last executing test programs: 1m54.68376034s ago: executing program 1 (id=264): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="24010000", @ANYRES16=r2, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x1}, 0x4c080) r3 = fsmount(r0, 0x0, 0x8) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000000040)={0x6, 0x7, 0xfe01, 0x7, 0x6}) fchdir(r3) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4f6, &(0x7f0000000c40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x8) openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x595601, 0xd, 0xc}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x32, &(0x7f0000002240)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) tee(r5, r7, 0xfffffffffffffc01, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x1d, 0x1a, &(0x7f0000000800)=ANY=[@ANYRES32=r4, @ANYBLOB="000000004fffffff1832000005000000000000000000000095000000000000001812", @ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000018510000000000800000000000000000b875966ca2b2cead9d22ff54700d76a6480e116eed4ae241577933d3247239c3278f25db2e5dfb8cad9b5025567641801c524205b461023e64abab15619fe2ad0029a86504a5615311ded6dd18766d9b6e12bd5d2b9f54d5a4f348edc7ba7e864a0dcf6b988487a5f7cc0dc29fbede1d8d480f7b331cc0c22ec44960b04a3f1b49c1e99ffb208f79d130af46d3ffb259545fba06526fd93d1ee4aa98dc"], &(0x7f00000004c0)='syzkaller\x00', 0x4, 0xbb, &(0x7f0000000680)=""/187, 0x40f00, 0x12, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0xb, 0xf, 0x7}, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x10, 0x8000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xb1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000003c0)='inode_foreign_history\x00', r9, 0x0, 0x8000000000000004}, 0xfcdb) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x1, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r10 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)=0x0) timer_settime(r11, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r12, r13, 0x53, 0x0) 1m53.817657997s ago: executing program 1 (id=276): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='ext4_request_blocks\x00', r1, 0x0, 0x5}, 0x18) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r2, &(0x7f00000008c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x39, 0x0, 0x3, 0x7, 0x2, 0x3, 0x3, 0x309, 0x38, 0xfffffffc, 0xe, 0x0, 0x20, 0x1, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x4, 0x200004, 0xc, 0x400}]}, 0x58) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x1000000000000008}, 0x18) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r5 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x80, 0x1000, 0x5d0}, &(0x7f0000000300)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[], 0x20}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r5, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 1m53.486563172s ago: executing program 1 (id=278): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0xfef2, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xc}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x67, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x220008f8}, 0x804) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000001c0)={[{@debug}, {@data_err_ignore}, {@data_err_ignore}, {@nobarrier}, {@inlinecrypt}, {@orlov}, {@nogrpid}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000c40)="$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") r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x1, 0x0) mq_timedsend(r8, 0x0, 0x0, 0x6, 0x0) clock_gettime(0x0, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r9) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="6879c59d", @ANYRES16=r12, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000100000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, r12, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="4f00001bb2ab7ad45a20050f4761b4bcd7eee45b847744837984adff90588d061c2fc3ca92916c53f5b41eca0c216d9ad6b83ccbf3e45d3401db8b0fa0ceefe06dfc83bd97dcbea64e16814b0fa475bef9e436e052710d218e49", @ANYRES16=r10, @ANYBLOB="010000000000000000000100000000000000014100000020001700000000000000006574683a76657468305f6d616376746170000000"], 0x3c}}, 0x0) mq_timedreceive(r8, &(0x7f000001a600)=""/102385, 0x18ff1, 0x0, 0x0) 1m52.885482677s ago: executing program 1 (id=288): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001040)=ANY=[], 0x841, 0x0) lgetxattr(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)=@known='trusted.overlay.upper\x00', &(0x7f0000000f40)=""/199, 0xffffff92) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0x1a, r0, 0xc, &(0x7f0000000000)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000080)={'nr0\x00', {0x2, 0x0, @multicast1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1d, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0xfffffffffffffffc], 0x0, 0x0, 0x1, 0x1}}, 0x40) renameat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x0, 0x4) 1m51.67173063s ago: executing program 1 (id=313): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x0, @mcast1}, 0x80, 0x0}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) sync() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r5, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'tunl0\x00'}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_BROADCAST={0xa, 0x2, @multicast}]}, 0x44}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004"], 0x84}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xfe33) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$inet_udp(0x2, 0x2, 0x0) close(r11) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r10, &(0x7f0000000000), 0xfffffecc) 1m50.618048485s ago: executing program 1 (id=328): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0xd9a, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300), 0x100, 0x0) read$rfkill(r0, &(0x7f0000000340), 0x8) (fail_nth: 5) 1m50.576156877s ago: executing program 32 (id=328): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0xd9a, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300), 0x100, 0x0) read$rfkill(r0, &(0x7f0000000340), 0x8) (fail_nth: 5) 1m8.523368748s ago: executing program 0 (id=962): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0xa, 0x42, 0x40, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000080), 0x200, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000580)='$\x00\x19y\x01\xff\xb4\x9e\x95oQE\xc9\x1f|\bZ\xf44\x7f)\x03c\x9a\x85\x01V\xb8p+\x84\xfb\xe6?\x88\xe9\x98Y\x0e\xd5P\xa2\xcc\x01*\xcd%v!\x82\xf1\xaaB\x04-\x88\xeb-q8\x03\xadO\xa0F\xc5Z\x0f\xee\x94\xfcy\xa5\xa4L\xa1\xd7g\x9d\xd2m5r\xef\xe1\xd1\x87\x1aM\xa6\xa8\xa2\xef\xb0\x9e\xa9d\xee\xacl\x9c\xcb\x03\x17\xbbG\x15\xba3\xa5r<]T\xc6R\x03\xee#\x0f\x88\xc4\xd3\x02\xd1 @\r\x1cc\xe4|\x13H\xc2\x1fq\x88\xdd\x98\xe1~\xb0\xedK\x17x\v\x9b\xaa\xb4\a\xb6\x8b\x9e*=\x8f\x05\x8b\x88\xc9\x12\xa6\x8fs\x98\xf1\xfe\xcdX\xce,AD\xd2v\xf4\xe5\xd3\xf3\xf1TY\x1c\x8a\x98\xf8\xcf6\xc3>]l\xdaQ\xac\n{)\xc9\x95\xb4\x12j}8\x03\xba&\xe8p\xe8\xf0\xa4\xa6e\xbc\xef\x93%/x\x19\xaa\xb5\x97\x98A\\\x91\x9a \xa8\xf8a\xd8\x97\x1eR\xaf\xc8\x9f', 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) 1m6.779511213s ago: executing program 0 (id=982): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xc, &(0x7f0000000c40)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='sys_enter\x00', r2}, 0x10) nanosleep(&(0x7f00000001c0)={0x0, 0x3938700}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$phonet_pipe(0x23, 0x5, 0x2) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) 1m5.076403177s ago: executing program 0 (id=1000): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@o_path={0x0, r1}, 0x18) 1m4.970826561s ago: executing program 0 (id=1002): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x55, 0x8}, 0xc) r1 = socket$xdp(0x2c, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) poll(&(0x7f0000000200)=[{r2, 0x208}, {r1, 0x210}], 0x2, 0x3ff) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@orlov}, {@sysvgroups}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x51}}, {@nogrpid}]}, 0xfa, 0x489, &(0x7f0000000840)="$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") r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000500)=""/173, 0xad) getdents64(r3, &(0x7f00000004c0)=""/233, 0xe9) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregs(0xe, r4, 0xffffffffffffdcaf, &(0x7f0000000400)=""/45) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x18) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x0) fcntl$lock(r0, 0x0, &(0x7f0000000080)={0x1, 0x2, 0x4, 0x10001, r4}) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000003c0), 0x4000, &(0x7f0000000180)=ANY=[@ANYBLOB=',loose,access=client,access=any,version=9p2000,version=9p2000.L,fscontext=']) 1m4.575470678s ago: executing program 0 (id=1008): socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) (async, rerun: 32) r0 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xb73d, 0x400, 0x1, 0x36b}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) (rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async, rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'veth1_to_hsr\x00', &(0x7f0000000400)=@ethtool_perm_addr={0x51}}) (async) pipe2(&(0x7f0000001cc0), 0x800) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYRES8], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42c1c1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) acct(&(0x7f0000000040)='./file0\x00') (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) r5 = socket(0x80000000000000a, 0x2, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) (async, rerun: 32) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (rerun: 32) bind$phonet(r6, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) (async) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000080)={0xffffffff, {{0xa, 0x0, 0xea37, @mcast1={0xff, 0x7}, 0x40008a4}}, {{0xa, 0x4e20, 0x100, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}}, 0x108) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40), 0x3b}, 0x0) (async, rerun: 32) r8 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newqdisc={0x34, 0x10, 0x400, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xf}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x1}}]}, 0x34}}, 0x0) (async, rerun: 64) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRESOCT=r0, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r9, 0x0, 0xfffffffffffffffe}, 0x18) (async) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) 1m3.544761352s ago: executing program 0 (id=1025): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000003c0), 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x9c, 0x30, 0x1, 0x0, 0x0, {}, [{0x88, 0x1, [@m_simple={0x84, 0x1, 0x0, 0x0, {{0xb}, {0x58, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x53, 0x3, '}mJ3[\xc59\xdf\xdd=i\xedQ\xc1]\xc8l\x00a\x02\xfbH\xa0\x8e\ng&\x92X\x9aD\x1eJ+\xad0s\xfd*\xdbwU\xd4\x0f\xcb}\x1e\x02_@\x8d\x9b\xb9R8D\xbb\xfe\x8cp\xcd9\xde\xccm\x98\xc3\xd3\xfb\xfd1\xb6w\xb4q\xd4\xe6V\xb9'}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x9c}}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x82, &(0x7f00000001c0)={r5, 0x407, 0x1}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000680)={r5, 0x9}, &(0x7f00000006c0)=0x8) r6 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000000c0), 0x12) syz_read_part_table(0x59d, &(0x7f0000000000)="$eJzs0r1Lu1cUB/CbgKSFSkQEBzsIBpdGhTjokAxWYprFiFiR0llw0EFwcJCU6OzLP6D4BuIidnYUI4hCnCSjOBcUl0wprU+hrV3aYkp/fD5LuPece08u3yfwvxYPPzWbzVgIoZn4+6e/Pc1PFHunxqZnQoiF70MI+S+/+LUSizp+u/U8WpeidTGRqe3fjL+cdtz23VdTh/GofhEP4YcQwuLjUfLfvo1P31nuKrm+sVzYXM0tPBTWnobnB/I9W/mlnZGDbHm2OzsXfVgX8dbMT9VGj++apefd9sG2aq2RuY760rGPmc9/68/573VV6pXGZP/JylC6s35Z3o5yf5U/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwwc5yV8n1jeXC5mpu4aGw9jQ8P5Dv2cov7YwcZMuz3dm5+FvfRbw181O10eO7Zul5t32wrVprZK6jvnTs3dGvf/yYv0QLfRX+mP9eV6VeaUz2n6wMpTvrl+XtKPfX9/kDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyl/ESxd2pseiaEWPgshPDN/Xd9v+w3E2/1WNR3Hv2Wov1iIlPbvxl/Oe247buvpg6nEiEkfnfv4uNR8vNWPoR/5OcAAAD//8gGhpo=") setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000100), 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x2c, "24a113204f6b67ba709543f5bc2b841301cea822c8abd4c2fdae4e5d15c36ce12a904dc27f6ed93c40d5a7b2"}, &(0x7f00000000c0)=0x34) socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r8, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, r9}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000005c0)='kfree\x00', r7, 0x0, 0x9}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42708, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9, 0x40}, 0x100b28, 0x6, 0xc, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0xa0000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r10, &(0x7f0000000140)={'full'}, 0x8eef0a3e) 1m3.487536725s ago: executing program 33 (id=1025): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000003c0), 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x9c, 0x30, 0x1, 0x0, 0x0, {}, [{0x88, 0x1, [@m_simple={0x84, 0x1, 0x0, 0x0, {{0xb}, {0x58, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x53, 0x3, '}mJ3[\xc59\xdf\xdd=i\xedQ\xc1]\xc8l\x00a\x02\xfbH\xa0\x8e\ng&\x92X\x9aD\x1eJ+\xad0s\xfd*\xdbwU\xd4\x0f\xcb}\x1e\x02_@\x8d\x9b\xb9R8D\xbb\xfe\x8cp\xcd9\xde\xccm\x98\xc3\xd3\xfb\xfd1\xb6w\xb4q\xd4\xe6V\xb9'}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x9c}}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x82, &(0x7f00000001c0)={r5, 0x407, 0x1}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000680)={r5, 0x9}, &(0x7f00000006c0)=0x8) r6 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000000c0), 0x12) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000100), 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x2c, "24a113204f6b67ba709543f5bc2b841301cea822c8abd4c2fdae4e5d15c36ce12a904dc27f6ed93c40d5a7b2"}, &(0x7f00000000c0)=0x34) socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r8, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, r9}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000005c0)='kfree\x00', r7, 0x0, 0x9}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42708, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9, 0x40}, 0x100b28, 0x6, 0xc, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0xa0000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r10, &(0x7f0000000140)={'full'}, 0x8eef0a3e) 2.238617006s ago: executing program 6 (id=1866): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xc, &(0x7f0000000c40)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='sys_enter\x00', r3}, 0x10) nanosleep(&(0x7f00000001c0)={0x0, 0x3938700}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8919, &(0x7f0000000000)={'nicvf0\x00', @ifru_map={0x8, 0x6, 0x1, 0x10}}) socket$inet6(0xa, 0x3, 0x3c) socket$inet(0xa, 0x801, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ppoll(&(0x7f0000000500)=[{r7}], 0x1, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000300)={'netdevsim0\x00', @random="f60f63971a2b"}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x6, 0x82, 0xf7, 0x0, 0x9, 0x1300, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3e14, 0x3, @perf_config_ext={0xffff888237c0a080, 0x18000000}, 0xa0, 0x8, 0x7, 0x2, 0xfffffffffffffffd, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) 1.742049357s ago: executing program 3 (id=1876): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000001c0)=@keyring) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x80}, 0x18) removexattr(&(0x7f0000000340)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000400)=@known='user.incfs.size\x00') capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r3, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 1.542724445s ago: executing program 3 (id=1878): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @broadcast}, 0x10) setuid(0xee00) r3 = socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000080)=0x7, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) setresuid(0x0, 0xee00, 0xffffffffffffffff) r7 = io_uring_setup(0xaae, &(0x7f00000003c0)={0x0, 0xffffeffa, 0x800, 0x7, 0x2}) setrlimit(0x40000000000008, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xdf) write$binfmt_elf64(r8, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') close(r8) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open_by_handle_at(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c0000000300000005000000010a000004000000"], 0x8c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) 1.44283688s ago: executing program 3 (id=1881): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@usrjquota}]}, 0x1, 0x5e9, &(0x7f0000001480)="$eJzs3c9vVNUeAPDvmf6gpbzXQl7ee7iQJsZAorS0gCHGBWwNafBH3Lix0oJIgYbWaNGEkuDGxLgxxsSVC+G/UCJbVrpy4caVISFKWJo45k7vLf1xp6Wl7RTu55MMc+85cznndvqdc+7pOXcCqKz+7J9axN6ImEwRvWl2Pq898sz+udc9uP/J6eyRol5/448UKU8rXp/y55784K6I+OnHFHvalpc7NXPl/OjExPjlfH9w+sLk4NTMlYPnLoyeHT87fnH4peFjR48cPTZ0aF3ndbUk7eT19z/s/Wzk7e+++SsN3fx1JMXxeDV/4cLz2Cj90d/4maTlWT3HNrqwFmnLf08WvsWpvYUVYk2K968jIv4XvdEWD9+83vj0tZZWDthU9RRRByoqiX+oqKIfUFzbL70OrrWkVwJshXsn5gYAlsd/+9zYYHQ1xgZ2PkixcFgnRcT6RuYW2xURd26PXD9ze+R6bNI4HFBu9lpE/L8s/lMj/vuiK/oa8V9bFP9Zv+BU/pylv77O8pcOFYt/2Dpz8d+1YvxHk/h/Z0H8v7vO8vsfbr7XvSj+u9d7SgAAAAAAAFBZt05ExItlf/+vzc//iZL5Pz0RcXwDyu9fsv/gfseSlNrdDSgGKHHvRMQrpfN/a8Xs3762fOtfjfkAHenMuYnxQxHx74g4EB07sv2hFco4+Pmer5vl9efz/4pHVv6dfC5gXo+77TsWHzM22vu4pw1k8X8t4pnS+b9pvv1PJe1/9nkw+Yhl7Hn+xqlmeavHP7BZ6t9G7C9t/x/etSKtfH+OwUZ/YLDoFSz37MdffN+s/PXGv1tMwOPL2v+dK8d/X1p4v56ptZdxeKa93ixvff3/6dHO9GbjljOdedpHo9PTWa+kM51sy1IXpl8eXnud4WlUxEPjeWgu/g88t/L4X1n/vzsiZpf83+nPxWuKC//9u+e3ZvXR/4fWyeJ/bE3t/9o3hm/0/dCs/Edr/4802voDeUrW/m/eTwSeHF8VYdq5OL0kHNvLsra6vgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwNKhFxK5ItYH57VptYCCiJyL+EztrE5empl84c+mDi2NZXuP7/2vFN/32zu2n4vv/+xbsDy/ZPxwRuyPiy7buxv7A6UsTY60+eQAAAAAAAAAAAAAAAAAAANgmepqs/8/83tbq2gGbrr3VFQBapiT+f25FPYCtp/2H6hL/UF3iH6pL/EN1iX+oLvEP1SX+obrEPwAAAAAAPFV277v1S4qI2Ze7G49MZ57X0dKaAZut1uoKAC3jFj9QXab+QHW5xgfSKvldTQ9a7ciVTJ5+jIMBAAAAAAAAAAAAoHL277X+H6rK+n+oLuv/obqK9f/71nrgzY2vC7C1XOMDscpK/tL1/6seBQAAAAAAAAAAAABspKmZK+dHJybGL9t4a3tUYys36vX61ey3YLvU5wnfKKbCb5f6LNko1vo92lGt+0wCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAW+ycAAP//xJYjKw==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x2}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) 1.365515283s ago: executing program 6 (id=1885): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000600)={@multicast2, @empty}, 0x8) syz_emit_ethernet(0x26, &(0x7f0000000000)={@multicast, @remote, @val={@val={0x88a8, 0x1, 0x0, 0x3}, {0x8100, 0x1, 0x1, 0x4}}, {@can={0xc, {{0x1, 0x1}, 0x4, 0x2, 0x0, 0x0, "3431cf6d96f890fc"}}}}, 0x0) 1.301332156s ago: executing program 2 (id=1886): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e000080e28a635a43d329be5c00b623e2e32081de92d4f435b3f5e4ca5c480a15fca743fe934a8008878e2124abf4c43b6a205a044cf2d3270def33590f3a81a458e7b7512d2ecc6817dcadc37da278d2f0f1652dafb4e0e40dbc6a18d997488850386a4d09b5c79c3c5a713a7802000000000000000000000000000000000000000000cb211607b833282920fb5303a3183144a7a0f8f9d10509fbc0e49f68eb80303907f0bf707b333812134adb39ccd8eddfe60c7992b2213f221be6d150b9fe23124e28a08523b58f4f31b281a81d8c29389209c3ce43886947826a5b6634d0bd4d7b17c6badb356d"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) syz_open_dev$sg(&(0x7f0000000100), 0x5, 0x2) removexattr(&(0x7f0000000340)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000400)=@known='user.incfs.size\x00') memfd_create(0x0, 0x7) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c51de8c7955ef6b, @perf_config_ext={0x7, 0x3}, 0x100202, 0x0, 0xfffffffb, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840) 1.300639586s ago: executing program 2 (id=1887): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x9, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) 1.264681957s ago: executing program 6 (id=1888): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, &(0x7f00000000c0)={[0x8001a0ffffffff]}, 0x8) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, 0x0, 0x0) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x7e, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x33, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x13}}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x24, 0x0, {0x15, 0x4, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0xffffffffffffffff, [{0x0, 0xd, "5e000000ff000000000000"}, {0x5, 0x5, "4eb8a6"}, {0x5, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}]}}}}}}}, 0x0) 1.263715407s ago: executing program 2 (id=1889): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837d"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) 1.089286084s ago: executing program 3 (id=1891): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @broadcast}, 0x10) setuid(0xee00) r3 = socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000080)=0x7, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) setresuid(0x0, 0xee00, 0xffffffffffffffff) r7 = io_uring_setup(0xaae, &(0x7f00000003c0)={0x0, 0xffffeffa, 0x800, 0x7, 0x2}) setrlimit(0x40000000000008, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xdf) write$binfmt_elf64(r8, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') close(r8) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open_by_handle_at(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c0000000300000005000000010a000004000000"], 0x8c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) 1.022613887s ago: executing program 3 (id=1892): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="24010000", @ANYRES16=r2, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x1}, 0x4c080) r3 = fsmount(r0, 0x0, 0x8) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000000040)={0x6, 0x7, 0xfe01, 0x7, 0x6}) fchdir(r3) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4f6, &(0x7f0000000c40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x8) openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x595601, 0xd, 0xc}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x32, &(0x7f0000002240)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) tee(r5, r7, 0xfffffffffffffc01, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x1d, 0x1a, &(0x7f0000000800)=ANY=[@ANYRES32=r4, @ANYBLOB="000000004fffffff1832000005000000000000000000000095000000000000001812", @ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000018510000000000800000000000000000b875966ca2b2cead9d22ff54700d76a6480e116eed4ae241577933d3247239c3278f25db2e5dfb8cad9b5025567641801c524205b461023e64abab15619fe2ad0029a86504a5615311ded6dd18766d9b6e12bd5d2b9f54d5a4f348edc7ba7e864a0dcf6b988487a5f7cc0dc29fbede1d8d480f7b331cc0c22ec44960b04a3f1b49c1e99ffb208f79d130af46d3ffb259545fba06526fd93d1ee4aa98dc"], &(0x7f00000004c0)='syzkaller\x00', 0x4, 0xbb, &(0x7f0000000680)=""/187, 0x40f00, 0x12, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0xb, 0xf, 0x7}, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x10, 0x8000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000003c0)='inode_foreign_history\x00', 0xffffffffffffffff, 0x0, 0x8000000000000004}, 0xfcdb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x1, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r9 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)=0x0) timer_settime(r10, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r11, r12, 0x53, 0x0) 839.455615ms ago: executing program 5 (id=1894): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)='%-5lx \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000012c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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") r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xacd42, 0x108) fallocate(r2, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0xc, r2, 0x0, 0x0, 0x0, 0xfffffffffe000001}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r5, &(0x7f0000000280)='\x00N35', 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=[0x1], 0x0, 0x0, 0x1}}, 0x40) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000140)={0xa}, 0x1) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}}, 0x2400c004) 800.575486ms ago: executing program 5 (id=1895): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='net_dev_xmit\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000fcffffff000000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000700008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000eb99710c0000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8001}, 0x4004) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000a05000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$tipc(r3, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x4040044) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f00000001c0), 0x4) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r9, 0x10f, 0x83, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r12}, 0x10) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x110e22fff6) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r13, 0x4004743d, 0x110e22fff6) 714.33399ms ago: executing program 5 (id=1896): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001e456b8aa00000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x20000804}, 0x4004000) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)={0x28, 0x13, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c080}, 0x4000000) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="140100002900010000000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x20044809}, 0x10) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x2, 0x81, 0x200, 0x400, r0}) capget(&(0x7f00000000c0)={0x20080522, r5}, &(0x7f0000000100)={0x18ef, 0x2, 0x0, 0x80, 0x0, 0x6}) 527.103178ms ago: executing program 5 (id=1898): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x1000000000000008}, 0x18) r2 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x80, 0x1000, 0x5d0}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[], 0x20}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_RENAMEAT={0x23, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r2, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 519.730008ms ago: executing program 5 (id=1899): fstat(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r0, r3) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, {r2, r1}}, './file0\x00'}) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_kthread_work_execute_start\x00', r5, 0x0, 0x3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f0000000280), &(0x7f00000002c0)=r5}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x29, 0x9, 0xa5, 0x5, 0x0, @empty, @mcast1, 0x7800, 0x708, 0xb22, 0xffff8000}}) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000440)={0x0, @can={0x1d, r7}, @ethernet={0x1, @multicast}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x800, 0x0, 0x0, 0x0, 0xc97, &(0x7f0000000400)='veth1_to_batadv\x00', 0x73, 0x4, 0x8}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x25a, 0x5, 0xff, 0x8321, r5, 0x5, '\x00', r8, r5, 0x2, 0x5, 0x3, 0xc, @value=r5}, 0x50) r9 = syz_open_dev$vcsu(&(0x7f0000000540), 0xff, 0x20400) write$P9_RSTATFS(r9, &(0x7f0000000580)={0x43, 0x9, 0x1, {0x7, 0xe, 0xf, 0x7, 0x4, 0x8, 0xc, 0x9, 0x8}}, 0x43) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r9) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r10, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x40040) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000740)={'wlan0\x00'}) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r5) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000880)={'gre0\x00', &(0x7f0000000800)={'syztnl1\x00', r8, 0x7800, 0x20, 0x10001, 0x8, {{0x12, 0x4, 0x0, 0x1d, 0x48, 0x65, 0x0, 0xf7, 0x29, 0x0, @local, @multicast2, {[@generic={0x89, 0xe, "5250b7aa86859ab77b33aec8"}, @lsrr={0x83, 0x7, 0x15, [@loopback]}, @ssrr={0x89, 0x1f, 0x99, [@private=0xa010101, @broadcast, @multicast2, @empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2a}]}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x4) sendmsg$ETHTOOL_MSG_WOL_GET(r9, &(0x7f0000000b00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000940)={0x178, r11, 0x2, 0x70bd25, 0x6, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x40400c0}, 0x20000850) fsetxattr$security_capability(r5, &(0x7f0000000b40), &(0x7f0000000b80)=@v2={0x2000000, [{0x4, 0x682}, {0x4, 0x6}]}, 0x14, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002500)=[{&(0x7f0000000bc0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001200)=[{&(0x7f0000000c00)="d29f27c50c2ab85d4b", 0x9}, {&(0x7f0000000c40)="4fb2bffeba864cb14d8073173fae5771adc918cd2cc459324e4382cc69c687160aaabd3f9aee60a3a390013ff61ea86fb35c18f13f81f1ef7b0f3820a64bfab9b95522a083391d8a0f97b9aed1ab734908f0c11e4bff8ebdd13f14babfcdbdd136485921b87e10636d4d42083ac089254cf60c345895bad9fffd9b358c00104717c6649c83a33a8f06f30b9c85e092874b197940ed5315e03f1666e85531037bbb2e098de55ef7ba808d07ee46b55a309c056de4071df3987cb7d207bddd826fd471ee89401410241cabe88b0a5fee05595af946e4266979", 0xd8}, {&(0x7f0000000d40)="5b1f6aa21661835c825b65f834c67624a16df718b1147034c854fd3c168a14c7c3453a19773454c7ec4866574e1ea10f33b7fe3854c2ca14cbdd84e9966123e17c8655c43df29c04f52d9ba738996b286c5d105ad6ab0969782f29bdd7b1d1ecccc0a6cb4617cacaf3377543a9638c60c67b80175d5357adb105ff6be8604a9994d0a73e924b2f3d2787381e4111c3ab75b6ef5dd532239290d7d59c05ad3110", 0xa0}, {&(0x7f0000000e00)="f5728363613d1ebe1e79b8c6e071c023", 0x10}, {&(0x7f0000000e40)="b3ccdcc505317c9f8ca929897e03627d0840fa790fc9f9f69c9170ecf1d8badbf45824f297309db09786ca1cdabdd02ad93a20bcbdbf4915ff1836a2a4430a9c8479b4cbaf6e9c3f1b12c47ee2c8c200d26cde85a816a9cac6cfbf921e1542db3a7546c82b8296dc490724b0af3a75d1da4e04e70d4bc4f1fccf4d1c380a905dd8e2e3c5d4594e6ec81769c27da5448d1b0736947fc0b3611a7300ed10a0f7ba2cfdf1c07acbce35edbe295cf490aeacb5edd7adf81871", 0xb7}, {&(0x7f0000000f00)="31af0ccf5a2257d49c925f3b50d31be9acb39c59660f1356673851b0b969d462d8422819eb5b63fc69ebe06a6d859490143c3e06687ff0632c7e38784096af7007d09080a9ce9b54a1bf10ae9989f1e786bcbbdc50f5d9534f15e38f4113583b7ad4fcc80c533e278bf907cd9a380b57513ea9c20e03351611a202fa9eeaf3a0c18ba60009c6370d93b57796be47b135a436b2ec5ad10021fc57063e748f4ab898a4106a13dc791359329a8955bf30af24f0959ad070e5c85aa5c0e60223e3384eda0be0d77b3fbe5621daa5c77cc3038c2a9fa8df014b6122f8d5f875f9575422c8b182ff9e8662ec5dfef923880276936b9026027a16af5857b9af92", 0xfd}, {&(0x7f0000001000)="2b2175a6a41ee17e41d5ea0ea286c85d426bc88403afe9441c02eaad5af1e34ea1aaecf11b3024de33eb21e811dc4a50e82e07660b8860592904931803d8ae01ed259615b171e96893553c0f2911827c30ae9cd69873998f8c1703b91126e9b86307d31830a8a28b584f81ccef8baded0c22138e133b9065aec31849df5ee4800d409b7ff43295c6eee63f08a8cf", 0x8e}, {&(0x7f00000010c0)="d28018836d28752c52d3f04f852722f5c8cd53a30d9ddde7018982de0139734116a873e71c1c748c69fb9480f251a19b16c94f75c5c909baf2d65d969aaaad552897dc0ab0b65f7b13e024bbc795f9a6306daa45647a002dd2667138910c1bd204917383d20a64e79473a7c3e957c208b180d2023cf05d7884d94f8cdb4d7f3edb5ceb787e6de5", 0x87}, {&(0x7f0000001180)="afff9e55157a7b7658e2db91cd09f05b381b23094c111e50307e37385b73b2ac", 0x20}, {&(0x7f00000011c0)="4f4a3ef9cefe2037855119a4cf614ef097d75ee1b545c1675ec0168b6ead0fc30fb32c3d7df7f8ef483621", 0x2b}], 0xa, 0x0, 0x0, 0x4008010}, {&(0x7f00000012c0)=@in={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000002480)=[{&(0x7f0000001300)="37fa508f2e85cf73eef8bc4b4604ffe596c245265f7f9e57400176185329e71fc2c9343d006d7a406daedfb1a51d487d61edf3ca91cb96373cb4483ddeb4c62643a76d943696cd8b49a2df45d8d852abdbdaacbcec74478a3a6b38fc28a1a242be4a15f2aa9f6b6cfc3a30581dc77b468577583310da", 0x76}, {&(0x7f0000001380)="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", 0x1000}, {&(0x7f0000002380)="f4073e9f2daed0096eaaf6db46d05df860c791d62286c8785f904a9bc2490016ce29d1d959d1dbebd5394145ec98fee3acb42e66e2ea385385ea1bcd43c84cb4fe7d359af32169b137d631d334264cdf26feba4f7c44a4d1238de2e0f3ae2bdcf71b283579022e5af8999e0bb5673b049e2f21d21aae278d4146cf52948ba776479ddb63f07ed11ce8ebd73c3c5f85bb34ffa9ea9abfddb4e549fff3388226d91d19d05804922912074820064432983ce211369a6b7ecf77907fb1fbbe258d7aa57debc6ea074669a73e65", 0xcb}], 0x3, &(0x7f00000024c0)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0x8}}, @authinfo={0x18, 0x84, 0x6, {0x9}}], 0x30, 0x4004841}], 0x2, 0x44095) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f0000002580), &(0x7f00000025c0)=0x40) getsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000002600), &(0x7f0000002640)=0xe) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000026c0), r5) sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f00000027c0)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002780)={&(0x7f0000002700)={0x44, r14, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x76}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) gettid() sendmsg$NL80211_CMD_START_NAN(r5, &(0x7f00000028c0)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002880)={&(0x7f0000002840)={0x28, r10, 0x0, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x10}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}]}, 0x28}}, 0x84) ioctl$RTC_PIE_ON(r5, 0x7005) 497.553939ms ago: executing program 5 (id=1901): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@usrjquota}]}, 0x1, 0x5e9, &(0x7f0000001480)="$eJzs3c9vVNUeAPDvmf6gpbzXQl7ee7iQJsZAorS0gCHGBWwNafBH3Lix0oJIgYbWaNGEkuDGxLgxxsSVC+G/UCJbVrpy4caVISFKWJo45k7vLf1xp6Wl7RTu55MMc+85cznndvqdc+7pOXcCqKz+7J9axN6ImEwRvWl2Pq898sz+udc9uP/J6eyRol5/448UKU8rXp/y55784K6I+OnHFHvalpc7NXPl/OjExPjlfH9w+sLk4NTMlYPnLoyeHT87fnH4peFjR48cPTZ0aF3ndbUk7eT19z/s/Wzk7e+++SsN3fx1JMXxeDV/4cLz2Cj90d/4maTlWT3HNrqwFmnLf08WvsWpvYUVYk2K968jIv4XvdEWD9+83vj0tZZWDthU9RRRByoqiX+oqKIfUFzbL70OrrWkVwJshXsn5gYAlsd/+9zYYHQ1xgZ2PkixcFgnRcT6RuYW2xURd26PXD9ze+R6bNI4HFBu9lpE/L8s/lMj/vuiK/oa8V9bFP9Zv+BU/pylv77O8pcOFYt/2Dpz8d+1YvxHk/h/Z0H8v7vO8vsfbr7XvSj+u9d7SgAAAAAAAFBZt05ExItlf/+vzc//iZL5Pz0RcXwDyu9fsv/gfseSlNrdDSgGKHHvRMQrpfN/a8Xs3762fOtfjfkAHenMuYnxQxHx74g4EB07sv2hFco4+Pmer5vl9efz/4pHVv6dfC5gXo+77TsWHzM22vu4pw1k8X8t4pnS+b9pvv1PJe1/9nkw+Yhl7Hn+xqlmeavHP7BZ6t9G7C9t/x/etSKtfH+OwUZ/YLDoFSz37MdffN+s/PXGv1tMwOPL2v+dK8d/X1p4v56ptZdxeKa93ixvff3/6dHO9GbjljOdedpHo9PTWa+kM51sy1IXpl8eXnud4WlUxEPjeWgu/g88t/L4X1n/vzsiZpf83+nPxWuKC//9u+e3ZvXR/4fWyeJ/bE3t/9o3hm/0/dCs/Edr/4802voDeUrW/m/eTwSeHF8VYdq5OL0kHNvLsra6vgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwNKhFxK5ItYH57VptYCCiJyL+EztrE5empl84c+mDi2NZXuP7/2vFN/32zu2n4vv/+xbsDy/ZPxwRuyPiy7buxv7A6UsTY60+eQAAAAAAAAAAAAAAAAAAANgmepqs/8/83tbq2gGbrr3VFQBapiT+f25FPYCtp/2H6hL/UF3iH6pL/EN1iX+oLvEP1SX+obrEPwAAAAAAPFV277v1S4qI2Ze7G49MZ57X0dKaAZut1uoKAC3jFj9QXab+QHW5xgfSKvldTQ9a7ciVTJ5+jIMBAAAAAAAAAAAAoHL277X+H6rK+n+oLuv/obqK9f/71nrgzY2vC7C1XOMDscpK/tL1/6seBQAAAAAAAAAAAABspKmZK+dHJybGL9t4a3tUYys36vX61ey3YLvU5wnfKKbCb5f6LNko1vo92lGt+0wCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAW+ycAAP//xJYjKw==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x58, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) 475.12538ms ago: executing program 4 (id=1902): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @broadcast}, 0x10) setuid(0xee00) r3 = socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000080)=0x7, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) setresuid(0x0, 0xee00, 0xffffffffffffffff) r7 = io_uring_setup(0xaae, &(0x7f00000003c0)={0x0, 0xffffeffa, 0x800, 0x7, 0x2}) setrlimit(0x40000000000008, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0), 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xdf) write$binfmt_elf64(r8, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') close(r8) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open_by_handle_at(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c0000000300000005000000010a000004000000"], 0x8c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) 423.388362ms ago: executing program 4 (id=1903): lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 422.736192ms ago: executing program 6 (id=1904): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x100203, 0x20, 0xfffffffb, 0x0, 0x0, 0xec, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000002c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syslog(0x3, &(0x7f0000000780)=""/180, 0xb4) 408.350313ms ago: executing program 4 (id=1905): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)='%-5lx \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000012c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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") r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xacd42, 0x108) fallocate(r2, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0xc, r2, 0x0, 0x0, 0x0, 0xfffffffffe000001}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r5, &(0x7f0000000280)='\x00N35', 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=[0x1], 0x0, 0x0, 0x1}}, 0x40) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000140)={0xa}, 0x1) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}}, 0x2400c004) 386.909594ms ago: executing program 2 (id=1906): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000740), 0x0, 0x46c, &(0x7f0000000bc0)="$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") statfs(&(0x7f0000000840)='./file0/file0\x00', &(0x7f0000000880)=""/131) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 269.882288ms ago: executing program 6 (id=1907): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x20) sendfile(r0, r0, 0x0, 0x3) 192.493492ms ago: executing program 6 (id=1908): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000000a40)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f00000002c0)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000780)="5825be57aff9352b356be67ca2746357d1787b35", 0x5c4}], 0x1}}], 0x2, 0x4004040) r2 = socket(0x28, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x14, r4, 0x917, 0xa7, 0x1000000}, 0x14}}, 0x0) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x2200, 0x10000, 0x0, 0x6, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r6 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r6, &(0x7f00000000c0)=[{&(0x7f0000000380)="c0f003f5", 0x4}], 0x1, 0x9c01, 0x0, 0x3) listen(r5, 0x4) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x30000}], 0x1}}], 0x51, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r7}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) r9 = accept4$unix(r5, 0x0, 0x0, 0x80000) recvfrom$unix(r9, &(0x7f0000000140)=""/248, 0x40000, 0x0, 0x0, 0x0) fallocate(r0, 0x40, 0x10000, 0x80000001) 164.890633ms ago: executing program 4 (id=1909): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3c020000190001000000000001000000fe880000000000000000000000000101ac141436000000000000000000000000fffc0000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003300000000000000ffffffff0000000000000000000000000000000000000000000000000000000040000000fe8000000000000000000000000000bb000000003300000000000000fe800000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000006c"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 163.527333ms ago: executing program 2 (id=1910): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x1000000000000008}, 0x18) r2 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x80, 0x1000, 0x5d0}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[], 0x20}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_RENAMEAT={0x23, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r2, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 139.156814ms ago: executing program 3 (id=1911): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000340), 0x1, 0x55e, &(0x7f0000001ac0)="$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") r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r4, 0x7fff, 0x0) getdents(r4, 0x0, 0x58) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_freeze_timeout', 0x4000, 0x103) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x2000020, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x20060400) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, &(0x7f00000001c0)={@dev, @local, @broadcast}, &(0x7f0000000000)=0xc) mmap(&(0x7f0000744000/0x4000)=nil, 0x4000, 0xb635773f05ebbeee, 0x80010, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x48020000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 34.459638ms ago: executing program 4 (id=1912): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) r2 = syz_io_uring_setup(0x172, &(0x7f0000000780)={0x0, 0x4f5c, 0x10100, 0xfffffffe, 0x2a0}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) 31.772338ms ago: executing program 2 (id=1913): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @broadcast}, 0x10) setuid(0xee00) r3 = socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000080)=0x7, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) setresuid(0x0, 0xee00, 0xffffffffffffffff) r7 = io_uring_setup(0xaae, &(0x7f00000003c0)={0x0, 0xffffeffa, 0x800, 0x7, 0x2}) setrlimit(0x40000000000008, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0), 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xdf) write$binfmt_elf64(r8, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') close(r8) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open_by_handle_at(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c0000000300000005000000010a000004000000"], 0x8c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) 0s ago: executing program 4 (id=1914): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)=r2}, 0x20) kernel console output (not intermixed with test programs): t device team_slave_1 added [ 106.054586][ T6634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.061738][ T6634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.087778][ T6634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.130652][ T6634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.137756][ T6634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.163711][ T6634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.212714][ T6634] hsr_slave_0: entered promiscuous mode [ 106.218921][ T6634] hsr_slave_1: entered promiscuous mode [ 106.253373][ T6634] debugfs: 'hsr0' already exists in 'hsr' [ 106.259185][ T6634] Cannot create hsr debugfs directory [ 106.264988][ T6754] wg1 speed is unknown, defaulting to 1000 [ 106.271397][ T6754] wg1 speed is unknown, defaulting to 1000 [ 106.284565][ T6754] wg1 speed is unknown, defaulting to 1000 [ 106.321741][ T6754] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 106.414061][ T6754] wg1 speed is unknown, defaulting to 1000 [ 106.440738][ T6754] wg1 speed is unknown, defaulting to 1000 [ 106.454898][ T6634] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 106.485667][ T6634] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 106.664435][ T6754] wg1 speed is unknown, defaulting to 1000 [ 106.692514][ T6634] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 106.724397][ T6754] wg1 speed is unknown, defaulting to 1000 [ 106.730481][ T6634] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 106.907714][ T6754] wg1 speed is unknown, defaulting to 1000 [ 106.929654][ T6800] vhci_hcd: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 107.161330][ T6634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.309911][ T6634] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.403660][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.410888][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.644192][ T6634] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 107.654708][ T6634] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.721994][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.729117][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.828606][ T6805] syzkaller0: entered promiscuous mode [ 107.834134][ T6805] syzkaller0: entered allmulticast mode [ 107.947450][ T6634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.391851][ T6844] loop4: detected capacity change from 0 to 512 [ 108.471717][ T6850] loop5: detected capacity change from 0 to 1024 [ 108.499170][ T6850] EXT4-fs: Ignoring removed nobh option [ 108.543204][ T6850] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 108.544809][ T6844] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.579932][ T6850] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 108.593896][ T6844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.603541][ T6850] EXT4-fs error (device loop5): ext4_get_journal_inode:5808: comm syz.5.1066: inode #4294967295: comm syz.5.1066: iget: illegal inode # [ 108.609747][ T6634] veth0_vlan: entered promiscuous mode [ 108.625060][ T6850] EXT4-fs (loop5): no journal found [ 108.630480][ T6850] EXT4-fs (loop5): can't get journal size [ 108.644880][ T6850] EXT4-fs (loop5): failed to initialize system zone (-22) [ 108.667965][ T6634] veth1_vlan: entered promiscuous mode [ 108.671700][ T6850] EXT4-fs (loop5): mount failed [ 108.685351][ T6846] netlink: 'syz.5.1066': attribute type 13 has an invalid length. [ 108.722692][ T6634] veth0_macvtap: entered promiscuous mode [ 108.782254][ T6873] loop3: detected capacity change from 0 to 512 [ 108.813831][ T6873] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.828153][ T6873] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.863839][ T6846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.874286][ T6846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.926477][ T6634] veth1_macvtap: entered promiscuous mode [ 108.945615][ T52] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.969421][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.985342][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.998586][ T6634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.012860][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.025083][ T6634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.038498][ T6885] loop2: detected capacity change from 0 to 128 [ 109.040557][ T311] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.054325][ T311] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.087391][ T311] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.115787][ T311] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.154478][ T52] kworker/u8:3: attempt to access beyond end of device [ 109.154478][ T52] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 109.306035][ T6895] loop6: detected capacity change from 0 to 1024 [ 109.333129][ T6895] EXT4-fs (loop6): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.919118][ T6916] 9pnet_fd: Insufficient options for proto=fd [ 109.941119][ T6918] loop4: detected capacity change from 0 to 512 [ 109.997450][ T6918] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 110.096554][ T6918] EXT4-fs (loop4): 1 truncate cleaned up [ 110.102723][ T6918] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.179822][ T6908] syzkaller0: entered promiscuous mode [ 110.185739][ T6908] syzkaller0: entered allmulticast mode [ 110.208159][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.243374][ T6634] EXT4-fs (loop6): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 110.505485][ T6940] binfmt_misc: register: failed to install interpreter file ./file0 [ 110.563325][ T6938] loop4: detected capacity change from 0 to 8192 [ 110.607789][ T29] kauditd_printk_skb: 710 callbacks suppressed [ 110.607808][ T29] audit: type=1400 audit(1764133645.267:8133): avc: denied { execute } for pid=6941 comm="syz.3.1091" path="/236/cpuacct.usage_percpu" dev="tmpfs" ino=1259 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 110.676040][ T6938] loop4: p2 p3 p4 [ 110.680078][ T6938] loop4: p2 start 164919041 is beyond EOD, truncated [ 110.686866][ T6938] loop4: p3 size 66846464 extends beyond EOD, truncated [ 110.707185][ T6947] netlink: 96 bytes leftover after parsing attributes in process `GPL'. [ 110.716835][ T29] audit: type=1400 audit(1764133645.297:8134): avc: denied { create } for pid=6941 comm="syz.3.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 110.736956][ T29] audit: type=1400 audit(1764133645.297:8135): avc: denied { ioctl } for pid=6941 comm="syz.3.1091" path="socket:[17531]" dev="sockfs" ino=17531 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 110.762279][ T29] audit: type=1400 audit(1764133645.357:8136): avc: denied { create } for pid=6937 comm="syz.4.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 110.781921][ T29] audit: type=1400 audit(1764133645.357:8137): avc: denied { connect } for pid=6937 comm="syz.4.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 110.801606][ T29] audit: type=1400 audit(1764133645.357:8138): avc: denied { write } for pid=6937 comm="syz.4.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 110.821070][ T29] audit: type=1400 audit(1764133645.357:8139): avc: denied { ioctl } for pid=6937 comm="syz.4.1089" path="socket:[16638]" dev="sockfs" ino=16638 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 110.845925][ T29] audit: type=1326 audit(1764133645.357:8140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6937 comm="syz.4.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cd7bbf749 code=0x7ffc0000 [ 110.869433][ T29] audit: type=1326 audit(1764133645.357:8141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6937 comm="syz.4.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8cd7bbf749 code=0x7ffc0000 [ 110.892894][ T29] audit: type=1400 audit(1764133645.357:8142): avc: denied { tracepoint } for pid=6937 comm="syz.4.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 110.944467][ T6938] loop4: p4 size 37048832 extends beyond EOD, truncated [ 111.046047][ T3529] udevd[3529]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 111.059927][ T4037] udevd[4037]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 111.074128][ T6957] FAULT_INJECTION: forcing a failure. [ 111.074128][ T6957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.087229][ T6957] CPU: 0 UID: 0 PID: 6957 Comm: syz.4.1096 Not tainted syzkaller #0 PREEMPT(voluntary) [ 111.087320][ T6957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 111.087333][ T6957] Call Trace: [ 111.087340][ T6957] [ 111.087348][ T6957] __dump_stack+0x1d/0x30 [ 111.087371][ T6957] dump_stack_lvl+0xe8/0x140 [ 111.087391][ T6957] dump_stack+0x15/0x1b [ 111.087437][ T6957] should_fail_ex+0x265/0x280 [ 111.087472][ T6957] should_fail+0xb/0x20 [ 111.087488][ T6957] should_fail_usercopy+0x1a/0x20 [ 111.087536][ T6957] _copy_from_user+0x1c/0xb0 [ 111.087562][ T6957] ___sys_sendmsg+0xc1/0x1d0 [ 111.087597][ T6957] __x64_sys_sendmsg+0xd4/0x160 [ 111.087620][ T6957] x64_sys_call+0x191e/0x3000 [ 111.087700][ T6957] do_syscall_64+0xd2/0x200 [ 111.087721][ T6957] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 111.087793][ T6957] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 111.087868][ T6957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.087923][ T6957] RIP: 0033:0x7f8cd7bbf749 [ 111.087938][ T6957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.087957][ T6957] RSP: 002b:00007f8cd661f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.087977][ T6957] RAX: ffffffffffffffda RBX: 00007f8cd7e15fa0 RCX: 00007f8cd7bbf749 [ 111.087989][ T6957] RDX: 0000000000040814 RSI: 0000200000000240 RDI: 0000000000000005 [ 111.088002][ T6957] RBP: 00007f8cd661f090 R08: 0000000000000000 R09: 0000000000000000 [ 111.088061][ T6957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.088073][ T6957] R13: 00007f8cd7e16038 R14: 00007f8cd7e15fa0 R15: 00007ffe443412e8 [ 111.088092][ T6957] [ 111.602448][ T6980] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1103'. [ 111.637775][ T6987] 9pnet: Unknown protocol version 9 [ 111.801389][ T6995] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1107'. [ 112.056162][ T7000] loop2: detected capacity change from 0 to 512 [ 112.103476][ T7000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.220106][ T7000] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.391744][ T7007] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 112.399781][ T7006] 9pnet_fd: Insufficient options for proto=fd [ 112.604176][ T7015] 9pnet_fd: Insufficient options for proto=fd [ 112.686223][ T7018] loop6: detected capacity change from 0 to 512 [ 112.731773][ T7018] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.955898][ T6634] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.071240][ T7038] loop2: detected capacity change from 0 to 128 [ 113.130474][ T7038] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 113.183328][ T7038] ext4 filesystem being mounted at /201/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 113.343680][ T7056] loop4: detected capacity change from 0 to 512 [ 113.393058][ T3322] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.405498][ T7056] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.465535][ T7056] ext4 filesystem being mounted at /245/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.497453][ T7056] netlink: 'syz.4.1124': attribute type 1 has an invalid length. [ 113.542922][ T7072] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1126'. [ 113.565762][ T7073] loop3: detected capacity change from 0 to 512 [ 113.585734][ T7073] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 113.626255][ T7073] EXT4-fs (loop3): 1 truncate cleaned up [ 113.635368][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.645073][ T7073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.693345][ T7073] EXT4-fs (loop3): Online resizing not supported with sparse_super2 [ 113.717038][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.773628][ T7098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1130'. [ 113.856714][ T7098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1130'. [ 113.894756][ T7110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.910292][ T7110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.919145][ T7110] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1136'. [ 114.040954][ T7119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.049949][ T7119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.224842][ T7126] 9pnet_fd: Insufficient options for proto=fd [ 114.617191][ T7131] netlink: 'syz.3.1140': attribute type 1 has an invalid length. [ 114.634874][ T7136] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7136 comm=syz.6.1143 [ 115.125632][ T7133] loop5: detected capacity change from 0 to 8192 [ 115.196654][ T3529] loop5: p1 p2 p3 p4 [ 115.201498][ T7157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1147'. [ 115.255414][ T3529] loop5: p1 size 196608 extends beyond EOD, truncated [ 115.329393][ T7146] syzkaller0: entered promiscuous mode [ 115.336319][ T7146] syzkaller0: entered allmulticast mode [ 115.354444][ T3529] loop5: p2 start 164919041 is beyond EOD, truncated [ 115.361332][ T3529] loop5: p3 size 66846464 extends beyond EOD, truncated [ 115.396976][ T7157] hsr_slave_1 (unregistering): left promiscuous mode [ 115.414916][ T3529] loop5: p4 size 37048832 extends beyond EOD, truncated [ 115.712004][ T7164] netlink: 830 bytes leftover after parsing attributes in process `syz.6.1149'. [ 115.813767][ T7133] loop5: p1 p2 p3 p4 [ 115.823203][ T7133] loop5: p1 size 196608 extends beyond EOD, truncated [ 115.845712][ T7168] 9pnet_fd: Insufficient options for proto=fd [ 115.852458][ T7133] loop5: p2 start 164919041 is beyond EOD, truncated [ 115.859251][ T7133] loop5: p3 size 66846464 extends beyond EOD, truncated [ 115.878916][ T7133] loop5: p4 size 37048832 extends beyond EOD, truncated [ 115.897424][ T29] kauditd_printk_skb: 485 callbacks suppressed [ 115.897440][ T29] audit: type=1326 audit(1764133650.557:8628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7132 comm="syz.5.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f561f26de3a code=0x7ffc0000 [ 115.984788][ T29] audit: type=1326 audit(1764133650.587:8629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7132 comm="syz.5.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f561f26ecc7 code=0x7ffc0000 [ 116.008404][ T29] audit: type=1326 audit(1764133650.587:8630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7132 comm="syz.5.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f561f26de3a code=0x7ffc0000 [ 116.011717][ T7170] binfmt_misc: register: failed to install interpreter file ./file0 [ 116.031969][ T29] audit: type=1326 audit(1764133650.587:8631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7132 comm="syz.5.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f561f26de3a code=0x7ffc0000 [ 116.032008][ T29] audit: type=1326 audit(1764133650.587:8632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7132 comm="syz.5.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f561f26ecc7 code=0x7ffc0000 [ 116.087039][ T29] audit: type=1326 audit(1764133650.587:8633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7132 comm="syz.5.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f561f26de3a code=0x7ffc0000 [ 116.110584][ T29] audit: type=1326 audit(1764133650.587:8634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7132 comm="syz.5.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f561f26ecc7 code=0x7ffc0000 [ 116.134276][ T29] audit: type=1326 audit(1764133650.587:8635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7132 comm="syz.5.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f561f26de3a code=0x7ffc0000 [ 116.157825][ T29] audit: type=1326 audit(1764133650.587:8636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7132 comm="syz.5.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f561f26de3a code=0x7ffc0000 [ 116.181443][ T29] audit: type=1326 audit(1764133650.587:8637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7132 comm="syz.5.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f561f26de3a code=0x7ffc0000 [ 116.209173][ T4037] udevd[4037]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 116.216808][ T3529] udevd[3529]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 116.220553][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 116.291245][ T7173] team_slave_0: entered promiscuous mode [ 116.297067][ T7173] team_slave_1: entered promiscuous mode [ 116.310784][ T4037] udevd[4037]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 116.322070][ T3529] udevd[3529]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 116.322203][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 116.345281][ T7173] macsec1: entered promiscuous mode [ 116.350530][ T7173] team0: entered promiscuous mode [ 116.354373][ T7176] netlink: 'syz.5.1154': attribute type 1 has an invalid length. [ 116.374713][ T7166] netlink: 124 bytes leftover after parsing attributes in process `syz.6.1150'. [ 116.428364][ T7171] loop6: detected capacity change from 0 to 512 [ 116.435299][ T7171] EXT4-fs: Ignoring removed nobh option [ 116.447365][ T7171] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #3: comm syz.6.1150: corrupted inode contents [ 116.513625][ T7171] EXT4-fs (loop6): Remounting filesystem read-only [ 116.525784][ T7171] EXT4-fs (loop6): 1 truncate cleaned up [ 116.532021][ T7171] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.545377][ T7171] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.901775][ T7237] loop3: detected capacity change from 0 to 1024 [ 116.935802][ T7237] EXT4-fs: Ignoring removed orlov option [ 116.977417][ T7237] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.120661][ T6634] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.289667][ T7267] xt_CT: You must specify a L4 protocol and not use inversions on it [ 117.338416][ T7267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1164'. [ 117.741818][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.752096][ T7306] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10256 sclass=netlink_route_socket pid=7306 comm=syz.6.1169 [ 117.843227][ T7319] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1172'. [ 117.899294][ T7324] syzkaller0: entered promiscuous mode [ 117.904876][ T7324] syzkaller0: entered allmulticast mode [ 118.698322][ T7367] loop3: detected capacity change from 0 to 128 [ 118.740915][ T7367] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 118.763944][ T7372] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7372 comm=syz.4.1177 [ 118.783905][ T7367] ext4 filesystem being mounted at /246/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.972246][ T3323] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.145635][ T7413] loop6: detected capacity change from 0 to 1024 [ 119.152789][ T7413] EXT4-fs: Ignoring removed orlov option [ 119.183928][ T7413] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.390920][ T7438] xt_CT: You must specify a L4 protocol and not use inversions on it [ 119.493389][ T7441] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1182'. [ 120.186825][ T7464] loop5: detected capacity change from 0 to 512 [ 120.397732][ T6634] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.409121][ T7464] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.772215][ T7491] binfmt_misc: register: failed to install interpreter file ./file0 [ 120.909193][ T29] kauditd_printk_skb: 499 callbacks suppressed [ 120.909210][ T29] audit: type=1326 audit(1764133655.567:9135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.5.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f561f2665e7 code=0x7ffc0000 [ 120.954976][ T29] audit: type=1326 audit(1764133655.567:9136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.5.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f561f20b829 code=0x7ffc0000 [ 120.978389][ T29] audit: type=1326 audit(1764133655.567:9137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.5.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f561f26f749 code=0x7ffc0000 [ 121.001888][ T29] audit: type=1326 audit(1764133655.577:9138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.5.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f561f2665e7 code=0x7ffc0000 [ 121.025348][ T29] audit: type=1326 audit(1764133655.577:9139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.5.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f561f20b829 code=0x7ffc0000 [ 121.048795][ T29] audit: type=1326 audit(1764133655.577:9140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.5.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f561f26f749 code=0x7ffc0000 [ 121.072396][ T29] audit: type=1326 audit(1764133655.577:9141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.5.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f561f2665e7 code=0x7ffc0000 [ 121.095753][ T29] audit: type=1326 audit(1764133655.577:9142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.5.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f561f20b829 code=0x7ffc0000 [ 121.119198][ T29] audit: type=1326 audit(1764133655.577:9143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.5.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f561f26f749 code=0x7ffc0000 [ 121.142702][ T29] audit: type=1326 audit(1764133655.577:9144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.5.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f561f2665e7 code=0x7ffc0000 [ 121.179427][ T4447] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.267224][ T7512] xt_hashlimit: max too large, truncated to 1048576 [ 121.386859][ T7521] loop4: detected capacity change from 0 to 2048 [ 121.696986][ T7534] siw: device registration error -23 [ 121.705592][ T7534] loop3: detected capacity change from 0 to 512 [ 121.718907][ T7534] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.731579][ T7534] ext4 filesystem being mounted at /252/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.778764][ T7543] loop5: detected capacity change from 0 to 512 [ 121.808464][ T7543] EXT4-fs: Ignoring removed oldalloc option [ 121.856925][ T7543] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.913438][ T7543] ext4 filesystem being mounted at /178/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.939855][ T7533] loop4: detected capacity change from 0 to 256 [ 121.999577][ T7549] loop6: detected capacity change from 0 to 512 [ 122.087845][ T7549] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.103270][ T4447] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.196899][ T7563] xt_hashlimit: max too large, truncated to 1048576 [ 122.232818][ T7563] loop2: detected capacity change from 0 to 2048 [ 122.404926][ T7574] loop5: detected capacity change from 0 to 512 [ 122.453304][ T7574] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.466989][ T7574] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.484286][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.512810][ T7578] loop3: detected capacity change from 0 to 128 [ 122.574911][ T7582] vlan1: entered allmulticast mode [ 122.833959][ T6634] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.109074][ T7612] siw: device registration error -23 [ 123.117735][ T7612] loop6: detected capacity change from 0 to 512 [ 123.187642][ T7612] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.200248][ T7612] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 123.305404][ T7618] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1232'. [ 123.500055][ T7632] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1238'. [ 123.799421][ T6634] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.852288][ T7650] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1244'. [ 124.028616][ T7648] wg1 speed is unknown, defaulting to 1000 [ 124.128674][ T7664] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7664 comm=syz.6.1250 [ 124.156906][ T7666] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1251'. [ 124.240970][ T7670] loop6: detected capacity change from 0 to 2048 [ 124.260679][ T7670] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.274400][ T7670] FAULT_INJECTION: forcing a failure. [ 124.274400][ T7670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.287632][ T7670] CPU: 1 UID: 0 PID: 7670 Comm: syz.6.1253 Not tainted syzkaller #0 PREEMPT(voluntary) [ 124.287681][ T7670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 124.287692][ T7670] Call Trace: [ 124.287698][ T7670] [ 124.287706][ T7670] __dump_stack+0x1d/0x30 [ 124.287732][ T7670] dump_stack_lvl+0xe8/0x140 [ 124.287818][ T7670] dump_stack+0x15/0x1b [ 124.287833][ T7670] should_fail_ex+0x265/0x280 [ 124.287864][ T7670] should_fail+0xb/0x20 [ 124.287912][ T7670] should_fail_usercopy+0x1a/0x20 [ 124.288014][ T7670] copy_folio_from_iter_atomic+0x278/0x11b0 [ 124.288044][ T7670] generic_perform_write+0x2c2/0x490 [ 124.288068][ T7670] ext4_buffered_write_iter+0x1ee/0x3c0 [ 124.288196][ T7670] ext4_file_write_iter+0x387/0xf60 [ 124.288214][ T7670] ? path_openat+0x1bf8/0x2170 [ 124.288265][ T7670] do_iter_readv_writev+0x4a1/0x540 [ 124.288293][ T7670] vfs_writev+0x2df/0x8b0 [ 124.288330][ T7670] __se_sys_pwritev2+0xfc/0x1c0 [ 124.288416][ T7670] __x64_sys_pwritev2+0x67/0x80 [ 124.288443][ T7670] x64_sys_call+0x2c59/0x3000 [ 124.288463][ T7670] do_syscall_64+0xd2/0x200 [ 124.288504][ T7670] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 124.288529][ T7670] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 124.288560][ T7670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.288579][ T7670] RIP: 0033:0x7f4f1d2df749 [ 124.288634][ T7670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.288650][ T7670] RSP: 002b:00007f4f1bd3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 124.288670][ T7670] RAX: ffffffffffffffda RBX: 00007f4f1d535fa0 RCX: 00007f4f1d2df749 [ 124.288681][ T7670] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 124.288692][ T7670] RBP: 00007f4f1bd3f090 R08: 0000000000000000 R09: 0000000000000000 [ 124.288769][ T7670] R10: 0000000000005412 R11: 0000000000000246 R12: 0000000000000002 [ 124.288780][ T7670] R13: 00007f4f1d536038 R14: 00007f4f1d535fa0 R15: 00007ffd3aefb948 [ 124.288797][ T7670] [ 124.289719][ T7670] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 124.506179][ T7670] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 124.518568][ T7670] EXT4-fs (loop6): This should not happen!! Data will be lost [ 124.518568][ T7670] [ 124.528277][ T7670] EXT4-fs (loop6): Total free blocks count 0 [ 124.534311][ T7670] EXT4-fs (loop6): Free/Dirty block details [ 124.540293][ T7670] EXT4-fs (loop6): free_blocks=66060288 [ 124.545983][ T7670] EXT4-fs (loop6): dirty_blocks=48 [ 124.551116][ T7670] EXT4-fs (loop6): Block reservation details [ 124.557166][ T7670] EXT4-fs (loop6): i_reserved_data_blocks=3 [ 124.589464][ T59] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 124.634122][ T7682] binfmt_misc: register: failed to install interpreter file ./file0 [ 124.703035][ T7689] 9pnet_fd: Insufficient options for proto=fd [ 124.716843][ T7691] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7691 comm=syz.4.1262 [ 124.764061][ T7695] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1263'. [ 125.171612][ T7722] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1269'. [ 125.183279][ T7722] loop4: detected capacity change from 0 to 512 [ 125.190343][ T7722] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 125.200214][ T7722] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 125.597836][ T7735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1278'. [ 125.894733][ T7765] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1289'. [ 126.017102][ T29] kauditd_printk_skb: 888 callbacks suppressed [ 126.017116][ T29] audit: type=1400 audit(1764133660.677:10033): avc: denied { read } for pid=7754 comm="syz.2.1287" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 126.047700][ T29] audit: type=1400 audit(1764133660.677:10034): avc: denied { open } for pid=7754 comm="syz.2.1287" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 126.072545][ T29] audit: type=1400 audit(1764133660.677:10035): avc: denied { ioctl } for pid=7754 comm="syz.2.1287" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c3f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 126.224398][ T7761] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 126.333924][ T29] audit: type=1400 audit(1764133660.987:10036): avc: denied { bind } for pid=7768 comm="syz.4.1291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 126.389049][ T29] audit: type=1400 audit(1764133661.047:10037): avc: denied { setopt } for pid=7774 comm="syz.6.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 126.409758][ T29] audit: type=1400 audit(1764133661.047:10038): avc: denied { bind } for pid=7774 comm="syz.6.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 126.515465][ T29] audit: type=1326 audit(1764133661.177:10039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7787 comm="syz.3.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa888bf749 code=0x7ffc0000 [ 126.539434][ T29] audit: type=1326 audit(1764133661.177:10040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7787 comm="syz.3.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa888bf749 code=0x7ffc0000 [ 126.563657][ T29] audit: type=1326 audit(1764133661.227:10041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7787 comm="syz.3.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7faa888bf749 code=0x7ffc0000 [ 126.587297][ T29] audit: type=1326 audit(1764133661.227:10042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7787 comm="syz.3.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa888bf749 code=0x7ffc0000 [ 126.614495][ T7788] loop3: detected capacity change from 0 to 512 [ 126.622704][ T7788] msdos: Unknown parameter '' [ 126.760199][ T7798] 9pnet_fd: Insufficient options for proto=fd [ 126.819391][ T7806] loop5: detected capacity change from 0 to 512 [ 126.856361][ T7806] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.1304: bad orphan inode 15 [ 126.875917][ T7806] ext4_test_bit(bit=14, block=18) = 1 [ 126.881361][ T7806] is_bad_inode(inode)=0 [ 126.885589][ T7806] NEXT_ORPHAN(inode)=1023 [ 126.889996][ T7806] max_ino=32 [ 126.893211][ T7806] i_nlink=0 [ 126.902012][ T7806] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2967: inode #15: comm syz.5.1304: corrupted xattr block 19: invalid header [ 126.917052][ T7806] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 126.926704][ T7806] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 126.939107][ T7806] ext4 filesystem being mounted at /204/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 126.952058][ T7806] EXT4-fs (loop5): shut down requested (1) [ 127.004467][ T4447] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 127.169760][ T7820] loop2: detected capacity change from 0 to 1024 [ 127.227441][ T7820] EXT4-fs: inline encryption not supported [ 127.282834][ T7823] wg1 speed is unknown, defaulting to 1000 [ 127.298472][ T7820] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.556534][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.599840][ T7830] loop6: detected capacity change from 0 to 256 [ 127.683632][ T7832] 9pnet_fd: Insufficient options for proto=fd [ 127.710347][ T7830] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1313'. [ 127.772094][ T7835] loop2: detected capacity change from 0 to 512 [ 127.799998][ T7834] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1313'. [ 127.847208][ T7830] ip6gre1: entered promiscuous mode [ 127.852470][ T7830] ip6gre1: entered allmulticast mode [ 127.864205][ T7835] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1314: bg 0: block 248: padding at end of block bitmap is not set [ 127.919278][ T7834] syz.6.1313 (7834) used greatest stack depth: 8808 bytes left [ 127.945725][ T7835] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.1314: Failed to acquire dquot type 1 [ 128.009380][ T7835] EXT4-fs (loop2): 1 truncate cleaned up [ 128.045561][ T7835] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.108453][ T7835] ext4 filesystem being mounted at /238/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.180347][ T7835] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.1314: deleted inode referenced: 12 [ 128.287915][ T7857] loop5: detected capacity change from 0 to 512 [ 128.315537][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.335629][ T292] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 1 [ 128.379071][ T7857] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1321: bg 0: block 248: padding at end of block bitmap is not set [ 128.463157][ T7857] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.1321: Failed to acquire dquot type 1 [ 128.548318][ T7857] EXT4-fs (loop5): 1 truncate cleaned up [ 128.554475][ T7857] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.616232][ T7870] __nla_validate_parse: 1 callbacks suppressed [ 128.616251][ T7870] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1326'. [ 128.665366][ T7857] ext4 filesystem being mounted at /210/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.831539][ T7882] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7882 comm=syz.3.1330 [ 128.963506][ T4447] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.976634][ T37] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:2: Failed to release dquot type 1 [ 129.213217][ T7891] futex_wake_op: syz.4.1333 tries to shift op by -1; fix this program [ 129.262180][ T7893] 9pnet_fd: Insufficient options for proto=fd [ 129.304353][ T7896] random: crng reseeded on system resumption [ 129.504577][ T7905] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1336'. [ 129.531797][ T7907] 9pnet_fd: Insufficient options for proto=fd [ 129.592230][ T7911] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1339'. [ 129.607184][ T7913] FAULT_INJECTION: forcing a failure. [ 129.607184][ T7913] name failslab, interval 1, probability 0, space 0, times 0 [ 129.620083][ T7913] CPU: 0 UID: 0 PID: 7913 Comm: syz.5.1340 Not tainted syzkaller #0 PREEMPT(voluntary) [ 129.620116][ T7913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 129.620131][ T7913] Call Trace: [ 129.620139][ T7913] [ 129.620147][ T7913] __dump_stack+0x1d/0x30 [ 129.620171][ T7913] dump_stack_lvl+0xe8/0x140 [ 129.620224][ T7913] dump_stack+0x15/0x1b [ 129.620243][ T7913] should_fail_ex+0x265/0x280 [ 129.620323][ T7913] should_failslab+0x8c/0xb0 [ 129.620360][ T7913] kmem_cache_alloc_noprof+0x50/0x480 [ 129.620396][ T7913] ? getname_flags+0x80/0x3b0 [ 129.620494][ T7913] getname_flags+0x80/0x3b0 [ 129.620532][ T7913] user_path_at+0x28/0x130 [ 129.620553][ T7913] __se_sys_name_to_handle_at+0xfd/0x640 [ 129.620642][ T7913] ? ksys_write+0x192/0x1a0 [ 129.620676][ T7913] __x64_sys_name_to_handle_at+0x67/0x80 [ 129.620719][ T7913] x64_sys_call+0x1552/0x3000 [ 129.620784][ T7913] do_syscall_64+0xd2/0x200 [ 129.620811][ T7913] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 129.620975][ T7913] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 129.621013][ T7913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.621035][ T7913] RIP: 0033:0x7f561f26f749 [ 129.621053][ T7913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.621072][ T7913] RSP: 002b:00007f561dccf038 EFLAGS: 00000246 ORIG_RAX: 000000000000012f [ 129.621092][ T7913] RAX: ffffffffffffffda RBX: 00007f561f4c5fa0 RCX: 00007f561f26f749 [ 129.621180][ T7913] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 129.621195][ T7913] RBP: 00007f561dccf090 R08: 0000000000001000 R09: 0000000000000000 [ 129.621210][ T7913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.621225][ T7913] R13: 00007f561f4c6038 R14: 00007f561f4c5fa0 R15: 00007ffc7f139428 [ 129.621328][ T7913] [ 129.941131][ T7924] 9pnet_fd: Insufficient options for proto=fd [ 130.012039][ T7931] futex_wake_op: syz.6.1349 tries to shift op by -1; fix this program [ 130.021972][ T7931] random: crng reseeded on system resumption [ 130.028968][ T7929] 9pnet_fd: Insufficient options for proto=fd [ 130.044743][ T7931] Restarting kernel threads ... [ 130.050077][ T7931] Done restarting kernel threads. [ 130.145082][ T7940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1352'. [ 130.233207][ T7948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1356'. [ 130.803750][ T7952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1357'. [ 130.813888][ T7952] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7952 comm=syz.3.1357 [ 130.828802][ T7952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1357'. [ 131.005964][ T7965] tmpfs: Unknown parameter 'fsuuid' [ 131.123251][ T7973] netlink: 'syz.2.1366': attribute type 2 has an invalid length. [ 131.131225][ T7973] netlink: 'syz.2.1366': attribute type 1 has an invalid length. [ 131.139071][ T7973] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1366'. [ 131.150348][ T29] kauditd_printk_skb: 458 callbacks suppressed [ 131.150361][ T29] audit: type=1400 audit(1764133665.767:10495): avc: denied { write } for pid=7972 comm="syz.2.1366" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 131.251079][ T7978] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1363'. [ 131.269259][ T7978] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1363'. [ 131.427614][ T7983] loop4: detected capacity change from 0 to 512 [ 131.481559][ T7983] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.496105][ T7983] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.508366][ T29] audit: type=1326 audit(1764133666.167:10496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.4.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cd7bbf749 code=0x7ffc0000 [ 131.531934][ T29] audit: type=1326 audit(1764133666.167:10497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.4.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cd7bbf749 code=0x7ffc0000 [ 131.557712][ T29] audit: type=1326 audit(1764133666.217:10498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.4.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8cd7bbf749 code=0x7ffc0000 [ 131.581300][ T29] audit: type=1326 audit(1764133666.217:10499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.4.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cd7bbf749 code=0x7ffc0000 [ 131.605019][ T29] audit: type=1326 audit(1764133666.217:10500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.4.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cd7bbf749 code=0x7ffc0000 [ 131.628836][ T29] audit: type=1326 audit(1764133666.217:10501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.4.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f8cd7bbf749 code=0x7ffc0000 [ 131.652450][ T29] audit: type=1326 audit(1764133666.217:10502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.4.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cd7bbf749 code=0x7ffc0000 [ 131.676099][ T29] audit: type=1326 audit(1764133666.217:10503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.4.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cd7bbf749 code=0x7ffc0000 [ 131.699600][ T29] audit: type=1326 audit(1764133666.217:10504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.4.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f8cd7bbf749 code=0x7ffc0000 [ 131.836647][ T7987] netlink: 'syz.5.1370': attribute type 1 has an invalid length. [ 131.839104][ T7994] tipc: Can't bind to reserved service type 2 [ 131.852624][ T7994] loop2: detected capacity change from 0 to 128 [ 131.854976][ T7987] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.890870][ T7987] bond0: entered promiscuous mode [ 131.895994][ T7987] bond_slave_0: entered promiscuous mode [ 131.901744][ T7987] bond_slave_1: entered promiscuous mode [ 131.911639][ T7987] gretap0: entered promiscuous mode [ 131.918802][ T7987] hsr1: entered promiscuous mode [ 131.951075][ T7998] tipc: Started in network mode [ 131.956053][ T7998] tipc: Node identity 4, cluster identity 4711 [ 131.962258][ T7998] tipc: Node number set to 4 [ 132.032833][ T7999] siw: device registration error -23 [ 132.441626][ T8029] 9pnet_fd: Insufficient options for proto=fd [ 132.762699][ T8044] loop3: detected capacity change from 0 to 512 [ 132.788908][ T8044] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.810728][ T8044] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.838606][ T8054] FAULT_INJECTION: forcing a failure. [ 132.838606][ T8054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.851896][ T8054] CPU: 1 UID: 0 PID: 8054 Comm: syz.6.1390 Not tainted syzkaller #0 PREEMPT(voluntary) [ 132.851932][ T8054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 132.851949][ T8054] Call Trace: [ 132.851958][ T8054] [ 132.851967][ T8054] __dump_stack+0x1d/0x30 [ 132.852063][ T8054] dump_stack_lvl+0xe8/0x140 [ 132.852087][ T8054] dump_stack+0x15/0x1b [ 132.852108][ T8054] should_fail_ex+0x265/0x280 [ 132.852160][ T8054] should_fail+0xb/0x20 [ 132.852175][ T8054] should_fail_usercopy+0x1a/0x20 [ 132.852200][ T8054] _copy_to_user+0x20/0xa0 [ 132.852233][ T8054] simple_read_from_buffer+0xb5/0x130 [ 132.852316][ T8054] proc_fail_nth_read+0x10e/0x150 [ 132.852360][ T8054] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 132.852394][ T8054] vfs_read+0x1a8/0x770 [ 132.852417][ T8054] ? __rcu_read_unlock+0x4f/0x70 [ 132.852489][ T8054] ? __fget_files+0x184/0x1c0 [ 132.852530][ T8054] ksys_read+0xda/0x1a0 [ 132.852563][ T8054] __x64_sys_read+0x40/0x50 [ 132.852602][ T8054] x64_sys_call+0x27c0/0x3000 [ 132.852693][ T8054] do_syscall_64+0xd2/0x200 [ 132.852719][ T8054] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 132.852790][ T8054] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 132.852834][ T8054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.852862][ T8054] RIP: 0033:0x7f4f1d2de15c [ 132.852881][ T8054] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 132.852900][ T8054] RSP: 002b:00007f4f1bd3f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 132.852928][ T8054] RAX: ffffffffffffffda RBX: 00007f4f1d535fa0 RCX: 00007f4f1d2de15c [ 132.852943][ T8054] RDX: 000000000000000f RSI: 00007f4f1bd3f0a0 RDI: 0000000000000008 [ 132.852958][ T8054] RBP: 00007f4f1bd3f090 R08: 0000000000000000 R09: 0000000000000000 [ 132.852973][ T8054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.852989][ T8054] R13: 00007f4f1d536038 R14: 00007f4f1d535fa0 R15: 00007ffd3aefb948 [ 132.853014][ T8054] [ 133.098840][ T8058] 9pnet_fd: Insufficient options for proto=fd [ 133.691420][ T8083] __nla_validate_parse: 3 callbacks suppressed [ 133.691475][ T8083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1403'. [ 133.727743][ T8085] xt_hashlimit: max too large, truncated to 1048576 [ 133.742066][ T8085] netlink: 'syz.6.1401': attribute type 10 has an invalid length. [ 133.749954][ T8085] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1401'. [ 133.771610][ T8085] batadv0: entered promiscuous mode [ 133.776928][ T8085] batadv0: entered allmulticast mode [ 133.789579][ T8085] bridge0: port 3(batadv0) entered blocking state [ 133.796251][ T8085] bridge0: port 3(batadv0) entered disabled state [ 133.831137][ T8085] bridge0: port 3(batadv0) entered blocking state [ 133.837677][ T8085] bridge0: port 3(batadv0) entered forwarding state [ 133.870123][ T8098] loop4: detected capacity change from 0 to 128 [ 133.925626][ T8085] loop6: detected capacity change from 0 to 512 [ 133.934782][ T8085] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 133.950821][ T8085] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.1401: invalid indirect mapped block 4294967295 (level 0) [ 133.965381][ T8085] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.1401: invalid indirect mapped block 4294967295 (level 1) [ 133.980205][ T8085] EXT4-fs (loop6): 1 orphan inode deleted [ 133.986059][ T8085] EXT4-fs (loop6): 1 truncate cleaned up [ 133.992143][ T8085] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.015098][ T8085] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.061711][ T8113] binfmt_misc: register: failed to install interpreter file ./file0 [ 134.075921][ T2646] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 134.085264][ T2646] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 134.355277][ T8134] loop2: detected capacity change from 0 to 512 [ 134.391302][ T8134] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.432043][ T8134] ext4 filesystem being mounted at /258/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 134.481931][ T8143] siw: device registration error -23 [ 134.535972][ T8143] loop6: detected capacity change from 0 to 512 [ 134.568780][ T8143] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.648354][ T8143] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 134.762644][ T8157] binfmt_misc: register: failed to install interpreter file ./file0 [ 135.135233][ T8159] bridge0: port 3(gretap0) entered blocking state [ 135.141760][ T8159] bridge0: port 3(gretap0) entered disabled state [ 135.179240][ T8159] gretap0: entered allmulticast mode [ 135.196301][ T8178] netlink: 'wÞ£ÿ': attribute type 10 has an invalid length. [ 135.200477][ T8159] gretap0: entered promiscuous mode [ 135.225292][ T8159] bridge0: port 3(gretap0) entered blocking state [ 135.231857][ T8159] bridge0: port 3(gretap0) entered forwarding state [ 135.346007][ T8182] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1433'. [ 135.436819][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.576325][ T8197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1440'. [ 135.585379][ T8197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1440'. [ 135.591637][ T8205] loop3: detected capacity change from 0 to 512 [ 135.622192][ T8205] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.651092][ T8210] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1443'. [ 135.651726][ T6634] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.661078][ T8205] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.990369][ T8222] siw: device registration error -23 [ 136.003533][ T8222] loop5: detected capacity change from 0 to 512 [ 136.020271][ T8222] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.067341][ T8222] ext4 filesystem being mounted at /240/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 136.160318][ T29] kauditd_printk_skb: 655 callbacks suppressed [ 136.160344][ T29] audit: type=1326 audit(1764133670.817:11160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8204 comm="syz.3.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faa888b65e7 code=0x7ffc0000 [ 136.190243][ T29] audit: type=1326 audit(1764133670.817:11161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8204 comm="syz.3.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faa8885b829 code=0x7ffc0000 [ 136.213742][ T29] audit: type=1326 audit(1764133670.817:11162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8204 comm="syz.3.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7faa888bf749 code=0x7ffc0000 [ 136.237308][ T29] audit: type=1326 audit(1764133670.827:11163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8204 comm="syz.3.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faa888b65e7 code=0x7ffc0000 [ 136.260872][ T29] audit: type=1326 audit(1764133670.827:11164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8204 comm="syz.3.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faa8885b829 code=0x7ffc0000 [ 136.284485][ T29] audit: type=1326 audit(1764133670.827:11165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8204 comm="syz.3.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7faa888bf749 code=0x7ffc0000 [ 136.308454][ T29] audit: type=1326 audit(1764133670.847:11166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8204 comm="syz.3.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faa888b65e7 code=0x7ffc0000 [ 136.332022][ T29] audit: type=1326 audit(1764133670.847:11167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8204 comm="syz.3.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faa8885b829 code=0x7ffc0000 [ 136.355511][ T29] audit: type=1326 audit(1764133670.847:11168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8204 comm="syz.3.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7faa888bf749 code=0x7ffc0000 [ 136.379097][ T29] audit: type=1326 audit(1764133670.847:11169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8204 comm="syz.3.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faa888b65e7 code=0x7ffc0000 [ 136.689119][ T8253] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 136.735989][ T8256] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1460'. [ 136.767123][ T8256] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8256 comm=syz.4.1460 [ 136.768545][ T8258] loop6: detected capacity change from 0 to 128 [ 136.887650][ T4447] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.924789][ T8270] wg1 speed is unknown, defaulting to 1000 [ 136.967082][ T8276] binfmt_misc: register: failed to install interpreter file ./file0 [ 137.068346][ T8280] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 137.104941][ T8280] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 137.407021][ T8305] wg1 speed is unknown, defaulting to 1000 [ 137.437914][ T8305] loop6: detected capacity change from 0 to 164 [ 137.449140][ T8305] Unable to read rock-ridge attributes [ 137.467985][ T8304] siw: device registration error -23 [ 137.502844][ T8304] loop3: detected capacity change from 0 to 512 [ 137.537756][ T8304] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.574597][ T8304] ext4 filesystem being mounted at /290/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.736403][ T8310] loop2: detected capacity change from 0 to 512 [ 137.786351][ T8310] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.812220][ T8310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.828255][ T8317] binfmt_misc: register: failed to install interpreter file ./file0 [ 137.894565][ T8319] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1482'. [ 138.074600][ T8328] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1485'. [ 138.204040][ T10] hid-generic 0000:0180:2000.0003: unknown main item tag 0x0 [ 138.211566][ T10] hid-generic 0000:0180:2000.0003: unknown main item tag 0x0 [ 138.219043][ T10] hid-generic 0000:0180:2000.0003: unknown main item tag 0x0 [ 138.226700][ T10] hid-generic 0000:0180:2000.0003: unknown main item tag 0x0 [ 138.234261][ T10] hid-generic 0000:0180:2000.0003: unknown main item tag 0x0 [ 138.241883][ T10] hid-generic 0000:0180:2000.0003: unknown main item tag 0x0 [ 138.249437][ T10] hid-generic 0000:0180:2000.0003: unknown main item tag 0x0 [ 138.257236][ T10] hid-generic 0000:0180:2000.0003: unknown main item tag 0x0 [ 138.257648][ T8332] loop4: detected capacity change from 0 to 128 [ 138.264820][ T10] hid-generic 0000:0180:2000.0003: unknown main item tag 0x0 [ 138.264850][ T10] hid-generic 0000:0180:2000.0003: unknown main item tag 0x0 [ 138.296803][ T8332] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 138.309625][ T10] hid-generic 0000:0180:2000.0003: hidraw0: HID v6.80 Device [sy] on syz0 [ 138.369395][ T8332] ext4 filesystem being mounted at /322/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 138.402977][ T8339] fido_id[8339]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 138.516716][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.545220][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.620523][ T8356] loop3: detected capacity change from 0 to 512 [ 138.738620][ T8356] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.784739][ T8361] siw: device registration error -23 [ 138.807406][ T8356] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.291244][ T8381] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 139.297814][ T8381] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 139.305431][ T8381] vhci_hcd vhci_hcd.0: Device attached [ 139.314091][ T8384] vhci_hcd: connection closed [ 139.314258][ T311] vhci_hcd: stop threads [ 139.324123][ T311] vhci_hcd: release socket [ 139.328603][ T311] vhci_hcd: disconnect device [ 139.383078][ T8390] 9pnet: Could not find request transport: r®ˆ¿ýÑ9ÎÛîDO|˜áù+dF+KG íÎÒ^ 8ûª4Œmuª@éÍ®ì¹0› [ 139.444401][ T8396] 9pnet_fd: Insufficient options for proto=fd [ 139.538235][ T8405] loop6: detected capacity change from 0 to 512 [ 139.545511][ T8405] EXT4-fs: Ignoring removed i_version option [ 139.553435][ T8405] EXT4-fs: Ignoring removed bh option [ 139.560763][ T8405] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 139.581632][ T8405] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.614969][ T8405] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 139.628541][ T8413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1515'. [ 139.639928][ T6634] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.667739][ T8413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1515'. [ 139.697281][ T8420] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1515'. [ 139.730314][ T8413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1515'. [ 139.750470][ T8420] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1515'. [ 139.778471][ T8420] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1515'. [ 139.814193][ T3409] hid-generic 0000:0100:0006.0004: hidraw0: HID v0.28 Device [syz1] on [ 140.089527][ T8455] netlink: 'syz.4.1526': attribute type 10 has an invalid length. [ 140.102455][ T8455] team0 (unregistering): Port device team_slave_0 removed [ 140.112047][ T8455] team0 (unregistering): Port device team_slave_1 removed [ 140.253619][ T8461] loop4: detected capacity change from 0 to 256 [ 140.261606][ T8461] msdos: Unknown parameter '' [ 140.263083][ T8459] wg1 speed is unknown, defaulting to 1000 [ 140.289639][ T8462] 9pnet_fd: Insufficient options for proto=fd [ 140.552780][ T8479] loop2: detected capacity change from 0 to 1024 [ 140.561037][ T8479] EXT4-fs: Ignoring removed orlov option [ 140.569167][ T8479] ext2: Unknown parameter 'fsname' [ 140.611861][ T8482] SELinux: failed to load policy [ 140.841185][ T8498] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1535'. [ 141.324473][ T29] kauditd_printk_skb: 724 callbacks suppressed [ 141.324487][ T29] audit: type=1326 audit(1764133675.977:11894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8497 comm="syz.5.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561f26f749 code=0x7ffc0000 [ 141.354416][ T29] audit: type=1326 audit(1764133675.977:11895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8497 comm="syz.5.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561f26f749 code=0x7ffc0000 [ 141.378129][ T29] audit: type=1326 audit(1764133675.977:11896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8497 comm="syz.5.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f561f26f749 code=0x7ffc0000 [ 141.402037][ T8498] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1535'. [ 141.487967][ T29] audit: type=1326 audit(1764133676.107:11897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8505 comm="syz.6.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1d2df749 code=0x7ffc0000 [ 141.511890][ T29] audit: type=1326 audit(1764133676.107:11898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8505 comm="syz.6.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1d2df749 code=0x7ffc0000 [ 141.535515][ T29] audit: type=1326 audit(1764133676.107:11899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8505 comm="syz.6.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1d2df749 code=0x7ffc0000 [ 141.559072][ T29] audit: type=1326 audit(1764133676.107:11900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8505 comm="syz.6.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1d2df749 code=0x7ffc0000 [ 141.582763][ T29] audit: type=1326 audit(1764133676.107:11901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8505 comm="syz.6.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f4f1d2df749 code=0x7ffc0000 [ 141.606845][ T29] audit: type=1326 audit(1764133676.107:11902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8505 comm="syz.6.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1d2df749 code=0x7ffc0000 [ 141.630425][ T29] audit: type=1326 audit(1764133676.107:11903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8505 comm="syz.6.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1d2df749 code=0x7ffc0000 [ 141.733376][ T8506] loop6: detected capacity change from 0 to 8192 [ 141.768441][ T8544] netlink: 'syz.4.1539': attribute type 10 has an invalid length. [ 141.867988][ T8548] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1541'. [ 141.885731][ T8548] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1541'. [ 141.898599][ T8546] loop2: detected capacity change from 0 to 4096 [ 142.015961][ T8546] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.029370][ T8552] 9pnet_fd: Insufficient options for proto=fd [ 142.065552][ T8559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.073094][ T8559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.117446][ T8559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.124899][ T8559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.143109][ T8563] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 142.181634][ T8559] bridge0: port 3(batadv0) entered disabled state [ 142.203881][ T8559] bridge0: port 3(batadv0) entered disabled state [ 142.420888][ T8572] siw: device registration error -23 [ 142.870016][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.998408][ T8583] netlink: 'syz.2.1551': attribute type 10 has an invalid length. [ 143.023482][ T8583] team0 (unregistering): left promiscuous mode [ 143.029823][ T8583] team_slave_0: left promiscuous mode [ 143.035409][ T8583] team_slave_1: left promiscuous mode [ 143.035475][ T8584] loop6: detected capacity change from 0 to 1024 [ 143.057419][ T8584] EXT4-fs: Ignoring removed orlov option [ 143.080491][ T8583] team0 (unregistering): Port device team_slave_0 removed [ 143.088893][ T8584] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 143.103157][ T8583] team0 (unregistering): Port device team_slave_1 removed [ 143.104788][ T8584] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.201590][ T8595] loop3: detected capacity change from 0 to 1024 [ 143.208730][ T8595] ext4: Bad value for 'jqfmt' [ 143.308845][ T8599] EXT4-fs error (device loop6): ext4_iget_extra_inode:5075: inode #12: comm syz.6.1553: corrupted in-inode xattr: bad e_name length [ 143.329389][ T8599] EXT4-fs error (device loop6): ext4_iget_extra_inode:5075: inode #12: comm syz.6.1553: corrupted in-inode xattr: bad e_name length [ 143.505050][ T8607] siw: device registration error -23 [ 143.921241][ T6634] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.017213][ T1028] hid_parser_main: 23 callbacks suppressed [ 144.017235][ T1028] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 144.064958][ T8618] loop3: detected capacity change from 0 to 1024 [ 144.080700][ T1028] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 144.213983][ T8618] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.1566: Failed to acquire dquot type 0 [ 144.221262][ T8622] binfmt_misc: register: failed to install interpreter file ./file0 [ 144.242426][ T8618] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 144.273863][ T8618] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #13: comm syz.3.1566: corrupted inode contents [ 144.286390][ T8618] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #13: comm syz.3.1566: mark_inode_dirty error [ 144.298220][ T8618] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #13: comm syz.3.1566: corrupted inode contents [ 144.310363][ T8629] loop2: detected capacity change from 0 to 512 [ 144.317552][ T8629] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 144.327908][ T8618] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.1566: mark_inode_dirty error [ 144.349320][ T8629] EXT4-fs (loop2): 1 truncate cleaned up [ 144.355202][ T8618] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #13: comm syz.3.1566: corrupted inode contents [ 144.370248][ T8620] loop4: detected capacity change from 0 to 512 [ 144.370250][ T8629] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.392410][ T8618] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.1566: mark_inode_dirty error [ 144.408658][ T8618] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #13: comm syz.3.1566: corrupted inode contents [ 144.424095][ T8618] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 144.433179][ T8618] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #13: comm syz.3.1566: corrupted inode contents [ 144.447246][ T8618] EXT4-fs error (device loop3): ext4_truncate:4637: inode #13: comm syz.3.1566: mark_inode_dirty error [ 144.467977][ T8618] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 144.487505][ T8618] EXT4-fs (loop3): 1 truncate cleaned up [ 144.494087][ T8618] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.497323][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.627213][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.672905][ T8641] siw: device registration error -23 [ 144.681557][ T8641] loop6: detected capacity change from 0 to 512 [ 144.697275][ T8642] siw: device registration error -23 [ 144.730496][ T8642] loop5: detected capacity change from 0 to 512 [ 144.739096][ T8641] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.751756][ T8641] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.819331][ T8650] __nla_validate_parse: 4 callbacks suppressed [ 144.819348][ T8650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1577'. [ 144.864371][ T8642] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.895835][ T8642] ext4 filesystem being mounted at /265/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.957343][ T8657] loop3: detected capacity change from 0 to 1024 [ 144.967082][ T8657] EXT4-fs: Ignoring removed orlov option [ 144.980125][ T8657] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 145.013562][ T8657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.183327][ T8661] program syz.2.1578 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.207742][ T8664] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #12: comm syz.3.1575: corrupted in-inode xattr: bad e_name length [ 145.234494][ T8665] program syz.2.1578 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.359854][ T6634] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.493049][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.841940][ T8686] siw: device registration error -23 [ 146.379994][ T8693] siw: device registration error -23 [ 146.388651][ T8693] loop6: detected capacity change from 0 to 512 [ 146.435259][ T29] kauditd_printk_skb: 643 callbacks suppressed [ 146.435274][ T29] audit: type=1326 audit(1764133681.067:12545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8696 comm="syz.2.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc340bbf749 code=0x7ffc0000 [ 146.465329][ T29] audit: type=1326 audit(1764133681.067:12546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8696 comm="syz.2.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc340bbf749 code=0x7ffc0000 [ 146.488846][ T29] audit: type=1326 audit(1764133681.067:12547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8696 comm="syz.2.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7fc340bbf749 code=0x7ffc0000 [ 146.512547][ T29] audit: type=1326 audit(1764133681.067:12548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8696 comm="syz.2.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc340bbf749 code=0x7ffc0000 [ 146.536074][ T29] audit: type=1326 audit(1764133681.067:12549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8696 comm="syz.2.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc340bbf749 code=0x7ffc0000 [ 146.559766][ T29] audit: type=1326 audit(1764133681.067:12550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8696 comm="syz.2.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc340bbf749 code=0x7ffc0000 [ 146.583311][ T29] audit: type=1326 audit(1764133681.067:12551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8696 comm="syz.2.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc340bbf749 code=0x7ffc0000 [ 146.606998][ T29] audit: type=1326 audit(1764133681.067:12552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8696 comm="syz.2.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc340bbf749 code=0x7ffc0000 [ 146.630550][ T29] audit: type=1326 audit(1764133681.067:12553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8696 comm="syz.2.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc340bbf749 code=0x7ffc0000 [ 146.654189][ T29] audit: type=1326 audit(1764133681.077:12554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8696 comm="syz.2.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc340bbf749 code=0x7ffc0000 [ 146.726645][ T8693] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.739357][ T8693] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 146.752149][ T4447] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.803742][ T8705] smc: net device hsr0 applied user defined pnetid SYZ2 [ 146.835442][ T8705] smc: net device hsr0 erased user defined pnetid SYZ2 [ 146.997319][ T8710] loop5: detected capacity change from 0 to 1024 [ 147.005058][ T6634] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.027001][ T8710] EXT4-fs: Ignoring removed orlov option [ 147.041504][ T8710] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 147.096820][ T8710] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.123162][ T8717] syzkaller0: entered promiscuous mode [ 147.129561][ T8717] syzkaller0: entered allmulticast mode [ 147.161514][ T8716] loop3: detected capacity change from 0 to 4096 [ 147.170414][ T8716] EXT4-fs: Ignoring removed mblk_io_submit option [ 147.179830][ T8716] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 147.190300][ T8713] loop6: detected capacity change from 0 to 8192 [ 147.218876][ T8722] xt_CT: You must specify a L4 protocol and not use inversions on it [ 147.252592][ T8716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.275650][ T8716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.327792][ T8726] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #12: comm syz.5.1594: corrupted in-inode xattr: bad e_name length [ 147.341589][ T8713] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1596'. [ 147.366671][ T8728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1601'. [ 147.471183][ T8735] 9pnet_fd: Insufficient options for proto=fd [ 147.516570][ T8737] loop6: detected capacity change from 0 to 256 [ 147.530977][ T8737] hub 9-0:1.0: USB hub found [ 147.537785][ T8737] hub 9-0:1.0: 8 ports detected [ 147.554210][ T8737] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1604'. [ 147.563345][ T8737] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1604'. [ 147.604888][ T8741] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 147.616240][ T4447] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.724572][ T8746] binfmt_misc: register: failed to install interpreter file ./file0 [ 147.760305][ T8740] wg1 speed is unknown, defaulting to 1000 [ 147.833219][ T8752] usb usb8: usbfs: process 8752 (syz.5.1609) did not claim interface 0 before use [ 148.026187][ T8773] loop5: detected capacity change from 0 to 1024 [ 148.033490][ T8773] EXT4-fs: Ignoring removed nomblk_io_submit option [ 148.040252][ T8773] EXT4-fs: Ignoring removed nomblk_io_submit option [ 148.066843][ T8773] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.085793][ T8773] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1615'. [ 148.154786][ T8777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1616'. [ 148.208716][ T8778] loop2: detected capacity change from 0 to 512 [ 148.229577][ T8780] loop4: detected capacity change from 0 to 1024 [ 148.236792][ T8780] EXT4-fs: Ignoring removed orlov option [ 148.245058][ T8778] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.258104][ T8778] ext4 filesystem being mounted at /290/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.261163][ T8780] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 148.277180][ T8777] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.1616: corrupted inode contents [ 148.289434][ T8777] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #2: comm syz.2.1616: mark_inode_dirty error [ 148.290860][ T8780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.303104][ T8773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.314983][ T8777] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.1616: corrupted inode contents [ 148.327385][ T8773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.335180][ T8777] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.1616: mark_inode_dirty error [ 148.390245][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.494657][ T8787] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #12: comm syz.4.1617: corrupted in-inode xattr: bad e_name length [ 148.573187][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.595409][ T8790] binfmt_misc: register: failed to install interpreter file ./file0 [ 148.673465][ T8799] macvlan1: entered promiscuous mode [ 148.680164][ T8799] ipvlan0: entered promiscuous mode [ 148.686003][ T8799] ipvlan0: left promiscuous mode [ 148.691483][ T8799] macvlan1: left promiscuous mode [ 148.950688][ T8810] siw: device registration error -23 [ 148.981107][ T4447] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.107243][ T8815] syzkaller0: entered promiscuous mode [ 149.113096][ T8815] syzkaller0: entered allmulticast mode [ 149.539343][ T8825] wg1 speed is unknown, defaulting to 1000 [ 149.585337][ T8831] @0Ù: renamed from bond_slave_1 [ 149.636053][ T8838] 9pnet_fd: Insufficient options for proto=fd [ 149.892894][ T8850] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1641'. [ 149.902039][ T8850] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1641'. [ 149.918472][ T8850] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1641'. [ 149.927509][ T8850] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1641'. [ 149.956431][ T8850] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1641'. [ 149.965546][ T8850] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1641'. [ 149.990424][ T8856] FAULT_INJECTION: forcing a failure. [ 149.990424][ T8856] name failslab, interval 1, probability 0, space 0, times 0 [ 150.003268][ T8856] CPU: 1 UID: 0 PID: 8856 Comm: syz.3.1642 Not tainted syzkaller #0 PREEMPT(voluntary) [ 150.003298][ T8856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 150.003314][ T8856] Call Trace: [ 150.003322][ T8856] [ 150.003332][ T8856] __dump_stack+0x1d/0x30 [ 150.003381][ T8856] dump_stack_lvl+0xe8/0x140 [ 150.003406][ T8856] dump_stack+0x15/0x1b [ 150.003427][ T8856] should_fail_ex+0x265/0x280 [ 150.003470][ T8856] ? io_manage_buffers_legacy+0x188/0x6c0 [ 150.003506][ T8856] should_failslab+0x8c/0xb0 [ 150.003600][ T8856] __kmalloc_cache_noprof+0x4c/0x4a0 [ 150.003678][ T8856] io_manage_buffers_legacy+0x188/0x6c0 [ 150.003705][ T8856] __io_issue_sqe+0xfe/0x2e0 [ 150.003731][ T8856] ? io_assign_file+0x56/0x200 [ 150.003837][ T8856] io_issue_sqe+0x56/0xa80 [ 150.003919][ T8856] ? io_provide_buffers_prep+0x1c7/0x1f0 [ 150.004014][ T8856] io_submit_sqes+0x675/0x1060 [ 150.004092][ T8856] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 150.004127][ T8856] ? 0xffffffff81000000 [ 150.004139][ T8856] ? __rcu_read_unlock+0x4f/0x70 [ 150.004162][ T8856] ? get_pid_task+0x96/0xd0 [ 150.004182][ T8856] ? proc_fail_nth_write+0x13b/0x160 [ 150.004292][ T8856] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 150.004320][ T8856] ? vfs_write+0x7e8/0x960 [ 150.004355][ T8856] ? __rcu_read_unlock+0x4f/0x70 [ 150.004379][ T8856] ? __fget_files+0x184/0x1c0 [ 150.004456][ T8856] ? fput+0x8f/0xc0 [ 150.004481][ T8856] __x64_sys_io_uring_enter+0x78/0x90 [ 150.004535][ T8856] x64_sys_call+0x2df0/0x3000 [ 150.004605][ T8856] do_syscall_64+0xd2/0x200 [ 150.004624][ T8856] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 150.004675][ T8856] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 150.004706][ T8856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.004725][ T8856] RIP: 0033:0x7faa888bf749 [ 150.004738][ T8856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.004756][ T8856] RSP: 002b:00007faa8731f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 150.004773][ T8856] RAX: ffffffffffffffda RBX: 00007faa88b15fa0 RCX: 00007faa888bf749 [ 150.004784][ T8856] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 150.004795][ T8856] RBP: 00007faa8731f090 R08: 0000000000000000 R09: 0000000000000000 [ 150.004805][ T8856] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 150.004816][ T8856] R13: 00007faa88b16038 R14: 00007faa88b15fa0 R15: 00007ffe47cc9108 [ 150.004865][ T8856] [ 150.436176][ T8876] tipc: Started in network mode [ 150.441178][ T8876] tipc: Node identity 000000000000003a0000000000000001, cluster identity 4711 [ 150.450208][ T8876] tipc: Enabling of bearer rejected, failed to enable media [ 150.463377][ T8878] loop2: detected capacity change from 0 to 512 [ 150.471974][ T8878] EXT4-fs: Ignoring removed i_version option [ 150.478182][ T8878] EXT4-fs: Ignoring removed bh option [ 150.509490][ T8878] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.535905][ T8878] ext4 filesystem being mounted at /296/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 150.628721][ T8890] netlink: 'syz.6.1655': attribute type 13 has an invalid length. [ 150.641815][ T8889] syzkaller0: entered promiscuous mode [ 150.648565][ T8889] syzkaller0: entered allmulticast mode [ 150.708876][ T8887] ip6t_rpfilter: unknown options [ 150.728345][ T8887] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1650'. [ 151.003686][ T8917] sd 0:0:1:0: device reset [ 151.017493][ T8915] usb usb8: usbfs: process 8915 (syz.5.1662) did not claim interface 0 before use [ 152.072295][ T29] kauditd_printk_skb: 1633 callbacks suppressed [ 152.072317][ T29] audit: type=1326 audit(1764133685.847:14028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8901 comm="syz.6.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4f1d2d65e7 code=0x7ffc0000 [ 152.102278][ T29] audit: type=1326 audit(1764133685.887:14187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8901 comm="syz.6.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4f1d27b829 code=0x7ffc0000 [ 152.125762][ T29] audit: type=1326 audit(1764133685.887:14188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8901 comm="syz.6.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4f1d2d65e7 code=0x7ffc0000 [ 152.149600][ T29] audit: type=1326 audit(1764133685.887:14189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8901 comm="syz.6.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4f1d27b829 code=0x7ffc0000 [ 152.173370][ T29] audit: type=1326 audit(1764133685.887:14190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8901 comm="syz.6.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4f1d2d65e7 code=0x7ffc0000 [ 152.196828][ T29] audit: type=1326 audit(1764133685.887:14191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8901 comm="syz.6.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4f1d27b829 code=0x7ffc0000 [ 152.220281][ T29] audit: type=1326 audit(1764133685.887:14192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8901 comm="syz.6.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4f1d2d65e7 code=0x7ffc0000 [ 152.243839][ T29] audit: type=1326 audit(1764133685.887:14193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8901 comm="syz.6.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4f1d27b829 code=0x7ffc0000 [ 152.267511][ T29] audit: type=1326 audit(1764133685.887:14194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8901 comm="syz.6.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4f1d2d65e7 code=0x7ffc0000 [ 152.291119][ T29] audit: type=1326 audit(1764133685.887:14195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8901 comm="syz.6.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4f1d27b829 code=0x7ffc0000 [ 152.293286][ T8923] loop4: detected capacity change from 0 to 2048 [ 152.385474][ T8923] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.537232][ T292] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 152.555227][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.566077][ T8947] tmpfs: Bad value for 'mpol' [ 152.570876][ T292] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 152.583308][ T292] EXT4-fs (loop4): This should not happen!! Data will be lost [ 152.583308][ T292] [ 152.593015][ T292] EXT4-fs (loop4): Total free blocks count 0 [ 152.599033][ T292] EXT4-fs (loop4): Free/Dirty block details [ 152.605112][ T292] EXT4-fs (loop4): free_blocks=2415919504 [ 152.611197][ T292] EXT4-fs (loop4): dirty_blocks=832 [ 152.616488][ T292] EXT4-fs (loop4): Block reservation details [ 152.622482][ T292] EXT4-fs (loop4): i_reserved_data_blocks=63 [ 152.837630][ T292] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 34 with max blocks 2048 with error 28 [ 152.850265][ T8953] syzkaller0: entered promiscuous mode [ 152.856743][ T8953] syzkaller0: entered allmulticast mode [ 152.877833][ T8958] netlink: 'syz.5.1677': attribute type 10 has an invalid length. [ 152.902830][ T8958] team0 (unregistering): Port device team_slave_0 removed [ 152.917831][ T8958] team0 (unregistering): Port device team_slave_1 removed [ 153.108022][ T8974] loop4: detected capacity change from 0 to 1024 [ 153.120765][ T8976] netlink: 'syz.2.1684': attribute type 10 has an invalid length. [ 153.121758][ T8974] EXT4-fs: Ignoring removed orlov option [ 153.146018][ T8974] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 153.163187][ T8974] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.300170][ T8997] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #12: comm syz.4.1682: corrupted in-inode xattr: bad e_name length [ 153.370323][ T9000] loop3: detected capacity change from 0 to 4096 [ 153.387496][ T9000] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.428652][ T9007] netlink: 'syz.2.1688': attribute type 10 has an invalid length. [ 153.505990][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.578050][ T9016] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1690'. [ 153.589561][ T9016] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1690'. [ 153.602707][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.810088][ T9035] netlink: 'syz.6.1696': attribute type 10 has an invalid length. [ 153.831033][ T9035] team0 (unregistering): Port device team_slave_0 removed [ 153.855645][ T9035] team0 (unregistering): Port device team_slave_1 removed [ 153.979850][ T9043] netlink: 'syz.6.1700': attribute type 10 has an invalid length. [ 154.000149][ T9045] loop5: detected capacity change from 0 to 1024 [ 154.009453][ T9041] usb usb8: usbfs: process 9041 (syz.3.1698) did not claim interface 0 before use [ 154.015562][ T9045] EXT4-fs: Ignoring removed orlov option [ 154.025820][ T9045] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 154.036898][ T9045] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.104182][ T9054] bridge0: port 3(vlan0) entered blocking state [ 154.110707][ T9054] bridge0: port 3(vlan0) entered disabled state [ 154.118094][ T9054] vlan0: entered allmulticast mode [ 154.123399][ T9054] bridge0: entered allmulticast mode [ 154.129872][ T9054] vlan0: left allmulticast mode [ 154.134928][ T9054] bridge0: left allmulticast mode [ 154.149335][ T9059] binfmt_misc: register: failed to install interpreter file ./file0 [ 154.177320][ T9060] loop6: detected capacity change from 0 to 512 [ 154.183755][ T9061] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #12: comm syz.5.1701: corrupted in-inode xattr: bad e_name length [ 154.208503][ T9060] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.221556][ T9060] ext4 filesystem being mounted at /138/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.225276][ T9067] netlink: 'syz.3.1708': attribute type 10 has an invalid length. [ 154.257541][ T9067] team0 (unregistering): Port device team_slave_0 removed [ 154.268450][ T9067] team0 (unregistering): Port device team_slave_1 removed [ 154.338255][ T6634] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.417192][ T9076] 9pnet_fd: Insufficient options for proto=fd [ 154.452136][ T4447] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.544560][ T9095] netlink: 'syz.4.1720': attribute type 16 has an invalid length. [ 154.558271][ T9100] netlink: 'syz.4.1720': attribute type 16 has an invalid length. [ 154.569868][ T9097] loop5: detected capacity change from 0 to 512 [ 154.610183][ T9097] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.633883][ T9104] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1724'. [ 154.645244][ T9109] 9pnet_fd: Insufficient options for proto=fd [ 154.652109][ T9097] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:375: inode #2: comm syz.5.1721: No space for directory leaf checksum. Please run e2fsck -D. [ 154.667602][ T9097] EXT4-fs error (device loop5): __ext4_find_entry:1626: inode #2: comm syz.5.1721: checksumming directory block 0 [ 154.717899][ T9097] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:375: inode #2: comm syz.5.1721: No space for directory leaf checksum. Please run e2fsck -D. [ 154.733435][ T9097] EXT4-fs error (device loop5): __ext4_find_entry:1626: inode #2: comm syz.5.1721: checksumming directory block 0 [ 154.752913][ T9102] syzkaller0: entered promiscuous mode [ 154.762092][ T9102] syzkaller0: entered allmulticast mode [ 154.805063][ T9117] loop4: detected capacity change from 0 to 1024 [ 154.815469][ T9117] EXT4-fs: Ignoring removed orlov option [ 154.821546][ T9117] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 154.853814][ T9097] wg1 speed is unknown, defaulting to 1000 [ 154.942935][ T9117] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.974464][ T9134] 9pnet_fd: Insufficient options for proto=fd [ 155.038871][ T9139] loop2: detected capacity change from 0 to 512 [ 155.159653][ T9139] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.206860][ T9142] siw: device registration error -23 [ 155.764763][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.860664][ T9155] loop6: detected capacity change from 0 to 1024 [ 155.867481][ T9155] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 155.878529][ T9152] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1737'. [ 155.916367][ T9155] loop6: detected capacity change from 0 to 128 [ 155.923101][ T9155] EXT4-fs: Ignoring removed nobh option [ 155.929041][ T9155] ext4: Unknown parameter 'posixacl' [ 155.937179][ T9155] loop6: detected capacity change from 0 to 256 [ 155.950400][ T9169] binfmt_misc: register: failed to install interpreter file ./file0 [ 155.956078][ T9167] netlink: 'syz.3.1744': attribute type 1 has an invalid length. [ 155.977135][ T9152] loop4: detected capacity change from 0 to 2048 [ 155.988605][ T9152] EXT4-fs: dax option not supported [ 156.008726][ T9152] option changes via remount are deprecated (pid=9151 comm=syz.4.1737) [ 156.023132][ T9174] usb usb8: usbfs: process 9174 (syz.6.1745) did not claim interface 0 before use [ 156.080810][ T9182] binfmt_misc: register: failed to install interpreter file ./file0 [ 156.142213][ T9186] serio: Serial port ptm0 [ 156.148601][ T9180] syzkaller0: entered promiscuous mode [ 156.154614][ T9180] syzkaller0: entered allmulticast mode [ 156.320125][ T9195] FAULT_INJECTION: forcing a failure. [ 156.320125][ T9195] name failslab, interval 1, probability 0, space 0, times 0 [ 156.332887][ T9195] CPU: 0 UID: 0 PID: 9195 Comm: syz.4.1753 Not tainted syzkaller #0 PREEMPT(voluntary) [ 156.332941][ T9195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 156.332953][ T9195] Call Trace: [ 156.332961][ T9195] [ 156.332969][ T9195] __dump_stack+0x1d/0x30 [ 156.332991][ T9195] dump_stack_lvl+0xe8/0x140 [ 156.333070][ T9195] dump_stack+0x15/0x1b [ 156.333093][ T9195] should_fail_ex+0x265/0x280 [ 156.333175][ T9195] should_failslab+0x8c/0xb0 [ 156.333212][ T9195] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 156.333308][ T9195] ? kvasprintf_const+0xb3/0x130 [ 156.333341][ T9195] kvasprintf+0x8a/0x110 [ 156.333368][ T9195] ? format_decode+0xaf/0x580 [ 156.333399][ T9195] kvasprintf_const+0xb3/0x130 [ 156.333438][ T9195] kobject_set_name_vargs+0x44/0xe0 [ 156.333500][ T9195] dev_set_name+0x83/0xb0 [ 156.333542][ T9195] ? hrtimer_setup+0x31/0x100 [ 156.333572][ T9195] ? swiotlb_dev_init+0x19/0x30 [ 156.333714][ T9195] ? swiotlb_dev_init+0x19/0x30 [ 156.333735][ T9195] ? device_initialize+0x1fe/0x210 [ 156.333754][ T9195] __serio_register_port+0xfc/0x1d0 [ 156.333813][ T9195] serport_ldisc_read+0x1d6/0x300 [ 156.333878][ T9195] ? terminate_walk+0x27f/0x2a0 [ 156.333910][ T9195] tty_read+0x154/0x4a0 [ 156.333935][ T9195] ? __rcu_read_unlock+0x4f/0x70 [ 156.333979][ T9195] ? __import_iovec+0x428/0x540 [ 156.334005][ T9195] do_iter_readv_writev+0x4a1/0x540 [ 156.334036][ T9195] vfs_readv+0x1ea/0x690 [ 156.334106][ T9195] do_readv+0xe7/0x210 [ 156.334147][ T9195] __x64_sys_readv+0x45/0x50 [ 156.334182][ T9195] x64_sys_call+0x29fc/0x3000 [ 156.334270][ T9195] do_syscall_64+0xd2/0x200 [ 156.334294][ T9195] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 156.334370][ T9195] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 156.334527][ T9195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.334610][ T9195] RIP: 0033:0x7f8cd7bbf749 [ 156.334626][ T9195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.334646][ T9195] RSP: 002b:00007f8cd661f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 156.334669][ T9195] RAX: ffffffffffffffda RBX: 00007f8cd7e15fa0 RCX: 00007f8cd7bbf749 [ 156.334740][ T9195] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000005 [ 156.334753][ T9195] RBP: 00007f8cd661f090 R08: 0000000000000000 R09: 0000000000000000 [ 156.334765][ T9195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.334776][ T9195] R13: 00007f8cd7e16038 R14: 00007f8cd7e15fa0 R15: 00007ffe443412e8 [ 156.334799][ T9195] [ 156.335064][ T9195] serio: Serial port ptm1 [ 156.593662][ T3424] serio (null): device_add() failed for ptm1/serio0 (Serial port), error: -22 [ 156.662193][ T9203] 9pnet_fd: Insufficient options for proto=fd [ 156.680962][ T9207] serio: Serial port ptm0 [ 156.713478][ T9211] loop5: detected capacity change from 0 to 512 [ 156.722823][ T9211] EXT4-fs warning (device loop5): ext4_xattr_inode_get:546: inode #11: comm syz.5.1758: ea_inode file size=0 entry size=6 [ 156.735900][ T9211] ------------[ cut here ]------------ [ 156.741379][ T9211] EA inode 11 i_nlink=2 [ 156.741698][ T9211] WARNING: CPU: 0 PID: 9211 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x36a/0x380 [ 156.756182][ T9211] Modules linked in: [ 156.760099][ T9211] CPU: 0 UID: 0 PID: 9211 Comm: syz.5.1758 Not tainted syzkaller #0 PREEMPT(voluntary) [ 156.769928][ T9211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 156.780042][ T9211] RIP: 0010:ext4_xattr_inode_update_ref+0x36a/0x380 [ 156.786688][ T9211] Code: 90 49 8d 7e 40 e8 06 f8 b8 ff 4d 8b 6e 40 4c 89 e7 e8 1a f3 b8 ff 41 8b 56 48 48 c7 c7 a5 d6 55 86 4c 89 ee e8 07 f4 67 ff 90 <0f> 0b 90 90 e9 ff fe ff ff e8 88 f2 b5 03 0f 1f 84 00 00 00 00 00 [ 156.806377][ T9211] RSP: 0018:ffffc90005b53778 EFLAGS: 00010246 [ 156.812482][ T9211] RAX: a5601e71a276b800 RBX: ffff88810049ed18 RCX: ffff8881193a0000 [ 156.820518][ T9211] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 156.828554][ T9211] RBP: 0000000000000002 R08: 0001c90005b535f7 R09: 0000000000000000 [ 156.836607][ T9211] R10: 00000000ffffffff R11: 0000000000000000 R12: ffff88810049ecc8 [ 156.844624][ T9211] R13: 000000000000000b R14: ffff88810049ec80 R15: 0000000000000001 [ 156.852905][ T9211] FS: 00007f561dccf6c0(0000) GS:ffff8882aee11000(0000) knlGS:0000000000000000 [ 156.861958][ T9211] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 156.868630][ T9211] CR2: 00007f561f252a60 CR3: 000000013b198000 CR4: 00000000003506f0 [ 156.876854][ T9211] DR0: 0000000000007fff DR1: 0000000000000000 DR2: 0000000000000000 [ 156.884921][ T9211] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 156.892972][ T9211] Call Trace: [ 156.896304][ T9211] [ 156.899268][ T9211] ext4_xattr_inode_dec_ref_all+0x579/0x830 [ 156.905339][ T9211] ? errseq_check+0x2c/0x50 [ 156.909978][ T9211] ext4_xattr_delete_inode+0x6b7/0x790 [ 156.915531][ T9211] ? ext4_truncate+0x92e/0xae0 [ 156.920418][ T9211] ext4_evict_inode+0xa6a/0xd90 [ 156.925359][ T9211] ? __pfx_ext4_evict_inode+0x10/0x10 [ 156.930840][ T9211] evict+0x2e3/0x550 [ 156.934828][ T9211] ? __dquot_initialize+0x146/0x7c0 [ 156.940135][ T9211] iput+0x4ed/0x650 [ 156.944080][ T9211] ext4_process_orphan+0x1a9/0x1c0 [ 156.949280][ T9211] ext4_orphan_cleanup+0x6a8/0xa00 [ 156.954496][ T9211] ext4_fill_super+0x3483/0x3810 [ 156.959541][ T9211] ? snprintf+0x86/0xb0 [ 156.963822][ T9211] ? set_blocksize+0x1a8/0x310 [ 156.968663][ T9211] ? sb_set_blocksize+0xe3/0x100 [ 156.973684][ T9211] ? setup_bdev_super+0x30e/0x370 [ 156.978804][ T9211] ? __pfx_ext4_fill_super+0x10/0x10 [ 156.984122][ T9211] get_tree_bdev_flags+0x291/0x300 [ 156.989482][ T9211] ? __pfx_ext4_fill_super+0x10/0x10 [ 156.994886][ T9211] get_tree_bdev+0x1f/0x30 [ 156.999406][ T9211] ext4_get_tree+0x1c/0x30 [ 157.003854][ T9211] vfs_get_tree+0x57/0x1d0 [ 157.008347][ T9211] do_new_mount+0x24d/0x660 [ 157.013275][ T9211] path_mount+0x4a5/0xb70 [ 157.017735][ T9211] ? user_path_at+0x109/0x130 [ 157.022905][ T9211] __se_sys_mount+0x28c/0x2e0 [ 157.027835][ T9211] __x64_sys_mount+0x67/0x80 [ 157.032582][ T9211] x64_sys_call+0x2b51/0x3000 [ 157.037528][ T9211] do_syscall_64+0xd2/0x200 [ 157.042415][ T9211] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 157.048727][ T9211] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 157.054556][ T9211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.060649][ T9211] RIP: 0033:0x7f561f270eea [ 157.065079][ T9211] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.084754][ T9211] RSP: 002b:00007f561dccee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 157.093197][ T9211] RAX: ffffffffffffffda RBX: 00007f561dcceef0 RCX: 00007f561f270eea [ 157.101273][ T9211] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f561dcceeb0 [ 157.109280][ T9211] RBP: 0000200000000180 R08: 00007f561dcceef0 R09: 0000000000800700 [ 157.117284][ T9211] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 157.125521][ T9211] R13: 00007f561dcceeb0 R14: 0000000000000473 R15: 0000200000000680 [ 157.133547][ T9211] [ 157.136668][ T9211] ---[ end trace 0000000000000000 ]--- [ 157.147460][ T9211] EXT4-fs (loop5): 1 orphan inode deleted [ 157.165471][ T29] kauditd_printk_skb: 1782 callbacks suppressed [ 157.165508][ T29] audit: type=1326 audit(1764133691.807:15978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9210 comm="syz.5.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f561f26df90 code=0x7ffc0000 [ 157.195449][ T29] audit: type=1326 audit(1764133691.807:15979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9210 comm="syz.5.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f561f26df90 code=0x7ffc0000 [ 157.219030][ T29] audit: type=1326 audit(1764133691.807:15980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9210 comm="syz.5.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561f26f749 code=0x7ffc0000 [ 157.242705][ T29] audit: type=1326 audit(1764133691.807:15981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9210 comm="syz.5.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561f26f749 code=0x7ffc0000 [ 157.242746][ T29] audit: type=1326 audit(1764133691.807:15982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9210 comm="syz.5.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561f26f749 code=0x7ffc0000 [ 157.242866][ T29] audit: type=1326 audit(1764133691.807:15983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9210 comm="syz.5.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561f26f749 code=0x7ffc0000 [ 157.242901][ T29] audit: type=1326 audit(1764133691.807:15984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9210 comm="syz.5.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f561f26f783 code=0x7ffc0000 [ 157.243014][ T29] audit: type=1326 audit(1764133691.807:15985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9210 comm="syz.5.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f561f26f807 code=0x7ffc0000 [ 157.243048][ T29] audit: type=1326 audit(1764133691.807:15986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9210 comm="syz.5.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f561f226bdd code=0x7ffc0000 [ 157.243100][ T29] audit: type=1326 audit(1764133691.807:15987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9210 comm="syz.5.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f561f2a3e89 code=0x7ffc0000 [ 157.366525][ T9230] usb usb8: usbfs: process 9230 (syz.4.1764) did not claim interface 0 before use [ 157.450592][ T9234] loop4: detected capacity change from 0 to 2048 [ 157.494978][ T9234] ext4 filesystem being mounted at /372/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.522154][ T9240] 9pnet_fd: Insufficient options for proto=fd [ 157.540166][ T9244] netlink: 'syz.5.1770': attribute type 10 has an invalid length. [ 157.636794][ T9254] netlink: 'syz.4.1774': attribute type 10 has an invalid length. [ 157.669768][ T9257] loop5: detected capacity change from 0 to 512 [ 157.680631][ T9257] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 157.694061][ T9257] EXT4-fs (loop5): 1 truncate cleaned up [ 157.738514][ T9265] binfmt_misc: register: failed to install interpreter file ./file0 [ 157.810998][ T9269] loop2: detected capacity change from 0 to 512 [ 157.902619][ T9275] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1781'. [ 157.915157][ T9280] netlink: 'syz.3.1782': attribute type 10 has an invalid length. [ 158.092604][ T9293] x_tables: unsorted underflow at hook 3 [ 158.120700][ T9293] loop5: detected capacity change from 0 to 128 [ 158.524866][ T9303] binfmt_misc: register: failed to install interpreter file ./file0 [ 158.614653][ T9315] netlink: 'syz.6.1795': attribute type 10 has an invalid length. [ 158.749576][ T9322] loop4: detected capacity change from 0 to 128 [ 158.770539][ T9322] ext4 filesystem being mounted at /377/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 158.841803][ T9319] syzkaller0: entered promiscuous mode [ 158.848465][ T9319] syzkaller0: entered allmulticast mode [ 158.890638][ T9326] usb usb8: usbfs: process 9326 (syz.2.1799) did not claim interface 0 before use [ 158.911879][ T9328] loop5: detected capacity change from 0 to 128 [ 158.955461][ T9336] binfmt_misc: register: failed to install interpreter file ./file0 [ 158.989598][ T9341] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1805'. [ 159.006329][ T9343] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9343 comm=syz.3.1806 [ 159.019833][ T9343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1806'. [ 159.048479][ T9349] sg_write: data in/out 926299152/2147479510 bytes for SCSI command 0x0-- guessing data in; [ 159.048479][ T9349] program syz.6.1804 not setting count and/or reply_len properly [ 159.118129][ T9352] batadv_slave_1: entered promiscuous mode [ 159.127452][ T9351] batadv_slave_1: left promiscuous mode [ 159.173501][ T9357] IPv6: Can't replace route, no match found [ 159.253723][ T9353] siw: device registration error -23 [ 159.426935][ T9362] siw: device registration error -23 [ 159.438766][ T9362] loop3: detected capacity change from 0 to 512 [ 159.508751][ T9362] ext4 filesystem being mounted at /364/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 159.832264][ T9367] xt_CT: You must specify a L4 protocol and not use inversions on it [ 160.204523][ T9369] syzkaller0: entered promiscuous mode [ 160.210397][ T9369] syzkaller0: entered allmulticast mode [ 160.234494][ T9379] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9379 comm=syz.3.1818 [ 160.257944][ T9379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1818'. [ 160.399468][ T9390] tipc: Enabling of bearer rejected, failed to enable media [ 160.435425][ T9393] loop3: detected capacity change from 0 to 1024 [ 160.442115][ T9393] EXT4-fs: Ignoring removed orlov option [ 160.448330][ T9393] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 160.635100][ T9399] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #12: comm syz.3.1823: corrupted in-inode xattr: bad e_name length [ 161.218896][ T9410] 9pnet_fd: Insufficient options for proto=fd [ 161.289508][ T9414] loop4: detected capacity change from 0 to 2048 [ 161.337244][ T9420] SELinux: policydb version -1411311999 does not match my version range 15-35 [ 161.346784][ T9420] SELinux: failed to load policy [ 161.357107][ T9414] loop4: p1 p4 [ 161.367057][ T9414] loop4: p4 size 8388608 extends beyond EOD, truncated [ 161.376702][ T9423] loop6: detected capacity change from 0 to 128 [ 161.389509][ T9423] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fff0000) [ 161.396441][ T9414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.397561][ T9423] FAT-fs (loop6): Filesystem has been set read-only [ 161.420275][ T9414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.433545][ T9414] binfmt_misc: register: failed to install interpreter file ./file0 [ 161.471254][ T9431] netlink: 'syz.6.1836': attribute type 10 has an invalid length. [ 161.552311][ T9433] netlink: 'syz.6.1837': attribute type 10 has an invalid length. [ 161.619607][ T9435] netlink: 'syz.4.1829': attribute type 21 has an invalid length. [ 161.627749][ T9435] netlink: 'syz.4.1829': attribute type 1 has an invalid length. [ 161.635705][ T9435] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1829'. [ 161.654671][ T9437] loop5: detected capacity change from 0 to 1024 [ 161.661475][ T9437] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 161.699988][ T9437] loop5: detected capacity change from 0 to 128 [ 161.706760][ T9437] EXT4-fs: Ignoring removed nobh option [ 161.712412][ T9437] ext4: Unknown parameter 'posixacl' [ 161.722673][ T9437] loop5: detected capacity change from 0 to 256 [ 162.445516][ T29] kauditd_printk_skb: 434 callbacks suppressed [ 162.445535][ T29] audit: type=1326 audit(1764133697.107:16422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9464 comm="syz.5.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561f26f749 code=0x7ffc0000 [ 162.475682][ T29] audit: type=1326 audit(1764133697.107:16423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9464 comm="syz.5.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561f26f749 code=0x7ffc0000 [ 162.475697][ T9466] loop5: detected capacity change from 0 to 164 [ 162.501147][ T9466] rock: directory entry would overflow storage [ 162.505739][ T29] audit: type=1326 audit(1764133697.107:16424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9464 comm="syz.5.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f561f26f749 code=0x7ffc0000 [ 162.511921][ T9466] rock: sig=0x66, size=4, remaining=3 [ 162.531309][ T9466] rock: directory entry would overflow storage [ 162.535425][ T29] audit: type=1326 audit(1764133697.107:16425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9464 comm="syz.5.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561f26f749 code=0x7ffc0000 [ 162.535503][ T29] audit: type=1326 audit(1764133697.107:16426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9464 comm="syz.5.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f561f26f749 code=0x7ffc0000 [ 162.540869][ T9466] rock: sig=0x66, size=4, remaining=3 [ 162.542985][ T9466] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 162.547107][ T29] audit: type=1326 audit(1764133697.107:16427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9464 comm="syz.5.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561f26f749 code=0x7ffc0000 [ 162.630820][ T29] audit: type=1326 audit(1764133697.107:16428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9464 comm="syz.5.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561f26f749 code=0x7ffc0000 [ 162.654469][ T29] audit: type=1326 audit(1764133697.107:16429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9464 comm="syz.5.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f561f26f749 code=0x7ffc0000 [ 162.678075][ T29] audit: type=1326 audit(1764133697.107:16430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9464 comm="syz.5.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561f26f749 code=0x7ffc0000 [ 162.701747][ T29] audit: type=1326 audit(1764133697.107:16431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9464 comm="syz.5.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561f26f749 code=0x7ffc0000 [ 162.803500][ T9477] binfmt_misc: register: failed to install interpreter file ./file0 [ 163.031557][ T9483] usb usb8: usbfs: process 9483 (syz.3.1854) did not claim interface 0 before use [ 163.059627][ T9485] loop3: detected capacity change from 0 to 512 [ 163.077095][ T9485] EXT4-fs mount: 16 callbacks suppressed [ 163.077110][ T9485] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.095752][ T9485] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.454636][ T9496] wg1 speed is unknown, defaulting to 1000 [ 163.514372][ T9498] wg1 speed is unknown, defaulting to 1000 [ 164.922965][ T9505] bridge0: port 3(vlan1) entered blocking state [ 164.929380][ T9505] bridge0: port 3(vlan1) entered disabled state [ 164.998157][ T9513] FAULT_INJECTION: forcing a failure. [ 164.998157][ T9513] name failslab, interval 1, probability 0, space 0, times 0 [ 165.010935][ T9513] CPU: 0 UID: 0 PID: 9513 Comm: syz.6.1863 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 165.010968][ T9513] Tainted: [W]=WARN [ 165.010974][ T9513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 165.011068][ T9513] Call Trace: [ 165.011076][ T9513] [ 165.011086][ T9513] __dump_stack+0x1d/0x30 [ 165.011116][ T9513] dump_stack_lvl+0xe8/0x140 [ 165.011142][ T9513] dump_stack+0x15/0x1b [ 165.011164][ T9513] should_fail_ex+0x265/0x280 [ 165.011305][ T9513] should_failslab+0x8c/0xb0 [ 165.011342][ T9513] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 165.011431][ T9513] ? __d_alloc+0x3d/0x340 [ 165.011473][ T9513] __d_alloc+0x3d/0x340 [ 165.011506][ T9513] ? mpol_shared_policy_init+0xbd/0x4c0 [ 165.011534][ T9513] d_alloc_pseudo+0x1e/0x80 [ 165.011607][ T9513] alloc_file_pseudo+0x71/0x160 [ 165.011697][ T9513] __shmem_file_setup+0x1de/0x210 [ 165.011737][ T9513] shmem_file_setup+0x3b/0x50 [ 165.011760][ T9513] __se_sys_memfd_create+0x2c3/0x590 [ 165.011801][ T9513] __x64_sys_memfd_create+0x31/0x40 [ 165.011833][ T9513] x64_sys_call+0x2ac2/0x3000 [ 165.011872][ T9513] do_syscall_64+0xd2/0x200 [ 165.011928][ T9513] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 165.011964][ T9513] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 165.012002][ T9513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.012065][ T9513] RIP: 0033:0x7f4f1d2df749 [ 165.012084][ T9513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.012168][ T9513] RSP: 002b:00007f4f1bd3ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 165.012192][ T9513] RAX: ffffffffffffffda RBX: 000000000000046f RCX: 00007f4f1d2df749 [ 165.012208][ T9513] RDX: 00007f4f1bd3eef0 RSI: 0000000000000000 RDI: 00007f4f1d364960 [ 165.012223][ T9513] RBP: 0000200000001040 R08: 00007f4f1bd3ebb7 R09: 00007f4f1bd3ee40 [ 165.012259][ T9513] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 165.012273][ T9513] R13: 00007f4f1bd3eef0 R14: 00007f4f1bd3eeb0 R15: 0000200000000200 [ 165.012291][ T9513] [ 165.228249][ T9505] vlan1: entered allmulticast mode [ 165.233474][ T9505] bridge0: entered allmulticast mode [ 165.265939][ T9505] vlan1: left allmulticast mode [ 165.271377][ T9505] bridge0: left allmulticast mode [ 165.401781][ T9526] loop4: detected capacity change from 0 to 512 [ 165.409110][ T9526] EXT4-fs: Ignoring removed oldalloc option [ 165.417590][ T9526] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 165.524133][ T9531] siw: device registration error -23 [ 165.536534][ T9531] loop6: detected capacity change from 0 to 512 [ 165.571534][ T9535] rdma_op ffff88813b421d80 conn xmit_rdma 0000000000000000 [ 165.586056][ T9526] EXT4-fs (loop4): too many log groups per flexible block group [ 165.611343][ T9526] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 165.641180][ T9526] EXT4-fs (loop4): mount failed [ 165.728682][ T9545] binfmt_misc: register: failed to install interpreter file ./file0 [ 165.905981][ T9531] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.918619][ T9531] ext4 filesystem being mounted at /180/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 165.953271][ T9551] usb usb8: usbfs: process 9551 (syz.3.1876) did not claim interface 0 before use [ 166.019249][ T9553] usb usb8: usbfs: process 9553 (syz.4.1877) did not claim interface 0 before use [ 166.082401][ T9562] binfmt_misc: register: failed to install interpreter file ./file0 [ 166.107080][ T9564] loop3: detected capacity change from 0 to 1024 [ 166.122387][ T9564] EXT4-fs: Ignoring removed orlov option [ 166.135679][ T9564] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 166.164660][ T9564] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.181703][ T6634] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.216822][ T9573] netlink: 'syz.2.1886': attribute type 10 has an invalid length. [ 166.257719][ T9579] binfmt_misc: register: failed to install interpreter file ./file0 [ 166.458148][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.530568][ T9587] syzkaller0: entered promiscuous mode [ 166.534794][ T9595] loop3: detected capacity change from 0 to 512 [ 166.536757][ T9587] syzkaller0: entered allmulticast mode [ 166.556889][ T9595] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.570606][ T9595] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.670584][ T9601] loop5: detected capacity change from 0 to 128 [ 166.679129][ T9601] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 166.691408][ T9601] ext4 filesystem being mounted at /328/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 166.745911][ T4447] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 166.770511][ T9604] loop5: detected capacity change from 0 to 128 [ 166.920261][ T9606] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1896'. [ 166.929646][ T9606] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1896'. [ 166.940391][ T9606] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1896'. [ 167.063178][ T9619] loop5: detected capacity change from 0 to 1024 [ 167.070425][ T9619] EXT4-fs: Ignoring removed orlov option [ 167.076544][ T9619] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 167.095007][ T9619] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.145380][ T9630] loop4: detected capacity change from 0 to 128 [ 167.169063][ T9632] loop2: detected capacity change from 0 to 512 [ 167.180031][ T9632] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 167.245749][ T9630] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 167.247318][ T9632] EXT4-fs (loop2): 1 truncate cleaned up [ 167.266918][ T9632] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.279281][ T9630] ext4 filesystem being mounted at /394/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 167.322362][ T9636] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #12: comm syz.5.1901: corrupted in-inode xattr: bad e_name length [ 167.359424][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.383025][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.447772][ T9640] loop6: detected capacity change from 0 to 2048 [ 167.486643][ T9640] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.544754][ T9619] ================================================================== [ 167.553012][ T9619] BUG: KCSAN: data-race in vfs_fsync_range / writeback_single_inode [ 167.561065][ T9619] [ 167.563406][ T9619] write to 0xffff8881194ad300 of 4 bytes by task 9634 on cpu 0: [ 167.571158][ T9619] writeback_single_inode+0x150/0x3f0 [ 167.576591][ T9619] sync_inode_metadata+0x5b/0x90 [ 167.581568][ T9619] generic_buffers_fsync_noflush+0xd9/0x120 [ 167.587669][ T9619] ext4_sync_file+0x1ab/0x690 [ 167.592397][ T9619] vfs_fsync_range+0x10d/0x130 [ 167.597277][ T9619] ext4_buffered_write_iter+0x34f/0x3c0 [ 167.602851][ T9619] ext4_file_write_iter+0x387/0xf60 [ 167.608153][ T9619] iter_file_splice_write+0x666/0xa60 [ 167.613554][ T9619] direct_splice_actor+0x156/0x2a0 [ 167.618682][ T9619] splice_direct_to_actor+0x312/0x680 [ 167.624154][ T9619] do_splice_direct+0xda/0x150 [ 167.628932][ T9619] do_sendfile+0x380/0x650 [ 167.633371][ T9619] __x64_sys_sendfile64+0x105/0x150 [ 167.638678][ T9619] x64_sys_call+0x2bb4/0x3000 [ 167.643715][ T9619] do_syscall_64+0xd2/0x200 [ 167.648233][ T9619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.654143][ T9619] [ 167.656474][ T9619] read to 0xffff8881194ad300 of 4 bytes by task 9619 on cpu 1: [ 167.664021][ T9619] vfs_fsync_range+0x9b/0x130 [ 167.668718][ T9619] ext4_buffered_write_iter+0x34f/0x3c0 [ 167.674279][ T9619] ext4_file_write_iter+0x387/0xf60 [ 167.679485][ T9619] iter_file_splice_write+0x666/0xa60 [ 167.684875][ T9619] direct_splice_actor+0x156/0x2a0 [ 167.689998][ T9619] splice_direct_to_actor+0x312/0x680 [ 167.695390][ T9619] do_splice_direct+0xda/0x150 [ 167.700164][ T9619] do_sendfile+0x380/0x650 [ 167.704675][ T9619] __x64_sys_sendfile64+0x105/0x150 [ 167.709907][ T9619] x64_sys_call+0x2bb4/0x3000 [ 167.714594][ T9619] do_syscall_64+0xd2/0x200 [ 167.719112][ T9619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.725035][ T9619] [ 167.727372][ T9619] value changed: 0x00000070 -> 0x00000002 [ 167.733117][ T9619] [ 167.735442][ T9619] Reported by Kernel Concurrency Sanitizer on: [ 167.741622][ T9619] CPU: 1 UID: 0 PID: 9619 Comm: syz.5.1901 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 167.752934][ T9619] Tainted: [W]=WARN [ 167.756745][ T9619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 167.766834][ T9619] ================================================================== [ 167.832846][ T9658] loop3: detected capacity change from 0 to 512 [ 167.856990][ T29] kauditd_printk_skb: 657 callbacks suppressed [ 167.857019][ T29] audit: type=1400 audit(1764133702.477:17089): avc: denied { accept } for pid=9639 comm="syz.6.1908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 167.882911][ T29] audit: type=1400 audit(1764133702.477:17090): avc: denied { read } for pid=9639 comm="syz.6.1908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 167.998095][ T9658] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.011232][ T9658] ext4 filesystem being mounted at /385/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.027394][ T9658] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 12: comm syz.3.1911: path /385/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 168.049178][ T9658] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 13: comm syz.3.1911: path /385/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 168.103624][ T9663] wg1 speed is unknown, defaulting to 1000 [ 168.190268][ T9658] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 14: comm syz.3.1911: path /385/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 168.211027][ T9658] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 15: comm syz.3.1911: path /385/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 168.231689][ T9658] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 16: comm syz.3.1911: path /385/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 168.233113][ T6634] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.256589][ T9658] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 17: comm syz.3.1911: path /385/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 168.284947][ T4447] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.305544][ T3323] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz-executor: path /385/file0: bad entry in directory: rec_len % 4 != 0 - offset=12, inode=2197815810, rec_len=21, size=2048 fake=0 [ 168.326221][ T3323] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 12: comm syz-executor: path /385/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 168.348327][ T3323] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 13: comm syz-executor: path /385/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 168.369798][ T3323] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 14: comm syz-executor: path /385/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 171.226578][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.