last executing test programs: 2m10.535161002s ago: executing program 3 (id=2349): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={0x14, 0x2a, 0x229, 0x70bd2b, 0x0, {0xa}}, 0x14}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r3, 0x1, &(0x7f00000006c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x3, r2, &(0x7f0000000480)="e4b5eea546a2b4", 0x7, 0x494}]) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES8=r2, @ANYRES64=r3, @ANYRESDEC=r1, @ANYRESDEC=r3], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000640)='sched_switch\x00', r5, 0x0, 0x5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df2502000000ff00000800000000080018004e214e21"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c0001"], 0x118}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 2m10.290517436s ago: executing program 3 (id=2354): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, 0x2201, 0x800}}, 0x20}}, 0x40040) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x4810, &(0x7f0000000380)={[{@sysvgroups}, {@max_batch_time}, {@noauto_da_alloc}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@nolazytime}], [{@flag='async'}]}, 0x0, 0x4ec, &(0x7f0000000c40)="$eJzs3ElvHMUeAPB/j5fEL8mzX957QBbIQEBYIOLYWQ8cCAIpFyQkEApHYztRiJOg2EhJZBGzKEgcQPkEAW5IfAJOcEGAOIC4EsERIUXIBxw4oEE10zOMPTPe4iWxfz9pnKru6q6q7q64lmkHsGEV048sYmtE/BgR3ZXozATFyj+3piaG/piaGMqiVHrht6ycbnpq4sNq0upxW/JIbyGi8E4Wu5rkO3bp8pnB0dGRC5Xo2zfGC/mes4OnRk6NnBs4evTgga4jhwcOLUs9U5mmd75xfveO4y9fe27oxLVXvv40lbeU75+emhiaeUTPInNoa9hSjOLMa1nnkUWe/U63rS6ctaefhbUrDAuWntp0uzrK7b872sqxiu549q1aImDdKZVKpU0NW2sNfrJUL8sqBwDrRKZJwwa0ve43/vRUGqlODDWOg9e3m8eiPAJK9b6Vfyp72ssj2GJPZWzUsUL5/y8iTkz+eT19ouk8BADA8vr8WETp5987Ur+j+qnsKcQ9den+na8N9UTEfyIi9R3/m/df/h9RTntvRNxXd0zqUW6eJ//irHhj/+f7rjyQuqxLrmcrqf/3ZL62NbP/V1u/6GnLY9vK9e/ITp4eHdmfX5Pe6NiU4v2Np65Nq33xzA8ftMq/WNf/S5+Uf7UvmJfj1/ZZE3TDg+ODt1vvqptvli/slcb6Z9GeVUMROyJi5xLOn67Z6cc+2d1qf63+bXH9RKpnQ/3fb33y9iUUaJbSRxGPVu7/ZMyqf9KZh/rGz77WN3bp8hOn69cn+48cHjjUtzlGR/b3VZ+KRt98d/X5PNgwjJj//q+sdP//1fT5r61c9mT167Vji8/j6o13W45plvr8d2YvlsOd+baLg+PjF/ojOrPJxu0D/xx7cbBrRvpU/969zdv/9oi/qovbuyIiPcT3R8QDEbEnL/uDEfFQROydo/5fPf3wq62GkHfC/R9e1P1vFXjq24jmu9rOfPlZQ8bvFRdY/3T/D5ZDvfmW4cHx+X6txFwlrQ/c9gUEAACAu8CeiNgaWWFfPse5NQqFffsittRmUMbGHz95/vVzw5V3BHqio1Cd6equmw/tz+eGUzwdNVAXT/sPlOeNS6VSqSvF0/h9dNvaVh02vC0t2n/yi+/9w/q3qHW0Vm+0AXelpa+jL/8XMoDVtQzfowHuUto/bFwLbv8r9RYcsGaatf8rEbfWoCjAKmvW/l9ag3IAq8/4HzYu7R82Lu0fNqQFvSS/hMD247O31OWVta9Mpq0DhZj7rwD0RFS3VL/gOPcJfypELE8J25a1pl0z7mmhaZrNsRx5RWHeNO2L+EMMqxso3BnFqAQ2RcQ8T2/tYbtSDVxe6YKVG8HHa/u/EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwO37OwAA//8GPdEz") 2m9.669871646s ago: executing program 3 (id=2363): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_io_uring_setup(0x480, &(0x7f0000000380)={0x0, 0xf68e, 0x10100, 0x0, 0x2b6}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r1, 0x708, 0x41e3, 0x0, 0x0, 0x0) msgget$private(0x0, 0x240) msgrcv(0x0, 0x0, 0x0, 0xffffff7f00000000, 0x3000) shutdown(r0, 0x0) r4 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@resgid}, {@nodioread_nolock}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@errors_remount}, {@grpid}, {@orlov}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) fcntl$lock(r4, 0x24, &(0x7f00000002c0)={0x2, 0x0, 0x4, 0x5}) 2m8.634331892s ago: executing program 3 (id=2378): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = epoll_create1(0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000140)=0x8, 0xffffffffffffff87) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES16=r3, @ANYRESDEC=r2], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xff85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000880)='cachefiles_vol_coherency\x00', r4, 0x0, 0x4000000000}, 0x18) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10000, &(0x7f0000001180)=ANY=[], 0x1, 0xa08, &(0x7f0000008280)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r1, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000008c0)=ANY=[@ANYBLOB="010000002209000000000000000000054875521100066eaf7e5c6e2ba80684bd3329e039d32844ab2e58a00f08ca42ce2284fde9d3", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=r1, @ANYRESHEX, @ANYBLOB="000000000100000002000060050300006cf24918807685d8"], 0x48}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40481c0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="21cd2bddb0c6358f900179c8e5090000000000ff0f00000017b6f1ffad8327eaea90e658"], 0x38}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x3ef, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYRES8, @ANYRES32=r5, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000041ee90f9100094ebb2570000000011000000000000a38b106ff5a26e0000"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0d00000050f397c10240000005000000a7f3b181c8347e95c1d0542a94c6a3316adc5321461b43aa91e3ff947f3faf09c6892c6c67da52f224e2a5d9fddc224493a8336f87e05860afc8c5cb67d86a4bd30174128d644f8b96500a4cfdc40177c96f5cebd462c17bea75e007b0018b098fd8ffd69e1f1921bf975d8f4396b709d68a00000000", @ANYRES32=r6, @ANYBLOB='\x00'/20, @ANYRESOCT=r1, @ANYRES32, @ANYBLOB="fdffffff0000000800"/28], 0x50) r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bind$802154_raw(r7, &(0x7f0000000080)={0x24, @none={0x0, 0x2}}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000cc0)='kfree\x00', r8, 0x0, 0xfff}, 0x18) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x20000000000000, &(0x7f0000000040), 0x111}}, 0x20) syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setsig(r10, 0xa, 0x13) 2m8.543920143s ago: executing program 3 (id=2379): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='mm_page_alloc\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) 2m8.488336484s ago: executing program 3 (id=2380): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x6}, 0x18) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x200008d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback, 0x1}, 0x1c) close_range(r2, 0xffffffffffffffff, 0x0) 2m8.488049724s ago: executing program 32 (id=2380): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x6}, 0x18) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x200008d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback, 0x1}, 0x1c) close_range(r2, 0xffffffffffffffff, 0x0) 1m34.925420549s ago: executing program 5 (id=2789): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0x190, 0xf8, 0x190, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x7000000, 0x2, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xa, 0xc3, 0x5}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0xff000000, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x9}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c80000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200e00000010c000280050001000000000008000740000000013c001080080002400000000708000140000046e208000340"], 0xc8}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = socket$inet6(0xa, 0x4, 0x1) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000000)=0xffffffff, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x40800, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r5 = socket$unix(0x1, 0x1, 0x0) shutdown(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3b, 0x1, 0x0, 0x0, 0x0, 0x6, 0x20720, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x4, @perf_bp={0x0}, 0x2, 0xffffffff, 0xd15, 0x6, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x800000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) accept(r5, 0x0, 0x0) 1m34.463278106s ago: executing program 5 (id=2797): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r0, r1) sendmmsg$inet(r2, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)="316f825a3d29f96a2093a917017b4cd30000000000000035ed313e19d6dd", 0x1e}, {&(0x7f0000000800)="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", 0x15f}, {&(0x7f0000000700)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df283b3ca3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25c951279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a0", 0xaa}], 0x3}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000f00)="a98d4e3a568df934a791f3de6053c132988cee1cc6c9a9f19fdd0ea14e220604c56f8447bcaa8e3f28d830e464cc63d147375e45b30ae7eb959ce21da0792b7bf8e4117719192aaf4d6895d384a38b49b3860da547e9597019ddc4ae127f035dd6e51695d9192b0f2b37c672c9971f2c74f38e9ca05f8c99637198863e427e1893ed25f0129cc7895185df7e663e240d78770e67fbc5dc86a788c106e6e9e26d82a5372418f0bed15a0d7c3db9c2cfa7db907a1aaab13469c4e187333eceef", 0xbf}, {&(0x7f0000000fc0)="488c72c093119f33af638b8a53db11f5219119573994eca20a47c554b4e9229db8209256d53762ed555c6f9aa2b99cbe053d1bcbfcdb34b7a61da0d479f4d0f2725b9f78723dbf12e9f534008db93e266aabfc945722d0e46aa8c03d62f0fbc313a670fface5cdb736c944259bd57dad49c8acbb39a0115fd4a1b76bd8a01ad0e167efab52d31c22c908ac8d0abdbc0ae6e7200c62d8c7115273c5dac64e93a2b54f1bd0e7232a6669569aadfefbc7d35246b051345e3c7adb726d2820a8b2e8751c6188aebad3fa5117bb2968ae7ce5ba11251edffb30364becc5ef4f68cf", 0xdf}], 0x2}}], 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[], 0x240}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000001600)="09268a927f1f6588b967481241ba7860fcfaf65ac635ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcec8044ab4ea6f7ae55d88fecf90b1a7511bf746b152124eb38d6c7a207112eb1bf554b", 0x51, 0x11, 0x0, 0x0) 1m33.453552141s ago: executing program 5 (id=2811): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000"], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) 1m33.402237012s ago: executing program 5 (id=2814): pipe2(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000071122000000000009500000000200000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x80, 0x7a5, &(0x7f0000000f80)="$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") r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x112, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @private=0xa010100}, 0x1, 0x0, 0x2}}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00'}, 0x10) r2 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) rt_sigqueueinfo(r2, 0x21, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x48, 0x0, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r4, 0x0, 0x0) mmap(&(0x7f00003da000/0x2000)=nil, 0x2000, 0x3, 0x28011, r4, 0x9b2fb000) openat$sndseq(0xffffffffffffff9c, 0x0, 0x309700) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$qrtrtun(0xffffffffffffffff, 0x0, 0xeffd) 1m32.966134509s ago: executing program 5 (id=2819): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0x190, 0xf8, 0x190, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x7000000, 0x2, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xa, 0xc3, 0x5}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0xff000000, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x9}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c80000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200e00000010c000280050001000000000008000740000000013c001080080002400000000708000140000046e208000340"], 0xc8}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = socket$inet6(0xa, 0x4, 0x1) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000000)=0xffffffff, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x40800, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r5 = socket$unix(0x1, 0x1, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept(r5, 0x0, 0x0) 1m30.834590852s ago: executing program 5 (id=2838): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18"], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000090600000000000000", @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a"], 0x44}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffff8}, 0x18) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1800) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00'}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) 1m30.818958932s ago: executing program 33 (id=2838): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18"], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000090600000000000000", @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a"], 0x44}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffff8}, 0x18) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1800) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00'}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) 11.411893603s ago: executing program 4 (id=3941): r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0xb09f, 0x2, 0x1, 0x100000f3}, &(0x7f00000001c0)=0x0, &(0x7f0000000400)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xfffffff9, 0x0, 0x4) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r4, 0x80, &(0x7f0000000040)=@isdn={0x22, 0x6, 0x8, 0x4, 0x4d}}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES16, @ANYRES8=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000100)={0x8, 0xffffffffffffffff, 0x15, {0x8001, 0x7}, 0x7}, 0x1) 10.462037997s ago: executing program 4 (id=3957): prctl$PR_SET_NAME(0xf, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000003c0)="2000000012005f0214f9f4070000fbe40a000000000085b5", 0x18) recvmmsg(r1, &(0x7f00000021c0), 0x5b, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r4, &(0x7f0000000480)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000c40)="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", 0x227}, {&(0x7f0000001440)="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", 0x38d}], 0x2}, 0x8400) sendmsg$inet(r4, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)="9d", 0x1}], 0x1}, 0x0) 9.436364253s ago: executing program 4 (id=3967): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, 0x0, 0x0) close(r1) 9.402240394s ago: executing program 4 (id=3968): pipe2(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000071122000000000009500000000200000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x80, 0x7a5, &(0x7f0000000f80)="$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") r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x112, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @private=0xa010100}, 0x1, 0x0, 0x2}}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00'}, 0x10) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x48, 0x0, 0x28) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) read$qrtrtun(r3, 0x0, 0xeffd) 9.271792196s ago: executing program 4 (id=3974): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x2f8, 0xffffffff, 0x190, 0xf8, 0x190, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x7000000, 0x2, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xa, 0xc3, 0x5}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0xff000000, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0x90, 0xd0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x358) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$inet6(0xa, 0x4, 0x1) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000000)=0xffffffff, 0x4) r4 = socket$unix(0x1, 0x1, 0x0) shutdown(0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept(r4, 0x0, 0x0) 8.199689133s ago: executing program 4 (id=3989): perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4010, 0xc8, 0x0, 0x7, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000006000000000000000000742a94b69360efaeef880d5c2fb7b09ca01e49bd4d867e545285bc5b72f78e8857ab97c63603773bebd93532060559197e93c359bdae099bb5182a7c6105aae9982565ad266eca931d794513c3108f0ecab71b698a982c8cdb9a5ce02a975bee913bedaa312942c9433638311b3301e0cbcc7e109d84c7786daf8f402d7c4adb98420e0d"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000200)={0x201d}) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000140)='./file1\x00', 0x1000c01, &(0x7f0000000040)=ANY=[], 0x5, 0x7f2, &(0x7f0000001280)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r1, @ANYBLOB="fbbc6ba6418ab66bc42a88ea7032a256b0812bba316f071fa86840da732c90c0bc234a"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x88000, 0x0) sendmmsg$unix(r4, &(0x7f0000005a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401c}}, {{&(0x7f0000005840)=@file={0x1, './file1\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004000}}], 0x2, 0x4050) connect$unix(r3, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) ppoll(&(0x7f0000000000)=[{r2, 0x289}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000003800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x5c, 0x160, 0xd0, 0x3e0, 0x1e0, 0x228, 0x25a, 0x1e0, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0x1fe], 'veth0_to_batadv\x00', 'batadv_slave_0\x00', {}, {0xff}}, 0x5002, 0xa8, 0xd0, 0x52020000, {0x0, 0x6802000000000000}}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@dev, @mcast1, [], [], 'virt_wifi0\x00', 'lo\x00', {}, {}, 0x89}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x7, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r7, &(0x7f0000001140), 0x700, 0x2, 0x0) 8.182554353s ago: executing program 34 (id=3989): perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4010, 0xc8, 0x0, 0x7, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000006000000000000000000742a94b69360efaeef880d5c2fb7b09ca01e49bd4d867e545285bc5b72f78e8857ab97c63603773bebd93532060559197e93c359bdae099bb5182a7c6105aae9982565ad266eca931d794513c3108f0ecab71b698a982c8cdb9a5ce02a975bee913bedaa312942c9433638311b3301e0cbcc7e109d84c7786daf8f402d7c4adb98420e0d"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000200)={0x201d}) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000140)='./file1\x00', 0x1000c01, &(0x7f0000000040)=ANY=[], 0x5, 0x7f2, &(0x7f0000001280)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r1, @ANYBLOB="fbbc6ba6418ab66bc42a88ea7032a256b0812bba316f071fa86840da732c90c0bc234a"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x88000, 0x0) sendmmsg$unix(r4, &(0x7f0000005a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401c}}, {{&(0x7f0000005840)=@file={0x1, './file1\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004000}}], 0x2, 0x4050) connect$unix(r3, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) ppoll(&(0x7f0000000000)=[{r2, 0x289}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000003800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x5c, 0x160, 0xd0, 0x3e0, 0x1e0, 0x228, 0x25a, 0x1e0, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0x1fe], 'veth0_to_batadv\x00', 'batadv_slave_0\x00', {}, {0xff}}, 0x5002, 0xa8, 0xd0, 0x52020000, {0x0, 0x6802000000000000}}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@dev, @mcast1, [], [], 'virt_wifi0\x00', 'lo\x00', {}, {}, 0x89}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x7, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r7, &(0x7f0000001140), 0x700, 0x2, 0x0) 6.780531045s ago: executing program 2 (id=4011): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) pipe2(&(0x7f0000000000), 0x4000) (fail_nth: 1) 6.674520637s ago: executing program 2 (id=4012): socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000a40)=""/254, 0x149, 0xfe, 0x0, 0xf87, 0x10000}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0xe, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x32, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='sched_switch\x00', r1, 0x0, 0x100000000}, 0x18) socket(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) 5.588034034s ago: executing program 2 (id=4028): socket$kcm(0x10, 0x2, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c00078018000180"], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0) ftruncate(r4, 0xc17a) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) sendmsg$kcm(r2, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xfffffffffffffffd}, 0x1, 0x4}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0xc9) 5.519416275s ago: executing program 2 (id=4029): pipe2(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000071122000000000009500000000200000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x80, 0x7a5, &(0x7f0000000f80)="$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") r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x112, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @private=0xa010100}, 0x1, 0x0, 0x2}}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00'}, 0x10) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x48, 0x0, 0x28) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) read$qrtrtun(r4, 0x0, 0xeffd) 5.301412698s ago: executing program 2 (id=4037): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x458}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r1}, 0x38) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000010000c50000000e00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='rxrpc_peer\x00', r4}, 0x10) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0xff, @private2, 0x1}}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[{0x28, 0x110, 0x1, "0af625fecf68cb34872b68a9bdbc03eba4"}, {0x90, 0x110, 0x7fff, "e007a2c2b10256d565ddc4ba396fad3ec6d0834517e2c226f3ec22998b4bf0f3d762efa47cff938cb8274b82ea4e49c0a44035d68447fee57ef16b7011a22b2a7c466585e7b265c65ea657c6a9d30171f12fc33f8672ce26ffec7233acd0df876f5b96ec6c6258c2deb5b8c57556913b28c48727f030f150d937dcc9fdd1"}], 0xb8, 0xe000}, 0x5}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x26c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x214, 0x3, "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"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x4}]}], {0x14}}, 0x294}}, 0x4048010) 4.400514442s ago: executing program 2 (id=4053): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) getrusage(0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000001c0)=0x1, 0x4) pwritev(r1, &(0x7f0000003ac0)=[{&(0x7f0000002740)="b6", 0x1}], 0x1, 0x400, 0x5) mmap$IORING_OFF_SQ_RING(&(0x7f0000ca3000/0x2000)=nil, 0x2000, 0x0, 0x80010, 0xffffffffffffffff, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000001, 0x1010, 0xffffffffffffffff, 0x1a651000) unlink(0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b70500000800000085000000a500000095", @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r4, 0x1) setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) 4.380758392s ago: executing program 35 (id=4053): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) getrusage(0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000001c0)=0x1, 0x4) pwritev(r1, &(0x7f0000003ac0)=[{&(0x7f0000002740)="b6", 0x1}], 0x1, 0x400, 0x5) mmap$IORING_OFF_SQ_RING(&(0x7f0000ca3000/0x2000)=nil, 0x2000, 0x0, 0x80010, 0xffffffffffffffff, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000001, 0x1010, 0xffffffffffffffff, 0x1a651000) unlink(0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b70500000800000085000000a500000095", @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r4, 0x1) setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) 2.726966578s ago: executing program 8 (id=4079): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x4, 0x87, 0x1, 0x8}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000000)=0x3f7, 0x4) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000003540)=0x5, 0x4) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x80000001}], 0x1, 0x143, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0xffffff42}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d030000000000000003000000000000000000000105000000080000000000000000000003000000000200000002"], 0x0, 0x56}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7ff}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48011}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b0400000000000000000200fffe24000480200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a3200000000140000001200010000000000000000000500000a5b49bd0bf9eabdbf9cbde929f541b211c025ec"], 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r6 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000600000000000000008500000007000000c5000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) write$selinux_access(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB='system_u:ck_exec_t:s0 /usr/sbin/cupn-browsed 0'], 0x4e) 2.726361888s ago: executing program 8 (id=4080): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x57e, 0x200e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x81, 0x0, 0x1}}}}}]}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) socket$inet6(0xa, 0x80803, 0x87) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fe800000000000000000000000000000fe8000000000000000000000000000aa87"], 0x0) kcmp(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 2.371116914s ago: executing program 6 (id=4088): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) select(0x40, &(0x7f0000000340)={0xd, 0x0, 0x0, 0x0, 0x0, 0x2e787ec3, 0x0, 0x1}, 0x0, 0x0, 0x0) 2.282525385s ago: executing program 6 (id=4090): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_readahead}, {@version_u}], [], 0x6b}}) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f00000003c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x7}]}}}]}]}], {0x14}}, 0xd8}}, 0x0) 2.206247336s ago: executing program 6 (id=4092): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000", @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, 0x2201, 0x800}}, 0x20}}, 0x40040) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x4810, &(0x7f0000000380)={[{@sysvgroups}, {@max_batch_time}, {@noauto_da_alloc}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@nolazytime}], [{@flag='async'}]}, 0x0, 0x4ec, &(0x7f0000000c40)="$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") 2.088282228s ago: executing program 6 (id=4093): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x57e, 0x200e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x81, 0x0, 0x1}}}}}]}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) socket$inet6(0xa, 0x80803, 0x87) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fe800000000000000000000000000000fe8000000000000000000000000000aa87"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r2}, 0x18) msgget(0x3, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@dioread_lock}, {@data_err_ignore}, {@discard}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") kcmp(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.039799649s ago: executing program 8 (id=4094): r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xb4}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) close(r0) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x20000000000000ff) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x2c, 0xffffffffffbffff8) dup2(r2, r3) fcntl$setown(r2, 0x8, r1) tkill(r1, 0x13) r4 = eventfd(0x6) mount$9p_fd(0x0, &(0x7f00000006c0)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="7ccf"]) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r5 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r5, &(0x7f00000078c0)=[{{&(0x7f0000000100)=@tipc=@name, 0x80, &(0x7f0000000180), 0x0, &(0x7f00000007c0)=""/138, 0x8a}, 0x11}, {{&(0x7f0000000580)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000d80)=""/245, 0xf5}, {&(0x7f0000000880)=""/16, 0x10}, {&(0x7f0000000e80)=""/170, 0xaa}, {&(0x7f00000008c0)=""/111, 0x6f}, {&(0x7f0000000f40)=""/160, 0xa0}, {&(0x7f0000001000)=""/210, 0xd2}, {&(0x7f0000001100)=""/210, 0xd2}], 0x7, &(0x7f0000001280)=""/54, 0x36}, 0x4}, {{0x0, 0x0, &(0x7f00000014c0)}, 0xfffffffa}, {{&(0x7f0000001640)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000002980)=[{&(0x7f00000016c0)=""/73, 0x49}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000002880)=""/205, 0xcd}], 0x5, &(0x7f0000000640)=""/232, 0xe8}, 0x8}, {{&(0x7f0000002b00)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000005e40)=[{&(0x7f0000002b80)=""/88, 0x58}, {&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000003c00)=""/165, 0xa5}, {&(0x7f0000003cc0)}, {&(0x7f0000003d00)=""/4096, 0x1000}, {&(0x7f0000004d00)=""/4096, 0x1000}, {&(0x7f0000005d00)=""/111, 0x6f}, {&(0x7f0000005d80)=""/131, 0x83}], 0x8, &(0x7f0000005ec0)=""/180, 0xb4}, 0x2}, {{&(0x7f0000005f80)=@nfc, 0x80, &(0x7f0000006000)}, 0x8000}, {{0x0, 0x0, &(0x7f0000006400)=[{&(0x7f0000006040)=""/141, 0x8d}, {&(0x7f0000006100)=""/212, 0xd4}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000007c40)=""/128, 0x80}, {&(0x7f0000006300)}, {&(0x7f0000006340)=""/93, 0x5d}, {&(0x7f00000063c0)=""/39, 0x27}], 0x7, &(0x7f0000006480)=""/4096, 0x1000}, 0x81}, {{0x0, 0x0, &(0x7f0000007500)=[{&(0x7f0000007480)}, {&(0x7f00000074c0)=""/17, 0x11}], 0x2, &(0x7f0000007540)=""/42, 0x2a}, 0x7}, {{&(0x7f0000007580)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x80, &(0x7f0000007840)=[{&(0x7f0000007600)=""/121, 0x79}, {&(0x7f0000007680)=""/114, 0x72}, {&(0x7f0000007700)=""/103, 0x67}, {&(0x7f0000007780)=""/138, 0x8a}], 0x4, &(0x7f0000007880)=""/49, 0x31}, 0xffff8000}], 0x9, 0x40000000, &(0x7f0000007b00)={0x0, 0x989680}) r6 = fsopen(&(0x7f00000003c0)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x8, 0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030076657468305f746f5f626f6e6400000008003a00ca1007e3"], 0x44}}, 0x0) setsockopt$inet_int(r5, 0x0, 0x8, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @broadcast}}) syz_emit_ethernet(0xfdef, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c200000ee43f6642531e080045"], 0x0) 1.855358621s ago: executing program 1 (id=4098): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "8a92a8a32f80a9b4", "3f9d7569f19c819956d6eaf1a469d953", '\x00', "c42c5eed3edba6d0"}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000001850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000300)=@gcm_128={{0x304}, "2dc3fa5474cf6690", "50822f66b97a105f5b00d8edc5151b4a", "b2356f41", "06b950e7846e2394"}, 0x28) 1.794661082s ago: executing program 1 (id=4100): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x1f, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = io_uring_setup(0x4d3f, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x6}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000500), 0x66) 1.760865363s ago: executing program 1 (id=4102): r0 = socket$can_bcm(0x1d, 0x2, 0x2) close_range(r0, r0, 0x0) io_setup(0x8, &(0x7f0000000240)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmsg$inet(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)}, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) io_submit(r1, 0x80101, &(0x7f0000000100)=[&(0x7f00000002c0)={0x400000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000200)="05", 0x1}]) 1.635820015s ago: executing program 7 (id=4104): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) close_range(r0, r0, 0x2) r1 = eventfd2(0x0, 0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x270, 0x2b8, 0xb0000010, 0x160, 0x5c8fca04, 0x270, 0x3a8, 0x3a8, 0x270, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'team_slave_0\x00', 'veth0_to_team\x00'}, 0x0, 0xf8, 0x160, 0x700, {}, [@common=@inet=@dscp={{0x28}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0xd}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "78ed9300032ce416ae19db66c8fb2158fbc487a284b992e42fef198c9f58"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000380)=""/95, 0x5f}], 0x1) r3 = io_uring_setup(0x60f7, &(0x7f0000000400)={0x0, 0x39bd, 0x2, 0xfffffbff, 0x3c0}) r4 = socket$rxrpc(0x21, 0x2, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000c00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x4, [@var={0xd, 0x0, 0x0, 0xe, 0x5, 0x1}, @volatile={0x10, 0x0, 0x0, 0x9, 0x4}, @typedef={0x10, 0x0, 0x0, 0x8, 0x3}, @fwd={0x2}, @const={0xf, 0x0, 0x0, 0xa, 0x1}, @struct={0x5, 0x1, 0x0, 0x4, 0x0, 0x5, [{0xa, 0x2, 0x2}]}, @ptr={0x1, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x2e, 0x2e]}}, &(0x7f0000000c80)=""/141, 0x80, 0x8d}, 0x28) bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) syz_read_part_table(0x5c8, &(0x7f0000000600)="$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") listen(r4, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7, 0x0, 0x3}, 0x18) close_range(r3, r4, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x2800400, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xf5, 0x305, &(0x7f0000000440)="$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") write$eventfd(r1, &(0x7f0000000280)=0x9, 0x8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r8, 0x1, 0x8a5, 0x1001f0) 1.521075157s ago: executing program 0 (id=4106): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000019580)=ANY=[@ANYBLOB="140000001000030000000000000000000000000a78000000060a0b0400000000000000000200090038000480340001800b00010074617267657400002400028010000100434f4e4e5345434d41524b0005000300ef00000008000240000000000900010073797a30000000000900020073797a32"], 0xa0}}, 0x0) 1.484010167s ago: executing program 0 (id=4107): prctl$PR_SET_NAME(0xf, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000003c0)="2000000012005f0214f9f4070000fbe40a000000000085b5", 0x18) recvmmsg(r1, &(0x7f00000021c0), 0x5b, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r4, &(0x7f0000000480)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000c40)="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", 0x227}, {&(0x7f0000001440)="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", 0x38d}], 0x2}, 0x8400) sendmsg$inet(r4, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)="9d", 0x1}], 0x1}, 0x0) 1.218153532s ago: executing program 6 (id=4108): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feb010000202c0100002c01000005000000020000000000001102000000080000000300000000000001000000002b005b03070000000000000800000000000000000300000d0000000009000000030000007a2f4d28d3276aecbd63020000000500000008000000030000000d0000000000000a03000000000000000100000d0000000005000000010000000b00000008000005000000001000000002000000b63100000800000000000000000100000d00000000000000ffffffff0a00000003000000000000000800000005000000070000000f000000000000007f000000090000000400000001000000030000000100000009000000030000000000000700000000000000000700000d0000000004000000020000000000004764e2e39ec6bfc6000500000004000000070000000200000006000000000000000061615f00"], &(0x7f0000000a40)=""/254, 0x149, 0xfe, 0x0, 0xf87, 0x10000}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0xe, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x32, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='sched_switch\x00', r2, 0x0, 0x100000000}, 0x18) syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) 1.112876883s ago: executing program 8 (id=4109): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x40, r0, 'id0\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2900c0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000480)={@private0, 0xe, 0x0, 0x0, 0x0, 0x1, 0x400}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="384f270517060e04"], &(0x7f0000000140)='syzkaller\x00', 0xfffffff7, 0xad, &(0x7f0000000280)=""/173, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x5, 0x4, 0xa5b2, 0xfd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x1, r3], 0x0, 0x10, 0x401}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) futex(0x0, 0x1, 0x2, 0x0, 0x0, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0xa, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff000000007110a0000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="0100feffff37a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r4) r5 = add_key(&(0x7f00000004c0)='trusted\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000880)="20d4f8b7df2501e48b624b4f6306c028923ae9009cdda7bcc12de3986566af52128a80309887f087807e1a5a2f7ca919bd13e7945c628152d2d3e9cc96d0240d01b5ab308d04bb419d599a84208426480500000000000000847067e7ab44e7b1085721e65a580dd06f00286ce279928deaf03e982c8ff3cbf9c7c56b908b72b0a5de01f65619c4c42ddf35eee4a49debed7bd59198402f010cef2cabb11d98d40418fe6d", 0xa4, r4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r6, &(0x7f0000000080), 0x8) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) getresgid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000740)) keyctl$chown(0x4, r5, r8, r9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r10, 0x4, 0x42800) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r11, &(0x7f0000000380)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000200)="7f", 0x1}, {&(0x7f0000001300)="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", 0xd01}, {&(0x7f00000002c0)='@(', 0x2}, {&(0x7f00000007c0)="48c9a370d46a9f922889a1685fd82fa9976814e55203bcd4d28a81c9d3b109e5a52406ab3477460ffa292545fd43451cca1f725bbed3f0478513f1e23d1c6f0b0b66fb5bbd92a305806f7a93c8b7e607220cfd28bf541ec24067d418dbcb63252df58248501b42c6ed7b3e49ff19da8fbe5505e41912120c2f462d55bb8d620397ff65b98b0f6555f461b44895b96705a90078999124469350617394931b7f5d2657ec6377c66fea", 0xa8}, {&(0x7f0000002040)="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", 0xfc1}], 0x6, 0x6) 1.080058614s ago: executing program 8 (id=4110): pipe2(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000071122000000000009500000000200000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x80, 0x7a5, &(0x7f0000000f80)="$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") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @private=0xa010100}, 0x1, 0x0, 0x2}}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00'}, 0x10) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x48, 0x0, 0x28) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) read$qrtrtun(r3, 0x0, 0xeffd) 716.178999ms ago: executing program 1 (id=4111): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x30, r4, 0x1, 0xea, 0xa6ff, {{}, {0x0, 0x3}, {0x14}}}, 0x30}, 0x1, 0x0, 0x0, 0x4004018}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) readv(r8, &(0x7f0000000080)=[{&(0x7f0000000140)=""/243, 0xf3}], 0x1) 679.1967ms ago: executing program 7 (id=4112): r0 = socket(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0x118, 0x118, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, &(0x7f00000004c0), {[{{@uncond, 0x0, 0xb8, 0x118, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00', 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="269d1d9cd5dc", 0xf, 0x2, [0x11, 0x38, 0x9, 0x22, 0x8, 0x15, 0x3c, 0x26, 0x28, 0x2f, 0x3b, 0x26, 0xa, 0x6, 0x3c, 0x2e], 0x1, 0xfffffffa, 0xffffffffffffffff}}}, {{@ip={@local, @broadcast, 0xff, 0xff, 'rose0\x00', 'gre0\x00', {0xff}, {}, 0xd7, 0x2, 0x40}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'pim6reg\x00', 'dvmrp0\x00', 0x6, 0x1, 0x3, 0x4, 0x1, 0x993, {0x7f}, {0x5}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xf}}}, {{@ip={@multicast1, @remote, 0xff000000, 0xffffffff, 'ip_vti0\x00', 'nicvf0\x00', {}, {0xff}, 0x6, 0x1, 0x78}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) open$dir(&(0x7f0000000140)='./file0\x00', 0x2801, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0xfff, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x2, 0x0) 630.356331ms ago: executing program 1 (id=4113): socket$kcm(0x10, 0x2, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c00078018000180"], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x400007, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x4}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) sendmsg$kcm(r2, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xfffffffffffffffd}, 0x1, 0x4}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0xc9) 600.663241ms ago: executing program 7 (id=4114): r0 = socket$kcm(0x10, 0x5, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x0, 0x39c}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x14, 0x30, 0x871a15abc695fa3d, 0x70bd27}, 0x14}}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={r1, &(0x7f0000000180)="9c94ad49095657bfb27e3572127046c293c96079addd81104ee8f49e6718ab1e29abaab1d76df5650ad77f32fe1dc48c3906d70138b9369e93f5e71418f409f5f70c02ac8b7760434e038e7d70b8abea292ab7b79ea514ce53148adbc78d89dc25569349cb0c373eaf65b6b3c8b4227f7d63a4c9d69aaf223c82e18cefb274c167a6f62c6a294bf49e7ad867472c31aab70b2f4cff66591f7f55cf4dede868eae2aaeb9a05b71bab4cbdeede155d2619fb24ceb33731", &(0x7f0000000000)=""/43}, 0x20) r4 = socket$inet6(0xa, 0x2, 0x8) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0}}, 0x81) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x40}}, 0x40800) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 594.518141ms ago: executing program 1 (id=4115): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendto$inet6(r0, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x1f, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001a00), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r6 = io_uring_setup(0x4d3f, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x6}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r6, 0xb, &(0x7f0000000500), 0x66) 454.523414ms ago: executing program 7 (id=4116): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0x190, 0xf8, 0x190, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x7000000, 0x2, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xa, 0xc3, 0x5}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0xff000000, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x9}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$inet6(0xa, 0x4, 0x1) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000000)=0xffffffff, 0x4) r4 = socket$unix(0x1, 0x1, 0x0) shutdown(0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept(r4, 0x0, 0x0) 403.749994ms ago: executing program 0 (id=4117): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000019580)=ANY=[@ANYBLOB="140000001000030000000000000000000000000a78000000060a0b0400000000000000000200090038000480340001800b00010074617267657400002400028010000100434f4e4e5345434d41524b0005000300ef00000008000240000000000900010073797a30000000000900020073797a32"], 0xa0}}, 0x0) 365.672225ms ago: executing program 0 (id=4118): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 351.035155ms ago: executing program 7 (id=4119): syz_emit_ethernet(0x2a, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x80) r0 = timerfd_create(0x0, 0x0) syz_io_uring_setup(0x58f7, 0x0, &(0x7f0000000180)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000002280)=""/4102, 0x1006, 0x1a}) timerfd_settime(r0, 0x3, &(0x7f0000000840)={{0x77359400}, {0x0, 0x3938700}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c30000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000003c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000c40)={'\x00', 0x8, 0x9, 0x0, 0x450, 0x4}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 328.755236ms ago: executing program 7 (id=4120): r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xb4}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) close(r0) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x20000000000000ff) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x2c, 0xffffffffffbffff8) dup2(r2, r3) fcntl$setown(r2, 0x8, r1) tkill(r1, 0x13) r4 = eventfd(0x6) mount$9p_fd(0x0, &(0x7f00000006c0)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="7ccf"]) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r5 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r5, &(0x7f00000078c0)=[{{&(0x7f0000000100)=@tipc=@name, 0x80, &(0x7f0000000180), 0x0, &(0x7f00000007c0)=""/138, 0x8a}, 0x11}, {{&(0x7f0000000580)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000d80)=""/245, 0xf5}, {&(0x7f0000000880)=""/16, 0x10}, {&(0x7f0000000e80)=""/170, 0xaa}, {&(0x7f00000008c0)=""/111, 0x6f}, {&(0x7f0000000f40)=""/160, 0xa0}, {&(0x7f0000001000)=""/210, 0xd2}, {&(0x7f0000001100)=""/210, 0xd2}], 0x7, &(0x7f0000001280)=""/54, 0x36}, 0x4}, {{0x0, 0x0, &(0x7f00000014c0)}, 0xfffffffa}, {{&(0x7f0000001640)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000002980)=[{&(0x7f00000016c0)=""/73, 0x49}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000002880)=""/205, 0xcd}], 0x5, &(0x7f0000000640)=""/232, 0xe8}, 0x8}, {{&(0x7f0000002b00)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000005e40)=[{&(0x7f0000002b80)=""/88, 0x58}, {&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000003c00)=""/165, 0xa5}, {&(0x7f0000003cc0)}, {&(0x7f0000003d00)=""/4096, 0x1000}, {&(0x7f0000004d00)=""/4096, 0x1000}, {&(0x7f0000005d00)=""/111, 0x6f}, {&(0x7f0000005d80)=""/131, 0x83}], 0x8, &(0x7f0000005ec0)=""/180, 0xb4}, 0x2}, {{&(0x7f0000005f80)=@nfc, 0x80, &(0x7f0000006000)}, 0x8000}, {{0x0, 0x0, &(0x7f0000006400)=[{&(0x7f0000006040)=""/141, 0x8d}, {&(0x7f0000006100)=""/212, 0xd4}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000007c40)=""/128, 0x80}, {&(0x7f0000006300)}, {&(0x7f0000006340)=""/93, 0x5d}, {&(0x7f00000063c0)=""/39, 0x27}], 0x7, &(0x7f0000006480)=""/4096, 0x1000}, 0x81}, {{0x0, 0x0, &(0x7f0000007500)=[{&(0x7f0000007480)}, {&(0x7f00000074c0)=""/17, 0x11}], 0x2, &(0x7f0000007540)=""/42, 0x2a}, 0x7}, {{&(0x7f0000007580)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x80, &(0x7f0000007840)=[{&(0x7f0000007600)=""/121, 0x79}, {&(0x7f0000007680)=""/114, 0x72}, {&(0x7f0000007700)=""/103, 0x67}, {&(0x7f0000007780)=""/138, 0x8a}], 0x4, &(0x7f0000007880)=""/49, 0x31}, 0xffff8000}], 0x9, 0x40000000, &(0x7f0000007b00)={0x0, 0x989680}) r6 = fsopen(&(0x7f00000003c0)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x8, 0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030076657468305f746f5f626f6e6400000008003a00ca1007e3"], 0x44}}, 0x0) setsockopt$inet_int(r5, 0x0, 0x8, 0x0, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0xfdef, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c200000ee43f6642531e080045"], 0x0) 325.678205ms ago: executing program 0 (id=4121): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000000)={[{@errors_remount}, {@nobh}]}, 0x3, 0x519, &(0x7f0000001300)="$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") symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x18) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000840)={0x1100, 0x12, 0x300, 0x70bd2a, 0x25dfdbff, {0x2c, 0xc, 0x8, 0x0, {0x4e22, 0x4e20, [0x0, 0x6, 0x7], [0x400, 0x7, 0x18, 0x40], 0x0, [0x0, 0x4]}, 0x2, 0x100}, [@INET_DIAG_REQ_BYTECODE={0x48, 0x1, "2ba61e86e6a867f818ccb0d0282be7e0d7e5426f796f648a03da9ce442ba14e284414ddfb53706e80eb7913aff331864d8f488994718481c8e463d2375500c14db83785d"}, @INET_DIAG_REQ_BYTECODE={0x68, 0x1, "cdc9969964bdd062ba6a1d0d356cfeabfc6fbedec309e87287e95bddcfeb71c4a651f27233a426ee34770666beda02f592156f8a1a4db9678ebf23ad50f93c7f66a98715f881b20f5b220b4f07417757f3771c4c3a15cf7f17cf9b1a3c5692b7ad4e7ad5"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "cf49242a372698e290af9ee4506c8b5f1fdb664a09bcf81908711394239255a856fead2f927bbf90fa5568c3d069263b65413fafb96d50b05b57384e97d5ab075401006ca9e0fbf801a08e1ca8a34f7756d516f29734e476419de01af06fb98e971ba23876ad3a8d42118c09ac0e662303a8a621928b243276e4b5be0a1190355f7588e5119fac7516c70b3413a881322bab343110c86b884d707682185388c4447d267170dd34af9bb58d633f37e58d2145df8632ba4d277598baec9d0dd50c742085dc925dd25271a5e056467c6ecade9ff867a0e4a7db1aea9c39cbd92feaa960709cf2ffc581bdf169fd72c25f1b23b8435d0624df2faf3d7a63c56bc8130f9cd0646d537a7956e15dc81a79cff4c51df60a066175426b466302586fe7d42e102d02cb84c9a81f40855a8ed4e94fcc7bcd10645cf2ed99ecb7b782a1e6b749ae213a0417078b0f073ebccafcfaaf86a6453886f79ae374f35761da37420c683c079de3972d170a1275d33e0fce48b3cd96177bc44439e25505abe3ba493e50f1fbc784e9bd540f24d74b35160526c38c991750b1afca49532b6213de2202cc49497c9484cc306f55b5a12936d96e6dac753f3e21ae5dda8395654882a75ffd85cfe361cf9e90e28a7a3e2eebec8b447a0993932397d185890ab84acf16b6e226bc86aede081c2c26ff77bc433613f38820a201c0c95c1a21ae3a602c2c7d295925410903939e0d724662d54d5523f0de88422813a46cec898584b64ef0d65b83f7f9009877e4cd86931c69e72e0a817e0a6a82322e51bd18c1376aeaf6f59ed3bd446758d40e3ad3028636997081d28505b3f1b1658161cc75ca9a6d5bcaf8aad17d5f1eda2a9213d8a7ce669762e7cf861059dcb036881ea7986594b7254760fc29923b553e8e4b19d51509f5ae8090a1b534d49918ab48726e20e01e5a28c4f943f84caab16bd770d405635578d8e23ce0b078fb0dce4f70a511e2c4718a0fe5ebec79aef06e678c4274aea5aa07a4a6616e8502157597488550bf214b00cd5f1b323f98ae9990be1d61cc0141611758cc4f1967558da2a917cb44087b901afa917f366f6411a784ee7145b94dc209df58fc562a0936c75fe470ab59c94475ba1a9ffa651512cce0cc012518cf7554eb98dea77491ce69bf5ff599d2d86bf21bfd6a48b3eb42271533fac9061aade131c3684787834cb537c7f2fead7f1ea3ea72066b2bbb63be948f44696221e7efb5d7dfd4604671f6153017b53ac57215d251952384d0760e79356c4fe383a0147161858428ef2b46029b77fcc13f5da1caa5cc3b60a820ea053c6b1a90a5016efd7f3b92301fa5c2394b0c486fbeb4df802078de8f06204323aeb5df2b773e212761b031b2914673126ffcbdedf69c036b2b4a2bd911394ce27d9b55e6e4d89ae4b0cce20ae202c5f2d1fb83cece8aab93ec511b49d6ab4243d24ea4b37628055a38b32d9349e8a60dcc7118a4b7d292ec40279ae70c93b1068ed05d369d434d094e3d37cceb9f1c852a9b17dbfbf631da9976e6c4a0b7cee17ca22cacc5608b941cbd33a4cd0cf161755f26472f73d2233ac7fce595f693180c1447219d5ea6e51286abd81745e9434bde353fbda5dee8b56f56b92ecc04127f1846c0bc447d7f5483c37542e83745e31f634482575e59d8b95a9362c32dcd3935e77e93c56255bb5732bdc17595b59fa9c7e4894fd2ec5d9d15bdc2327d6908b1a3aa578d3af0dafc29141825c8db88426d0472d83b4ab99c066f41dd60492879f26c6d863db89f00e4448559acbb035ebab00ea8d1dddcfd779375b97399f83451fca6b1c68b44644d2917261be854b513153d860df047b1621e01b174e8817b16c3ab5b79f35bc62ab05ca4dc36574df1a8376aa3683b8ed6e6657b5d3ae6f79d583c124efe2ab3de3b524261e5acc0aba83ce05a1d14522c98b57590dfd3bb19740938532a1f91f1051c5c557788b76d10651319c1850decc1eae425b54470f604b5119077c65de3e787988c630819ea1e2bae607aea9d37aeb769fe6b3fad257df2648822c12041dddf17faf4bf38e2679c36afd45c2783ed207f0925f9080ce8cc7805a9cb32fe5c2eb948ad80beec691d6c5f8c85fe81fa8b269efd48d825f1a587499cd03ec5f59b87e0fbc1243a32c90f51e384db608d646f5ee9261dee5fb17da650186f2d963837f2bea540a40fb08631e70422f4544a5b49c99e34e08a535fad6ea07864f46575c4e4e53f690d5faec6a43e879f3ceaa88759d2ad34d581d24f53351d99b9e92b6e2f3669c66be3e8a63a5046fcb4e695853334517421d0413a93d041e575805b825c50ec5fd1479b259452ba78fe99cd63e447e5ee0b54b31c68ffbdd9d760076950515b4bf2fae7ec2aeead21839f5579080635c5b07fb7437c371d4104bba9cb74cb66f455f1c588c2e9bd06d6d4722f0609065a80c6431cc25a07ff9a3309c254032e48c98dab61ba1921eb2c2933ccc8c6c67ea8ad9aecb4104973c3e3c36c811dac1da84803e022562ad227b8c8541930a8a2cef72b640d3bb7982102fa25fd92ed0277af836903ee2e2cf0c9b6a1fb7049ebfb9deb760be32d370d7a1236d20b0b3953638ea9670aa6e8a5d1c5bfec5ed8abd6949d6765a422cb259596648ab88c5d437e52b02b51acb10e725cc4666487656d1caa73ea9f9e7014db017ddae84766b2a8dd3281443360e727f54404d867b00b2cc08f805a7d6bd4a27604ba31388e2575f71c58f7d6a33f53be414f48eeb4880448e617ddcce874c5003b26c9b2dd0290dad557cf63b6f67a4b899e2fe5dbfe8d44efa753dac322332aeab8be7617c094e004a1d046c8ea7f58bf07c4fa32fedb1e222717fd0973c4b597d5e1b0e5aa560d15d65147f82b2ce12eac2f43290f0cd126a1439707b23fb2bd145113103f05a7ffc035bea4b9a10b1f1e069fd6cef0b42d3435ec8a5aa9126422b95cb20868fc77fb0a6427c23418107fab31fcdfdaad2a79a5cf9c832db1c08010990a74e6e681ec4105b03095f47f8aa8a6eb0ec024a3c99a7e43ea46651b6aa7089716f34d91770c94f3ba6f24ca1b0fc9d2ba11554bd3faa927c55debda2a4341750fb9f364ce07fab9557d29cfd668660e0ff7c44a5176908f8d6ac1ed77b90e599870aa83375dda80cf094b346f773dd4ae44cb6da699b5d93652fca8da8b8fb6229ab2d84262ccd85df0960e329dac816b73b049035eaa1d29f1e8a9106210ec2de6c84810d53980a8c93ebd9d0aa66164629a8a4cf4924cb3d4f756fa1323981ad494930f5f496ddb256fb8c61bac93d78221695ac83559d7c36460234d4f686379516e47562018b38e75da2ae9370560a355b187457d270a85a09a2d2bc8d945e3bacf80a378f7544c81cbf129b36702a04bf3bca3d926b22abaf21278aa1e9b922a2791f7c76e0ca0e8608cb392043401695974a543a16dcda6f7d627481c3548bbbc567ae24ef88a1dd73802ef1809ad215909f1d31f4febe1b38862c5a98c62a7f09bfe279f02ea2f2851ff1f7b7542e49523d5ceef5bd087261db6deef7c8b764db2d9f99d002c970180423b9ae3e32a3333bfcda07ad3f451406b2cd1f7628f0940d902e971e73337f1fe1798f176cddf26dcbdad46a904658750e8a9f23f37f15ab0aa89c6fe5e9685dfee21265fc43ce7e9236ca1060f27773d326c28b887c239a0901fd830826b241e804e44819c7986445f93dd69254bbbdbcee25c6eb82c02cf3da954ecb44dca7155d8e616095c1318ab2a37060a961d043af26ca99f0b287b4793c8be4ad9f9b14e790e4fbf5e5d7d8222181f040a19e9669b6c31796564d9cd06d586dd26a2072328f6e37334622516667baa4b9de8d10d64feef2f0d9a0ea103b4436b6c5b2e4ed369b105708a1a4212e5670599d05996356ec3d45ca1b7c8885f809ba235e6889801d1d74a475b00bffaeb06c144c1b74b54d647f83a2e79231ea4a3cab9a67a3bc9bcade17fd0698f5432d4abf0ff57af089cf9043d015d8cb792dd74ddc42497edbdacde8a0f89e1dcc3a63821149611bcd937079fb3c2815d371442c523bf9edfd8018b21e3beba11c0d992ce340bad350ccaac4ec0c4085d1c27c355623c3344f6f90520951cf07e4c42ae60ed0a70ac7aaa18bc5d86874fa6bfd1b1c99811758d13f9d45dd51f562d1e6e27491ab2f360be06b57d9636b08ef92ff351eec73fc2e201aae201d78b76210a526be1690bb1b3f4d8da1d6ab3fd753dc79b390f0449e3ecb07335542d6f367de4064dea6594d9966852894eb2cdc8924d625dcb37d81d4901e5593656057872ca7e02bee0bc8e2dc42aaaf84a17c33fc334dac1f8752f51e90d4dc80fff582b2d7f4f069d71ac49e0a6706b79835b25aa0f7bcdf2ec311dda0cf0b95d3eb8fa2bbbb4a123630a5fb784ac8a0e73c4277a5caf79f4e60c6bc76d543d54518954aef1f5b7006fe2416424cd2fa144f8cb90e6cdfc2402ecf1890c6e0bb16181ae133e0b2e727ce753b5cb1fe2eedce2c88e4f0f30cf71b79202e0c9278d5fce360ee335c0c9fc504c9a647dad50d898438ca7975e348fd9454a1511749fd5d9b50ac1334b35f8eee4d0e78b55c440c3eb7ca743c77f140ec60c84045471bd939342018ea5b8a3550c67f807fd127848302f33805b3925f23614eb74a16eb7d8e27cb3fecafcb13d8222ceeb2fbc332c1a79eea6f9a154f1f153db9025a395b5ab11d098d9b12882c95f8a11020c7a6cb45a7c52b9b8a3e2376322b955d27f1d2b7f4145e991c649d3d5a3954f39f9e1ede0b453b673faae52bab743a776143509e931a7034f3cde4799409072e2f81c43fa282dbf73ae516112cdb4226275efe8cae895d5991e072af2e698259d8fd65e7338d5f9eb1e5a72623fadfba6951404dd2460cb0a07785645c561265fa2a1935ace811599ca877230581f8e6e2a6b67779755cd6bfe3c28050f1d6e90c7982f1846f478412ffd0f79ecd809a207ef23d98617ef422a2dcb23920c54fa308e455cdb130433cb9d296a3c185d2a31e6707949e573bcf82ca8b4ab21243067e6cb336b7b3e8ddeb2e86424a677a5dd3e7e855b57b1ab5448cacb7145442318d27c464ae09c239414333d94de3f7242f850baa766b84d91394a89ed716b239b126a8edd0c7cc1af0f4ab82ed9eb55b16bab6ce37334730128727c64b08dbf3954f93ec3f3a0787e8dc754e7089f723a2349c24a2fcb301ff7310882392da6bd9b99f845b687c2ca3be236e29ff6635589011927d9f85cf67d11f60fc9bb6f6bbc8f608c9e55b2167240c39a02b678e8f64f85508582857b0cec96fe88c0d366f5fb4d449479cf58efc634731acfd01175ac6e237466f42882b2da99cfc6e685cf7d72e8b7e661f9bc30acedba9ab3c9679d29929bdd018418378ee7ea6935c374731711a81903953d77bdc61fc1fa091df08d67b6b0367bc283d0ef796bb769c8ba25c822d6c6ba1b554fd0c5b701b7ac147ed5f0994078a17b2c4492f1b7bb7227843a03a0de40c84e36fd8edf23fc7d8e1e8da8082dff313219a45e961e81cce59912dd148964f27c4d0d8a542375e465cad69ca4c8fb48ed5265ea1419deee7ec61503e76e13575b53c1d80badc3e91adb3d2f484e0b9e1085cb32d9ef44436ab66dde4cf30a4938c93ab63fcfa575a6c1088fed91905d0c80530ce4af942cf178b310f830d6dd1eba4a20eb36c24ec0e4e31a2d98d783e1adcd99b85ea770e8e4431c60854f9be5f28795765cfb89aca2d3b4c1edda"}]}, 0x1100}, 0x1, 0x0, 0x0, 0x8010}, 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 232.137987ms ago: executing program 6 (id=4122): r0 = socket$can_bcm(0x1d, 0x2, 0x2) close_range(r0, r0, 0x0) io_setup(0x8, &(0x7f0000000240)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmsg$inet(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)}, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) io_submit(r1, 0x80101, &(0x7f0000000100)=[&(0x7f00000002c0)={0x400000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000200)="05", 0x1}]) 20.94942ms ago: executing program 8 (id=4123): pipe2(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000071122000000000009500000000200000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x80, 0x7a5, &(0x7f0000000f80)="$eJzs3c9rXNUeAPDvnfxq0r6XPHjwXl0FBA2UTkyNrYKLigsRLBR0bRsm01AzyZTMpDQh0BYR3AgqLgTddO2PunPrj63+Fy6kpWparLiQkTuZSSbNTJq0mZlgPh+4uefcc2/O+c65P87MvcwEcGCNpn8yEUcj4v0kYri2PImIvmqqN+L02nr3V1dy6ZREpfL6r0l1nXurK7lo2CZ1uJb5f0R8907EsczWektLy7NThUJ+oZYfL89dGi8tLR+/ODc1k5/Jz5+cmJw8ceq5Uyf3Ltbff1w+cvuDV57+8vSfb//v5nvfJ3E6jtTKGuPYK6MxWntN+tKXcJOX97qyLku63QAeSXpo9qwd5XE0hqOnmmphsJMtAwDa5WpEVACAAyZx/QeAA6b+OcC91ZVcferuJxKddeeliDi0Fn/9/uZaSW/tnt2h6n3QoXvJpjsjSUSM7EH9oxHx6ddvfp5O0ab7kADNXLseEedHRree/5Mtzyzs1jPbFVYGqrPRBxY7/0HnfJOOf55vNv7LrI9/osn4Z6DJsfsoHn78Z27tQTUtpeO/FxuebbvfEH/NSE8t96/qmK8vuXCxkE/Pbf+OiLHoG0jzE9VVmz8FNXb3r7ut6m8c//324VufpfWn8401Mrd6BzZvMz1VnnrcuOvuXI94ordZ/Ml6/yctxr9nd1jHqy+8+0mrsjT+NN76tDX+9qrciHiqaf9v9GWy7fOJ49XdYby+UzTx1U8fD7Wqf6P/B6rztP76e4FOSPt/aPv4R5LG5zVLu6/jhxvD37Yqa9z/m8fffP/vT96opvtry65MlcsLExH9yWtbl5/Y2Laer6+fxj/2ZPPjv9X+n6k9G3t+Pbe93tu/fFH7V03jr7rWKv72SuOf3lX/b5Oo1LZ5oOjm/dmeVvXvrP8nq6mx2pKdnP8e0tLH2JsBAAAAAAAAAAAAAAAAAAAAAAAAYPcyEXEkkkx2PZ3JZLNrv+H93xjKFIql8rELxcX56aj+VvZI9GXqX3U53PB9qBO178Ov5088kH82Iv4TER8NDFbz2VyxMN3t4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5vDm3/+/ms6y2bWynwe63ToAoG0OdbsBAEDHuf4DwMGzu+v/YNvaAQB0zq7f/1eS9jQEAOiYHV//z7e3HQBA57j/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJudPXMmnSp/rK7k0vz05aXF2eLl49P50mx2bjGXzRUXLmVnisWZQj6bK861/EfX1maFYvHSZMwvXhkv50vl8dLS8rm54uJ8+dzFuamZ/Ll8X8ciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdKy0tz04VCvkFiW0Tg/ujGfsm0Rv7ohn/+ER/12pvPEsMdu8EBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDP/R0AAP//aHclQg==") setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x112, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @private=0xa010100}, 0x1, 0x0, 0x2}}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00'}, 0x10) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x48, 0x0, 0x28) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) read$qrtrtun(r3, 0x0, 0xeffd) 0s ago: executing program 0 (id=4124): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x57e, 0x200e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x81, 0x0, 0x1}}}}}]}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r1}, 0x18) kcmp(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) kernel console output (not intermixed with test programs): k: 8 bytes leftover after parsing attributes in process `syz.0.3490'. [ 303.188917][T14138] loop4: detected capacity change from 0 to 128 [ 303.206317][T14138] ext4 filesystem being mounted at /86/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 303.238664][T14139] loop0: detected capacity change from 0 to 128 [ 303.245026][T14138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3492'. [ 303.269002][T14139] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 303.276975][T14139] FAT-fs (loop0): Filesystem has been set read-only [ 303.287288][T14139] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 303.295536][T14139] syz.0.3490: attempt to access beyond end of device [ 303.295536][T14139] loop0: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 303.311831][T14138] EXT4-fs (loop4): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 303.365513][T14150] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 303.375211][T14153] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3498'. [ 303.492095][T14158] loop4: detected capacity change from 0 to 128 [ 303.502778][T14158] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 303.510729][T14158] FAT-fs (loop4): Filesystem has been set read-only [ 303.517716][T14158] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 303.527056][T14158] syz.4.3496: attempt to access beyond end of device [ 303.527056][T14158] loop4: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 303.597811][T14159] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3498'. [ 304.043822][T14163] loop4: detected capacity change from 0 to 2048 [ 304.050796][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 304.050810][ T29] audit: type=1326 audit(1752993009.407:7092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14164 comm="syz.1.3501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6065c3e9a9 code=0x7ffc0000 [ 304.086298][T14165] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3501'. [ 304.109214][ T29] audit: type=1326 audit(1752993009.435:7093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14164 comm="syz.1.3501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f6065c3e9a9 code=0x7ffc0000 [ 304.133004][ T29] audit: type=1326 audit(1752993009.435:7094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14164 comm="syz.1.3501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6065c3e9a9 code=0x7ffc0000 [ 304.156536][ T29] audit: type=1326 audit(1752993009.435:7095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14164 comm="syz.1.3501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6065c3e9a9 code=0x7ffc0000 [ 304.180138][ T29] audit: type=1326 audit(1752993009.435:7096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14164 comm="syz.1.3501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6065c3e9a9 code=0x7ffc0000 [ 304.203711][ T29] audit: type=1326 audit(1752993009.435:7097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14164 comm="syz.1.3501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6065c3e9a9 code=0x7ffc0000 [ 304.227287][ T29] audit: type=1326 audit(1752993009.435:7098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14164 comm="syz.1.3501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6065c3e9a9 code=0x7ffc0000 [ 304.250842][ T29] audit: type=1326 audit(1752993009.435:7099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14164 comm="syz.1.3501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6065c3e9a9 code=0x7ffc0000 [ 304.271626][T14170] loop1: detected capacity change from 0 to 512 [ 304.274383][ T29] audit: type=1326 audit(1752993009.435:7100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14164 comm="syz.1.3501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6065c3e9a9 code=0x7ffc0000 [ 304.304252][ T29] audit: type=1326 audit(1752993009.435:7101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14164 comm="syz.1.3501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6065c3e9a9 code=0x7ffc0000 [ 304.313404][T14170] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 304.393638][T14170] EXT4-fs (loop1): mount failed [ 304.453890][T14177] loop2: detected capacity change from 0 to 512 [ 304.477655][T14177] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843e028, mo2=0002] [ 304.488026][T14180] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 304.500742][T14177] System zones: 1-12 [ 304.512094][T14177] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3503: invalid indirect mapped block 8 (level 2) [ 304.545425][T14178] loop6: detected capacity change from 0 to 2048 [ 304.558496][T14177] EXT4-fs (loop2): Remounting filesystem read-only [ 304.587473][T14177] EXT4-fs (loop2): 1 truncate cleaned up [ 304.635755][T14187] loop1: detected capacity change from 0 to 128 [ 304.647716][T14187] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 304.655746][T14187] FAT-fs (loop1): Filesystem has been set read-only [ 304.664441][T14187] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 304.671828][T14178] Alternate GPT is invalid, using primary GPT. [ 304.673781][T14187] syz.1.3507: attempt to access beyond end of device [ 304.673781][T14187] loop1: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 304.678598][T14178] loop6: p1 p2 p3 [ 304.700938][T14189] loop2: detected capacity change from 0 to 128 [ 304.711603][T14189] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 304.719619][T14189] FAT-fs (loop2): Filesystem has been set read-only [ 304.720221][T14178] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 304.728103][T14189] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 304.741960][T14189] syz.2.3508: attempt to access beyond end of device [ 304.741960][T14189] loop2: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 304.776457][T14178] loop6: detected capacity change from 0 to 1024 [ 304.899914][T14197] loop6: detected capacity change from 0 to 128 [ 304.938732][T14199] loop6: detected capacity change from 0 to 512 [ 304.949665][T14201] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 304.952740][T14199] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843e028, mo2=0002] [ 304.965500][T14199] System zones: 1-12 [ 304.969801][T14199] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3512: invalid indirect mapped block 8 (level 2) [ 304.983486][T14199] EXT4-fs (loop6): Remounting filesystem read-only [ 304.990547][T14199] EXT4-fs (loop6): 1 truncate cleaned up [ 305.071965][T14210] loop4: detected capacity change from 0 to 1024 [ 305.078935][T14210] ext4: Unknown parameter 'fowner<18446744073709551615' [ 305.354102][T14227] loop0: detected capacity change from 0 to 1024 [ 305.360682][T14227] ext4: Unknown parameter 'fowner<18446744073709551615' [ 305.370553][T14227] FAULT_INJECTION: forcing a failure. [ 305.370553][T14227] name failslab, interval 1, probability 0, space 0, times 0 [ 305.383432][T14227] CPU: 1 UID: 0 PID: 14227 Comm: +}[@ Not tainted 6.16.0-rc6-syzkaller-00279-gbf61759db409 #0 PREEMPT(voluntary) [ 305.383485][T14227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 305.383592][T14227] Call Trace: [ 305.383601][T14227] [ 305.383612][T14227] __dump_stack+0x1d/0x30 [ 305.383636][T14227] dump_stack_lvl+0xe8/0x140 [ 305.383654][T14227] dump_stack+0x15/0x1b [ 305.383670][T14227] should_fail_ex+0x265/0x280 [ 305.383779][T14227] should_failslab+0x8c/0xb0 [ 305.383800][T14227] __kmalloc_noprof+0xa5/0x3e0 [ 305.383928][T14227] ? copy_splice_read+0xc2/0x5f0 [ 305.383965][T14227] copy_splice_read+0xc2/0x5f0 [ 305.384048][T14227] sock_splice_read+0xa5/0xb0 [ 305.384076][T14227] ? __pfx_sock_splice_read+0x10/0x10 [ 305.384106][T14227] splice_file_to_pipe+0x241/0x3a0 [ 305.384142][T14227] do_splice+0xc4d/0x10b0 [ 305.384190][T14227] ? proc_fail_nth_write+0x12d/0x160 [ 305.384341][T14227] ? __rcu_read_unlock+0x4f/0x70 [ 305.384362][T14227] ? __fget_files+0x184/0x1c0 [ 305.384383][T14227] __se_sys_splice+0x26c/0x3a0 [ 305.384428][T14227] __x64_sys_splice+0x78/0x90 [ 305.384455][T14227] x64_sys_call+0xb0a/0x2fb0 [ 305.384559][T14227] do_syscall_64+0xd2/0x200 [ 305.384576][T14227] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 305.384609][T14227] ? clear_bhb_loop+0x40/0x90 [ 305.384640][T14227] ? clear_bhb_loop+0x40/0x90 [ 305.384667][T14227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.384702][T14227] RIP: 0033:0x7fa46d76e9a9 [ 305.384720][T14227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.384743][T14227] RSP: 002b:00007fa46bdd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 305.384767][T14227] RAX: ffffffffffffffda RBX: 00007fa46d995fa0 RCX: 00007fa46d76e9a9 [ 305.384779][T14227] RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000000000000007 [ 305.384790][T14227] RBP: 00007fa46bdd7090 R08: 0000000000000f3a R09: 0000000000000000 [ 305.384801][T14227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.384886][T14227] R13: 0000000000000000 R14: 00007fa46d995fa0 R15: 00007ffdd8590ff8 [ 305.384903][T14227] [ 305.752736][T14236] loop0: detected capacity change from 0 to 128 [ 305.762983][T14234] loop2: detected capacity change from 0 to 2048 [ 305.820716][T14234] Alternate GPT is invalid, using primary GPT. [ 305.827240][T14234] loop2: p1 p2 p3 [ 305.855661][T14234] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 305.872552][T14234] loop2: detected capacity change from 0 to 1037 [ 305.900017][T14240] loop1: detected capacity change from 0 to 2048 [ 305.917217][T14240] EXT4-fs mount: 54 callbacks suppressed [ 305.917239][T14240] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.964369][T14245] loop0: detected capacity change from 0 to 128 [ 305.976283][T14245] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 305.984227][T14245] FAT-fs (loop0): Filesystem has been set read-only [ 305.990974][T14245] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 306.001759][T14245] syz.0.3526: attempt to access beyond end of device [ 306.001759][T14245] loop0: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 306.046047][T14250] loop4: detected capacity change from 0 to 512 [ 306.053925][T14250] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843e028, mo2=0002] [ 306.063751][T14250] System zones: 1-12 [ 306.063991][T14251] loop2: detected capacity change from 0 to 512 [ 306.074188][T14250] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3527: invalid indirect mapped block 8 (level 2) [ 306.089467][T14251] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 306.091172][T14250] EXT4-fs (loop4): Remounting filesystem read-only [ 306.104490][T14253] netlink: 'syz.0.3529': attribute type 1 has an invalid length. [ 306.107745][T14250] EXT4-fs (loop4): 1 truncate cleaned up [ 306.120324][T14250] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.129969][T14251] EXT4-fs (loop2): 1 orphan inode deleted [ 306.138283][T14251] EXT4-fs (loop2): 1 truncate cleaned up [ 306.141974][T14253] 8021q: adding VLAN 0 to HW filter on device bond1 [ 306.156977][T14251] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.177549][T12511] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.206156][T14251] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 306.212929][T14251] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 306.220671][T14251] vhci_hcd vhci_hcd.0: Device attached [ 306.267724][T14261] vhci_hcd: connection closed [ 306.275513][ T110] vhci_hcd: stop threads [ 306.284686][ T110] vhci_hcd: release socket [ 306.289187][ T110] vhci_hcd: disconnect device [ 306.418766][T14269] loop6: detected capacity change from 0 to 512 [ 306.426843][T14269] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 306.538063][T14269] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec028, mo2=0002] [ 306.546257][T14269] System zones: 1-12 [ 306.551964][T14269] EXT4-fs (loop6): 1 truncate cleaned up [ 306.558915][T14269] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.592792][T14271] loop0: detected capacity change from 0 to 128 [ 306.862455][T11729] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.950157][T12161] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.306355][T14279] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 307.409866][T14290] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 307.420398][T14286] loop0: detected capacity change from 0 to 2048 [ 307.429865][T14293] __nla_validate_parse: 5 callbacks suppressed [ 307.429884][T14293] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3542'. [ 307.521901][T14297] loop4: detected capacity change from 0 to 512 [ 307.538785][T14299] loop1: detected capacity change from 0 to 764 [ 307.557726][T14297] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843e028, mo2=0002] [ 307.575355][T14299] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 307.583524][T14297] System zones: 1-12 [ 307.592529][T14297] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3542: invalid indirect mapped block 8 (level 2) [ 307.625067][T14297] EXT4-fs (loop4): Remounting filesystem read-only [ 307.636278][T14297] EXT4-fs (loop4): 1 truncate cleaned up [ 307.643843][T14302] netlink: 288 bytes leftover after parsing attributes in process `GPL'. [ 307.652697][T14297] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.669518][T14302] loop1: detected capacity change from 0 to 512 [ 307.683953][T14302] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 307.709181][T12511] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.718536][T14302] EXT4-fs (loop1): mount failed [ 307.796774][T14310] loop4: detected capacity change from 0 to 1024 [ 307.816817][T14310] ext4: Unknown parameter 'noacl' [ 307.896247][T11989] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.477390][T14330] loop6: detected capacity change from 0 to 764 [ 308.488569][T14330] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 308.508122][T14328] loop2: detected capacity change from 0 to 2048 [ 308.572207][T14328] Alternate GPT is invalid, using primary GPT. [ 308.578620][T14328] loop2: p1 p2 p3 [ 308.635096][T14328] loop2: detected capacity change from 0 to 1037 [ 308.841638][T14336] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3556'. [ 309.458406][T14342] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3556'. [ 309.582463][T14345] xt_l2tp: v2 sid > 0xffff: 117440512 [ 309.875840][T14361] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 309.900955][ T29] kauditd_printk_skb: 286 callbacks suppressed [ 309.901028][ T29] audit: type=1326 audit(1752993014.807:7386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14359 comm="syz.1.3563" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6065c3e9a9 code=0x0 [ 309.930615][T14360] loop4: detected capacity change from 0 to 8192 [ 309.946171][T14360] loop4: p2 p3 p4 [ 309.950019][T14360] loop4: p2 start 2936012800 is beyond EOD, truncated [ 309.956914][T14360] loop4: p3 start 1912602624 is beyond EOD, truncated [ 309.963788][T14360] loop4: p4 size 656640 extends beyond EOD, truncated [ 310.002476][ T29] audit: type=1400 audit(1752993014.908:7387): avc: denied { read write } for pid=14366 comm="syz.4.3565" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 310.026972][ T29] audit: type=1400 audit(1752993014.908:7388): avc: denied { open } for pid=14366 comm="syz.4.3565" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 310.051130][ T29] audit: type=1400 audit(1752993014.908:7389): avc: denied { ioctl } for pid=14366 comm="syz.4.3565" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 310.542092][ T29] audit: type=1400 audit(1752993015.398:7390): avc: denied { create } for pid=14373 comm="syz.6.3567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 310.661450][ T29] audit: type=1400 audit(1752993015.425:7391): avc: denied { create } for pid=14373 comm="syz.6.3567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 310.681189][ T29] audit: type=1400 audit(1752993015.481:7392): avc: denied { setopt } for pid=14373 comm="syz.6.3567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 310.700840][ T29] audit: type=1400 audit(1752993015.481:7393): avc: denied { write } for pid=14373 comm="syz.6.3567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 310.744531][T14377] xt_l2tp: v2 sid > 0xffff: 117440512 [ 310.823917][T14386] netlink: 288 bytes leftover after parsing attributes in process `GPL'. [ 310.850684][T14386] loop1: detected capacity change from 0 to 512 [ 310.882938][T14386] Quota error (device loop1): v2_read_file_info: Can't read info structure [ 310.901205][T14386] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 310.931579][T14395] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3573'. [ 310.931584][T14386] EXT4-fs (loop1): mount failed [ 311.179238][T14403] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3573'. [ 311.194480][ T29] audit: type=1326 audit(1752993016.007:7394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14399 comm="syz.2.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c1c8e9a9 code=0x7ffc0000 [ 311.748962][T14405] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3575'. [ 311.758232][T14405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3575'. [ 311.955633][T14408] loop1: detected capacity change from 0 to 1024 [ 312.039503][T14408] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.084315][T14416] loop6: detected capacity change from 0 to 512 [ 312.106734][T12161] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.130095][T14416] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.174775][T14420] xt_l2tp: v2 sid > 0xffff: 117440512 [ 312.184916][T14416] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.322185][T14431] loop0: detected capacity change from 0 to 2048 [ 312.374977][T14431] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 312.426780][T14438] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3587'. [ 312.459688][T14431] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 23 vs 150994969 free clusters [ 312.496023][T14416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.527126][T14431] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 312.539535][T14431] EXT4-fs (loop0): This should not happen!! Data will be lost [ 312.539535][T14431] [ 312.549362][T14431] EXT4-fs (loop0): Total free blocks count 0 [ 312.555438][T14431] EXT4-fs (loop0): Free/Dirty block details [ 312.561413][T14431] EXT4-fs (loop0): free_blocks=2415919136 [ 312.567157][T14431] EXT4-fs (loop0): dirty_blocks=16 [ 312.572338][T14431] EXT4-fs (loop0): Block reservation details [ 312.578375][T14431] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 312.590515][T14416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.674398][ T4864] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 313.103903][T14457] loop2: detected capacity change from 0 to 2048 [ 313.115465][T14459] __nla_validate_parse: 8 callbacks suppressed [ 313.115480][T14459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3593'. [ 313.172873][T14457] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.193520][T14462] loop0: detected capacity change from 0 to 128 [ 313.215575][T14462] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 313.223574][T14462] FAT-fs (loop0): Filesystem has been set read-only [ 313.239815][T14465] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 313.283470][T14462] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 313.309445][T14462] syz.0.3593: attempt to access beyond end of device [ 313.309445][T14462] loop0: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 313.522942][T14479] xt_l2tp: v2 sid > 0xffff: 117440512 [ 313.698517][T11729] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.902583][T14496] loop1: detected capacity change from 0 to 164 [ 313.921276][T14496] Unable to read rock-ridge attributes [ 313.959728][T14496] netlink: 'syz.1.3604': attribute type 1 has an invalid length. [ 314.008104][T14500] loop0: detected capacity change from 0 to 764 [ 314.018721][T14500] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 314.048973][T14502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3607'. [ 314.087153][T14502] loop2: detected capacity change from 0 to 128 [ 314.104868][T14502] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 314.112886][T14502] FAT-fs (loop2): Filesystem has been set read-only [ 314.129540][T14502] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 314.143004][T14510] mmap: syz.1.3610 (14510): VmData 167473152 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 314.155840][T14502] syz.2.3607: attempt to access beyond end of device [ 314.155840][T14502] loop2: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 314.378676][T14533] loop0: detected capacity change from 0 to 764 [ 314.392755][T14533] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 314.448054][T14536] netlink: 'syz.0.3620': attribute type 1 has an invalid length. [ 314.514242][T14536] 8021q: adding VLAN 0 to HW filter on device bond2 [ 314.519906][T14542] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 314.536858][T14539] loop4: detected capacity change from 0 to 128 [ 314.557409][T14540] bond2 (unregistering): Released all slaves [ 314.582703][T14539] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 314.590727][T14539] FAT-fs (loop4): Filesystem has been set read-only [ 314.597696][T14536] loop0: detected capacity change from 0 to 512 [ 314.598235][T14539] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 314.617286][T14539] syz.4.3621: attempt to access beyond end of device [ 314.617286][T14539] loop4: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 314.618321][T14546] xt_l2tp: v2 sid > 0xffff: 117440512 [ 314.639277][T14536] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843e028, mo2=0002] [ 314.647421][T14536] System zones: 1-12 [ 314.656342][T14536] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3620: invalid indirect mapped block 8 (level 2) [ 314.689011][T14536] EXT4-fs (loop0): Remounting filesystem read-only [ 314.699083][T14536] EXT4-fs (loop0): 1 truncate cleaned up [ 314.708919][T14536] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.716205][T14553] netlink: 268 bytes leftover after parsing attributes in process `syz.4.3625'. [ 314.730419][T14553] unsupported nla_type 65024 [ 314.741540][T14553] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3625'. [ 314.751768][T14553] netlink: 'syz.4.3625': attribute type 2 has an invalid length. [ 314.759587][T14553] netlink: 'syz.4.3625': attribute type 9 has an invalid length. [ 314.767362][T14553] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3625'. [ 314.790956][T12778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.829458][T14562] loop4: detected capacity change from 0 to 764 [ 314.836241][T14564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.846482][T14564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.855478][T14564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.868749][T14562] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 314.869364][T14564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.905798][T14564] loop0: detected capacity change from 0 to 1024 [ 314.912813][T14564] EXT4-fs: inline encryption not supported [ 314.920228][T14564] EXT4-fs: Ignoring removed bh option [ 314.925772][T14570] loop4: detected capacity change from 0 to 128 [ 314.935309][T14570] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 314.942628][T14564] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.943318][T14570] FAT-fs (loop4): Filesystem has been set read-only [ 314.963613][T14570] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 314.971697][T14570] syz.4.3632: attempt to access beyond end of device [ 314.971697][T14570] loop4: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 315.022011][T14575] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 315.083783][T14582] loop2: detected capacity change from 0 to 128 [ 315.096831][T14582] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 315.104900][T14582] FAT-fs (loop2): Filesystem has been set read-only [ 315.113024][T14582] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 315.123206][T14582] syz.2.3635: attempt to access beyond end of device [ 315.123206][T14582] loop2: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 315.217559][T14589] netlink: 'syz.2.3638': attribute type 1 has an invalid length. [ 315.235168][T14589] 8021q: adding VLAN 0 to HW filter on device bond4 [ 315.247139][T14589] bond4 (unregistering): Released all slaves [ 315.303193][T14589] loop2: detected capacity change from 0 to 512 [ 315.313036][T14589] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843e028, mo2=0002] [ 315.321319][T14589] System zones: 1-12 [ 315.325712][T14589] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3638: invalid indirect mapped block 8 (level 2) [ 315.344059][T14592] loop4: detected capacity change from 0 to 8192 [ 315.351664][T14589] EXT4-fs (loop2): Remounting filesystem read-only [ 315.358330][T14589] EXT4-fs (loop2): 1 truncate cleaned up [ 315.362657][T11989] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.365600][T14589] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.397849][T14592] loop4: p2 p3 p4 [ 315.403110][T14592] loop4: p2 start 2936012800 is beyond EOD, truncated [ 315.410061][T14592] loop4: p3 start 1912602624 is beyond EOD, truncated [ 315.417093][T14592] loop4: p4 size 656640 extends beyond EOD, truncated [ 315.424671][T11729] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.907956][T12778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.062582][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 316.062600][ T29] audit: type=1400 audit(1752993020.493:7513): avc: denied { execute } for pid=14623 comm="syz.0.3649" name="file0" dev="tmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 316.097940][T14626] netlink: 'syz.1.3651': attribute type 1 has an invalid length. [ 316.142028][T14631] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 316.151568][T14626] 8021q: adding VLAN 0 to HW filter on device bond5 [ 316.181540][T14632] bond5 (unregistering): Released all slaves [ 316.224996][T14626] loop1: detected capacity change from 0 to 512 [ 316.238023][T14633] loop0: detected capacity change from 0 to 2048 [ 316.245299][T14626] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843e028, mo2=0002] [ 316.254658][T14626] System zones: 1-12 [ 316.259735][T14626] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3651: invalid indirect mapped block 8 (level 2) [ 316.274848][T14626] EXT4-fs (loop1): Remounting filesystem read-only [ 316.281569][T14626] EXT4-fs (loop1): 1 truncate cleaned up [ 316.288036][T14626] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.335656][T12161] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.398974][T14639] loop6: detected capacity change from 0 to 8192 [ 316.442756][T14645] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3656'. [ 316.475896][T14639] loop6: p2 p3 p4 [ 316.481413][T14639] loop6: p2 start 2936012800 is beyond EOD, truncated [ 316.488251][T14639] loop6: p3 start 1912602624 is beyond EOD, truncated [ 316.495095][T14639] loop6: p4 size 656640 extends beyond EOD, truncated [ 316.512324][T14647] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3657'. [ 316.521800][T14647] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 316.814185][T14668] xt_l2tp: v2 sid > 0xffff: 117440512 [ 317.108627][T14675] netlink: 'syz.6.3667': attribute type 1 has an invalid length. [ 317.591198][T14675] 8021q: adding VLAN 0 to HW filter on device bond2 [ 317.643865][T14682] loop4: detected capacity change from 0 to 128 [ 317.723457][T14682] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 317.731425][T14682] FAT-fs (loop4): Filesystem has been set read-only [ 317.748491][T14688] loop6: detected capacity change from 0 to 764 [ 317.753956][T14682] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 317.764728][T14688] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 317.765842][T14682] syz.4.3669: attempt to access beyond end of device [ 317.765842][T14682] loop4: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 317.794119][T14690] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3673'. [ 317.815074][T14690] loop0: detected capacity change from 0 to 512 [ 317.832971][T14696] loop6: detected capacity change from 0 to 164 [ 317.841637][T14690] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843e028, mo2=0002] [ 317.857165][T14696] Unable to read rock-ridge attributes [ 317.862380][ T29] audit: type=1400 audit(1752993022.154:7514): avc: denied { relabelfrom } for pid=14698 comm="syz.2.3677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 317.882576][T14690] System zones: 1-12 [ 317.882928][T14690] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3673: invalid indirect mapped block 8 (level 2) [ 317.883056][T14690] EXT4-fs (loop0): Remounting filesystem read-only [ 317.883178][T14690] EXT4-fs (loop0): 1 truncate cleaned up [ 317.883556][T14690] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.887257][ T29] audit: type=1400 audit(1752993022.154:7515): avc: denied { relabelto } for pid=14698 comm="syz.2.3677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 317.945642][ T29] audit: type=1326 audit(1752993022.200:7516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14695 comm="syz.6.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4e52e9a9 code=0x7ffc0000 [ 317.969965][ T29] audit: type=1326 audit(1752993022.200:7517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14695 comm="syz.6.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4e52e9a9 code=0x7ffc0000 [ 317.993508][ T29] audit: type=1326 audit(1752993022.200:7518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14695 comm="syz.6.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdc4e52e9a9 code=0x7ffc0000 [ 318.017650][ T29] audit: type=1326 audit(1752993022.200:7519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14695 comm="syz.6.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4e52e9a9 code=0x7ffc0000 [ 318.041168][ T29] audit: type=1326 audit(1752993022.200:7520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14695 comm="syz.6.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4e52e9a9 code=0x7ffc0000 [ 318.065431][ T29] audit: type=1326 audit(1752993022.200:7521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14695 comm="syz.6.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fdc4e52e9a9 code=0x7ffc0000 [ 318.089100][ T29] audit: type=1326 audit(1752993022.200:7522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14695 comm="syz.6.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4e52e9a9 code=0x7ffc0000 [ 318.119282][T12778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.143970][T14708] loop4: detected capacity change from 0 to 2048 [ 318.191633][T14708] Alternate GPT is invalid, using primary GPT. [ 318.198009][T14708] loop4: p1 p2 p3 [ 318.201249][T14715] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3679'. [ 318.222024][T14716] loop6: detected capacity change from 0 to 512 [ 318.229929][T14716] EXT4-fs: Ignoring removed oldalloc option [ 318.276535][T14716] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.3681: Parent and EA inode have the same ino 15 [ 318.290714][T14716] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.3681: Parent and EA inode have the same ino 15 [ 318.303647][T14716] EXT4-fs (loop6): 1 orphan inode deleted [ 318.311293][T14716] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.340732][T14701] loop4: detected capacity change from 0 to 1024 [ 318.556697][T14730] loop1: detected capacity change from 0 to 764 [ 318.596524][T14730] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 318.641358][T14732] loop4: detected capacity change from 0 to 128 [ 318.704645][T14732] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 318.712672][T14732] FAT-fs (loop4): Filesystem has been set read-only [ 318.756457][T14732] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 318.798138][T14732] syz.4.3686: attempt to access beyond end of device [ 318.798138][T14732] loop4: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 318.936277][T14743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3689'. [ 318.954346][T11989] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.978294][T14746] loop4: detected capacity change from 0 to 164 [ 318.988993][T14744] loop1: detected capacity change from 0 to 128 [ 318.996941][T14747] loop2: detected capacity change from 0 to 128 [ 319.004512][T14744] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 319.013915][T14746] Unable to read rock-ridge attributes [ 319.026437][T14743] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 319.034393][T14743] FAT-fs (loop2): Filesystem has been set read-only [ 319.041773][T14743] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 319.057731][T14743] syz.2.3689: attempt to access beyond end of device [ 319.057731][T14743] loop2: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 319.065813][T14744] FAT-fs (loop1): FAT read failed (blocknr 128) [ 319.127181][T14755] loop4: detected capacity change from 0 to 2048 [ 319.149691][T14755] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.197227][T14763] loop2: detected capacity change from 0 to 512 [ 319.209557][T14765] SELinux: syz.0.3698 (14765) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 319.226561][T14763] EXT4-fs (loop2): 1 orphan inode deleted [ 319.232846][T14763] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.245162][T14769] netlink: 'syz.0.3699': attribute type 1 has an invalid length. [ 319.246406][ T271] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1 [ 319.263109][T14769] 8021q: adding VLAN 0 to HW filter on device bond2 [ 319.264576][T14763] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.522567][T14782] loop0: detected capacity change from 0 to 512 [ 319.534642][T14782] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 319.579658][T14782] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec028, mo2=0002] [ 319.587662][T14782] System zones: 1-12 [ 319.592666][T14782] EXT4-fs (loop0): 1 truncate cleaned up [ 319.599266][T14782] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.807851][T14787] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3706'. [ 321.019461][T14550] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 321.041739][ T271] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 321.061063][T12511] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.074209][ T51] batadv1: left allmulticast mode [ 321.079312][ T51] batadv1: left promiscuous mode [ 321.084390][ T51] bridge0: port 4(batadv1) entered disabled state [ 321.176145][ T51] bridge_slave_1: left allmulticast mode [ 321.181971][ T51] bridge_slave_1: left promiscuous mode [ 321.187836][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.204171][T11729] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.231510][T14801] loop1: detected capacity change from 0 to 764 [ 321.254949][ T51] bridge_slave_0: left allmulticast mode [ 321.261445][ T51] bridge_slave_0: left promiscuous mode [ 321.267191][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.307452][T14801] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 321.361479][T14805] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3715'. [ 321.423858][T14808] loop1: detected capacity change from 0 to 512 [ 321.435151][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.445837][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.459306][T14808] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.473166][ T51] bond0 (unregistering): Released all slaves [ 321.485025][T14808] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.497657][ T51] bond1 (unregistering): (slave veth5): Releasing active interface [ 321.506612][ T51] bond1 (unregistering): Released all slaves [ 321.524884][ T51] bond2 (unregistering): Released all slaves [ 321.548171][T12161] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.563327][ T51] tipc: Disabling bearer [ 321.568373][ T51] tipc: Left network mode [ 321.574631][ T51] hsr_slave_0: left promiscuous mode [ 321.580316][ T51] hsr_slave_1: left promiscuous mode [ 321.591732][ T51] veth1_macvtap: left promiscuous mode [ 321.598266][ T51] veth0_macvtap: left promiscuous mode [ 321.635367][ T51] pim6reg (unregistering): left allmulticast mode [ 321.957981][T14805] hsr_slave_0 (unregistering): left promiscuous mode [ 321.958546][T12778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.980118][T14813] loop4: detected capacity change from 0 to 512 [ 321.997911][T14813] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c11d, mo2=0002] [ 322.008008][T14817] FAULT_INJECTION: forcing a failure. [ 322.008008][T14817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.021161][T14817] CPU: 0 UID: 0 PID: 14817 Comm: syz.2.3719 Not tainted 6.16.0-rc6-syzkaller-00279-gbf61759db409 #0 PREEMPT(voluntary) [ 322.021262][T14817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 322.021277][T14813] System zones: [ 322.021278][T14817] Call Trace: [ 322.021287][T14817] [ 322.021297][T14817] __dump_stack+0x1d/0x30 [ 322.021323][T14817] dump_stack_lvl+0xe8/0x140 [ 322.021390][T14817] dump_stack+0x15/0x1b [ 322.021415][T14817] should_fail_ex+0x265/0x280 [ 322.021458][T14817] should_fail+0xb/0x20 [ 322.021526][T14817] should_fail_usercopy+0x1a/0x20 [ 322.021636][T14817] strncpy_from_user+0x25/0x230 [ 322.021670][T14817] ? kmem_cache_alloc_noprof+0x186/0x310 [ 322.021705][T14817] ? getname_flags+0x80/0x3b0 [ 322.021736][T14817] getname_flags+0xae/0x3b0 [ 322.021799][T14817] getname_uflags+0x21/0x30 [ 322.021827][T14817] __x64_sys_execveat+0x5d/0x90 [ 322.021935][T14817] x64_sys_call+0x2dae/0x2fb0 [ 322.022044][T14817] do_syscall_64+0xd2/0x200 [ 322.022070][T14817] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 322.022106][T14817] ? clear_bhb_loop+0x40/0x90 [ 322.022135][T14817] ? clear_bhb_loop+0x40/0x90 [ 322.022170][T14817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.022208][T14817] RIP: 0033:0x7f84c1c8e9a9 [ 322.022228][T14817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.022283][T14817] RSP: 002b:00007f84c02ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 322.022310][T14817] RAX: ffffffffffffffda RBX: 00007f84c1eb5fa0 RCX: 00007f84c1c8e9a9 [ 322.022328][T14817] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 322.022345][T14817] RBP: 00007f84c02ef090 R08: 0000000000001000 R09: 0000000000000000 [ 322.022363][T14817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.022380][T14817] R13: 0000000000000000 R14: 00007f84c1eb5fa0 R15: 00007ffdf62dbcb8 [ 322.022406][T14817] [ 322.119890][T14824] loop2: detected capacity change from 0 to 2048 [ 322.125477][T14813] 1-12 [ 322.148215][T14824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.165423][T14813] [ 322.174143][T14827] loop1: detected capacity change from 0 to 128 [ 322.174662][T14813] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.3709: corrupted in-inode xattr: e_value size too large [ 322.227822][T14819] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 322.271327][T14819] FAT-fs (loop1): Filesystem has been set read-only [ 322.278602][T14819] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 322.287037][T14819] syz.1.3717: attempt to access beyond end of device [ 322.287037][T14819] loop1: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 322.296443][T14813] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.3709: couldn't read orphan inode 15 (err -117) [ 322.317812][T14813] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.332876][T14832] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3722'. [ 322.348366][T14813] netlink: 'syz.4.3709': attribute type 10 has an invalid length. [ 322.354175][T14832] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 322.356442][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 322.356459][ T29] audit: type=1400 audit(1752993026.298:7580): avc: denied { create } for pid=14812 comm="syz.4.3709" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 322.371004][T14813] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 322.371524][ T29] audit: type=1400 audit(1752993026.298:7581): avc: denied { read } for pid=14812 comm="syz.4.3709" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 322.485084][ T29] audit: type=1400 audit(1752993026.372:7582): avc: denied { setattr } for pid=14812 comm="syz.4.3709" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 322.534378][T12511] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.554132][T14840] netlink: 288 bytes leftover after parsing attributes in process `GPL'. [ 322.567978][T14840] loop6: detected capacity change from 0 to 512 [ 322.580284][T14843] loop1: detected capacity change from 0 to 128 [ 322.581735][T14844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.597420][T14843] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 322.597576][T14844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.605585][T14843] FAT-fs (loop1): Filesystem has been set read-only [ 322.616783][T14844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.620022][T14843] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 322.632369][T14840] Quota error (device loop6): v2_read_file_info: Can't read info structure [ 322.636196][T14843] syz.1.3728: attempt to access beyond end of device [ 322.636196][T14843] loop1: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 322.646751][T14840] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 322.658520][T14844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.686852][T14844] loop4: detected capacity change from 0 to 1024 [ 322.693890][T14844] EXT4-fs: inline encryption not supported [ 322.699973][T14844] EXT4-fs: Ignoring removed bh option [ 322.707397][T14840] EXT4-fs (loop6): mount failed [ 322.715483][T14844] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.752701][T14853] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3730'. [ 322.773297][T14853] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3730'. [ 322.783933][ T29] audit: type=1326 audit(1752993026.686:7583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14852 comm="syz.1.3730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6065c3e9a9 code=0x7ffc0000 [ 322.807672][ T29] audit: type=1326 audit(1752993026.686:7584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14852 comm="syz.1.3730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6065c3e9a9 code=0x7ffc0000 [ 322.807706][ T29] audit: type=1326 audit(1752993026.686:7585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14852 comm="syz.1.3730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6065c3e9a9 code=0x7ffc0000 [ 322.807747][ T29] audit: type=1326 audit(1752993026.686:7586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14852 comm="syz.1.3730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6065c3e9a9 code=0x7ffc0000 [ 322.807780][ T29] audit: type=1326 audit(1752993026.686:7587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14852 comm="syz.1.3730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6065c3e9a9 code=0x7ffc0000 [ 322.807815][ T29] audit: type=1326 audit(1752993026.686:7588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14852 comm="syz.1.3730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6065c3e9a9 code=0x7ffc0000 [ 322.962493][T14865] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3733'. [ 323.036833][T11729] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.046144][T14871] loop1: detected capacity change from 0 to 128 [ 323.057664][T14871] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 323.065619][T14871] FAT-fs (loop1): Filesystem has been set read-only [ 323.072625][T14871] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 323.080848][T14871] syz.1.3736: attempt to access beyond end of device [ 323.080848][T14871] loop1: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 323.310246][T14883] loop0: detected capacity change from 0 to 8192 [ 323.329822][T12511] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.348082][T14883] loop0: p2 p3 p4 [ 323.352934][T14883] loop0: p2 start 2936012800 is beyond EOD, truncated [ 323.360602][T14883] loop0: p3 start 1912602624 is beyond EOD, truncated [ 323.367494][T14883] loop0: p4 size 656640 extends beyond EOD, truncated [ 323.431237][T14897] loop0: detected capacity change from 0 to 2048 [ 323.448613][T14897] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.491947][T14889] loop4: detected capacity change from 0 to 2048 [ 323.509874][T14892] loop2: detected capacity change from 0 to 164 [ 323.517581][T14892] ISOFS: unable to read i-node block [ 323.523725][T14892] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 323.534749][T14889] Alternate GPT is invalid, using primary GPT. [ 323.541057][T14889] loop4: p1 p2 p3 [ 323.579455][T14889] loop4: detected capacity change from 0 to 1024 [ 323.588427][T14910] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14910 comm=syz.1.3749 [ 323.601785][T14910] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=14910 comm=syz.1.3749 [ 323.728619][T14914] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3752'. [ 323.866813][T12778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.515681][T14926] loop6: detected capacity change from 0 to 2048 [ 324.578456][T14926] Alternate GPT is invalid, using primary GPT. [ 324.585034][T14926] loop6: p1 p2 p3 [ 324.703932][T14945] loop1: detected capacity change from 0 to 164 [ 324.727242][T14946] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.737752][T14946] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 324.754426][T14945] Unable to read rock-ridge attributes [ 324.783475][T14951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3767'. [ 324.807080][T14946] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.817648][T14946] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 324.840670][T14956] loop6: detected capacity change from 0 to 164 [ 324.847132][T14957] loop4: detected capacity change from 0 to 128 [ 324.866341][T14956] Unable to read rock-ridge attributes [ 324.874077][T14957] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 324.882072][T14957] FAT-fs (loop4): Filesystem has been set read-only [ 324.917712][T14946] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.928940][T14946] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 324.956835][T14957] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 324.967483][T14957] syz.4.3767: attempt to access beyond end of device [ 324.967483][T14957] loop4: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 324.968877][T14960] loop1: detected capacity change from 0 to 128 [ 325.009288][T14960] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 325.017883][T14960] FAT-fs (loop1): Filesystem has been set read-only [ 325.036140][T14960] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 325.050340][T14960] syz.1.3770: attempt to access beyond end of device [ 325.050340][T14960] loop1: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 325.065161][T14946] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.075653][T14946] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 325.187858][T14946] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 325.196405][T14946] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 325.217076][T14972] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3775'. [ 325.230556][T14969] loop6: detected capacity change from 0 to 8192 [ 325.245861][T14946] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 325.254309][T14946] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 325.326582][T14946] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 325.335327][T14946] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 325.371171][T14946] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 325.380376][T14946] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 325.397326][T14969] loop6: p2 p3 p4 [ 325.401539][T14969] loop6: p2 start 2936012800 is beyond EOD, truncated [ 325.409147][T14969] loop6: p3 start 1912602624 is beyond EOD, truncated [ 325.416102][T14969] loop6: p4 size 656640 extends beyond EOD, truncated [ 325.651034][T14986] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 325.801179][T14987] loop6: detected capacity change from 0 to 2048 [ 325.860278][T14993] loop4: detected capacity change from 0 to 2048 [ 325.876220][T14993] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.036995][T15001] netlink: 288 bytes leftover after parsing attributes in process `GPL'. [ 326.048623][T15001] loop0: detected capacity change from 0 to 512 [ 326.079800][T15001] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 326.095101][T15001] EXT4-fs (loop0): mount failed [ 326.172270][T15009] xt_l2tp: v2 sid > 0xffff: 117440512 [ 326.201285][T15011] 8021q: adding VLAN 0 to HW filter on device bond5 [ 326.216824][T15011] bond5 (unregistering): Released all slaves [ 326.266776][T15011] loop1: detected capacity change from 0 to 512 [ 326.279419][T15017] loop0: detected capacity change from 0 to 1024 [ 326.286863][T15011] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843e028, mo2=0002] [ 326.287129][T15017] EXT4-fs: Ignoring removed orlov option [ 326.294863][T15011] System zones: 1-12 [ 326.302827][T15017] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 326.314957][T15011] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3788: invalid indirect mapped block 8 (level 2) [ 326.329506][T15011] EXT4-fs (loop1): Remounting filesystem read-only [ 326.336179][T15011] EXT4-fs (loop1): 1 truncate cleaned up [ 326.343076][T15011] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.357540][T15017] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.372471][T12161] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.413420][T15026] netlink: 'syz.1.3791': attribute type 8 has an invalid length. [ 326.421305][T15026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3791'. [ 326.457736][T12778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.479501][T15028] loop2: detected capacity change from 0 to 2048 [ 326.513115][T12511] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.530594][T15028] Alternate GPT is invalid, using primary GPT. [ 326.537226][T15028] loop2: p1 p2 p3 [ 326.546827][T15036] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3797'. [ 326.586562][T15041] loop0: detected capacity change from 0 to 164 [ 326.594131][T15041] Unable to read rock-ridge attributes [ 326.662021][T15042] loop4: detected capacity change from 0 to 8192 [ 326.681651][T15028] loop2: detected capacity change from 0 to 1037 [ 326.719167][T15042] loop4: p1 p2 p3 p4 [ 326.724355][T15042] loop4: p3 start 331777 is beyond EOD, truncated [ 326.728618][T15049] xt_l2tp: v2 sid > 0xffff: 117440512 [ 326.730952][T15042] loop4: p4 size 262144 extends beyond EOD, truncated [ 326.951076][T15056] 8021q: adding VLAN 0 to HW filter on device bond3 [ 326.990976][T15056] bond3 (unregistering): Released all slaves [ 327.060930][T15060] loop6: detected capacity change from 0 to 512 [ 327.098528][T15060] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843e028, mo2=0002] [ 327.126352][T15060] System zones: 1-12 [ 327.155259][T15060] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3802: invalid indirect mapped block 8 (level 2) [ 327.240583][T15060] EXT4-fs (loop6): Remounting filesystem read-only [ 327.272932][T15068] loop0: detected capacity change from 0 to 2048 [ 327.279485][T15060] EXT4-fs (loop6): 1 truncate cleaned up [ 327.287910][T15060] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.306660][T15068] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.337650][T11989] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.353423][T15075] loop2: detected capacity change from 0 to 512 [ 327.360611][T15075] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 327.374507][T15075] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.3808: invalid indirect mapped block 4294967295 (level 0) [ 327.391566][T15075] EXT4-fs (loop2): Remounting filesystem read-only [ 327.404753][T15075] EXT4-fs (loop2): 1 orphan inode deleted [ 327.410688][T15075] EXT4-fs (loop2): 1 truncate cleaned up [ 327.421179][T15075] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.433948][T15081] loop6: detected capacity change from 0 to 1024 [ 327.434308][T15081] EXT4-fs: Ignoring removed nobh option [ 327.436258][T15081] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 327.458212][T15081] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 327.469009][T15081] JBD2: no valid journal superblock found [ 327.474820][T15081] EXT4-fs (loop6): Could not load journal inode [ 327.522812][T15084] SELinux: syz.6.3811 (15084) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 327.570773][T15090] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3814'. [ 327.581877][T11729] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.587707][T15090] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 327.680420][T15107] 8021q: adding VLAN 0 to HW filter on device bond3 [ 327.694573][T15107] bond3 (unregistering): Released all slaves [ 327.706210][T15113] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3822'. [ 327.724710][T15115] SELinux: syz.1.3823 (15115) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 327.756973][T15107] loop6: detected capacity change from 0 to 512 [ 327.822600][T15107] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843e028, mo2=0002] [ 327.831268][T15107] System zones: 1-12 [ 327.837214][T15107] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3820: invalid indirect mapped block 8 (level 2) [ 327.851115][T15107] EXT4-fs (loop6): Remounting filesystem read-only [ 327.859411][T15107] EXT4-fs (loop6): 1 truncate cleaned up [ 327.865642][T15107] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.878977][ T29] kauditd_printk_skb: 283 callbacks suppressed [ 327.878992][ T29] audit: type=1400 audit(1752993031.412:7871): avc: denied { write } for pid=15116 comm="syz.1.3824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 327.966932][T15129] loop4: detected capacity change from 0 to 128 [ 327.980030][T15129] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 327.987995][T15129] FAT-fs (loop4): Filesystem has been set read-only [ 327.998218][T15129] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 328.006341][T15129] syz.4.3827: attempt to access beyond end of device [ 328.006341][T15129] loop4: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 328.393637][T11989] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.403310][T12778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.531966][T15144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.541295][T15144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.572803][T15148] SELinux: syz.1.3835 (15148) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 328.588291][T15150] netlink: 288 bytes leftover after parsing attributes in process `GPL'. [ 328.619413][T15153] loop4: detected capacity change from 0 to 164 [ 328.627633][T15153] Unable to read rock-ridge attributes [ 328.639040][T15150] loop6: detected capacity change from 0 to 512 [ 328.662967][ T29] audit: type=1326 audit(1752993032.095:7872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15152 comm="syz.4.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21de4ee9a9 code=0x7ffc0000 [ 328.687638][ T29] audit: type=1326 audit(1752993032.095:7873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15152 comm="syz.4.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f21de4ee9a9 code=0x7ffc0000 [ 328.711982][ T29] audit: type=1326 audit(1752993032.132:7874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15152 comm="syz.4.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21de4ee9a9 code=0x7ffc0000 [ 328.736141][ T29] audit: type=1326 audit(1752993032.132:7875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15152 comm="syz.4.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f21de4ee9a9 code=0x7ffc0000 [ 328.745903][T15156] loop2: detected capacity change from 0 to 2048 [ 328.760474][ T29] audit: type=1326 audit(1752993032.132:7876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15152 comm="syz.4.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21de4ee9a9 code=0x7ffc0000 [ 328.789650][ T29] audit: type=1326 audit(1752993032.150:7877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15152 comm="syz.4.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21de4ee9a9 code=0x7ffc0000 [ 328.796921][T15159] loop1: detected capacity change from 0 to 8192 [ 328.817186][T15150] Quota error (device loop6): v2_read_file_info: Can't read info structure [ 328.828463][T15150] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 328.832124][T15159] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3840'. [ 328.846101][T15150] EXT4-fs (loop6): mount failed [ 328.873932][T15156] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.911148][ T29] audit: type=1400 audit(1752993032.353:7878): avc: denied { create } for pid=15165 comm="syz.1.3841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 328.922034][T15169] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3843'. [ 329.044493][ T29] audit: type=1400 audit(1752993032.473:7879): avc: denied { setopt } for pid=15175 comm="syz.4.3846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 329.049774][T15181] SELinux: syz.6.3848 (15181) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 329.259446][T15200] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.269890][T15200] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 329.322302][T15200] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.332725][T15200] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 329.386013][T15200] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.396510][T15200] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 329.483951][T15200] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.494503][T15200] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 329.529295][T15208] loop1: detected capacity change from 0 to 128 [ 329.538880][T15208] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 329.553519][T15208] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 329.597375][T15200] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 329.605802][T15200] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 329.627523][T15200] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 329.635982][T15200] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 329.671072][T11729] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.753271][T15200] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 329.761780][T15200] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 329.824079][T15200] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 329.832623][T15200] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 329.990961][T15229] loop6: detected capacity change from 0 to 2048 [ 330.056552][T15229] Alternate GPT is invalid, using primary GPT. [ 330.063018][T15229] loop6: p1 p2 p3 [ 330.124447][T15237] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 330.144097][T15221] loop6: detected capacity change from 0 to 1024 [ 330.295425][T15261] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 330.380119][T15272] loop2: detected capacity change from 0 to 2048 [ 330.406601][T15268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3882'. [ 330.442850][T15278] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 330.519380][T15281] loop1: detected capacity change from 0 to 2048 [ 330.715629][T15285] loop4: detected capacity change from 0 to 512 [ 330.724717][T15285] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 330.792455][T15285] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec028, mo2=0002] [ 330.800533][T15285] System zones: 1-12 [ 330.805616][T15285] EXT4-fs (loop4): 1 truncate cleaned up [ 330.812299][T15285] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.637745][T15297] xt_hashlimit: max too large, truncated to 1048576 [ 331.648151][T15298] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3890'. [ 331.704424][T15301] loop6: detected capacity change from 0 to 128 [ 331.715830][T15301] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 331.724387][T15301] FAT-fs (loop6): Filesystem has been set read-only [ 331.728375][T15303] netlink: 'syz.1.3892': attribute type 1 has an invalid length. [ 331.738826][T15301] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 331.754904][T15300] loop2: detected capacity change from 0 to 2048 [ 331.775517][T15303] 8021q: adding VLAN 0 to HW filter on device bond5 [ 331.794324][T15301] syz.6.3890: attempt to access beyond end of device [ 331.794324][T15301] loop6: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 331.822673][T15300] Alternate GPT is invalid, using primary GPT. [ 331.829042][T15300] loop2: p1 p2 p3 [ 331.923164][T15310] netlink: 'syz.1.3895': attribute type 1 has an invalid length. [ 331.934720][T15307] netlink: 'syz.0.3894': attribute type 1 has an invalid length. [ 331.972855][T15310] 8021q: adding VLAN 0 to HW filter on device bond6 [ 332.002248][T15317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.012828][T15307] 8021q: adding VLAN 0 to HW filter on device bond3 [ 332.021094][T15317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.042466][T15307] bond3 (unregistering): Released all slaves [ 332.057421][T15317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.073096][T15310] bond6 (unregistering): Released all slaves [ 332.079447][T15317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.110905][T15315] loop0: detected capacity change from 0 to 512 [ 332.120296][T15314] loop1: detected capacity change from 0 to 512 [ 332.136100][T15315] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843e028, mo2=0002] [ 332.144493][T15314] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843e028, mo2=0002] [ 332.153510][T15315] System zones: 1-12 [ 332.157774][T15314] System zones: 1-12 [ 332.162137][T15315] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3894: invalid indirect mapped block 8 (level 2) [ 332.178407][T15314] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3895: invalid indirect mapped block 8 (level 2) [ 332.192756][T15315] EXT4-fs (loop0): Remounting filesystem read-only [ 332.199916][T15314] EXT4-fs (loop1): Remounting filesystem read-only [ 332.206674][T15315] EXT4-fs (loop0): 1 truncate cleaned up [ 332.213196][T15314] EXT4-fs (loop1): 1 truncate cleaned up [ 332.219454][T15315] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.301469][T15324] loop1: detected capacity change from 0 to 128 [ 332.330066][T15324] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 332.337983][T15324] FAT-fs (loop1): Filesystem has been set read-only [ 332.346089][T15324] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 332.355017][T15324] syz.1.3899: attempt to access beyond end of device [ 332.355017][T15324] loop1: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 332.362961][T15332] loop2: detected capacity change from 0 to 1024 [ 332.377560][T15332] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3902: Failed to acquire dquot type 0 [ 332.389372][T15332] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3902: bg 0: block 352: padding at end of block bitmap is not set [ 332.403937][T15332] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 332.413853][T15332] EXT4-fs (loop2): 1 truncate cleaned up [ 332.422449][T15332] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 332.489795][T15345] FAULT_INJECTION: forcing a failure. [ 332.489795][T15345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.503704][T15345] CPU: 0 UID: 0 PID: 15345 Comm: syz.2.3905 Not tainted 6.16.0-rc6-syzkaller-00279-gbf61759db409 #0 PREEMPT(voluntary) [ 332.503738][T15345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 332.503750][T15345] Call Trace: [ 332.503756][T15345] [ 332.503769][T15345] __dump_stack+0x1d/0x30 [ 332.503827][T15345] dump_stack_lvl+0xe8/0x140 [ 332.503887][T15345] dump_stack+0x15/0x1b [ 332.503909][T15345] should_fail_ex+0x265/0x280 [ 332.503947][T15345] should_fail+0xb/0x20 [ 332.503977][T15345] should_fail_usercopy+0x1a/0x20 [ 332.504023][T15345] _copy_from_user+0x1c/0xb0 [ 332.504099][T15345] __sys_bind+0x106/0x2a0 [ 332.504133][T15345] __x64_sys_bind+0x3f/0x50 [ 332.504176][T15345] x64_sys_call+0x2086/0x2fb0 [ 332.504201][T15345] do_syscall_64+0xd2/0x200 [ 332.504219][T15345] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 332.504283][T15345] ? clear_bhb_loop+0x40/0x90 [ 332.504328][T15345] ? clear_bhb_loop+0x40/0x90 [ 332.504349][T15345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.504369][T15345] RIP: 0033:0x7f84c1c8e9a9 [ 332.504389][T15345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.504412][T15345] RSP: 002b:00007f84c02ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 332.504435][T15345] RAX: ffffffffffffffda RBX: 00007f84c1eb5fa0 RCX: 00007f84c1c8e9a9 [ 332.504479][T15345] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0000000000000004 [ 332.504492][T15345] RBP: 00007f84c02ef090 R08: 0000000000000000 R09: 0000000000000000 [ 332.504504][T15345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.504515][T15345] R13: 0000000000000000 R14: 00007f84c1eb5fa0 R15: 00007ffdf62dbcb8 [ 332.504534][T15345] [ 332.714539][T15347] loop1: detected capacity change from 0 to 2048 [ 332.735500][T15353] netlink: 'syz.2.3912': attribute type 1 has an invalid length. [ 332.750386][T15353] 8021q: adding VLAN 0 to HW filter on device bond4 [ 332.762320][T15353] bond4 (unregistering): Released all slaves [ 332.785918][T15347] Alternate GPT is invalid, using primary GPT. [ 332.792246][T15347] loop1: p1 p2 p3 [ 332.805605][T15356] 9pnet_fd: Insufficient options for proto=fd [ 332.818100][T15358] loop2: detected capacity change from 0 to 512 [ 332.826140][T15358] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843e028, mo2=0002] [ 332.835932][T15358] System zones: 1-12 [ 332.840445][T15358] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3912: invalid indirect mapped block 8 (level 2) [ 332.853886][T15358] EXT4-fs (loop2): Remounting filesystem read-only [ 332.861267][T15358] EXT4-fs (loop2): 1 truncate cleaned up [ 332.869255][T15357] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3913'. [ 332.951839][T15367] SELinux: syz.2.3917 (15367) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 333.035556][T15378] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3922'. [ 333.316710][T15383] netlink: 'syz.4.3923': attribute type 1 has an invalid length. [ 333.350726][T15383] 8021q: adding VLAN 0 to HW filter on device bond1 [ 333.397438][T15383] bond1: (slave gretap1): making interface the new active one [ 333.427496][T15383] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 333.452424][T15387] loop4: detected capacity change from 0 to 512 [ 333.462398][T15387] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843e028, mo2=0002] [ 333.472393][T15387] System zones: 1-12 [ 333.477080][T15387] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3923: invalid indirect mapped block 8 (level 2) [ 333.492543][T15387] EXT4-fs (loop4): Remounting filesystem read-only [ 333.500353][T15387] EXT4-fs (loop4): 1 truncate cleaned up [ 333.635440][T15390] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3926'. [ 333.772298][T15396] netlink: 'syz.4.3925': attribute type 1 has an invalid length. [ 333.784341][T15399] SELinux: syz.0.3929 (15399) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 333.790155][T15396] 8021q: adding VLAN 0 to HW filter on device bond2 [ 333.812803][T15396] bond2 (unregistering): Released all slaves [ 333.860747][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 333.860813][ T29] audit: type=1326 audit(1752993036.930:8066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15400 comm="syz.0.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46d76e9a9 code=0x7ffc0000 [ 333.892347][T15401] loop0: detected capacity change from 0 to 2048 [ 333.898830][T15402] loop4: detected capacity change from 0 to 512 [ 333.899265][ T29] audit: type=1326 audit(1752993036.930:8067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15400 comm="syz.0.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46d76e9a9 code=0x7ffc0000 [ 333.908414][T15402] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843e028, mo2=0002] [ 333.929529][ T29] audit: type=1326 audit(1752993036.930:8068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15400 comm="syz.0.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa46d76e9a9 code=0x7ffc0000 [ 333.961812][ T29] audit: type=1326 audit(1752993036.930:8069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15400 comm="syz.0.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46d76e9a9 code=0x7ffc0000 [ 333.964221][T15402] System zones: 1-12 [ 333.986288][ T29] audit: type=1326 audit(1752993036.930:8070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15400 comm="syz.0.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46d76e9a9 code=0x7ffc0000 [ 334.013632][ T29] audit: type=1326 audit(1752993036.930:8071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15400 comm="syz.0.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa46d76e9a9 code=0x7ffc0000 [ 334.015802][T15402] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3925: invalid indirect mapped block 8 (level 2) [ 334.037054][ T29] audit: type=1326 audit(1752993036.930:8072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15400 comm="syz.0.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46d76e9a9 code=0x7ffc0000 [ 334.051661][T15402] EXT4-fs (loop4): Remounting filesystem read-only [ 334.074380][ T29] audit: type=1326 audit(1752993036.930:8073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15400 comm="syz.0.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46d76e9a9 code=0x7ffc0000 [ 334.104659][T15402] EXT4-fs (loop4): 1 truncate cleaned up [ 334.104696][ T29] audit: type=1326 audit(1752993036.930:8074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15400 comm="syz.0.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa46d76e9a9 code=0x7ffc0000 [ 334.134712][ T29] audit: type=1326 audit(1752993036.930:8075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15400 comm="syz.0.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa46d76e9e3 code=0x7ffc0000 [ 334.187385][T15410] Alternate GPT is invalid, using primary GPT. [ 334.193736][T15410] loop0: p1 p2 p3 [ 334.251144][T15401] Alternate GPT is invalid, using primary GPT. [ 334.257953][T15401] loop0: p1 p2 p3 [ 334.266716][T15414] loop4: detected capacity change from 0 to 128 [ 334.281443][T15414] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 334.289379][T15414] FAT-fs (loop4): Filesystem has been set read-only [ 334.297015][T15414] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 334.305109][T15414] syz.4.3934: attempt to access beyond end of device [ 334.305109][T15414] loop4: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 334.425779][T15423] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3938'. [ 334.462812][T15427] SELinux: syz.0.3940 (15427) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 334.557966][T15439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3945'. [ 334.588420][T15439] loop0: detected capacity change from 0 to 128 [ 334.598395][T15439] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 334.606304][T15439] FAT-fs (loop0): Filesystem has been set read-only [ 334.613314][T15439] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 334.621785][T15439] syz.0.3945: attempt to access beyond end of device [ 334.621785][T15439] loop0: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 334.665509][T15443] loop2: detected capacity change from 0 to 8192 [ 334.736612][T15443] loop2: p2 p3 p4 [ 334.741397][T15443] loop2: p2 start 2936012800 is beyond EOD, truncated [ 334.748310][T15443] loop2: p3 start 1912602624 is beyond EOD, truncated [ 334.755145][T15443] loop2: p4 size 656640 extends beyond EOD, truncated [ 334.866323][T15452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3950'. [ 334.918843][T15453] loop6: detected capacity change from 0 to 512 [ 334.926701][T15453] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 334.960925][T15455] loop2: detected capacity change from 0 to 764 [ 334.971332][T15455] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 335.017945][T15453] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec028, mo2=0002] [ 335.025954][T15453] System zones: 1-12 [ 335.032735][T15453] EXT4-fs (loop6): 1 truncate cleaned up [ 335.072788][T15458] SELinux: syz.2.3952 (15458) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 335.142755][T15460] pim6reg: entered allmulticast mode [ 335.170922][T15460] pim6reg: left allmulticast mode [ 335.356953][T15464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.390783][T15464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.434467][T15464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.458359][T15464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.846587][T15472] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3958'. [ 335.857735][T15472] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 335.891334][T15474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3959'. [ 335.949030][T15474] loop0: detected capacity change from 0 to 128 [ 335.969836][T15474] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 335.977819][T15474] FAT-fs (loop0): Filesystem has been set read-only [ 335.998979][T15474] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 336.018397][T15474] syz.0.3959: attempt to access beyond end of device [ 336.018397][T15474] loop0: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 336.254321][T15482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.266479][T15482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.293037][T15482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.321390][T15482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.332813][T15486] SELinux: syz.1.3963 (15486) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 336.499597][T15499] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3969'. [ 336.510956][T15499] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 336.525042][T15500] loop4: detected capacity change from 0 to 2048 [ 336.616979][T12511] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /160/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 336.642757][T12511] EXT4-fs error (device loop4): ext4_empty_dir:3093: inode #11: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 336.664548][T12511] EXT4-fs warning (device loop4): ext4_empty_dir:3095: inode #11: comm syz-executor: directory missing '..' [ 336.666960][T15514] SELinux: syz.2.3975 (15514) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 336.676790][T12511] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /160/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 336.719596][T12511] EXT4-fs error (device loop4): ext4_empty_dir:3093: inode #11: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 336.740163][T12511] EXT4-fs warning (device loop4): ext4_empty_dir:3095: inode #11: comm syz-executor: directory missing '..' [ 336.752773][T12511] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /160/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 336.775564][T12511] EXT4-fs error (device loop4): ext4_empty_dir:3093: inode #11: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 336.796668][T12511] EXT4-fs warning (device loop4): ext4_empty_dir:3095: inode #11: comm syz-executor: directory missing '..' [ 336.821908][T12511] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /160/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 336.845882][T12511] EXT4-fs error (device loop4): ext4_empty_dir:3093: inode #11: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 336.867862][T12511] EXT4-fs warning (device loop4): ext4_empty_dir:3095: inode #11: comm syz-executor: directory missing '..' [ 336.879712][T12511] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /160/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 336.905180][T12511] EXT4-fs error (device loop4): ext4_empty_dir:3093: inode #11: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 336.927235][T12511] EXT4-fs warning (device loop4): ext4_empty_dir:3095: inode #11: comm syz-executor: directory missing '..' [ 336.939550][T12511] EXT4-fs warning (device loop4): ext4_empty_dir:3095: inode #11: comm syz-executor: directory missing '..' [ 336.962639][T12511] EXT4-fs warning (device loop4): ext4_empty_dir:3095: inode #11: comm syz-executor: directory missing '..' [ 336.993053][T15530] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3980'. [ 337.002815][T12511] EXT4-fs warning (device loop4): ext4_empty_dir:3095: inode #11: comm syz-executor: directory missing '..' [ 337.019212][T15530] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 337.028459][T12511] EXT4-fs warning (device loop4): ext4_empty_dir:3095: inode #11: comm syz-executor: directory missing '..' [ 337.051672][T15532] FAULT_INJECTION: forcing a failure. [ 337.051672][T15532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.065623][T15532] CPU: 0 UID: 0 PID: 15532 Comm: syz.2.3981 Not tainted 6.16.0-rc6-syzkaller-00279-gbf61759db409 #0 PREEMPT(voluntary) [ 337.065725][T15532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 337.065741][T15532] Call Trace: [ 337.065750][T15532] [ 337.065759][T15532] __dump_stack+0x1d/0x30 [ 337.065784][T15532] dump_stack_lvl+0xe8/0x140 [ 337.065808][T15532] dump_stack+0x15/0x1b [ 337.065823][T15532] should_fail_ex+0x265/0x280 [ 337.065899][T15532] should_fail+0xb/0x20 [ 337.065927][T15532] should_fail_usercopy+0x1a/0x20 [ 337.066045][T15532] _copy_from_user+0x1c/0xb0 [ 337.066071][T15532] __sys_bpf+0x178/0x790 [ 337.066115][T15532] __x64_sys_bpf+0x41/0x50 [ 337.066106][T12511] EXT4-fs warning (device loop4): ext4_empty_dir:3095: inode #11: comm syz-executor: directory missing '..' [ 337.066144][T15532] x64_sys_call+0x2478/0x2fb0 [ 337.066184][T15532] do_syscall_64+0xd2/0x200 [ 337.066210][T15532] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 337.066246][T15532] ? clear_bhb_loop+0x40/0x90 [ 337.066276][T15532] ? clear_bhb_loop+0x40/0x90 [ 337.066390][T15532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.066418][T15532] RIP: 0033:0x7f84c1c8e9a9 [ 337.066439][T15532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.066463][T15532] RSP: 002b:00007f84c02ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 337.066488][T15532] RAX: ffffffffffffffda RBX: 00007f84c1eb5fa0 RCX: 00007f84c1c8e9a9 [ 337.066505][T15532] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 337.066576][T15532] RBP: 00007f84c02ef090 R08: 0000000000000000 R09: 0000000000000000 [ 337.066593][T15532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.066610][T15532] R13: 0000000000000000 R14: 00007f84c1eb5fa0 R15: 00007ffdf62dbcb8 [ 337.066635][T15532] [ 337.222964][T15536] loop2: detected capacity change from 0 to 8192 [ 337.455719][T11729] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 337.463638][T11729] FAT-fs (loop2): Filesystem has been set read-only [ 337.490330][T15542] netlink: 'syz.1.3986': attribute type 1 has an invalid length. [ 337.506630][T15542] 8021q: adding VLAN 0 to HW filter on device bond6 [ 337.511661][T15545] can: request_module (can-proto-4) failed. [ 337.523401][T15542] bond6 (unregistering): Released all slaves [ 337.578725][T15547] loop1: detected capacity change from 0 to 512 [ 337.587762][T15547] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843e028, mo2=0002] [ 337.596069][T15547] System zones: 1-12 [ 337.600358][T15547] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3986: invalid indirect mapped block 8 (level 2) [ 337.613763][T15547] EXT4-fs (loop1): Remounting filesystem read-only [ 337.621941][T15547] EXT4-fs (loop1): 1 truncate cleaned up [ 337.639557][T15551] netlink: 'syz.2.3987': attribute type 1 has an invalid length. [ 337.655762][T15551] 8021q: adding VLAN 0 to HW filter on device bond4 [ 337.833666][T15571] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3992'. [ 337.843003][T15571] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 337.991952][T15561] chnl_net:caif_netlink_parms(): no params data found [ 338.029498][T15599] netlink: 'syz.0.4001': attribute type 1 has an invalid length. [ 338.051190][T15599] 8021q: adding VLAN 0 to HW filter on device bond3 [ 338.064434][T15561] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.072537][T15561] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.079902][T15561] bridge_slave_0: entered allmulticast mode [ 338.086621][T15561] bridge_slave_0: entered promiscuous mode [ 338.093791][T15561] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.100986][T15561] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.109564][T15561] bridge_slave_1: entered allmulticast mode [ 338.116268][T15561] bridge_slave_1: entered promiscuous mode [ 338.135842][T15561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.146315][T15561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.168829][T15561] team0: Port device team_slave_0 added [ 338.175836][T15561] team0: Port device team_slave_1 added [ 338.194128][T15561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.201173][T15561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.227890][T15561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.239446][T15561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.246456][T15561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.273192][T15561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.305288][T15561] hsr_slave_0: entered promiscuous mode [ 338.320237][T15561] hsr_slave_1: entered promiscuous mode [ 338.469814][T15561] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 338.479503][T15561] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 338.495608][T15561] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 338.505385][T15561] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 338.520646][T15561] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.527823][T15561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.535290][T15561] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.542424][T15561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.813784][T15561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.830796][T15561] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.959999][T15630] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 338.985466][T15561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.038640][T15639] loop1: detected capacity change from 0 to 2048 [ 339.048937][T15637] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4009'. [ 339.116046][T15651] FAULT_INJECTION: forcing a failure. [ 339.116046][T15651] name failslab, interval 1, probability 0, space 0, times 0 [ 339.128824][T15651] CPU: 1 UID: 0 PID: 15651 Comm: syz.2.4011 Not tainted 6.16.0-rc6-syzkaller-00279-gbf61759db409 #0 PREEMPT(voluntary) [ 339.128878][T15651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 339.128895][T15651] Call Trace: [ 339.128902][T15651] [ 339.128911][T15651] __dump_stack+0x1d/0x30 [ 339.128937][T15651] dump_stack_lvl+0xe8/0x140 [ 339.128962][T15651] dump_stack+0x15/0x1b [ 339.129058][T15651] should_fail_ex+0x265/0x280 [ 339.129097][T15651] should_failslab+0x8c/0xb0 [ 339.129141][T15651] kmem_cache_alloc_noprof+0x50/0x310 [ 339.129226][T15651] ? audit_log_start+0x365/0x6c0 [ 339.129265][T15651] audit_log_start+0x365/0x6c0 [ 339.129363][T15651] audit_seccomp+0x48/0x100 [ 339.129389][T15651] ? __seccomp_filter+0x68c/0x10d0 [ 339.129417][T15651] __seccomp_filter+0x69d/0x10d0 [ 339.129445][T15651] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 339.129486][T15651] ? vfs_write+0x75e/0x8e0 [ 339.129528][T15651] __secure_computing+0x82/0x150 [ 339.129551][T15651] syscall_trace_enter+0xcf/0x1e0 [ 339.129586][T15651] do_syscall_64+0xac/0x200 [ 339.129701][T15651] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 339.129729][T15651] ? clear_bhb_loop+0x40/0x90 [ 339.129829][T15651] ? clear_bhb_loop+0x40/0x90 [ 339.129938][T15651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.129966][T15651] RIP: 0033:0x7f84c1c8e9a9 [ 339.129986][T15651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.130031][T15651] RSP: 002b:00007f84c02ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 339.130053][T15651] RAX: ffffffffffffffda RBX: 00007f84c1eb5fa0 RCX: 00007f84c1c8e9a9 [ 339.130098][T15651] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000000000 [ 339.130116][T15651] RBP: 00007f84c02ef090 R08: 0000000000000000 R09: 0000000000000000 [ 339.130129][T15651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.130140][T15651] R13: 0000000000000000 R14: 00007f84c1eb5fa0 R15: 00007ffdf62dbcb8 [ 339.130158][T15651] [ 339.150927][T15561] veth0_vlan: entered promiscuous mode [ 339.354451][T15561] veth1_vlan: entered promiscuous mode [ 339.368043][T15561] veth0_macvtap: entered promiscuous mode [ 339.381068][T15561] veth1_macvtap: entered promiscuous mode [ 339.399844][T15561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.423381][T15561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.449078][T15561] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.457955][T15561] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.466675][T15561] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.476160][T15561] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.529783][T15663] SELinux: syz.6.4015 (15663) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 339.613273][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 339.613341][ T29] audit: type=1326 audit(1752993042.241:8181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15660 comm="syz.0.4014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46d76e9a9 code=0x7ffc0000 [ 339.643896][ T29] audit: type=1326 audit(1752993042.241:8182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15660 comm="syz.0.4014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46d76e9a9 code=0x7ffc0000 [ 339.667575][ T29] audit: type=1326 audit(1752993042.241:8183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15660 comm="syz.0.4014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fa46d76e9a9 code=0x7ffc0000 [ 339.691922][ T29] audit: type=1326 audit(1752993042.241:8184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15660 comm="syz.0.4014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46d76e9a9 code=0x7ffc0000 [ 339.715502][ T29] audit: type=1326 audit(1752993042.241:8185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15660 comm="syz.0.4014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46d76e9a9 code=0x7ffc0000 [ 339.742813][ T29] audit: type=1326 audit(1752993042.296:8186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15660 comm="syz.0.4014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa46d765967 code=0x7ffc0000 [ 339.766363][ T29] audit: type=1326 audit(1752993042.296:8187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15660 comm="syz.0.4014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa46d70ab89 code=0x7ffc0000 [ 339.790528][ T29] audit: type=1326 audit(1752993042.296:8188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15660 comm="syz.0.4014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46d76e9a9 code=0x7ffc0000 [ 339.814210][ T29] audit: type=1326 audit(1752993042.306:8189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15660 comm="syz.0.4014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa46d765967 code=0x7ffc0000 [ 339.838343][ T29] audit: type=1326 audit(1752993042.306:8190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15660 comm="syz.0.4014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa46d70ab89 code=0x7ffc0000 [ 339.995737][T15679] loop7: detected capacity change from 0 to 1024 [ 340.006684][T15683] loop1: detected capacity change from 0 to 2048 [ 340.016951][T15679] EXT4-fs: Ignoring removed nobh option [ 340.032396][T15679] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 340.035007][T15683] EXT4-fs mount: 18 callbacks suppressed [ 340.035028][T15683] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.044259][T15679] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 340.130737][T15679] JBD2: no valid journal superblock found [ 340.136531][T15679] EXT4-fs (loop7): Could not load journal inode [ 340.189598][ T5010] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 340.277894][T12161] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.289337][T15700] netlink: 288 bytes leftover after parsing attributes in process `syz.7.4025'. [ 340.313973][T15700] loop7: detected capacity change from 0 to 512 [ 340.343016][T15700] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 340.375942][T15707] loop6: detected capacity change from 0 to 1024 [ 340.377883][T15700] EXT4-fs (loop7): mount failed [ 340.402278][T15707] EXT4-fs: Ignoring removed nobh option [ 340.407942][T15707] EXT4-fs: Ignoring removed bh option [ 340.426471][T15711] loop2: detected capacity change from 0 to 2048 [ 340.449465][T15707] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.468038][T15711] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.512845][T15702] EXT4-fs (loop6): shut down requested (0) [ 340.561305][T15730] xt_hashlimit: size too large, truncated to 1048576 [ 340.568129][T15730] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 340.589234][T15725] loop0: detected capacity change from 0 to 1024 [ 340.590639][T11729] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /300/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 340.600190][T15732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.627090][T15725] EXT4-fs: Ignoring removed nobh option [ 340.634142][T15725] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 340.645276][T15725] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 340.656772][T15732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.656814][T11729] EXT4-fs error (device loop2): ext4_empty_dir:3093: inode #11: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 340.682501][T15732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.694208][T15732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.694567][T15725] JBD2: no valid journal superblock found [ 340.708621][T15725] EXT4-fs (loop0): Could not load journal inode [ 340.725759][T11729] EXT4-fs warning (device loop2): ext4_empty_dir:3095: inode #11: comm syz-executor: directory missing '..' [ 340.742216][T15734] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4038'. [ 340.751323][T11729] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /300/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 340.755147][T15732] loop1: detected capacity change from 0 to 1024 [ 340.783515][T15732] EXT4-fs: inline encryption not supported [ 340.789524][T15732] EXT4-fs: Ignoring removed bh option [ 340.798352][T11729] EXT4-fs error (device loop2): ext4_empty_dir:3093: inode #11: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 340.821671][T11729] EXT4-fs warning (device loop2): ext4_empty_dir:3095: inode #11: comm syz-executor: directory missing '..' [ 340.837299][T15732] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.837428][T11989] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.865678][T11729] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /300/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 340.890011][T11729] EXT4-fs error (device loop2): ext4_empty_dir:3093: inode #11: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 340.927226][T11729] EXT4-fs warning (device loop2): ext4_empty_dir:3095: inode #11: comm syz-executor: directory missing '..' [ 340.939341][T11729] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /300/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 340.968856][T11729] EXT4-fs error (device loop2): ext4_empty_dir:3093: inode #11: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 340.993414][T11729] EXT4-fs warning (device loop2): ext4_empty_dir:3095: inode #11: comm syz-executor: directory missing '..' [ 341.005305][T11729] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /300/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 341.014397][T15746] netlink: 288 bytes leftover after parsing attributes in process `GPL'. [ 341.029917][T11729] EXT4-fs error (device loop2): ext4_empty_dir:3093: inode #11: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 341.057149][T15746] loop6: detected capacity change from 0 to 512 [ 341.069060][T11729] EXT4-fs warning (device loop2): ext4_empty_dir:3095: inode #11: comm syz-executor: directory missing '..' [ 341.082084][T11729] EXT4-fs warning (device loop2): ext4_empty_dir:3095: inode #11: comm syz-executor: directory missing '..' [ 341.082283][T15746] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 341.099350][T11729] EXT4-fs warning (device loop2): ext4_empty_dir:3095: inode #11: comm syz-executor: directory missing '..' [ 341.120191][T15746] EXT4-fs (loop6): mount failed [ 341.122374][T11729] EXT4-fs warning (device loop2): ext4_empty_dir:3095: inode #11: comm syz-executor: directory missing '..' [ 341.151288][T11729] EXT4-fs warning (device loop2): ext4_empty_dir:3095: inode #11: comm syz-executor: directory missing '..' [ 341.165970][T11729] EXT4-fs warning (device loop2): ext4_empty_dir:3095: inode #11: comm syz-executor: directory missing '..' [ 341.416444][T15772] loop0: detected capacity change from 0 to 8192 [ 341.474775][T11729] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.533631][T12161] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.576048][T15782] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4055'. [ 341.586389][T15782] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 341.673140][T15795] loop1: detected capacity change from 0 to 128 [ 341.693150][T15795] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 341.701114][T15795] FAT-fs (loop1): Filesystem has been set read-only [ 341.720605][T15795] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 341.729135][T15795] syz.1.4058: attempt to access beyond end of device [ 341.729135][T15795] loop1: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 341.749039][T15778] chnl_net:caif_netlink_parms(): no params data found [ 341.799438][T15778] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.806558][T15778] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.818387][T15802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4059'. [ 341.829957][T15778] bridge_slave_0: entered allmulticast mode [ 341.836631][T15778] bridge_slave_0: entered promiscuous mode [ 341.843956][T15778] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.851098][T15778] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.858359][T15778] bridge_slave_1: entered allmulticast mode [ 341.864969][T15778] bridge_slave_1: entered promiscuous mode [ 341.874617][T15804] loop1: detected capacity change from 0 to 128 [ 341.886883][T15804] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 341.894915][T15804] FAT-fs (loop1): Filesystem has been set read-only [ 341.909235][T15804] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 341.912309][T15778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.918709][T15804] syz.1.4059: attempt to access beyond end of device [ 341.918709][T15804] loop1: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 341.928953][T15778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.961695][T15778] team0: Port device team_slave_0 added [ 341.968521][T15778] team0: Port device team_slave_1 added [ 341.984670][T15778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.991830][T15778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.018616][T15778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.030080][T15778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.037163][T15778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.063812][T15778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.095003][T15778] hsr_slave_0: entered promiscuous mode [ 342.101178][T15778] hsr_slave_1: entered promiscuous mode [ 342.107326][T15778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.116453][T15778] Cannot create hsr debugfs directory [ 342.124904][T15806] loop1: detected capacity change from 0 to 8192 [ 342.168725][T15806] loop1: p2 p3 p4 [ 342.180636][T15806] loop1: p2 start 2936012800 is beyond EOD, truncated [ 342.187575][T15806] loop1: p3 start 1912602624 is beyond EOD, truncated [ 342.194407][T15806] loop1: p4 size 656640 extends beyond EOD, truncated [ 342.258669][T15778] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 342.270167][T15778] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 342.285799][T15778] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 342.297673][T15778] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 342.316067][T15778] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.323250][T15778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.330668][T15778] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.337758][T15778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.361055][ T3443] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.369158][ T3443] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.401828][T15778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.423028][T15831] pim6reg: entered allmulticast mode [ 342.431527][T15778] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.441336][T15830] netlink: 288 bytes leftover after parsing attributes in process `GPL'. [ 342.459894][ T3443] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.467023][ T3443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.467400][T15830] loop0: detected capacity change from 0 to 512 [ 342.481642][ T3443] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.488810][ T3443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.506183][T15830] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 342.522322][T15830] EXT4-fs (loop0): mount failed [ 342.584187][T15778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.609540][T15849] loop0: detected capacity change from 0 to 1024 [ 342.618207][T15849] EXT4-fs: Ignoring removed nomblk_io_submit option [ 342.646186][T15849] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.662153][T15849] SELinux: failed to load policy [ 342.693153][T12778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.809835][T15778] veth0_vlan: entered promiscuous mode [ 342.818470][T15778] veth1_vlan: entered promiscuous mode [ 342.835605][T15871] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4076'. [ 342.850852][T15778] veth0_macvtap: entered promiscuous mode [ 342.861242][T15778] veth1_macvtap: entered promiscuous mode [ 342.867080][T15871] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 342.885086][T15778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.907688][T15778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.921121][T15778] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.929940][T15778] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.938817][T15778] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.947620][T15778] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.140890][T15881] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.4079'. [ 343.187999][T15883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.208494][T15883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.229843][T15883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.249238][T15883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.351427][T15889] netlink: 288 bytes leftover after parsing attributes in process `GPL'. [ 343.379023][T15889] loop6: detected capacity change from 0 to 512 [ 343.403793][T15889] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 343.419094][T15889] EXT4-fs (loop6): mount failed [ 343.580580][T15899] loop1: detected capacity change from 0 to 2048 [ 343.633450][T15899] Alternate GPT is invalid, using primary GPT. [ 343.639874][T15899] loop1: p1 p2 p3 [ 343.700929][T15914] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4092'. [ 343.701401][T15899] loop1: detected capacity change from 0 to 1024 [ 343.722817][T15914] loop6: detected capacity change from 0 to 512 [ 343.732878][T15914] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843e028, mo2=0002] [ 343.742120][T15914] System zones: 1-12 [ 343.746499][T15914] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.4092: invalid indirect mapped block 8 (level 2) [ 343.761556][T15914] EXT4-fs (loop6): Remounting filesystem read-only [ 343.768153][T15914] EXT4-fs (loop6): 1 truncate cleaned up [ 343.774828][T15914] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.800048][T11989] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.853887][T15918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.877789][T15918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.887226][T15918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.897602][T15918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.919650][T15918] loop6: detected capacity change from 0 to 1024 [ 343.921470][T15925] 9pnet_fd: Insufficient options for proto=fd [ 343.931077][T15918] EXT4-fs: inline encryption not supported [ 343.948939][T15918] EXT4-fs: Ignoring removed bh option [ 343.959773][T15924] loop7: detected capacity change from 0 to 128 [ 343.985162][T15918] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.010441][T15924] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 344.023731][T15925] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4094'. [ 344.041639][T15924] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.116654][T15561] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 344.132176][T15934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4099'. [ 344.164472][T15934] loop0: detected capacity change from 0 to 128 [ 344.175140][T15934] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 344.179156][T15944] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 344.183026][T15934] FAT-fs (loop0): Filesystem has been set read-only [ 344.190231][T15934] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 344.209315][T15934] syz.0.4099: attempt to access beyond end of device [ 344.209315][T15934] loop0: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 344.229773][T15943] random: crng reseeded on system resumption [ 344.261153][T15946] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 344.280560][T15948] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4105'. [ 344.293563][T15948] loop0: detected capacity change from 0 to 512 [ 344.301741][T15948] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843e028, mo2=0002] [ 344.309723][T15948] System zones: 1-12 [ 344.314893][T15948] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.4105: invalid indirect mapped block 8 (level 2) [ 344.328361][T15948] EXT4-fs (loop0): Remounting filesystem read-only [ 344.335249][T15948] EXT4-fs (loop0): 1 truncate cleaned up [ 344.341319][T15948] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.360623][T15950] loop7: detected capacity change from 0 to 2048 [ 344.367964][T12778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.384749][T15954] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 344.668505][T11989] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.822840][T15965] loop8: detected capacity change from 0 to 2048 [ 344.832719][T15965] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.267696][T15972] pim6reg: entered allmulticast mode [ 345.310567][ T29] kauditd_printk_skb: 839 callbacks suppressed [ 345.310587][ T29] audit: type=1400 audit(1752993047.494:9026): avc: denied { create } for pid=15978 comm="syz.1.4115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 345.325710][T15977] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 345.346096][T15977] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 345.354996][T15977] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 345.363948][T15977] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 345.372051][ T29] audit: type=1400 audit(1752993047.530:9027): avc: denied { write } for pid=15978 comm="syz.1.4115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 345.375239][T15977] geneve2: entered promiscuous mode [ 345.398778][T15977] geneve2: entered allmulticast mode [ 345.453396][T15985] xt_l2tp: v2 sid > 0xffff: 117440512 [ 345.473906][T15980] infiniband syz2: set down [ 345.478625][T15980] infiniband syz2: added syzkaller0 [ 345.493661][T15990] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 345.493865][T15980] RDS/IB: syz2: added [ 345.508616][T15980] smc: adding ib device syz2 with port count 1 [ 345.515844][T15980] smc: ib device syz2 port 1 has pnetid [ 345.572937][T15998] loop0: detected capacity change from 0 to 512 [ 345.581678][T15998] EXT4-fs: Ignoring removed nobh option [ 345.591446][T15998] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.4121: corrupted inode contents [ 345.604083][T15998] EXT4-fs (loop0): Remounting filesystem read-only [ 345.656083][T15998] EXT4-fs (loop0): 1 truncate cleaned up [ 345.662490][T15998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.664780][T16001] 9pnet_fd: Insufficient options for proto=fd [ 345.675353][T15998] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.692416][ T31] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 345.703210][ T31] Quota error (device loop0): write_blk: dquota write failed [ 345.710698][ T31] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries [ 345.720820][ T31] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 345.731630][ T31] Quota error (device loop0): write_blk: dquota write failed [ 345.739219][ T31] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list [ 345.755368][ T29] audit: type=1326 audit(1752993047.909:9028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15995 comm="syz.7.4120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f092b0be9a9 code=0x7ffc0000 [ 345.779129][ T29] audit: type=1326 audit(1752993047.909:9029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15995 comm="syz.7.4120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f092b0be9a9 code=0x7ffc0000 [ 345.802692][ T29] audit: type=1326 audit(1752993047.909:9030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15995 comm="syz.7.4120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f092b0be9a9 code=0x7ffc0000 [ 345.826366][ T29] audit: type=1326 audit(1752993047.909:9031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15995 comm="syz.7.4120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f092b0be9a9 code=0x7ffc0000 [ 345.854200][ T31] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 345.866815][T15778] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.888705][T12778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.911343][T16009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.911389][ T4864] smc: removing ib device syz2 [ 345.911524][ T4864] ================================================================== [ 345.919883][ T4864] BUG: KCSAN: data-race in data_alloc / data_push_tail [ 345.919937][ T4864] [ 345.919946][ T4864] write to 0xffffffff88e6bc60 of 8 bytes by task 16009 on cpu 1: [ 345.919967][ T4864] data_alloc+0x203/0x2b0 [ 345.920002][ T4864] prb_reserve+0x808/0xaf0 [ 345.920039][ T4864] vprintk_store+0x56d/0x860 [ 345.920062][ T4864] vprintk_emit+0x178/0x650 [ 345.920084][ T4864] vprintk_default+0x26/0x30 [ 345.920106][ T4864] vprintk+0x1d/0x30 [ 345.920134][ T4864] _printk+0x79/0xa0 [ 345.920169][ T4864] usb_gadget_register_driver_owner+0x17e/0x1a0 [ 345.920212][ T4864] raw_ioctl+0xc5c/0x1dc0 [ 345.920233][ T4864] __se_sys_ioctl+0xcb/0x140 [ 345.920263][ T4864] __x64_sys_ioctl+0x43/0x50 [ 345.920297][ T4864] x64_sys_call+0x19a8/0x2fb0 [ 345.920325][ T4864] do_syscall_64+0xd2/0x200 [ 345.920346][ T4864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.920372][ T4864] [ 345.920379][ T4864] read to 0xffffffff88e6bc60 of 8 bytes by task 4864 on cpu 0: [ 345.920395][ T4864] data_push_tail+0xfd/0x420 [ 345.920433][ T4864] data_alloc+0xbf/0x2b0 [ 345.920469][ T4864] prb_reserve+0x808/0xaf0 [ 345.920511][ T4864] vprintk_store+0x56d/0x860 [ 345.920528][ T4864] vprintk_emit+0x178/0x650 [ 345.920546][ T4864] vprintk_default+0x26/0x30 [ 345.920567][ T4864] vprintk+0x1d/0x30 [ 345.920598][ T4864] _printk+0x79/0xa0 [ 345.920633][ T4864] smc_ib_remove_dev+0x20c/0x270 [ 345.920671][ T4864] remove_client_context+0x9c/0x1a0 [ 345.920689][ T4864] disable_device+0xca/0x260 [ 345.920709][ T4864] __ib_unregister_device+0x1fb/0x2d0 [ 345.920745][ T4864] ib_unregister_work+0x19/0x30 [ 345.920783][ T4864] process_scheduled_works+0x4cb/0x9d0 [ 345.920833][ T4864] worker_thread+0x582/0x770 [ 345.920864][ T4864] kthread+0x489/0x510 [ 345.920881][ T4864] ret_from_fork+0xda/0x150 [ 345.920899][ T4864] ret_from_fork_asm+0x1a/0x30 [ 345.920920][ T4864] [ 345.920925][ T4864] value changed: 0x000000010000061a -> 0x0000000100001214 [ 345.920938][ T4864] [ 345.920945][ T4864] Reported by Kernel Concurrency Sanitizer on: [ 345.920960][ T4864] CPU: 0 UID: 0 PID: 4864 Comm: kworker/u8:8 Not tainted 6.16.0-rc6-syzkaller-00279-gbf61759db409 #0 PREEMPT(voluntary) [ 345.920995][ T4864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 345.921014][ T4864] Workqueue: ib-unreg-wq ib_unregister_work [ 345.921055][ T4864] ================================================================== [ 345.921781][T16009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.177560][T16007] loop8: detected capacity change from 0 to 2048 [ 346.184882][T16009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.193326][T16009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.208724][T16007] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.832486][T15778] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.