last executing test programs: 13m23.449931131s ago: executing program 3 (id=78): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0x10001}, 0x18) sendmmsg$inet_sctp(r0, &(0x7f0000000900)=[{&(0x7f0000000380)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x4000}], 0x1, 0x8081) (fail_nth: 13) 13m23.444697711s ago: executing program 3 (id=79): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800183a00000000000000000000bb00000000000000000000000000000001"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x10, &(0x7f00000000c0)={0x401, {{0xa, 0x4e22, 0x7f, @remote, 0x7ff}}, {{0xa, 0x4e24, 0x10001, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x100}}}, 0x108) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) sendmsg$inet6(r1, &(0x7f0000000300)={&(0x7f0000000100)={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x1a}, 0xfff}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000140)="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", 0xfb}, {&(0x7f0000000240)="5378906a7fc223951b5b908df2a9c9e4d8a00f3502cb", 0x16}, {&(0x7f0000000580)="f06165bf51037845b06c2bef1562c28f812f00ecbdccc0068fa5b12e5ec7204b48482953da76b5e7289dc91d6bf5e42d7eeadfe7e19cd2b90caad76b9ffcf5cb2675f9845e131b1f7ce76a61ca7491b9c3eafc15d90242a1ad281f6e813086fff1819e99ce62d9555bbf44a0bf0bac60366dce70b936e92383a925d4574b339462e0a10af8df60dce4c9fdcf82f7b5bfbaca20cd7fa74755a0ec4c0a72d0b9c840226a8b8890fd349e0a9817", 0xac}], 0x3, &(0x7f0000000640)=[@dstopts_2292={{0xc8, 0x29, 0x4, {0x11, 0x16, '\x00', [@generic={0x8, 0xae, "adf8153e3753355458ae13c158b27dbebf05544677d9ebd1ac1155d5d10c53cd7feebebc45977e5e1b78b9ed5a3508ecd85e774cec93e90afbda1599794f12b2d48e4698aba8b855de29c85ebbaa317a06712e67dca6c821a02e971c21180dd08b4f31381d8820e650d4b919837d8898c3d7883edb36b9fc58f2f07b97f71dd599246f7ddc0db0fe12a9ce8cac70a03efbf08d7f3eed6910fec5de863cee61cb321c79cbeba684b33b6474cd0678"}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}, @hopopts_2292={{0x70, 0x29, 0x36, {0x1d, 0xa, '\x00', [@ra={0x5, 0x2, 0x7}, @generic={0x7, 0x4b, "c77d6f77295f57ca6008258784a5b42286796051fcdf4cd2303bacfde7009980a4d66f516ce6f33c1e4dac2e40f5832dca726a31ee51b493f4ecd09099a671b06719176bf5ffc42e9e2b33"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}], 0x180}, 0x8005) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0xfffffffffffffffd}]) shutdown(r3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) setuid(r8) restart_syscall() bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x92, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x5c, 0x6, 0x0, @remote, @local, {[], {{0xfffd, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x17, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x1e, 0x4, 0xa101}, @exp_fastopen={0xfe, 0x7, 0xf989, "fdfdf7"}, @exp_fastopen={0xfe, 0xc, 0xf989, "eeb3fef90baf7079"}, @exp_fastopen={0xfe, 0x6, 0xf989, "b3bc"}, @mptcp=@synack={0x1e, 0x10, 0x1, 0x2, 0x9, 0xff, 0x7}, @fastopen={0x22, 0x2}, @mptcp=@mp_fclose={0x1e, 0xc, 0x3, 0x0, 0xfffffffffffffbff}, @generic={0x1, 0x4, 'J\f'}, @exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) 13m23.339984332s ago: executing program 3 (id=83): capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x80002}) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000080)=r5}, 0x20) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000080)=0x82, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) sendto$packet(0xffffffffffffffff, &(0x7f0000000200)="68008b7f9cb0507b64ea9d3d03e3", 0xe, 0x0, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0xd, 0x6, @random="bf73a9e561c5"}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4c, r6}) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001b80)=ANY=[@ANYBLOB="34000000150a0104000000000000000002000006080000000900020073797a310000000000000000000000000000005bb46c627967316cac3b1e665aa675bcd1095fd439c5968e41351ac03d542e9f80269b1903d2b1439c9328d49648f516e46d2ea185d77d84630280bb56b06a469c4fee7b4a8ab48873ee6f39406f7c6f2a21bd9909a3568dc0c169f4fde35d0c601a8b25c1242a1f7b36ca8fb4b2f6312e952db2ed7922c1af41b72a5328708812bec87c13eff8c8157c57524d9daabd91cb92e197773347634f9e245641d728a07ef4431ecf24e745f4cf4bfdcc428ad56c3f8e04ed2e27e62e5e69677a343140c2cd7b9f87b94534"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x8004) 13m23.290970662s ago: executing program 3 (id=84): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800700, &(0x7f0000000880)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@sysvgroups}, {@usrjquota}]}, 0x3, 0x455, &(0x7f0000001080)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x6, 0x0, 0x1a203fc6, 0x5a044, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, @perf_bp={0x0}, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, r0, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='cachefiles_trunc\x00', r1, 0x0, 0x4}, 0x18) syz_open_dev$vcsu(&(0x7f0000000000), 0x9, 0x232081) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x0, &(0x7f00000004c0)}) getgroups(0x1, &(0x7f0000000240)=[0xee01]) r2 = memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2) fcntl$addseals(r2, 0x409, 0x12) chdir(&(0x7f0000000140)='./file0\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4208, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000140)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fbf7c5cd62d8cb329815e4d17cb42b8eec0c60fca2926ac49f") rt_tgsigqueueinfo(r3, r3, 0x28, &(0x7f0000000080)={0x2d, 0xa, 0xfffffffc}) open(&(0x7f00000002c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x84401, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000e007f00"], 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000000000000000000000000000000009600", @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a00", @ANYRES32=r6, @ANYBLOB="655d806419c0a0a64749bd107e47f86ea0c19f5a8cd320cec794d312000bd7ab7a219a719e085a6589792d4db071a779f3f8c8a59593d67a8790b654acde61724a0edf7328686088"], 0x3c}}, 0x4000840) 13m23.062483783s ago: executing program 3 (id=89): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000009000000010000000000000204000000010000000000000c02000000020000000000000e030000000000000000615f5f005f635f00"], &(0x7f0000000b00)=""/4096, 0x49, 0x1000, 0x1, 0xfffffff8, 0x10000, @value}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000005000000fd00000000040200c404a66fe8e44c194ea4e13c78cdc2a94fafece6ad857ab6ff4e8b8aee9fb2f4e699b03610b202cd3996074fed00ab64ddaccbebd4cf0a5b31535a541c29f17fe0c6536e4b71142d05bfe276e6bf45375d9378991146929d8575512820c2a61ebf3b8338c0c06832cc63ddbc6f5039753ea9116d1c0c8144a6e5f78cb1dee7cdf47b4be05588379695d94980f2003ef8bcba4478b100"/179, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="fcffffff00"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) utimes(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)={{}, {0x77359400}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6}]}) ioctl$PPPIOCSDEBUG(r5, 0x40047440, &(0x7f0000000080)=0x7) write$ppp(r5, &(0x7f0000000240)="0113", 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) r7 = openat2(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)={0x10080, 0x70, 0x28}, 0x18) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r10}, 0x10) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r11, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="20b247785728e907002bbd7000fcdbdf250700e60079d800000000000000000000fb00000045be18afc6488428bc91ca4aee35b0093ab6bd45325e55630bbceeb11a"], 0x24}}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_io_uring_setup(0x24fa, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 13m22.151805237s ago: executing program 3 (id=103): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000100), &(0x7f0000000280)='%-5lx \x00'}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x20, r3, 0xe1527b0cf4b1ab9f, 0x0, 0x0, {{}, {@void, @val={0x9}}}}, 0x20}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000100)='kfree\x00', r5}, 0x18) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000001c0), &(0x7f00000006c0)='./file0\x00', &(0x7f0000000800)='9p\x00', 0x0, &(0x7f0000000900)='trans=tcp,') setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000200)={0x2, 'netdevsim0\x00', 0x5}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000006aa9d96a8c7ecc0833b29d53b6ae08563b6e28c6e6776685efa97eac55101d1b1b4e8838211bdfe95b703f80cd0c89ba4c7de21c4b5e08272af91b5abcb55f1b74f23d20ac07b2b5b13199d2180a2e2d9275de5048846e165f9b81f0798f08e14ce41b643772096f9ac4df651302327430bf60c43b9c05e06c73883fb4e4291fb7771275d4b82618"], 0x48) openat2(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', &(0x7f0000000ac0)={0x400000, 0x34, 0x38}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000a80)=ANY=[@ANYBLOB="ce7f8bd5e471308e", @ANYRES32=r9, @ANYRES8=r8], &(0x7f0000000a40)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) 13m22.151485237s ago: executing program 32 (id=103): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000100), &(0x7f0000000280)='%-5lx \x00'}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x20, r3, 0xe1527b0cf4b1ab9f, 0x0, 0x0, {{}, {@void, @val={0x9}}}}, 0x20}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000100)='kfree\x00', r5}, 0x18) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000001c0), &(0x7f00000006c0)='./file0\x00', &(0x7f0000000800)='9p\x00', 0x0, &(0x7f0000000900)='trans=tcp,') setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000200)={0x2, 'netdevsim0\x00', 0x5}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000006aa9d96a8c7ecc0833b29d53b6ae08563b6e28c6e6776685efa97eac55101d1b1b4e8838211bdfe95b703f80cd0c89ba4c7de21c4b5e08272af91b5abcb55f1b74f23d20ac07b2b5b13199d2180a2e2d9275de5048846e165f9b81f0798f08e14ce41b643772096f9ac4df651302327430bf60c43b9c05e06c73883fb4e4291fb7771275d4b82618"], 0x48) openat2(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', &(0x7f0000000ac0)={0x400000, 0x34, 0x38}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000a80)=ANY=[@ANYBLOB="ce7f8bd5e471308e", @ANYRES32=r9, @ANYRES8=r8], &(0x7f0000000a40)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) 2m38.592911945s ago: executing program 0 (id=7004): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r2, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local}, 0x1c) 2m38.384044706s ago: executing program 0 (id=7007): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000b800008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0xea) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x1, 0x7, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='kfree\x00', r5}, 0x10) r6 = socket$pppoe(0x18, 0x1, 0x0) close(r6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000726bd7000ffdbdf25010000000000000008410000004c00180000000173797a3000000000000000000000000000000000000000ac00"/98], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a08eda864dba4f0a279c7140000070000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000005c0)=')\x00I\xe3\x9a\x01\x96\xd1\xc4\x88\x0e.\\\x87W\xa3?\xaf&DZzqi3\xfd\x01\x84\x9a\x02H\xef\xd8\x944C8:\x9b\xecP\xee\xf3\x83\xd7k\xdcV_v-8\x98\x11\xf3#n\xd4q\xda\xc7\xf3\xbcf8d\xe3]\xbb\x95C\xe3\xe0\x81b\x16\x10>w\xdft\xffUxn\xcaL_A\x131\xde\x84-6\xec\x0f\x00\x00\x00\x00\x00\x00\x00\xed{0Q\xb1&\x86', 0x0) 2m37.142455823s ago: executing program 0 (id=7013): fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000004c0)={0x1, 0x2, 0x5, 0x1, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = epoll_create1(0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0xe000001a}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) read$char_usb(r3, &(0x7f0000001980)=""/179, 0xb3) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r6}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) lsm_set_self_attr(0x67, 0x0, 0x6d, 0x0) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) 2m36.896624723s ago: executing program 0 (id=7017): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4008804) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x24fd, &(0x7f0000001ac0)={0x0, 0x0, 0x10100}, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x0, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000480)="10ab119b497ad23a1c1142ce24b27ffa12477294d5f95fbf8890c08a1c7a02944cf58f9e6725ddafac32a98ed3ec927d19a01a193c99058915996d97a79d6e364c97cd620d3e639b4374dae2de1c616415fbc228c3f6bbaacf237291ea1c763bc9f9405da6d699a83194b49c8848fe72407cbcd06881dbc687e9a9967c4031632fbbb883db18c6b0c40a546715fa886040c2", 0x5d}], 0x100000000000000f}, 0x0, 0x80840, 0x1}) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3e3, &(0x7f00000004c0)="$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") r5 = open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r6 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb9388c3c955fae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110f80007639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d62578038259ca171ce1a311ef97e4298d1e14ef01060017e92996005303f56f0000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0xffffffffffffffff]}) pwritev2(r5, &(0x7f00000006c0)=[{&(0x7f0000000440)='I', 0x1}], 0x1, 0x100000, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000001d40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) io_uring_enter(r2, 0x1d2d, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f00000021c0)={0x0, 0x0}) recvmmsg(r9, &(0x7f00000020c0)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000640)=[{&(0x7f0000001c00)=""/178, 0xb2}, {&(0x7f00000004c0)=""/171, 0xab}, {&(0x7f0000000580)=""/2, 0x2}, {&(0x7f00000005c0)=""/100, 0x64}], 0x4, &(0x7f0000000680)}, 0x3}, {{&(0x7f00000006c0)=@nfc, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/117, 0x75}, {&(0x7f00000017c0)=""/231, 0xe7}, {&(0x7f00000018c0)=""/84, 0x54}, {&(0x7f0000001940)=""/235, 0xeb}], 0x5, &(0x7f0000002240)=""/140, 0x8c}, 0x7}, {{&(0x7f0000001b80)=@isdn, 0x80, &(0x7f0000001ec0), 0x0, &(0x7f0000001f00)=""/70, 0x46}, 0x6}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001f80)=""/25, 0x19}], 0x1, &(0x7f0000002000)=""/187, 0xbb}, 0x5d2}], 0x4, 0x40000020, &(0x7f0000002200)={r10, r11+10000000}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x1600) 2m35.824309888s ago: executing program 0 (id=7022): syz_read_part_table(0x5bc, &(0x7f0000000000)="$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") 2m34.565667035s ago: executing program 0 (id=7037): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x119c93, &(0x7f0000000980)={[{@noinit_itable}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@errors_continue}, {@journal_dev={'journal_dev', 0x3d, 0x1da9}}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x57b, &(0x7f0000000cc0)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setregid(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0xa) listen(r1, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000780)=0x7, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000b00)=ANY=[@ANYBLOB="aa6fdbaaaaaa00000000000086dd6000000a0014220100000000a2406600000000b79cf80000ffffe0000001fe80000000000000000d00332f066b7b9e2fab1b00000000aa5c2b043f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c200a790780000"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) accept(r4, &(0x7f0000000a40)=@rc, &(0x7f0000000140)=0x80) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c0000001000370400"/20, @ANYRES32=r5, @ANYBLOB="0b120500000000001c0012800b00010069703667726500000c00028008000100"], 0x3c}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r4) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000ac0)) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0x1) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 2m34.518486945s ago: executing program 33 (id=7037): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x119c93, &(0x7f0000000980)={[{@noinit_itable}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@errors_continue}, {@journal_dev={'journal_dev', 0x3d, 0x1da9}}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x57b, &(0x7f0000000cc0)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setregid(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0xa) listen(r1, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000780)=0x7, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000b00)=ANY=[@ANYBLOB="aa6fdbaaaaaa00000000000086dd6000000a0014220100000000a2406600000000b79cf80000ffffe0000001fe80000000000000000d00332f066b7b9e2fab1b00000000aa5c2b043f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c200a790780000"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) accept(r4, &(0x7f0000000a40)=@rc, &(0x7f0000000140)=0x80) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c0000001000370400"/20, @ANYRES32=r5, @ANYBLOB="0b120500000000001c0012800b00010069703667726500000c00028008000100"], 0x3c}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r4) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000ac0)) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0x1) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 5.522302623s ago: executing program 4 (id=8373): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x4}]}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x40000000, 0x80000000000d, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') fchdir(r2) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'vlan1\x00'}) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="d400000010000d0400000000"], 0xd4}}, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = io_uring_setup(0x30d5, 0x0) r6 = mq_open(0x0, 0x40, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r7}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) mq_timedreceive(r6, &(0x7f0000000000)=""/83, 0x9b0c4f391059f39b, 0x20000000, &(0x7f0000000100)={0x77359400}) close_range(r5, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x537, @void, @value}, 0x94) 4.256086689s ago: executing program 5 (id=8390): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000001480)={0x88, r1, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x395}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xc00000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004880}, 0x4001) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1050f0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2904, 0x4, 0x4, 0x0, 0x0, 0xfffffffe, 0xffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005000000001000"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) 3.941253701s ago: executing program 5 (id=8397): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = syz_io_uring_setup(0x3b, &(0x7f00000004c0)={0x0, 0x0, 0x10100, 0x1, 0x3c5}, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}) io_uring_enter(r2, 0x92, 0x1067, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000780)={[{@dioread_lock}, {@noblock_validity}, {@stripe={'stripe', 0x3d, 0x9}}, {@init_itable}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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") connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'veth1_to_batadv\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000000000000000000000000000000001ff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'pim6reg0\x00'}}, 0x1e) 3.694626202s ago: executing program 6 (id=8402): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 3.553768423s ago: executing program 6 (id=8404): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000001000000ff"], 0x48) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff000000000000000000000000000000000000000002"], 0x254}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = socket(0x28, 0x5, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x5, r5}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) connect$vsock_stream(r4, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) 3.470133603s ago: executing program 6 (id=8405): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r3 = socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000440)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000140)=[{{}, {0x0, 0x1}}, {{}, {0x0, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'gretap0\x00', 0x0}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000e00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x137, 0x137, 0x4, [@datasec={0x1, 0x6, 0x0, 0xf, 0x3, [{0x2, 0xfffffffc, 0x3}, {0x4, 0x0, 0x1}, {0x1, 0x9, 0xfffffff0}, {0x5, 0x1ff, 0x8}, {0x2, 0x0, 0x2}, {0x3, 0xfffffffd, 0x800}], "a310ba"}, @enum={0xc, 0x9, 0x0, 0x6, 0x4, [{0xe, 0x1}, {0x1, 0x9}, {0x0, 0xbc}, {0x1, 0x1}, {0x9, 0x27a1}, {0x4, 0x4277}, {0xd, 0x4}, {0xa, 0x95}, {0x2, 0xfffffffe}]}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xf, 0x4}, {0x6, 0x1}, {0xc, 0x4}, {0xc, 0x3}]}, @enum64={0x4, 0x1, 0x0, 0x13, 0x1, 0x6, [{0x9, 0x5, 0x6}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5, 0x4}}, @ptr={0x3, 0x0, 0x0, 0x2, 0x2}, @typedef={0xe, 0x0, 0x0, 0x8, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x8}}]}, {0x0, [0x5f, 0x5f]}}, &(0x7f00000005c0)=""/63, 0x154, 0x3f, 0x0, 0x101, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x2, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xf, 0xf, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xa}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xac8}, @alu={0x4, 0x1, 0x4, 0x9, 0xa, 0xfffffffffffffff4, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='syzkaller\x00', 0x836, 0xc9, &(0x7f0000000300)=""/201, 0x41100, 0x48, '\x00', r7, @cgroup_device, r8, 0x8, &(0x7f0000000640)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0x4, 0x7, 0x2}, 0x10, r9, r0, 0x0, &(0x7f0000000700)=[r1, r1], 0x0, 0x10, 0x81, @void, @value}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x4, 0x2, 0x8a01, r1, 0xffffff81, '\x00', r7, 0xffffffffffffffff, 0x3, 0x3, 0x1, 0x4, @value=r8, @void, @void, @value}, 0x50) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r11) sendmsg$IEEE802154_LLSEC_DEL_KEY(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)={0x30, r12, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x30}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r10, &(0x7f0000000140), &(0x7f0000000000)=""/8, 0x2}, 0x20) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r13}, 0x10) 3.218868834s ago: executing program 2 (id=8407): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x1, 0x7, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='kfree\x00', r2}, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="000726bd7000ffdbdf25010000000000000008410000004c00180000000173797a3000000000000000000000000000000000000000ac00"/98], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008800) syz_read_part_table(0x5bc, &(0x7f0000000000)="$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") 3.173018334s ago: executing program 6 (id=8408): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r0 = socket(0x2b, 0x1, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x11e, 0x1, 0x0, 0x20000000) 3.084623315s ago: executing program 6 (id=8409): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = syz_io_uring_setup(0x3b, &(0x7f00000004c0)={0x0, 0x0, 0x10100, 0x1, 0x3c5}, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}) io_uring_enter(r2, 0x92, 0x1067, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000780)={[{@dioread_lock}, {@noblock_validity}, {@stripe={'stripe', 0x3d, 0x9}}, {@init_itable}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$eJzs3M1vG0UbAPBnN02afibtW73QD6ihICIKSZMW6IEDIJB6ASHBoRxDGqrStEVNkGhV0YBQOSL+AuCIhMSJCyeQEAIugLjCHSFVqJcWDsho7d3EbmzHTpqY1r+ftPbM7uzOPrM79nrHdgA9q5Q9JBFbI+LXiBiqZusLlKpPN65dmvrr2qWpJMrll/5MKuWuX7s0VRQt1tuSZ0bSiPS9JPY2qHf2wsXTkzMz0+fz/NjcmTfGZi9cfPTUmcmT0yenz04cPXrk8PgTj0881lYcl5dZnsV1fc/b5/btPvbKh89PlePV7z/L9ndrvrw2jqrhtuptpRSlKOcW5w5UHh9c9db/W7bVpJMNXdwROtIXEdnh6q/0/6Hoi8WDNxTPvbuQ+aZLOwismey9aceSuX35c7rw/gXciRJ9HHpU8Y6fff4tpvW8/ui2q09nj9OV+G/k048vVNsmzT7LDlc/sfc1Wf//DeYNLibLQ8vUvzUijs///VE2RcP7EC0kbZcEAFjwVXb980ij67+07tpmez6GMhwRByNiZ0T8LyJ2RbpQ5q6IuLvD+ks35Zde//y8qcNNdiS7/nsyH9sqpuqSIq5kIbetEn9/8tqpmelDeZuMRP/GLD/eoo6vn/3lg2bLSjXXf9mU1V9cC+b78ceGjfXrnJicm1xFyHWuvhOxZ0Oj+JOFkYCsBXZHxJ4VbD9rs1MPf7ovS2/fsnT58vG3cAvGmcqfRDxUPf7zcVP8haRaU7PxybHBmJk+NFacFUv98NOVF2vz/TXpuvgH24tpcKXBNpAd/80Nz/88/qIbFOO1s53XceW395t+pll6/JM4Pl9bIj//Ny02W3b+DyQvV9ID+by3Jufmzo9HDOQz6uZPLG6tyBfls/hHDjTu/zsj/vk4X29vRGQn8T0RcW9E7M/3/b6IuD8iDrSI/7tnHni9dQut8Py/BbL4T7Q6/hHDSe14/QoSfae//bJZ/e29/h2ppEbyOe28/rW7g6tpOwAAALhdpJUx6CQdLdI1N6d2xeZ05tzs3MFSvHn2RHWsejj60+JO11DN/dDx/N5wkZ+4KX84InZUvmm0qZIfnTo3s62bgQOV3+rU9f9I09HR6rLfm33pBbhzdDSOVvuls8+/uPU7A6wrv9eE3qX/Q+/S/6F36f/Quxr1/8sRN7qwK8A68/4PvUv/h96l/0Pv0v+hJy39SXzxdysr+aX/YmLnsVWtvuaJ8tCabHm+87X61ijSqP3TjqaJJCJWVkWkrcsMtFF71xLpsmWeWq5Z+lf1nxhZYn+e2BgR7a51ed1atXiFSPzLJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcFv7NwAA//8Aq+SG") connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'veth1_to_batadv\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000000000000000000000000000000001ff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'pim6reg0\x00'}}, 0x1e) 2.971543426s ago: executing program 5 (id=8410): r0 = epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)={0xa000000a}) r2 = syz_io_uring_setup(0x9e, &(0x7f0000000380)={0x0, 0x4000000, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x2, 0x2004, @fd, 0x1, 0x0, 0x0, 0x15}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) finit_module(r1, 0x0, 0x0) 2.880987096s ago: executing program 2 (id=8411): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e21, 0x1, @remote, 0x2}}, 0x0, 0x0, 0x0, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xd8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000f82818110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='mm_page_alloc\x00', r3}, 0x10) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101a01) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045515, 0x0) syz_io_uring_setup(0xd8, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x0, 0x0) syz_read_part_table(0x5be, &(0x7f00000005c0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080000000000197b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000000000070400", @ANYRES32], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) writev(r5, &(0x7f0000000580)=[{0x0}], 0x1) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = eventfd2(0x0, 0x80001) io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x3ff, r1, &(0x7f00000001c0)="f26f3a87500fcf4155c2d499aac435224b873d55a7c5433cb3edf7bb524cf38c44c38083b1f0959edf337c4c8ceb2a97d999993b3abb070374568fcb0910c0b5cef3abf69137bac8e6a7f3f392f2ba384dff560a67ae20df21a8254c56b783b3de4142", 0x63, 0x6, 0x0, 0x1, r7}, &(0x7f0000000240)) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r7, &(0x7f0000000280), 0x0, 0x2}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) syz_clone3(&(0x7f0000000500)={0x3c0000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x0], 0x1}, 0x58) 2.777239947s ago: executing program 5 (id=8412): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r2 = syz_io_uring_setup(0x4174, &(0x7f0000000780)={0x0, 0x7e05, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) 2.656380667s ago: executing program 5 (id=8413): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000040)}], 0x1) read(r1, 0x0, 0x0) 2.556031658s ago: executing program 1 (id=8414): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) munlockall() 2.434538018s ago: executing program 5 (id=8415): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000b800008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0xea) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x1, 0x7, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='kfree\x00', r5}, 0x10) syz_read_part_table(0x5bc, &(0x7f0000000000)="$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") 2.390098348s ago: executing program 1 (id=8416): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT=r1, @ANYRES8=r1], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) io_uring_setup(0x6f6, &(0x7f0000000740)) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x6, 0x2d0, &(0x7f00000003c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000002c0)=ANY=[@ANYRES8=r2], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x541c, &(0x7f0000000000)) 2.246589339s ago: executing program 1 (id=8417): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0xb8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.940265571s ago: executing program 1 (id=8418): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x1, 0x7, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000010085000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='kfree\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000005c0)=')\x00I\xe3\x9a\x01\x96\xd1\xc4\x88\x0e.\\\x87W\xa3?\xaf&DZzqi3\xfd\x01\x84\x9a\x02H\xef\xd8\x944C8:\x9b\xecP\xee\xf3\x83\xd7k\xdcV_v-8\x98\x11\xf3#n\xd4q\xda\xc7\xf3\xbcf8d\xe3]\xbb\x95C\xe3\xe0\x81b\x16\x10>w\xdft\xffUxn\xcaL_A\x131\xde\x84-6\xec\x0f\x00\x00\x00\x00\x00\x00\x00\xed{0Q\xb1&\x86', 0x0) 1.860704901s ago: executing program 1 (id=8419): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r0 = socket(0x2b, 0x1, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x11e, 0x1, 0x0, 0x20000000) 1.793664021s ago: executing program 1 (id=8420): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000001480)={0x88, r1, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x395}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xc00000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004880}, 0x4001) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1050f0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2904, 0x4, 0x4, 0x0, 0x0, 0xfffffffe, 0xffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000010008500000071000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) 1.690997952s ago: executing program 4 (id=8421): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18030000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000006c0)="7c3b10a9", 0x4}, {0x0}, {0x0}], 0x3}}], 0x2, 0x20004800) 1.636621422s ago: executing program 4 (id=8422): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x1, 0x7, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000010085000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='kfree\x00', r2}, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="000726bd7000ffdbdf25010000000000000008410000004c00180000000173797a3000000000000000000000000000000000000000ac00"/98], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008800) syz_read_part_table(0x5bc, &(0x7f0000000000)="$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") 1.094990115s ago: executing program 6 (id=8423): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x119c93, &(0x7f0000000980)={[{@noinit_itable}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@errors_continue}, {@journal_dev={'journal_dev', 0x3d, 0x1da9}}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x57b, &(0x7f0000000cc0)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setregid(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) umount2(&(0x7f0000000000)='./file0\x00', 0xa) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000b00)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) accept(r4, &(0x7f0000000a40)=@rc, &(0x7f0000000140)=0x80) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c0000001000370400"/20, @ANYRES32=r5, @ANYBLOB="0b120500000000001c0012800b00010069703667726500000c00028008000100"], 0x3c}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r4) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000ac0)) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) 995.978705ms ago: executing program 2 (id=8424): epoll_create1(0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000380)={0x0, 0x4000000, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x2, 0x2004, @fd, 0x1, 0x0, 0x0, 0x15}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 907.491106ms ago: executing program 4 (id=8425): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 903.379476ms ago: executing program 2 (id=8426): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) munlockall() 798.039996ms ago: executing program 2 (id=8427): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000440)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000140)=[{{}, {0x0, 0x1}}, {{}, {0x0, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'gretap0\x00', 0x0}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000e00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x137, 0x137, 0x4, [@datasec={0x1, 0x6, 0x0, 0xf, 0x3, [{0x2, 0xfffffffc, 0x3}, {0x4, 0x0, 0x1}, {0x1, 0x9, 0xfffffff0}, {0x5, 0x1ff, 0x8}, {0x2, 0x0, 0x2}, {0x3, 0xfffffffd, 0x800}], "a310ba"}, @enum={0xc, 0x9, 0x0, 0x6, 0x4, [{0xe, 0x1}, {0x1, 0x9}, {0x0, 0xbc}, {0x1, 0x1}, {0x9, 0x27a1}, {0x4, 0x4277}, {0xd, 0x4}, {0xa, 0x95}, {0x2, 0xfffffffe}]}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xf, 0x4}, {0x6, 0x1}, {0xc, 0x4}, {0xc, 0x3}]}, @enum64={0x4, 0x1, 0x0, 0x13, 0x1, 0x6, [{0x9, 0x5, 0x6}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5, 0x4}}, @ptr={0x3, 0x0, 0x0, 0x2, 0x2}, @typedef={0xe, 0x0, 0x0, 0x8, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x8}}]}, {0x0, [0x5f, 0x5f]}}, &(0x7f00000005c0)=""/63, 0x154, 0x3f, 0x0, 0x101, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x2, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xf, 0xf, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xa}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xac8}, @alu={0x4, 0x1, 0x4, 0x9, 0xa, 0xfffffffffffffff4, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='syzkaller\x00', 0x836, 0xc9, &(0x7f0000000300)=""/201, 0x41100, 0x48, '\x00', r6, @cgroup_device, r7, 0x8, &(0x7f0000000640)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0x4, 0x7, 0x2}, 0x10, r8, r0, 0x0, &(0x7f0000000700)=[r1, r1], 0x0, 0x10, 0x81, @void, @value}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x4, 0x2, 0x8a01, r1, 0xffffff81, '\x00', r6, 0xffffffffffffffff, 0x3, 0x3, 0x1, 0x4, @value=r7, @void, @void, @value}, 0x50) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)={0x30, r11, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x30}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r9, &(0x7f0000000140), &(0x7f0000000000)=""/8, 0x2}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r12}, 0x10) 406.492958ms ago: executing program 4 (id=8428): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0xb8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 366.345069ms ago: executing program 4 (id=8429): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = syz_io_uring_setup(0x3b, &(0x7f00000004c0)={0x0, 0x0, 0x10100, 0x1, 0x3c5}, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}) io_uring_enter(r2, 0x92, 0x1067, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000780)={[{@dioread_lock}, {@noblock_validity}, {@stripe={'stripe', 0x3d, 0x9}}, {@init_itable}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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") connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'veth1_to_batadv\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000000000000000000000000000000001ff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'pim6reg0\x00'}}, 0x1e) 0s ago: executing program 2 (id=8430): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x1, 0x7, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000010085000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='kfree\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000005c0)=')\x00I\xe3\x9a\x01\x96\xd1\xc4\x88\x0e.\\\x87W\xa3?\xaf&DZzqi3\xfd\x01\x84\x9a\x02H\xef\xd8\x944C8:\x9b\xecP\xee\xf3\x83\xd7k\xdcV_v-8\x98\x11\xf3#n\xd4q\xda\xc7\xf3\xbcf8d\xe3]\xbb\x95C\xe3\xe0\x81b\x16\x10>w\xdft\xffUxn\xcaL_A\x131\xde\x84-6\xec\x0f\x00\x00\x00\x00\x00\x00\x00\xed{0Q\xb1&\x86', 0x0) kernel console output (not intermixed with test programs): 0 to 2048 [ 774.678228][T32201] syz.1.7855[32201] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 774.697182][T32205] loop6: detected capacity change from 0 to 2048 [ 774.740910][T32205] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 774.748578][T32199] Alternate GPT is invalid, using primary GPT. [ 774.759655][T32199] loop2: p1 p2 p3 [ 774.795213][T32205] 9pnet_fd: Insufficient options for proto=fd [ 774.865751][T32211] loop1: detected capacity change from 0 to 1024 [ 774.880151][T29144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 774.972138][T32221] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7861'. [ 774.994088][T32222] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7864'. [ 775.084760][T32225] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7862'. [ 775.228349][T32241] syz.4.7869[32241] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 775.228458][T32241] syz.4.7869[32241] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 775.266555][T32241] syz.4.7869[32241] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 775.300393][T32245] loop6: detected capacity change from 0 to 2048 [ 775.374239][T32253] team0: entered promiscuous mode [ 775.379491][T32253] team_slave_0: entered promiscuous mode [ 775.381481][T32245] loop6: p1 p2 p3 < > [ 775.385603][T32253] team_slave_1: entered promiscuous mode [ 775.389246][T32245] loop6: partition table partially beyond EOD, truncated [ 775.422938][T32252] team0: left promiscuous mode [ 775.427414][T32245] loop6: p1 size 33024 extends beyond EOD, truncated [ 775.427931][T32252] team_slave_0: left promiscuous mode [ 775.440117][T32252] team_slave_1: left promiscuous mode [ 775.446062][T32245] loop6: p2 start 16908804 is beyond EOD, truncated [ 775.452776][T32245] loop6: p3 start 4284289 is beyond EOD, truncated [ 775.484243][ T3021] loop6: p1 p2 p3 < > [ 775.488384][ T3021] loop6: partition table partially beyond EOD, truncated [ 775.516233][ T3021] loop6: p1 size 33024 extends beyond EOD, truncated [ 775.523146][T32254] loop2: detected capacity change from 0 to 8192 [ 775.527446][T32243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 775.548169][T32243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 775.556914][ T3021] loop6: p2 start 16908804 is beyond EOD, truncated [ 775.563627][ T3021] loop6: p3 start 4284289 is beyond EOD, truncated [ 775.625756][T22547] udevd[22547]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 775.713271][T32263] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7876'. [ 775.851853][T32265] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7877'. [ 776.061178][T32270] netlink: 'syz.4.7879': attribute type 2 has an invalid length. [ 776.068985][T32270] netlink: 'syz.4.7879': attribute type 8 has an invalid length. [ 776.076744][T32270] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7879'. [ 776.084982][T32268] loop6: detected capacity change from 0 to 8192 [ 776.089734][T32270] netlink: 'syz.4.7879': attribute type 39 has an invalid length. [ 776.103967][T32268] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 776.303463][T32280] loop4: detected capacity change from 0 to 2048 [ 776.346879][T32280] loop4: p1 p2 p3 < > [ 776.350579][T32288] loop2: detected capacity change from 0 to 1024 [ 776.350989][T32280] loop4: partition table partially beyond EOD, truncated [ 776.365502][T32280] loop4: p1 size 33024 extends beyond EOD, truncated [ 776.385863][T32280] loop4: p2 start 16908804 is beyond EOD, truncated [ 776.392569][T32280] loop4: p3 start 4284289 is beyond EOD, truncated [ 776.415373][ T29] kauditd_printk_skb: 488 callbacks suppressed [ 776.415435][ T29] audit: type=1326 audit(1732341909.193:31940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32287 comm="syz.2.7888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b752e819 code=0x7ffc0000 [ 776.483504][ T29] audit: type=1326 audit(1732341909.193:31941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32287 comm="syz.2.7888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f14b752e819 code=0x7ffc0000 [ 776.507416][ T29] audit: type=1326 audit(1732341909.193:31942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32287 comm="syz.2.7888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b752e819 code=0x7ffc0000 [ 776.531294][ T29] audit: type=1326 audit(1732341909.193:31943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32287 comm="syz.2.7888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f14b752e819 code=0x7ffc0000 [ 776.554852][ T29] audit: type=1326 audit(1732341909.193:31944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32287 comm="syz.2.7888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b752e819 code=0x7ffc0000 [ 776.578517][ T29] audit: type=1326 audit(1732341909.193:31945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32287 comm="syz.2.7888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f14b752e819 code=0x7ffc0000 [ 776.586389][T32293] loop1: detected capacity change from 0 to 512 [ 776.602148][ T29] audit: type=1326 audit(1732341909.193:31946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32287 comm="syz.2.7888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b752e819 code=0x7ffc0000 [ 776.632170][ T29] audit: type=1326 audit(1732341909.193:31947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32287 comm="syz.2.7888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b752e819 code=0x7ffc0000 [ 776.639026][T32295] FAULT_INJECTION: forcing a failure. [ 776.639026][T32295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 776.655916][ T29] audit: type=1326 audit(1732341909.193:31948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32287 comm="syz.2.7888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f14b752e819 code=0x7ffc0000 [ 776.669032][T32295] CPU: 1 UID: 0 PID: 32295 Comm: syz.2.7891 Tainted: G W 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 776.692449][ T29] audit: type=1326 audit(1732341909.193:31949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32287 comm="syz.2.7888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b752e819 code=0x7ffc0000 [ 776.704281][T32295] Tainted: [W]=WARN [ 776.731784][T32295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 776.741856][T32295] Call Trace: [ 776.745145][T32295] [ 776.748107][T32295] dump_stack_lvl+0xf2/0x150 [ 776.752795][T32295] dump_stack+0x15/0x20 [ 776.757009][T32295] should_fail_ex+0x223/0x230 [ 776.761725][T32295] should_fail+0xb/0x10 [ 776.765966][T32295] should_fail_usercopy+0x1a/0x20 [ 776.771029][T32295] _copy_from_iter+0xd5/0xd00 [ 776.775790][T32295] ? kmalloc_reserve+0x16e/0x190 [ 776.780806][T32295] ? __build_skb_around+0x196/0x1f0 [ 776.786036][T32295] ? __alloc_skb+0x21f/0x310 [ 776.790720][T32295] ? __virt_addr_valid+0x1ed/0x250 [ 776.795922][T32295] ? __check_object_size+0x364/0x520 [ 776.801288][T32295] netlink_sendmsg+0x460/0x6e0 [ 776.806086][T32295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 776.811440][T32295] __sock_sendmsg+0x140/0x180 [ 776.816139][T32295] __sys_sendto+0x1a8/0x230 [ 776.820723][T32295] __x64_sys_sendto+0x78/0x90 [ 776.824840][T32293] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 776.825460][T32295] x64_sys_call+0x29fa/0x2dc0 [ 776.836989][T32293] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 776.841676][T32295] do_syscall_64+0xc9/0x1c0 [ 776.841740][T32295] ? clear_bhb_loop+0x55/0xb0 [ 776.851815][T32293] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.7890: Corrupt directory, running e2fsck is recommended [ 776.856284][T32295] ? clear_bhb_loop+0x55/0xb0 [ 776.878535][T32295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.884457][T32295] RIP: 0033:0x7f14b752e819 [ 776.888908][T32295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 776.894718][T32293] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 776.908604][T32295] RSP: 002b:00007f14b5ba1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 776.908633][T32295] RAX: ffffffffffffffda RBX: 00007f14b76e5fa0 RCX: 00007f14b752e819 [ 776.927993][T32293] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.7890: corrupted in-inode xattr: invalid ea_ino [ 776.933165][T32295] RDX: 0000000000000078 RSI: 0000000020001480 RDI: 0000000000000003 [ 776.933184][T32295] RBP: 00007f14b5ba1090 R08: 0000000000000000 R09: 0000000000000000 [ 776.933198][T32295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 776.933216][T32295] R13: 0000000000000000 R14: 00007f14b76e5fa0 R15: 00007fff3ad76b98 [ 776.978575][T32295] [ 776.995722][T32293] EXT4-fs (loop1): Remounting filesystem read-only [ 777.003722][T32293] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 777.035785][T32293] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 777.042965][T32293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 777.100451][T32303] loop2: detected capacity change from 0 to 128 [ 777.131585][T32304] loop6: detected capacity change from 0 to 512 [ 777.153428][T32303] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 777.204394][T32301] loop4: detected capacity change from 0 to 8192 [ 777.216076][T32304] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 777.227788][T32304] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 777.237896][T32304] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.7893: Corrupt directory, running e2fsck is recommended [ 777.262153][T32303] ext4 filesystem being mounted at /484/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 777.291742][T32304] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 777.300244][T32304] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.7893: corrupted in-inode xattr: invalid ea_ino [ 777.324017][T32304] EXT4-fs (loop6): Remounting filesystem read-only [ 777.353847][T32304] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 777.400598][T22937] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 777.416610][T32304] SELinux: (dev loop6, type ext4) getxattr errno 5 [ 777.424127][T32304] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 777.453013][T32311] loop4: detected capacity change from 0 to 2048 [ 778.477846][T32322] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.582783][T32311] loop4: p1 p2 p3 < > [ 778.587179][T32311] loop4: partition table partially beyond EOD, truncated [ 778.608576][T32311] loop4: p1 size 33024 extends beyond EOD, truncated [ 778.619339][T32311] loop4: p2 start 16908804 is beyond EOD, truncated [ 778.625977][T32311] loop4: p3 start 4284289 is beyond EOD, truncated [ 778.732942][ T3021] loop4: p1 p2 p3 < > [ 778.737138][ T3021] loop4: partition table partially beyond EOD, truncated [ 778.746690][ T3021] loop4: p1 size 33024 extends beyond EOD, truncated [ 778.766697][ T3021] loop4: p2 start 16908804 is beyond EOD, truncated [ 778.773368][ T3021] loop4: p3 start 4284289 is beyond EOD, truncated [ 778.818402][T32331] loop2: detected capacity change from 0 to 2048 [ 778.837675][T22547] udevd[22547]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 778.854014][T32322] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.935343][ T5212] loop2: p1 p2 p3 < > [ 778.939557][ T5212] loop2: partition table partially beyond EOD, truncated [ 778.950360][ T5212] loop2: p1 size 33024 extends beyond EOD, truncated [ 778.972577][T22547] udevd[22547]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 778.997976][ T5212] loop2: p2 start 16908804 is beyond EOD, truncated [ 779.004624][ T5212] loop2: p3 start 4284289 is beyond EOD, truncated [ 779.095471][ C1] net_ratelimit: 10 callbacks suppressed [ 779.095494][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 779.886527][T32346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7909'. [ 780.245231][T32368] loop6: detected capacity change from 0 to 2048 [ 780.326552][T32331] loop2: p1 p2 p3 < > [ 780.330665][T32331] loop2: partition table partially beyond EOD, truncated [ 780.349707][T32331] loop2: p1 size 33024 extends beyond EOD, truncated [ 780.356682][T32368] loop6: p1 p2 p3 < > [ 780.360768][T32368] loop6: partition table partially beyond EOD, truncated [ 780.374568][T32368] loop6: p1 size 33024 extends beyond EOD, truncated [ 780.382470][T32322] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.399875][T32368] loop6: p2 start 16908804 is beyond EOD, truncated [ 780.406537][T32368] loop6: p3 start 4284289 is beyond EOD, truncated [ 780.416578][T32331] loop2: p2 start 16908804 is beyond EOD, truncated [ 780.423264][T32331] loop2: p3 start 4284289 is beyond EOD, truncated [ 780.425071][T32374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7921'. [ 780.466025][ T3021] loop6: p1 p2 p3 < > [ 780.470238][ T3021] loop6: partition table partially beyond EOD, truncated [ 780.482973][ T3021] loop6: p1 size 33024 extends beyond EOD, truncated [ 780.498300][ T3021] loop6: p2 start 16908804 is beyond EOD, truncated [ 780.500996][T32372] loop4: detected capacity change from 0 to 1024 [ 780.505005][ T3021] loop6: p3 start 4284289 is beyond EOD, truncated [ 780.522352][T32372] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 780.569706][T32372] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 780.582657][T32372] EXT4-fs (loop4): orphan cleanup on readonly fs [ 780.593917][T32372] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 780.608647][T32372] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 780.619479][T32372] EXT4-fs error (device loop4): ext4_free_blocks:6589: comm syz.4.7920: Freeing blocks not in datazone - block = 0, count = 4096 [ 780.638247][T22547] udevd[22547]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 780.657058][T32372] EXT4-fs (loop4): 1 orphan inode deleted [ 780.663398][T32372] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 780.679047][ T5208] udevd[5208]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 780.694912][T32322] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.708506][T22547] udevd[22547]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 780.735443][ T5208] udevd[5208]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 780.790444][T32322] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.823327][T32322] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.851894][T32322] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.862629][T25544] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.881834][T32322] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.076043][T32405] syz.4.7932[32405] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 781.076150][T32405] syz.4.7932[32405] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 781.123000][T32405] syz.4.7932[32405] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 781.165719][T32401] loop6: detected capacity change from 0 to 8192 [ 781.190277][T32408] loop5: detected capacity change from 0 to 2048 [ 781.255793][T32410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7934'. [ 781.256786][T32408] loop5: p1 p2 p3 < > [ 781.269383][T32408] loop5: partition table partially beyond EOD, truncated [ 781.311042][T32408] loop5: p1 size 33024 extends beyond EOD, truncated [ 781.318680][T32408] loop5: p2 start 16908804 is beyond EOD, truncated [ 781.325307][T32408] loop5: p3 start 4284289 is beyond EOD, truncated [ 781.504305][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 781.504319][ T29] audit: type=1326 audit(1732341914.283:32063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32415 comm="syz.4.7937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2557e819 code=0x7ffc0000 [ 781.542940][ T29] audit: type=1326 audit(1732341914.323:32064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32415 comm="syz.4.7937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2557e819 code=0x7ffc0000 [ 781.566814][ T29] audit: type=1326 audit(1732341914.323:32065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32415 comm="syz.4.7937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac2557e819 code=0x7ffc0000 [ 781.590495][ T29] audit: type=1326 audit(1732341914.323:32066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32415 comm="syz.4.7937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2557e819 code=0x7ffc0000 [ 781.614224][ T29] audit: type=1326 audit(1732341914.323:32067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32415 comm="syz.4.7937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2557e819 code=0x7ffc0000 [ 781.637950][ T29] audit: type=1326 audit(1732341914.353:32068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32415 comm="syz.4.7937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac2557e819 code=0x7ffc0000 [ 781.661777][ T29] audit: type=1326 audit(1732341914.353:32069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32415 comm="syz.4.7937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2557e819 code=0x7ffc0000 [ 781.685382][ T29] audit: type=1326 audit(1732341914.353:32070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32415 comm="syz.4.7937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2557e819 code=0x7ffc0000 [ 781.709038][ T29] audit: type=1326 audit(1732341914.353:32071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32415 comm="syz.4.7937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac2557e819 code=0x7ffc0000 [ 781.732648][ T29] audit: type=1326 audit(1732341914.353:32072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32415 comm="syz.4.7937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2557e819 code=0x7ffc0000 [ 782.384651][T32442] loop6: detected capacity change from 0 to 2048 [ 782.399969][T32440] loop1: detected capacity change from 0 to 8192 [ 782.429201][T32440] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 782.450677][T32442] loop6: p1 p2 p3 < > [ 782.454885][T32442] loop6: partition table partially beyond EOD, truncated [ 782.473796][T32442] loop6: p1 size 33024 extends beyond EOD, truncated [ 782.491432][T32442] loop6: p2 start 16908804 is beyond EOD, truncated [ 782.498193][T32442] loop6: p3 start 4284289 is beyond EOD, truncated [ 782.611538][T22547] udevd[22547]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 782.691105][T22547] udevd[22547]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 782.884960][T32465] loop1: detected capacity change from 0 to 8192 [ 783.359601][T32485] loop4: detected capacity change from 0 to 1024 [ 783.469429][T32487] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7964'. [ 783.563831][T32491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7966'. [ 783.625975][T32493] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 783.778551][T32500] loop4: detected capacity change from 0 to 512 [ 783.943074][T32500] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 783.954666][T32500] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 783.964901][T32500] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.7969: Corrupt directory, running e2fsck is recommended [ 783.982164][T32512] loop1: detected capacity change from 0 to 512 [ 784.003379][T32500] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 784.047029][T32512] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 784.058741][T32512] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 784.068869][T32512] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.7971: Corrupt directory, running e2fsck is recommended [ 784.098334][T32500] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.7969: corrupted in-inode xattr: invalid ea_ino [ 784.244906][T32500] EXT4-fs (loop4): Remounting filesystem read-only [ 784.258394][T32512] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 784.295919][T32500] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 784.310299][T32512] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.7971: corrupted in-inode xattr: invalid ea_ino [ 784.374779][T32512] EXT4-fs (loop1): Remounting filesystem read-only [ 784.395823][T32512] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 784.419614][T32500] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 784.423350][T32512] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 784.458921][T32512] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.479559][T32500] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.551515][T32506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.566655][T32506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.694988][T32532] loop5: detected capacity change from 0 to 1024 [ 784.912741][T32536] loop4: detected capacity change from 0 to 2048 [ 785.370696][T32536] loop4: p1 p2 p3 < > [ 785.374868][T32536] loop4: partition table partially beyond EOD, truncated [ 785.387322][T32557] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 785.427208][T32558] loop1: detected capacity change from 0 to 2048 [ 785.449515][T32536] loop4: p1 size 33024 extends beyond EOD, truncated [ 785.458402][T32536] loop4: p2 start 16908804 is beyond EOD, truncated [ 785.465076][T32536] loop4: p3 start 4284289 is beyond EOD, truncated [ 785.587702][T32564] loop2: detected capacity change from 0 to 8192 [ 786.357454][ T3021] loop4: p1 p2 p3 < > [ 786.361568][ T3021] loop4: partition table partially beyond EOD, truncated [ 786.378503][ T3021] loop4: p1 size 33024 extends beyond EOD, truncated [ 786.405721][ T3021] loop4: p2 start 16908804 is beyond EOD, truncated [ 786.412485][ T3021] loop4: p3 start 4284289 is beyond EOD, truncated [ 786.673064][T32585] loop6: detected capacity change from 0 to 512 [ 786.862881][T32585] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 786.874525][T32585] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 786.884669][T32585] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.7987: Corrupt directory, running e2fsck is recommended [ 787.079426][T32585] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 787.145505][T32585] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.7987: corrupted in-inode xattr: invalid ea_ino [ 787.301377][T32585] EXT4-fs (loop6): Remounting filesystem read-only [ 787.379598][T32585] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 787.542525][T32585] SELinux: (dev loop6, type ext4) getxattr errno 5 [ 787.594946][T32585] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.934494][T32617] loop1: detected capacity change from 0 to 1024 [ 788.005502][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 788.005519][ T29] audit: type=1400 audit(1732341920.783:32227): avc: denied { read } for pid=32621 comm="syz.4.7992" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 788.036566][ T29] audit: type=1400 audit(1732341920.783:32228): avc: denied { open } for pid=32621 comm="syz.4.7992" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 788.061554][ T29] audit: type=1400 audit(1732341920.783:32229): avc: denied { ioctl } for pid=32621 comm="syz.4.7992" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 788.480260][T32620] loop6: detected capacity change from 0 to 512 [ 789.227067][T32639] loop5: detected capacity change from 0 to 2048 [ 789.421937][T32620] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 789.433638][T32620] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 789.444064][T32620] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.7989: Corrupt directory, running e2fsck is recommended [ 789.501668][T32648] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 789.511088][ T29] audit: type=1326 audit(1732341922.253:32230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32638 comm="syz.5.7993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21acce819 code=0x7ffc0000 [ 789.512548][T32639] Alternate GPT is invalid, using primary GPT. [ 789.534916][ T29] audit: type=1326 audit(1732341922.253:32231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32638 comm="syz.5.7993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd21acce819 code=0x7ffc0000 [ 789.541179][T32639] loop5: p1 p2 p3 [ 789.546208][T32620] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 789.565174][ T29] audit: type=1326 audit(1732341922.253:32232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32638 comm="syz.5.7993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21acce819 code=0x7ffc0000 [ 789.602302][ T29] audit: type=1326 audit(1732341922.253:32233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32638 comm="syz.5.7993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd21acce819 code=0x7ffc0000 [ 789.616603][T32620] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.7989: corrupted in-inode xattr: invalid ea_ino [ 789.626032][ T29] audit: type=1326 audit(1732341922.253:32234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32638 comm="syz.5.7993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21acce819 code=0x7ffc0000 [ 789.653529][ T3021] Alternate GPT is invalid, using primary GPT. [ 789.662778][ T29] audit: type=1326 audit(1732341922.253:32235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32638 comm="syz.5.7993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd21acce819 code=0x7ffc0000 [ 789.669124][ T3021] loop5: p1 p2 p3 [ 789.696720][ T29] audit: type=1326 audit(1732341922.253:32236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32638 comm="syz.5.7993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21acce819 code=0x7ffc0000 [ 789.731684][T32620] EXT4-fs (loop6): Remounting filesystem read-only [ 789.765146][T32620] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 789.848788][T32620] SELinux: (dev loop6, type ext4) getxattr errno 5 [ 789.922234][T32620] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.945014][T22547] udevd[22547]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 789.973677][ T5208] udevd[5208]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 789.993921][ T5212] udevd[5212]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 790.151381][T32620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 790.163118][T32620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 790.279670][T32680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8007'. [ 790.394875][T32685] FAULT_INJECTION: forcing a failure. [ 790.394875][T32685] name failslab, interval 1, probability 0, space 0, times 0 [ 790.407556][T32685] CPU: 0 UID: 0 PID: 32685 Comm: syz.2.8010 Tainted: G W 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 790.419476][T32685] Tainted: [W]=WARN [ 790.423289][T32685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 790.433357][T32685] Call Trace: [ 790.436648][T32685] [ 790.439592][T32685] dump_stack_lvl+0xf2/0x150 [ 790.444250][T32685] dump_stack+0x15/0x20 [ 790.448481][T32685] should_fail_ex+0x223/0x230 [ 790.453179][T32685] ? skb_clone+0x154/0x1f0 [ 790.457620][T32685] should_failslab+0x8f/0xb0 [ 790.462229][T32685] kmem_cache_alloc_noprof+0x4c/0x290 [ 790.467660][T32685] skb_clone+0x154/0x1f0 [ 790.471993][T32685] packet_rcv+0x3a3/0x990 [ 790.476430][T32685] ? __pfx_packet_rcv+0x10/0x10 [ 790.481340][T32685] __netif_receive_skb_core+0x9e1/0x2400 [ 790.487032][T32685] ? __list_del_entry_valid_or_report+0x5f/0xf0 [ 790.493335][T32685] ? __rmqueue_pcplist+0xf7e/0x1110 [ 790.498579][T32685] ? _raw_spin_lock_irqsave+0x3c/0xb0 [ 790.503981][T32685] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 790.509910][T32685] ? get_partial_node+0x2b8/0x300 [ 790.515050][T32685] __netif_receive_skb_list_core+0x115/0x520 [ 790.521121][T32685] netif_receive_skb_list_internal+0x4e4/0x660 [ 790.527325][T32685] netif_receive_skb_list+0x31/0x230 [ 790.532647][T32685] bpf_test_run_xdp_live+0xe0d/0x1040 [ 790.538069][T32685] ? __pfx_autoremove_wake_function+0x10/0x10 [ 790.544277][T32685] ? bpf_dispatcher_change_prog+0x747/0x840 [ 790.550229][T32685] ? bpf_test_run_xdp_live+0x2b1/0x1040 [ 790.555899][T32685] bpf_prog_test_run_xdp+0x51d/0x8b0 [ 790.561229][T32685] ? __rcu_read_unlock+0x4e/0x70 [ 790.566243][T32685] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 790.572132][T32685] bpf_prog_test_run+0x20f/0x3a0 [ 790.577106][T32685] __sys_bpf+0x400/0x7a0 [ 790.581387][T32685] __x64_sys_bpf+0x43/0x50 [ 790.585888][T32685] x64_sys_call+0x2914/0x2dc0 [ 790.590615][T32685] do_syscall_64+0xc9/0x1c0 [ 790.595159][T32685] ? clear_bhb_loop+0x55/0xb0 [ 790.599920][T32685] ? clear_bhb_loop+0x55/0xb0 [ 790.604654][T32685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.610569][T32685] RIP: 0033:0x7f14b752e819 [ 790.615017][T32685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 790.631492][T32688] loop1: detected capacity change from 0 to 512 [ 790.634627][T32685] RSP: 002b:00007f14b5ba1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 790.649304][T32685] RAX: ffffffffffffffda RBX: 00007f14b76e5fa0 RCX: 00007f14b752e819 [ 790.657355][T32685] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 790.665396][T32685] RBP: 00007f14b5ba1090 R08: 0000000000000000 R09: 0000000000000000 [ 790.673394][T32685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 790.681381][T32685] R13: 0000000000000000 R14: 00007f14b76e5fa0 R15: 00007fff3ad76b98 [ 790.689374][T32685] [ 790.773781][T32688] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 790.785547][T32688] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 790.795884][T32688] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.8011: Corrupt directory, running e2fsck is recommended [ 790.812999][T32696] loop6: detected capacity change from 0 to 1024 [ 790.835141][T32688] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 790.881946][T32696] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 790.939054][T32696] xt_CT: You must specify a L4 protocol and not use inversions on it [ 790.985547][T32701] loop5: detected capacity change from 0 to 512 [ 791.037025][T32688] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.8011: corrupted in-inode xattr: invalid ea_ino [ 791.109281][T32688] EXT4-fs (loop1): Remounting filesystem read-only [ 791.139949][T32688] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 791.224134][T32688] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 791.264744][T32688] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.367256][T32712] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8018'. [ 791.376521][T32712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8018'. [ 791.390803][T32713] loop2: detected capacity change from 0 to 2048 [ 791.471416][T32701] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 791.483000][T32701] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 791.493203][T32701] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.8014: Corrupt directory, running e2fsck is recommended [ 791.508934][T32701] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 791.517299][T32701] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.8014: corrupted in-inode xattr: invalid ea_ino [ 791.531294][T32701] EXT4-fs (loop5): Remounting filesystem read-only [ 791.538324][T32701] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 791.552531][T32701] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 791.562111][T32701] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.643945][T29144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 792.210783][T32713] loop2: p1 p2 p3 < > [ 792.214896][T32713] loop2: partition table partially beyond EOD, truncated [ 792.222712][T32713] loop2: p1 size 33024 extends beyond EOD, truncated [ 792.234555][T32713] loop2: p2 start 16908804 is beyond EOD, truncated [ 792.241235][T32713] loop2: p3 start 4284289 is beyond EOD, truncated [ 792.273294][ T3021] loop2: p1 p2 p3 < > [ 792.277422][ T3021] loop2: partition table partially beyond EOD, truncated [ 792.311752][ T3021] loop2: p1 size 33024 extends beyond EOD, truncated [ 792.322220][ T3021] loop2: p2 start 16908804 is beyond EOD, truncated [ 792.329081][ T3021] loop2: p3 start 4284289 is beyond EOD, truncated [ 792.374518][T32729] FAULT_INJECTION: forcing a failure. [ 792.374518][T32729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 792.381883][T22547] udevd[22547]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 792.387758][T32729] CPU: 0 UID: 0 PID: 32729 Comm: syz.1.8024 Tainted: G W 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 792.409340][T32729] Tainted: [W]=WARN [ 792.413147][T32729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 792.423218][T32729] Call Trace: [ 792.426511][T32729] [ 792.429456][T32729] dump_stack_lvl+0xf2/0x150 [ 792.434066][T32729] dump_stack+0x15/0x20 [ 792.438331][T32729] should_fail_ex+0x223/0x230 [ 792.443047][T32729] should_fail+0xb/0x10 [ 792.447277][T32729] should_fail_usercopy+0x1a/0x20 [ 792.452409][T32729] _copy_from_iter+0xd5/0xd00 [ 792.457122][T32729] ? __rcu_read_unlock+0x4e/0x70 [ 792.462085][T32729] ? __rcu_read_unlock+0x4e/0x70 [ 792.467148][T32729] rawv6_sendmsg+0x75e/0xf50 [ 792.471846][T32729] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 792.476985][T32729] inet_sendmsg+0xc5/0xd0 [ 792.481349][T32729] __sock_sendmsg+0x102/0x180 [ 792.486049][T32729] __sys_sendto+0x1a8/0x230 [ 792.490645][T32729] __x64_sys_sendto+0x78/0x90 [ 792.495385][T32729] x64_sys_call+0x29fa/0x2dc0 [ 792.500089][T32729] do_syscall_64+0xc9/0x1c0 [ 792.504686][T32729] ? clear_bhb_loop+0x55/0xb0 [ 792.509550][T32729] ? clear_bhb_loop+0x55/0xb0 [ 792.514265][T32729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.520176][T32729] RIP: 0033:0x7fbdf398e819 [ 792.524611][T32729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 792.544257][T32729] RSP: 002b:00007fbdf2007038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 792.552715][T32729] RAX: ffffffffffffffda RBX: 00007fbdf3b45fa0 RCX: 00007fbdf398e819 [ 792.560707][T32729] RDX: 000000000000005f RSI: 0000000020000300 RDI: 0000000000000003 [ 792.568765][T32729] RBP: 00007fbdf2007090 R08: 0000000000000000 R09: 0000000000000000 [ 792.576767][T32729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 792.584763][T32729] R13: 0000000000000000 R14: 00007fbdf3b45fa0 R15: 00007ffe805ffcc8 [ 792.592901][T32729] [ 794.015594][T32736] loop1: detected capacity change from 0 to 2048 [ 794.050704][T22547] udevd[22547]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 794.136360][T32724] loop4: detected capacity change from 0 to 2048 [ 794.172503][T32736] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 794.206811][T32724] Alternate GPT is invalid, using primary GPT. [ 794.214001][T32724] loop4: p1 p2 p3 [ 794.232605][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 794.232676][ T29] audit: type=1326 audit(1732341927.013:32272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32742 comm="syz.5.8028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21acce819 code=0x7ffc0000 [ 794.262452][ T29] audit: type=1326 audit(1732341927.013:32273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32742 comm="syz.5.8028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21acce819 code=0x7ffc0000 [ 794.289142][ T29] audit: type=1326 audit(1732341927.063:32274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32742 comm="syz.5.8028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd21acce819 code=0x7ffc0000 [ 794.312848][ T29] audit: type=1326 audit(1732341927.063:32275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32742 comm="syz.5.8028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21acce819 code=0x7ffc0000 [ 794.336562][ T29] audit: type=1326 audit(1732341927.063:32276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32742 comm="syz.5.8028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21acce819 code=0x7ffc0000 [ 794.346762][T32746] EXT4-fs error (device loop1): ext4_lookup:1813: inode #15: comm syz.1.8026: iget: bad extra_isize 512 (inode size 256) [ 794.402040][ T29] audit: type=1326 audit(1732341927.173:32277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32748 comm="syz.5.8029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21acce819 code=0x7ffc0000 [ 794.425750][ T29] audit: type=1326 audit(1732341927.173:32278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32748 comm="syz.5.8029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21acce819 code=0x7ffc0000 [ 794.449584][ T29] audit: type=1326 audit(1732341927.173:32279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32748 comm="syz.5.8029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd21acce819 code=0x7ffc0000 [ 794.473654][ T29] audit: type=1326 audit(1732341927.173:32280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32748 comm="syz.5.8029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21acce819 code=0x7ffc0000 [ 794.485086][T32736] EXT4-fs error (device loop1): ext4_lookup:1813: inode #15: comm syz.1.8026: iget: bad extra_isize 512 (inode size 256) [ 794.497971][ T29] audit: type=1326 audit(1732341927.173:32281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32748 comm="syz.5.8029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd21acce819 code=0x7ffc0000 [ 794.600075][T32752] loop2: detected capacity change from 0 to 2048 [ 794.659944][T32752] loop2: p1 p2 p3 < > [ 794.664062][T32752] loop2: partition table partially beyond EOD, truncated [ 794.671641][T32752] loop2: p1 size 33024 extends beyond EOD, truncated [ 794.679517][T32752] loop2: p2 start 16908804 is beyond EOD, truncated [ 794.686244][T32752] loop2: p3 start 4284289 is beyond EOD, truncated [ 794.696609][ T3021] loop2: p1 p2 p3 < > [ 794.700729][ T3021] loop2: partition table partially beyond EOD, truncated [ 794.703897][T23913] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 794.746016][ T3021] loop2: p1 size 33024 extends beyond EOD, truncated [ 794.760199][ T3021] loop2: p2 start 16908804 is beyond EOD, truncated [ 794.767047][ T3021] loop2: p3 start 4284289 is beyond EOD, truncated [ 794.822819][T22547] udevd[22547]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 794.894055][ T303] loop2: detected capacity change from 0 to 512 [ 794.933786][ T301] loop5: detected capacity change from 0 to 512 [ 794.949062][ T301] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 794.960732][ T301] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 794.971275][ T301] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.8034: Corrupt directory, running e2fsck is recommended [ 795.004818][ T301] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 795.066357][ T303] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 795.078057][ T303] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 795.088367][ T303] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.8035: Corrupt directory, running e2fsck is recommended [ 795.118538][ T5208] udevd[5208]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 795.154471][ T301] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.8034: corrupted in-inode xattr: invalid ea_ino [ 795.198439][ T303] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 795.220507][ T301] EXT4-fs (loop5): Remounting filesystem read-only [ 795.222610][ T303] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.8035: corrupted in-inode xattr: invalid ea_ino [ 795.265911][ T301] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 795.280963][ T303] EXT4-fs (loop2): Remounting filesystem read-only [ 795.287642][ T301] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 795.305559][ T310] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 795.315206][ T303] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 795.329492][ T301] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 795.342590][ T303] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 795.369987][ T303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 795.735879][ T341] loop1: detected capacity change from 0 to 2048 [ 797.310668][ T341] loop1: p1 p2 p3 < > [ 797.314871][ T341] loop1: partition table partially beyond EOD, truncated [ 797.319151][ T349] loop6: detected capacity change from 0 to 1024 [ 797.326100][ T341] loop1: p1 size 33024 extends beyond EOD, truncated [ 797.337153][ T341] loop1: p2 start 16908804 is beyond EOD, truncated [ 797.343862][ T341] loop1: p3 start 4284289 is beyond EOD, truncated [ 797.457056][ T3021] loop1: p1 p2 p3 < > [ 797.461229][ T3021] loop1: partition table partially beyond EOD, truncated [ 797.468497][ T3021] loop1: p1 size 33024 extends beyond EOD, truncated [ 797.480674][ T3021] loop1: p2 start 16908804 is beyond EOD, truncated [ 797.486549][ T359] loop4: detected capacity change from 0 to 1024 [ 797.487319][ T3021] loop1: p3 start 4284289 is beyond EOD, truncated [ 797.503495][ T359] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 797.595050][T22547] udevd[22547]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 797.750203][ T371] loop1: detected capacity change from 0 to 512 [ 797.821193][ T5208] udevd[5208]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 797.944157][ T371] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 797.955822][ T371] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 797.965976][ T371] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.8054: Corrupt directory, running e2fsck is recommended [ 798.057866][ T371] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 798.093439][ T371] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.8054: corrupted in-inode xattr: invalid ea_ino [ 798.163188][ T371] EXT4-fs (loop1): Remounting filesystem read-only [ 798.237161][ T371] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 798.282948][ T371] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 798.303169][ T371] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 798.376762][ T405] loop5: detected capacity change from 0 to 2048 [ 798.409461][ T412] loop4: detected capacity change from 0 to 1024 [ 798.465301][ T405] Alternate GPT is invalid, using primary GPT. [ 798.471859][ T405] loop5: p1 p2 p3 [ 798.616763][ T419] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 798.809764][ T5368] udevd[5368]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 798.826792][ T7197] udevd[7197]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 798.846872][T22547] udevd[22547]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 799.908812][ T471] loop2: detected capacity change from 0 to 2048 [ 800.289457][ T471] loop2: p1 p2 p3 < > [ 800.293568][ T471] loop2: partition table partially beyond EOD, truncated [ 800.306583][ T471] loop2: p1 size 33024 extends beyond EOD, truncated [ 800.314020][ T471] loop2: p2 start 16908804 is beyond EOD, truncated [ 800.321137][ T471] loop2: p3 start 4284289 is beyond EOD, truncated [ 800.414578][ T494] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 800.431203][ T29] kauditd_printk_skb: 220 callbacks suppressed [ 800.431223][ T29] audit: type=1326 audit(1732341933.213:32502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=501 comm="syz.4.8083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2557e819 code=0x7ffc0000 [ 800.449714][ T500] loop5: detected capacity change from 0 to 2048 [ 800.460926][ T29] audit: type=1326 audit(1732341933.213:32503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=501 comm="syz.4.8083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2557e819 code=0x7ffc0000 [ 800.498879][ T29] audit: type=1326 audit(1732341933.213:32504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=501 comm="syz.4.8083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac2557e819 code=0x7ffc0000 [ 800.522581][ T29] audit: type=1326 audit(1732341933.213:32505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=501 comm="syz.4.8083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2557e819 code=0x7ffc0000 [ 800.546263][ T29] audit: type=1326 audit(1732341933.213:32506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=501 comm="syz.4.8083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2557e819 code=0x7ffc0000 [ 800.569891][ T29] audit: type=1326 audit(1732341933.213:32507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=501 comm="syz.4.8083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac2557e819 code=0x7ffc0000 [ 800.593623][ T29] audit: type=1326 audit(1732341933.213:32508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=501 comm="syz.4.8083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2557e819 code=0x7ffc0000 [ 800.617361][ T29] audit: type=1326 audit(1732341933.213:32509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=501 comm="syz.4.8083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fac2557e819 code=0x7ffc0000 [ 800.641111][ T29] audit: type=1326 audit(1732341933.213:32510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=501 comm="syz.4.8083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2557e819 code=0x7ffc0000 [ 800.672069][ T500] Alternate GPT is invalid, using primary GPT. [ 800.678616][ T500] loop5: p1 p2 p3 [ 800.683554][ T29] audit: type=1326 audit(1732341933.403:32511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=490 comm="syz.6.8079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c9c7e819 code=0x7ffc0000 [ 800.859629][ T523] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8089'. [ 800.933762][ T7197] udevd[7197]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 800.960018][ T5212] udevd[5212]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 800.980141][ T531] loop6: detected capacity change from 0 to 1024 [ 800.987630][ T5368] udevd[5368]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 801.008299][ T531] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 801.034644][ T531] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 801.100755][ T534] loop5: detected capacity change from 0 to 512 [ 801.184249][ T534] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 801.195846][ T534] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 801.206172][ T534] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.8092: Corrupt directory, running e2fsck is recommended [ 801.317184][ T534] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 801.336619][ T534] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.8092: corrupted in-inode xattr: invalid ea_ino [ 801.364205][ T545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8096'. [ 801.376163][ T534] EXT4-fs (loop5): Remounting filesystem read-only [ 801.383355][ T534] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 801.412077][ T534] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 801.443662][ T534] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 801.505061][ T534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 801.593406][ T534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 801.681024][ T554] loop4: detected capacity change from 0 to 512 [ 801.736157][ T554] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 801.749502][ T554] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 801.759718][ T554] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.8099: Corrupt directory, running e2fsck is recommended [ 801.812225][ T554] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 801.826562][T29144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 801.836195][ T554] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.8099: corrupted in-inode xattr: invalid ea_ino [ 801.883636][ T554] EXT4-fs (loop4): Remounting filesystem read-only [ 801.917420][ T554] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 801.941438][ T554] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 801.972955][ T554] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 802.005494][ T557] loop6: detected capacity change from 0 to 2048 [ 802.009367][ T559] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 802.089371][ T557] Alternate GPT is invalid, using primary GPT. [ 802.095679][ T557] loop6: p1 p2 p3 [ 802.266689][ T567] netlink: 300 bytes leftover after parsing attributes in process `syz.4.8104'. [ 802.400040][ T582] bridge0: port 3(syz_tun) entered blocking state [ 802.406631][ T582] bridge0: port 3(syz_tun) entered disabled state [ 802.419865][ T582] syz_tun: entered allmulticast mode [ 802.425807][ T582] syz_tun: entered promiscuous mode [ 804.022858][ T582] bridge0: port 3(syz_tun) entered blocking state [ 804.029506][ T582] bridge0: port 3(syz_tun) entered forwarding state [ 804.044339][ T596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8113'. [ 804.071006][ T585] loop2: detected capacity change from 0 to 8192 [ 804.199953][ T597] loop6: detected capacity change from 0 to 512 [ 804.232567][ T597] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 804.244432][ T597] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 804.254596][ T597] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.8112: Corrupt directory, running e2fsck is recommended [ 804.291443][ T613] loop4: detected capacity change from 0 to 2048 [ 804.297210][ T597] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 804.325178][ T615] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8120'. [ 804.348638][ T613] Alternate GPT is invalid, using primary GPT. [ 804.354962][ T613] loop4: p1 p2 p3 [ 804.362958][ T597] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.8112: corrupted in-inode xattr: invalid ea_ino [ 804.394032][ T597] EXT4-fs (loop6): Remounting filesystem read-only [ 804.401103][ T597] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 804.414406][ T597] SELinux: (dev loop6, type ext4) getxattr errno 5 [ 804.421669][ T597] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 804.585391][ T629] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=629 comm=syz.1.8127 [ 804.615457][ T5208] udevd[5208]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 804.622718][ T5212] udevd[5212]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 804.638543][T22547] udevd[22547]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 804.659796][ T634] xt_connbytes: Forcing CT accounting to be enabled [ 804.692332][ T634] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 804.710364][ T629] netlink: 'syz.1.8127': attribute type 1 has an invalid length. [ 804.719286][ T634] xt_bpf: check failed: parse error [ 804.967166][ T629] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 805.058655][ T651] loop6: detected capacity change from 0 to 8192 [ 805.410416][ T661] loop1: detected capacity change from 0 to 1024 [ 805.449860][ T661] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 805.483448][ T661] xt_CT: You must specify a L4 protocol and not use inversions on it [ 805.528700][ T665] loop4: detected capacity change from 0 to 2048 [ 805.605508][ T29] kauditd_printk_skb: 230 callbacks suppressed [ 805.605523][ T29] audit: type=1326 audit(1732341938.383:32742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=669 comm="syz.2.8137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b752e819 code=0x7ffc0000 [ 805.644317][ T29] audit: type=1326 audit(1732341938.423:32743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=669 comm="syz.2.8137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14b752e819 code=0x7ffc0000 [ 805.668414][ T29] audit: type=1326 audit(1732341938.423:32744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=669 comm="syz.2.8137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b752e819 code=0x7ffc0000 [ 805.692365][ T29] audit: type=1326 audit(1732341938.423:32745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=669 comm="syz.2.8137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b752e819 code=0x7ffc0000 [ 805.715940][ T29] audit: type=1326 audit(1732341938.423:32746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=669 comm="syz.2.8137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14b752e819 code=0x7ffc0000 [ 805.739417][ T29] audit: type=1326 audit(1732341938.423:32747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=669 comm="syz.2.8137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b752e819 code=0x7ffc0000 [ 805.762904][ T29] audit: type=1326 audit(1732341938.423:32748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=669 comm="syz.2.8137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b752e819 code=0x7ffc0000 [ 805.786415][ T29] audit: type=1326 audit(1732341938.423:32749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=669 comm="syz.2.8137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14b752e819 code=0x7ffc0000 [ 805.809836][ T29] audit: type=1326 audit(1732341938.423:32750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=669 comm="syz.2.8137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b752e819 code=0x7ffc0000 [ 805.833271][ T29] audit: type=1326 audit(1732341938.423:32751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=669 comm="syz.2.8137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f14b752e819 code=0x7ffc0000 [ 805.948201][T23913] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 806.190042][ T675] syz.2.8139[675] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 806.190110][ T675] syz.2.8139[675] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 806.204736][ T675] syz.2.8139[675] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 806.209718][ T665] Alternate GPT is invalid, using primary GPT. [ 806.233836][ T665] loop4: p1 p2 p3 [ 806.257750][ T677] loop1: detected capacity change from 0 to 2048 [ 806.306928][ T677] loop1: p1 p2 p3 < > [ 806.311102][ T677] loop1: partition table partially beyond EOD, truncated [ 806.351710][ T677] loop1: p1 size 33024 extends beyond EOD, truncated [ 806.364025][ T5212] udevd[5212]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 806.376177][T22547] udevd[22547]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 806.388008][ T5208] udevd[5208]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 806.396070][ T677] loop1: p2 start 16908804 is beyond EOD, truncated [ 806.404392][ T677] loop1: p3 start 4284289 is beyond EOD, truncated [ 806.491737][ T3021] loop1: p1 p2 p3 < > [ 806.495881][ T3021] loop1: partition table partially beyond EOD, truncated [ 806.516366][ T3021] loop1: p1 size 33024 extends beyond EOD, truncated [ 806.548449][ T3021] loop1: p2 start 16908804 is beyond EOD, truncated [ 806.550382][ T695] loop5: detected capacity change from 0 to 512 [ 806.555094][ T3021] loop1: p3 start 4284289 is beyond EOD, truncated [ 806.608008][ T695] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 806.623997][ T708] loop2: detected capacity change from 0 to 1024 [ 806.624212][ T706] loop4: detected capacity change from 0 to 2048 [ 806.652415][ T695] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.8148: bad orphan inode 131083 [ 806.673275][ T708] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 806.734745][ T708] xt_CT: You must specify a L4 protocol and not use inversions on it [ 806.757956][ T695] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 806.770163][ T706] loop4: p1 p2 p3 < > [ 806.774232][ T706] loop4: partition table partially beyond EOD, truncated [ 806.794623][T22547] udevd[22547]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 806.816912][ T706] loop4: p1 size 33024 extends beyond EOD, truncated [ 806.853867][ T706] loop4: p2 start 16908804 is beyond EOD, truncated [ 806.861442][ T706] loop4: p3 start 4284289 is beyond EOD, truncated [ 806.891855][ T5208] udevd[5208]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 806.989982][ T717] loop1: detected capacity change from 0 to 2048 [ 806.992311][T26777] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 807.069401][ T717] Alternate GPT is invalid, using primary GPT. [ 807.075708][ T717] loop1: p1 p2 p3 [ 807.084303][T22937] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 807.090446][ T721] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8155'. [ 807.239580][ T5208] udevd[5208]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 807.250426][T22547] udevd[22547]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 807.253076][ T5212] udevd[5212]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 807.269982][ T726] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 807.443862][ T736] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 807.678835][ T757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8168'. [ 807.693405][ T754] loop1: detected capacity change from 0 to 2048 [ 807.746122][ T755] loop2: detected capacity change from 0 to 2048 [ 807.776330][ T754] loop1: p2 < > p4 [ 807.822875][ T754] loop1: p4 size 8192 extends beyond EOD, truncated [ 807.854553][ T755] Alternate GPT is invalid, using primary GPT. [ 807.861169][ T755] loop2: p1 p2 p3 [ 807.914476][ T773] loop4: detected capacity change from 0 to 512 [ 807.943077][ T5208] udevd[5208]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 807.944978][T22547] udevd[22547]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 808.106086][ T773] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 808.117787][ T773] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 808.127972][ T773] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.8172: Corrupt directory, running e2fsck is recommended [ 808.415019][ T773] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 808.486612][ T773] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.8172: corrupted in-inode xattr: invalid ea_ino [ 808.510643][ T798] netlink: 300 bytes leftover after parsing attributes in process `syz.6.8180'. [ 808.639648][ T773] EXT4-fs (loop4): Remounting filesystem read-only [ 808.657120][ T773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 808.670597][ T773] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 808.681519][ T773] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.785952][ T823] loop2: detected capacity change from 0 to 2048 [ 808.874181][ T823] loop2: p1 p2 p3 < > [ 808.878540][ T823] loop2: partition table partially beyond EOD, truncated [ 808.890146][ T823] loop2: p1 size 33024 extends beyond EOD, truncated [ 808.899517][ T831] syz.1.8190[831] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 808.899567][ T831] syz.1.8190[831] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 809.000986][ T823] loop2: p2 start 16908804 is beyond EOD, truncated [ 809.018931][ T823] loop2: p3 start 4284289 is beyond EOD, truncated [ 809.172753][ T831] syz.1.8190[831] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 809.314024][ T843] netlink: 300 bytes leftover after parsing attributes in process `syz.2.8195'. [ 809.342198][ T842] loop1: detected capacity change from 0 to 512 [ 809.460450][ T842] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 809.677420][ T859] batadv_slave_1: entered promiscuous mode [ 810.088778][ T842] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.8194: bad orphan inode 131083 [ 810.319762][ T855] batadv_slave_1: left promiscuous mode [ 810.361058][ T842] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 810.453234][T23913] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.510926][ T880] syz.5.8206[880] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 810.511096][ T880] syz.5.8206[880] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 810.564326][ T880] syz.5.8206[880] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 810.584186][ T883] netlink: 300 bytes leftover after parsing attributes in process `syz.4.8208'. [ 810.664407][ T887] loop1: detected capacity change from 0 to 2048 [ 810.665491][ T888] loop6: detected capacity change from 0 to 512 [ 810.699107][ T887] Alternate GPT is invalid, using primary GPT. [ 810.705411][ T887] loop1: p1 p2 p3 [ 810.725065][ T888] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 810.736672][ T888] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 810.746935][ T888] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.8209: Corrupt directory, running e2fsck is recommended [ 810.803490][ T888] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 810.857176][ T29] kauditd_printk_skb: 396 callbacks suppressed [ 810.857192][ T29] audit: type=1326 audit(1732341943.633:33148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=886 comm="syz.1.8210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdf398e819 code=0x7ffc0000 [ 810.906486][ T888] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.8209: corrupted in-inode xattr: invalid ea_ino [ 810.911755][ T903] loop4: detected capacity change from 0 to 512 [ 810.947750][ T29] audit: type=1326 audit(1732341943.683:33149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=886 comm="syz.1.8210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbdf398e819 code=0x7ffc0000 [ 810.971744][ T29] audit: type=1326 audit(1732341943.683:33150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=886 comm="syz.1.8210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdf398e819 code=0x7ffc0000 [ 810.993441][ T903] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 810.995443][ T29] audit: type=1326 audit(1732341943.683:33151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=886 comm="syz.1.8210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdf398e819 code=0x7ffc0000 [ 811.028577][ T29] audit: type=1326 audit(1732341943.693:33152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=886 comm="syz.1.8210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbdf398e819 code=0x7ffc0000 [ 811.037191][ T903] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.8215: bad orphan inode 131083 [ 811.052215][ T29] audit: type=1326 audit(1732341943.693:33153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=886 comm="syz.1.8210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdf398e819 code=0x7ffc0000 [ 811.076651][ T888] EXT4-fs (loop6): Remounting filesystem read-only [ 811.086157][ T29] audit: type=1326 audit(1732341943.693:33154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=886 comm="syz.1.8210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdf398e819 code=0x7ffc0000 [ 811.092899][ T888] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 811.115817][ T29] audit: type=1326 audit(1732341943.693:33155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=886 comm="syz.1.8210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbdf398e819 code=0x7ffc0000 [ 811.128262][ T888] SELinux: (dev loop6, type ext4) getxattr errno 5 [ 811.151880][ T29] audit: type=1326 audit(1732341943.693:33156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=886 comm="syz.1.8210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdf398e819 code=0x7ffc0000 [ 811.158705][ T888] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 811.181550][ T29] audit: type=1326 audit(1732341943.693:33157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=886 comm="syz.1.8210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fbdf398e819 code=0x7ffc0000 [ 811.206479][ T903] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 811.322819][T25544] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 811.430557][ T922] syz.6.8222[922] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 811.430694][ T922] syz.6.8222[922] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 811.479617][ T923] loop2: detected capacity change from 0 to 512 [ 811.504642][ T922] syz.6.8222[922] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 811.787770][ T934] loop6: detected capacity change from 0 to 512 [ 812.400471][ T927] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 812.534905][ T923] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 812.555716][ T923] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 812.565884][ T923] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.8221: Corrupt directory, running e2fsck is recommended [ 812.587914][ T934] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 812.599497][ T934] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 812.609681][ T934] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.8226: Corrupt directory, running e2fsck is recommended [ 812.636391][ T923] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 812.646131][ T934] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 812.657943][ T934] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.8226: corrupted in-inode xattr: invalid ea_ino [ 812.674047][ T923] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.8221: corrupted in-inode xattr: invalid ea_ino [ 812.691729][ T934] EXT4-fs (loop6): Remounting filesystem read-only [ 812.698646][ T923] EXT4-fs (loop2): Remounting filesystem read-only [ 812.705794][ T934] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 812.721962][ T923] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 812.738074][ T934] SELinux: (dev loop6, type ext4) getxattr errno 5 [ 812.744842][ T923] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 812.757338][ T934] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.772669][ T923] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.975822][ T942] loop1: detected capacity change from 0 to 2048 [ 812.994586][ T944] loop5: detected capacity change from 0 to 2048 [ 813.042295][ T949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8232'. [ 813.114716][ T944] Alternate GPT is invalid, using primary GPT. [ 813.121367][ T944] loop5: p1 p2 p3 [ 813.127255][ T942] Alternate GPT is invalid, using primary GPT. [ 813.133561][ T942] loop1: p1 p2 p3 [ 813.221271][ T955] loop2: detected capacity change from 0 to 2048 [ 813.321878][ T3021] Alternate GPT is invalid, using primary GPT. [ 813.328217][ T3021] loop1: p1 p2 p3 [ 813.442041][ T3021] loop2: p1 p2 p3 < > [ 813.446224][ T3021] loop2: partition table partially beyond EOD, truncated [ 813.484951][ T3021] loop2: p1 size 33024 extends beyond EOD, truncated [ 813.516688][ T3021] loop2: p2 start 16908804 is beyond EOD, truncated [ 813.523415][ T3021] loop2: p3 start 4284289 is beyond EOD, truncated [ 815.041281][ T968] loop4: detected capacity change from 0 to 512 [ 815.059417][ T968] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 815.071032][ T968] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 815.081162][ T968] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.8240: Corrupt directory, running e2fsck is recommended [ 815.149047][ T968] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 815.169881][ T968] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.8240: corrupted in-inode xattr: invalid ea_ino [ 815.188843][ T958] team0 (unregistering): Port device team_slave_0 removed [ 815.199940][ T968] EXT4-fs (loop4): Remounting filesystem read-only [ 815.200941][ T3021] loop2: p1 p2 p3 < > [ 815.207098][ T968] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 815.210581][ T3021] loop2: partition table partially beyond EOD, truncated [ 815.223172][ T968] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 815.240183][ T968] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.249540][ T3021] loop2: p1 size 33024 extends beyond EOD, truncated [ 815.257181][ T3021] loop2: p2 start 16908804 is beyond EOD, truncated [ 815.263871][ T3021] loop2: p3 start 4284289 is beyond EOD, truncated [ 815.271284][ T958] team0 (unregistering): Port device team_slave_1 removed [ 815.282812][ T955] loop2: p1 p2 p3 < > [ 815.287170][ T955] loop2: partition table partially beyond EOD, truncated [ 815.294869][ T955] loop2: p1 size 33024 extends beyond EOD, truncated [ 815.325031][ T955] loop2: p2 start 16908804 is beyond EOD, truncated [ 815.331745][ T955] loop2: p3 start 4284289 is beyond EOD, truncated [ 815.418933][T22547] udevd[22547]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 815.466810][ T5208] udevd[5208]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 815.568801][ T7197] udevd[7197]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 815.604429][T22541] udevd[22541]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 815.619024][ T5212] udevd[5212]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 815.629420][ T7197] udevd[7197]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 815.671815][ T5208] udevd[5208]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 815.710727][ T5208] udevd[5208]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 815.752676][ T975] loop4: detected capacity change from 0 to 2048 [ 815.905073][ T976] loop2: detected capacity change from 0 to 512 [ 815.971965][ T986] bridge0: port 3(syz_tun) entered blocking state [ 815.978631][ T986] bridge0: port 3(syz_tun) entered disabled state [ 816.011243][ T986] syz_tun: entered allmulticast mode [ 816.032423][ T986] syz_tun: entered promiscuous mode [ 816.059601][ T986] bridge0: port 3(syz_tun) entered blocking state [ 816.066079][ T986] bridge0: port 3(syz_tun) entered forwarding state [ 816.073281][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 816.073295][ T29] audit: type=1326 audit(1732341948.773:33283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=974 comm="syz.4.8246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2557e819 code=0x7ffc0000 [ 816.102980][ T29] audit: type=1326 audit(1732341948.773:33284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=974 comm="syz.4.8246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac2557e819 code=0x7ffc0000 [ 816.126482][ T29] audit: type=1326 audit(1732341948.773:33285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=974 comm="syz.4.8246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2557e819 code=0x7ffc0000 [ 816.150069][ T29] audit: type=1326 audit(1732341948.773:33286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=974 comm="syz.4.8246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fac2557e819 code=0x7ffc0000 [ 816.173583][ T29] audit: type=1326 audit(1732341948.773:33287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=974 comm="syz.4.8246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2557e819 code=0x7ffc0000 [ 816.197031][ T29] audit: type=1326 audit(1732341948.773:33288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=974 comm="syz.4.8246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac2557e819 code=0x7ffc0000 [ 816.220714][ T29] audit: type=1326 audit(1732341948.773:33289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=974 comm="syz.4.8246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2557e819 code=0x7ffc0000 [ 816.244150][ T29] audit: type=1326 audit(1732341948.773:33290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=974 comm="syz.4.8246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fac2557e819 code=0x7ffc0000 [ 816.267718][ T29] audit: type=1326 audit(1732341948.773:33291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=974 comm="syz.4.8246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2557e819 code=0x7ffc0000 [ 816.291413][ T29] audit: type=1326 audit(1732341948.773:33292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=974 comm="syz.4.8246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fac2557e819 code=0x7ffc0000 [ 816.349826][ T989] loop1: detected capacity change from 0 to 512 [ 816.572968][ T976] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 816.584560][ T976] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 816.594689][ T976] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.8243: Corrupt directory, running e2fsck is recommended [ 816.613129][ T976] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 816.622859][ T976] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.8243: corrupted in-inode xattr: invalid ea_ino [ 816.640925][ T976] EXT4-fs (loop2): Remounting filesystem read-only [ 816.649528][ T976] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 816.664822][ T976] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 816.691358][ T989] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 816.703016][ T989] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 816.713259][ T989] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.8249: Corrupt directory, running e2fsck is recommended [ 816.735117][ T989] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 816.744106][ T989] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.8249: corrupted in-inode xattr: invalid ea_ino [ 816.761910][ T989] EXT4-fs (loop1): Remounting filesystem read-only [ 816.769696][ T976] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 816.782881][ T989] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 816.805238][ T5368] Alternate GPT is invalid, using primary GPT. [ 816.811591][ T5368] loop4: p1 p2 p3 [ 816.845322][ T989] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 816.860555][ T989] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 816.994485][ T1001] loop5: detected capacity change from 0 to 2048 [ 817.137262][ T1001] loop5: p1 p2 p3 < > [ 817.141389][ T1001] loop5: partition table partially beyond EOD, truncated [ 817.186768][ T1001] loop5: p1 size 33024 extends beyond EOD, truncated [ 817.196555][ T1001] loop5: p2 start 16908804 is beyond EOD, truncated [ 817.203184][ T1001] loop5: p3 start 4284289 is beyond EOD, truncated [ 817.331846][ T7197] udevd[7197]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 817.347611][ T5208] udevd[5208]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 817.441531][ T1015] netlink: 300 bytes leftover after parsing attributes in process `syz.1.8260'. [ 817.453735][ T1006] loop4: detected capacity change from 0 to 2048 [ 817.473883][ T1016] loop5: detected capacity change from 0 to 512 [ 817.518600][ T1018] loop6: detected capacity change from 0 to 2048 [ 819.218665][ T1006] Alternate GPT is invalid, using primary GPT. [ 819.224960][ T1006] loop4: p1 p2 p3 [ 819.287735][ T1018] loop6: p1 p2 p3 < > [ 819.289561][ T1016] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 819.291839][ T1018] loop6: partition table partially beyond EOD, [ 819.303281][ T1016] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 819.309578][ T1018] truncated [ 819.319672][ T1016] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.8257: Corrupt directory, running e2fsck is recommended [ 819.322850][ T1018] loop6: p1 size 33024 extends beyond EOD, truncated [ 819.344617][ T1016] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 819.353369][ T1016] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.8257: corrupted in-inode xattr: invalid ea_ino [ 819.368242][ T1016] EXT4-fs (loop5): Remounting filesystem read-only [ 819.375343][ T1018] loop6: p2 start 16908804 is beyond EOD, truncated [ 819.382252][ T1018] loop6: p3 start 4284289 is beyond EOD, truncated [ 819.456362][ T1016] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 819.540888][ T1016] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 819.643369][ T1016] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 819.772129][ T1034] loop4: detected capacity change from 0 to 512 [ 819.912543][ T1034] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 819.924206][ T1034] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 819.934486][ T1034] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.8265: Corrupt directory, running e2fsck is recommended [ 819.974185][ T1041] loop1: detected capacity change from 0 to 2048 [ 819.981822][ T1034] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 819.990331][ T1034] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.8265: corrupted in-inode xattr: invalid ea_ino [ 820.099293][ T1034] EXT4-fs (loop4): Remounting filesystem read-only [ 820.106389][ T1034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 820.131681][ T1041] Alternate GPT is invalid, using primary GPT. [ 820.138194][ T1041] loop1: p1 p2 p3 [ 820.168984][ T1034] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 820.180147][ T3021] Alternate GPT is invalid, using primary GPT. [ 820.186468][ T3021] loop1: p1 p2 p3 [ 820.191484][ T1034] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 820.434726][T22547] udevd[22547]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 820.465787][T22547] udevd[22547]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 820.476216][ T5212] udevd[5212]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 820.486827][ T5208] udevd[5208]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 821.169642][ T1056] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 821.335374][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 821.335392][ T29] audit: type=1326 audit(1732341954.113:33428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1055 comm="syz.1.8275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdf398e819 code=0x7ffc0000 [ 821.375138][ T29] audit: type=1326 audit(1732341954.143:33429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1055 comm="syz.1.8275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdf398e819 code=0x7ffc0000 [ 821.725863][ T1079] loop4: detected capacity change from 0 to 2048 [ 821.797547][ T1088] loop1: detected capacity change from 0 to 1024 [ 821.819703][ T1091] loop5: detected capacity change from 0 to 512 [ 821.980050][ T1079] Alternate GPT is invalid, using primary GPT. [ 821.986357][ T1079] loop4: p1 p2 p3 [ 822.000431][ T29] audit: type=1326 audit(1732341954.773:33430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1078 comm="syz.4.8282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2557e819 code=0x7ffc0000 [ 822.024025][ T29] audit: type=1326 audit(1732341954.773:33431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1078 comm="syz.4.8282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac2557e819 code=0x7ffc0000 [ 822.047561][ T29] audit: type=1326 audit(1732341954.773:33432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1078 comm="syz.4.8282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2557e819 code=0x7ffc0000 [ 822.071281][ T29] audit: type=1326 audit(1732341954.783:33433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1078 comm="syz.4.8282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fac2557e819 code=0x7ffc0000 [ 822.095019][ T29] audit: type=1326 audit(1732341954.783:33434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1078 comm="syz.4.8282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2557e819 code=0x7ffc0000 [ 822.253744][ T1091] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 822.265376][ T1091] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 822.275503][ T1091] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.8281: Corrupt directory, running e2fsck is recommended [ 822.323358][ T29] audit: type=1326 audit(1732341954.903:33435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1078 comm="syz.4.8282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac2557e819 code=0x7ffc0000 [ 822.347305][ T29] audit: type=1326 audit(1732341954.903:33436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1078 comm="syz.4.8282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2557e819 code=0x7ffc0000 [ 822.371040][ T29] audit: type=1326 audit(1732341954.903:33437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1078 comm="syz.4.8282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fac2557e819 code=0x7ffc0000 [ 822.408325][ T1091] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 822.416644][ T1091] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.8281: corrupted in-inode xattr: invalid ea_ino [ 822.430478][ T1091] EXT4-fs (loop5): Remounting filesystem read-only [ 822.437625][ T1088] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 822.452643][ T1088] xt_CT: You must specify a L4 protocol and not use inversions on it [ 822.461205][ T1091] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 822.484724][ T1091] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 822.566611][ T1091] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 822.669824][ T3021] Alternate GPT is invalid, using primary GPT. [ 822.676091][ T3021] loop4: p1 p2 p3 [ 822.686869][ T1109] netlink: 300 bytes leftover after parsing attributes in process `syz.6.8286'. [ 822.825654][T23913] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 822.926851][ T1115] loop4: detected capacity change from 0 to 512 [ 822.938667][ T5212] udevd[5212]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 822.967280][ T1119] loop6: detected capacity change from 0 to 1024 [ 822.976627][ T7197] udevd[7197]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 822.991157][T22547] udevd[22547]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 823.017827][ T1115] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 823.061083][ T1119] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 823.090015][ T1121] loop2: detected capacity change from 0 to 256 [ 823.166057][ T1115] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.8287: bad orphan inode 131083 [ 823.180852][ T1119] xt_CT: You must specify a L4 protocol and not use inversions on it [ 823.244754][ T1115] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 823.485941][T25544] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.562017][T29144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.663452][ T1151] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8293'. [ 823.735544][ T1150] loop4: detected capacity change from 0 to 1024 [ 824.695602][ T1166] loop6: detected capacity change from 0 to 512 [ 824.844959][ T1166] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 824.856649][ T1166] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 824.866770][ T1166] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.8299: Corrupt directory, running e2fsck is recommended [ 824.893164][ T1166] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 824.901494][ T1166] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.8299: corrupted in-inode xattr: invalid ea_ino [ 824.937921][ T1166] EXT4-fs (loop6): Remounting filesystem read-only [ 824.944878][ T1166] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 825.046258][ T1166] SELinux: (dev loop6, type ext4) getxattr errno 5 [ 825.090725][ T1166] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.574591][ T1201] loop5: detected capacity change from 0 to 512 [ 825.668318][ T1201] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 825.680585][ T1201] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 825.690872][ T1201] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.8305: Corrupt directory, running e2fsck is recommended [ 825.780425][ T1201] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 825.876617][ T1201] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.8305: corrupted in-inode xattr: invalid ea_ino [ 825.945039][ T1217] loop1: detected capacity change from 0 to 1024 [ 826.114376][ T1217] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 826.209130][ T1217] xt_CT: You must specify a L4 protocol and not use inversions on it [ 826.226884][ T1226] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 826.301059][ T1201] EXT4-fs (loop5): Remounting filesystem read-only [ 826.310048][ T1228] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 826.335122][ T1226] FAULT_INJECTION: forcing a failure. [ 826.335122][ T1226] name failslab, interval 1, probability 0, space 0, times 0 [ 826.347912][ T1226] CPU: 1 UID: 0 PID: 1226 Comm: syz.2.8311 Tainted: G W 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 826.359742][ T1226] Tainted: [W]=WARN [ 826.363547][ T1226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 826.373611][ T1226] Call Trace: [ 826.376901][ T1226] [ 826.379947][ T1226] dump_stack_lvl+0xf2/0x150 [ 826.384572][ T1226] dump_stack+0x15/0x20 [ 826.388750][ T1226] should_fail_ex+0x223/0x230 [ 826.393453][ T1226] ? audit_log_start+0x34c/0x6b0 [ 826.398423][ T1226] should_failslab+0x8f/0xb0 [ 826.403038][ T1226] kmem_cache_alloc_noprof+0x4c/0x290 [ 826.408434][ T1226] audit_log_start+0x34c/0x6b0 [ 826.413227][ T1226] ? __traceiter_kfree+0x2b/0x50 [ 826.418187][ T1226] ? __sys_sendmsg+0x1b4/0x230 [ 826.423020][ T1226] audit_seccomp+0x4b/0x130 [ 826.427607][ T1226] __seccomp_filter+0x6fa/0x1180 [ 826.432650][ T1226] __secure_computing+0x9f/0x1c0 [ 826.437608][ T1226] syscall_trace_enter+0xd1/0x1f0 [ 826.442651][ T1226] ? fpregs_assert_state_consistent+0x83/0xa0 [ 826.448751][ T1226] do_syscall_64+0xaa/0x1c0 [ 826.453288][ T1226] ? clear_bhb_loop+0x55/0xb0 [ 826.458098][ T1226] ? clear_bhb_loop+0x55/0xb0 [ 826.462874][ T1226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.468848][ T1226] RIP: 0033:0x7f14b752d25c [ 826.473276][ T1226] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 826.493035][ T1226] RSP: 002b:00007f14b5ba1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 826.501551][ T1226] RAX: ffffffffffffffda RBX: 00007f14b76e5fa0 RCX: 00007f14b752d25c [ 826.509543][ T1226] RDX: 000000000000000f RSI: 00007f14b5ba10a0 RDI: 000000000000000d [ 826.517530][ T1226] RBP: 00007f14b5ba1090 R08: 0000000000000000 R09: 0000000000000000 [ 826.525510][ T1226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 826.533549][ T1226] R13: 0000000000000000 R14: 00007f14b76e5fa0 R15: 00007fff3ad76b98 [ 826.541552][ T1226] [ 826.544848][ T1226] audit_log_lost: 28 callbacks suppressed [ 826.544861][ T1226] audit: audit_lost=19 audit_rate_limit=0 audit_backlog_limit=64 [ 826.558481][ T1226] audit: out of memory in audit_log_start [ 826.565316][ T29] audit: type=1326 audit(1732341959.113:33466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1225 comm="syz.2.8311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b752e819 code=0x7ffc0000 [ 826.589160][ T29] audit: type=1326 audit(1732341959.113:33467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1225 comm="syz.2.8311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14b752e819 code=0x7ffc0000 [ 826.612884][ T29] audit: type=1326 audit(1732341959.113:33468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1225 comm="syz.2.8311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b752e819 code=0x7ffc0000 [ 826.636771][ T29] audit: type=1326 audit(1732341959.113:33469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1225 comm="syz.2.8311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14b752e819 code=0x7ffc0000 [ 826.661015][ T29] audit: type=1326 audit(1732341959.113:33470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1225 comm="syz.2.8311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b752e819 code=0x7ffc0000 [ 826.684905][ T29] audit: type=1326 audit(1732341959.113:33471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1225 comm="syz.2.8311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14b752e819 code=0x7ffc0000 [ 826.708793][ T29] audit: type=1326 audit(1732341959.113:33472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1225 comm="syz.2.8311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b752e819 code=0x7ffc0000 [ 826.732635][ T29] audit: type=1326 audit(1732341959.113:33473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1225 comm="syz.2.8311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f14b752e819 code=0x7ffc0000 [ 826.816284][ T1201] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 826.902527][ T1201] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 826.927108][ T1201] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 827.491006][ T1247] loop4: detected capacity change from 0 to 2048 [ 827.594059][ T1247] Alternate GPT is invalid, using primary GPT. [ 827.600618][ T1247] loop4: p1 p2 p3 [ 827.747798][T23913] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.428285][ T1288] loop4: detected capacity change from 0 to 1024 [ 828.642323][ T1288] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 828.711426][ T1288] xt_CT: You must specify a L4 protocol and not use inversions on it [ 828.766843][ T1298] FAULT_INJECTION: forcing a failure. [ 828.766843][ T1298] name failslab, interval 1, probability 0, space 0, times 0 [ 828.779730][ T1298] CPU: 1 UID: 0 PID: 1298 Comm: syz.5.8325 Tainted: G W 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 828.791593][ T1298] Tainted: [W]=WARN [ 828.795473][ T1298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 828.805539][ T1298] Call Trace: [ 828.808882][ T1298] [ 828.811819][ T1298] dump_stack_lvl+0xf2/0x150 [ 828.816454][ T1298] dump_stack+0x15/0x20 [ 828.820707][ T1298] should_fail_ex+0x223/0x230 [ 828.825406][ T1298] ? iter_file_splice_write+0x102/0x980 [ 828.830999][ T1298] should_failslab+0x8f/0xb0 [ 828.835635][ T1298] __kmalloc_noprof+0xa5/0x370 [ 828.840451][ T1298] iter_file_splice_write+0x102/0x980 [ 828.846322][ T1298] ? bpf_trace_run2+0x123/0x1d0 [ 828.851216][ T1298] ? copy_splice_read+0x597/0x5d0 [ 828.856348][ T1298] ? copy_splice_read+0x597/0x5d0 [ 828.861409][ T1298] ? copy_splice_read+0x597/0x5d0 [ 828.866462][ T1298] ? __pfx_iter_file_splice_write+0x10/0x10 [ 828.872420][ T1298] direct_splice_actor+0x160/0x2c0 [ 828.877649][ T1298] splice_direct_to_actor+0x302/0x670 [ 828.883111][ T1298] ? __pfx_direct_splice_actor+0x10/0x10 [ 828.888860][ T1298] do_splice_direct+0xd7/0x150 [ 828.893758][ T1298] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 828.899736][ T1298] do_sendfile+0x398/0x660 [ 828.904177][ T1298] __x64_sys_sendfile64+0x110/0x150 [ 828.909491][ T1298] x64_sys_call+0xfbd/0x2dc0 [ 828.914175][ T1298] do_syscall_64+0xc9/0x1c0 [ 828.918701][ T1298] ? clear_bhb_loop+0x55/0xb0 [ 828.923397][ T1298] ? clear_bhb_loop+0x55/0xb0 [ 828.928144][ T1298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.934155][ T1298] RIP: 0033:0x7fd21acce819 [ 828.938579][ T1298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 828.958275][ T1298] RSP: 002b:00007fd219341038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 828.966764][ T1298] RAX: ffffffffffffffda RBX: 00007fd21ae85fa0 RCX: 00007fd21acce819 [ 828.974742][ T1298] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 828.982754][ T1298] RBP: 00007fd219341090 R08: 0000000000000000 R09: 0000000000000000 [ 828.990839][ T1298] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 828.998925][ T1298] R13: 0000000000000000 R14: 00007fd21ae85fa0 R15: 00007ffc09ffec68 [ 829.006929][ T1298] [ 829.493361][ T1325] loop5: detected capacity change from 0 to 512 [ 829.600647][ T1325] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 829.612203][ T1325] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 829.622421][ T1325] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.8330: Corrupt directory, running e2fsck is recommended [ 829.667239][T25544] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 829.800963][ T1325] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 829.825375][ T1329] loop1: detected capacity change from 0 to 512 [ 829.849625][ T1349] loop2: detected capacity change from 0 to 1024 [ 829.866545][ T1325] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.8330: corrupted in-inode xattr: invalid ea_ino [ 829.885082][ T1353] netlink: 300 bytes leftover after parsing attributes in process `syz.6.8338'. [ 829.898491][ T1329] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 829.910323][ T1329] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 829.920957][ T1329] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.8331: Corrupt directory, running e2fsck is recommended [ 829.946586][ T1325] EXT4-fs (loop5): Remounting filesystem read-only [ 829.961871][ T1329] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 830.048094][ T1325] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 830.065496][ T1329] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.8331: corrupted in-inode xattr: invalid ea_ino [ 830.118551][ T1366] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8342'. [ 830.131173][ T1325] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 830.148220][ T1325] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 830.154885][ T1367] loop4: detected capacity change from 0 to 512 [ 830.167706][ T1329] EXT4-fs (loop1): Remounting filesystem read-only [ 830.183482][ T1367] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 830.191868][ T1329] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 830.222329][ T1367] EXT4-fs (loop4): 1 truncate cleaned up [ 830.243588][ T1367] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 830.256848][ T1329] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 830.272237][ T1329] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 830.665177][ T1390] netlink: 300 bytes leftover after parsing attributes in process `syz.5.8353'. [ 832.257290][ T1393] loop6: detected capacity change from 0 to 1024 [ 832.267261][ T1399] loop1: detected capacity change from 0 to 512 [ 832.383672][ T1399] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 832.395359][ T1399] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 832.405621][ T1399] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.8351: Corrupt directory, running e2fsck is recommended [ 832.480413][ T1399] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 832.562127][ T1399] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.8351: corrupted in-inode xattr: invalid ea_ino [ 832.575881][T25544] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 832.662191][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 832.662208][ T29] audit: type=1326 audit(1732341965.443:33602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1414 comm="syz.4.8352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2557e819 code=0x7ffc0000 [ 832.692647][ T29] audit: type=1326 audit(1732341965.443:33603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1414 comm="syz.4.8352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2557e819 code=0x7ffc0000 [ 832.701408][ T1399] EXT4-fs (loop1): Remounting filesystem read-only [ 832.737169][ T1399] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 832.778389][ T1411] loop5: detected capacity change from 0 to 2048 [ 832.783114][ T29] audit: type=1326 audit(1732341965.503:33604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1414 comm="syz.4.8352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac2557e819 code=0x7ffc0000 [ 832.792913][ T1399] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 832.808541][ T29] audit: type=1326 audit(1732341965.503:33605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1414 comm="syz.4.8352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2557e819 code=0x7ffc0000 [ 832.832591][ T1399] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 832.839060][ T29] audit: type=1326 audit(1732341965.503:33606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1414 comm="syz.4.8352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2557e819 code=0x7ffc0000 [ 832.868567][ T1422] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8358'. [ 832.871531][ T29] audit: type=1326 audit(1732341965.503:33607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1414 comm="syz.4.8352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac2557e819 code=0x7ffc0000 [ 832.903909][ T29] audit: type=1326 audit(1732341965.503:33608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1414 comm="syz.4.8352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2557e819 code=0x7ffc0000 [ 832.920744][ T1421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8359'. [ 832.927461][ T29] audit: type=1326 audit(1732341965.503:33609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1414 comm="syz.4.8352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2557e819 code=0x7ffc0000 [ 832.956674][ T1427] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8358'. [ 832.959834][ T29] audit: type=1326 audit(1732341965.503:33610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1414 comm="syz.4.8352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac2557e819 code=0x7ffc0000 [ 832.992270][ T29] audit: type=1326 audit(1732341965.503:33611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1414 comm="syz.4.8352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2557e819 code=0x7ffc0000 [ 833.046263][ T1411] loop5: p1 p2 p3 < > [ 833.050545][ T1411] loop5: partition table partially beyond EOD, truncated [ 833.064396][ T1411] loop5: p1 size 33024 extends beyond EOD, truncated [ 833.072063][ T1411] loop5: p2 start 16908804 is beyond EOD, truncated [ 833.078939][ T1411] loop5: p3 start 4284289 is beyond EOD, truncated [ 833.306533][ T1438] loop5: detected capacity change from 0 to 2048 [ 833.335545][ T1449] loop1: detected capacity change from 0 to 256 [ 833.347001][ T1440] loop4: detected capacity change from 0 to 1024 [ 833.431578][ T1438] Alternate GPT is invalid, using primary GPT. [ 833.438089][ T1438] loop5: p1 p2 p3 [ 833.575568][ T3021] Alternate GPT is invalid, using primary GPT. [ 833.582001][ T3021] loop5: p1 p2 p3 [ 834.050658][ T1467] loop4: detected capacity change from 0 to 512 [ 834.082530][ T1467] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 834.105070][ T1469] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8372'. [ 834.132840][ T1467] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.8371: bad orphan inode 131083 [ 834.148478][ T1467] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 834.292091][ T1475] loop1: detected capacity change from 0 to 512 [ 834.309386][ T1475] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 834.335844][ T1473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 834.346427][ T1473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.356240][ T1473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 834.366784][ T1473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.376709][ T1473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 834.387291][ T1473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.397123][ T1473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 834.407639][ T1473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.417562][ T1473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 834.428067][ T1473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.437920][ T1473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 834.448413][ T1473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.486095][ T1473] loop5: detected capacity change from 0 to 512 [ 834.534199][ T1475] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.8374: bad orphan inode 131083 [ 834.545270][ T1475] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 834.595899][ T1473] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 834.611862][ T1473] ext4 filesystem being mounted at /356/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 834.626266][ T1473] Process accounting resumed [ 834.951590][T25544] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 834.961914][T23913] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 835.061389][ T1488] netlink: 300 bytes leftover after parsing attributes in process `syz.6.8378'. [ 835.079433][ T1473] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 835.121335][ T1490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8379'. [ 835.192974][T26777] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 835.276347][ T1502] netlink: 300 bytes leftover after parsing attributes in process `syz.5.8383'. [ 835.298644][ T1503] loop6: detected capacity change from 0 to 512 [ 835.319998][ T1503] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 835.401016][ T1503] EXT4-fs error (device loop6): ext4_orphan_get:1415: comm syz.6.8385: bad orphan inode 131083 [ 835.419172][ T1508] loop2: detected capacity change from 0 to 2048 [ 835.423460][ T1503] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 835.462905][T29144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 835.488826][ T1508] Alternate GPT is invalid, using primary GPT. [ 835.495093][ T1508] loop2: p1 p2 p3 [ 835.516850][ T1517] netlink: 300 bytes leftover after parsing attributes in process `syz.1.8392'. [ 835.580834][ T3021] Alternate GPT is invalid, using primary GPT. [ 835.587395][ T3021] loop2: p1 p2 p3 [ 835.797952][ T1530] loop1: detected capacity change from 0 to 512 [ 835.834877][T22547] udevd[22547]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 835.852896][ T1538] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8398'. [ 835.881300][ T5212] udevd[5212]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 835.895188][ T7197] udevd[7197]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 835.953692][ T1530] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 835.963459][T22547] udevd[22547]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 835.965335][ T1530] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 835.977816][ T5208] udevd[5208]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 835.985428][ T1530] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.8393: Corrupt directory, running e2fsck is recommended [ 836.031179][ T5212] udevd[5212]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 836.075370][ T1530] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 836.083699][ T1530] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.8393: corrupted in-inode xattr: invalid ea_ino [ 836.101185][ T1530] EXT4-fs (loop1): Remounting filesystem read-only [ 836.108259][ T1530] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 836.121051][ T1530] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 836.128303][ T1530] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 836.164097][ T1557] loop2: detected capacity change from 0 to 256 [ 836.181105][ T1558] netlink: 300 bytes leftover after parsing attributes in process `syz.6.8404'. [ 836.198428][ T1554] loop5: detected capacity change from 0 to 512 [ 836.249950][ T1554] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 836.261711][ T1554] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 836.272066][ T1554] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.8397: Corrupt directory, running e2fsck is recommended [ 836.348533][ T1530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 836.376098][ T1554] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 836.397155][ T1554] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.8397: corrupted in-inode xattr: invalid ea_ino [ 836.420501][ T1530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 836.429939][ T1554] EXT4-fs (loop5): Remounting filesystem read-only [ 836.441548][ T1554] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 836.478711][ T1554] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 836.500115][ T1554] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 836.557365][ T1567] loop2: detected capacity change from 0 to 2048 [ 836.606947][ T1567] loop2: p1 p2 p3 < > [ 836.611068][ T1567] loop2: partition table partially beyond EOD, truncated [ 836.656691][ T1567] loop2: p1 size 33024 extends beyond EOD, truncated [ 836.674155][ T1567] loop2: p2 start 16908804 is beyond EOD, truncated [ 836.680886][ T1567] loop2: p3 start 4284289 is beyond EOD, truncated [ 836.714150][ T3021] loop2: p1 p2 p3 < > [ 836.718498][ T3021] loop2: partition table partially beyond EOD, truncated [ 836.725874][ T3021] loop2: p1 size 33024 extends beyond EOD, truncated [ 836.741963][ T3021] loop2: p2 start 16908804 is beyond EOD, truncated [ 836.748852][ T3021] loop2: p3 start 4284289 is beyond EOD, truncated [ 836.813418][ T1572] loop6: detected capacity change from 0 to 512 [ 836.838709][T22547] udevd[22547]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 837.071800][ T1578] loop2: detected capacity change from 0 to 2048 [ 837.166699][ T1572] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 837.178386][ T1572] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 837.188557][ T1572] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.8409: Corrupt directory, running e2fsck is recommended [ 837.349355][ T1589] loop1: detected capacity change from 0 to 256 [ 837.484863][ T1572] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 837.508463][ T1572] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.8409: corrupted in-inode xattr: invalid ea_ino [ 837.539984][ T1572] EXT4-fs (loop6): Remounting filesystem read-only [ 837.557723][ T1572] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 837.598964][ T1572] SELinux: (dev loop6, type ext4) getxattr errno 5 [ 837.617143][ T1572] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 837.705203][ T1586] loop5: detected capacity change from 0 to 2048 [ 837.983614][ T1599] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 838.109678][ T1605] loop4: detected capacity change from 0 to 2048 [ 838.149887][ T29] kauditd_printk_skb: 370 callbacks suppressed [ 838.149916][ T29] audit: type=1326 audit(1732341970.933:33982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1597 comm="syz.1.8420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdf398e819 code=0x7ffc0000 [ 838.183868][ T29] audit: type=1326 audit(1732341970.963:33983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1597 comm="syz.1.8420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdf398e819 code=0x7ffc0000 [ 838.513488][ T1586] loop5: p1 p2 p3 < > [ 838.517777][ T1586] loop5: partition table partially beyond EOD, truncated [ 838.525371][ T1586] loop5: p1 size 33024 extends beyond EOD, truncated [ 838.534004][ T1586] loop5: p2 start 16908804 is beyond EOD, truncated [ 838.540806][ T1586] loop5: p3 start 4284289 is beyond EOD, truncated [ 838.587117][ T3021] loop5: p1 p2 p3 < > [ 838.591235][ T3021] loop5: partition table partially beyond EOD, truncated [ 838.608775][ T1605] loop4: p1 p2 p3 < > [ 838.612891][ T1605] loop4: partition table partially beyond EOD, truncated [ 838.626637][ T3021] loop5: p1 size 33024 extends beyond EOD, truncated [ 838.642590][ T3021] loop5: p2 start 16908804 is beyond EOD, truncated [ 838.649319][ T3021] loop5: p3 start 4284289 is beyond EOD, truncated [ 838.656529][ T1605] loop4: p1 size 33024 extends beyond EOD, truncated [ 838.663996][ T1605] loop4: p2 start 16908804 is beyond EOD, truncated [ 838.670763][ T1605] loop4: p3 start 4284289 is beyond EOD, truncated [ 838.732299][ T3021] loop4: p1 p2 p3 < > [ 838.736621][ T3021] loop4: partition table partially beyond EOD, truncated [ 838.761731][ T3021] loop4: p1 size 33024 extends beyond EOD, truncated [ 838.808607][ T3021] loop4: p2 start 16908804 is beyond EOD, truncated [ 838.815386][ T3021] loop4: p3 start 4284289 is beyond EOD, truncated [ 838.943120][ T5208] udevd[5208]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 838.985545][T22547] udevd[22547]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 839.029311][ T1615] loop6: detected capacity change from 0 to 1024 [ 839.065273][ T29] audit: type=1326 audit(1732341971.843:33984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1613 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b752e819 code=0x7ffc0000 [ 839.106910][ T29] audit: type=1326 audit(1732341971.873:33985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1613 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14b752e819 code=0x7ffc0000 [ 839.129990][ T29] audit: type=1326 audit(1732341971.873:33986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1613 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b752e819 code=0x7ffc0000 [ 839.153027][ T29] audit: type=1326 audit(1732341971.873:33987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1613 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14b752e819 code=0x7ffc0000 [ 839.176059][ T29] audit: type=1326 audit(1732341971.873:33988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1613 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b752e819 code=0x7ffc0000 [ 839.199142][ T29] audit: type=1326 audit(1732341971.873:33989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1613 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14b752e819 code=0x7ffc0000 [ 839.222364][ T29] audit: type=1326 audit(1732341971.873:33990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1613 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b752e819 code=0x7ffc0000 [ 839.245888][ T29] audit: type=1326 audit(1732341971.873:33991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1613 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14b752e819 code=0x7ffc0000 [ 839.806482][ C0] ================================================================== [ 839.814635][ C0] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 839.821853][ C0] [ 839.824182][ C0] read-write to 0xffff8881010a5eb8 of 8 bytes by interrupt on cpu 1: [ 839.832265][ C0] wq_worker_tick+0x63/0x240 [ 839.836867][ C0] sched_tick+0xd7/0x140 [ 839.841132][ C0] update_process_times+0x161/0x190 [ 839.846360][ C0] tick_nohz_handler+0x250/0x2d0 [ 839.851314][ C0] __hrtimer_run_queues+0x20d/0x5e0 [ 839.856521][ C0] hrtimer_interrupt+0x235/0x4a0 [ 839.861472][ C0] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 839.867394][ C0] sysvec_apic_timer_interrupt+0x6e/0x80 [ 839.873032][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 839.879031][ C0] bpf_trace_run3+0x8f/0x1d0 [ 839.883629][ C0] __traceiter_kmem_cache_free+0x33/0x50 [ 839.889552][ C0] kmem_cache_free+0x237/0x2d0 [ 839.894326][ C0] io_destroy_buffers+0x22c/0x270 [ 839.899386][ C0] io_ring_ctx_free+0x45a/0x710 [ 839.904258][ C0] io_ring_exit_work+0x4e2/0x510 [ 839.909229][ C0] process_scheduled_works+0x483/0x9a0 [ 839.914736][ C0] worker_thread+0x51d/0x6f0 [ 839.919331][ C0] kthread+0x1d1/0x210 [ 839.923408][ C0] ret_from_fork+0x4b/0x60 [ 839.927837][ C0] ret_from_fork_asm+0x1a/0x30 [ 839.932615][ C0] [ 839.934936][ C0] read-write to 0xffff8881010a5eb8 of 8 bytes by interrupt on cpu 0: [ 839.943015][ C0] wq_worker_tick+0x63/0x240 [ 839.947614][ C0] sched_tick+0xd7/0x140 [ 839.951868][ C0] update_process_times+0x161/0x190 [ 839.957080][ C0] tick_nohz_handler+0x250/0x2d0 [ 839.962027][ C0] __hrtimer_run_queues+0x20d/0x5e0 [ 839.967231][ C0] hrtimer_interrupt+0x235/0x4a0 [ 839.972179][ C0] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 839.978108][ C0] sysvec_apic_timer_interrupt+0x6e/0x80 [ 839.983762][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 839.989757][ C0] _raw_spin_lock_irqsave+0x40/0xb0 [ 839.994983][ C0] stack_map_peek_elem+0xa4/0x1e0 [ 840.000025][ C0] bpf_prog_00798911c748094f+0x43/0x47 [ 840.005494][ C0] bpf_trace_run3+0x10c/0x1d0 [ 840.010294][ C0] __traceiter_kmem_cache_free+0x33/0x50 [ 840.015960][ C0] kmem_cache_free+0x237/0x2d0 [ 840.020764][ C0] io_destroy_buffers+0x22c/0x270 [ 840.025803][ C0] io_ring_ctx_free+0x45a/0x710 [ 840.030680][ C0] io_ring_exit_work+0x4e2/0x510 [ 840.035648][ C0] process_scheduled_works+0x483/0x9a0 [ 840.041134][ C0] worker_thread+0x51d/0x6f0 [ 840.045751][ C0] kthread+0x1d1/0x210 [ 840.049832][ C0] ret_from_fork+0x4b/0x60 [ 840.054269][ C0] ret_from_fork_asm+0x1a/0x30 [ 840.059062][ C0] [ 840.061394][ C0] value changed: 0x000000000d1993a0 -> 0x000000000d19bab0 [ 840.068520][ C0] [ 840.070852][ C0] Reported by Kernel Concurrency Sanitizer on: [ 840.077021][ C0] CPU: 0 UID: 0 PID: 6212 Comm: kworker/u8:15 Tainted: G W 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 840.089098][ C0] Tainted: [W]=WARN [ 840.092900][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 840.102967][ C0] Workqueue: iou_exit io_ring_exit_work [ 840.108568][ C0] ================================================================== [ 840.615099][ T1639] loop4: detected capacity change from 0 to 512 [ 840.927703][ T1639] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 840.939314][ T1639] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 840.949415][ T1639] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.8429: Corrupt directory, running e2fsck is recommended [ 840.969792][ T1639] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 840.979095][ T1639] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.8429: corrupted in-inode xattr: invalid ea_ino [ 840.995239][ T1639] EXT4-fs (loop4): Remounting filesystem read-only [ 841.003429][ T1639] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 841.018691][ T1639] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 841.025902][ T1639] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.