81.926412][ T29] audit: type=1326 audit(1755430823.116:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fbffb53ebe9 code=0x7ffc0000 [ 81.954390][ T29] audit: type=1326 audit(1755430823.116:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbffb53ebe9 code=0x7ffc0000 [ 81.978922][ T29] audit: type=1326 audit(1755430823.116:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbffb53ebe9 code=0x7ffc0000 [ 82.027051][ T5073] bridge0: entered allmulticast mode [ 82.035868][ T5059] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 82.073646][ T5073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.556'. [ 82.163777][ T5059] EXT4-fs (loop3): Remounting filesystem read-only [ 82.197072][ T5081] loop8: detected capacity change from 0 to 7 [ 82.305828][ T5090] pim6reg1: entered promiscuous mode [ 82.311742][ T5090] pim6reg1: entered allmulticast mode [ 82.362365][ T5090] 9pnet_fd: Insufficient options for proto=fd [ 82.393479][ T5059] syzkaller0: entered promiscuous mode [ 82.400756][ T5059] syzkaller0: entered allmulticast mode [ 82.510558][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.570177][ T5097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.564'. [ 82.640166][ T5107] random: crng reseeded on system resumption [ 82.723091][ T5116] loop0: detected capacity change from 0 to 164 [ 82.846987][ T5116] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 82.891654][ T5119] pim6reg1: entered promiscuous mode [ 82.897884][ T5119] pim6reg1: entered allmulticast mode [ 83.003198][ T5119] 9pnet_fd: Insufficient options for proto=fd [ 83.030938][ T5122] 9pnet_fd: Insufficient options for proto=fd [ 83.074226][ T29] audit: type=1326 audit(1755430824.376:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5125 comm="syz.4.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ceba8ebe9 code=0x7ffc0000 [ 83.102766][ T5124] random: crng reseeded on system resumption [ 83.179383][ T5128] loop4: detected capacity change from 0 to 2048 [ 83.231577][ T5131] random: crng reseeded on system resumption [ 83.248839][ T5135] loop1: detected capacity change from 0 to 1024 [ 83.278874][ T5128] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.327194][ T5135] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.379980][ T5135] sg_write: data in/out 1048540/10 bytes for SCSI command 0xc0-- guessing data in; [ 83.379980][ T5135] program syz.1.579 not setting count and/or reply_len properly [ 83.477056][ T5128] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 83.541951][ T5128] EXT4-fs (loop4): Remounting filesystem read-only [ 83.549767][ T5150] loop8: detected capacity change from 0 to 7 [ 83.578275][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.671915][ T5156] loop1: detected capacity change from 0 to 512 [ 83.681113][ T5156] EXT4-fs: Ignoring removed bh option [ 83.701076][ T5156] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 83.711960][ T5156] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 83.799065][ T5128] syzkaller0: entered promiscuous mode [ 83.806508][ T5128] syzkaller0: entered allmulticast mode [ 83.816452][ T5156] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 83.849573][ T5158] netlink: 16 bytes leftover after parsing attributes in process `syz.3.587'. [ 83.860837][ T5156] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 83.870470][ T5156] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.893561][ T5158] netlink: 20 bytes leftover after parsing attributes in process `syz.3.587'. [ 83.912783][ T5156] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.105969][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.333458][ T5170] wireguard0: entered promiscuous mode [ 84.341257][ T5170] wireguard0: entered allmulticast mode [ 84.533881][ T5184] random: crng reseeded on system resumption [ 84.591607][ T5186] vhci_hcd: invalid port number 254 [ 84.598628][ T5186] vhci_hcd: invalid port number 254 [ 84.717987][ T5193] loop4: detected capacity change from 0 to 512 [ 84.743341][ T5193] EXT4-fs: Ignoring removed bh option [ 84.760927][ T5193] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 84.770667][ T5193] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 84.806778][ T5198] netlink: 16 bytes leftover after parsing attributes in process `syz.0.600'. [ 84.829396][ T5193] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 84.845786][ T5195] netlink: 20 bytes leftover after parsing attributes in process `syz.0.600'. [ 84.869582][ T5193] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 84.887480][ T1034] IPVS: starting estimator thread 0... [ 84.935766][ T5204] serio: Serial port ptm0 [ 84.944996][ T5193] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.979622][ T5205] IPVS: using max 2304 ests per chain, 115200 per kthread [ 85.020911][ T5193] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.101044][ T5210] loop1: detected capacity change from 0 to 512 [ 85.125329][ T5210] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 85.160946][ T5210] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 85.227561][ T5210] EXT4-fs (loop1): 1 truncate cleaned up [ 85.255923][ T5223] random: crng reseeded on system resumption [ 85.265014][ T5210] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.281685][ T5225] vhci_hcd: invalid port number 254 [ 85.288809][ T5225] vhci_hcd: invalid port number 254 [ 85.509338][ T5232] wireguard0: entered promiscuous mode [ 85.509683][ T5239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.509798][ T5239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.537067][ T5232] wireguard0: entered allmulticast mode [ 85.560059][ T5239] loop3: detected capacity change from 0 to 512 [ 85.567278][ T5239] EXT4-fs: Ignoring removed bh option [ 85.597284][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.619450][ T5239] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 85.642996][ T5239] EXT4-fs (loop3): 1 truncate cleaned up [ 85.651372][ T5239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.776192][ T5252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.616'. [ 85.976543][ T5262] loop2: detected capacity change from 0 to 2048 [ 86.086957][ T5262] capability: warning: `syz.2.621' uses deprecated v2 capabilities in a way that may be insecure [ 86.238140][ T5274] random: crng reseeded on system resumption [ 86.332499][ T5280] loop0: detected capacity change from 0 to 1024 [ 86.387074][ T5285] loop1: detected capacity change from 0 to 1024 [ 86.389965][ T5287] loop4: detected capacity change from 0 to 164 [ 86.436960][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.457830][ T5287] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 86.480264][ T5280] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.521749][ T5285] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.579229][ T5285] sg_write: data in/out 1048540/10 bytes for SCSI command 0xc0-- guessing data in; [ 86.579229][ T5285] program syz.1.629 not setting count and/or reply_len properly [ 86.659793][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 86.659809][ T29] audit: type=1326 audit(1755430827.966:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5284 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8d3bebe9 code=0x7ffc0000 [ 86.705512][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.770893][ T5280] sg_write: data in/out 1048540/10 bytes for SCSI command 0xc0-- guessing data in; [ 86.770893][ T5280] program syz.0.628 not setting count and/or reply_len properly [ 86.774127][ T29] audit: type=1326 audit(1755430827.996:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5284 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f8d3bebe9 code=0x7ffc0000 [ 86.813515][ T29] audit: type=1326 audit(1755430827.996:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5284 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8d3bebe9 code=0x7ffc0000 [ 86.830259][ T5297] pim6reg1: entered promiscuous mode [ 86.838997][ T29] audit: type=1326 audit(1755430827.996:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5284 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8d3bebe9 code=0x7ffc0000 [ 86.844467][ T5297] pim6reg1: entered allmulticast mode [ 86.869754][ T29] audit: type=1326 audit(1755430828.026:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8d3bebe9 code=0x7ffc0000 [ 86.869800][ T29] audit: type=1326 audit(1755430828.026:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f5f8d3bebe9 code=0x7ffc0000 [ 86.924965][ T29] audit: type=1326 audit(1755430828.026:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8d3bebe9 code=0x7ffc0000 [ 86.961916][ T5297] 9pnet_fd: Insufficient options for proto=fd [ 87.029769][ T5319] pim6reg1: entered promiscuous mode [ 87.035930][ T5319] pim6reg1: entered allmulticast mode [ 87.054083][ T5319] 9pnet_fd: Insufficient options for proto=fd [ 87.128736][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.269591][ T29] audit: type=1326 audit(1755430828.566:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5334 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053df9ebe9 code=0x7ffc0000 [ 87.292156][ T5335] netlink: 16 bytes leftover after parsing attributes in process `syz.3.648'. [ 87.296158][ T29] audit: type=1326 audit(1755430828.566:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5334 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=143 compat=0 ip=0x7f053df9ebe9 code=0x7ffc0000 [ 87.333406][ T29] audit: type=1326 audit(1755430828.566:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5334 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053df9ebe9 code=0x7ffc0000 [ 87.396016][ T5314] loop4: detected capacity change from 0 to 8192 [ 87.407821][ T5333] loop1: detected capacity change from 0 to 8192 [ 87.425248][ T5340] 9pnet_fd: Insufficient options for proto=fd [ 87.460989][ T3294] loop4: p1 p2[DM] p4 [ 87.465623][ T3294] loop4: p1 size 196608 extends beyond EOD, truncated [ 87.469858][ T4206] loop1: p1 p2[DM] p4 [ 87.477286][ T4206] loop1: p1 size 196608 extends beyond EOD, truncated [ 87.490348][ T4206] loop1: p2 start 4292936063 is beyond EOD, truncated [ 87.493833][ T3294] loop4: p2 start 4292936063 is beyond EOD, truncated [ 87.497460][ T4206] loop1: p4 size 50331648 extends beyond EOD, truncated [ 87.504455][ T3294] loop4: p4 size 50331648 extends beyond EOD, truncated [ 87.548279][ T5333] loop1: p1 p2[DM] p4 [ 87.552734][ T5333] loop1: p1 size 196608 extends beyond EOD, truncated [ 87.577529][ T5333] loop1: p2 start 4292936063 is beyond EOD, truncated [ 87.584535][ T5333] loop1: p4 size 50331648 extends beyond EOD, truncated [ 87.797795][ T5314] loop4: p1 p2[DM] p4 [ 87.820444][ T5314] loop4: p1 size 196608 extends beyond EOD, truncated [ 87.868792][ T5360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.658'. [ 87.906164][ T4205] udevd[4205]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 87.917160][ T5314] loop4: p2 start 4292936063 is beyond EOD, truncated [ 87.924384][ T5314] loop4: p4 size 50331648 extends beyond EOD, truncated [ 87.932433][ T4206] udevd[4206]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 88.073820][ T4206] udevd[4206]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 88.083282][ T4205] udevd[4205]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 88.092085][ T5381] loop2: detected capacity change from 0 to 2048 [ 88.142674][ T5381] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.172138][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 88.185005][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 88.206107][ T5392] FAULT_INJECTION: forcing a failure. [ 88.206107][ T5392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.221839][ T5392] CPU: 1 UID: 0 PID: 5392 Comm: syz.3.668 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 88.221877][ T5392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 88.221890][ T5392] Call Trace: [ 88.221896][ T5392] [ 88.221906][ T5392] __dump_stack+0x1d/0x30 [ 88.222023][ T5392] dump_stack_lvl+0xe8/0x140 [ 88.222043][ T5392] dump_stack+0x15/0x1b [ 88.222059][ T5392] should_fail_ex+0x265/0x280 [ 88.222085][ T5392] should_fail+0xb/0x20 [ 88.222107][ T5392] should_fail_usercopy+0x1a/0x20 [ 88.222177][ T5392] _copy_from_user+0x1c/0xb0 [ 88.222286][ T5392] do_sock_getsockopt+0xf1/0x240 [ 88.222316][ T5392] __x64_sys_getsockopt+0x11e/0x1a0 [ 88.222347][ T5392] x64_sys_call+0x2bc6/0x2ff0 [ 88.222375][ T5392] do_syscall_64+0xd2/0x200 [ 88.222441][ T5392] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 88.222465][ T5392] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 88.222496][ T5392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.222543][ T5392] RIP: 0033:0x7f053df9ebe9 [ 88.222563][ T5392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.222582][ T5392] RSP: 002b:00007f053ca07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 88.222602][ T5392] RAX: ffffffffffffffda RBX: 00007f053e1c5fa0 RCX: 00007f053df9ebe9 [ 88.222619][ T5392] RDX: 0000000000000070 RSI: 0000000000000084 RDI: 0000000000000003 [ 88.222633][ T5392] RBP: 00007f053ca07090 R08: 0000200000000080 R09: 0000000000000000 [ 88.222645][ T5392] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 88.222657][ T5392] R13: 00007f053e1c6038 R14: 00007f053e1c5fa0 R15: 00007ffcb3774438 [ 88.222728][ T5392] [ 88.304635][ T5394] netlink: 'syz.0.665': attribute type 4 has an invalid length. [ 88.322928][ T4205] udevd[4205]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 88.439349][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 88.462875][ T5391] loop1: detected capacity change from 0 to 8192 [ 88.489470][ T5394] netlink: 60 bytes leftover after parsing attributes in process `syz.0.665'. [ 88.499102][ T5394] netlink: 60 bytes leftover after parsing attributes in process `syz.0.665'. [ 88.529947][ T3294] loop1: p1 p2[DM] p4 [ 88.534837][ T3294] loop1: p1 size 196608 extends beyond EOD, truncated [ 88.547607][ T3294] loop1: p2 start 4292936063 is beyond EOD, truncated [ 88.555749][ T3294] loop1: p4 size 50331648 extends beyond EOD, truncated [ 88.573721][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.605131][ T5391] loop1: p1 p2[DM] p4 [ 88.615097][ T5391] loop1: p1 size 196608 extends beyond EOD, truncated [ 88.636915][ T5391] loop1: p2 start 4292936063 is beyond EOD, truncated [ 88.644794][ T5391] loop1: p4 size 50331648 extends beyond EOD, truncated [ 88.682181][ T5394] netlink: 60 bytes leftover after parsing attributes in process `syz.0.665'. [ 88.729831][ T5409] 9pnet_fd: Insufficient options for proto=fd [ 88.762450][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 88.769844][ T4206] udevd[4206]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 88.870057][ T5407] __nla_validate_parse: 3 callbacks suppressed [ 88.870080][ T5407] netlink: 4 bytes leftover after parsing attributes in process `syz.4.671'. [ 89.277706][ T5430] loop0: detected capacity change from 0 to 1024 [ 89.397306][ T5430] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.449744][ T5430] sg_write: data in/out 1048540/10 bytes for SCSI command 0xc0-- guessing data in; [ 89.449744][ T5430] program syz.0.682 not setting count and/or reply_len properly [ 89.652172][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.670776][ T5449] random: crng reseeded on system resumption [ 89.824818][ T5457] random: crng reseeded on system resumption [ 89.963609][ T5459] loop2: detected capacity change from 0 to 1024 [ 90.005320][ T5459] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.073621][ T5459] sg_write: data in/out 1048540/10 bytes for SCSI command 0xc0-- guessing data in; [ 90.073621][ T5459] program syz.2.693 not setting count and/or reply_len properly [ 90.192282][ T5463] netlink: 16 bytes leftover after parsing attributes in process `syz.4.694'. [ 90.267323][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.329293][ T5466] wireguard0: entered promiscuous mode [ 90.335942][ T5466] wireguard0: entered allmulticast mode [ 91.003503][ T5495] 9pnet_fd: Insufficient options for proto=fd [ 91.659367][ T5511] wireguard0: entered promiscuous mode [ 91.665826][ T5511] wireguard0: entered allmulticast mode [ 91.675655][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 91.675674][ T29] audit: type=1326 audit(1755430832.986:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f5f8d3bebe9 code=0x7ffc0000 [ 91.738977][ T29] audit: type=1326 audit(1755430833.016:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f5f8d3bebe9 code=0x7ffc0000 [ 91.764223][ T29] audit: type=1326 audit(1755430833.026:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f5f8d3bebe9 code=0x7ffc0000 [ 91.789095][ T29] audit: type=1326 audit(1755430833.036:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f5f8d3bebe9 code=0x7ffc0000 [ 91.878209][ T29] audit: type=1326 audit(1755430833.126:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f5f8d3bebe9 code=0x7ffc0000 [ 91.903365][ T29] audit: type=1326 audit(1755430833.136:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f5f8d3bebe9 code=0x7ffc0000 [ 91.928307][ T29] audit: type=1326 audit(1755430833.146:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f5f8d3bebe9 code=0x7ffc0000 [ 91.952198][ T29] audit: type=1326 audit(1755430833.156:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f5f8d3bebe9 code=0x7ffc0000 [ 91.976331][ T29] audit: type=1326 audit(1755430833.166:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f5f8d3bebe9 code=0x7ffc0000 [ 92.000845][ T29] audit: type=1326 audit(1755430833.176:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f5f8d3bebe9 code=0x7ffc0000 [ 92.116546][ T5522] loop1: detected capacity change from 0 to 2048 [ 92.153872][ T5522] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.207525][ T5522] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 92.270357][ T5522] EXT4-fs (loop1): Remounting filesystem read-only [ 92.303452][ T5530] loop8: detected capacity change from 0 to 7 [ 92.382794][ T5529] loop4: detected capacity change from 0 to 512 [ 92.403607][ T5529] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 92.450843][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.462687][ T5529] EXT4-fs (loop4): 1 truncate cleaned up [ 92.516288][ T5529] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.622559][ T5549] loop3: detected capacity change from 0 to 736 [ 92.776677][ T5556] loop0: detected capacity change from 0 to 1024 [ 92.843101][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.851119][ T5562] 9pnet_fd: Insufficient options for proto=fd [ 92.868865][ T5556] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.891646][ T5556] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.904003][ T5558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.729'. [ 92.975748][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.147424][ T5582] loop0: detected capacity change from 0 to 512 [ 93.154156][ T5582] EXT4-fs: Ignoring removed orlov option [ 93.160036][ T5582] EXT4-fs: Ignoring removed i_version option [ 93.169986][ T5582] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.737: corrupted in-inode xattr: invalid ea_ino [ 93.185154][ T5582] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.737: couldn't read orphan inode 15 (err -117) [ 93.198534][ T5582] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.256071][ T5582] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 93.284411][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.321295][ T5578] pim6reg1: entered promiscuous mode [ 93.327322][ T5578] pim6reg1: entered allmulticast mode [ 93.363457][ T5578] 9pnet_fd: Insufficient options for proto=fd [ 93.437495][ T5590] FAULT_INJECTION: forcing a failure. [ 93.437495][ T5590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.452839][ T5590] CPU: 1 UID: 0 PID: 5590 Comm: syz.3.740 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 93.452949][ T5590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 93.452964][ T5590] Call Trace: [ 93.452971][ T5590] [ 93.452981][ T5590] __dump_stack+0x1d/0x30 [ 93.453008][ T5590] dump_stack_lvl+0xe8/0x140 [ 93.453032][ T5590] dump_stack+0x15/0x1b [ 93.453053][ T5590] should_fail_ex+0x265/0x280 [ 93.453157][ T5590] should_fail+0xb/0x20 [ 93.453179][ T5590] should_fail_usercopy+0x1a/0x20 [ 93.453206][ T5590] _copy_to_user+0x20/0xa0 [ 93.453235][ T5590] simple_read_from_buffer+0xb5/0x130 [ 93.453393][ T5590] proc_fail_nth_read+0x10e/0x150 [ 93.453431][ T5590] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 93.453465][ T5590] vfs_read+0x1a5/0x770 [ 93.453543][ T5590] ? __rcu_read_unlock+0x4f/0x70 [ 93.453571][ T5590] ? __fget_files+0x184/0x1c0 [ 93.453608][ T5590] ksys_read+0xda/0x1a0 [ 93.453648][ T5590] __x64_sys_read+0x40/0x50 [ 93.453670][ T5590] x64_sys_call+0x27bc/0x2ff0 [ 93.453761][ T5590] do_syscall_64+0xd2/0x200 [ 93.453872][ T5590] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 93.453896][ T5590] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 93.453928][ T5590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.453999][ T5590] RIP: 0033:0x7f053df9d5fc [ 93.454014][ T5590] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 93.454035][ T5590] RSP: 002b:00007f053ca07030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 93.454060][ T5590] RAX: ffffffffffffffda RBX: 00007f053e1c5fa0 RCX: 00007f053df9d5fc [ 93.454073][ T5590] RDX: 000000000000000f RSI: 00007f053ca070a0 RDI: 0000000000000003 [ 93.454084][ T5590] RBP: 00007f053ca07090 R08: 0000000000000000 R09: 0000000000000000 [ 93.454096][ T5590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.454121][ T5590] R13: 00007f053e1c6038 R14: 00007f053e1c5fa0 R15: 00007ffcb3774438 [ 93.454143][ T5590] [ 93.748234][ T5598] loop1: detected capacity change from 0 to 512 [ 93.771791][ T5595] loop2: detected capacity change from 0 to 736 [ 93.778737][ T5597] loop0: detected capacity change from 0 to 1024 [ 93.840061][ T5597] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.853722][ T5597] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.900530][ T5608] 9pnet_fd: Insufficient options for proto=fd [ 93.908065][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.024988][ T5618] loop1: detected capacity change from 0 to 1024 [ 94.061809][ T5618] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.115604][ T5618] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.231237][ T5628] netlink: 28 bytes leftover after parsing attributes in process `syz.3.755'. [ 94.240275][ T5628] netlink: 28 bytes leftover after parsing attributes in process `syz.3.755'. [ 94.258278][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.272069][ T5632] loop0: detected capacity change from 0 to 512 [ 94.279020][ T5632] EXT4-fs: Ignoring removed bh option [ 94.288823][ T5632] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 94.298028][ T5632] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 94.326856][ T5632] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 94.382889][ T5632] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 94.449132][ T5642] 9pnet_fd: Insufficient options for proto=fd [ 94.498561][ T5647] loop0: detected capacity change from 0 to 736 [ 94.513513][ T5652] loop3: detected capacity change from 0 to 512 [ 94.522570][ T5652] EXT4-fs: Ignoring removed bh option [ 94.549260][ T5652] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 94.558629][ T5652] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 94.583068][ T5652] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 94.651949][ T5658] loop1: detected capacity change from 0 to 2048 [ 94.661053][ T5652] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 94.701965][ T5658] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 94.736238][ T5658] EXT4-fs (loop1): Remounting filesystem read-only [ 94.760878][ T5665] loop8: detected capacity change from 0 to 7 [ 94.835873][ T5658] syzkaller0: entered promiscuous mode [ 94.841500][ T5658] syzkaller0: entered allmulticast mode [ 94.977119][ T5668] loop3: detected capacity change from 0 to 8192 [ 95.048136][ T5668] loop3: p1 p2[DM] p4 [ 95.056195][ T5668] loop3: p1 size 196608 extends beyond EOD, truncated [ 95.065652][ T5674] random: crng reseeded on system resumption [ 95.073041][ T5668] loop3: p2 start 4292936063 is beyond EOD, truncated [ 95.080227][ T5668] loop3: p4 size 50331648 extends beyond EOD, truncated [ 95.158646][ T5679] 9pnet_fd: Insufficient options for proto=fd [ 95.216334][ T5683] loop2: detected capacity change from 0 to 736 [ 95.586754][ T5705] loop2: detected capacity change from 0 to 512 [ 95.595932][ T5705] EXT4-fs: Ignoring removed bh option [ 95.603923][ T5705] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 95.613367][ T5705] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 95.630280][ T5705] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 95.644673][ T5705] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 95.707863][ T5717] loop3: detected capacity change from 0 to 1024 [ 95.829478][ T5731] loop2: detected capacity change from 0 to 164 [ 95.841811][ T5731] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 95.910295][ T5736] random: crng reseeded on system resumption [ 95.982742][ T5739] random: crng reseeded on system resumption [ 96.081842][ T5743] loop0: detected capacity change from 0 to 8192 [ 96.130589][ T3294] loop0: p1 p2[DM] p4 [ 96.135977][ T3294] loop0: p1 size 196608 extends beyond EOD, truncated [ 96.143816][ T3294] loop0: p2 start 4292936063 is beyond EOD, truncated [ 96.151235][ T3294] loop0: p4 size 50331648 extends beyond EOD, truncated [ 96.164482][ T5743] loop0: p1 p2[DM] p4 [ 96.169270][ T5743] loop0: p1 size 196608 extends beyond EOD, truncated [ 96.177808][ T5743] loop0: p2 start 4292936063 is beyond EOD, truncated [ 96.178019][ T5746] netlink: 68 bytes leftover after parsing attributes in process `syz.1.800'. [ 96.185125][ T5743] loop0: p4 size 50331648 extends beyond EOD, truncated [ 96.280224][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 96.282510][ T4206] udevd[4206]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 96.306515][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 96.307912][ T4206] udevd[4206]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 96.336648][ T5756] loop0: detected capacity change from 0 to 512 [ 96.346461][ T5756] EXT4-fs: Ignoring removed bh option [ 96.361070][ T5756] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 96.370375][ T5756] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 96.406082][ T5756] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 96.416117][ T5756] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 96.726248][ T5787] loop3: detected capacity change from 0 to 1024 [ 96.742202][ T5787] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.777530][ T29] kauditd_printk_skb: 274 callbacks suppressed [ 96.777548][ T29] audit: type=1400 audit(1755430838.076:2356): avc: denied { nlmsg_read } for pid=5788 comm="syz.4.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.817468][ T5789] netlink: 104 bytes leftover after parsing attributes in process `syz.4.817'. [ 96.831541][ T29] audit: type=1400 audit(1755430838.136:2357): avc: denied { read } for pid=5788 comm="syz.4.817" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 96.855294][ T29] audit: type=1400 audit(1755430838.136:2358): avc: denied { open } for pid=5788 comm="syz.4.817" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 96.881830][ T29] audit: type=1400 audit(1755430838.186:2359): avc: denied { ioctl } for pid=5788 comm="syz.4.817" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 96.945763][ T5797] loop3: detected capacity change from 0 to 512 [ 96.960177][ T5797] EXT4-fs: Ignoring removed bh option [ 96.966099][ T5794] loop4: detected capacity change from 0 to 512 [ 96.981698][ T5797] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 96.991184][ T5797] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 97.009404][ T5794] ext4 filesystem being mounted at /147/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.021748][ T5797] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 97.037657][ T5797] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 97.079174][ T5803] 9pnet_fd: Insufficient options for proto=fd [ 97.112666][ T29] audit: type=1400 audit(1755430838.416:2360): avc: denied { create } for pid=5804 comm="syz.3.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 97.142512][ T5805] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.169028][ T5807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.822'. [ 97.182145][ T5805] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.196576][ T29] audit: type=1326 audit(1755430838.496:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5804 comm="syz.3.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053df9ebe9 code=0x7ffc0000 [ 97.220540][ T29] audit: type=1326 audit(1755430838.496:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5804 comm="syz.3.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f053df9d457 code=0x7ffc0000 [ 97.244211][ T29] audit: type=1326 audit(1755430838.496:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5804 comm="syz.3.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053df9ebe9 code=0x7ffc0000 [ 97.272304][ T29] audit: type=1326 audit(1755430838.496:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5804 comm="syz.3.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f053df9ebe9 code=0x7ffc0000 [ 97.296065][ T29] audit: type=1326 audit(1755430838.496:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5804 comm="syz.3.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053df9ebe9 code=0x7ffc0000 [ 97.328016][ T5805] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.431357][ T5805] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.483102][ T37] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.503278][ T5828] loop0: detected capacity change from 0 to 512 [ 97.503814][ T37] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.515870][ T5828] EXT4-fs: Ignoring removed bh option [ 97.534887][ T5830] loop2: detected capacity change from 0 to 1024 [ 97.540993][ T37] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.554366][ T37] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.556764][ T5828] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 97.571824][ T5828] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 97.584004][ T5830] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.632682][ T5828] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 97.642575][ T5828] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 97.685229][ T5836] loop2: detected capacity change from 0 to 164 [ 97.700955][ T5837] 9pnet_fd: Insufficient options for proto=fd [ 97.743975][ T5839] loop3: detected capacity change from 0 to 1024 [ 97.764513][ T5836] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 97.802400][ T5839] sg_write: data in/out 1048540/10 bytes for SCSI command 0xc0-- guessing data in; [ 97.802400][ T5839] program syz.3.832 not setting count and/or reply_len properly [ 97.952624][ T5853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.837'. [ 98.415083][ T5878] wireguard0: entered promiscuous mode [ 98.422207][ T5878] wireguard0: entered allmulticast mode [ 98.660101][ T5900] 9pnet_fd: Insufficient options for proto=fd [ 98.714204][ T5896] netlink: 4 bytes leftover after parsing attributes in process `syz.4.851'. [ 98.758992][ T5910] loop0: detected capacity change from 0 to 164 [ 98.759649][ T5908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.849'. [ 98.791447][ T5910] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 98.849297][ T5894] 9pnet_fd: Insufficient options for proto=fd [ 98.897267][ T5917] loop2: detected capacity change from 0 to 512 [ 98.923569][ T5915] loop0: detected capacity change from 0 to 512 [ 98.925014][ T5917] EXT4-fs: Ignoring removed bh option [ 98.977554][ T5915] EXT4-fs: Ignoring removed bh option [ 99.011454][ T5917] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 99.020764][ T5917] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 99.031972][ T5915] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 99.041881][ T5915] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 99.053999][ T5919] loop4: detected capacity change from 0 to 512 [ 99.090707][ T5915] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 99.096256][ T5919] EXT4-fs: Ignoring removed bh option [ 99.148543][ T5919] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 99.157928][ T5919] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 99.178408][ T5917] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 99.199807][ T5917] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 99.214248][ T5915] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 99.333908][ T5919] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 99.431112][ T5919] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 99.512425][ T5940] loop2: detected capacity change from 0 to 1024 [ 99.555064][ T4205] ================================================================== [ 99.564081][ T4205] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_symlink [ 99.571938][ T4205] [ 99.574660][ T4205] write to 0xffff8881055d7544 of 4 bytes by task 3292 on cpu 1: [ 99.583416][ T4205] shmem_symlink+0x387/0x3d0 [ 99.588871][ T4205] vfs_symlink+0xd1/0x1e0 [ 99.593511][ T4205] do_symlinkat+0xc7/0x3c0 [ 99.598161][ T4205] __x64_sys_symlink+0x50/0x60 [ 99.603604][ T4205] x64_sys_call+0x23cc/0x2ff0 [ 99.608797][ T4205] do_syscall_64+0xd2/0x200 [ 99.613953][ T4205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.620155][ T4205] [ 99.622518][ T4205] read to 0xffff8881055d7544 of 4 bytes by task 4205 on cpu 0: [ 99.630899][ T4205] fill_mg_cmtime+0x5b/0x260 [ 99.636613][ T4205] generic_fillattr+0x24a/0x340 [ 99.643173][ T4205] shmem_getattr+0x181/0x200 [ 99.648129][ T4205] vfs_getattr_nosec+0x146/0x1e0 [ 99.653917][ T4205] vfs_statx+0x113/0x390 [ 99.658986][ T4205] vfs_fstatat+0x115/0x170 [ 99.663995][ T4205] __se_sys_newfstatat+0x55/0x260 [ 99.669424][ T4205] __x64_sys_newfstatat+0x55/0x70 [ 99.674504][ T4205] x64_sys_call+0x135a/0x2ff0 [ 99.679793][ T4205] do_syscall_64+0xd2/0x200 [ 99.684462][ T4205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.690841][ T4205] [ 99.693321][ T4205] value changed: 0x3311b735 -> 0x33dca911 [ 99.699313][ T4205] [ 99.701939][ T4205] Reported by Kernel Concurrency Sanitizer on: [ 99.709044][ T4205] CPU: 0 UID: 0 PID: 4205 Comm: udevd Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 99.721435][ T4205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 99.731950][ T4205] ================================================================== [ 99.816653][ T5940] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.943835][ T5952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.868'.