last executing test programs: 5m26.200050514s ago: executing program 0 (id=2177): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r4 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r4, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r7 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f0000000340)=ANY=[], 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) 5m25.652158578s ago: executing program 0 (id=2181): r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setlease(r1, 0x400, 0x0) utime(&(0x7f0000000100)='./file0\x00', 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000800) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket(0x10, 0x3, 0x0) connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route(r7, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c014}, 0x0) sendfile(r5, r4, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_genetlink_get_family_id$devlink(0x0, r0) 5m24.87936319s ago: executing program 0 (id=2189): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ///+864GIw8IlpAdcIJ0Yrq6u+//pzLASAS5d6/5/vwN5nCzASCn2NQIQGGX/9/3/c6XpQyUEAAAM3HRrSgql7Ou96SgUSqWIm62fBSgmaxvVynxEPBERv50pXmvWF1pbJn2MEQAAAAAAAAAAAAAAAAAAAAAAAAAAovVU7iRSAAAAYKRFFP6U/LL9LP+5meenu78fmEj+1fpJ4ImIeOuHb3z/7nKjsbvQXP63o+WNH2TLXxzGNxgAAABAt851emv+z2FnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCoee/B2yudqY+XTw0q7l++EBGzefHHY7I1n4xiRFz/exLjJ7ZLImJsAPEP70XER/PiJ820jkLmxR/Em3BO/JjN3oW8+DcGEB+usvvN489ref2vEM+25vn9bzzif+ofVO/jXxwd/8Z69P+bfcZ46p2flXvGvxfx1Hj+8acTP+kR/7k+43/9awcHvdalP4qY63z+tI54JyMcl8qNrZ1yff/g9sbW8nplvbK9uLjw8tIrSy8tzZfXNqqV7N/cGN95+ufvn9X+67mff0mWTe/2P5+zv7zPpP+8c/fBhzuVw9Pxbz2XE/9XP85ecTp+IYvzqazcXD/XKR+2yyc989PfPHNW+1eP2198mP//W7122u1UR3m63z8dAOAC1PcPNper1cruyBaaV+mPQBoKj2DhWwPdYZqmabNP5ay6HxH97CeJAbe0kJ/PcaHnEWDYRyYAAGDQjk/6h50JAAAAAAAAAAAAAAAAAAAAXF2X8ZS17pjHj0BOBvEIbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAgfhvAAAA//89e9P5") (fail_nth: 1) 5m24.444987816s ago: executing program 0 (id=2192): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r4 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r4, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r7 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f0000000340)=ANY=[], 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) 5m24.279499809s ago: executing program 0 (id=2195): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x50) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x21, 0x8, 0x6, 0x8, 0x20004, r0, 0x501, '\x00', 0x0, r1, 0x5, 0x2, 0x1}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e20, 0x74df82a6, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3e}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000440)=ANY=[], 0x8) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f00000000c0)={0x32}, 0x8) sendmmsg$inet6(r5, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)=r3}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_io_uring_setup(0x499, &(0x7f0000000300)={0x0, 0xd146, 0x1000, 0xc, 0x288}, &(0x7f0000000180)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r6, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r7, 0x3516, 0x0, 0x4, 0x0, 0x0) 5m24.088123464s ago: executing program 0 (id=2198): semtimedop(0x0, &(0x7f00000003c0), 0x0, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) futex(&(0x7f00000001c0), 0x0, 0x1, &(0x7f00000003c0)={r0, r1+10000000}, &(0x7f0000000400)=0x2, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000001980)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="d4dc0402902daaea84e6ad97b632f17c1fa035b5ff090e1db5c8e96beb4c3e0dd2e239479d448118f3dde46edd3669a91fca701e57cfe0d79fb282a3b9182606ea89496ce82fc28b58a1789da4017837231e67ebb75b76e9d37d04b748fa63e44c1a42d7b12dadcaacac4647197d3e5d2498036e15941050c133d70e758aed8169ea26c9e35686f18d0af6783dd0ad07b09610513b50f595f820fbf6b9290195786635e007da05da89456c9c8f9e84ca89b5dcdaec70da7d76c7466d6733ebd0c05d32db62c4d752322b50c121b674d86ad4553d3d6a7532f79767a96e082ad1d94fc1404e312f8ed215adf868b64485618210ce9ebe466b41", @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000001100a200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000959907010000f8ffffffb702000008000000b7030000000000208500000004a678538b1c3929ca34c4bbbbf8b80afb225fbd0ab4b880c6f14bf309ed7952666e0f4364e695c9f5f6b2e66f1cb82c152c38cbf9b7ae99cbc7794f4072490fb4644d09dee3e0e6ad640afdc7b7c43bd854bd9c3a69"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0xf, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000500)="983c7c7d53f1353d6a28df73590b868c452beed01d27952c08e39c5bbcb27a09112b75ef83c95f2f218f1f4ada593550a459f6c81f0c988ddbc0326d7adace3750f52b78b4004679754a1d14779ccbdabf5b102ca87a", 0x56}, {&(0x7f0000000640)="665c2f8d39a23661bcc581dfece4b4e4461d826200fb62ce7f507e33d09b8ffb14c0226872d8f975e41e711095d442f85347eb187ad572432f34ac6b4908f700396475fba45bbf816897f494c7f3f491bbcbb7518d0220631dfcc579605ea1de0bf7414b8addaa29b3f3497ded03cc9a5dcf43d379bb1ef3f592acb56fa06ecfed9fe07cf238665ec35ce6ccc6d5e71f987efe20541c", 0x96}], 0x2, &(0x7f0000000740)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffc}}], 0x30}, 0x4000001) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) geteuid() r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req={0x0, 0x1, 0xa3f, 0x2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) dup(r3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x3938700}}, 0x0) syz_clone(0x20000, 0x0, 0x0, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="f3a6ed09ba6b20d06525d84636e9c1") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$UHID_INPUT(r5, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) io_cancel(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x0, r5}, 0x0) ioctl$EVIOCREVOKE(r5, 0x40044591, &(0x7f0000000480)=0x1000) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0xe4, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_STAB={0xb8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x41, 0x8001, 0x49c, 0x1, 0x8, 0x0, 0x2}}, {0x8, 0x2, [0xc, 0x6]}}, {{0x1c, 0x1, {0x6, 0x7e, 0x0, 0x4, 0x1, 0x9, 0x4, 0x3}}, {0xa, 0x2, [0x7, 0x2, 0x81]}}, {{0x1c, 0x1, {0x7, 0x7f, 0x5, 0x5, 0x0, 0x9, 0x40, 0x2}}, {0x8, 0x2, [0x6, 0x1]}}, {{0x1c, 0x1, {0x4, 0x3c, 0x6, 0x4, 0x1, 0x8000, 0xc9b2}}, {0x4}}, {{0x1c, 0x1, {0x7, 0x7, 0x6, 0x4, 0x2, 0xea31, 0xfff, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 5m8.877611985s ago: executing program 32 (id=2198): semtimedop(0x0, &(0x7f00000003c0), 0x0, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) futex(&(0x7f00000001c0), 0x0, 0x1, &(0x7f00000003c0)={r0, r1+10000000}, &(0x7f0000000400)=0x2, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000001980)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="d4dc0402902daaea84e6ad97b632f17c1fa035b5ff090e1db5c8e96beb4c3e0dd2e239479d448118f3dde46edd3669a91fca701e57cfe0d79fb282a3b9182606ea89496ce82fc28b58a1789da4017837231e67ebb75b76e9d37d04b748fa63e44c1a42d7b12dadcaacac4647197d3e5d2498036e15941050c133d70e758aed8169ea26c9e35686f18d0af6783dd0ad07b09610513b50f595f820fbf6b9290195786635e007da05da89456c9c8f9e84ca89b5dcdaec70da7d76c7466d6733ebd0c05d32db62c4d752322b50c121b674d86ad4553d3d6a7532f79767a96e082ad1d94fc1404e312f8ed215adf868b64485618210ce9ebe466b41", @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000001100a200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000959907010000f8ffffffb702000008000000b7030000000000208500000004a678538b1c3929ca34c4bbbbf8b80afb225fbd0ab4b880c6f14bf309ed7952666e0f4364e695c9f5f6b2e66f1cb82c152c38cbf9b7ae99cbc7794f4072490fb4644d09dee3e0e6ad640afdc7b7c43bd854bd9c3a69"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0xf, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000500)="983c7c7d53f1353d6a28df73590b868c452beed01d27952c08e39c5bbcb27a09112b75ef83c95f2f218f1f4ada593550a459f6c81f0c988ddbc0326d7adace3750f52b78b4004679754a1d14779ccbdabf5b102ca87a", 0x56}, {&(0x7f0000000640)="665c2f8d39a23661bcc581dfece4b4e4461d826200fb62ce7f507e33d09b8ffb14c0226872d8f975e41e711095d442f85347eb187ad572432f34ac6b4908f700396475fba45bbf816897f494c7f3f491bbcbb7518d0220631dfcc579605ea1de0bf7414b8addaa29b3f3497ded03cc9a5dcf43d379bb1ef3f592acb56fa06ecfed9fe07cf238665ec35ce6ccc6d5e71f987efe20541c", 0x96}], 0x2, &(0x7f0000000740)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffc}}], 0x30}, 0x4000001) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) geteuid() r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req={0x0, 0x1, 0xa3f, 0x2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) dup(r3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x3938700}}, 0x0) syz_clone(0x20000, 0x0, 0x0, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="f3a6ed09ba6b20d06525d84636e9c1") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$UHID_INPUT(r5, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) io_cancel(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x0, r5}, 0x0) ioctl$EVIOCREVOKE(r5, 0x40044591, &(0x7f0000000480)=0x1000) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0xe4, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_STAB={0xb8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x41, 0x8001, 0x49c, 0x1, 0x8, 0x0, 0x2}}, {0x8, 0x2, [0xc, 0x6]}}, {{0x1c, 0x1, {0x6, 0x7e, 0x0, 0x4, 0x1, 0x9, 0x4, 0x3}}, {0xa, 0x2, [0x7, 0x2, 0x81]}}, {{0x1c, 0x1, {0x7, 0x7f, 0x5, 0x5, 0x0, 0x9, 0x40, 0x2}}, {0x8, 0x2, [0x6, 0x1]}}, {{0x1c, 0x1, {0x4, 0x3c, 0x6, 0x4, 0x1, 0x8000, 0xc9b2}}, {0x4}}, {{0x1c, 0x1, {0x7, 0x7, 0x6, 0x4, 0x2, 0xea31, 0xfff, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 20.399441019s ago: executing program 5 (id=6087): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kfree\x00', r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) 20.382252561s ago: executing program 5 (id=6090): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a01040000000000000000020000040c000b40000000000000000608000540000000020900020073797a310000000008000a40fffffffc0800084000000001140000001100010000000020000000000100000a"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_read_part_table(0x5d4, &(0x7f0000000000)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f00000006c0)=ANY=[@ANYRES64, @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) sendto$inet6(r2, &(0x7f0000000b80)="be", 0x1, 0x4008014, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @remote, 0x7}, 0x1c) shutdown(r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000380)='./bus\x00', 0x198) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x88640, 0x0) 18.684710608s ago: executing program 5 (id=6114): socket(0x40000000015, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = syz_io_uring_setup(0x235, &(0x7f0000001240)={0x0, 0x10008cc8, 0x10100, 0x2, 0x75}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x3b, 0x2, 0x1}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76) 18.623670563s ago: executing program 5 (id=6116): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0xc0e42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) 17.575629728s ago: executing program 5 (id=6119): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup(r1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) r3 = dup3(r0, r2, 0x0) r4 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x13) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r6, &(0x7f0000000300)=[{&(0x7f0000000600)="8414", 0x2}, {&(0x7f0000000640)='hQ', 0x2}, {&(0x7f0000000900)="0db834278411be986e8bd0ae880053c48bcda26f", 0x14}], 0x3, 0xffffffff, 0x4) ioctl$TCFLSH(r0, 0x540b, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) lgetxattr(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0) io_uring_setup(0xfc6, &(0x7f00000002c0)={0x0, 0x6c02, 0x0, 0x0, 0x20000004}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES32=r5, @ANYBLOB='2\x00\x00\x00 \x00\x00\x00', @ANYRES32=r5, @ANYBLOB="47655e89c96df088697c85fe2865549ee596f31e41b047276433a5f4476fec5cf51f76ff53a96261c2115148ce3fabc87f3c4ddd9cec97ab2644", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) r8 = open(&(0x7f0000000140)='./file0\x00', 0x10f3c0, 0x186) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000080)=ANY=[], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='afs_call_done\x00', r2}, 0x18) fgetxattr(r8, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) listen(0xffffffffffffffff, 0xfffffffc) socket$inet_mptcp(0x2, 0x1, 0x106) 16.367157925s ago: executing program 5 (id=6125): syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 16.367001315s ago: executing program 33 (id=6125): syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.511339665s ago: executing program 1 (id=6341): socket(0x40000000015, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = syz_io_uring_setup(0x235, &(0x7f0000001240)={0x0, 0x10008cc8, 0x10100, 0x2, 0x75}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x3b, 0x2, 0x1}) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76) 3.465169099s ago: executing program 1 (id=6345): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) openat$full(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000440)=ANY=[], 0x0) 3.423161802s ago: executing program 1 (id=6347): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup(r1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) dup3(r0, r2, 0x0) r3 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) pwritev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000600)="84", 0x1}, {&(0x7f0000000640)='hQ', 0x2}, {&(0x7f0000000900)="0db834278411be986e8bd0ae880053c48bcda26f", 0x14}], 0x3, 0xffffffff, 0x4) ioctl$TCFLSH(r0, 0x540b, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0) io_uring_setup(0xfc6, &(0x7f00000002c0)={0x0, 0x6c02, 0x0, 0x0, 0x20000004}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x10f3c0, 0x186) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000080)=ANY=[], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='afs_call_done\x00', r2}, 0x18) fgetxattr(r4, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) listen(0xffffffffffffffff, 0xfffffffc) socket$inet_mptcp(0x2, 0x1, 0x106) 3.33843224s ago: executing program 1 (id=6349): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0) 3.255335816s ago: executing program 1 (id=6354): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r1, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, &(0x7f0000001080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_clone(0xd2080, &(0x7f00000003c0)="3f3d1288adac988903a0ae0f8f704aa82f630201ea1fc04e8503dc70c807f79f192bc2264833490c03c85a6862bbcf07b070c557a4af663f71380c07709508b6c0eeaffbdc575400bde0582f16a4b709601cfa6dd8584c138ffca94e0bcf90f3c01a2d4564add8786b033b2d2fe18143c8a079298aa4564e764e2ac8e4a068be35ff2e6bb1711287445a1a9a18e548a9dac185252e99e61de46d1ddeca5c1d955ccdda91719a2001ea5c2453dada782939c6c828d1284cf9c10bf6f5d902624b704fe3548795fddac1e2da9b22dfd4cf9e4f701938accafa43ede24a9c67f52b6483bb2580ad14e7bb06d3ac751861e9f1b1", 0xf2, &(0x7f0000000080), &(0x7f0000000180), &(0x7f00000004c0)="6caafa32007b9f0e3e177eec1394db8866153451ea6822f4fd5c789338dd1b5bd319c05c2fc0758548bb8be5784f51ec39bee0b558320c8c0702172bb4403a79c171bfaace3ab00983dba8b856306603cc4616688c3a9c39615ec962190c9b727414de6c7ed83d6c9b94bc7253ddaeaed4898f30ce7f76406b3f1d4b4458bf541c01b0ca7d9f1f07721b787fd2669c4d77b3bb522de8caf4318b2b2608f77b3c9f2a69714ad5b7397afd40115ac3db0cf65211b3407bc190979f5bd7af9c3ae0342666f236e5602367bb1c2cb19df9aec04b0169fac24738b960ffffb65410ad46e35c30af5bbdcdeda916151a485293a9") perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2aa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3ff, 0x0, @perf_config_ext={0x6, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)={0x2c, r5, 0x1, 0x70bd26, 0x0, {0x25}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) 2.910067764s ago: executing program 1 (id=6361): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0) recvmmsg$unix(r1, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1020}], 0x1}}], 0x8, 0x34000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f0000000040)={0xc, 0x20008}) 1.786619905s ago: executing program 3 (id=6389): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0x2}, 0x18) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, &(0x7f0000001080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_clone(0xd2080, &(0x7f00000003c0)="3f3d1288adac988903a0ae0f8f704aa82f630201ea1fc04e8503dc70c807f79f192bc2264833490c03c85a6862bbcf07b070c557a4af663f71380c07709508b6c0eeaffbdc575400bde0582f16a4b709601cfa6dd8584c138ffca94e0bcf90f3c01a2d4564add8786b033b2d2fe18143c8a079298aa4564e764e2ac8e4a068be35ff2e6bb1711287445a1a9a18e548a9dac185252e99e61de46d1ddeca5c1d955ccdda91719a2001ea5c2453dada782939c6c828d1284cf9c10bf6f5d902624b704fe3548795fddac1e2da9b22dfd4cf9e4f701938accafa43ede24a9c67f52b6483bb2580ad14e7bb06d3ac751861e9f1b1", 0xf2, &(0x7f0000000080), &(0x7f0000000180), &(0x7f00000004c0)="6caafa32007b9f0e3e177eec1394db8866153451ea6822f4fd5c789338dd1b5bd319c05c2fc0758548bb8be5784f51ec39bee0b558320c8c0702172bb4403a79c171bfaace3ab00983dba8b856306603cc4616688c3a9c39615ec962190c9b727414de6c7ed83d6c9b94bc7253ddaeaed4898f30ce7f76406b3f1d4b4458bf541c01b0ca7d9f1f07721b787fd2669c4d77b3bb522de8caf4318b2b2608f77b3c9f2a69714ad5b7397afd40115ac3db0cf65211b3407bc190979f5bd7af9c3ae0342666f236e5602367bb1c2cb19df9aec04b0169fac24738b960ffffb65410ad46e35c30af5bbdcdeda916151a485293a9") perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2aa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3ff, 0x0, @perf_config_ext={0x6, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)={0x2c, r5, 0x1, 0x70bd26, 0x0, {0x25}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) 1.626591008s ago: executing program 6 (id=6391): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000000000)=0xf1e) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffffff8c}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000840) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000013c0)={'batadv_slave_1\x00', 0x0}) sendmsg$inet(r3, &(0x7f0000001480)={&(0x7f00000001c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000001380)=[{&(0x7f0000000200)="3a3b9ec7ca5e3868a70d18e74c525de72a44f169623dd4437adbb24c0e56ca8a5fd7f5dd", 0x24}, {&(0x7f0000000240)="fea65333eda105a5e5b3c508a14b370d0d6d7540d079603e50dd8252de47a8ebc934c0e9c4c1ce107e61712c650a03a8eda6f3e433990917491b35a094ecac274b3303c34b8b9506c573eec81a1194d6641d46e224643bb124b3aff5206a432c9c38a8d10e63b9b636f03cb4c71b1bc84e66d18693e25da8", 0x78}, {&(0x7f00000002c0)="ee9406f36b6373c6baa6363013179782541b7a3aba637361e1d5a834f3a63554cfb1a74ab1c7726a3b76281fbd3ad906abf64e5cb8e6d550c63b338c51130161782a2ac38750d3d9f1d43ca26d1e9c12d1ea27c13b81fa06a52feb78da3a8e8ecbcd47f9587dbdf672256f11816148c1a99693ddeabe9e03784407718109b04203848986ea7d137848e31cb7a7967d5b00b332a0c98138b98f39244ccc3e", 0x9e}, {&(0x7f0000000380)="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", 0x1000}], 0x4, &(0x7f0000001400)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @private=0xa010102, @rand_addr=0x64010101}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x68}, 0x40400c5) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) fcntl$setlease(r5, 0x400, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000014c0), &(0x7f0000001500)}, 0x20) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000001680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x101, 0x101, 0x5, [@union={0xa, 0x8, 0x0, 0x5, 0x0, 0x1, [{0x6, 0x1, 0x5}, {0x2, 0x3, 0x9}, {0xd, 0x2, 0x7}, {0x6, 0x4}, {0x1, 0x0, 0x3cc}, {0xe, 0x2, 0x5}, {0x6, 0x5, 0x4}, {0xb, 0x4, 0x7f}]}, @const={0x10, 0x0, 0x0, 0xa, 0x2}, @enum={0x6, 0x3, 0x0, 0x6, 0x4, [{0x0, 0x7}, {0x4, 0x1}, {0xa, 0x400}]}, @restrict={0xc, 0x0, 0x0, 0xb, 0x3}, @ptr={0x4, 0x0, 0x0, 0x2, 0x2}, @datasec={0x6, 0x2, 0x0, 0xf, 0x1, [{0x1, 0x0, 0xffffff29}, {0x5, 0x99c, 0x3}], "95"}, @volatile={0x4, 0x0, 0x0, 0x9, 0x3}, @float={0xe, 0x0, 0x0, 0x10, 0x10}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x1f, 0x0, 0x72, 0x2}]}, {0x0, [0x30, 0x2e, 0x0]}}, &(0x7f00000017c0)=""/214, 0x121, 0xd6, 0x1, 0x6}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0xe0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001980)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f00000019c0)=[0x0, 0x0, 0x0], &(0x7f0000001a00)=[0x0, 0x0], 0x0, 0xed, &(0x7f0000001a40)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001a80), &(0x7f0000001ac0), 0x8, 0x5d, 0x8, 0x8, &(0x7f0000001b00)}}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e40)={0x18, 0x10, &(0x7f0000001c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0x2, 0x8, 0x3, 0x0, 0x4}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x8}, @ldst={0x3, 0x3, 0x4, 0xa, 0x1, 0xfffffffffffffff8, 0x4}]}, &(0x7f0000001d00)='GPL\x00', 0x3, 0x2e, &(0x7f0000001d40)=""/46, 0x40f00, 0x26, '\x00', r4, 0x0, r0, 0x8, &(0x7f0000001d80)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001dc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r0, 0x1, 0x1], &(0x7f0000001e00)=[{0x3, 0x3, 0x10, 0x9}, {0x2, 0x3, 0x10, 0x9}, {0x3, 0x3, 0xe, 0x2}, {0x1, 0x5, 0x7, 0x7}], 0x10, 0x815}, 0x94) r10 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001f00), 0x90602, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000001f40)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) pipe2$watch_queue(&(0x7f0000001f80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002000)=@generic={&(0x7f0000001fc0)='./file0\x00', 0x0, 0x10}, 0x18) r14 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002040), 0x400102, 0x0) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=@bloom_filter={0x1e, 0x6, 0x8, 0x82d, 0x80, 0x1, 0x4, '\x00', r4, 0xffffffffffffffff, 0x0, 0x5, 0x3, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002180)={0x20, 0x17, &(0x7f0000001580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x11f0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @exit, @map_fd={0x18, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001640)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x1, '\x00', r4, @netfilter=0x2d, r7, 0x8, &(0x7f0000001900)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x5, 0x6, 0x8e3, 0x5}, 0x10, r8, r9, 0x4, &(0x7f0000002100)=[r10, r11, r12, r13, r14, r15], &(0x7f0000002140)=[{0x5, 0x4, 0x7, 0xc}, {0x0, 0x1, 0x4, 0x3}, {0x2, 0x2, 0xa, 0x6}, {0x1, 0x3, 0xe, 0x2}]}, 0x94) ioctl$AUTOFS_IOC_ASKUMOUNT(r6, 0x80049370, &(0x7f0000002240)) semget(0x1, 0x3, 0x2) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000023c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000002480)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x28, r16, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r17}, @val={0xc, 0x99, {0x3, 0xd}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 1.510905927s ago: executing program 6 (id=6393): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x4, @local, 'veth1_to_bond\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'veth0_virt_wifi\x00'}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f0000000180)={[{@dioread_nolock}, {@jqfmt_vfsv0}]}, 0xff, 0x4a9, &(0x7f0000000580)="$eJzs3M9rXNUeAPDvnUnS301eX1/fa1+r0SoWfyRNWrULFyoKLhQEXdRlTNJaO22kiWBLsFGkLqXgXlwK/gXu3Ii6EMGtgkspFA1CUxcSub+aZDKZ5menzXw+MJlz5p6Zc773njNz5p7cCaBt9aZ/koidEfFzRHTn2YUFevO7menJ4ZvTk8NJzM6+9nuSlbsxPTlcFi2ft6PIHKlEVD5K4tlkcb3jFy+dHarVRi8U+f6Jc+/0j1+89MSZc0OnR0+Pnh88ceL4sYGnnxp8cl3iTOO6ceD9sYP7X3rj6ivDJ6+++d2XabP2Hcq3z4/jtm42CKiB3nSv/TGbqd/28Arafi/YNS+ddLSwIaxINSLSw9WZjf/uqMbcweuOFz9saeOADZV+Nm1ZevPULLCJJdHqFgCtUX7Qp99/y9sdmnrcFa4/F9EV+fmKmenJ4Zlb8XdEpSjTuYH190bEyam/PktvsdLzEAAAq5DNbR5vNP+rxL7sPl/r2F2sofRExL8iYk9E/Dsi9kbEfyKysv+NiP/lT57tXmb9vXX5xfOfyrWGbV4n6fzvmZib+83Mi7+466kWuV1Z/J3JqTO10aPFPjkSnVvS/ECTOr5+4adPlto2f/6X3tL6y7lg0YBrHXUn6EaGJobWaydc/yDiQEej+JNbKwFpD9gfEQdi8TpWE7vLxJlHvzi4VKHbx9/EOqwzzX4e8Uh+/KeiLv5S0nx9sn9r1EaP9pe9YrHvf7zy6oIHqnPJNcW/DtLjv31h/68r0f1nkq/XdkatNnphfOV1XPnl4yW/06yk/5ddPu3/Xcnr2Zr1D2/lB+q9oYmJCwMRXcnLWZmuomz2+ODcq5X5snwa/5HDjcf/nuI5aQX/j4i0Ex+KiPsi4v6i7Q9ExIMRcbhJ/N8+/9DbTeJPIomWHv+Rhu9/t/p/TzJ/vX4VierZb75aasV8ecf/eExl77W57P3vNpbbwDXuPgAAALgnVCJiZySVvjzduzMqlb6+/H/498b2Sm1sfOKxU2Pvnh/JrxHoic5Keaare9750IFkqnjFPD9YnCsutx8rzht/Wt2W5fuGx2ojLY4d2t2OheM/yvGf+q3a6tYBG871WtC+6sd/pUXtAO685Xz++y4Am1OD8b+tFe0A7jzf/6F9NRr/l+vy5v+wOXUsSvza4CfrgM3I/B/al/EP7cv4h7a0luv6V58oLxZY/etsXfYV/psmcbl5mfIXLzayGdti7pGo3B27pWHi7+LnLe+W9qw5kY6YBY9EJLGhlc79hgoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC97J8AAAD//wHu668=") r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r4, 0x5, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x1c1042, 0x0) fallocate(r5, 0x1, 0x6, 0xfff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x7, 0x40, 0x7, 0x10100, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x0, 0xe}, 0x50) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7c, r6}) 1.327263442s ago: executing program 3 (id=6396): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000600)="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", 0xe88}], 0x1) 1.23074254s ago: executing program 3 (id=6397): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) open(0x0, 0x143142, 0x80) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r1, 0x8004745a, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r5}, &(0x7f0000000700), &(0x7f0000000740)=r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000000, &(0x7f0000000100), 0x1, 0x518, &(0x7f00000019c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r7}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r11, 0x1, 0x70bd27, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.10928148s ago: executing program 6 (id=6398): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000600"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}], 0x1, &(0x7f0000000180)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r4}}], 0x20, 0x2400e044}, 0x0) 1.041220295s ago: executing program 3 (id=6399): bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pread64(0xffffffffffffffff, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x3, &(0x7f0000000140)=0x81, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000180)='mm_page_alloc\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00'}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4, 0x10000}, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x140c, 0x100, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000002000000000000210d0000aaa8fa017242ba9380d440fe0000000000000100000002000000", 0xfe60) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xa) pipe2$9p(0x0, 0x0) dup(0xffffffffffffffff) 1.040884855s ago: executing program 3 (id=6400): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_udp(0x2, 0x2, 0x0) mount$9p_rdma(0x0, 0x0, &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB]) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000980)='kfree\x00'}, 0x18) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r0, &(0x7f0000000880)=[{&(0x7f0000000680)=""/116, 0x74}], 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x23, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x105d0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x9, 0x0, 0x7, 0x5, 0x20005, 0xb, 0x0, 0x3, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) epoll_create(0xf7b) 1.017633797s ago: executing program 6 (id=6401): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x7}}, 0x10) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x415}, 0x18) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) r6 = eventfd2(0x0, 0x0) io_submit(r5, 0x1, &(0x7f0000000600)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x20, r6, 0x0}]) writev(r6, &(0x7f0000000480)=[{&(0x7f0000000240)="7e9adf65e9c6bafa", 0x8}], 0x100000000000012d) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.log\x00', 0x401, 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) socket$inet_mptcp(0x2, 0x1, 0x106) 692.137214ms ago: executing program 4 (id=6404): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1}, 0x48) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x300, 0xed}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x92f5e}, 0x6d) 670.846475ms ago: executing program 4 (id=6405): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e22, 0xfffffffe, @empty, 0x4}, 0x1c) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 565.018474ms ago: executing program 4 (id=6406): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYRES8=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = epoll_create(0x3ff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xa0000000}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000280)={0x2000000}) 493.551629ms ago: executing program 4 (id=6407): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x0, &(0x7f0000000080)}) 475.127231ms ago: executing program 2 (id=6408): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x3}, 0x18) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x0, 0x0) 459.582203ms ago: executing program 2 (id=6409): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) process_mrelease(0xffffffffffffffff, 0x0) 410.309077ms ago: executing program 2 (id=6410): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x30, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = inotify_init1(0x800) r6 = fcntl$dupfd(r4, 0x406, r5) connect$pppl2tp(r6, &(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x2, 0x2, 0x4, 0x3, {0xa, 0x4e22, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2b9d}}}, 0x3a) close_range(r1, 0xffffffffffffffff, 0x0) 410.018746ms ago: executing program 2 (id=6411): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') (fail_nth: 3) 315.009024ms ago: executing program 2 (id=6412): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) r0 = socket(0x10, 0x3, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000020000000000002000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f0000000040)}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r4}, &(0x7f00000008c0), &(0x7f0000000880)=r5}, 0x20) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_FQ_CODEL_ECN={0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1ff, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r9}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r11]) statx(0xffffffffffffff9c, 0x0, 0x81c7057f85b09df4, 0x80, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0xfffffffc, {0x1c, 0x14, 0x0, 0x2, 0x0, 0x0, 0xc8, 0x1}}, 0x1c}}, 0x0) 113.16016ms ago: executing program 3 (id=6413): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r1, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, &(0x7f0000001080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_clone(0xd2080, &(0x7f00000003c0)="3f3d1288adac988903a0ae0f8f704aa82f630201ea1fc04e8503dc70c807f79f192bc2264833490c03c85a6862bbcf07b070c557a4af663f71380c07709508b6c0eeaffbdc575400bde0582f16a4b709601cfa6dd8584c138ffca94e0bcf90f3c01a2d4564add8786b033b2d2fe18143c8a079298aa4564e764e2ac8e4a068be35ff2e6bb1711287445a1a9a18e548a9dac185252e99e61de46d1ddeca5c1d955ccdda91719a2001ea5c2453dada782939c6c828d1284cf9c10bf6f5d902624b704fe3548795fddac1e2da9b22dfd4cf9e4f701938accafa43ede24a9c67f52b6483bb2580ad14e7bb06d3ac751861e9f1b1", 0xf2, &(0x7f0000000080), &(0x7f0000000180), &(0x7f00000004c0)="6caafa32007b9f0e3e177eec1394db8866153451ea6822f4fd5c789338dd1b5bd319c05c2fc0758548bb8be5784f51ec39bee0b558320c8c0702172bb4403a79c171bfaace3ab00983dba8b856306603cc4616688c3a9c39615ec962190c9b727414de6c7ed83d6c9b94bc7253ddaeaed4898f30ce7f76406b3f1d4b4458bf541c01b0ca7d9f1f07721b787fd2669c4d77b3bb522de8caf4318b2b2608f77b3c9f2a69714ad5b7397afd40115ac3db0cf65211b3407bc190979f5bd7af9c3ae0342666f236e5602367bb1c2cb19df9aec04b0169fac24738b960ffffb65410ad46e35c30af5bbdcdeda916151a485293a9") perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2aa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3ff, 0x0, @perf_config_ext={0x6, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)={0x2c, r5, 0x1, 0x70bd26, 0x0, {0x25}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) 81.682933ms ago: executing program 6 (id=6414): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="8710000000000000000001000000080003000000010005000600000000"], 0x30}, 0x1, 0x0, 0x0, 0x94}, 0x8808) 71.475674ms ago: executing program 4 (id=6415): socket(0x40000000015, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = syz_io_uring_setup(0x235, &(0x7f0000001240)={0x0, 0x10008cc8, 0x10100, 0x2, 0x75}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x3b, 0x2, 0x1}) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76) 16.284408ms ago: executing program 2 (id=6416): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0, r1}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r5 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000340)=ANY=[], 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) 11.311969ms ago: executing program 4 (id=6417): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYRES8=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = epoll_create1(0x80000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000240)={0xa0000000}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000280)={0x2000000}) 0s ago: executing program 6 (id=6418): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0, r1}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r5 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000340)=ANY=[], 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) 0s ago: executing program 4 (id=6419): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffff}, 0x18) (async) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00', 0x1, 0xffffffffffffffff) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r4 = dup(r3) r5 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r5, r5, 0x21) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) (async) wait4(r5, 0x0, 0x40000000, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r8, r2, 0x25, 0x4, @void}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r9}, 0x10) (async) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) (async) r10 = msgget$private(0x0, 0x104) msgctl$MSG_STAT(r10, 0xb, &(0x7f0000000280)=""/249) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r7}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) (async) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r4, r2, 0x25, 0x4, @val=@tracing={0x0, 0x8}}, 0x20) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r12}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) kernel console output (not intermixed with test programs): 496.751206][T20395] do_syscall_64+0xd2/0x200 [ 496.751242][T20395] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 496.751270][T20395] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 496.751370][T20395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.751399][T20395] RIP: 0033:0x7f2e907eebe9 [ 496.751475][T20395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.751497][T20395] RSP: 002b:00007f2e8f20d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 496.751587][T20395] RAX: ffffffffffffffda RBX: 00007f2e90a16180 RCX: 00007f2e907eebe9 [ 496.751652][T20395] RDX: 0000000000084d03 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 496.751668][T20395] RBP: 00007f2e8f20d090 R08: 0000000000000000 R09: 0000000000000000 [ 496.751684][T20395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.751696][T20395] R13: 00007f2e90a16218 R14: 00007f2e90a16180 R15: 00007fff330020e8 [ 496.751715][T20395] [ 496.988073][T20398] loop2: detected capacity change from 0 to 256 [ 496.995205][T20398] FAT-fs (loop2): bogus number of FAT sectors [ 497.001421][T20398] FAT-fs (loop2): Can't find a valid FAT filesystem [ 497.105977][T20408] loop9: detected capacity change from 0 to 7 [ 497.119878][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 497.130211][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 497.138650][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 497.149406][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 497.164140][T20408] loop9: unable to read partition table [ 497.173701][T20410] loop5: detected capacity change from 0 to 128 [ 497.190338][T20408] loop_reread_partitions: partition scan of loop9 (被xڬd͈`*` [ 497.190338][T20408] ) failed (rc=-5) [ 497.213687][T20410] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 497.240418][T20410] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 497.318309][T13759] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 497.494413][T20425] FAULT_INJECTION: forcing a failure. [ 497.494413][T20425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 497.508083][T20425] CPU: 0 UID: 0 PID: 20425 Comm: syz.4.5612 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 497.508122][T20425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 497.508139][T20425] Call Trace: [ 497.508148][T20425] [ 497.508158][T20425] __dump_stack+0x1d/0x30 [ 497.508186][T20425] dump_stack_lvl+0xe8/0x140 [ 497.508211][T20425] dump_stack+0x15/0x1b [ 497.508239][T20425] should_fail_ex+0x265/0x280 [ 497.508262][T20425] should_fail+0xb/0x20 [ 497.508279][T20425] should_fail_usercopy+0x1a/0x20 [ 497.508301][T20425] _copy_from_user+0x1c/0xb0 [ 497.508404][T20425] __sys_sendto+0x19e/0x330 [ 497.508459][T20425] __x64_sys_sendto+0x76/0x90 [ 497.508495][T20425] x64_sys_call+0x2d05/0x2ff0 [ 497.508586][T20425] do_syscall_64+0xd2/0x200 [ 497.508621][T20425] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 497.508652][T20425] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 497.508684][T20425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.508756][T20425] RIP: 0033:0x7f2e907eebe9 [ 497.508776][T20425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.508797][T20425] RSP: 002b:00007f2e8f09d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 497.508821][T20425] RAX: ffffffffffffffda RBX: 00007f2e90a16090 RCX: 00007f2e907eebe9 [ 497.508837][T20425] RDX: 0000000000010000 RSI: 0000200000000180 RDI: 0000000000000006 [ 497.508852][T20425] RBP: 00007f2e8f09d090 R08: 0000200000000140 R09: 0000000000000014 [ 497.508864][T20425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.508876][T20425] R13: 00007f2e90a16128 R14: 00007f2e90a16090 R15: 00007fff330020e8 [ 497.508949][T20425] [ 497.979841][T20446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.000444][T20446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.050949][T20445] loop2: detected capacity change from 0 to 128 [ 498.172173][ T29] kauditd_printk_skb: 431 callbacks suppressed [ 498.172188][ T29] audit: type=1400 audit(1755046926.872:25345): avc: denied { write } for pid=20468 comm="syz.2.5630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 498.260320][T20472] loop3: detected capacity change from 0 to 256 [ 498.338677][T20469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5630'. [ 498.535394][T20476] 9pnet_fd: Insufficient options for proto=fd [ 499.149699][ T29] audit: type=1400 audit(1755046927.302:25346): avc: denied { read } for pid=20473 comm="syz.4.5631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 499.193491][T20480] 9pnet_fd: Insufficient options for proto=fd [ 499.242285][T20485] netlink: 'syz.1.5633': attribute type 10 has an invalid length. [ 499.250368][T20485] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5633'. [ 499.592392][T20494] netlink: 'syz.2.5635': attribute type 4 has an invalid length. [ 499.747960][ T29] audit: type=1400 audit(1755046927.932:25347): avc: denied { prog_load } for pid=20484 comm="syz.1.5633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 499.767664][ T29] audit: type=1400 audit(1755046927.932:25348): avc: denied { bpf } for pid=20484 comm="syz.1.5633" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 499.790610][ T29] audit: type=1400 audit(1755046927.932:25349): avc: denied { open } for pid=20484 comm="syz.1.5633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 499.810367][ T29] audit: type=1400 audit(1755046927.932:25350): avc: denied { perfmon } for pid=20484 comm="syz.1.5633" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 499.831918][ T29] audit: type=1400 audit(1755046927.932:25351): avc: denied { kernel } for pid=20484 comm="syz.1.5633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 499.851788][ T29] audit: type=1400 audit(1755046927.942:25352): avc: denied { prog_run } for pid=20484 comm="syz.1.5633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 499.871267][ T29] audit: type=1400 audit(1755046927.972:25353): avc: denied { read write } for pid=19637 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 499.896299][ T29] audit: type=1400 audit(1755046927.972:25354): avc: denied { open } for pid=19637 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 499.949174][T13763] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.033734][T13763] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.114441][T13763] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.182601][T20520] loop3: detected capacity change from 0 to 512 [ 500.196250][T20520] EXT4-fs: test_dummy_encryption option not supported [ 500.207356][T20520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5644'. [ 500.208274][T13763] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.296617][T20520] syzkaller0: entered promiscuous mode [ 500.302202][T20520] syzkaller0: entered allmulticast mode [ 500.318644][T20497] lo speed is unknown, defaulting to 1000 [ 500.332122][T20526] loop5: detected capacity change from 0 to 4096 [ 500.349485][T20526] EXT4-fs: Ignoring removed nomblk_io_submit option [ 500.360061][T20526] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 500.396626][T13763] bridge_slave_1: left allmulticast mode [ 500.402537][T13763] bridge_slave_1: left promiscuous mode [ 500.408527][T13763] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.435334][T13763] bridge_slave_0: left promiscuous mode [ 500.441619][T13763] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.505226][T20535] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5647'. [ 500.511663][T20536] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 500.552208][T20536] SELinux: failed to load policy [ 500.606704][T13763] team0: Port device geneve1 removed [ 500.624572][T13763]  (unregistering): (slave bridge0): Releasing backup interface [ 500.781275][T13822] smc: removing ib device syz1 [ 500.786401][T13763]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 500.799210][T13763]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 500.810376][T13763]  (unregistering): Released all slaves [ 500.819865][T13763] bond1 (unregistering): Released all slaves [ 500.830593][T13763] bond0 (unregistering): Released all slaves [ 500.839782][T13763] bond2 (unregistering): Released all slaves [ 500.957360][T19637] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.469014][T20556] hub 9-0:1.0: USB hub found [ 501.473758][T20556] hub 9-0:1.0: 8 ports detected [ 501.492779][T20497] chnl_net:caif_netlink_parms(): no params data found [ 501.781243][T20497] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.788397][T20497] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.830115][T20497] bridge_slave_0: entered allmulticast mode [ 501.851308][T20497] bridge_slave_0: entered promiscuous mode [ 501.883572][T20563] $H: renamed from bond0 (while UP) [ 501.918602][T20573] SELinux: ebitmap: truncated map [ 501.938515][T20573] SELinux: failed to load policy [ 501.947214][T20563] $H: entered promiscuous mode [ 501.952854][T20563] bond_slave_0: entered promiscuous mode [ 501.960114][T20563] bond_slave_1: entered promiscuous mode [ 502.010761][T20497] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.017993][T20497] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.026203][T20497] bridge_slave_1: entered allmulticast mode [ 502.056573][T20497] bridge_slave_1: entered promiscuous mode [ 502.078028][T20576] loop4: detected capacity change from 0 to 2048 [ 502.100878][T20497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.115591][T13763] hsr_slave_0: left promiscuous mode [ 502.116131][T13763] hsr_slave_1: left promiscuous mode [ 502.116622][T13763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.134458][T13763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.159408][T13763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.159431][T13763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.169111][T13763] veth1_macvtap: left promiscuous mode [ 502.188906][T13763] veth0_macvtap: left promiscuous mode [ 502.189027][T13763] veth1_vlan: left promiscuous mode [ 502.189067][T13763] veth0_vlan: left promiscuous mode [ 502.399336][T13763] team0 (unregistering): Port device team_slave_1 removed [ 502.419187][T13763] team0 (unregistering): Port device team_slave_0 removed [ 502.472155][T20497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.523685][T20497] team0: Port device team_slave_0 added [ 502.533773][T20497] team0: Port device team_slave_1 added [ 502.566976][T20497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.574222][T20497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.600521][T20497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.614846][T20497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.621900][T20497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.648225][T20497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.732213][T20604] hub 9-0:1.0: USB hub found [ 502.737262][T20604] hub 9-0:1.0: 8 ports detected [ 502.771691][T20497] hsr_slave_0: entered promiscuous mode [ 502.778412][T20497] hsr_slave_1: entered promiscuous mode [ 503.244485][T20497] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 503.291875][T20621] netlink: 'syz.4.5673': attribute type 4 has an invalid length. [ 503.345007][T20497] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 503.386718][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 503.386737][ T29] audit: type=1400 audit(1755046932.082:25448): avc: denied { block_suspend } for pid=20622 comm="syz.3.5676" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 503.427356][T20497] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 503.442307][T20497] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 503.465102][T13763] IPVS: stop unused estimator thread 0... [ 503.649664][ T29] audit: type=1400 audit(1755046932.352:25449): avc: denied { write } for pid=20618 comm="syz.2.5675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 503.735205][T20497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.797603][T20644] hub 9-0:1.0: USB hub found [ 503.802757][T20644] hub 9-0:1.0: 8 ports detected [ 503.877337][ T29] audit: type=1400 audit(1755046932.562:25450): avc: denied { firmware_load } for pid=20618 comm="syz.2.5675" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 503.971991][T20497] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.072983][T13763] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.080140][T13763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.103365][T20641] loop5: detected capacity change from 0 to 4096 [ 504.130445][T20641] EXT4-fs: Ignoring removed nomblk_io_submit option [ 504.139460][T13822] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.146808][T13822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.161281][T20641] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.252806][T20641] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5680'. [ 504.380374][ T29] audit: type=1400 audit(1755046933.082:25451): avc: denied { read } for pid=20656 comm="syz.3.5682" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 504.403610][ T29] audit: type=1326 audit(1755046933.102:25452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20656 comm="syz.3.5682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed5f0ebe9 code=0x7ffc0000 [ 504.429343][ T29] audit: type=1326 audit(1755046933.102:25453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20656 comm="syz.3.5682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbed5f0ebe9 code=0x7ffc0000 [ 504.429385][ T29] audit: type=1326 audit(1755046933.102:25454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20656 comm="syz.3.5682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed5f0ebe9 code=0x7ffc0000 [ 504.429468][ T29] audit: type=1326 audit(1755046933.102:25455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20656 comm="syz.3.5682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbed5f0ebe9 code=0x7ffc0000 [ 504.434995][T20497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.463789][ T29] audit: type=1326 audit(1755046933.132:25456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20656 comm="syz.3.5682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed5f0ebe9 code=0x7ffc0000 [ 504.555552][ T29] audit: type=1326 audit(1755046933.132:25457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20656 comm="syz.3.5682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed5f0ebe9 code=0x7ffc0000 [ 504.595663][T19637] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.614066][T20662] loop3: detected capacity change from 0 to 512 [ 504.614441][T20662] EXT4-fs: Ignoring removed nomblk_io_submit option [ 504.614502][T20662] EXT4-fs: Ignoring removed nomblk_io_submit option [ 504.614764][T20662] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 504.615784][T20662] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 504.615813][T20662] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 504.616306][T20662] EXT4-fs (loop3): 1 truncate cleaned up [ 504.616694][T20662] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.685970][T20497] veth0_vlan: entered promiscuous mode [ 504.697622][T20497] veth1_vlan: entered promiscuous mode [ 504.761484][T20497] veth0_macvtap: entered promiscuous mode [ 504.779665][T13161] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.780924][T20497] veth1_macvtap: entered promiscuous mode [ 504.813901][T20677] loop9: detected capacity change from 0 to 7 [ 504.825168][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 504.835452][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 504.843757][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 504.850477][T20497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.854080][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 504.887364][T20677] loop9: unable to read partition table [ 504.900381][T20679] loop5: detected capacity change from 0 to 128 [ 504.915254][T20497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.923062][T20677] loop_reread_partitions: partition scan of loop9 (被xڬd͈`*` [ 504.923062][T20677] ) failed (rc=-5) [ 504.937688][T20679] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 504.965600][T20681] netlink: 'syz.2.5689': attribute type 10 has an invalid length. [ 504.973630][T20681] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5689'. [ 504.989391][T13763] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.006778][T20679] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 505.014134][T13763] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.037316][T13763] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.059811][T13757] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.099677][T13763] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 505.115555][T20684] loop2: detected capacity change from 0 to 512 [ 505.129216][T20684] EXT4-fs: Ignoring removed nobh option [ 505.166305][T20686] loop5: detected capacity change from 0 to 1024 [ 505.166359][T20684] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.5690: corrupted inode contents [ 505.186884][T20686] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 505.197896][T20684] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.5690: mark_inode_dirty error [ 505.212173][T20684] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.5690: corrupted inode contents [ 505.230191][T20684] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.5690: mark_inode_dirty error [ 505.244337][T20684] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.5690: Failed to acquire dquot type 0 [ 505.258660][T20684] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.5690: corrupted inode contents [ 505.274679][T20684] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.5690: mark_inode_dirty error [ 505.287404][T20684] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.5690: corrupted inode contents [ 505.301206][T20684] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.5690: mark_inode_dirty error [ 505.314903][T20684] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.5690: corrupted inode contents [ 505.334955][T20684] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 505.345487][T20684] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.5690: corrupted inode contents [ 505.364278][T20684] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.5690: mark_inode_dirty error [ 505.393975][T20684] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 505.418939][T20701] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 505.442834][T20684] EXT4-fs (loop2): 1 truncate cleaned up [ 505.443255][T20684] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.443585][T20684] ext4 filesystem being mounted at /528/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 505.482643][T20706] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5697'. [ 505.489851][T20684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20684 comm=syz.2.5690 [ 505.517784][T12849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.596506][T20710] loop2: detected capacity change from 0 to 4096 [ 505.630775][T20710] EXT4-fs: Ignoring removed nomblk_io_submit option [ 505.633069][T20715] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5698'. [ 505.645656][T20710] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.665345][T20714] SELinux: ebitmap: truncated map [ 505.667670][T20714] SELinux: failed to load policy [ 505.835027][T20723] loop5: detected capacity change from 0 to 1024 [ 505.836893][T20723] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 505.884376][T12849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.053788][T20733] loop3: detected capacity change from 0 to 2048 [ 506.062212][T20731] loop5: detected capacity change from 0 to 4096 [ 506.081390][T20731] EXT4-fs: Ignoring removed nomblk_io_submit option [ 506.101704][T20735] loop1: detected capacity change from 0 to 2048 [ 506.110835][T20731] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 506.260953][T19637] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.468887][T20748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5713'. [ 506.692994][T20755] loop4: detected capacity change from 0 to 1024 [ 506.703371][T20755] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 507.125613][T20768] loop5: detected capacity change from 0 to 4096 [ 507.146334][T20768] EXT4-fs: Ignoring removed nomblk_io_submit option [ 507.215211][T20777] loop4: detected capacity change from 0 to 256 [ 507.226083][T20779] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5724'. [ 507.241639][T20768] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.896786][T20791] loop3: detected capacity change from 0 to 1024 [ 507.920683][T20791] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 507.958198][T19637] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.100810][T20801] loop2: detected capacity change from 0 to 512 [ 508.118707][T20801] EXT4-fs: Ignoring removed nomblk_io_submit option [ 508.130770][T20801] EXT4-fs: Ignoring removed nomblk_io_submit option [ 508.147913][T20801] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 508.175480][T20801] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 508.204121][T20801] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 508.238048][T20811] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5735'. [ 508.239330][T20801] EXT4-fs (loop2): 1 truncate cleaned up [ 508.239810][T20801] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.324462][T12849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.427293][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 508.427383][ T29] audit: type=1400 audit(1755046937.122:25589): avc: denied { connect } for pid=20815 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 508.458465][T20816] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 508.488133][ T29] audit: type=1400 audit(1755046937.162:25590): avc: denied { bind } for pid=20815 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 508.508878][ T29] audit: type=1400 audit(1755046937.162:25591): avc: denied { ioctl } for pid=20815 comm="+}[@" path="socket:[63922]" dev="sockfs" ino=63922 ioctlcmd=0x8936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 508.552973][T20818] loop3: detected capacity change from 0 to 4096 [ 508.562005][T20818] EXT4-fs: Ignoring removed nomblk_io_submit option [ 508.571354][T20818] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.656123][T13161] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.732851][ T29] audit: type=1400 audit(1755046937.432:25592): avc: denied { setopt } for pid=20822 comm="syz.3.5741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 508.757917][T20829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5743'. [ 508.792011][ T29] audit: type=1400 audit(1755046937.472:25593): avc: denied { mount } for pid=20822 comm="syz.3.5741" name="/" dev="configfs" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 508.815108][ T29] audit: type=1400 audit(1755046937.472:25594): avc: denied { search } for pid=20822 comm="syz.3.5741" name="/" dev="configfs" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 508.837751][ T29] audit: type=1400 audit(1755046937.472:25595): avc: denied { setattr } for pid=20822 comm="syz.3.5741" name="/" dev="configfs" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 508.863860][T20828] loop5: detected capacity change from 0 to 2048 [ 508.892631][T20835] loop2: detected capacity change from 0 to 1024 [ 508.913092][T20836] lo speed is unknown, defaulting to 1000 [ 508.932203][T20835] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 508.964614][ T29] audit: type=1400 audit(1755046937.662:25596): avc: denied { view } for pid=20834 comm="syz.3.5747" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 508.984652][T20841] netlink: 'syz.3.5747': attribute type 21 has an invalid length. [ 508.992943][T20841] netlink: 'syz.3.5747': attribute type 4 has an invalid length. [ 509.013749][T20842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5748'. [ 509.027578][T20841] random: crng reseeded on system resumption [ 509.035237][ T29] audit: type=1400 audit(1755046937.722:25597): avc: denied { append } for pid=20834 comm="syz.3.5747" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 509.059133][ T29] audit: type=1400 audit(1755046937.722:25598): avc: denied { open } for pid=20834 comm="syz.3.5747" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 509.099142][T20841] Restarting kernel threads ... [ 509.110414][T20841] Done restarting kernel threads. [ 509.445264][T20855] loop3: detected capacity change from 0 to 256 [ 509.464902][T20854] loop4: detected capacity change from 0 to 2048 [ 510.439492][T20879] tipc: Started in network mode [ 510.444627][T20879] tipc: Node identity 320eb1c1b656, cluster identity 4711 [ 510.451933][T20879] tipc: Enabled bearer , priority 0 [ 510.482899][T20880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5760'. [ 510.500281][T20883] syzkaller0: entered promiscuous mode [ 510.505931][T20883] syzkaller0: entered allmulticast mode [ 510.550005][T20879] tipc: Resetting bearer [ 510.570327][T20876] tipc: Resetting bearer [ 510.603674][T20876] tipc: Disabling bearer [ 510.739327][T20889] loop5: detected capacity change from 0 to 512 [ 510.768293][T20889] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 510.801314][T20889] EXT4-fs (loop5): 1 truncate cleaned up [ 510.807422][T20889] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.858704][T20889] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.073767][T20898] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5769'. [ 511.137487][T20901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5770'. [ 511.338077][T20922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5775'. [ 511.689888][T20944] loop5: detected capacity change from 0 to 4096 [ 511.696999][T20944] EXT4-fs: Ignoring removed nomblk_io_submit option [ 511.737342][T20944] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 511.870955][T20957] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 511.920810][T19637] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.976851][T20948] loop1: detected capacity change from 0 to 512 [ 511.984378][T20948] EXT4-fs: Ignoring removed oldalloc option [ 512.056631][T20975] hub 9-0:1.0: USB hub found [ 512.061515][T20975] hub 9-0:1.0: 8 ports detected [ 512.091491][T20948] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.5789: Parent and EA inode have the same ino 15 [ 512.128431][T20948] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.5789: Parent and EA inode have the same ino 15 [ 512.192396][T20948] EXT4-fs (loop1): 1 orphan inode deleted [ 512.254072][T20948] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 512.298235][T20989] lo speed is unknown, defaulting to 1000 [ 512.441493][T20497] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.513002][T21001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5806'. [ 512.737743][T21011] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5809'. [ 512.882007][T21031] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5807'. [ 512.883357][T21030] loop4: detected capacity change from 0 to 128 [ 512.883859][T21030] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 512.896370][T21030] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 512.946935][ T37] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 513.086090][T21039] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5818'. [ 513.237462][T21053] vlan0: entered allmulticast mode [ 513.372779][T21066] loop1: detected capacity change from 0 to 4096 [ 513.385335][T21070] loop5: detected capacity change from 0 to 128 [ 513.389250][T21066] EXT4-fs: Ignoring removed nomblk_io_submit option [ 513.407507][T21070] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 513.432877][T21066] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.435730][T21070] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 513.551986][T13784] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 513.581714][T20497] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.700597][T21090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5832'. [ 513.731752][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 513.731772][ T29] audit: type=1400 audit(1755046942.432:25775): avc: denied { ioctl } for pid=21094 comm="syz.5.5838" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 513.774042][ T29] audit: type=1326 audit(1755046942.432:25776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21082 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45cefebe9 code=0x7ffc0000 [ 513.852917][ T29] audit: type=1400 audit(1755046942.552:25777): avc: denied { tracepoint } for pid=21097 comm="syz.4.5840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 513.874117][T21106] loop1: detected capacity change from 0 to 4096 [ 513.874449][T21106] EXT4-fs: Ignoring removed nomblk_io_submit option [ 513.882330][T21106] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.907885][ T29] audit: type=1326 audit(1755046942.612:25778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21097 comm="syz.4.5840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e907eebe9 code=0x7ffc0000 [ 513.907925][ T29] audit: type=1326 audit(1755046942.612:25779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21097 comm="syz.4.5840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e907eebe9 code=0x7ffc0000 [ 513.908420][ T29] audit: type=1326 audit(1755046942.612:25780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21097 comm="syz.4.5840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f2e907eebe9 code=0x7ffc0000 [ 513.908458][ T29] audit: type=1326 audit(1755046942.612:25781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21097 comm="syz.4.5840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e907eebe9 code=0x7ffc0000 [ 513.908506][ T29] audit: type=1326 audit(1755046942.612:25782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21097 comm="syz.4.5840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e907eebe9 code=0x7ffc0000 [ 514.120251][T20497] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.231368][T21123] hub 9-0:1.0: USB hub found [ 514.236563][T21123] hub 9-0:1.0: 8 ports detected [ 514.685437][ T29] audit: type=1400 audit(1755046943.382:25783): avc: denied { read write } for pid=21131 comm="syz.4.5849" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 514.710191][ T29] audit: type=1400 audit(1755046943.382:25784): avc: denied { open } for pid=21131 comm="syz.4.5849" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 514.927973][T21156] sctp: [Deprecated]: syz.1.5856 (pid 21156) Use of int in max_burst socket option. [ 514.927973][T21156] Use struct sctp_assoc_value instead [ 514.948574][T21158] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 514.976711][T21158] SELinux: failed to load policy [ 515.077272][T21167] lo speed is unknown, defaulting to 1000 [ 515.114708][T21169] netlink: 'syz.3.5861': attribute type 21 has an invalid length. [ 515.122821][T21169] netlink: 'syz.3.5861': attribute type 4 has an invalid length. [ 515.531729][T21177] hub 9-0:1.0: USB hub found [ 515.536869][T21177] hub 9-0:1.0: 8 ports detected [ 515.771974][T21172] loop4: detected capacity change from 0 to 32768 [ 515.827824][T21186] loop2: detected capacity change from 0 to 512 [ 515.839368][T21172] loop4: p1 p3 < > [ 515.852846][T21186] EXT4-fs: Ignoring removed nomblk_io_submit option [ 515.875157][T21186] EXT4-fs: Ignoring removed nomblk_io_submit option [ 515.883056][T21186] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 515.898820][T21186] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 515.910790][T21186] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 515.923105][T21186] EXT4-fs (loop2): 1 truncate cleaned up [ 515.923506][T21186] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.981916][T21194] __nla_validate_parse: 2 callbacks suppressed [ 515.982001][T21194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5869'. [ 516.014947][T21198] loop4: detected capacity change from 0 to 512 [ 516.023823][T21198] EXT4-fs: Ignoring removed nomblk_io_submit option [ 516.030721][T21198] EXT4-fs: Ignoring removed nomblk_io_submit option [ 516.038878][T21198] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 516.048242][T12849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.058250][T21198] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 516.066493][T21198] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 516.075323][T21198] EXT4-fs (loop4): 1 truncate cleaned up [ 516.081622][T21198] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.095271][T21205] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5870'. [ 516.307956][T12087] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.413725][T21222] netlink: 'syz.5.5874': attribute type 4 has an invalid length. [ 516.509948][T21225] hub 9-0:1.0: USB hub found [ 516.515031][T21225] hub 9-0:1.0: 8 ports detected [ 516.966026][T21233] loop1: detected capacity change from 0 to 1024 [ 516.986740][T21233] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 517.022027][T21233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 517.129750][T21233] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #11: comm syz.1.5878: missing EA_INODE flag [ 517.159362][T21233] EXT4-fs (loop1): Remounting filesystem read-only [ 517.258635][T21245] loop4: detected capacity change from 0 to 512 [ 517.280623][T21245] EXT4-fs: Ignoring removed nomblk_io_submit option [ 517.296053][T21239] loop2: detected capacity change from 0 to 1024 [ 517.300616][T21245] EXT4-fs: Ignoring removed nomblk_io_submit option [ 517.318813][T21239] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 517.319258][T21245] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 517.356995][T21245] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 517.375681][T21245] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 517.385294][T21240] lo speed is unknown, defaulting to 1000 [ 517.394690][T21245] EXT4-fs (loop4): 1 truncate cleaned up [ 517.401177][T21245] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 517.519903][T12087] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.540928][T21257] loop2: detected capacity change from 0 to 2048 [ 517.849534][T20497] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.365942][T21276] loop2: detected capacity change from 0 to 1024 [ 518.373462][T21276] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 518.411959][T21282] loop3: detected capacity change from 0 to 512 [ 518.419338][T21282] EXT4-fs: Ignoring removed nomblk_io_submit option [ 518.426710][T21282] EXT4-fs: Ignoring removed nomblk_io_submit option [ 518.434659][T21282] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 518.444448][T21282] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 518.452630][T21282] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 518.475594][T21282] EXT4-fs (loop3): 1 truncate cleaned up [ 518.483007][T21282] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.619000][T13161] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.499282][T21295] hub 9-0:1.0: USB hub found [ 519.504033][T21295] hub 9-0:1.0: 8 ports detected [ 519.535994][T21298] loop2: detected capacity change from 0 to 512 [ 519.543730][T21298] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 519.563032][T21298] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.5903: invalid indirect mapped block 83886080 (level 1) [ 519.586070][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 519.586090][ T29] audit: type=1400 audit(1755046948.282:25918): avc: denied { bind } for pid=21315 comm="syz.1.5906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 519.596125][T21298] EXT4-fs (loop2): Remounting filesystem read-only [ 519.621186][T21319] FAULT_INJECTION: forcing a failure. [ 519.621186][T21319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.627737][T21298] EXT4-fs (loop2): 1 orphan inode deleted [ 519.634464][T21319] CPU: 0 UID: 0 PID: 21319 Comm: syz.3.5907 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 519.634510][T21319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 519.634528][T21319] Call Trace: [ 519.634539][T21319] [ 519.634553][T21319] __dump_stack+0x1d/0x30 [ 519.634585][T21319] dump_stack_lvl+0xe8/0x140 [ 519.634657][T21319] dump_stack+0x15/0x1b [ 519.634680][T21319] should_fail_ex+0x265/0x280 [ 519.634710][T21319] should_fail+0xb/0x20 [ 519.635010][T21319] should_fail_usercopy+0x1a/0x20 [ 519.635190][T21319] strncpy_from_user+0x25/0x230 [ 519.635236][T21319] ? __kmalloc_cache_noprof+0x189/0x320 [ 519.635284][T21319] __se_sys_memfd_create+0x1ff/0x590 [ 519.635377][T21319] __x64_sys_memfd_create+0x31/0x40 [ 519.635407][T21319] x64_sys_call+0x2abe/0x2ff0 [ 519.635438][T21319] do_syscall_64+0xd2/0x200 [ 519.635478][T21319] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 519.635536][T21319] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 519.635571][T21319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.635603][T21319] RIP: 0033:0x7fbed5f0ebe9 [ 519.635697][T21319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.635726][T21319] RSP: 002b:00007fbed496ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 519.635772][T21319] RAX: ffffffffffffffda RBX: 0000000000000452 RCX: 00007fbed5f0ebe9 [ 519.635790][T21319] RDX: 00007fbed496eef0 RSI: 0000000000000000 RDI: 00007fbed5f927e8 [ 519.635808][T21319] RBP: 0000200000000780 R08: 00007fbed496ebb7 R09: 00007fbed496ee40 [ 519.635826][T21319] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 519.635844][T21319] R13: 00007fbed496eef0 R14: 00007fbed496eeb0 R15: 00002000000000c0 [ 519.635874][T21319] [ 519.697397][ T29] audit: type=1400 audit(1755046948.312:25919): avc: denied { setopt } for pid=21315 comm="syz.1.5906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 519.697888][T21298] EXT4-fs (loop2): 1 truncate cleaned up [ 519.704499][ T29] audit: type=1400 audit(1755046948.402:25920): avc: denied { create } for pid=21315 comm="syz.1.5906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 519.749234][T21298] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 519.757978][T21316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=21316 comm=syz.1.5906 [ 519.801908][ T29] audit: type=1400 audit(1755046948.452:25921): avc: denied { ioctl } for pid=21315 comm="syz.1.5906" path="socket:[64995]" dev="sockfs" ino=64995 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 519.921759][ T29] audit: type=1400 audit(1755046948.512:25922): avc: denied { lock } for pid=21318 comm="syz.3.5907" path="socket:[64988]" dev="sockfs" ino=64988 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 519.945591][ T29] audit: type=1326 audit(1755046948.512:25923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21322 comm="syz.4.5908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e907eebe9 code=0x7ffc0000 [ 519.969460][ T29] audit: type=1326 audit(1755046948.512:25924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21322 comm="syz.4.5908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e907eebe9 code=0x7ffc0000 [ 519.993577][ T29] audit: type=1326 audit(1755046948.512:25925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21322 comm="syz.4.5908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e907eebe9 code=0x7ffc0000 [ 520.017970][ T29] audit: type=1326 audit(1755046948.512:25926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21322 comm="syz.4.5908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e907eebe9 code=0x7ffc0000 [ 520.042150][ T29] audit: type=1326 audit(1755046948.512:25927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21322 comm="syz.4.5908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e907eebe9 code=0x7ffc0000 [ 520.069553][T21317] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.129810][T21335] netlink: 'syz.5.5912': attribute type 10 has an invalid length. [ 520.137900][T21335] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5912'. [ 520.162566][T21317] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.182004][T21336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5911'. [ 520.194070][T21335] dummy0: entered promiscuous mode [ 520.232310][T12849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.247998][T21317] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.304511][T21317] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.318133][T21342] loop2: detected capacity change from 0 to 512 [ 520.326214][T21342] EXT4-fs: Ignoring removed nomblk_io_submit option [ 520.333295][T21342] EXT4-fs: Ignoring removed nomblk_io_submit option [ 520.342125][T21342] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 520.356707][T21342] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 520.365757][T21342] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 520.375036][T21342] EXT4-fs (loop2): 1 truncate cleaned up [ 520.381635][T21342] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 520.408237][T13781] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.412431][T13781] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.450290][T13781] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.450632][T13781] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.496377][T12849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.562659][T21360] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5920'. [ 520.615540][T21366] loop1: detected capacity change from 0 to 2048 [ 520.739237][T21376] loop2: detected capacity change from 0 to 2048 [ 520.752616][T21377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5926'. [ 520.792737][T21381] loop3: detected capacity change from 0 to 512 [ 520.799601][T21381] EXT4-fs: Ignoring removed nomblk_io_submit option [ 520.806302][T21381] EXT4-fs: Ignoring removed nomblk_io_submit option [ 520.813717][T21381] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 520.823724][T21381] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 520.832858][T21381] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 520.842847][T21381] EXT4-fs (loop3): 1 truncate cleaned up [ 520.853026][T21381] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 520.874537][T21385] loop4: detected capacity change from 0 to 1024 [ 520.892175][T21385] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 520.906195][T21385] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.5930: iget: bogus i_mode (177777) [ 520.953818][T13161] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.010817][T18376] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.171365][T21392] lo speed is unknown, defaulting to 1000 [ 521.237758][T21392] chnl_net:caif_netlink_parms(): no params data found [ 521.246027][T21413] loop3: detected capacity change from 0 to 2048 [ 521.266431][ T37] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.291667][T21392] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.299012][T21392] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.306210][T21392] bridge_slave_0: entered allmulticast mode [ 521.312874][T21392] bridge_slave_0: entered promiscuous mode [ 521.322209][ T37] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.334034][T21392] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.341319][T21392] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.348981][T21392] bridge_slave_1: entered allmulticast mode [ 521.356473][T21392] bridge_slave_1: entered promiscuous mode [ 521.374891][T21392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.386179][ T37] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.399525][T21392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.427554][ T37] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.440294][T21392] team0: Port device team_slave_0 added [ 521.447884][T21392] team0: Port device team_slave_1 added [ 521.469765][T21392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.476815][T21392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.503152][T21392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.518653][T21392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.525715][T21392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.552067][T21392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.603614][T21392] hsr_slave_0: entered promiscuous mode [ 521.610026][T21392] hsr_slave_1: entered promiscuous mode [ 521.618024][T21392] debugfs: 'hsr0' already exists in 'hsr' [ 521.624105][T21392] Cannot create hsr debugfs directory [ 521.630025][ T37] bridge_slave_1: left allmulticast mode [ 521.635885][ T37] bridge_slave_1: left promiscuous mode [ 521.641903][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.650344][ T37] bridge_slave_0: left promiscuous mode [ 521.656267][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.705636][ T37] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 521.751121][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.761539][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.771527][ T37] bond0 (unregistering): Released all slaves [ 521.824293][ T37] hsr_slave_0: left promiscuous mode [ 521.832219][ T37] hsr_slave_1: left promiscuous mode [ 521.841916][ T37] veth1_macvtap: left promiscuous mode [ 521.848264][ T37] veth0_macvtap: left promiscuous mode [ 521.907361][ T37] team0 (unregistering): Port device team_slave_1 removed [ 521.924950][ T37] team0 (unregistering): Port device team_slave_0 removed [ 522.052081][T21442] netlink: 'syz.5.5945': attribute type 1 has an invalid length. [ 522.079985][T21447] loop3: detected capacity change from 0 to 128 [ 522.083239][T21449] netlink: 'syz.1.5949': attribute type 11 has an invalid length. [ 522.109717][T21447] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 522.128079][T21447] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 522.192923][T13758] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 522.248704][T21462] wireguard0: entered promiscuous mode [ 522.273256][T21466] loop1: detected capacity change from 0 to 1024 [ 522.284080][ T37] IPVS: stop unused estimator thread 0... [ 522.292311][T21466] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 522.334136][T21473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5955'. [ 522.455803][T21488] loop1: detected capacity change from 0 to 128 [ 522.463393][T21488] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 522.477451][T21489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5957'. [ 522.488173][T21488] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 522.517055][T13758] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 523.161539][T21392] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 523.181481][T21392] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 523.219526][T21505] netlink: 'syz.3.5966': attribute type 1 has an invalid length. [ 523.227606][T21506] loop2: detected capacity change from 0 to 1024 [ 523.234255][T21392] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 523.243560][T21506] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 523.255112][T21392] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 523.352413][T21392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.408239][T21392] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.440326][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.447722][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.462375][T21534] loop2: detected capacity change from 0 to 128 [ 523.469501][T21534] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 523.482595][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.489828][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.498280][T21534] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 523.528413][T13758] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 523.593432][T21554] loop2: detected capacity change from 0 to 512 [ 523.598201][T21392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 523.610230][T21554] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 523.626073][T21554] EXT4-fs (loop2): orphan cleanup on readonly fs [ 523.634741][T21554] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.5982: Block bitmap for bg 0 marked uninitialized [ 523.655867][T21560] loop1: detected capacity change from 0 to 1024 [ 523.658818][T21563] loop3: detected capacity change from 0 to 512 [ 523.673809][T21560] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 523.677239][T21554] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 523.692275][T21563] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 523.705495][T21563] EXT4-fs (loop3): orphan cleanup on readonly fs [ 523.710270][T21554] EXT4-fs (loop2): 1 orphan inode deleted [ 523.718366][T21554] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 523.719544][T21563] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.5983: Block bitmap for bg 0 marked uninitialized [ 523.756542][T21563] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 523.767135][T12849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.772662][T21563] EXT4-fs (loop3): 1 orphan inode deleted [ 523.795980][T21563] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 523.893828][T21392] veth0_vlan: entered promiscuous mode [ 523.905829][T21392] veth1_vlan: entered promiscuous mode [ 523.922507][T21392] veth0_macvtap: entered promiscuous mode [ 523.924527][T21392] veth1_macvtap: entered promiscuous mode [ 523.931098][T21392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 523.933081][T21392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 524.034600][T13758] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.035000][T13758] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.035070][T13791] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.035216][T13791] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.196758][T21595] hub 9-0:1.0: USB hub found [ 524.202047][T21595] hub 9-0:1.0: 8 ports detected [ 524.331876][T13161] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.423669][T21602] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21602 comm=syz.5.5994 [ 524.606607][ T29] kauditd_printk_skb: 344 callbacks suppressed [ 524.606690][ T29] audit: type=1400 audit(1755046953.302:26272): avc: denied { create } for pid=21613 comm="syz.4.5998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 524.636452][ T29] audit: type=1400 audit(1755046953.302:26273): avc: denied { bind } for pid=21613 comm="syz.4.5998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 524.656029][ T29] audit: type=1400 audit(1755046953.302:26274): avc: denied { setopt } for pid=21613 comm="syz.4.5998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 524.675924][ T29] audit: type=1400 audit(1755046953.302:26275): avc: denied { write } for pid=21613 comm="syz.4.5998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 524.695682][ T29] audit: type=1400 audit(1755046953.302:26276): avc: denied { read } for pid=21613 comm="syz.4.5998" path="socket:[66898]" dev="sockfs" ino=66898 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 524.731558][T21618] netlink: 'syz.1.5999': attribute type 10 has an invalid length. [ 524.739624][T21618] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5999'. [ 524.757249][T21618] dummy0: entered promiscuous mode [ 524.763799][ T29] audit: type=1400 audit(1755046953.362:26277): avc: denied { setopt } for pid=21613 comm="syz.4.5998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 524.783813][ T29] audit: type=1400 audit(1755046953.362:26278): avc: denied { read } for pid=21613 comm="syz.4.5998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 524.817546][T21620] netlink: 'syz.2.6000': attribute type 1 has an invalid length. [ 524.923481][T21633] netlink: 'syz.3.6005': attribute type 1 has an invalid length. [ 524.947853][ T29] audit: type=1326 audit(1755046953.642:26279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21635 comm="syz.3.6006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed5f0ebe9 code=0x7ffc0000 [ 524.972412][ T29] audit: type=1326 audit(1755046953.642:26280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21635 comm="syz.3.6006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed5f0ebe9 code=0x7ffc0000 [ 525.000436][ T29] audit: type=1326 audit(1755046953.642:26281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21635 comm="syz.3.6006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbed5f0ebe9 code=0x7ffc0000 [ 525.392789][T21658] netlink: 'syz.5.6014': attribute type 1 has an invalid length. [ 525.518487][T21663] hub 9-0:1.0: USB hub found [ 525.523338][T21663] hub 9-0:1.0: 8 ports detected [ 525.969053][T21679] netlink: 'syz.1.6017': attribute type 21 has an invalid length. [ 525.977231][T21679] netlink: 'syz.1.6017': attribute type 4 has an invalid length. [ 526.042453][T21679] random: crng reseeded on system resumption [ 526.056530][T21679] Restarting kernel threads ... [ 526.073540][T21679] Done restarting kernel threads. [ 526.328852][T21686] hub 9-0:1.0: USB hub found [ 526.333657][T21686] hub 9-0:1.0: 8 ports detected [ 526.944974][T21688] hub 9-0:1.0: USB hub found [ 526.949799][T21688] hub 9-0:1.0: 8 ports detected [ 527.192366][T21675] netlink: 'syz.3.6019': attribute type 1 has an invalid length. [ 527.363629][T21701] loop3: detected capacity change from 0 to 512 [ 527.390089][T21701] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 527.393506][T21706] loop2: detected capacity change from 0 to 512 [ 527.412470][T21701] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.6027: invalid block [ 527.425365][T21706] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 527.436797][T21701] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.6027: invalid indirect mapped block 4294967295 (level 1) [ 527.451631][T21701] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.6027: invalid indirect mapped block 4294967295 (level 1) [ 527.466657][T21706] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.6029: invalid block [ 527.480083][T21706] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.6029: invalid indirect mapped block 4294967295 (level 1) [ 527.494671][T21701] EXT4-fs (loop3): 2 truncates cleaned up [ 527.502145][T21701] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.515578][T21706] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.6029: invalid indirect mapped block 4294967295 (level 1) [ 527.531319][T21706] EXT4-fs (loop2): 2 truncates cleaned up [ 527.537771][T21706] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.539823][T21701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6027'. [ 527.560960][T21706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6029'. [ 527.572183][T21701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6027'. [ 527.607175][T12849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.718185][T13161] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.843134][T21727] loop3: detected capacity change from 0 to 512 [ 527.858453][T21727] EXT4-fs: Ignoring removed nomblk_io_submit option [ 527.866223][T21727] EXT4-fs: Ignoring removed nomblk_io_submit option [ 527.875863][T21727] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 527.891524][T21727] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 527.901141][T13791] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.908855][T21727] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 527.950811][T21727] EXT4-fs (loop3): 1 truncate cleaned up [ 527.957132][T21727] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.985380][T13791] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.041152][T13791] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.087137][T13161] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.113758][T13791] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.136799][T21719] chnl_net:caif_netlink_parms(): no params data found [ 528.357327][T21747] hub 9-0:1.0: USB hub found [ 528.362508][T21747] hub 9-0:1.0: 8 ports detected [ 528.443445][T13791] bridge_slave_1: left allmulticast mode [ 528.449269][T13791] bridge_slave_1: left promiscuous mode [ 528.455061][T13791] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.503151][T13791] bridge_slave_0: left allmulticast mode [ 528.509056][T13791] bridge_slave_0: left promiscuous mode [ 528.514748][T13791] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.522629][T21751] loop5: detected capacity change from 0 to 128 [ 528.530079][T21751] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 528.602564][T13791] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 528.689905][T21751] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 528.738162][ T37] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 528.752533][T13791] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 528.754350][T21760] loop4: detected capacity change from 0 to 128 [ 528.768417][T21760] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 528.782427][T21760] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 528.782485][T13791] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.806797][T13791] bond0 (unregistering): Released all slaves [ 528.824883][T21719] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.832087][T21719] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.840844][T21719] bridge_slave_0: entered allmulticast mode [ 528.847324][ T37] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 528.847565][T21719] bridge_slave_0: entered promiscuous mode [ 528.863954][T21719] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.871392][T21719] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.881069][T21719] bridge_slave_1: entered allmulticast mode [ 528.888563][T13791] IPVS: stopping backup sync thread 19631 ... [ 528.890216][T21719] bridge_slave_1: entered promiscuous mode [ 528.901014][T21766] loop1: detected capacity change from 0 to 128 [ 528.909435][T21766] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 528.922291][T21766] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 528.934519][T13791] hsr_slave_0: left promiscuous mode [ 528.941437][T13791] hsr_slave_1: left promiscuous mode [ 528.962101][T13791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 528.969834][T13791] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.986958][T13781] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 528.987067][T13791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.003675][T13791] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.013884][T13791] veth1_macvtap: left promiscuous mode [ 529.019646][T13791] veth0_macvtap: left promiscuous mode [ 529.025448][T13791] veth1_vlan: left promiscuous mode [ 529.031663][T13791] veth0_vlan: left promiscuous mode [ 529.120782][T13791] team0 (unregistering): Port device team_slave_1 removed [ 529.148102][T13791] team0 (unregistering): Port device team_slave_0 removed [ 529.194762][T21719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.205848][T21784] netlink: 'syz.1.6051': attribute type 1 has an invalid length. [ 529.217459][T21719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.256730][T21719] team0: Port device team_slave_0 added [ 529.264503][T21719] team0: Port device team_slave_1 added [ 529.296457][T21719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.303523][T21719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.330217][T21719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.388524][T21719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.396007][T21719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.422286][T21719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.465439][T21806] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6060'. [ 529.475089][T21806] hsr_slave_0: left promiscuous mode [ 529.482114][T21806] hsr_slave_1: left promiscuous mode [ 529.495408][T21719] hsr_slave_0: entered promiscuous mode [ 529.501885][T21719] hsr_slave_1: entered promiscuous mode [ 529.508966][T21719] debugfs: 'hsr0' already exists in 'hsr' [ 529.515032][T21719] Cannot create hsr debugfs directory [ 529.771438][ T29] kauditd_printk_skb: 287 callbacks suppressed [ 529.771456][ T29] audit: type=1400 audit(1755046958.472:26569): avc: denied { ioctl } for pid=21816 comm="syz.5.6064" path="socket:[68058]" dev="sockfs" ino=68058 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 529.815318][T21819] netlink: 'syz.4.6062': attribute type 21 has an invalid length. [ 529.823330][T21819] netlink: 'syz.4.6062': attribute type 4 has an invalid length. [ 529.826654][T21719] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 529.838591][T21822] loop5: detected capacity change from 0 to 128 [ 529.846169][T21822] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 529.860771][T21719] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 529.870349][T21823] random: crng reseeded on system resumption [ 529.872255][T21822] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 529.889903][T21719] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 529.892299][T21819] Restarting kernel threads ... [ 529.913860][T21719] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 529.919273][T21819] Done restarting kernel threads. [ 529.927940][T13781] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 529.997983][T21837] loop1: detected capacity change from 0 to 512 [ 530.000580][T21831] netlink: 'syz.5.6066': attribute type 1 has an invalid length. [ 530.005177][T21837] EXT4-fs: Ignoring removed nomblk_io_submit option [ 530.019893][T21837] EXT4-fs: Ignoring removed nomblk_io_submit option [ 530.055238][T21837] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 530.067558][T21719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.077145][T21837] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 530.086203][T21837] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 530.099696][T21837] EXT4-fs (loop1): 1 truncate cleaned up [ 530.106939][T21837] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 530.127987][T21719] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.140740][ T29] audit: type=1400 audit(1755046958.822:26570): avc: denied { execute } for pid=21843 comm="syz.5.6072" dev="tmpfs" ino=1966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 530.162577][ T29] audit: type=1400 audit(1755046958.822:26571): avc: denied { execute_no_trans } for pid=21843 comm="syz.5.6072" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 530.198430][T13791] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.205716][T13791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.215482][T13791] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.222798][T13791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.249146][T20497] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.269271][T21841] syzkaller1: entered promiscuous mode [ 530.274841][T21841] syzkaller1: entered allmulticast mode [ 530.332274][ T29] audit: type=1400 audit(1755046958.902:26572): avc: denied { ioctl } for pid=21840 comm="syz.3.6071" path="socket:[68133]" dev="sockfs" ino=68133 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 530.337081][T21719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.633344][T21875] hub 9-0:1.0: USB hub found [ 530.638107][T21875] hub 9-0:1.0: 8 ports detected [ 530.672020][T21873] loop3: detected capacity change from 0 to 2048 [ 530.834407][T21719] veth0_vlan: entered promiscuous mode [ 530.866567][T21719] veth1_vlan: entered promiscuous mode [ 530.931444][T21719] veth0_macvtap: entered promiscuous mode [ 530.958355][T21719] veth1_macvtap: entered promiscuous mode [ 530.970656][T21719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 530.990266][T21719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 531.007623][T13797] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.026855][T13797] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.048544][T21886] random: crng reseeded on system resumption [ 531.060466][T13797] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.069949][T21886] Restarting kernel threads ... [ 531.078368][T13797] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.095920][T21886] Done restarting kernel threads. [ 531.172537][ T29] audit: type=1326 audit(1755046959.862:26573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21889 comm="syz.1.6083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45cefebe9 code=0x7ffc0000 [ 531.196571][ T29] audit: type=1326 audit(1755046959.862:26574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21889 comm="syz.1.6083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45cefebe9 code=0x7ffc0000 [ 531.382159][T21909] loop5: detected capacity change from 0 to 2048 [ 531.637356][ T29] audit: type=1400 audit(1755046960.332:26575): avc: denied { write } for pid=21927 comm="syz.3.6097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 532.525772][T21934] hub 9-0:1.0: USB hub found [ 532.530725][T21934] hub 9-0:1.0: 8 ports detected [ 532.752125][T21948] loop3: detected capacity change from 0 to 128 [ 532.770619][T21948] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 532.789116][T21948] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 532.823774][ T29] audit: type=1326 audit(1755046961.522:26576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21957 comm="syz.1.6106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45cefebe9 code=0x7ffc0000 [ 532.848223][ T29] audit: type=1326 audit(1755046961.522:26577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21957 comm="syz.1.6106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45cefebe9 code=0x7ffc0000 [ 532.872053][ T29] audit: type=1326 audit(1755046961.522:26578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21957 comm="syz.1.6106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa45cefebe9 code=0x7ffc0000 [ 532.912505][T13781] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 532.952056][T21965] sctp: [Deprecated]: syz.3.6108 (pid 21965) Use of int in max_burst socket option. [ 532.952056][T21965] Use struct sctp_assoc_value instead [ 533.006856][T21975] netlink: 'syz.1.6113': attribute type 1 has an invalid length. [ 533.079312][T21971] loop2: detected capacity change from 0 to 128 [ 533.086732][T21971] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 533.102044][T21971] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 533.134132][T13781] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 533.303692][T21988] hub 9-0:1.0: USB hub found [ 533.308506][T21988] hub 9-0:1.0: 8 ports detected [ 534.055272][T21995] loop1: detected capacity change from 0 to 256 [ 534.966604][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 534.966626][ T29] audit: type=1400 audit(1755046963.282:26634): avc: denied { ioctl } for pid=22000 comm="syz.3.6122" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 535.073015][T22006] loop4: detected capacity change from 0 to 512 [ 535.097279][T22006] EXT4-fs: Ignoring removed nomblk_io_submit option [ 535.113667][T13791] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.140625][T22006] EXT4-fs: Ignoring removed nomblk_io_submit option [ 535.268677][T22006] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 535.354346][T13791] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.390982][T22006] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 535.413879][T22006] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 535.437299][T22006] EXT4-fs (loop4): 1 truncate cleaned up [ 535.446371][T13791] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.464130][T22006] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 535.521961][T13791] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.627477][T21392] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.657188][T13791] bridge_slave_1: left allmulticast mode [ 535.662987][T13791] bridge_slave_1: left promiscuous mode [ 535.669673][T13791] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.680775][T13791] bridge_slave_0: left allmulticast mode [ 535.686605][T13791] bridge_slave_0: left promiscuous mode [ 535.692421][T13791] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.822569][T13791] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 535.840536][T13791] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 535.858393][T13791] bond0 (unregistering): Released all slaves [ 536.018520][T22041] random: crng reseeded on system resumption [ 536.034022][T13791] tipc: Left network mode [ 536.044503][T22041] Restarting kernel threads ... [ 536.110012][T22043] loop3: detected capacity change from 0 to 256 [ 536.136926][T22041] Done restarting kernel threads. [ 536.227623][T22011] chnl_net:caif_netlink_parms(): no params data found [ 536.294562][T13791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 536.302377][T13791] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.413341][T13791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 536.421044][T13791] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.540826][T13791] veth1_macvtap: left promiscuous mode [ 536.563859][T22051] loop1: detected capacity change from 0 to 128 [ 536.587131][T13791] veth0_macvtap: left promiscuous mode [ 536.620314][T22051] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 536.645127][T13791] veth1_vlan: left promiscuous mode [ 536.678052][T13791] veth0_vlan: left promiscuous mode [ 536.946885][T22051] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 537.051744][T13781] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 537.172860][T13791] team0 (unregistering): Port device team_slave_1 removed [ 537.210567][T13791] team0 (unregistering): Port device team_slave_0 removed [ 537.342798][T22011] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.342844][T22011] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.342916][T22011] bridge_slave_0: entered allmulticast mode [ 537.343647][T22011] bridge_slave_0: entered promiscuous mode [ 537.344439][T22011] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.344519][T22011] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.344651][T22011] bridge_slave_1: entered allmulticast mode [ 537.346786][T22011] bridge_slave_1: entered promiscuous mode [ 537.393970][T22011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.401003][T22011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.442405][T22011] team0: Port device team_slave_0 added [ 537.449533][T22011] team0: Port device team_slave_1 added [ 537.493824][T22011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.493842][T22011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.493871][T22011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.494590][T22011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.494605][T22011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.494692][T22011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 537.546080][T22011] hsr_slave_0: entered promiscuous mode [ 537.548949][T22011] hsr_slave_1: entered promiscuous mode [ 537.549385][T22011] debugfs: 'hsr0' already exists in 'hsr' [ 537.549398][T22011] Cannot create hsr debugfs directory [ 537.777506][ T29] audit: type=1326 audit(1755046966.472:26635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22072 comm="syz.4.6144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9354d1ebe9 code=0x7ffc0000 [ 537.777631][ T29] audit: type=1326 audit(1755046966.472:26636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22072 comm="syz.4.6144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9354d1ebe9 code=0x7ffc0000 [ 537.781539][ T29] audit: type=1326 audit(1755046966.482:26637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22072 comm="syz.4.6144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9354d1ebe9 code=0x7ffc0000 [ 537.870123][ T29] audit: type=1326 audit(1755046966.522:26638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22072 comm="syz.4.6144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9354d1ebe9 code=0x7ffc0000 [ 537.870165][ T29] audit: type=1326 audit(1755046966.522:26639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22072 comm="syz.4.6144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9354d1ebe9 code=0x7ffc0000 [ 537.870195][ T29] audit: type=1326 audit(1755046966.522:26640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22072 comm="syz.4.6144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9354d1ebe9 code=0x7ffc0000 [ 537.870260][ T29] audit: type=1326 audit(1755046966.522:26641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22072 comm="syz.4.6144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9354d1ebe9 code=0x7ffc0000 [ 537.870296][ T29] audit: type=1326 audit(1755046966.522:26642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22072 comm="syz.4.6144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9354d1ebe9 code=0x7ffc0000 [ 537.870409][ T29] audit: type=1326 audit(1755046966.522:26643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22072 comm="syz.4.6144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9354d1ebe9 code=0x7ffc0000 [ 537.939024][T22078] hub 9-0:1.0: USB hub found [ 537.939157][T22078] hub 9-0:1.0: 8 ports detected [ 538.085423][T22011] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 538.088300][T22011] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 538.117409][T22011] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 538.124356][T22011] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 538.188338][T22011] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.188382][T22011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.188554][T22011] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.188586][T22011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 538.260383][T22087] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6145'. [ 538.318228][T22011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.358894][T13781] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.360130][T13781] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.385459][T22011] 8021q: adding VLAN 0 to HW filter on device team0 [ 538.391531][T13781] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.391659][T13781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 538.403950][T13781] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.404038][T13781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.410689][T22091] loop4: detected capacity change from 0 to 128 [ 538.411135][T22091] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 538.413373][T22091] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 538.435192][T22011] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 538.435263][T22011] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 538.531265][T13791] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 538.591098][T22011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 538.787858][T22109] loop4: detected capacity change from 0 to 2048 [ 538.810172][T22011] veth0_vlan: entered promiscuous mode [ 538.818086][T22011] veth1_vlan: entered promiscuous mode [ 538.860109][T22011] veth0_macvtap: entered promiscuous mode [ 538.868266][T22011] veth1_macvtap: entered promiscuous mode [ 538.886453][T22125] hub 9-0:1.0: USB hub found [ 538.891313][T22125] hub 9-0:1.0: 8 ports detected [ 538.909869][T22011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 538.919924][T22011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 539.071695][T13774] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.103624][T13774] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.197995][T13774] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.219610][T13774] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.312023][T22149] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6157'. [ 539.383442][T22153] loop1: detected capacity change from 0 to 128 [ 539.391726][T22153] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 539.404498][T22153] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 539.433779][T13791] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 539.596190][T22162] loop2: detected capacity change from 0 to 8192 [ 539.639025][T22162] loop2: p1 p2 p3 p4 [ 539.643205][T22162] loop2: p1 start 65280 is beyond EOD, truncated [ 539.649681][T22162] loop2: p2 start 3691577420 is beyond EOD, truncated [ 539.658611][T22162] loop2: p4 start 201785344 is beyond EOD, truncated [ 539.674696][T22170] sctp: [Deprecated]: syz.1.6166 (pid 22170) Use of int in max_burst socket option. [ 539.674696][T22170] Use struct sctp_assoc_value instead [ 539.733878][T22179] netlink: 'syz.2.6172': attribute type 1 has an invalid length. [ 539.782030][T22183] loop2: detected capacity change from 0 to 512 [ 539.797883][T22184] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6170'. [ 539.807626][T22183] EXT4-fs: Ignoring removed oldalloc option [ 539.819207][T22183] EXT4-fs (loop2): 1 truncate cleaned up [ 539.825350][T22183] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 539.848617][T22189] random: crng reseeded on system resumption [ 539.859314][T22189] Restarting kernel threads ... [ 539.864654][T22189] Done restarting kernel threads. [ 540.148834][T22205] hub 9-0:1.0: USB hub found [ 540.154049][T22205] hub 9-0:1.0: 8 ports detected [ 540.353323][T21719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.633165][T22209] netlink: 'syz.6.6179': attribute type 1 has an invalid length. [ 540.707927][T22218] loop1: detected capacity change from 0 to 2048 [ 540.733878][T22220] loop3: detected capacity change from 0 to 2048 [ 540.884120][T22227] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6187'. [ 540.894788][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 540.894805][ T29] audit: type=1326 audit(1755046969.592:26688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22223 comm="syz.4.6187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9354d1ebe9 code=0x7ffc0000 [ 540.925451][ T29] audit: type=1326 audit(1755046969.592:26689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22223 comm="syz.4.6187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9354d1ebe9 code=0x7ffc0000 [ 540.970328][T22229] netlink: 'syz.2.6188': attribute type 10 has an invalid length. [ 540.978599][T22229] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6188'. [ 540.995751][ T29] audit: type=1400 audit(1755046969.652:26690): avc: denied { prog_load } for pid=22228 comm="syz.2.6188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 541.015291][ T29] audit: type=1400 audit(1755046969.652:26691): avc: denied { bpf } for pid=22228 comm="syz.2.6188" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 541.036488][ T29] audit: type=1400 audit(1755046969.662:26692): avc: denied { open } for pid=22228 comm="syz.2.6188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 541.056041][ T29] audit: type=1400 audit(1755046969.662:26693): avc: denied { perfmon } for pid=22228 comm="syz.2.6188" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 541.077467][ T29] audit: type=1400 audit(1755046969.662:26694): avc: denied { kernel } for pid=22228 comm="syz.2.6188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 541.097443][ T29] audit: type=1400 audit(1755046969.662:26695): avc: denied { prog_run } for pid=22228 comm="syz.2.6188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 541.116979][ T29] audit: type=1400 audit(1755046969.692:26696): avc: denied { read write } for pid=22221 comm="syz.6.6186" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 541.141116][ T29] audit: type=1400 audit(1755046969.692:26697): avc: denied { open } for pid=22221 comm="syz.6.6186" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 541.183016][T22233] hub 9-0:1.0: USB hub found [ 541.188072][T22233] hub 9-0:1.0: 8 ports detected [ 541.221303][T22229] dummy0: entered promiscuous mode [ 541.551510][T22254] loop2: detected capacity change from 0 to 2048 [ 541.571606][T22254] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 541.584189][T22254] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 541.635486][T22258] netlink: 'syz.6.6197': attribute type 1 has an invalid length. [ 541.667361][T22259] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6196: bg 0: block 345: padding at end of block bitmap is not set [ 541.682861][T22259] EXT4-fs (loop2): Remounting filesystem read-only [ 541.689647][T13791] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 541.834096][T22268] loop3: detected capacity change from 0 to 2048 [ 541.867577][T21719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.971774][T22273] loop1: detected capacity change from 0 to 1024 [ 541.985080][T22273] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 542.005180][T22273] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6203: bg 0: block 88: padding at end of block bitmap is not set [ 542.088399][T20497] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.216935][T22286] netlink: 'syz.2.6208': attribute type 1 has an invalid length. [ 542.265938][T22291] tipc: Started in network mode [ 542.270918][T22291] tipc: Node identity 4, cluster identity 4711 [ 542.277213][T22291] tipc: Node number set to 4 [ 542.365682][T22295] loop2: detected capacity change from 0 to 2048 [ 542.672213][T22313] loop3: detected capacity change from 0 to 2048 [ 542.753662][T22323] sctp: [Deprecated]: syz.1.6221 (pid 22323) Use of int in max_burst socket option. [ 542.753662][T22323] Use struct sctp_assoc_value instead [ 542.757607][T22322] syz_tun: entered allmulticast mode [ 542.915470][T22321] syz_tun: left allmulticast mode [ 542.994205][T22336] netlink: 'syz.4.6230': attribute type 10 has an invalid length. [ 543.002324][T22336] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6230'. [ 543.015026][T22336] dummy0: entered promiscuous mode [ 543.321927][T22354] random: crng reseeded on system resumption [ 543.342293][T22355] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6238'. [ 543.346429][T22354] Restarting kernel threads ... [ 543.376216][T22354] Done restarting kernel threads. [ 543.512159][T22362] netlink: 'syz.3.6241': attribute type 10 has an invalid length. [ 543.520134][T22362] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6241'. [ 543.682597][T22374] loop2: detected capacity change from 0 to 2048 [ 543.694911][T22379] random: crng reseeded on system resumption [ 543.715509][T22379] Restarting kernel threads ... [ 543.721663][T22379] Done restarting kernel threads. [ 543.883760][T22391] loop6: detected capacity change from 0 to 512 [ 543.932223][T22395] sctp: [Deprecated]: syz.2.6255 (pid 22395) Use of int in max_burst socket option. [ 543.932223][T22395] Use struct sctp_assoc_value instead [ 543.958179][T22391] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.6253: corrupted inode contents [ 543.980366][T22391] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #16: comm syz.6.6253: mark_inode_dirty error [ 544.015608][T22391] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.6253: corrupted inode contents [ 544.045222][T22391] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.6253: mark_inode_dirty error [ 544.070091][T22391] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.6253: corrupted inode contents [ 544.095656][T22391] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 544.108263][T13786] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.114642][T22391] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.6253: corrupted inode contents [ 544.130885][T22391] EXT4-fs error (device loop6): ext4_truncate:4666: inode #16: comm syz.6.6253: mark_inode_dirty error [ 544.159162][T22391] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 544.169915][T22391] EXT4-fs (loop6): 1 truncate cleaned up [ 544.176455][T22391] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 544.189976][ T154] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1 [ 544.203436][T22391] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 544.216311][T13786] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.243546][T22411] netlink: 'syz.1.6257': attribute type 10 has an invalid length. [ 544.251690][T22411] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6257'. [ 544.281824][T13786] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.298482][T22401] chnl_net:caif_netlink_parms(): no params data found [ 544.337166][T22417] loop1: detected capacity change from 0 to 1024 [ 544.349865][T22417] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 544.366537][T22401] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.374014][T22401] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.382616][T22417] FAULT_INJECTION: forcing a failure. [ 544.382616][T22417] name failslab, interval 1, probability 0, space 0, times 0 [ 544.395472][T22417] CPU: 1 UID: 0 PID: 22417 Comm: syz.1.6258 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 544.395502][T22417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 544.395515][T22417] Call Trace: [ 544.395521][T22417] [ 544.395531][T22417] __dump_stack+0x1d/0x30 [ 544.395558][T22417] dump_stack_lvl+0xe8/0x140 [ 544.395668][T22417] dump_stack+0x15/0x1b [ 544.395689][T22417] should_fail_ex+0x265/0x280 [ 544.395716][T22417] should_failslab+0x8c/0xb0 [ 544.395750][T22417] kmem_cache_alloc_noprof+0x50/0x310 [ 544.395822][T22417] ? getname_flags+0x80/0x3b0 [ 544.395883][T22417] getname_flags+0x80/0x3b0 [ 544.395910][T22417] __x64_sys_renameat2+0x6c/0x90 [ 544.395935][T22417] x64_sys_call+0x3f9/0x2ff0 [ 544.396007][T22417] do_syscall_64+0xd2/0x200 [ 544.396034][T22417] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 544.396108][T22417] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 544.396175][T22417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.396204][T22417] RIP: 0033:0x7fa45cefebe9 [ 544.396221][T22417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.396240][T22417] RSP: 002b:00007fa45b95f038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 544.396259][T22417] RAX: ffffffffffffffda RBX: 00007fa45d125fa0 RCX: 00007fa45cefebe9 [ 544.396333][T22417] RDX: ffffffffffffff9c RSI: 0000200000000440 RDI: ffffffffffffff9c [ 544.396366][T22417] RBP: 00007fa45b95f090 R08: 0000000000000000 R09: 0000000000000000 [ 544.396382][T22417] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 544.396399][T22417] R13: 00007fa45d126038 R14: 00007fa45d125fa0 R15: 00007ffc740074d8 [ 544.396424][T22417] [ 544.396651][T22401] bridge_slave_0: entered allmulticast mode [ 544.579703][T20497] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.581853][T22401] bridge_slave_0: entered promiscuous mode [ 544.595793][T22401] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.602954][T22401] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.610305][T22401] bridge_slave_1: entered allmulticast mode [ 544.616938][T22401] bridge_slave_1: entered promiscuous mode [ 544.625095][T22425] netlink: 'syz.4.6260': attribute type 1 has an invalid length. [ 544.644688][T22427] loop1: detected capacity change from 0 to 2048 [ 544.671192][T22401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.691133][T22401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.701348][T13786] bridge_slave_1: left allmulticast mode [ 544.707022][T13786] bridge_slave_1: left promiscuous mode [ 544.712804][T13786] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.727290][T13786] bridge_slave_0: left allmulticast mode [ 544.733020][T13786] bridge_slave_0: left promiscuous mode [ 544.738834][T13786] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.760415][T22437] loop4: detected capacity change from 0 to 128 [ 544.767193][T22437] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 544.796117][T22437] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 544.809704][T22439] loop1: detected capacity change from 0 to 1024 [ 544.835166][T13759] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 544.853858][T22439] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 544.870728][T22439] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6267: bg 0: block 88: padding at end of block bitmap is not set [ 544.923093][T20497] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.982606][T13786] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 544.997161][T13786] bond_slave_0: left promiscuous mode [ 545.016934][T13786] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 545.036064][T22462] loop2: detected capacity change from 0 to 2048 [ 545.043336][T13786] bond_slave_1: left promiscuous mode [ 545.055257][T22460] loop4: detected capacity change from 0 to 1024 [ 545.056656][T13786] $H (unregistering): Released all slaves [ 545.062834][T22460] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 545.081864][T22460] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #3: block 1: comm syz.4.6275: lblock 1 mapped to illegal pblock 1 (length 1) [ 545.081983][T22460] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.6275: Failed to acquire dquot type 0 [ 545.082293][T22460] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.6275: Freeing blocks not in datazone - block = 0, count = 4096 [ 545.082521][T22460] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.6275: Invalid inode bitmap blk 0 in block_group 0 [ 545.082609][T22460] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 545.082759][T22460] EXT4-fs (loop4): 1 orphan inode deleted [ 545.083892][T22460] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 545.084279][T13806] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:53: lblock 1 mapped to illegal pblock 1 (length 1) [ 545.084653][T13806] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:53: Failed to release dquot type 0 [ 545.085770][T22460] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.230328][T13786] hsr_slave_0: left promiscuous mode [ 545.237140][T13786] hsr_slave_1: left promiscuous mode [ 545.237755][T13786] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.250504][T13786] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 545.272407][T22460] loop4: detected capacity change from 0 to 512 [ 545.273204][T22460] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 545.275112][T13786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 545.297204][T13786] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 545.300413][T22460] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 545.317986][T22460] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 545.318633][T22460] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.319043][T13786] veth1_macvtap: left promiscuous mode [ 545.319072][T13786] veth0_macvtap: left promiscuous mode [ 545.319337][T13786] veth1_vlan: left promiscuous mode [ 545.319400][T13786] veth0_vlan: left promiscuous mode [ 545.342963][T22460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6275'. [ 545.472169][T13786] team0 (unregistering): Port device team_slave_1 removed [ 545.493558][T22483] loop4: detected capacity change from 0 to 1024 [ 545.501236][T22483] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 545.517636][T13786] team0 (unregistering): Port device team_slave_0 removed [ 545.543332][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119fc5600: rx timeout, send abort [ 545.551813][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888119fc5600: 0x3ff02: (3) A timeout occurred and this is the connection abort to close the session. [ 545.566170][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119fc5a00: rx timeout, send abort [ 545.574813][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888119fc5a00: 0x3fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 545.621565][T22486] loop1: detected capacity change from 0 to 512 [ 545.628839][T22401] team0: Port device team_slave_0 added [ 545.636780][T22401] team0: Port device team_slave_1 added [ 545.640270][T22011] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.673502][T22486] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 545.705022][T22486] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 545.716839][T22401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 545.723960][T22401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.749943][T22401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.762378][T22401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 545.769501][T22401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.796082][T22401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.877480][T20497] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.890975][T22401] hsr_slave_0: entered promiscuous mode [ 545.899105][ T29] kauditd_printk_skb: 502 callbacks suppressed [ 545.899121][ T29] audit: type=1400 audit(1755046974.602:27196): avc: denied { create } for pid=22506 comm="syz.2.6290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 545.917485][T22401] hsr_slave_1: entered promiscuous mode [ 545.933293][T22401] debugfs: 'hsr0' already exists in 'hsr' [ 545.939114][T22401] Cannot create hsr debugfs directory [ 545.956249][ T29] audit: type=1400 audit(1755046974.642:27197): avc: denied { allowed } for pid=22506 comm="syz.2.6290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 545.976585][ T29] audit: type=1400 audit(1755046974.642:27198): avc: denied { create } for pid=22506 comm="syz.2.6290" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 545.998535][ T29] audit: type=1400 audit(1755046974.642:27199): avc: denied { map } for pid=22506 comm="syz.2.6290" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=71137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 546.023293][ T29] audit: type=1400 audit(1755046974.642:27200): avc: denied { read write } for pid=22506 comm="syz.2.6290" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=71137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 546.023335][ T29] audit: type=1400 audit(1755046974.642:27201): avc: denied { write } for pid=22506 comm="syz.2.6290" path="socket:[71136]" dev="sockfs" ino=71136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 546.084221][T22516] hub 9-0:1.0: USB hub found [ 546.084350][T22516] hub 9-0:1.0: 8 ports detected [ 546.112462][T22512] netlink: 'syz.1.6291': attribute type 10 has an invalid length. [ 546.112508][T22512] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6291'. [ 546.118227][ T29] audit: type=1400 audit(1755046974.722:27202): avc: denied { read write } for pid=22502 comm="syz.4.6288" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 546.118264][ T29] audit: type=1400 audit(1755046974.722:27203): avc: denied { open } for pid=22502 comm="syz.4.6288" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 546.118435][ T29] audit: type=1400 audit(1755046974.782:27204): avc: denied { write } for pid=22502 comm="syz.4.6288" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 546.118463][ T29] audit: type=1400 audit(1755046974.792:27205): avc: denied { prog_load } for pid=22511 comm="syz.1.6291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 546.263303][T22518] hub 9-0:1.0: USB hub found [ 546.268049][T22518] hub 9-0:1.0: 8 ports detected [ 546.309271][T22529] loop6: detected capacity change from 0 to 512 [ 546.316192][T22529] EXT4-fs: Ignoring removed nomblk_io_submit option [ 546.323287][T22529] EXT4-fs: Ignoring removed nomblk_io_submit option [ 546.331524][T22529] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 546.346483][T22529] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 546.355050][T22529] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 546.364726][T22529] EXT4-fs (loop6): 1 truncate cleaned up [ 546.371348][T22529] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 546.451054][T22542] loop1: detected capacity change from 0 to 512 [ 546.457782][T22542] EXT4-fs: Ignoring removed nomblk_io_submit option [ 546.464728][T22542] EXT4-fs: Ignoring removed nomblk_io_submit option [ 546.471991][T22542] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 546.481631][T22542] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 546.489951][T22542] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 546.499950][T22542] EXT4-fs (loop1): 1 truncate cleaned up [ 546.508063][T22542] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 546.587914][T20497] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.608279][T22546] netlink: 'syz.1.6301': attribute type 1 has an invalid length. [ 546.653709][T22548] netlink: 'syz.1.6302': attribute type 10 has an invalid length. [ 546.661743][T22548] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6302'. [ 546.717063][T22401] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 546.727139][T22401] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 546.737336][T22401] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 546.752485][T22401] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 546.768390][T22552] loop1: detected capacity change from 0 to 2048 [ 546.801424][T22554] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 546.813989][T22401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.840068][T22401] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.867245][T22401] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 546.877811][T22401] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 546.894540][T13786] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.901826][T13786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.937079][T13786] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.944501][T13786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.029775][T22401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 547.153780][T22588] netlink: 'syz.4.6311': attribute type 1 has an invalid length. [ 547.171862][T22011] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.191934][T22401] veth0_vlan: entered promiscuous mode [ 547.211098][T22401] veth1_vlan: entered promiscuous mode [ 547.238216][T22401] veth0_macvtap: entered promiscuous mode [ 547.256729][T22401] veth1_macvtap: entered promiscuous mode [ 547.270348][T22401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.279577][T22401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.324985][ T154] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.339377][T13759] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.352739][T13786] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.377476][T13786] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.428106][T22602] netlink: 'syz.4.6313': attribute type 4 has an invalid length. [ 547.515442][T22613] loop6: detected capacity change from 0 to 512 [ 547.528598][T22613] EXT4-fs: Ignoring removed nomblk_io_submit option [ 547.536801][T22613] EXT4-fs: Ignoring removed nomblk_io_submit option [ 547.549684][T22613] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 547.588355][T22613] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 547.644116][T22613] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 547.675021][T22613] EXT4-fs (loop6): 1 truncate cleaned up [ 547.707119][T22613] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.880618][T22011] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.629463][T22708] random: crng reseeded on system resumption [ 548.651892][T22708] Restarting kernel threads ... [ 548.668754][T22708] Done restarting kernel threads. [ 548.890580][T22718] serio: Serial port ptm0 [ 549.002033][T22718] loop3: detected capacity change from 0 to 2048 [ 549.046490][T22718] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 549.062903][T22718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.612630][T22763] loop2: detected capacity change from 0 to 128 [ 549.991222][T22787] loop6: detected capacity change from 0 to 128 [ 550.018634][T22787] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 550.055753][T22787] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 550.087792][T13759] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 550.206650][T22794] loop6: detected capacity change from 0 to 512 [ 550.222395][T22794] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 550.235708][T22794] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.6393: corrupted in-inode xattr: overlapping e_value [ 550.254262][T22794] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.6393: couldn't read orphan inode 15 (err -117) [ 550.266879][T22794] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 550.408083][T22801] loop2: detected capacity change from 0 to 2048 [ 550.506238][T22807] loop3: detected capacity change from 0 to 512 [ 550.530136][T22807] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.6397: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 9(4), depth 0(0) [ 550.563502][T22807] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.6397: Bad quota inode: 3, type: 0 [ 550.585088][T22807] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 550.604080][T22807] EXT4-fs (loop3): mount failed [ 550.610842][T22011] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.803319][ T3391] usb usb8-port4: attempt power cycle [ 550.917706][ T29] kauditd_printk_skb: 279 callbacks suppressed [ 550.917725][ T29] audit: type=1400 audit(1755046979.612:27485): avc: denied { read write } for pid=22818 comm="syz.6.6401" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 550.948500][ T29] audit: type=1400 audit(1755046979.612:27486): avc: denied { open } for pid=22818 comm="syz.6.6401" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 550.977699][T22828] hub 9-0:1.0: USB hub found [ 550.982689][T22828] hub 9-0:1.0: 8 ports detected [ 551.180753][ T29] audit: type=1326 audit(1755046979.882:27487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22840 comm="syz.4.6407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9354d1ebe9 code=0x7ffc0000 [ 551.206497][ T29] audit: type=1326 audit(1755046979.882:27488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22840 comm="syz.4.6407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9354d1ebe9 code=0x7ffc0000 [ 551.230728][ T29] audit: type=1326 audit(1755046979.882:27489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22840 comm="syz.4.6407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9354d1ebe9 code=0x7ffc0000 [ 551.255102][ T29] audit: type=1326 audit(1755046979.882:27490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22840 comm="syz.4.6407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9354d1ebe9 code=0x7ffc0000 [ 551.279373][ T29] audit: type=1326 audit(1755046979.882:27491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22840 comm="syz.4.6407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9354d1ebe9 code=0x7ffc0000 [ 551.303571][T22849] FAULT_INJECTION: forcing a failure. [ 551.303571][T22849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 551.303617][T22849] CPU: 1 UID: 0 PID: 22849 Comm: syz.2.6411 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 551.303697][T22849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 551.303714][T22849] Call Trace: [ 551.303723][T22849] [ 551.303786][T22849] __dump_stack+0x1d/0x30 [ 551.303817][T22849] dump_stack_lvl+0xe8/0x140 [ 551.303845][T22849] dump_stack+0x15/0x1b [ 551.303869][T22849] should_fail_ex+0x265/0x280 [ 551.303925][T22849] should_fail+0xb/0x20 [ 551.303950][T22849] should_fail_usercopy+0x1a/0x20 [ 551.303981][T22849] strncpy_from_user+0x25/0x230 [ 551.304021][T22849] ? kmem_cache_alloc_noprof+0x186/0x310 [ 551.304091][T22849] ? getname_flags+0x80/0x3b0 [ 551.304132][T22849] getname_flags+0xae/0x3b0 [ 551.304175][T22849] path_removexattrat+0xf5/0x570 [ 551.304281][T22849] __x64_sys_removexattr+0x38/0x50 [ 551.304336][T22849] x64_sys_call+0x242f/0x2ff0 [ 551.304449][T22849] do_syscall_64+0xd2/0x200 [ 551.304626][T22849] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 551.304740][T22849] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 551.304774][T22849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.304804][T22849] RIP: 0033:0x7f3faf8febe9 [ 551.304826][T22849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 551.304919][T22849] RSP: 002b:00007f3fae367038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c5 [ 551.304946][T22849] RAX: ffffffffffffffda RBX: 00007f3fafb25fa0 RCX: 00007f3faf8febe9 [ 551.305072][T22849] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000200000000200 [ 551.305088][T22849] RBP: 00007f3fae367090 R08: 0000000000000000 R09: 0000000000000000 [ 551.305163][T22849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.305179][T22849] R13: 00007f3fafb26038 R14: 00007f3fafb25fa0 R15: 00007ffe6dd71038 [ 551.305205][T22849] [ 551.510118][ T29] audit: type=1326 audit(1755046979.882:27492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22840 comm="syz.4.6407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9354d1ebe9 code=0x7ffc0000 [ 551.534070][ T29] audit: type=1326 audit(1755046979.882:27493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22840 comm="syz.4.6407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9354d1ebe9 code=0x7ffc0000 [ 551.558288][ T29] audit: type=1326 audit(1755046979.882:27494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22840 comm="syz.4.6407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9354d1ebe9 code=0x7ffc0000 [ 551.651269][T22858] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6414'. [ 551.760126][T22869] ================================================================== [ 551.768716][T22869] BUG: KCSAN: data-race in call_rcu / mas_state_walk [ 551.775524][T22869] [ 551.777874][T22869] write to 0xffff8881070fe508 of 8 bytes by task 22867 on cpu 1: [ 551.779021][T22871] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6418'. [ 551.785724][T22869] call_rcu+0x51/0x3f0 [ 551.799512][T22869] mas_wmb_replace+0xc6a/0x14a0 [ 551.804607][T22869] mas_wr_store_entry+0x1773/0x2b50 [ 551.810210][T22869] mas_store_prealloc+0x74d/0x9e0 [ 551.815973][T22869] vma_iter_store_new+0x1c5/0x200 [ 551.821158][T22869] vma_complete+0x125/0x580 [ 551.825780][T22869] __split_vma+0x5d9/0x650 [ 551.830229][T22869] vma_modify+0x3f2/0xc80 [ 551.834598][T22869] vma_modify_flags+0x101/0x130 [ 551.839480][T22869] mprotect_fixup+0x2cc/0x570 [ 551.844178][T22869] do_mprotect_pkey+0x6d6/0x980 [ 551.849314][T22869] __x64_sys_mprotect+0x48/0x60 [ 551.854373][T22869] x64_sys_call+0x274e/0x2ff0 [ 551.859199][T22869] do_syscall_64+0xd2/0x200 [ 551.863732][T22869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.869849][T22869] [ 551.872579][T22869] read to 0xffff8881070fe508 of 8 bytes by task 22869 on cpu 0: [ 551.880240][T22869] mas_state_walk+0x28f/0x650 [ 551.884966][T22869] mas_walk+0x60/0x150 [ 551.889111][T22869] lock_vma_under_rcu+0x8d/0x160 [ 551.894256][T22869] do_user_addr_fault+0x233/0x1090 [ 551.899527][T22869] exc_page_fault+0x62/0xa0 [ 551.904251][T22869] asm_exc_page_fault+0x26/0x30 [ 551.909132][T22869] [ 551.911562][T22869] value changed: 0x00007f9353746fff -> 0xffff8881070fef08 [ 551.919394][T22869] [ 551.921732][T22869] Reported by Kernel Concurrency Sanitizer on: [ 551.928244][T22869] CPU: 0 UID: 0 PID: 22869 Comm: syz.4.6419 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 551.941830][T22869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 551.956339][T22869] ================================================================== [ 551.969295][T22873] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6416'. [ 553.349241][ T3391] usb usb8-port4: unable to enumerate USB device [ 553.355989][T22716] usb usb8: usbfs: process 22716 (syz.1.6361) did not claim interface 0 before use