last executing test programs: 2.209587942s ago: executing program 1 (id=2101): r0 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x6, 0x196}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0xb}, 0x18) syz_usb_connect(0x2, 0x24, &(0x7f0000000400)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.109665612s ago: executing program 0 (id=2105): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000024c0)=@newtaction={0x18, 0x30, 0x12f, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x4000000, &(0x7f0000000280)="7e4f969b03cda75d18418895dc44de2f1a73e6c8a23d8e752327cf79bf7d963e7f0acd46b99868ac91d39cdad66af08ac2dec87cf89e25d52b0539bd17e7159ae2a572538f292aa4f5159ad30c87b6dbdf350ea382415875a73763d38c4fe7b7b7a46af759b91a535d52c73e5ed1c3dc2e0e4b05f6060647ee242fb79a5931a7", 0x80, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000340)="52488129fcc09209167a1a1237462d2811d0f47a584a3f544d427fc7711a4635d552e2cce15527b30ea7f19531bcd2f91270ecf479a3a6574b4e8a9c266aabe3c8bcb8a0196f6733c7423283e65f6e7ea184673d45685a41c65973f9318786b748b9391bf6cc3ed940e6d431fa29a263c546fc99b6eb7b2bc28f4489fc7fa075d179bf02e24c57a0e659f2de12a0bde86db3e13899dd639b69480099ca84cdf9a715e13157cfc9d35eccba312a866e634a5ca85a28") r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r4, @ANYRES32=r5, @ANYRES8], 0x0, 0x4, 0x0, 0x0, 0x0, 0x51}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0xffffffffffffffff}], 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180), 0x1, 0x451, &(0x7f0000000780)="$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") syz_io_uring_setup(0x56f5, &(0x7f00000003c0)={0x0, 0x1aac, 0x2, 0x0, 0x5a}, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r8, 0x2004, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000f02000000000000bc26100000000000bf672000000000001602000000c0ffff6702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1.954244797s ago: executing program 4 (id=2107): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00"], 0x38}}, 0x0) 1.948002128s ago: executing program 2 (id=2108): semget$private(0x0, 0x1, 0x402) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='sys_enter\x00'}, 0x18) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000340)={0x0, 0xaee2, 0x80, 0x3, 0x333}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001880)={'vxcan0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000031c0)=[{{&(0x7f00000003c0)={0xa, 0x4e23, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000b40)="90df4da2f5253f1d41dc602e3d492aae6379933d0d04484f015b46117d6d66a91d3e58285b1c39852b334ae5ffa31773c71a383821d918de29e7d1f94c680566f062c7a47328d7f0847709e35f77294de6971de0d08a694533f744f5129f9af5b983ad76f84a6ddd6d8388029bc87d7e8bb9560e151432621ce16a3362f7c983d8dcc17e4eb568f4a96260bcc2fc212e39d59395f99885fdbb8e31c38ecbfb925e217bc50fa31b939a63fcd5fab2df46b3c46471b27ef1f02ad990a069a6dde6712c56f0560986a499266b35c4f1d345891b3f9162ed333dcbb717c4e89d92c7becc75e12cf2aac8bee2d2ce1536f8cbc7165cd5", 0xf4}, {&(0x7f00000004c0)="c6ad9b068e2f69c4c670b5ada5ae5e43cc8b504de76e37d3627603a9c5ae3955695d1a92ad40fc0d24ec4ea576b5f1edf72cf0a9ef37d6923f88b126e00b57ff274319b2b3f9ecff015a4b467bc4428131cbe6f431d85257fccee250f55275693b88cc7cd9f86e29365f25c45df476f9642ad23001f81cd6a19d28bc1482d55d216856d4dcb177c0495ea49cbecda491ca12753521fea9cf002e2d2343d2d0a7e71e283fe08c17a9d22850bd", 0xac}, {&(0x7f0000000700)="6af909daedea8148db3370fe109c9f64f046b192ae314b57de084499410ed7f3329e0e33c59a468d21a6caeb5775b6cf838c2a3c5a1d4113ad19a6cb189af7b06a05a7d33a1e286430a3d8aaf721a43dcbb593dfb8a7789c61d94530d87143faec4cdd98dc80169173272aac0a193ede85278664fa9f9846c088e23eb02d8e9420f184ed07afa22eae07fd498fccfd81fa88ba3c9d", 0x95}, {&(0x7f0000000c40)="2e0a375d1c7787b83b463a92e675fea565e031179fcc4820ea9b9ad89d5847e7db1c84451a9292ab18e9fbb923221c8cb0f363d1623cc5fbbf71e3ad6f5fc6f4e0f5501831bc5b8954b23bd380c9ea876497dcbe98e682bab1e36f818a0410bf62f5d1976baac12c5f270c9e57b665906946308d590c6b0c8daeee1c7988df3acc88a969497d7a0de778494c5a2bb0d71135175aad7371f3d59cd1712a8e1d1f69", 0xa1}, {&(0x7f00000005c0)="a0c06a6032e349ed397c4c7ae941afa0639e97b23e9cc835", 0x18}, {&(0x7f0000000d00)="8686ac68e84d13b53ea1c78a8d9197ee2b60c64bf7afc9626ed47cec463eba6688bdca1880b590bed704f15d4b55cee42262ff19452ce36b594c38b56d8a9a7761fb24e8293b3995bc63cd56d0739646c6b88be07af1ca3d345342d46afcaa3c6e5a1385df75e298d3713882080f71bbbdea85e1327e6ffbf0c5ab973cb6304709db566a18c35034f2ec69611a84029e4ea506d65c6f30e49ea2066635c07fcb45d3aa12a0001a184ea0a61547d4e100df", 0xb1}], 0x6, &(0x7f0000000dc0)=[@pktinfo={{0x24, 0x29, 0x32, {@private1}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x21, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x1}]}}}, @dstopts={{0x28, 0x29, 0x37, {0x62, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0xd4}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x401}}], 0xa0}}, {{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000f00)="05e24e75cba60f53c53c3302ab4876b61f207e8cb9f6aa7984ec77a585525a39bedcefcd34a55f8c0686bd940ce2afb1e08447872e88b66ff66c6041642f2db86996e1913c08cb31df2394d65ef30bf08cb3fea804d3cfe04be0766071f6ac0f77eb32a8a0fdbcb8ec35c52a8030dab1ea123bb09684bf90f9b4c01efbf89c7da8a8b87b45cdc491600d041ce14a989fec585ff610d99ff9e4c0d12f7aa6a6fe9683a4cc58dd64f2d3f6e81fe5dd984caabe25312504c1b16c493a02ea3b7eb2a01bc8dcfb26f806b69f80fe33f4942327290e9eb8", 0xd5}, {&(0x7f0000000e80)="61c94e3107c26b", 0x7}, {&(0x7f0000001000)}, {&(0x7f0000001040)="b3a0cee89a31f3949f90d5c4aea2d9a5586c8bcb82f9ef66d98c47d42bb9f1411d2492a1aa7507b0950f1c8c6a72b7bcfb34685f3149c1b19a65f03fff5b4b15635ff3f6fffa5f1ece9fb5646eb400024b000d00777a9231dd53da40fea3b16b52a0563061cd9225ad1c6734b511cbd2eba8", 0x72}, {&(0x7f00000010c0)="d6d2722729aa263d3984546cbc1cf4001e1728fc843da76617936eebf56b824ea399a76c77196b519bf97bae057521b78cc40f5843f24b8ccb1a7b5f13f075cc66505496b7233963b95a1af902db327a7d35fcd1761995dc4a5c58395756bd112b3b62b94894f7e62d7f44abe43794051cac3b6d448e24", 0x77}, {&(0x7f0000001140)="62dc597776b28f46a9cb314a546e32e9f42231c35896bc3a9a68ddef22e44dea10491010fecc39d4fafbd4505590f37584b8f86da6e3d19a967b216029d50a5ba42d41316887f46ee3b1991c9d792f28e5612038bbd1c7277e62809e41697cbed3b28f9e9b96e15d1b74ca63d0da7d2faef630004c3efae49defad6ed4cf4aef3e924a8a9fd8ea5604e9832149832bdc71e23e6e6b047a821be9de49cba5caf37bfee541096ca6a36a8235421a96344b39ce77", 0xb3}, {&(0x7f0000001200)="e3af7c571e589db3d8c981311efce281f8f0f33d10ac882d1e07234691f21409a2c544608743d6380bbd2ee9d94dbba8daee2ca9e0ee04c784ea5a14f1448b", 0x3f}], 0x7, &(0x7f0000003300)=[@dstopts={{0x20, 0x29, 0x37, {0x3c, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x9}]}}}, @dstopts_2292={{0xe8, 0x29, 0x4, {0x6, 0x19, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x34}}, @jumbo={0xc2, 0x4, 0x2}, @ra={0x5, 0x2, 0x9}, @generic={0x4, 0xa6, "c7753ce307e7ec1eb193477f0f7ac1197a466965b6e0e6bbd5152ec17bf1b205829d33f7d1e885286377d4c046ab18e741e46882020a02cfeae982c69e8673ef7274817739cc8976fdab498f1172b422871a82fb82462e61bd2937829a8ec18c0d6325eb3414e09aeb14050f8cbc3be8d8a64b9e9fb4c52b1c80da1d4826f0df56dbf2dc4003cbc57209389ab1ce9636973adb78736cd1148dd0315f574164441c22884f5daf"}, @ra={0x5, 0x2, 0x1}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2de9}}, @hopopts={{0x118, 0x29, 0x36, {0x16, 0x1f, '\x00', [@calipso={0x7, 0x20, {0x0, 0x6, 0x4, 0x5, [0x8, 0x6, 0x8]}}, @jumbo={0xc2, 0x4, 0x7f}, @calipso={0x7, 0x50, {0x3, 0x12, 0x4, 0x3ff, [0x3, 0x4003cb82, 0x7, 0x100000000, 0xe, 0x734, 0x2, 0xf, 0x9]}}, @enc_lim={0x4, 0x1, 0x65}, @hao={0xc9, 0x10, @mcast1}, @ra={0x5, 0x2, 0xa5}, @calipso={0x7, 0x50, {0x2, 0x12, 0x6, 0x10, [0x7, 0xc03, 0x1, 0x3, 0xd, 0x80000001, 0x5, 0x3, 0x94]}}, @enc_lim={0x4, 0x1, 0x2}, @pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x6}}, @dstopts={{0xb8, 0x29, 0x37, {0x87, 0x13, '\x00', [@jumbo={0xc2, 0x4, 0x1}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @jumbo={0xc2, 0x4, 0x6f68}, @pad1, @jumbo={0xc2, 0x4, 0x821}, @generic={0x6, 0x6f, "033a3f062ea130a3d666ac2727480618082032eec88d766ad3313ae066e46df7fecbb6d6534b03385e102c0f3af47e2a8520f3021e896794c04e4c71b376df983a363df3895c0cad4391055cde8d690d7182945363960a1b9a0f872aed29af0f838f8c3ddc8c1a3d6916132cf66bef"}, @ra={0x5, 0x2, 0x7}]}}}, @hopopts={{0xc0, 0x29, 0x36, {0x87, 0x15, '\x00', [@pad1, @generic={0xab, 0x8e, "1b0414c2db1a9e467f7b66b85a1fafbd170464b13a22a0c9f9e5bf6fd03b0695047be678100f4be917c054dca408e8edbadcb7304b41275cc132df1aced93a424aa16b2cb07d24ab7c587533150a456d40a4ab728429a60487c0152ca335528d3527a1608a6247175f3770cb7cb3720e0ee6e236cbde43bad3e3d5b099ac3bbe5e784c5472d8cc64d614d6c56552"}, @jumbo={0xc2, 0x4, 0x7}, @pad1, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x2}]}}}], 0x3c8}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001640)="d1bf725eb166dd94bc59a1258a2ceadff526dd9f3b4b6c5b9238f974668c672f925217b9500b19e11e627f44e63e09c50fb7da0ba106520aab6c03ec466675f851e63b2145774fa1a32605b17be1107236c52d1064bda1fbb35638135db35afc975e9282cc7e7b2851865fafc3bd6ee4cf0d993bbcda94", 0x77}], 0x1, &(0x7f0000001700)=[@rthdr={{0x78, 0x29, 0x39, {0x5c, 0xc, 0x1, 0x6, 0x0, [@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @remote}, @private2, @mcast2, @rand_addr=' \x01\x00', @empty]}}}], 0x78}}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001780)="bba5d1b5c0ffce9cc6bfde858b6c696c959434eea129cfcbe0630cf2ab071e16c7f6ed5c88fde70f71f115ca3e9c7c8e3d0d4d99ec44286fe46207b66edb3c53719b7a1fc77dcd9d46f6879914f674e01ab0139d0f7407845fd0e36cc25d19c4487ede2948f2ba50361c83ee9ad907d80232c2ec14f91f12731b2d49a2fe7e369b8b088f657257c56e5bbf897e6b4c40f8b64914e7e4c1fd42511196e737d17e5ebe5bf71e8e471895efc7a427457afe4a75f0e5aead99ad7295a0550f", 0xbd}], 0x1, &(0x7f00000018c0)=[@rthdr={{0x68, 0x29, 0x39, {0x2, 0xa, 0x1, 0xf2, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private2]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r4}}}, @hopopts={{0x58, 0x29, 0x36, {0x2c, 0x7, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @jumbo={0xc2, 0x4, 0x7}, @generic={0xe, 0x21, "f0d7d682c23d683364905851d24b55547f1f5685e0f4fb2f559025e2b488cb190f"}, @pad1]}}}], 0xe8}}, {{&(0x7f00000019c0)={0xa, 0x4e23, 0x9, @empty}, 0x1c, &(0x7f0000002ec0)=[{&(0x7f0000001a00)="e202417b244533fe1e689315debedc2a7d0f323e69861dd50ee7c495605faf0d8344bb1cea8d9d1908ae79106ab34a12f1e5fd6895e0fdc7e14ad7598fb3ce1e58e0ddb1", 0x44}, {&(0x7f0000001a80)="639aa32c642809ad3e50d323d95c74967cec0dc851216b3c4a79603e4afad0b94d99c3819a3bcda2c5e070ed25e069200783b88e29ed1e2aea5ad3d202febd5ba60650bcd4015c1eb52970c4d036b276369bad8c55966b773740d19d423a5d25d37f75fa1d41582455599c8bc63361fe3c8dca638207b463a39973e25c300f900436c2580faf94fab3d77afffa8503e60c3a16513260d384ab", 0x99}, {&(0x7f0000001b40)="c09225107613b2b6d42645e5e1832491d9ed7ef8d39bbbc2450893ae491a1ee671ed300a539849a8a405089de52bf2743390ee84d07aaca5a06377aa2152edf49546", 0x42}, {&(0x7f0000001bc0)="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", 0x1000}, {&(0x7f0000002bc0)="75e7173bd3aec98d31ece4e4b9340ef4998cc99ac9916df5cb7e3f816ed96b11d03598faf22036e5598c98194657bc3059811c7978dcc77deb5c580db21e7236ccb9e48e53d1c1ce414b2bfd4093671fd5918214ad9f5509cada64322a83c707fca3f3e9ad0f9a833beba12632935208824f6c56411aead2e341b701e2246c9bd1bf1541ead74a01b2f0310843b777f45a376663e31c70ffd093e8b403a27007ef7c54feb83342cad554c042447ad48f23f230466a1d3ec2b00f4e2cf2478c14082ec47c6fdb51d263", 0xc9}, {&(0x7f0000002cc0)="c93eb95dc40ee6eae89df10b37d58779b70a0f38e7f8d733c7e8f61cf0487c56e87c6009edb2a38be99e5875e2ca9323c7bd85523c9f752de52c3f1d362de699f3ca98deff673cac499de54170d5e6499b650e856f9f2a16d5325041e049f687bafa9bf8a53defc40a14136ba6591d517c80771759c1446b67674e1f5c36a2ea155531bd4e860128111cd7649e2e8a7b60aeee10b4d46d1c3ae094f01b28b31be405f77ff513a56b0b9e2979356151b18cf09fa487858b0101d38fb6cc4f4e3b3f2030dd5b2a91bf0d3823e82ff283228de3", 0xd2}, {&(0x7f0000002dc0)="2f3ccdd6e3ab66ebd029888028542e23ae127ab1562be476e892857d7836df1355e62ebe153dd289207b73851c492cb2c1c2ddce026c260272202853f9f15ec9f6745e7e3409540bc0c2df0640ab127c02b37e020558299e6b46bf6f3e954d43cee668260c7d68823b332470993e6dacdba6aa8f9d0e4781e370991515a5b29601a0db06f9f2f51d08c1922d3714b0db27dfcc6f357e792759a184355c374c5b4ce34867c40b909e174a39a23ac6996e5f81d83b3bff00c7d072f66de51ea7a565c1d5d7dba90950821244b06fa3889d7d6f36aea8d65f6e5aa922f44f17c8b58e0e978b428483", 0xe7}], 0x7, &(0x7f0000002f40)=[@dstopts_2292={{0x68, 0x29, 0x4, {0x0, 0x9, '\x00', [@calipso={0x7, 0x28, {0x1, 0x8, 0x2, 0x6, [0x2d, 0x4, 0x4, 0x8000]}}, @pad1, @jumbo={0xc2, 0x4, 0x200}, @jumbo, @pad1, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}, @dstopts={{0x28, 0x29, 0x37, {0x62, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0xb}, @jumbo={0xc2, 0x4, 0x80}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x0, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0xa3}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}}]}}}, @dstopts_2292={{0x138, 0x29, 0x4, {0x2, 0x23, '\x00', [@pad1, @hao={0xc9, 0x10, @mcast2}, @hao={0xc9, 0x10, @loopback}, @pad1, @jumbo={0xc2, 0x4, 0x5af}, @ra={0x5, 0x2, 0xfff9}, @generic={0x1, 0xd0, "68256cfcad479b70581585e070726040b63ad8cf726ac07ceb8978f70429cba481789d3c6ffba8b35ba7b566516ec2a4af8a00966624fefed7cce6bf3aee5a313a12f6278d0339e48c66057a59362dad6a65c005c41e0fe2110b72bc1c1adf37ccaeaabff41327c8944568fee9b6a965e2631d9048bc05a45318ac9fad2adc231ff718805f79b9690e666b2be9acb1b40f72568c70a5839868c9016933a693bfd75072a405b7e356867eca011b079df46be75903c725647682a45eb3c40fc822ca9bb5b873083dba80aefbd95fb36f63"}, @jumbo={0xc2, 0x4, 0x7}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x55}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xe}}, @tclass={{0x14, 0x29, 0x43, 0xed48}}, @hopopts={{0x28, 0x29, 0x36, {0x32, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x10001}, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x4}]}}}], 0x250}}], 0x5, 0x4028044) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x4}, 0x8) r5 = socket$key(0xf, 0x3, 0x2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRES64, @ANYRESHEX=0x0, @ANYRESDEC, @ANYRES8], 0x6, 0x36e, &(0x7f00000007c0)="$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") r8 = socket$nl_audit(0x10, 0x3, 0x9) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) sendmsg$AUDIT_USER_AVC(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000530404"], 0x14}, 0x1, 0x0, 0x0, 0xc044}, 0x2080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, 0x1010, r1, 0x8000000) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.547698788s ago: executing program 1 (id=2110): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00"], 0x38}}, 0x0) 1.413135141s ago: executing program 1 (id=2111): r0 = getpid() r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1003, 0x10020, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) inotify_init1(0x800) 1.32192079s ago: executing program 4 (id=2112): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1fa) epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0xc, &(0x7f0000000540)=ANY=[@ANYRES8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000", @ANYRES64], 0x0, 0x2, 0x0, 0x0, 0xc3100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000191c0)=ANY=[@ANYBLOB="010000000b000000050010000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYRES32, @ANYBLOB="0000000002"], 0x48) 1.282366963s ago: executing program 0 (id=2113): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e880000850000007000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x2000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000280)={0x7, 0x7, 0x0, [{0x2, 0x5, 0xd4dc, 0x7, 0x2, 0x7, 0xe, '\x00', 0x1}, {0x2, 0x2, 0x2, 0x7f, 0xf, 0x9, 0x18, '\x00', 0x7}, {0x7, 0x7f, 0x2, 0x2e, 0x66, 0x2, 0x2, '\x00', 0x4}, {0xc6d6, 0x7, 0xc, 0xf3, 0x7, 0x4, 0x6, '\x00', 0x2}, {0x0, 0xd, 0x5, 0x3, 0x6d, 0xf2, 0xff, '\x00', 0x800}, {0x100000000, 0x345949f5, 0x0, 0xff, 0x1, 0xe, 0x3, '\x00', 0x3}, {0x2, 0x9, 0x5, 0x4, 0x9d, 0x2, 0x42, '\x00', 0x80000000}]}) socket$tipc(0x1e, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2f, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16001800050000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000960000000000000000000000008e9c7637", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYRES64=r1], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x26, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mmap_lock_acquire_returned\x00', r6}, 0x18) move_pages(0x0, 0x0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000240)=[0x0], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000500)='bcache_btree_write\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r7, 0xa, 0x13) fcntl$setlease(r7, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) pipe2(&(0x7f0000000140), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 1.281486404s ago: executing program 2 (id=2114): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) mount_setattr(r0, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = syz_open_dev$loop(&(0x7f0000000340), 0x6, 0x80) semctl$GETZCNT(0x0, 0x3, 0xf, 0x0) ioctl$BLKSECTGET(r3, 0x1267, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 1.21226433s ago: executing program 1 (id=2115): semget$private(0x0, 0x1, 0x402) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='sys_enter\x00'}, 0x18) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000340)={0x0, 0xaee2, 0x80, 0x3, 0x333}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001880)={'vxcan0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000031c0)=[{{&(0x7f00000003c0)={0xa, 0x4e23, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000b40)="90df4da2f5253f1d41dc602e3d492aae6379933d0d04484f015b46117d6d66a91d3e58285b1c39852b334ae5ffa31773c71a383821d918de29e7d1f94c680566f062c7a47328d7f0847709e35f77294de6971de0d08a694533f744f5129f9af5b983ad76f84a6ddd6d8388029bc87d7e8bb9560e151432621ce16a3362f7c983d8dcc17e4eb568f4a96260bcc2fc212e39d59395f99885fdbb8e31c38ecbfb925e217bc50fa31b939a63fcd5fab2df46b3c46471b27ef1f02ad990a069a6dde6712c56f0560986a499266b35c4f1d345891b3f9162ed333dcbb717c4e89d92c7becc75e12cf2aac8bee2d2ce1536f8cbc7165cd5", 0xf4}, {&(0x7f00000004c0)="c6ad9b068e2f69c4c670b5ada5ae5e43cc8b504de76e37d3627603a9c5ae3955695d1a92ad40fc0d24ec4ea576b5f1edf72cf0a9ef37d6923f88b126e00b57ff274319b2b3f9ecff015a4b467bc4428131cbe6f431d85257fccee250f55275693b88cc7cd9f86e29365f25c45df476f9642ad23001f81cd6a19d28bc1482d55d216856d4dcb177c0495ea49cbecda491ca12753521fea9cf002e2d2343d2d0a7e71e283fe08c17a9d22850bd", 0xac}, {&(0x7f0000000700)="6af909daedea8148db3370fe109c9f64f046b192ae314b57de084499410ed7f3329e0e33c59a468d21a6caeb5775b6cf838c2a3c5a1d4113ad19a6cb189af7b06a05a7d33a1e286430a3d8aaf721a43dcbb593dfb8a7789c61d94530d87143faec4cdd98dc80169173272aac0a193ede85278664fa9f9846c088e23eb02d8e9420f184ed07afa22eae07fd498fccfd81fa88ba3c9d", 0x95}, {&(0x7f0000000c40)="2e0a375d1c7787b83b463a92e675fea565e031179fcc4820ea9b9ad89d5847e7db1c84451a9292ab18e9fbb923221c8cb0f363d1623cc5fbbf71e3ad6f5fc6f4e0f5501831bc5b8954b23bd380c9ea876497dcbe98e682bab1e36f818a0410bf62f5d1976baac12c5f270c9e57b665906946308d590c6b0c8daeee1c7988df3acc88a969497d7a0de778494c5a2bb0d71135175aad7371f3d59cd1712a8e1d1f69", 0xa1}, {&(0x7f00000005c0)="a0c06a6032e349ed397c4c7ae941afa0639e97b23e9cc835", 0x18}, {&(0x7f0000000d00)="8686ac68e84d13b53ea1c78a8d9197ee2b60c64bf7afc9626ed47cec463eba6688bdca1880b590bed704f15d4b55cee42262ff19452ce36b594c38b56d8a9a7761fb24e8293b3995bc63cd56d0739646c6b88be07af1ca3d345342d46afcaa3c6e5a1385df75e298d3713882080f71bbbdea85e1327e6ffbf0c5ab973cb6304709db566a18c35034f2ec69611a84029e4ea506d65c6f30e49ea2066635c07fcb45d3aa12a0001a184ea0a61547d4e100df", 0xb1}], 0x6, &(0x7f0000000dc0)=[@pktinfo={{0x24, 0x29, 0x32, {@private1}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x21, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x1}]}}}, @dstopts={{0x28, 0x29, 0x37, {0x62, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0xd4}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x401}}], 0xa0}}, {{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000f00)="05e24e75cba60f53c53c3302ab4876b61f207e8cb9f6aa7984ec77a585525a39bedcefcd34a55f8c0686bd940ce2afb1e08447872e88b66ff66c6041642f2db86996e1913c08cb31df2394d65ef30bf08cb3fea804d3cfe04be0766071f6ac0f77eb32a8a0fdbcb8ec35c52a8030dab1ea123bb09684bf90f9b4c01efbf89c7da8a8b87b45cdc491600d041ce14a989fec585ff610d99ff9e4c0d12f7aa6a6fe9683a4cc58dd64f2d3f6e81fe5dd984caabe25312504c1b16c493a02ea3b7eb2a01bc8dcfb26f806b69f80fe33f4942327290e9eb8", 0xd5}, {&(0x7f0000000e80)="61c94e3107c26b", 0x7}, {&(0x7f0000001000)}, {&(0x7f0000001040)="b3a0cee89a31f3949f90d5c4aea2d9a5586c8bcb82f9ef66d98c47d42bb9f1411d2492a1aa7507b0950f1c8c6a72b7bcfb34685f3149c1b19a65f03fff5b4b15635ff3f6fffa5f1ece9fb5646eb400024b000d00777a9231dd53da40fea3b16b52a0563061cd9225ad1c6734b511cb", 0x6f}, {&(0x7f00000010c0)="d6d2722729aa263d3984546cbc1cf4001e1728fc843da76617936eebf56b824ea399a76c77196b519bf97bae057521b78cc40f5843f24b8ccb1a7b5f13f075cc66505496b7233963b95a1af902db327a7d35fcd1761995dc4a5c58395756bd112b3b62b94894f7e62d7f44abe43794051cac3b6d448e24", 0x77}, {&(0x7f0000001140)="62dc597776b28f46a9cb314a546e32e9f42231c35896bc3a9a68ddef22e44dea10491010fecc39d4fafbd4505590f37584b8f86da6e3d19a967b216029d50a5ba42d41316887f46ee3b1991c9d792f28e5612038bbd1c7277e62809e41697cbed3b28f9e9b96e15d1b74ca63d0da7d2faef630004c3efae49defad6ed4cf4aef3e924a8a9fd8ea5604e9832149832bdc71e23e6e6b047a821be9de49cba5caf37bfee541096ca6a36a8235421a96344b39ce77", 0xb3}, {&(0x7f0000001200)="e3af7c571e589db3d8c981311efce281f8f0f33d10ac882d1e07234691f21409a2c544608743d6380bbd2ee9d94dbba8daee2ca9e0ee04c784ea5a14f1448b", 0x3f}], 0x7, &(0x7f0000003300)=[@dstopts={{0x20, 0x29, 0x37, {0x3c, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x9}]}}}, @dstopts_2292={{0xe8, 0x29, 0x4, {0x6, 0x19, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x34}}, @jumbo={0xc2, 0x4, 0x2}, @ra={0x5, 0x2, 0x9}, @generic={0x4, 0xa6, "c7753ce307e7ec1eb193477f0f7ac1197a466965b6e0e6bbd5152ec17bf1b205829d33f7d1e885286377d4c046ab18e741e46882020a02cfeae982c69e8673ef7274817739cc8976fdab498f1172b422871a82fb82462e61bd2937829a8ec18c0d6325eb3414e09aeb14050f8cbc3be8d8a64b9e9fb4c52b1c80da1d4826f0df56dbf2dc4003cbc57209389ab1ce9636973adb78736cd1148dd0315f574164441c22884f5daf"}, @ra={0x5, 0x2, 0x1}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2de9}}, @hopopts={{0x118, 0x29, 0x36, {0x16, 0x1f, '\x00', [@calipso={0x7, 0x20, {0x0, 0x6, 0x4, 0x5, [0x8, 0x6, 0x8]}}, @jumbo={0xc2, 0x4, 0x7f}, @calipso={0x7, 0x50, {0x3, 0x12, 0x4, 0x3ff, [0x3, 0x4003cb82, 0x7, 0x100000000, 0xe, 0x734, 0x2, 0xf, 0x9]}}, @enc_lim={0x4, 0x1, 0x65}, @hao={0xc9, 0x10, @mcast1}, @ra={0x5, 0x2, 0xa5}, @calipso={0x7, 0x50, {0x2, 0x12, 0x6, 0x10, [0x7, 0xc03, 0x1, 0x3, 0xd, 0x80000001, 0x5, 0x3, 0x94]}}, @enc_lim={0x4, 0x1, 0x2}, @pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x6}}, @dstopts={{0xb8, 0x29, 0x37, {0x87, 0x13, '\x00', [@jumbo={0xc2, 0x4, 0x1}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @jumbo={0xc2, 0x4, 0x6f68}, @pad1, @jumbo={0xc2, 0x4, 0x821}, @generic={0x6, 0x6f, "033a3f062ea130a3d666ac2727480618082032eec88d766ad3313ae066e46df7fecbb6d6534b03385e102c0f3af47e2a8520f3021e896794c04e4c71b376df983a363df3895c0cad4391055cde8d690d7182945363960a1b9a0f872aed29af0f838f8c3ddc8c1a3d6916132cf66bef"}, @ra={0x5, 0x2, 0x7}]}}}, @hopopts={{0xd8, 0x29, 0x36, {0x87, 0x17, '\x00', [@pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic={0xab, 0x8e, "1b0414c2db1a9e467f7b66b85a1fafbd170464b13a22a0c9f9e5bf6fd03b0695047be678100f4be917c054dca408e8edbadcb7304b41275cc132df1aced93a424aa16b2cb07d24ab7c587533150a456d40a4ab728429a60487c0152ca335528d3527a1608a6247175f3770cb7cb3720e0ee6e236cbde43bad3e3d5b099ac3bbe5e784c5472d8cc64d614d6c56552"}, @jumbo={0xc2, 0x4, 0x7}, @pad1, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x2}]}}}], 0x3e0}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001640)="d1bf725eb166dd94bc59a1258a2ceadff526dd9f3b4b6c5b9238f974668c672f925217b9500b19e11e627f44e63e09c50fb7da0ba106520aab6c03ec466675f851e63b2145774fa1a32605b17be1107236c52d1064bda1fbb35638135db35afc975e9282cc7e7b2851865fafc3bd6ee4cf0d993bbcda94", 0x77}], 0x1, &(0x7f0000001700)=[@rthdr={{0x78, 0x29, 0x39, {0x5c, 0xc, 0x1, 0x6, 0x0, [@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @remote}, @private2, @mcast2, @rand_addr=' \x01\x00', @empty]}}}], 0x78}}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001780)="bba5d1b5c0ffce9cc6bfde858b6c696c959434eea129cfcbe0630cf2ab071e16c7f6ed5c88fde70f71f115ca3e9c7c8e3d0d4d99ec44286fe46207b66edb3c53719b7a1fc77dcd9d46f6879914f674e01ab0139d0f7407845fd0e36cc25d19c4487ede2948f2ba50361c83ee9ad907d80232c2ec14f91f12731b2d49a2fe7e369b8b088f657257c56e5bbf897e6b4c40f8b64914e7e4c1fd42511196e737d17e5ebe5bf71e8e471895efc7a427457afe4a75f0e5aead99ad7295a0550f", 0xbd}], 0x1, &(0x7f00000018c0)=[@rthdr={{0x68, 0x29, 0x39, {0x2, 0xa, 0x1, 0xf2, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private2]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r4}}}, @hopopts={{0x58, 0x29, 0x36, {0x2c, 0x7, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @jumbo={0xc2, 0x4, 0x7}, @generic={0xe, 0x21, "f0d7d682c23d683364905851d24b55547f1f5685e0f4fb2f559025e2b488cb190f"}, @pad1]}}}], 0xe8}}, {{&(0x7f00000019c0)={0xa, 0x4e23, 0x9, @empty}, 0x1c, &(0x7f0000002ec0)=[{&(0x7f0000001a00)="e202417b244533fe1e689315debedc2a7d0f323e69861dd50ee7c495605faf0d8344bb1cea8d9d1908ae79106ab34a12f1e5fd6895e0fdc7e14ad7598fb3ce1e58e0ddb1", 0x44}, {&(0x7f0000001a80)="639aa32c642809ad3e50d323d95c74967cec0dc851216b3c4a79603e4afad0b94d99c3819a3bcda2c5e070ed25e069200783b88e29ed1e2aea5ad3d202febd5ba60650bcd4015c1eb52970c4d036b276369bad8c55966b773740d19d423a5d25d37f75fa1d41582455599c8bc63361fe3c8dca638207b463a39973e25c300f900436c2580faf94fab3d77afffa8503e60c3a16513260d384ab", 0x99}, {&(0x7f0000001b40)="c09225107613b2b6d42645e5e1832491d9ed7ef8d39bbbc2450893ae491a1ee671ed300a539849a8a405089de52bf2743390ee84d07aaca5a06377aa2152edf49546", 0x42}, {&(0x7f0000001bc0)="116158600f7f272ddb218bb2a483a2938de9c92a2308c3bf1a7544ce4c01a25ae0a5935537b8fbc1d8a916f934a802726a72a55e27151da65d62463f06a61794fa23a9545ab0d0afa23fcf9a0a844f2499d9bc37e350b48687deb23e36765058d802174c85e53cb9327369c2caa3e5a021049b32c4e60acb4ed6e259718cc1e4c4a1639cffa9eb630fff643d6935de2f040e97e6a1a4b9505c40732ed7830aaa29b1657702850b492f35fca665f0dabf7b937313893fb8b9fcc6a03f3bf6718434d20ac1f641dc41eb747ca24e071202a4b378e6a8f640d2a98ce90e081c73877a442d867b6d2526d99512ee1eff3bbe7be84e38286acff9144de34b0913b0c238ae1136f9b549f576a76c13ebcb00eaf441b6e885f234aff9f530841f0ab5f1c03ebd6d38435416c42856822c987bd53a8ebd3f6b20fdddc31a253a3f68a620dbfe88831c033f9bb690a1b0c6247b257cbeb809b30abe53f45e5cb927a79e57d313e926eb2e62a66c8446471e333d32a2af5ca6ff540395990f24222a63067f434d69c43b71255b9f72b03fcd0708aef28df384073bf465c44e495f0e238278f285a8d3b3436a9ac149665497f78a8e63b7db53962d70651d0238fb64c096e1103867746fa7f4e129c097d6f1b12d0d31c128a02d6d781c1388b6b6ff73db91789ed1ba3ecd4b996e34521c6f06580151ddc7343bde10be99bbf242feae047180d4f7fecc231da6731348684ef020ebd889e071097d612f92b868ff38fb41149caa16dd2e6bd4b7d48ace1e0317de51ad8284c500e68c6e35ab9a43b336ec131fe332c348090529d0374db628c43821cd819eecfbc7259288aa25e7d0bb1c8d87d41fc889db3799747f10003dca3b2b419c3d0d2fafed7d1bb0529249c18e1ed83505945ffb15dc3faf0859ca2cd571f1e9ac90d9591882bee5b2b7e5e59c02d19be14d35d8ea96a493e854e45d481b51aebd8c2367c9f17873889ccae84f62907a046039d3e6a2d886c4029e4961b8e6ac6a2c5b7a7343b80c190862b396f1af955d274918d1881c78c620ebdea2dfa01084725ff81ea8dae26329a07ab182b2b655c9ba46283ff496625732d96d7f05f3e7803d85dc196d1352835fc07455bee24bd6b3e5bf4ca40f5bb6064afee5c81591bfd36e3d7e43bd99d63a779e5895da09ff32250d66044899b843eef468fc6e1b5b2d18021976b38357c9d98671cfdeb798a144bd9c3af4be11b3d1a610ce3dbda5babd8a308ea5032f0bf3bbfb6afe0a755084c6b2a572337e2bc497c9ac967570b45cd9d8f765ea48c1714db16f7a6dc99419f5ce13609678db610a18c189a49558f32cdef4004d10fc82b51b2f3bd5a9ba860e3576bebba7d0081bf212ec2004b43d697fb1fda8ee65a4c8a5064f70a59e80d512b6684ce7106b61887fa21964633d7e95d666d7d5436e56946549e437b5c992dff24036fb212a08143a8d0aecf62aac45422c91c618c9ba7eb76d685728316606da04ea44348dcea616e78379442c02d3d55ac55b2ae2dc778399d0d08c1f08acb295da08dd9378ef365c0f44de43e4a721f68a98664760743df36ce87e4bbf762dbe1cd247e9c45efbb050c11602745055a2f3f60cf4e543bbe51beb108f745fbb5dc40747e944697eeec40a5cddf2fc5d3fb5e6b518d8b6acde59be79b985a90f451b120cfa921a320e666891b9ab7d7938486634f7ee91ede1522e708f8da15e04018bda37adf7b86c480559a8032ae6c85104685f26f32817818000c91aa82fba56731b3b16b98eb2df49ffb70393f8681f32ccac6e322360f04f3d4dd42229bfbabc338b8aa84323d5079f7fbb0b537bdd01e4708d998e3eee43bfdccd85cb062f300f7a81a02a219ac4d19b741f13f30d4df7cb7e7d3b730ecd9215b41e4b9c7bb13acdc27c87070c2fc8abc7e28f16bf7a838e152ba68c25ca8b0683d93d844ebd71d4c665682574a96d5a652c8a7f417b92bc3e8341468703a7d54f185fb059fa410bdaae584da4ee5a4d0db81c5534ff7ee641d94387eef7306a43f744f7f7f8d4a981d424c83986d77cd3fc5c929ce4eb936b62f9eaa608ad4e55e672374afb38da08bdcfab860debfbc01b4761340c7e963318f6c2e298891f5aa99c19477dc90029d3899e8735ddd9a1110e190318e568ed8534fc7c7363f48516f48ee0fa93d6c530bcc8f54843692cc92377cfb63ee9a7b9e318cd908eadb431ca0f22ad09ff639f86af43a280285c7f8274f595d5d81f87ef9ac73844a6ae2b875fda1db85953fd2055d8710b10ab8b852372be1f916227c56b3fc2f85b8aba23c612e0a58ba24fb9b0781cf4374bc506cf4b67862b527ed3d17c9cdbd4603f3174c476086062556ac5c0cb30aaa82573250c83dc1d825d48291d300d62fac04ef65e1192f7d6783653cccc3a151165edcf8f5d3f351ebec891b0b7d197f200ba7864e4ceb0f2661249abbc0a219faa88662e57f01d1dc4a2ea97969c605a7c790b697bf5c3ffb107bacd3f757b1cb7e85100fc95a2b6d5b2e35d01ef6382b156292c1012778320949a650d2d0f72ff4f3cf414f28268b3110ef666d8d00a8ace2402aaedece05f252c1d263892d79bfa1b148b0c30f38bb6072f436c9ad18c3ad9e810d0eb92ae3acfe4c7f0473aa693a791a7ca278c775e10a415bfe033d54a3fdfa54aa939a54b9b73de41b466de3501c7f6513225318ea7f438f9c2bd16cb35ff5be108cc7ca06d954d3850f373323ec2bc4287de9ec9789352e1e5c9f4c1eed746509e9a0a655458e5dbd54589d60e71e1a0a8227c045b1d57d2bdee4fe93c8c0031069b86e33d3a1e1236c37d80fcf4f7a10d3334ad994d5292593afe5be1616f62cacc761147d9f1e4aa1977d2ad0ae862379c4339f5b1fea9b97260afe04ad5a51777db9eec69347ec35fde44f30e17a37dd97c0a3aa2125c83f5e53699372deffb3f385e981be26199ec51ec023081412004d62208c4a646923b73b54199de8b36047d293e3d0d1c0eabdfa53df1cd78bd71c6aab64348bc755d2f3473a2257d8f5749405359e77feca9574c1af51d8ff1621dbd182b028cf6e630ed58aed1f6b4d2abe1d14a746055423f8bc0cad4330190bc1768a6d9f4e67b7bd30d5c7b159585fef3a1ea9f628c704e1733adf6d7b2c66076a41751406690684fe8ee166d43f7dc2d7c77128f1e82f41f35a3132c84846e5760da15f27275f5f24573fd5803629df96d647dfc3b7eae2467653d8de528149f2e78e753df6a676e30bf9ddf38afd29705c2eb13ba1e60303e3e8a0ac4d5406d4fa43bcb71c41a57a8d8dcc895e4ecc6b5f7ad34fb2d7d4b65f0274a0dc0e223f52fb843bb16655d557e264440d20b90f0473a22624a24c5b53d2e80420bb66186402c709ebf0209d14d0344fcdd05610fc370572e75ad6b298894a7e643695837b932b78a76787b4fc4e30a6f518849db3e64946391e04b01e4bb02ea4089b31115b70f32e17c1873d09bc0c5afca8bfc2f96212f8c0e2265b426a2a20de30f97b7aa809662bb8df7d9f7a0115811fbe9835905a644c66917df40499274868321b471d44c354e2a1e90851cf80125dcedad1266e6e6a834b401b58436a22b168dc04663c62f409cfbaeb5dc28ef8d69f81454bc98684176df115f4502b4b32eb45d95a9020a089cbd3f7090a54ab97da76db6728fee44164ba079eafcc99185130889076ffa895facd453f11783d129fce713625c33e813683ee05de1840b0142eef0f395c3fa040f8be346f81eaaa2cabbbfefcf7d03f517e9f1811e78e83f03221ff34c13ac46a3567890e71ea101731a1bcca4dc637bacd105040f4674900e8284f7cfd74622e4df70f106676ac8f01e32c5bb1287ba0a404959318b5980ce45ec0c7e5ec182c58a32b5faeb4d37697f379629edafd5831568e8032e152927eb0f4febd7321f18e8d5f51b3e5558ce9615c6168cc00ff5f3c386acb4198d82c6a2f9e162bab5902f174b0a3595cd012d23d2d31447734af18568a3886532804955ba4d01b82a64f57fa23ddee130a6c7ecb32bf7293d3fd16cf41514a21a57bd6029e885e0898a48f97d4d9ac3ffea9105c5861d1ef0c4ea6238192b2300a1e33af3cdc4a119d2051d180db41c11c32e02aa11f5f339439a95a81b388bf946068730b3e9d4accdf4b286650a3f9d37b1571b21c95f1136caa18550ca4197302c5dd6e20939b9f9d31646d71ad764d848a4e742f39dfc5f1360b3fdbcc8f1091d8ed184bd1b59080d85453736ec69443f9c1b812bcaea0b5a3218f9634385f19b36c10da269fe99671fd83a8b78f1688c8073e1cb233303d4eabf35a4f1666d85a548a893a533df90b38935764016bd19e7d186ef851f69b6d2b958ee442c85abadb9348ea13e4d419297c0b4834fb6d94efcff136bcf09a53f1117c36203e5179c39e87a2148cec5ed65f53af08fc76a23471090b9958b3fcd301f78b151c030f4cbf5c6ba199f7ac78a28a7941b15f5a0d35b0f3a802a324b1fcdc1e3d06e59d705b51a92b078b32a3bf2d5b53367fd79171ef800204d47deae50f79052a6c0b8c615aa290ce689bcb80922f43e7f448fba0acb1da1f7da31f8cbe21c1953c83c3aaa3cf8ad87435958d2a75f93acc80c5d4e88b33342f98fa3be1f76f08b6432e82e2d726d4083ea1a379a65b79f0c68db9d701d15d09f6b2e1eae1c8673ed834f4a27ed081274c6f1279f6de285a04a605b304daf7429e9e5148ff70f5ba926663047714aa99b6ccca4a625adabbc41d7a6e3632553b52a95c6d6deab3bc52939d3313284b8df9a5a506d1b3099fadeb3c5a989163b914b991a0fc872566a6304a9ca4649c4a28ad865b446b27ee303c8df3c3a040b25e36a128eda15646ab0edd514399f76aad489feaff18a985b0c03fcde57d281e5a8404f95ef0df1c726619cff828a6946c42b4813f77ae4ab863fe3339bedf748c2d6e32d239621b9375d7eabe4efa715f33eade7f4e04755734d2f9d753b471ceb75905ea1a59a34f8c04723358127f47ff4aefdbdada1e27f54b28e3fa938e2083be4793295e4fce34ae5d62a16e9e6e64349f512f4cf17d4c643e8244d1b7227c4adf09176ff1371cf1e768955bdf96f211c01f83b4ef7c4a792fa327da4dcb46530e82b1749e27e4f7910e2fd8c738d64213ec74637bb390a05f6653658a29fd0ff42d389b63f4387466add69a7ef1b80105a25858c3e3be9f42ee9afff975be2c6aae1cc5e2b9d3856817b87459dbca41f96dd90efb366b00140e34344b5bceb4d60b2d6a23494f57d1d2625976e4a9e7b3f25b777150e36f255950dca3777e3a4f965b7abd9767b059d4d3a68bed3ea7e7848388cc28d936cb92b0f22f334c1ff90b862391f5b2868c24eeeef7157de4b469108a2134b17b9484483c805a3d0ec3e50636e5aa995ffdb9a2533f49a125ed8b7b1da73b7ed16027821f11adfb125660f66bd0b517e033c95ab9175cbfa6c0c843e3e0c71c058d2aacc4e4c9d2d4092f184a081dff3d5046773008ef6eb00959fcb24b1be1cbf9625b39df8a2ac133dc43a34bb0b8432f3fe77aa1f94c7706c24582901a09eb89419519290d42f0f0769802fb2a46b316678934b6b630089ec588d89a002441bbaa6cf3d7033827afe42195618ec39e134c49b23df100c5969914cd181e7599f063461b7e20864ad43b27b21da19b701389e59b0540fdc97ebace39baea156b840a2595f4b29e678588dada23cb062a7a659a2b9f67c3270f11b50be46225706bf94d0d397b2a7743b53", 0x1000}, {&(0x7f0000002bc0)="75e7173bd3aec98d31ece4e4b9340ef4998cc99ac9916df5cb7e3f816ed96b11d03598faf22036e5598c98194657bc3059811c7978dcc77deb5c580db21e7236ccb9e48e53d1c1ce414b2bfd4093671fd5918214ad9f5509cada64322a83c707fca3f3e9ad0f9a833beba12632935208824f6c56411aead2e341b701e2246c9bd1bf1541ead74a01b2f0310843b777f45a376663e31c70ffd093e8b403a27007ef7c54feb83342cad554c042447ad48f23f230466a1d3ec2b00f4e2cf2478c14082ec47c6fdb51d263", 0xc9}, {&(0x7f0000002cc0)="c93eb95dc40ee6eae89df10b37d58779b70a0f38e7f8d733c7e8f61cf0487c56e87c6009edb2a38be99e5875e2ca9323c7bd85523c9f752de52c3f1d362de699f3ca98deff673cac499de54170d5e6499b650e856f9f2a16d5325041e049f687bafa9bf8a53defc40a14136ba6591d517c80771759c1446b67674e1f5c36a2ea155531bd4e860128111cd7649e2e8a7b60aeee10b4d46d1c3ae094f01b28b31be405f77ff513a56b0b9e2979356151b18cf09fa487858b0101d38fb6cc4f4e3b3f2030dd5b2a91bf0d3823e82ff283228de3", 0xd2}, {&(0x7f0000002dc0)="2f3ccdd6e3ab66ebd029888028542e23ae127ab1562be476e892857d7836df1355e62ebe153dd289207b73851c492cb2c1c2ddce026c260272202853f9f15ec9f6745e7e3409540bc0c2df0640ab127c02b37e020558299e6b46bf6f3e954d43cee668260c7d68823b332470993e6dacdba6aa8f9d0e4781e370991515a5b29601a0db06f9f2f51d08c1922d3714b0db27dfcc6f357e792759a184355c374c5b4ce34867c40b909e174a39a23ac6996e5f81d83b3bff00c7d072f66de51ea7a565c1d5d7dba90950821244b06fa3889d7d6f36aea8d65f6e5aa922f44f17c8b58e0e978b428483", 0xe7}], 0x7, &(0x7f0000002f40)=[@dstopts_2292={{0x68, 0x29, 0x4, {0x0, 0x9, '\x00', [@calipso={0x7, 0x28, {0x1, 0x8, 0x2, 0x6, [0x2d, 0x4, 0x4, 0x8000]}}, @pad1, @jumbo={0xc2, 0x4, 0x200}, @jumbo, @pad1, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}, @dstopts={{0x28, 0x29, 0x37, {0x62, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0xb}, @jumbo={0xc2, 0x4, 0x80}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x0, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0xa3}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}}]}}}, @dstopts_2292={{0x138, 0x29, 0x4, {0x2, 0x23, '\x00', [@pad1, @hao={0xc9, 0x10, @mcast2}, @hao={0xc9, 0x10, @loopback}, @pad1, @jumbo={0xc2, 0x4, 0x5af}, @ra={0x5, 0x2, 0xfff9}, @generic={0x1, 0xd0, "68256cfcad479b70581585e070726040b63ad8cf726ac07ceb8978f70429cba481789d3c6ffba8b35ba7b566516ec2a4af8a00966624fefed7cce6bf3aee5a313a12f6278d0339e48c66057a59362dad6a65c005c41e0fe2110b72bc1c1adf37ccaeaabff41327c8944568fee9b6a965e2631d9048bc05a45318ac9fad2adc231ff718805f79b9690e666b2be9acb1b40f72568c70a5839868c9016933a693bfd75072a405b7e356867eca011b079df46be75903c725647682a45eb3c40fc822ca9bb5b873083dba80aefbd95fb36f63"}, @jumbo={0xc2, 0x4, 0x7}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x55}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xe}}, @tclass={{0x14, 0x29, 0x43, 0xed48}}, @hopopts={{0x28, 0x29, 0x36, {0x32, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x10001}, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x4}]}}}], 0x250}}], 0x5, 0x4028044) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x4}, 0x8) r5 = socket$key(0xf, 0x3, 0x2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRES64, @ANYRESHEX=0x0, @ANYRESDEC, @ANYRES8], 0x6, 0x36e, &(0x7f00000007c0)="$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") r8 = socket$nl_audit(0x10, 0x3, 0x9) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) sendmsg$AUDIT_USER_AVC(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000530404"], 0x14}, 0x1, 0x0, 0x0, 0xc044}, 0x2080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, 0x1010, r1, 0x8000000) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.146341337s ago: executing program 4 (id=2116): bpf$MAP_CREATE(0x0, 0x0, 0x48) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_open_dev$loop(&(0x7f0000000340), 0x6, 0x80) semctl$GETZCNT(0x0, 0x3, 0xf, 0x0) ioctl$BLKSECTGET(r1, 0x1267, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000", 0x2c}], 0x1}, 0x40) io_setup(0x7, &(0x7f0000000240)) syz_open_dev$usbfs(&(0x7f00000001c0), 0x6, 0x80000) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 1.089215833s ago: executing program 2 (id=2117): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100800095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect(r2, &(0x7f0000000000)=@caif=@dbg={0x25, 0xfe, 0x3}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000000)=0x4040, 0x4) r6 = dup(r5) sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa0000000056363b57ab309fe3e03fb8890324b4000000001c0000000000eeffff"], 0x40}, 0x0) read$char_usb(r6, &(0x7f0000000180)=""/133, 0x85) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x22401) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) close(r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f00000005c0), 0x4003, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x383}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) syz_emit_ethernet(0x76, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaae0d7dbc910539e0caaaaaaaabb08004500000000000000069078ac1414bbac1414aa4000400100", @ANYBLOB="25155bc47ba23f3eebb58a07716869e74e2eddfb65136b16a8c95c2b59ae2b42268eb74f231fee023a3dc20b9fc9d8d8e6b49e1a6a01fad6fe2f6c935d1030bf6c381378df3b5d4884af73fe1612c13a4776e38c20bf08a72a709817122bdb398c1485848dd464529eaba8fabd4a913c72f093f135f41e670226117dbf59f87e92367441bcea5d2fc60669aa64be04f9e5f2a228ffe832813cdcd064d7ab43fa39968a0e6a785413d3dc9adaea7438ea9291cde6cfa346ae37bc4a7725054b2ef2d90b4a43f8eb29b0b661e2a755fac1da785f8084573888949c7fa1bfe396923e8b60484059b9c121869468f3b2", @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 'queue0\x00', 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r10, 0x40605346, 0x0) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCVHANGUP(r11, 0x5437, 0x2) writev(r11, &(0x7f0000000400)=[{&(0x7f00000004c0)="e31484", 0x3}], 0x1) 825.390739ms ago: executing program 4 (id=2119): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000180)='sys_enter\x00', r1, 0x0, 0x6}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 806.20056ms ago: executing program 1 (id=2121): semget$private(0x0, 0x1, 0x402) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='sys_enter\x00'}, 0x18) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000340)={0x0, 0xaee2, 0x80, 0x3, 0x333}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001880)={'vxcan0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000031c0)=[{{&(0x7f00000003c0)={0xa, 0x4e23, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000b40)="90df4da2f5253f1d41dc602e3d492aae6379933d0d04484f015b46117d6d66a91d3e58285b1c39852b334ae5ffa31773c71a383821d918de29e7d1f94c680566f062c7a47328d7f0847709e35f77294de6971de0d08a694533f744f5129f9af5b983ad76f84a6ddd6d8388029bc87d7e8bb9560e151432621ce16a3362f7c983d8dcc17e4eb568f4a96260bcc2fc212e39d59395f99885fdbb8e31c38ecbfb925e217bc50fa31b939a63fcd5fab2df46b3c46471b27ef1f02ad990a069a6dde6712c56f0560986a499266b35c4f1d345891b3f9162ed333dcbb717c4e89d92c7becc75e12cf2aac8bee2d2ce1536f8cbc7165cd5", 0xf4}, {&(0x7f00000004c0)="c6ad9b068e2f69c4c670b5ada5ae5e43cc8b504de76e37d3627603a9c5ae3955695d1a92ad40fc0d24ec4ea576b5f1edf72cf0a9ef37d6923f88b126e00b57ff274319b2b3f9ecff015a4b467bc4428131cbe6f431d85257fccee250f55275693b88cc7cd9f86e29365f25c45df476f9642ad23001f81cd6a19d28bc1482d55d216856d4dcb177c0495ea49cbecda491ca12753521fea9cf002e2d2343d2d0a7e71e283fe08c17a9d22850bd", 0xac}, {&(0x7f0000000700)="6af909daedea8148db3370fe109c9f64f046b192ae314b57de084499410ed7f3329e0e33c59a468d21a6caeb5775b6cf838c2a3c5a1d4113ad19a6cb189af7b06a05a7d33a1e286430a3d8aaf721a43dcbb593dfb8a7789c61d94530d87143faec4cdd98dc80169173272aac0a193ede85278664fa9f9846c088e23eb02d8e9420f184ed07afa22eae07fd498fccfd81fa88ba3c9d", 0x95}, {&(0x7f0000000c40)="2e0a375d1c7787b83b463a92e675fea565e031179fcc4820ea9b9ad89d5847e7db1c84451a9292ab18e9fbb923221c8cb0f363d1623cc5fbbf71e3ad6f5fc6f4e0f5501831bc5b8954b23bd380c9ea876497dcbe98e682bab1e36f818a0410bf62f5d1976baac12c5f270c9e57b665906946308d590c6b0c8daeee1c7988df3acc88a969497d7a0de778494c5a2bb0d71135175aad7371f3d59cd1712a8e1d1f69", 0xa1}, {&(0x7f00000005c0)="a0c06a6032e349ed397c4c7ae941afa0639e97b23e9cc835", 0x18}, {&(0x7f0000000d00)="8686ac68e84d13b53ea1c78a8d9197ee2b60c64bf7afc9626ed47cec463eba6688bdca1880b590bed704f15d4b55cee42262ff19452ce36b594c38b56d8a9a7761fb24e8293b3995bc63cd56d0739646c6b88be07af1ca3d345342d46afcaa3c6e5a1385df75e298d3713882080f71bbbdea85e1327e6ffbf0c5ab973cb6304709db566a18c35034f2ec69611a84029e4ea506d65c6f30e49ea2066635c07fcb45d3aa12a0001a184ea0a61547d4e100df", 0xb1}], 0x6, &(0x7f0000000dc0)=[@pktinfo={{0x24, 0x29, 0x32, {@private1}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x21, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x1}]}}}, @dstopts={{0x28, 0x29, 0x37, {0x62, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0xd4}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x401}}], 0xa0}}, {{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000f00)="05e24e75cba60f53c53c3302ab4876b61f207e8cb9f6aa7984ec77a585525a39bedcefcd34a55f8c0686bd940ce2afb1e08447872e88b66ff66c6041642f2db86996e1913c08cb31df2394d65ef30bf08cb3fea804d3cfe04be0766071f6ac0f77eb32a8a0fdbcb8ec35c52a8030dab1ea123bb09684bf90f9b4c01efbf89c7da8a8b87b45cdc491600d041ce14a989fec585ff610d99ff9e4c0d12f7aa6a6fe9683a4cc58dd64f2d3f6e81fe5dd984caabe25312504c1b16c493a02ea3b7eb2a01bc8dcfb26f806b69f80fe33f4942327290e9eb8", 0xd5}, {&(0x7f0000000e80)="61c94e3107c26b", 0x7}, {&(0x7f0000001000)}, {&(0x7f0000001040)="b3a0cee89a31f3949f90d5c4aea2d9a5586c8bcb82f9ef66d98c47d42bb9f1411d2492a1aa7507b0950f1c8c6a72b7bcfb34685f3149c1b19a65f03fff5b4b15635ff3f6fffa5f1ece9fb5646eb400024b000d00777a9231dd53da40fea3b16b52a0563061cd9225ad1c67", 0x6b}, {&(0x7f00000010c0)="d6d2722729aa263d3984546cbc1cf4001e1728fc843da76617936eebf56b824ea399a76c77196b519bf97bae057521b78cc40f5843f24b8ccb1a7b5f13f075cc66505496b7233963b95a1af902db327a7d35fcd1761995dc4a5c58395756bd112b3b62b94894f7e62d7f44abe43794051cac3b6d448e24", 0x77}, {&(0x7f0000001140)="62dc597776b28f46a9cb314a546e32e9f42231c35896bc3a9a68ddef22e44dea10491010fecc39d4fafbd4505590f37584b8f86da6e3d19a967b216029d50a5ba42d41316887f46ee3b1991c9d792f28e5612038bbd1c7277e62809e41697cbed3b28f9e9b96e15d1b74ca63d0da7d2faef630004c3efae49defad6ed4cf4aef3e924a8a9fd8ea5604e9832149832bdc71e23e6e6b047a821be9de49cba5caf37bfee541096ca6a36a8235421a96344b39ce77", 0xb3}, {&(0x7f0000001200)="e3af7c571e589db3d8c981311efce281f8f0f33d10ac882d1e07234691f21409a2c544608743d6380bbd2ee9d94dbba8daee2ca9e0ee04c784ea5a14f1448b", 0x3f}], 0x7, &(0x7f0000003300)=[@dstopts={{0x20, 0x29, 0x37, {0x3c, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x9}]}}}, @dstopts_2292={{0xe8, 0x29, 0x4, {0x6, 0x19, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x34}}, @jumbo={0xc2, 0x4, 0x2}, @ra={0x5, 0x2, 0x9}, @generic={0x4, 0xa6, "c7753ce307e7ec1eb193477f0f7ac1197a466965b6e0e6bbd5152ec17bf1b205829d33f7d1e885286377d4c046ab18e741e46882020a02cfeae982c69e8673ef7274817739cc8976fdab498f1172b422871a82fb82462e61bd2937829a8ec18c0d6325eb3414e09aeb14050f8cbc3be8d8a64b9e9fb4c52b1c80da1d4826f0df56dbf2dc4003cbc57209389ab1ce9636973adb78736cd1148dd0315f574164441c22884f5daf"}, @ra={0x5, 0x2, 0x1}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2de9}}, @hopopts={{0x118, 0x29, 0x36, {0x16, 0x1f, '\x00', [@calipso={0x7, 0x20, {0x0, 0x6, 0x4, 0x5, [0x8, 0x6, 0x8]}}, @jumbo={0xc2, 0x4, 0x7f}, @calipso={0x7, 0x50, {0x3, 0x12, 0x4, 0x3ff, [0x3, 0x4003cb82, 0x7, 0x100000000, 0xe, 0x734, 0x2, 0xf, 0x9]}}, @enc_lim={0x4, 0x1, 0x65}, @hao={0xc9, 0x10, @mcast1}, @ra={0x5, 0x2, 0xa5}, @calipso={0x7, 0x50, {0x2, 0x12, 0x6, 0x10, [0x7, 0xc03, 0x1, 0x3, 0xd, 0x80000001, 0x5, 0x3, 0x94]}}, @enc_lim={0x4, 0x1, 0x2}, @pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x6}}, @dstopts={{0xb8, 0x29, 0x37, {0x87, 0x13, '\x00', [@jumbo={0xc2, 0x4, 0x1}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @jumbo={0xc2, 0x4, 0x6f68}, @pad1, @jumbo={0xc2, 0x4, 0x821}, @generic={0x6, 0x6f, "033a3f062ea130a3d666ac2727480618082032eec88d766ad3313ae066e46df7fecbb6d6534b03385e102c0f3af47e2a8520f3021e896794c04e4c71b376df983a363df3895c0cad4391055cde8d690d7182945363960a1b9a0f872aed29af0f838f8c3ddc8c1a3d6916132cf66bef"}, @ra={0x5, 0x2, 0x7}]}}}, @hopopts={{0xd8, 0x29, 0x36, {0x87, 0x17, '\x00', [@pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic={0xab, 0x8e, "1b0414c2db1a9e467f7b66b85a1fafbd170464b13a22a0c9f9e5bf6fd03b0695047be678100f4be917c054dca408e8edbadcb7304b41275cc132df1aced93a424aa16b2cb07d24ab7c587533150a456d40a4ab728429a60487c0152ca335528d3527a1608a6247175f3770cb7cb3720e0ee6e236cbde43bad3e3d5b099ac3bbe5e784c5472d8cc64d614d6c56552"}, @jumbo={0xc2, 0x4, 0x7}, @pad1, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x2}]}}}], 0x3e0}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001640)="d1bf725eb166dd94bc59a1258a2ceadff526dd9f3b4b6c5b9238f974668c672f925217b9500b19e11e627f44e63e09c50fb7da0ba106520aab6c03ec466675f851e63b2145774fa1a32605b17be1107236c52d1064bda1fbb35638135db35afc975e9282cc7e7b2851865fafc3bd6ee4cf0d993bbcda94", 0x77}], 0x1, &(0x7f0000001700)=[@rthdr={{0x78, 0x29, 0x39, {0x5c, 0xc, 0x1, 0x6, 0x0, [@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @remote}, @private2, @mcast2, @rand_addr=' \x01\x00', @empty]}}}], 0x78}}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001780)="bba5d1b5c0ffce9cc6bfde858b6c696c959434eea129cfcbe0630cf2ab071e16c7f6ed5c88fde70f71f115ca3e9c7c8e3d0d4d99ec44286fe46207b66edb3c53719b7a1fc77dcd9d46f6879914f674e01ab0139d0f7407845fd0e36cc25d19c4487ede2948f2ba50361c83ee9ad907d80232c2ec14f91f12731b2d49a2fe7e369b8b088f657257c56e5bbf897e6b4c40f8b64914e7e4c1fd42511196e737d17e5ebe5bf71e8e471895efc7a427457afe4a75f0e5aead99ad7295a0550f", 0xbd}], 0x1, &(0x7f00000018c0)=[@rthdr={{0x68, 0x29, 0x39, {0x2, 0xa, 0x1, 0xf2, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private2]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r4}}}, @hopopts={{0x58, 0x29, 0x36, {0x2c, 0x7, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @jumbo={0xc2, 0x4, 0x7}, @generic={0xe, 0x21, "f0d7d682c23d683364905851d24b55547f1f5685e0f4fb2f559025e2b488cb190f"}, @pad1]}}}], 0xe8}}, {{&(0x7f00000019c0)={0xa, 0x4e23, 0x9, @empty}, 0x1c, &(0x7f0000002ec0)=[{&(0x7f0000001a00)="e202417b244533fe1e689315debedc2a7d0f323e69861dd50ee7c495605faf0d8344bb1cea8d9d1908ae79106ab34a12f1e5fd6895e0fdc7e14ad7598fb3ce1e58e0ddb1", 0x44}, {&(0x7f0000001a80)="639aa32c642809ad3e50d323d95c74967cec0dc851216b3c4a79603e4afad0b94d99c3819a3bcda2c5e070ed25e069200783b88e29ed1e2aea5ad3d202febd5ba60650bcd4015c1eb52970c4d036b276369bad8c55966b773740d19d423a5d25d37f75fa1d41582455599c8bc63361fe3c8dca638207b463a39973e25c300f900436c2580faf94fab3d77afffa8503e60c3a16513260d384ab", 0x99}, {&(0x7f0000001b40)="c09225107613b2b6d42645e5e1832491d9ed7ef8d39bbbc2450893ae491a1ee671ed300a539849a8a405089de52bf2743390ee84d07aaca5a06377aa2152edf49546", 0x42}, {&(0x7f0000001bc0)="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", 0x1000}, {&(0x7f0000002bc0)="75e7173bd3aec98d31ece4e4b9340ef4998cc99ac9916df5cb7e3f816ed96b11d03598faf22036e5598c98194657bc3059811c7978dcc77deb5c580db21e7236ccb9e48e53d1c1ce414b2bfd4093671fd5918214ad9f5509cada64322a83c707fca3f3e9ad0f9a833beba12632935208824f6c56411aead2e341b701e2246c9bd1bf1541ead74a01b2f0310843b777f45a376663e31c70ffd093e8b403a27007ef7c54feb83342cad554c042447ad48f23f230466a1d3ec2b00f4e2cf2478c14082ec47c6fdb51d263", 0xc9}, {&(0x7f0000002cc0)="c93eb95dc40ee6eae89df10b37d58779b70a0f38e7f8d733c7e8f61cf0487c56e87c6009edb2a38be99e5875e2ca9323c7bd85523c9f752de52c3f1d362de699f3ca98deff673cac499de54170d5e6499b650e856f9f2a16d5325041e049f687bafa9bf8a53defc40a14136ba6591d517c80771759c1446b67674e1f5c36a2ea155531bd4e860128111cd7649e2e8a7b60aeee10b4d46d1c3ae094f01b28b31be405f77ff513a56b0b9e2979356151b18cf09fa487858b0101d38fb6cc4f4e3b3f2030dd5b2a91bf0d3823e82ff283228de3", 0xd2}, {&(0x7f0000002dc0)="2f3ccdd6e3ab66ebd029888028542e23ae127ab1562be476e892857d7836df1355e62ebe153dd289207b73851c492cb2c1c2ddce026c260272202853f9f15ec9f6745e7e3409540bc0c2df0640ab127c02b37e020558299e6b46bf6f3e954d43cee668260c7d68823b332470993e6dacdba6aa8f9d0e4781e370991515a5b29601a0db06f9f2f51d08c1922d3714b0db27dfcc6f357e792759a184355c374c5b4ce34867c40b909e174a39a23ac6996e5f81d83b3bff00c7d072f66de51ea7a565c1d5d7dba90950821244b06fa3889d7d6f36aea8d65f6e5aa922f44f17c8b58e0e978b428483", 0xe7}], 0x7, &(0x7f0000002f40)=[@dstopts_2292={{0x68, 0x29, 0x4, {0x0, 0x9, '\x00', [@calipso={0x7, 0x28, {0x1, 0x8, 0x2, 0x6, [0x2d, 0x4, 0x4, 0x8000]}}, @pad1, @jumbo={0xc2, 0x4, 0x200}, @jumbo, @pad1, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}, @dstopts={{0x28, 0x29, 0x37, {0x62, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0xb}, @jumbo={0xc2, 0x4, 0x80}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x0, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0xa3}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}}]}}}, @dstopts_2292={{0x138, 0x29, 0x4, {0x2, 0x23, '\x00', [@pad1, @hao={0xc9, 0x10, @mcast2}, @hao={0xc9, 0x10, @loopback}, @pad1, @jumbo={0xc2, 0x4, 0x5af}, @ra={0x5, 0x2, 0xfff9}, @generic={0x1, 0xd0, "68256cfcad479b70581585e070726040b63ad8cf726ac07ceb8978f70429cba481789d3c6ffba8b35ba7b566516ec2a4af8a00966624fefed7cce6bf3aee5a313a12f6278d0339e48c66057a59362dad6a65c005c41e0fe2110b72bc1c1adf37ccaeaabff41327c8944568fee9b6a965e2631d9048bc05a45318ac9fad2adc231ff718805f79b9690e666b2be9acb1b40f72568c70a5839868c9016933a693bfd75072a405b7e356867eca011b079df46be75903c725647682a45eb3c40fc822ca9bb5b873083dba80aefbd95fb36f63"}, @jumbo={0xc2, 0x4, 0x7}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x55}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xe}}, @tclass={{0x14, 0x29, 0x43, 0xed48}}, @hopopts={{0x28, 0x29, 0x36, {0x32, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x10001}, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x4}]}}}], 0x250}}], 0x5, 0x4028044) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x4}, 0x8) r5 = socket$key(0xf, 0x3, 0x2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRES64, @ANYRESHEX=0x0, @ANYRESDEC, @ANYRES8], 0x6, 0x36e, &(0x7f00000007c0)="$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") r8 = socket$nl_audit(0x10, 0x3, 0x9) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) sendmsg$AUDIT_USER_AVC(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000530404"], 0x14}, 0x1, 0x0, 0x0, 0xc044}, 0x2080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, 0x1010, r1, 0x8000000) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 785.806212ms ago: executing program 4 (id=2122): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) mount_setattr(r0, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = syz_open_dev$loop(&(0x7f0000000340), 0x6, 0x80) semctl$GETZCNT(0x0, 0x3, 0xf, 0x0) ioctl$BLKSECTGET(r3, 0x1267, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 599.660061ms ago: executing program 4 (id=2123): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 424.742728ms ago: executing program 1 (id=2125): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0xfffffff8, 0xaeb, 0xe57, 0x1, 0x7, "3ce6920887000000000000000d00", 0x4, 0x1ff}) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000001440), &(0x7f0000000000)=0x8) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="a6aa0000000000000a004e2307000040fe8000000000000000000000000000bb490000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000020000000a004e210000000c0000000000000000000000000000000101000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2400000001fe8000000000000000000000000000bb0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000"], 0x190) write(r0, &(0x7f0000000740)="656aa90d2aa17eb2", 0x8) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xd) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x844702, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x477, &(0x7f0000000bc0)="$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") r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x10000, 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f00000003c0)={'erspan0\x00', 0x0, 0x80, 0x7c80, 0x7, 0x9, {{0x23, 0x4, 0x1, 0x5, 0x8c, 0x67, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010101, @private=0xa010102, {[@timestamp_addr={0x44, 0xc, 0x30, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x3f}, 0x8001}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0xf, 0x6, [@private=0xa010101, @loopback, @multicast1]}, @timestamp_prespec={0x44, 0x3c, 0x88, 0x3, 0x5, [{@loopback, 0x1}, {@multicast1, 0x3}, {@private=0xa010100, 0x1ff}, {@empty, 0x87}, {@rand_addr=0x64010101, 0xe17}, {@loopback, 0x4}, {@rand_addr=0x64010102, 0x8}]}, @generic={0x86, 0xa, "96baf5483af3dafd"}, @end, @timestamp_addr={0x44, 0xc, 0x9d, 0x1, 0xe, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x55b}]}, @ra={0x94, 0x4}]}}}}}) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000480)={@empty, @multicast1, 0x0}, &(0x7f00000004c0)=0xc) sendmsg$nl_route(r2, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@getlink={0x68, 0x12, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, 0x4, 0x180}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x38, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x6}, @IFLA_IPTUN_LINK={0x8, 0x1, r5}, @IFLA_IPTUN_TOS={0x5}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x2}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4880}, 0x840) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000080)) 380.801432ms ago: executing program 3 (id=2126): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f0000001300)=[{{&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000001900)=[{&(0x7f0000000600)="bd", 0x1}], 0x1}}, {{&(0x7f0000000200)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x1}}], 0x2, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000240)=0x5) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x22803, 0x0) ioctl$RTC_WKALM_RD(r2, 0x40187014, &(0x7f0000000000)) 379.853972ms ago: executing program 0 (id=2127): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000380)={0x5, 0xffffffff, 0x7, 0x15, 0x76, 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r1) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$key(0xf, 0x3, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) sendmsg$key(r2, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1024, 0x1000000000006) r5 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1065, 0x80, 0x200003, 0x10001af}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2}, 0x0, 0x3, 0x0, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0x9, 0x0, 0x4) socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r5, 0x47f8, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r8, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x6, @local}, 0x44, {0x2, 0x4e22, @loopback}, 'macvlan0\x00'}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x20780, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r10}, 0x10) msgget(0x0, 0x80) dup(r8) 357.276934ms ago: executing program 3 (id=2128): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 356.610534ms ago: executing program 3 (id=2129): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1fa) epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0xc, &(0x7f0000000540)=ANY=[@ANYRES8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000", @ANYRES64], 0x0, 0x2, 0x0, 0x0, 0xc3100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x48) 287.100501ms ago: executing program 3 (id=2130): bpf$MAP_CREATE(0x0, 0x0, 0x48) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_open_dev$loop(&(0x7f0000000340), 0x6, 0x80) semctl$GETZCNT(0x0, 0x3, 0xf, 0x0) ioctl$BLKSECTGET(r1, 0x1267, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000", 0x2c}], 0x1}, 0x40) io_setup(0x7, &(0x7f0000000240)) syz_open_dev$usbfs(&(0x7f00000001c0), 0x6, 0x80000) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 286.337891ms ago: executing program 0 (id=2131): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x6}, {0xd}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0xa, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x8000, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000440) 285.327811ms ago: executing program 0 (id=2132): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0x5, 0x4) r1 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) r2 = shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r3 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r3, &(0x7f0000ff1000/0x3000)=nil, 0x400c) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r2) shmat(r3, &(0x7f0000ff6000/0x2000)=nil, 0x1000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x2a8, 0x98, 0x2a8, 0x130, 0x1f0, 0x370, 0x370, 0x98, 0x370, 0x370, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) 234.029976ms ago: executing program 0 (id=2133): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x3, 0x2b, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}}, @sadb_key={0x1f, 0x8, 0x780, 0x0, "5630f6e8902e42edce8053fcc1ffae922948f2a67f26f317f8caa201a1f568b6276352479653234ae3146302b44884bde392ba28a038c01c09b89cb4c10a3dcdcdfde6f19f0b6226542353f5fa434da09050383066ba039209cf8cea541d1485cbe92a48534f0ab90115efe2d23bf80c826339ebbc2911ada72941105c34627a0f9c79fd6905e90514a9620b5568aee12dfcf3a3780c3a729985ca956035883bd610421029d7ecc106161990784ba524427fe86fffaa57a31320adc81458a8c90a68899838ee795c749ac2341bbc2d18eef675b85ae0b6702b188c7ad8e16e1f95fc65c2ca2a9e0c6619b6540fcc1b4b"}]}, 0x158}, 0x1, 0x7}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e8, &(0x7f0000001200)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x3ffff) sendfile(r6, r5, 0x0, 0x7ffff000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7, 0x0, 0x400007}, 0x18) 232.953517ms ago: executing program 2 (id=2134): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x40400, 0x8) fcntl$notify(r2, 0x402, 0x8000003b) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000001300)=@newtaction={0x860, 0x30, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [{0x270, 0x1, [@m_connmark={0xe4, 0x13, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x0, 0x10000000, 0x8ea6, 0x8}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x2, 0x5, 0xfff, 0x7}, 0xa}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x81, 0x4, 0x20000000, 0x0, 0x8000}, 0x88}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x7, 0x2, 0x7, 0x20}, 0x1000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffffc7, 0x28000, 0x6, 0xfffffff8, 0x800}, 0x9}}]}, {0x28, 0x6, "0da7d5176ea4ac92c0f4367e102d7111daa7fba9981d78aca26ed0eb4a7a211bb8da87e1"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x188, 0x9, 0x0, 0x0, {{0x7}, {0x8c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_TARG={0x53, 0x6, {0x1, 'raw\x00', 0x3, 0x0, "5b6584777c9de6f675a4fad720be68ec56bef21e2aa82a954332ad0c93e7c78998109097be391ccc67"}}]}, {0xd6, 0x6, "1e3d3929e963ded80b8352a436d0755734369fab53638224aa3227fde0c22715e2c08240e72acfb46bb3cc910496cf1201244dd31bf0001b70b9c44f4a37bd9a7dda7605ddf7387a3f9e6d1e3dfd665012a7f166f89e6f3e050abb1b262f439ac230e06c595ec184843cc2eb10df200c077a927081d05eb1e2154a89b3108b2d81294f7563e638f400fabef245a545a4278d2b4b8e86d0e24d6d51906c468f1a4b5d856df7bd2eeb293bbe0f4a4d6a739d538bfd5af1257306645485d2ecbac1b7ad5ed41387d8126472f6accef4d9a0dfa0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, {0x5dc, 0x1, [@m_ct={0x164, 0x19, 0x0, 0x0, {{0x7}, {0x70, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_LABELS={0x14, 0x7, "d5bd4b4a2b165ec415e55e6fd279ef49"}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}, @TCA_CT_LABELS_MASK={0x14, 0x8, "ed944a5177fc448033cf123d233ca4b0"}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @TCA_CT_ACTION={0x6, 0x3, 0x8}, @TCA_CT_MARK={0x8, 0x5, 0x40000000}]}, {0xd0, 0x6, "bf055ace26c82aff6591798d6a11774293fea8f50bf662da3ac4bff73bed1acab1769ccb9e3f6fd871a4da8caaa50288833fc34ac4d5da675ec58b668fed6d7457215e31827706c795450230a95bae1a1466bb2ea2ea6e6bc87519957e1d0c3be9e5c523fc5605b1418f5430dddc2e29c5f9b9a3074918e3e03abaefdb9fbb364807e8f7232d950066b8b8e1ce8e96085fec4c5a3cbb239f787c41376a50cbb575aff6c5f03f1add1a42e3d37dd982fde4f15d7d79d8fc8423d2e5599b10e05f23caf0b671b9d54c73bec55c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_ct={0x148, 0x10, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @local}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @empty}, @TCA_CT_ACTION={0x6, 0x3, 0x30}]}, {0xfb, 0x6, "7f996c93e668fccce18b345b7770e0033cadffc61289097e5f81281c5a732872fb2108612b80b891b1e2073c168359e2f0a6600f5f8d77e9f30c8fdf63d15b90155e2c416a4b6ddaea2abed5a73ca0e549099bf37adab2589064f2038a04f817d1ee5ebb6650feab02f18368da881bea6cbf075bcfebd09afc729c3a74cebe201a4d6a19da63f5405898824b0dac9f80e660b139dfec254d0628c5940c3f6abe05512109623085a8b0ef165c24599bcf1e1fb43978c25090bd959400cdd9fa6685c087a5fb328302b311f446f8cb8649ef5ff4cbc5a7787f6350ae44cdbe58c0dfc0f062910fadfa1e32cb76bcba4cc3c4eb85f1eabd87"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_vlan={0xb8, 0xa, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0x84, 0x6, "435e8d64d14f36270f30d229ab66a7d7aab9688fab22d6b55f3b265640cfdce668543b35173a3b48da54fffecdb49f724fcb510cce3c7b95e36f2ece94d7f4d937ad9785f15dc8df353195e2c22eb05b008c600aaeccef1c529dc570e16fa9f77102f3306522135aaf884a1fa5a7613ee28445d2d0f6252fe102a827bba3bfd9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0x100, 0x4, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7fffffff, 0xf, 0x2, 0x400, 0xffffff7f}, 0xa}}, @TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_SMAC={0xa}]}, {0x9c, 0x6, "ae1fcfaa3c41e3bc680b18d93f53cad2196d19590bdd56890567f6354c3d7f2b5bb445f5ca6c6f19564fcccf0dbe3d9cbe719dafb3a5f83d78f6da1b1188d732fef477e8ac80f7af76b6ebd05a4e4d68a6bb3eeaad094a40b8859540f5703a17a368906bc3db095c057b7ede2fbb4e4a93212fd89b6d06075c634b7cc5fa5700f1a3d588cfd7c80ef61e40be0e77ba4fc2cb5cf7a6cda1d5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0x174, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @loopback}, @TCA_CT_ACTION={0x6}, @TCA_CT_MARK={0x8, 0x5, 0x2}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x4}, @TCA_CT_PARMS={0x18, 0x1, {0x7, 0x7f, 0x7, 0xa, 0xf92d}}, @TCA_CT_MARK_MASK={0x8}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}]}, {0x101, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x860}, 0x1, 0x0, 0x0, 0x40084}, 0x4000) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000500)={'ip_vti0\x00', 0x0, 0x8, 0x80, 0x4, 0x9, {{0xc, 0x4, 0x2, 0x9, 0x30, 0x68, 0x0, 0x89, 0x4, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x31}, {[@end, @timestamp={0x44, 0x18, 0xd0, 0x0, 0x2, [0x1f0, 0x7fff, 0x0, 0x2, 0x6]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffff00"/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b703000000f700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x0, @multicast1}, 0xa, 0x0, 0xfffd}}, 0x26) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES64=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(r8, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000580)={@multicast2, @multicast1}, &(0x7f00000005c0)=0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bind$packet(r11, &(0x7f0000000000)={0x11, 0x4, r13, 0x1, 0xfe, 0x6, @remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000640)={'syztnl2\x00', 0x0, 0x2, 0x7, 0x8, 0x9, 0x41, @empty, @mcast1, 0x700, 0x10, 0x10001}}) 204.410519ms ago: executing program 3 (id=2135): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rt_sigpending(0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 110.867249ms ago: executing program 2 (id=2136): r0 = getpid() r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1003, 0x10020, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8) 32.233316ms ago: executing program 2 (id=2137): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e880000850000007000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x2000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000280)={0x7, 0x7, 0x0, [{0x2, 0x5, 0xd4dc, 0x7, 0x2, 0x7, 0xe, '\x00', 0x1}, {0x2, 0x2, 0x2, 0x7f, 0xf, 0x9, 0x18, '\x00', 0x7}, {0x7, 0x7f, 0x2, 0x2e, 0x66, 0x2, 0x2, '\x00', 0x4}, {0xc6d6, 0x7, 0xc, 0xf3, 0x7, 0x4, 0x6, '\x00', 0x2}, {0x0, 0xd, 0x5, 0x3, 0x6d, 0xf2, 0xff, '\x00', 0x800}, {0x100000000, 0x345949f5, 0x0, 0xff, 0x1, 0xe, 0x3, '\x00', 0x3}, {0x2, 0x9, 0x5, 0x4, 0x9d, 0x2, 0x42, '\x00', 0x80000000}]}) socket$tipc(0x1e, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2f, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16001800050000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000960000000000000000000000008e9c7637", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYRES64=r1], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x26, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mmap_lock_acquire_returned\x00', r6}, 0x18) move_pages(0x0, 0x0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000240)=[0x0], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000500)='bcache_btree_write\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r7, 0xa, 0x13) fcntl$setlease(r7, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) pipe2(&(0x7f0000000140), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 0s ago: executing program 3 (id=2138): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e8, &(0x7f0000001200)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x3ffff) sendfile(r6, r5, 0x0, 0x7ffff000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7, 0x0, 0x400007}, 0x18) kernel console output (not intermixed with test programs): r after parsing attributes in process `syz.3.1342'. [ 91.935001][ T6922] loop1: detected capacity change from 0 to 1024 [ 91.943042][ T29] audit: type=1400 audit(1760965883.572:9120): avc: denied { write } for pid=6919 comm="syz.4.1343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 91.957515][ T6922] EXT4-fs: Ignoring removed nobh option [ 91.962915][ T29] audit: type=1400 audit(1760965883.592:9121): avc: denied { mount } for pid=6919 comm="syz.4.1343" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 91.968142][ T6922] EXT4-fs: Ignoring removed bh option [ 91.995828][ T29] audit: type=1400 audit(1760965883.592:9122): avc: denied { audit_write } for pid=6919 comm="syz.4.1343" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 92.017040][ T29] audit: type=1107 audit(1760965883.592:9123): pid=6919 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='¿‘' [ 92.030494][ T29] audit: type=1400 audit(1760965883.592:9124): avc: denied { execute } for pid=6919 comm="syz.4.1343" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16998 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 92.086284][ T6922] EXT4-fs (loop1): shut down requested (0) [ 92.086290][ T29] audit: type=1400 audit(1760965883.782:9125): avc: denied { ioctl } for pid=6921 comm="syz.1.1344" path="/267/file2/bus" dev="loop1" ino=18 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 92.177592][ T6927] loop2: detected capacity change from 0 to 128 [ 92.275424][ T6942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1348'. [ 92.294171][ T6937] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1349'. [ 92.351048][ T6943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1351'. [ 92.384410][ T6947] lo speed is unknown, defaulting to 1000 [ 92.440279][ T6956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.450018][ T6956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.459355][ T6960] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 92.478586][ T6960] tipc: Enabled bearer , priority 0 [ 92.497419][ T6960] syzkaller0: MTU too low for tipc bearer [ 92.503365][ T6960] tipc: Disabling bearer [ 92.508926][ T6963] loop1: detected capacity change from 0 to 1024 [ 92.526278][ T6963] EXT4-fs: Ignoring removed nobh option [ 92.531915][ T6963] EXT4-fs: Ignoring removed bh option [ 92.561698][ T6963] EXT4-fs (loop1): shut down requested (0) [ 92.693273][ T6979] loop1: detected capacity change from 0 to 512 [ 92.700062][ T6979] EXT4-fs: test_dummy_encryption option not supported [ 92.858530][ T6998] loop1: detected capacity change from 0 to 512 [ 92.869734][ T6998] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.1371: error while reading EA inode 32 err=-116 [ 92.883093][ T6998] EXT4-fs (loop1): Remounting filesystem read-only [ 92.889838][ T6998] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 92.900592][ T6998] EXT4-fs (loop1): 1 orphan inode deleted [ 92.969115][ T7004] validate_nla: 13 callbacks suppressed [ 92.969151][ T7004] netlink: 'syz.1.1373': attribute type 10 has an invalid length. [ 92.987835][ T7004] bond0: (slave dummy0): Releasing backup interface [ 93.005673][ T7004] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 93.016877][ T7004] team0: Failed to send options change via netlink (err -105) [ 93.024479][ T7004] team0: Port device dummy0 added [ 93.030186][ T7006] netlink: 'syz.1.1373': attribute type 10 has an invalid length. [ 93.040287][ T7006] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 93.051357][ T7006] team0: Failed to send options change via netlink (err -105) [ 93.059820][ T7006] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 93.079047][ T7006] team0: Port device dummy0 removed [ 93.089865][ T7006] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 93.112988][ T7009] netlink: 'syz.0.1375': attribute type 1 has an invalid length. [ 93.138527][ T7011] loop4: detected capacity change from 0 to 512 [ 93.148403][ T7011] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 93.165115][ T7011] EXT4-fs (loop4): 1 truncate cleaned up [ 93.280667][ T7025] siw: device registration error -23 [ 93.326231][ T7028] loop1: detected capacity change from 0 to 1024 [ 93.332928][ T7028] EXT4-fs: Ignoring removed orlov option [ 93.499368][ T7041] lo speed is unknown, defaulting to 1000 [ 93.554357][ T7043] netlink: 'syz.3.1388': attribute type 10 has an invalid length. [ 93.578429][ T7043] bond0: (slave dummy0): Releasing backup interface [ 93.592114][ T7043] team0: Port device dummy0 added [ 93.605740][ T7043] netlink: 'syz.3.1388': attribute type 10 has an invalid length. [ 93.622018][ T7043] team0: Port device dummy0 removed [ 93.631687][ T7043] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 93.777344][ T7064] sctp: [Deprecated]: syz.0.1397 (pid 7064) Use of int in max_burst socket option. [ 93.777344][ T7064] Use struct sctp_assoc_value instead [ 93.927047][ T7079] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 93.956252][ T7079] tipc: Enabled bearer , priority 0 [ 94.185352][ T7089] loop2: detected capacity change from 0 to 128 [ 94.319908][ T7091] netlink: 'syz.4.1406': attribute type 1 has an invalid length. [ 94.446711][ T7093] netlink: 'syz.4.1407': attribute type 10 has an invalid length. [ 94.457057][ T7093] bond0: (slave dummy0): Releasing backup interface [ 94.497754][ T7094] netlink: 'syz.4.1407': attribute type 10 has an invalid length. [ 94.507796][ T7093] team0: Port device dummy0 added [ 94.525432][ T7094] team0: Port device dummy0 removed [ 94.530903][ T7096] loop2: detected capacity change from 0 to 1024 [ 94.535017][ T7094] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 94.543606][ T7096] EXT4-fs: Ignoring removed nobh option [ 94.551441][ T7096] EXT4-fs: Ignoring removed bh option [ 94.588544][ T7096] EXT4-fs (loop2): shut down requested (0) [ 94.677582][ T7106] siw: device registration error -23 [ 94.684099][ T7068] tipc: Disabling bearer [ 94.782926][ T7108] loop4: detected capacity change from 0 to 512 [ 94.790309][ T7108] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 94.865192][ T7108] EXT4-fs (loop4): 1 truncate cleaned up [ 94.913419][ T7117] sctp: [Deprecated]: syz.0.1416 (pid 7117) Use of int in max_burst socket option. [ 94.913419][ T7117] Use struct sctp_assoc_value instead [ 94.941990][ T7123] loop2: detected capacity change from 0 to 1024 [ 94.948913][ T7123] EXT4-fs: Ignoring removed nobh option [ 94.954574][ T7123] EXT4-fs: Ignoring removed bh option [ 94.965466][ T7126] loop3: detected capacity change from 0 to 512 [ 94.974691][ T7126] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1420: error while reading EA inode 32 err=-116 [ 94.987575][ T7126] EXT4-fs (loop3): Remounting filesystem read-only [ 94.991051][ T7123] EXT4-fs (loop2): shut down requested (0) [ 95.000461][ T7126] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 95.010894][ T7126] EXT4-fs (loop3): 1 orphan inode deleted [ 95.067317][ T7134] loop4: detected capacity change from 0 to 1024 [ 95.078098][ T7134] EXT4-fs: Ignoring removed orlov option [ 95.084014][ T7136] sctp: [Deprecated]: syz.2.1422 (pid 7136) Use of int in max_burst socket option. [ 95.084014][ T7136] Use struct sctp_assoc_value instead [ 95.107979][ T7140] netlink: 'syz.0.1424': attribute type 10 has an invalid length. [ 95.121906][ T7140] bond0: (slave dummy0): Releasing backup interface [ 95.131658][ T7140] netlink: 'syz.0.1424': attribute type 10 has an invalid length. [ 95.141644][ T7140] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 95.296450][ T7157] sctp: [Deprecated]: syz.0.1432 (pid 7157) Use of int in max_burst socket option. [ 95.296450][ T7157] Use struct sctp_assoc_value instead [ 95.312411][ T7150] loop3: detected capacity change from 0 to 128 [ 95.345043][ T7160] loop4: detected capacity change from 0 to 1024 [ 95.351911][ T7160] EXT4-fs: Ignoring removed nobh option [ 95.357535][ T7160] EXT4-fs: Ignoring removed bh option [ 95.378949][ T7160] EXT4-fs (loop4): shut down requested (0) [ 95.507359][ T7173] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 95.549757][ T7175] loop1: detected capacity change from 0 to 512 [ 95.562995][ T7175] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 95.567576][ T7173] tipc: Enabled bearer , priority 0 [ 95.584847][ T7175] EXT4-fs (loop1): 1 truncate cleaned up [ 95.606816][ T7180] sctp: [Deprecated]: syz.2.1439 (pid 7180) Use of int in max_burst socket option. [ 95.606816][ T7180] Use struct sctp_assoc_value instead [ 95.705316][ T7182] random: crng reseeded on system resumption [ 95.746801][ T7187] bond0: (slave dummy0): Releasing backup interface [ 95.761236][ T7187] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 95.776046][ T7187] team0: Failed to send options change via netlink (err -105) [ 95.783650][ T7187] team0: Port device dummy0 added [ 95.805558][ T7192] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 95.816880][ T7192] team0: Failed to send options change via netlink (err -105) [ 95.824737][ T7192] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 95.833978][ T7192] team0: Port device dummy0 removed [ 95.841521][ T7192] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 95.853396][ T7194] siw: device registration error -23 [ 95.880156][ T7200] bond0: (slave dummy0): Releasing backup interface [ 95.889637][ T7200] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 96.007668][ T7210] loop2: detected capacity change from 0 to 1024 [ 96.014533][ T7210] EXT4-fs: Ignoring removed orlov option [ 96.244016][ T7164] tipc: Disabling bearer [ 96.336598][ T7232] bond0: (slave dummy0): Releasing backup interface [ 96.346177][ T7232] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 96.355624][ T7232] team0: Failed to send options change via netlink (err -105) [ 96.363160][ T7232] team0: Port device dummy0 added [ 96.369466][ T7234] __nla_validate_parse: 52 callbacks suppressed [ 96.369481][ T7234] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1460'. [ 96.385648][ T7232] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 96.398548][ T7232] team0: Failed to send options change via netlink (err -105) [ 96.406481][ T7232] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 96.415587][ T7232] team0: Port device dummy0 removed [ 96.422823][ T7232] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 96.448029][ T7239] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1460'. [ 96.483361][ T7241] loop2: detected capacity change from 0 to 128 [ 96.582078][ T7247] sctp: [Deprecated]: syz.3.1465 (pid 7247) Use of int in max_burst socket option. [ 96.582078][ T7247] Use struct sctp_assoc_value instead [ 96.627956][ T7247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1465'. [ 96.685571][ T7253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1468'. [ 96.701736][ T7249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1466'. [ 96.731588][ T7257] loop2: detected capacity change from 0 to 1024 [ 96.739819][ T7257] EXT4-fs: Ignoring removed nobh option [ 96.745453][ T7257] EXT4-fs: Ignoring removed bh option [ 96.767509][ T7263] loop1: detected capacity change from 0 to 512 [ 96.775348][ T7263] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 96.788748][ T7263] EXT4-fs (loop1): 1 truncate cleaned up [ 96.794790][ T7257] EXT4-fs (loop2): shut down requested (0) [ 96.801888][ T29] kauditd_printk_skb: 872 callbacks suppressed [ 96.801901][ T29] audit: type=1326 audit(1760965888.492:9998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7262 comm="syz.1.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3b7c4cd810 code=0x7ffc0000 [ 96.831502][ T29] audit: type=1326 audit(1760965888.492:9999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7262 comm="syz.1.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f3b7c4cdd17 code=0x7ffc0000 [ 96.854892][ T29] audit: type=1326 audit(1760965888.492:10000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7262 comm="syz.1.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3b7c4cd810 code=0x7ffc0000 [ 96.878566][ T29] audit: type=1326 audit(1760965888.492:10001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7262 comm="syz.1.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7c4cefc9 code=0x7ffc0000 [ 96.902128][ T29] audit: type=1326 audit(1760965888.492:10002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7262 comm="syz.1.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7c4cefc9 code=0x7ffc0000 [ 96.902280][ T29] audit: type=1326 audit(1760965888.522:10003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7262 comm="syz.1.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b7c4cefc9 code=0x7ffc0000 [ 96.949374][ T29] audit: type=1326 audit(1760965888.522:10004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7262 comm="syz.1.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7c4cefc9 code=0x7ffc0000 [ 96.972895][ T29] audit: type=1326 audit(1760965888.522:10005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7262 comm="syz.1.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7c4cefc9 code=0x7ffc0000 [ 96.996539][ T29] audit: type=1326 audit(1760965888.522:10006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7262 comm="syz.1.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b7c4cefc9 code=0x7ffc0000 [ 97.020044][ T29] audit: type=1326 audit(1760965888.522:10007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7262 comm="syz.1.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7c4cefc9 code=0x7ffc0000 [ 97.044121][ T7269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1473'. [ 97.131838][ T7277] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1476'. [ 97.143596][ T7279] bond0: (slave dummy0): Releasing backup interface [ 97.152928][ T7279] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 97.162846][ T7279] team0: Failed to send options change via netlink (err -105) [ 97.170377][ T7279] team0: Port device dummy0 added [ 97.180760][ T7279] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 97.209061][ T7279] team0: Failed to send options change via netlink (err -105) [ 97.217706][ T7279] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 97.227833][ T7279] team0: Port device dummy0 removed [ 97.235762][ T7279] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 97.250823][ T7281] loop1: detected capacity change from 0 to 512 [ 97.257609][ T7281] EXT4-fs: test_dummy_encryption option not supported [ 97.280187][ T7285] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1480'. [ 97.349315][ T7296] loop3: detected capacity change from 0 to 128 [ 97.360709][ T7302] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1488'. [ 97.373823][ T7302] 1ªX¹¦À: renamed from 60ªX¹¦À [ 97.386460][ T7304] loop4: detected capacity change from 0 to 764 [ 97.396073][ T7302] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 97.425228][ T7304] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 97.533114][ T7308] loop4: detected capacity change from 0 to 512 [ 97.540868][ T7308] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 97.573889][ T7308] EXT4-fs (loop4): 1 truncate cleaned up [ 97.616854][ T7313] loop3: detected capacity change from 0 to 1024 [ 97.623777][ T7313] EXT4-fs: Ignoring removed orlov option [ 97.748728][ T7318] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1492'. [ 97.757931][ T7318] 1ªX¹¦À: renamed from 60ªX¹¦À [ 97.765793][ T7318] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 98.255298][ T7355] siw: device registration error -23 [ 98.281196][ T7357] validate_nla: 10 callbacks suppressed [ 98.281228][ T7357] netlink: 'syz.3.1509': attribute type 10 has an invalid length. [ 98.304290][ T7357] bond0: (slave dummy0): Releasing backup interface [ 98.313639][ T7357] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 98.322463][ T7357] team0: Failed to send options change via netlink (err -105) [ 98.329975][ T7357] team0: Port device dummy0 added [ 98.331159][ T7339] loop4: detected capacity change from 0 to 32768 [ 98.346666][ T7363] netlink: 'syz.3.1509': attribute type 10 has an invalid length. [ 98.359102][ T7363] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 98.369302][ T7339] loop4: p1 p3 < > [ 98.378310][ T7363] team0: Failed to send options change via netlink (err -105) [ 98.387074][ T7363] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 98.396782][ T7363] team0: Port device dummy0 removed [ 98.404665][ T7363] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 98.474577][ T7369] netlink: 'syz.3.1514': attribute type 10 has an invalid length. [ 98.486369][ T7369] bond0: (slave dummy0): Releasing backup interface [ 98.497573][ T7369] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 98.506647][ T7369] team0: Failed to send options change via netlink (err -105) [ 98.514331][ T7369] team0: Port device dummy0 added [ 98.522054][ T7369] netlink: 'syz.3.1514': attribute type 10 has an invalid length. [ 98.530868][ T7369] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 98.545403][ T7369] team0: Failed to send options change via netlink (err -105) [ 98.553569][ T7369] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 98.562588][ T7369] team0: Port device dummy0 removed [ 98.570628][ T7369] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 98.601841][ T7377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.612136][ T7377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.621626][ T7379] 0ªX¹¦À: renamed from 61ªX¹¦À [ 98.628249][ T7379] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 98.758841][ T7387] FAULT_INJECTION: forcing a failure. [ 98.758841][ T7387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.771982][ T7387] CPU: 0 UID: 0 PID: 7387 Comm: syz.3.1521 Not tainted syzkaller #0 PREEMPT(voluntary) [ 98.772076][ T7387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 98.772094][ T7387] Call Trace: [ 98.772102][ T7387] [ 98.772109][ T7387] __dump_stack+0x1d/0x30 [ 98.772130][ T7387] dump_stack_lvl+0xe8/0x140 [ 98.772158][ T7387] dump_stack+0x15/0x1b [ 98.772177][ T7387] should_fail_ex+0x265/0x280 [ 98.772301][ T7387] should_fail+0xb/0x20 [ 98.772342][ T7387] should_fail_usercopy+0x1a/0x20 [ 98.772370][ T7387] strncpy_from_user+0x25/0x230 [ 98.772481][ T7387] ? kmem_cache_alloc_noprof+0x242/0x480 [ 98.772596][ T7387] ? getname_flags+0x80/0x3b0 [ 98.772673][ T7387] getname_flags+0xae/0x3b0 [ 98.772711][ T7387] do_sys_openat2+0x60/0x110 [ 98.772754][ T7387] __x64_sys_openat+0xf2/0x120 [ 98.772792][ T7387] x64_sys_call+0x2eab/0x3000 [ 98.772814][ T7387] do_syscall_64+0xd2/0x200 [ 98.772880][ T7387] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 98.772914][ T7387] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 98.772939][ T7387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.772961][ T7387] RIP: 0033:0x7f7c1836d810 [ 98.772975][ T7387] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 98.773027][ T7387] RSP: 002b:00007f7c16dcef10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 98.773052][ T7387] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f7c1836d810 [ 98.773069][ T7387] RDX: 0000000000000002 RSI: 00007f7c16dcefa0 RDI: 00000000ffffff9c [ 98.773085][ T7387] RBP: 00007f7c16dcefa0 R08: 0000000000000000 R09: 0000000000000000 [ 98.773101][ T7387] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 98.773116][ T7387] R13: 00007f7c185c6038 R14: 00007f7c185c5fa0 R15: 00007fffcc34ba78 [ 98.773156][ T7387] [ 99.014688][ T7395] loop3: detected capacity change from 0 to 512 [ 99.021403][ T7395] EXT4-fs: test_dummy_encryption option not supported [ 99.139536][ T7405] loop1: detected capacity change from 0 to 128 [ 99.254038][ T7421] loop2: detected capacity change from 0 to 128 [ 99.300344][ T7424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.337607][ T7424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.401432][ T7432] loop1: detected capacity change from 0 to 512 [ 99.413406][ T7432] EXT4-fs: test_dummy_encryption option not supported [ 99.678294][ T7460] netlink: 'syz.4.1551': attribute type 10 has an invalid length. [ 99.688523][ T7460] bond0: (slave dummy0): Releasing backup interface [ 99.700098][ T7460] team0: Port device dummy0 added [ 99.713149][ T7460] netlink: 'syz.4.1551': attribute type 10 has an invalid length. [ 99.727720][ T7460] team0: Port device dummy0 removed [ 99.735596][ T7460] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 99.835022][ T7475] loop3: detected capacity change from 0 to 128 [ 99.950870][ T7485] loop4: detected capacity change from 0 to 512 [ 99.972070][ T7485] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 100.006669][ T7485] EXT4-fs (loop4): 1 truncate cleaned up [ 100.022213][ T7485] EXT4-fs mount: 54 callbacks suppressed [ 100.022314][ T7485] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.234909][ T7493] siw: device registration error -23 [ 100.260964][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.364411][ T7506] netlink: 'syz.1.1569': attribute type 10 has an invalid length. [ 100.391240][ T7506] bond0: (slave dummy0): Releasing backup interface [ 100.410165][ T7506] team0: Port device dummy0 added [ 100.429813][ T7516] netlink: 'syz.1.1569': attribute type 10 has an invalid length. [ 100.441686][ T7515] loop4: detected capacity change from 0 to 512 [ 100.448427][ T7516] team0: Port device dummy0 removed [ 100.458278][ T7515] EXT4-fs: test_dummy_encryption option not supported [ 100.458888][ T7516] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 100.577349][ T7527] sctp: [Deprecated]: syz.1.1577 (pid 7527) Use of int in max_burst socket option. [ 100.577349][ T7527] Use struct sctp_assoc_value instead [ 100.656338][ T7537] sctp: [Deprecated]: syz.4.1582 (pid 7537) Use of int in max_burst socket option. [ 100.656338][ T7537] Use struct sctp_assoc_value instead [ 100.689879][ T7539] netlink: 'syz.2.1583': attribute type 10 has an invalid length. [ 100.708526][ T7539] bond0: (slave dummy0): Releasing backup interface [ 100.720734][ T7544] loop1: detected capacity change from 0 to 512 [ 100.727862][ T7539] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 100.738477][ T7539] team0: Failed to send options change via netlink (err -105) [ 100.746215][ T7539] team0: Port device dummy0 added [ 100.754012][ T7546] netlink: 'syz.2.1583': attribute type 10 has an invalid length. [ 100.781448][ T7544] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.1585: error while reading EA inode 32 err=-116 [ 100.798741][ T7546] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 100.814812][ T7544] EXT4-fs (loop1): Remounting filesystem read-only [ 100.833530][ T7544] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 100.846253][ T7546] team0: Failed to send options change via netlink (err -105) [ 100.866400][ T7546] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 100.884643][ T7544] EXT4-fs (loop1): 1 orphan inode deleted [ 100.892227][ T7546] team0: Port device dummy0 removed [ 100.898275][ T7544] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.916125][ T7548] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 100.927115][ T7546] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 100.955383][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.992948][ T7556] bond0: (slave dummy0): Releasing backup interface [ 101.001653][ T7554] loop1: detected capacity change from 0 to 512 [ 101.010619][ T7554] EXT4-fs: test_dummy_encryption option not supported [ 101.012891][ T7556] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 101.082862][ T7567] 0ªX¹¦À: renamed from 61ªX¹¦À [ 101.090412][ T7567] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 101.199015][ T7579] loop3: detected capacity change from 0 to 512 [ 101.217813][ T7579] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 101.267690][ T7579] EXT4-fs (loop3): 1 truncate cleaned up [ 101.274006][ T7579] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.437155][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.437575][ T7598] bond0: (slave dummy0): Releasing backup interface [ 101.465663][ T7598] team0: Port device dummy0 added [ 101.480528][ T7600] loop3: detected capacity change from 0 to 512 [ 101.487492][ T7598] team0: Port device dummy0 removed [ 101.487526][ T7600] EXT4-fs: test_dummy_encryption option not supported [ 101.490074][ T7598] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 101.534502][ T7603] blktrace: Concurrent blktraces are not allowed on sg0 [ 101.641999][ T7612] __nla_validate_parse: 24 callbacks suppressed [ 101.642071][ T7612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1610'. [ 101.674818][ T7621] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1614'. [ 101.704754][ T7625] loop3: detected capacity change from 0 to 512 [ 101.712236][ T7625] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 101.727171][ T7625] EXT4-fs (loop3): 1 truncate cleaned up [ 101.733437][ T7625] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.733776][ T7628] bond0: (slave dummy0): Releasing backup interface [ 101.765623][ T7628] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 101.775288][ T7628] team0: Failed to send options change via netlink (err -105) [ 101.782861][ T7628] team0: Port device dummy0 added [ 101.799048][ T7631] lo speed is unknown, defaulting to 1000 [ 101.807530][ T7633] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1619'. [ 101.826691][ T7628] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 101.855681][ T29] kauditd_printk_skb: 1425 callbacks suppressed [ 101.855695][ T29] audit: type=1326 audit(1760965893.552:11433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7624 comm="syz.3.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c1836efc9 code=0x7ffc0000 [ 101.886932][ T29] audit: type=1326 audit(1760965893.552:11434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7624 comm="syz.3.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c1836efc9 code=0x7ffc0000 [ 101.911011][ T7628] team0: Failed to send options change via netlink (err -105) [ 101.918998][ T7628] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 101.941108][ T7628] team0: Port device dummy0 removed [ 101.956619][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.974643][ T7628] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 102.009545][ T7639] loop2: detected capacity change from 0 to 512 [ 102.016562][ T7639] EXT4-fs: test_dummy_encryption option not supported [ 102.026353][ T7644] bond0: (slave dummy0): Releasing backup interface [ 102.043272][ T7646] sctp: [Deprecated]: syz.3.1623 (pid 7646) Use of int in max_burst socket option. [ 102.043272][ T7646] Use struct sctp_assoc_value instead [ 102.043403][ T7644] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 102.066499][ T7646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1623'. [ 102.159202][ T29] audit: type=1326 audit(1760965893.852:11435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.2.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff77a54efc9 code=0x7ffc0000 [ 102.184935][ T29] audit: type=1326 audit(1760965893.852:11436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.2.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff77a54efc9 code=0x7ffc0000 [ 102.208867][ T29] audit: type=1326 audit(1760965893.852:11437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.2.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff77a54efc9 code=0x7ffc0000 [ 102.233231][ T29] audit: type=1326 audit(1760965893.852:11438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.2.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff77a54efc9 code=0x7ffc0000 [ 102.256844][ T29] audit: type=1326 audit(1760965893.882:11439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.2.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff77a54efc9 code=0x7ffc0000 [ 102.280678][ T29] audit: type=1326 audit(1760965893.902:11440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.2.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff77a54efc9 code=0x7ffc0000 [ 102.304175][ T29] audit: type=1326 audit(1760965893.902:11441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.2.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff77a54efc9 code=0x7ffc0000 [ 102.327804][ T29] audit: type=1326 audit(1760965893.902:11442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.2.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff77a54efc9 code=0x7ffc0000 [ 102.390174][ T7662] siw: device registration error -23 [ 102.393434][ T7655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1626'. [ 102.433478][ T7666] FAULT_INJECTION: forcing a failure. [ 102.433478][ T7666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.446648][ T7666] CPU: 1 UID: 0 PID: 7666 Comm: syz.3.1631 Not tainted syzkaller #0 PREEMPT(voluntary) [ 102.446681][ T7666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 102.446697][ T7666] Call Trace: [ 102.446704][ T7666] [ 102.446713][ T7666] __dump_stack+0x1d/0x30 [ 102.446796][ T7666] dump_stack_lvl+0xe8/0x140 [ 102.446821][ T7666] dump_stack+0x15/0x1b [ 102.446841][ T7666] should_fail_ex+0x265/0x280 [ 102.446884][ T7666] should_fail+0xb/0x20 [ 102.446953][ T7666] should_fail_usercopy+0x1a/0x20 [ 102.446981][ T7666] _copy_to_user+0x20/0xa0 [ 102.447018][ T7666] simple_read_from_buffer+0xb5/0x130 [ 102.447043][ T7666] proc_fail_nth_read+0x10e/0x150 [ 102.447201][ T7666] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 102.447237][ T7666] vfs_read+0x1a8/0x770 [ 102.447259][ T7666] ? __rcu_read_unlock+0x4f/0x70 [ 102.447283][ T7666] ? __fget_files+0x184/0x1c0 [ 102.447397][ T7666] ksys_read+0xda/0x1a0 [ 102.447494][ T7666] __x64_sys_read+0x40/0x50 [ 102.447535][ T7666] x64_sys_call+0x27c0/0x3000 [ 102.447593][ T7666] do_syscall_64+0xd2/0x200 [ 102.447618][ T7666] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 102.447650][ T7666] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 102.447748][ T7666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.447772][ T7666] RIP: 0033:0x7f7c1836d9dc [ 102.447791][ T7666] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 102.447813][ T7666] RSP: 002b:00007f7c16dcf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 102.447831][ T7666] RAX: ffffffffffffffda RBX: 00007f7c185c5fa0 RCX: 00007f7c1836d9dc [ 102.447889][ T7666] RDX: 000000000000000f RSI: 00007f7c16dcf0a0 RDI: 0000000000000005 [ 102.447904][ T7666] RBP: 00007f7c16dcf090 R08: 0000000000000000 R09: 0000000000000000 [ 102.447919][ T7666] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 102.447941][ T7666] R13: 00007f7c185c6038 R14: 00007f7c185c5fa0 R15: 00007fffcc34ba78 [ 102.447967][ T7666] [ 102.728690][ T7676] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1634'. [ 102.742334][ T7670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1632'. [ 102.789965][ T7680] sctp: [Deprecated]: syz.3.1636 (pid 7680) Use of int in max_burst socket option. [ 102.789965][ T7680] Use struct sctp_assoc_value instead [ 102.811745][ T7680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1636'. [ 102.824152][ T7683] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1637'. [ 102.890607][ T7687] loop1: detected capacity change from 0 to 512 [ 102.923448][ T7687] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 102.942232][ T7691] loop3: detected capacity change from 0 to 512 [ 102.950160][ T7687] EXT4-fs (loop1): 1 truncate cleaned up [ 102.958315][ T7687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.973889][ T7691] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1641: error while reading EA inode 32 err=-116 [ 102.987582][ T7691] EXT4-fs (loop3): Remounting filesystem read-only [ 102.994463][ T7691] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 103.004625][ T7691] EXT4-fs (loop3): 1 orphan inode deleted [ 103.010705][ T7691] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.043938][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.118882][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.153906][ T7708] loop4: detected capacity change from 0 to 128 [ 103.169893][ T7706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1646'. [ 103.249050][ T7721] sctp: [Deprecated]: syz.3.1652 (pid 7721) Use of int in max_burst socket option. [ 103.249050][ T7721] Use struct sctp_assoc_value instead [ 103.265273][ T7718] bond0: (slave dummy0): Releasing backup interface [ 103.292629][ T7718] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 103.301736][ T7718] team0: Failed to send options change via netlink (err -105) [ 103.309362][ T7718] team0: Port device dummy0 added [ 103.314123][ T7733] validate_nla: 9 callbacks suppressed [ 103.314141][ T7733] netlink: 'syz.1.1651': attribute type 10 has an invalid length. [ 103.316009][ T7730] 0ªX¹¦À: renamed from 61ªX¹¦À [ 103.334704][ T7730] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 103.351142][ T7733] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 103.362140][ T7733] team0: Failed to send options change via netlink (err -105) [ 103.369849][ T7733] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 103.381768][ T7733] team0: Port device dummy0 removed [ 103.389656][ T7733] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 103.424845][ T7739] netlink: 'syz.3.1659': attribute type 1 has an invalid length. [ 103.537926][ T7755] sctp: [Deprecated]: syz.2.1666 (pid 7755) Use of int in max_burst socket option. [ 103.537926][ T7755] Use struct sctp_assoc_value instead [ 103.593946][ T7765] blktrace: Concurrent blktraces are not allowed on sg0 [ 103.685637][ T7776] netlink: 'syz.2.1675': attribute type 10 has an invalid length. [ 103.721874][ T7776] bond0: (slave dummy0): Releasing backup interface [ 103.733539][ T7776] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 103.736890][ T7781] netlink: 'syz.2.1675': attribute type 10 has an invalid length. [ 103.742942][ T7780] netlink: 'syz.1.1676': attribute type 10 has an invalid length. [ 103.757881][ T7776] team0: Failed to send options change via netlink (err -105) [ 103.765538][ T7776] team0: Port device dummy0 added [ 103.772390][ T7781] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 103.783300][ T7781] team0: Failed to send options change via netlink (err -105) [ 103.790886][ T7781] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 103.801503][ T7782] netlink: 'syz.1.1676': attribute type 10 has an invalid length. [ 103.801736][ T7781] team0: Port device dummy0 removed [ 103.817451][ T7781] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 103.829052][ T7780] bond0: (slave dummy0): Releasing backup interface [ 103.838942][ T7780] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 103.847775][ T7780] team0: Failed to send options change via netlink (err -105) [ 103.855417][ T7780] team0: Port device dummy0 added [ 103.864896][ T7782] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 103.876061][ T7782] team0: Failed to send options change via netlink (err -105) [ 103.878819][ T7788] FAULT_INJECTION: forcing a failure. [ 103.878819][ T7788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.883978][ T7782] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 103.896673][ T7788] CPU: 1 UID: 0 PID: 7788 Comm: syz.3.1679 Not tainted syzkaller #0 PREEMPT(voluntary) [ 103.896704][ T7788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 103.896719][ T7788] Call Trace: [ 103.896727][ T7788] [ 103.896750][ T7788] __dump_stack+0x1d/0x30 [ 103.896775][ T7788] dump_stack_lvl+0xe8/0x140 [ 103.896800][ T7788] dump_stack+0x15/0x1b [ 103.896821][ T7788] should_fail_ex+0x265/0x280 [ 103.896879][ T7788] should_fail+0xb/0x20 [ 103.896986][ T7788] should_fail_usercopy+0x1a/0x20 [ 103.897018][ T7788] strncpy_from_user+0x25/0x230 [ 103.897058][ T7788] ? kmem_cache_alloc_noprof+0x242/0x480 [ 103.897158][ T7788] ? getname_flags+0x80/0x3b0 [ 103.897200][ T7788] getname_flags+0xae/0x3b0 [ 103.897239][ T7788] user_path_at+0x28/0x130 [ 103.897343][ T7788] __x64_sys_umount+0x85/0xe0 [ 103.897372][ T7788] x64_sys_call+0xdd2/0x3000 [ 103.897401][ T7788] do_syscall_64+0xd2/0x200 [ 103.897436][ T7788] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 103.897528][ T7788] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 103.897566][ T7788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.897596][ T7788] RIP: 0033:0x7f7c1836efc9 [ 103.897668][ T7788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.897694][ T7788] RSP: 002b:00007f7c16dcf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 103.897721][ T7788] RAX: ffffffffffffffda RBX: 00007f7c185c5fa0 RCX: 00007f7c1836efc9 [ 103.897739][ T7788] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 103.897756][ T7788] RBP: 00007f7c16dcf090 R08: 0000000000000000 R09: 0000000000000000 [ 103.897773][ T7788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.897822][ T7788] R13: 00007f7c185c6038 R14: 00007f7c185c5fa0 R15: 00007fffcc34ba78 [ 103.897856][ T7788] [ 104.090371][ T7782] team0: Port device dummy0 removed [ 104.099231][ T7782] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 104.117751][ T7792] siw: device registration error -23 [ 104.137218][ T7794] loop2: detected capacity change from 0 to 512 [ 104.173103][ T2965] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 104.180950][ T2965] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 104.200680][ T2965] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3 [ 104.215324][ T2965] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 104.263348][ T7806] loop2: detected capacity change from 0 to 128 [ 104.270635][ T7802] random: crng reseeded on system resumption [ 104.305687][ T7802] ALSA: seq fatal error: cannot create timer (-19) [ 104.375674][ T7821] netlink: 'syz.3.1692': attribute type 10 has an invalid length. [ 104.392155][ T7821] bond0: (slave dummy0): Releasing backup interface [ 104.405341][ T7821] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 104.417501][ T7821] team0: Failed to send options change via netlink (err -105) [ 104.425098][ T7821] team0: Port device dummy0 added [ 104.434548][ T7821] netlink: 'syz.3.1692': attribute type 10 has an invalid length. [ 104.442682][ T7823] 0ªX¹¦À: renamed from 61ªX¹¦À [ 104.449580][ T7823] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 104.465888][ T7821] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 104.477695][ T7821] team0: Failed to send options change via netlink (err -105) [ 104.486531][ T7821] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 104.496353][ T7821] team0: Port device dummy0 removed [ 104.504399][ T7821] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 104.530208][ T7828] loop2: detected capacity change from 0 to 512 [ 104.539080][ T7828] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1695: error while reading EA inode 32 err=-116 [ 104.551929][ T7828] EXT4-fs (loop2): Remounting filesystem read-only [ 104.558473][ T7828] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 104.568660][ T7828] EXT4-fs (loop2): 1 orphan inode deleted [ 104.574863][ T7828] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.601071][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.642575][ T7835] loop2: detected capacity change from 0 to 1024 [ 104.654614][ T7835] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.670532][ T7835] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 104.682935][ T7835] EXT4-fs (loop2): This should not happen!! Data will be lost [ 104.682935][ T7835] [ 104.692660][ T7835] EXT4-fs (loop2): Total free blocks count 0 [ 104.698718][ T7835] EXT4-fs (loop2): Free/Dirty block details [ 104.704644][ T7835] EXT4-fs (loop2): free_blocks=0 [ 104.709582][ T7835] EXT4-fs (loop2): dirty_blocks=0 [ 104.714625][ T7835] EXT4-fs (loop2): Block reservation details [ 104.720611][ T7835] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 104.737974][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.911918][ T7854] loop2: detected capacity change from 0 to 1024 [ 104.919480][ T7854] EXT4-fs: Ignoring removed orlov option [ 104.928876][ T7854] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.022390][ T7862] loop4: detected capacity change from 0 to 512 [ 105.044872][ T7862] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.1707: error while reading EA inode 32 err=-116 [ 105.057813][ T7862] EXT4-fs (loop4): Remounting filesystem read-only [ 105.073567][ T7862] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 105.085558][ T7862] EXT4-fs (loop4): 1 orphan inode deleted [ 105.093673][ T7862] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.141907][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.265923][ T7881] netlink: 'syz.0.1716': attribute type 10 has an invalid length. [ 105.278677][ T7880] sctp: [Deprecated]: syz.4.1715 (pid 7880) Use of int in max_burst socket option. [ 105.278677][ T7880] Use struct sctp_assoc_value instead [ 105.296064][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.306377][ T7881] bond0: (slave dummy0): Releasing backup interface [ 105.316312][ T7884] netlink: 'syz.0.1716': attribute type 10 has an invalid length. [ 105.326336][ T7884] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 105.347824][ T7886] loop2: detected capacity change from 0 to 128 [ 105.427891][ T7891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.467282][ T7891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.622389][ T7899] bond0: (slave dummy0): Releasing backup interface [ 105.641994][ T7899] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 105.651032][ T7899] team0: Failed to send options change via netlink (err -105) [ 105.658603][ T7899] team0: Port device dummy0 added [ 105.665644][ T7902] sctp: [Deprecated]: syz.3.1725 (pid 7902) Use of int in max_burst socket option. [ 105.665644][ T7902] Use struct sctp_assoc_value instead [ 105.683778][ T7899] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 105.699288][ T7899] team0: Failed to send options change via netlink (err -105) [ 105.707985][ T7899] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 105.718114][ T7899] team0: Port device dummy0 removed [ 105.728635][ T7899] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 105.737291][ T7907] 1ªX¹¦À: renamed from 60ªX¹¦À [ 105.744408][ T7907] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 105.856819][ T7914] sctp: [Deprecated]: syz.2.1731 (pid 7914) Use of int in max_burst socket option. [ 105.856819][ T7914] Use struct sctp_assoc_value instead [ 105.860807][ T7916] sctp: [Deprecated]: syz.3.1732 (pid 7916) Use of int in max_burst socket option. [ 105.860807][ T7916] Use struct sctp_assoc_value instead [ 106.048440][ T7924] loop4: detected capacity change from 0 to 128 [ 106.111171][ T7930] loop2: detected capacity change from 0 to 512 [ 106.118106][ T7930] EXT4-fs: test_dummy_encryption option not supported [ 106.118456][ T7934] bond0: (slave dummy0): Releasing backup interface [ 106.135174][ T7934] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 106.144161][ T7934] team0: Failed to send options change via netlink (err -105) [ 106.151671][ T7934] team0: Port device dummy0 added [ 106.161447][ T7934] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 106.172865][ T7934] team0: Failed to send options change via netlink (err -105) [ 106.180701][ T7934] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 106.189771][ T7934] team0: Port device dummy0 removed [ 106.198244][ T7934] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 106.263202][ T7938] loop2: detected capacity change from 0 to 512 [ 106.291268][ T7938] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1741: error while reading EA inode 32 err=-116 [ 106.313479][ T7938] EXT4-fs (loop2): Remounting filesystem read-only [ 106.323923][ T7947] loop3: detected capacity change from 0 to 1024 [ 106.330417][ T7938] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 106.330668][ T7947] EXT4-fs: Ignoring removed orlov option [ 106.346896][ T7938] EXT4-fs (loop2): 1 orphan inode deleted [ 106.355733][ T7938] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.355798][ T7947] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.381714][ T7950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.390325][ T7950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.398763][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.598598][ T7964] loop2: detected capacity change from 0 to 7 [ 106.607543][ T7964] FAULT_INJECTION: forcing a failure. [ 106.607543][ T7964] name failslab, interval 1, probability 0, space 0, times 0 [ 106.620204][ T7964] CPU: 0 UID: 0 PID: 7964 Comm: syz.1.1752 Not tainted syzkaller #0 PREEMPT(voluntary) [ 106.620269][ T7964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 106.620283][ T7964] Call Trace: [ 106.620289][ T7964] [ 106.620297][ T7964] __dump_stack+0x1d/0x30 [ 106.620319][ T7964] dump_stack_lvl+0xe8/0x140 [ 106.620339][ T7964] dump_stack+0x15/0x1b [ 106.620356][ T7964] should_fail_ex+0x265/0x280 [ 106.620480][ T7964] ? tls_set_sw_offload+0x12d/0xba0 [ 106.620553][ T7964] should_failslab+0x8c/0xb0 [ 106.620581][ T7964] __kmalloc_cache_noprof+0x4c/0x4a0 [ 106.620720][ T7964] tls_set_sw_offload+0x12d/0xba0 [ 106.620750][ T7964] ? tls_set_device_offload+0x19c/0x670 [ 106.620773][ T7964] ? _copy_from_user+0x89/0xb0 [ 106.620809][ T7964] tls_setsockopt+0x9b9/0xce0 [ 106.620835][ T7964] sock_common_setsockopt+0x69/0x80 [ 106.620859][ T7964] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 106.620929][ T7964] __sys_setsockopt+0x184/0x200 [ 106.620959][ T7964] __x64_sys_setsockopt+0x64/0x80 [ 106.620988][ T7964] x64_sys_call+0x20ec/0x3000 [ 106.621078][ T7964] do_syscall_64+0xd2/0x200 [ 106.621103][ T7964] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 106.621131][ T7964] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 106.621188][ T7964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.621210][ T7964] RIP: 0033:0x7f3b7c4cefc9 [ 106.621226][ T7964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.621246][ T7964] RSP: 002b:00007f3b7af37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 106.621299][ T7964] RAX: ffffffffffffffda RBX: 00007f3b7c725fa0 RCX: 00007f3b7c4cefc9 [ 106.621312][ T7964] RDX: 0000000000000001 RSI: 000000000000011a RDI: 0000000000000006 [ 106.621355][ T7964] RBP: 00007f3b7af37090 R08: 0000000000000028 R09: 0000000000000000 [ 106.621368][ T7964] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 106.621381][ T7964] R13: 00007f3b7c726038 R14: 00007f3b7c725fa0 R15: 00007ffd3b310408 [ 106.621401][ T7964] [ 106.848350][ T7967] loop2: detected capacity change from 0 to 128 [ 106.883266][ T29] kauditd_printk_skb: 1202 callbacks suppressed [ 106.883284][ T29] audit: type=1107 audit(1760965898.562:12645): pid=7966 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='¿‘' [ 106.908515][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.922426][ T29] audit: type=1107 audit(1760965898.612:12646): pid=7973 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='¿‘' [ 106.990933][ T7978] loop3: detected capacity change from 0 to 512 [ 107.018892][ T7978] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1758: error while reading EA inode 32 err=-116 [ 107.059277][ T7978] EXT4-fs (loop3): Remounting filesystem read-only [ 107.073925][ T7983] __nla_validate_parse: 25 callbacks suppressed [ 107.073944][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1759'. [ 107.076722][ T7978] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 107.080261][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1759'. [ 107.109860][ T7978] EXT4-fs (loop3): 1 orphan inode deleted [ 107.116000][ T7978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.131731][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1759'. [ 107.166380][ T29] audit: type=1107 audit(1760965898.862:12647): pid=7987 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='¿‘' [ 107.184326][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1759'. [ 107.184520][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.193287][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1759'. [ 107.212482][ T7990] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 107.225695][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1759'. [ 107.251892][ T29] audit: type=1326 audit(1760965898.942:12648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7993 comm="syz.3.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c1836efc9 code=0x7ffc0000 [ 107.281079][ T29] audit: type=1326 audit(1760965898.942:12649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7993 comm="syz.3.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c1836efc9 code=0x7ffc0000 [ 107.304772][ T29] audit: type=1326 audit(1760965898.962:12650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7993 comm="syz.3.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7c1836efc9 code=0x7ffc0000 [ 107.328341][ T29] audit: type=1326 audit(1760965898.962:12651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7993 comm="syz.3.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c1836efc9 code=0x7ffc0000 [ 107.351867][ T29] audit: type=1326 audit(1760965898.962:12652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7993 comm="syz.3.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7c1836efc9 code=0x7ffc0000 [ 107.375383][ T29] audit: type=1326 audit(1760965898.962:12653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7993 comm="syz.3.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c1836efc9 code=0x7ffc0000 [ 107.399035][ T29] audit: type=1326 audit(1760965898.962:12654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7993 comm="syz.3.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7c1836efc9 code=0x7ffc0000 [ 107.430562][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1759'. [ 107.439573][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1759'. [ 107.453181][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1759'. [ 107.469106][ T8001] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1766'. [ 107.498199][ T8003] x_tables: unsorted underflow at hook 4 [ 107.568853][ T8003] x_tables: unsorted underflow at hook 4 [ 107.686131][ T8022] loop2: detected capacity change from 0 to 128 [ 107.821086][ T8026] sctp: [Deprecated]: syz.2.1774 (pid 8026) Use of int in max_burst socket option. [ 107.821086][ T8026] Use struct sctp_assoc_value instead [ 107.952010][ T8031] FAULT_INJECTION: forcing a failure. [ 107.952010][ T8031] name failslab, interval 1, probability 0, space 0, times 0 [ 107.964741][ T8031] CPU: 1 UID: 0 PID: 8031 Comm: syz.1.1776 Not tainted syzkaller #0 PREEMPT(voluntary) [ 107.964775][ T8031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 107.964799][ T8031] Call Trace: [ 107.964807][ T8031] [ 107.964815][ T8031] __dump_stack+0x1d/0x30 [ 107.964841][ T8031] dump_stack_lvl+0xe8/0x140 [ 107.964866][ T8031] dump_stack+0x15/0x1b [ 107.964923][ T8031] should_fail_ex+0x265/0x280 [ 107.965017][ T8031] should_failslab+0x8c/0xb0 [ 107.965052][ T8031] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 107.965089][ T8031] ? __alloc_skb+0x101/0x320 [ 107.965122][ T8031] __alloc_skb+0x101/0x320 [ 107.965214][ T8031] ? audit_log_start+0x342/0x720 [ 107.965242][ T8031] audit_log_start+0x3a0/0x720 [ 107.965266][ T8031] ? kstrtouint+0x76/0xc0 [ 107.965310][ T8031] audit_seccomp+0x48/0x100 [ 107.965355][ T8031] ? __seccomp_filter+0x82d/0x1250 [ 107.965387][ T8031] __seccomp_filter+0x83e/0x1250 [ 107.965446][ T8031] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 107.965485][ T8031] ? vfs_write+0x7e8/0x960 [ 107.965525][ T8031] ? __rcu_read_unlock+0x4f/0x70 [ 107.965565][ T8031] ? __fget_files+0x184/0x1c0 [ 107.965603][ T8031] __secure_computing+0x82/0x150 [ 107.965635][ T8031] syscall_trace_enter+0xcf/0x1e0 [ 107.965679][ T8031] do_syscall_64+0xac/0x200 [ 107.965711][ T8031] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 107.965815][ T8031] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 107.965847][ T8031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.965874][ T8031] RIP: 0033:0x7f3b7c4cefc9 [ 107.965894][ T8031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.965986][ T8031] RSP: 002b:00007f3b7af37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 107.966010][ T8031] RAX: ffffffffffffffda RBX: 00007f3b7c725fa0 RCX: 00007f3b7c4cefc9 [ 107.966026][ T8031] RDX: 0000000000001000 RSI: 0000000000001000 RDI: 0000200000ffe000 [ 107.966042][ T8031] RBP: 00007f3b7af37090 R08: 0000200000ffe000 R09: 0000000000000000 [ 107.966058][ T8031] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 107.966073][ T8031] R13: 00007f3b7c726038 R14: 00007f3b7c725fa0 R15: 00007ffd3b310408 [ 107.966099][ T8031] [ 107.972596][ T8034] sctp: [Deprecated]: syz.2.1777 (pid 8034) Use of int in max_burst socket option. [ 107.972596][ T8034] Use struct sctp_assoc_value instead [ 108.314284][ T8077] loop2: detected capacity change from 0 to 512 [ 108.321758][ T8078] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 108.340941][ T8077] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1791: error while reading EA inode 32 err=-116 [ 108.353642][ T8077] EXT4-fs (loop2): Remounting filesystem read-only [ 108.363330][ T8077] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 108.374310][ T8077] EXT4-fs (loop2): 1 orphan inode deleted [ 108.380627][ T8077] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.404270][ T8085] validate_nla: 10 callbacks suppressed [ 108.404286][ T8085] netlink: 'syz.1.1794': attribute type 10 has an invalid length. [ 108.419840][ T8085] bond0: (slave dummy0): Releasing backup interface [ 108.426757][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.439270][ T8085] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 108.448768][ T8085] team0: Failed to send options change via netlink (err -105) [ 108.456281][ T8085] team0: Port device dummy0 added [ 108.461146][ T8090] netlink: 'syz.1.1794': attribute type 10 has an invalid length. [ 108.472420][ T8087] lo speed is unknown, defaulting to 1000 [ 108.472946][ T8090] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 108.489153][ T8090] team0: Failed to send options change via netlink (err -105) [ 108.496700][ T8090] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 108.505584][ T8090] team0: Port device dummy0 removed [ 108.513780][ T8090] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 108.637202][ T8109] loop2: detected capacity change from 0 to 1024 [ 108.663322][ T8109] EXT4-fs: Ignoring removed orlov option [ 108.674087][ T8109] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.695259][ T8114] siw: device registration error -23 [ 108.923013][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.999706][ T8125] loop3: detected capacity change from 0 to 512 [ 109.018811][ T8125] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1806: error while reading EA inode 32 err=-116 [ 109.032392][ T8125] EXT4-fs (loop3): Remounting filesystem read-only [ 109.039249][ T8125] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 109.050615][ T8125] EXT4-fs (loop3): 1 orphan inode deleted [ 109.057074][ T8125] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.091691][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.135677][ T8128] netlink: 'syz.4.1808': attribute type 10 has an invalid length. [ 109.170650][ T8128] bond0: (slave dummy0): Releasing backup interface [ 109.199641][ T8135] netlink: 'syz.4.1808': attribute type 10 has an invalid length. [ 109.209567][ T8128] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 109.243138][ T9] IPVS: starting estimator thread 0... [ 109.249180][ T8137] FAULT_INJECTION: forcing a failure. [ 109.249180][ T8137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.262382][ T8137] CPU: 0 UID: 0 PID: 8137 Comm: syz.2.1810 Not tainted syzkaller #0 PREEMPT(voluntary) [ 109.262410][ T8137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 109.262437][ T8137] Call Trace: [ 109.262446][ T8137] [ 109.262455][ T8137] __dump_stack+0x1d/0x30 [ 109.262499][ T8137] dump_stack_lvl+0xe8/0x140 [ 109.262539][ T8137] dump_stack+0x15/0x1b [ 109.262561][ T8137] should_fail_ex+0x265/0x280 [ 109.262644][ T8137] should_fail+0xb/0x20 [ 109.262734][ T8137] should_fail_usercopy+0x1a/0x20 [ 109.262761][ T8137] _copy_to_user+0x20/0xa0 [ 109.262795][ T8137] simple_read_from_buffer+0xb5/0x130 [ 109.262826][ T8137] proc_fail_nth_read+0x10e/0x150 [ 109.262901][ T8137] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 109.262931][ T8137] vfs_read+0x1a8/0x770 [ 109.262958][ T8137] ? __rcu_read_unlock+0x4f/0x70 [ 109.262991][ T8137] ? __fget_files+0x184/0x1c0 [ 109.263073][ T8128] team0: Failed to send options change via netlink (err -105) [ 109.263141][ T8137] ksys_read+0xda/0x1a0 [ 109.263166][ T8137] __x64_sys_read+0x40/0x50 [ 109.263204][ T8137] x64_sys_call+0x27c0/0x3000 [ 109.263235][ T8137] do_syscall_64+0xd2/0x200 [ 109.263315][ T8137] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 109.263353][ T8137] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 109.263459][ T8137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.263495][ T8137] RIP: 0033:0x7ff77a54d9dc [ 109.263516][ T8137] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 109.263542][ T8137] RSP: 002b:00007ff778faf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 109.263568][ T8137] RAX: ffffffffffffffda RBX: 00007ff77a7a5fa0 RCX: 00007ff77a54d9dc [ 109.263608][ T8137] RDX: 000000000000000f RSI: 00007ff778faf0a0 RDI: 000000000000000c [ 109.263644][ T8137] RBP: 00007ff778faf090 R08: 0000000000000000 R09: 0000000000000000 [ 109.263714][ T8137] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.263732][ T8137] R13: 00007ff77a7a6038 R14: 00007ff77a7a5fa0 R15: 00007fff87637ef8 [ 109.263760][ T8137] [ 109.453092][ T8138] IPVS: using max 2304 ests per chain, 115200 per kthread [ 109.458132][ T8128] team0: Port device dummy0 added [ 109.489061][ T8135] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 109.518050][ T8135] team0: Failed to send options change via netlink (err -105) [ 109.526085][ T8135] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 109.535167][ T8135] team0: Port device dummy0 removed [ 109.543100][ T8135] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 109.573455][ T8144] sctp: [Deprecated]: syz.3.1813 (pid 8144) Use of int in max_burst socket option. [ 109.573455][ T8144] Use struct sctp_assoc_value instead [ 109.608623][ T36] IPVS: starting estimator thread 0... [ 109.705719][ T8150] IPVS: using max 1776 ests per chain, 88800 per kthread [ 109.757615][ T8174] loop3: detected capacity change from 0 to 1764 [ 109.781481][ T8173] loop1: detected capacity change from 0 to 1024 [ 109.821312][ T8173] EXT4-fs: Ignoring removed orlov option [ 109.850879][ T8169] serio: Serial port ptm0 [ 109.867362][ T8173] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.061010][ T8191] syzkaller0: entered promiscuous mode [ 110.066651][ T8191] syzkaller0: entered allmulticast mode [ 110.076825][ T8208] loop4: detected capacity change from 0 to 128 [ 110.136379][ T8214] loop3: detected capacity change from 0 to 512 [ 110.165158][ T8214] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1838: error while reading EA inode 32 err=-116 [ 110.188995][ T8214] EXT4-fs (loop3): Remounting filesystem read-only [ 110.222780][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.231985][ T8214] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 110.242301][ T8214] EXT4-fs (loop3): 1 orphan inode deleted [ 110.248556][ T8214] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.297402][ T8223] wireguard0: entered promiscuous mode [ 110.302939][ T8223] wireguard0: entered allmulticast mode [ 110.322710][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.392135][ T8237] FAULT_INJECTION: forcing a failure. [ 110.392135][ T8237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.405323][ T8237] CPU: 0 UID: 0 PID: 8237 Comm: syz.4.1846 Not tainted syzkaller #0 PREEMPT(voluntary) [ 110.405356][ T8237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 110.405373][ T8237] Call Trace: [ 110.405381][ T8237] [ 110.405388][ T8237] __dump_stack+0x1d/0x30 [ 110.405482][ T8237] dump_stack_lvl+0xe8/0x140 [ 110.405507][ T8237] dump_stack+0x15/0x1b [ 110.405541][ T8237] should_fail_ex+0x265/0x280 [ 110.405651][ T8237] should_fail+0xb/0x20 [ 110.405693][ T8237] should_fail_usercopy+0x1a/0x20 [ 110.405721][ T8237] _copy_from_user+0x1c/0xb0 [ 110.405790][ T8237] ___sys_sendmsg+0xc1/0x1d0 [ 110.405839][ T8237] __x64_sys_sendmsg+0xd4/0x160 [ 110.405883][ T8237] x64_sys_call+0x191e/0x3000 [ 110.405912][ T8237] do_syscall_64+0xd2/0x200 [ 110.406020][ T8237] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 110.406055][ T8237] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 110.406082][ T8237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.406109][ T8237] RIP: 0033:0x7fcccbf8efc9 [ 110.406129][ T8237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.406152][ T8237] RSP: 002b:00007fccca9f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.406250][ T8237] RAX: ffffffffffffffda RBX: 00007fcccc1e5fa0 RCX: 00007fcccbf8efc9 [ 110.406266][ T8237] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 0000000000000003 [ 110.406282][ T8237] RBP: 00007fccca9f7090 R08: 0000000000000000 R09: 0000000000000000 [ 110.406298][ T8237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.406323][ T8237] R13: 00007fcccc1e6038 R14: 00007fcccc1e5fa0 R15: 00007fff726bb8a8 [ 110.406361][ T8237] [ 110.661642][ T8248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.670464][ T8248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.704089][ T8252] 9pnet_fd: p9_fd_create_unix (8252): problem connecting socket: ./file0: -2 [ 110.714794][ T8252] netlink: 'syz.4.1853': attribute type 4 has an invalid length. [ 110.730189][ T8252] bridge1: entered promiscuous mode [ 110.741116][ T8252] loop4: detected capacity change from 0 to 512 [ 110.748596][ T8252] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 110.757782][ T8252] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 110.767965][ T8252] EXT4-fs (loop4): orphan cleanup on readonly fs [ 110.774609][ T8252] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.1853: bad orphan inode 15 [ 110.785167][ T8252] ext4_test_bit(bit=14, block=18) = 1 [ 110.790592][ T8252] is_bad_inode(inode)=0 [ 110.794879][ T8252] NEXT_ORPHAN(inode)=1023 [ 110.799277][ T8252] max_ino=32 [ 110.802501][ T8252] i_nlink=0 [ 110.806817][ T8252] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2967: inode #15: comm syz.4.1853: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 110.824728][ T8252] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 110.834549][ T8252] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 110.848076][ T8252] netlink: 'syz.4.1853': attribute type 4 has an invalid length. [ 110.870839][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.010600][ T8267] loop4: detected capacity change from 0 to 512 [ 111.060804][ T8271] FAULT_INJECTION: forcing a failure. [ 111.060804][ T8271] name failslab, interval 1, probability 0, space 0, times 0 [ 111.073531][ T8271] CPU: 0 UID: 0 PID: 8271 Comm: syz.3.1861 Not tainted syzkaller #0 PREEMPT(voluntary) [ 111.073598][ T8271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 111.073624][ T8271] Call Trace: [ 111.073632][ T8271] [ 111.073641][ T8271] __dump_stack+0x1d/0x30 [ 111.073664][ T8271] dump_stack_lvl+0xe8/0x140 [ 111.073683][ T8271] dump_stack+0x15/0x1b [ 111.073699][ T8271] should_fail_ex+0x265/0x280 [ 111.073752][ T8271] should_failslab+0x8c/0xb0 [ 111.073853][ T8271] kmem_cache_alloc_noprof+0x50/0x480 [ 111.073882][ T8271] ? getname_flags+0x80/0x3b0 [ 111.073918][ T8271] getname_flags+0x80/0x3b0 [ 111.073955][ T8271] user_path_at+0x28/0x130 [ 111.074051][ T8271] bpf_obj_get_user+0x66/0x300 [ 111.074083][ T8271] bpf_obj_get+0xed/0x100 [ 111.074106][ T8271] __sys_bpf+0x5dc/0x7c0 [ 111.074205][ T8271] __x64_sys_bpf+0x41/0x50 [ 111.074234][ T8271] x64_sys_call+0x2aee/0x3000 [ 111.074255][ T8271] do_syscall_64+0xd2/0x200 [ 111.074283][ T8271] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 111.074371][ T8271] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 111.074468][ T8271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.074495][ T8271] RIP: 0033:0x7f7c1836efc9 [ 111.074510][ T8271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.074607][ T8271] RSP: 002b:00007f7c16dcf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 111.074631][ T8271] RAX: ffffffffffffffda RBX: 00007f7c185c5fa0 RCX: 00007f7c1836efc9 [ 111.074648][ T8271] RDX: 0000000000000018 RSI: 0000200000000500 RDI: 0000000000000007 [ 111.074679][ T8271] RBP: 00007f7c16dcf090 R08: 0000000000000000 R09: 0000000000000000 [ 111.074695][ T8271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.074711][ T8271] R13: 00007f7c185c6038 R14: 00007f7c185c5fa0 R15: 00007fffcc34ba78 [ 111.074731][ T8271] [ 111.294388][ T8267] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.307280][ T8267] ext4 filesystem being mounted at /344/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.433191][ T8267] netlink: 'syz.4.1860': attribute type 4 has an invalid length. [ 111.495988][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.566015][ T8294] sctp: [Deprecated]: syz.4.1871 (pid 8294) Use of int in max_burst socket option. [ 111.566015][ T8294] Use struct sctp_assoc_value instead [ 111.716989][ T8307] rdma_op ffff88811aa2dd80 conn xmit_rdma 0000000000000000 [ 111.794259][ T8318] loop2: detected capacity change from 0 to 1024 [ 111.794302][ T8320] netlink: 'syz.4.1883': attribute type 10 has an invalid length. [ 111.801049][ T8318] EXT4-fs: Ignoring removed orlov option [ 111.814698][ T8320] bond0: (slave dummy0): Releasing backup interface [ 111.825176][ T8320] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 111.833890][ T8318] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.833995][ T8320] team0: Failed to send options change via netlink (err -105) [ 111.853906][ T8320] team0: Port device dummy0 added [ 111.872465][ T8320] netlink: 'syz.4.1883': attribute type 10 has an invalid length. [ 111.881076][ T8320] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 111.894464][ T29] kauditd_printk_skb: 960 callbacks suppressed [ 111.894481][ T29] audit: type=1326 audit(1760965903.592:13613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8277 comm="syz.3.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7c18365e67 code=0x7ffc0000 [ 111.924119][ T29] audit: type=1326 audit(1760965903.592:13614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8277 comm="syz.3.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7c1830b099 code=0x7ffc0000 [ 111.947600][ T29] audit: type=1326 audit(1760965903.592:13615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8277 comm="syz.3.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f7c1836efc9 code=0x7ffc0000 [ 111.971899][ T29] audit: type=1326 audit(1760965903.662:13616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8277 comm="syz.3.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7c18365e67 code=0x7ffc0000 [ 111.972703][ T8320] team0: Failed to send options change via netlink (err -105) [ 111.995432][ T29] audit: type=1326 audit(1760965903.662:13617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8277 comm="syz.3.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7c1830b099 code=0x7ffc0000 [ 112.026337][ T29] audit: type=1326 audit(1760965903.662:13618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8277 comm="syz.3.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f7c1836efc9 code=0x7ffc0000 [ 112.026439][ T8320] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 112.026697][ T8320] team0: Port device dummy0 removed [ 112.064826][ T29] audit: type=1326 audit(1760965903.762:13619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8277 comm="syz.3.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7c18365e67 code=0x7ffc0000 [ 112.088353][ T29] audit: type=1326 audit(1760965903.762:13620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8277 comm="syz.3.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7c1830b099 code=0x7ffc0000 [ 112.090100][ T8320] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 112.111823][ T29] audit: type=1326 audit(1760965903.762:13621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8277 comm="syz.3.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f7c1836efc9 code=0x7ffc0000 [ 112.143977][ T29] audit: type=1326 audit(1760965903.762:13622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8277 comm="syz.3.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7c18365e67 code=0x7ffc0000 [ 112.197238][ T8327] __nla_validate_parse: 28 callbacks suppressed [ 112.197256][ T8327] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1885'. [ 112.212725][ T8327] 1ªX¹¦À: renamed from 60ªX¹¦À [ 112.222775][ T8327] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 112.247999][ T8325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.257336][ T8325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.269792][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.285905][ T8332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.295389][ T8332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.304713][ T8334] loop2: detected capacity change from 0 to 128 [ 112.406218][ T8336] netlink: 'syz.1.1889': attribute type 10 has an invalid length. [ 112.471064][ T8338] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1890'. [ 112.509911][ T8340] loop1: detected capacity change from 0 to 512 [ 112.519047][ T8340] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.1891: error while reading EA inode 32 err=-116 [ 112.532633][ T8340] EXT4-fs (loop1): Remounting filesystem read-only [ 112.536049][ T8342] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1890'. [ 112.540143][ T8340] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 112.559360][ T8340] EXT4-fs (loop1): 1 orphan inode deleted [ 112.565576][ T8340] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.570687][ T8342] lo speed is unknown, defaulting to 1000 [ 112.600490][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.860410][ T8353] sctp: [Deprecated]: syz.3.1895 (pid 8353) Use of int in max_burst socket option. [ 112.860410][ T8353] Use struct sctp_assoc_value instead [ 112.877829][ T8353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1895'. [ 112.938190][ T8354] random: crng reseeded on system resumption [ 112.971647][ T8354] ALSA: seq fatal error: cannot create timer (-19) [ 112.980956][ T8358] bond0: (slave dummy0): Releasing backup interface [ 112.992348][ T8358] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 113.001458][ T8358] team0: Failed to send options change via netlink (err -105) [ 113.009747][ T8358] team0: Port device dummy0 added [ 113.021799][ T8358] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 113.049226][ T8358] team0: Failed to send options change via netlink (err -105) [ 113.064847][ T8360] loop4: detected capacity change from 0 to 128 [ 113.067318][ T8358] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 113.086833][ T8358] team0: Port device dummy0 removed [ 113.094747][ T8358] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 113.139015][ T8362] loop1: detected capacity change from 0 to 1024 [ 113.141894][ T8364] loop3: detected capacity change from 0 to 1024 [ 113.152791][ T8364] EXT4-fs: Ignoring removed orlov option [ 113.160389][ T8362] EXT4-fs: Ignoring removed orlov option [ 113.168751][ T8364] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.195785][ T8362] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.265434][ T8370] loop4: detected capacity change from 0 to 128 [ 113.427304][ T8377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1901'. [ 113.438849][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.519084][ T8379] sctp: [Deprecated]: syz.3.1902 (pid 8379) Use of int in max_burst socket option. [ 113.519084][ T8379] Use struct sctp_assoc_value instead [ 113.561315][ T8379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1902'. [ 113.588223][ T8383] sctp: [Deprecated]: syz.2.1904 (pid 8383) Use of int in max_burst socket option. [ 113.588223][ T8383] Use struct sctp_assoc_value instead [ 113.605437][ T8383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1904'. [ 113.605603][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.664837][ T8389] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1907'. [ 113.677684][ T8389] 0ªX¹¦À: renamed from 61ªX¹¦À [ 113.686294][ T8389] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 113.748492][ T8396] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1910'. [ 113.859919][ T8402] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1910'. [ 113.879852][ T8403] xt_nat: multiple ranges no longer supported [ 113.917245][ T8402] lo speed is unknown, defaulting to 1000 [ 113.979245][ T8407] loop3: detected capacity change from 0 to 1024 [ 114.001826][ T8407] EXT4-fs: Ignoring removed orlov option [ 114.019586][ T8412] loop1: detected capacity change from 0 to 1024 [ 114.029833][ T8412] EXT4-fs: Ignoring removed orlov option [ 114.088057][ T8412] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.114700][ T8407] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.270675][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.346019][ T8425] sctp: [Deprecated]: syz.0.1920 (pid 8425) Use of int in max_burst socket option. [ 114.346019][ T8425] Use struct sctp_assoc_value instead [ 114.378004][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.414326][ T8426] random: crng reseeded on system resumption [ 114.434185][ T8431] loop1: detected capacity change from 0 to 512 [ 114.438298][ T8426] ALSA: seq fatal error: cannot create timer (-19) [ 114.440950][ T8431] EXT4-fs: test_dummy_encryption option not supported [ 114.650641][ T8448] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 114.674368][ T8452] siw: device registration error -23 [ 114.764561][ T8457] sctp: [Deprecated]: syz.0.1933 (pid 8457) Use of int in max_burst socket option. [ 114.764561][ T8457] Use struct sctp_assoc_value instead [ 114.776504][ T8459] sctp: [Deprecated]: syz.2.1934 (pid 8459) Use of int in max_burst socket option. [ 114.776504][ T8459] Use struct sctp_assoc_value instead [ 114.961623][ T8470] loop2: detected capacity change from 0 to 512 [ 114.968938][ T8470] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 114.980469][ T8470] EXT4-fs (loop2): 1 truncate cleaned up [ 114.986614][ T8470] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.016781][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.055218][ T8475] loop2: detected capacity change from 0 to 1024 [ 115.061838][ T8475] EXT4-fs: Ignoring removed orlov option [ 115.067585][ T8475] EXT4-fs: Ignoring removed nomblk_io_submit option [ 115.085189][ T8475] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.098095][ T8475] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.161881][ T36] kernel read not supported for file /933/net/netfilter (pid: 36 comm: kworker/1:1) [ 115.244618][ T8482] loop3: detected capacity change from 0 to 128 [ 115.463615][ T8493] sctp: [Deprecated]: syz.3.1948 (pid 8493) Use of int in max_burst socket option. [ 115.463615][ T8493] Use struct sctp_assoc_value instead [ 115.677433][ T8515] validate_nla: 2 callbacks suppressed [ 115.677449][ T8515] netlink: 'syz.4.1959': attribute type 10 has an invalid length. [ 115.759952][ T8519] sctp: [Deprecated]: syz.0.1961 (pid 8519) Use of int in max_burst socket option. [ 115.759952][ T8519] Use struct sctp_assoc_value instead [ 115.801203][ T8521] loop4: detected capacity change from 0 to 1024 [ 115.809000][ T8521] EXT4-fs: Ignoring removed orlov option [ 115.816787][ T8521] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.167080][ T8539] mmap: syz.2.1968 (8539) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 116.204747][ T8543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.225177][ T8543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.233880][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.447140][ T8558] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 116.448780][ T8559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.467086][ T8558] tipc: Enabling of bearer rejected, failed to enable media [ 116.476193][ T8559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.510762][ T8565] sctp: [Deprecated]: syz.1.1979 (pid 8565) Use of int in max_burst socket option. [ 116.510762][ T8565] Use struct sctp_assoc_value instead [ 116.708273][ T8573] loop1: detected capacity change from 0 to 1024 [ 116.715047][ T8573] EXT4-fs: Ignoring removed orlov option [ 116.723831][ T8573] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.849566][ T8583] syz.0.1984 uses obsolete (PF_INET,SOCK_PACKET) [ 116.967471][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.051734][ T8592] sctp: [Deprecated]: syz.3.1988 (pid 8592) Use of int in max_burst socket option. [ 117.051734][ T8592] Use struct sctp_assoc_value instead [ 117.123534][ T29] kauditd_printk_skb: 435 callbacks suppressed [ 117.123553][ T29] audit: type=1326 audit(1760965908.822:14058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8593 comm="syz.4.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcccbf8efc9 code=0x7ffc0000 [ 117.153435][ T29] audit: type=1326 audit(1760965908.822:14059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8593 comm="syz.4.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcccbf8efc9 code=0x7ffc0000 [ 117.177774][ T29] audit: type=1326 audit(1760965908.822:14060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8593 comm="syz.4.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcccbf8efc9 code=0x7ffc0000 [ 117.202188][ T29] audit: type=1326 audit(1760965908.822:14061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8593 comm="syz.4.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcccbf8efc9 code=0x7ffc0000 [ 117.225894][ T29] audit: type=1326 audit(1760965908.822:14062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8593 comm="syz.4.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcccbf8efc9 code=0x7ffc0000 [ 117.225931][ T29] audit: type=1326 audit(1760965908.822:14063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8593 comm="syz.4.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcccbf8efc9 code=0x7ffc0000 [ 117.225959][ T29] audit: type=1326 audit(1760965908.822:14064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8593 comm="syz.4.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcccbf8efc9 code=0x7ffc0000 [ 117.225986][ T29] audit: type=1326 audit(1760965908.822:14065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8593 comm="syz.4.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcccbf8efc9 code=0x7ffc0000 [ 117.226029][ T29] audit: type=1326 audit(1760965908.822:14066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8593 comm="syz.4.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcccbf8efc9 code=0x7ffc0000 [ 117.226135][ T29] audit: type=1326 audit(1760965908.822:14067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8593 comm="syz.4.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcccbf8efc9 code=0x7ffc0000 [ 117.310331][ T8594] lo speed is unknown, defaulting to 1000 [ 117.366588][ T8597] netlink: 'syz.3.1990': attribute type 13 has an invalid length. [ 117.391639][ T8599] sctp: [Deprecated]: syz.2.1991 (pid 8599) Use of int in max_burst socket option. [ 117.391639][ T8599] Use struct sctp_assoc_value instead [ 117.395585][ T8596] lo speed is unknown, defaulting to 1000 [ 117.417020][ T8599] __nla_validate_parse: 20 callbacks suppressed [ 117.417038][ T8599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1991'. [ 117.456233][ T8597] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.463458][ T8597] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.547896][ T8597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.551282][ T8601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1992'. [ 117.558730][ T8597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.617785][ T31] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.641165][ T31] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.650550][ T31] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.662806][ T31] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.681958][ T8606] loop2: detected capacity change from 0 to 512 [ 117.689432][ T8606] EXT4-fs: test_dummy_encryption option not supported [ 117.792230][ T8613] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1995'. [ 117.821324][ T8613] 1ªX¹¦À: renamed from 60ªX¹¦À [ 117.832801][ T8613] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 117.860882][ T8617] loop1: detected capacity change from 0 to 512 [ 117.885361][ T8615] loop3: detected capacity change from 0 to 1024 [ 117.895215][ T8617] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.1997: error while reading EA inode 32 err=-116 [ 117.903314][ T8615] EXT4-fs: Ignoring removed orlov option [ 117.914467][ T8617] EXT4-fs (loop1): Remounting filesystem read-only [ 117.920986][ T8617] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 117.951428][ T8615] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.971579][ T8617] EXT4-fs (loop1): 1 orphan inode deleted [ 117.984414][ T8617] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.024076][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.247848][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.248769][ T8632] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2001'. [ 118.312460][ T8637] netlink: 'syz.1.2003': attribute type 3 has an invalid length. [ 118.326759][ T8637] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2003'. [ 118.358920][ T8641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.367687][ T8641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.380341][ T8641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.389163][ T8641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.540435][ T8644] loop1: detected capacity change from 0 to 512 [ 118.547996][ T8644] EXT4-fs: test_dummy_encryption option not supported [ 118.627294][ T8647] loop1: detected capacity change from 0 to 512 [ 118.647542][ T8649] loop2: detected capacity change from 0 to 1024 [ 118.654414][ T8649] EXT4-fs: Ignoring removed orlov option [ 118.657466][ T8647] ext4 filesystem being mounted at /397/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.708525][ T8654] loop1: detected capacity change from 0 to 128 [ 118.981584][ T8666] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2013'. [ 118.993970][ T8666] 1ªX¹¦À: renamed from 60ªX¹¦À [ 119.010295][ T8666] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 119.035177][ T8669] sctp: [Deprecated]: syz.3.2015 (pid 8669) Use of int in max_burst socket option. [ 119.035177][ T8669] Use struct sctp_assoc_value instead [ 119.093434][ T8674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2015'. [ 119.218131][ T8678] loop2: detected capacity change from 0 to 512 [ 119.224910][ T8678] EXT4-fs: test_dummy_encryption option not supported [ 119.286068][ T8688] loop4: detected capacity change from 0 to 128 [ 119.298488][ T8686] loop3: detected capacity change from 0 to 128 [ 119.319701][ T8692] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2024'. [ 119.349162][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2025'. [ 119.358116][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2025'. [ 119.453310][ T8694] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 119.490340][ T8694] tipc: Started in network mode [ 119.495325][ T8694] tipc: Node identity bea2477505c3, cluster identity 4711 [ 119.502559][ T8694] tipc: Enabled bearer , priority 0 [ 119.512969][ T8694] syzkaller0: MTU too low for tipc bearer [ 119.518758][ T8694] tipc: Disabling bearer [ 119.561002][ T8706] sctp: [Deprecated]: syz.3.2029 (pid 8706) Use of int in max_burst socket option. [ 119.561002][ T8706] Use struct sctp_assoc_value instead [ 119.600995][ T8710] sctp: [Deprecated]: syz.2.2031 (pid 8710) Use of int in max_burst socket option. [ 119.600995][ T8710] Use struct sctp_assoc_value instead [ 119.681174][ T8718] loop3: detected capacity change from 0 to 512 [ 119.688798][ T8718] EXT4-fs: Ignoring removed orlov option [ 119.694951][ T8716] loop4: detected capacity change from 0 to 512 [ 119.701546][ T8716] EXT4-fs: test_dummy_encryption option not supported [ 119.711928][ T8718] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.2035: inode has both inline data and extents flags [ 119.715227][ T8721] FAULT_INJECTION: forcing a failure. [ 119.715227][ T8721] name failslab, interval 1, probability 0, space 0, times 0 [ 119.737810][ T8721] CPU: 1 UID: 0 PID: 8721 Comm: syz.2.2036 Not tainted syzkaller #0 PREEMPT(voluntary) [ 119.737842][ T8721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 119.737861][ T8721] Call Trace: [ 119.737870][ T8721] [ 119.737939][ T8721] __dump_stack+0x1d/0x30 [ 119.737986][ T8721] dump_stack_lvl+0xe8/0x140 [ 119.738005][ T8721] dump_stack+0x15/0x1b [ 119.738021][ T8721] should_fail_ex+0x265/0x280 [ 119.738099][ T8721] ? tipc_nametbl_lookup_group+0x451/0x630 [ 119.738126][ T8721] should_failslab+0x8c/0xb0 [ 119.738150][ T8721] __kmalloc_cache_noprof+0x4c/0x4a0 [ 119.738204][ T8721] ? xas_load+0x413/0x430 [ 119.738298][ T8721] tipc_nametbl_lookup_group+0x451/0x630 [ 119.738326][ T8721] __tipc_sendmsg+0x878/0x1b10 [ 119.738362][ T8721] ? __rcu_read_unlock+0x4f/0x70 [ 119.738389][ T8721] ? avc_has_perm_noaudit+0x1b1/0x200 [ 119.738461][ T8721] ? __rcu_read_unlock+0x4f/0x70 [ 119.738489][ T8721] __tipc_sendstream+0xa1e/0xb20 [ 119.738562][ T8721] ? selinux_socket_sendmsg+0x175/0x1b0 [ 119.738585][ T8721] ? _raw_spin_unlock_bh+0x36/0x40 [ 119.738640][ T8721] tipc_send_packet+0x65/0x80 [ 119.738673][ T8721] ? __pfx_tipc_send_packet+0x10/0x10 [ 119.738708][ T8721] __sock_sendmsg+0x145/0x180 [ 119.738731][ T8721] ____sys_sendmsg+0x31e/0x4e0 [ 119.738781][ T8721] ___sys_sendmsg+0x17b/0x1d0 [ 119.738837][ T8721] __x64_sys_sendmsg+0xd4/0x160 [ 119.738920][ T8721] x64_sys_call+0x191e/0x3000 [ 119.738955][ T8721] do_syscall_64+0xd2/0x200 [ 119.739042][ T8721] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 119.739097][ T8721] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 119.739126][ T8721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.739153][ T8721] RIP: 0033:0x7ff77a54efc9 [ 119.739210][ T8721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.739248][ T8721] RSP: 002b:00007ff778faf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.739272][ T8721] RAX: ffffffffffffffda RBX: 00007ff77a7a5fa0 RCX: 00007ff77a54efc9 [ 119.739285][ T8721] RDX: 0000000004008030 RSI: 0000200000000400 RDI: 0000000000000003 [ 119.739347][ T8721] RBP: 00007ff778faf090 R08: 0000000000000000 R09: 0000000000000000 [ 119.739360][ T8721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.739373][ T8721] R13: 00007ff77a7a6038 R14: 00007ff77a7a5fa0 R15: 00007fff87637ef8 [ 119.739393][ T8721] [ 119.980048][ T8718] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2035: couldn't read orphan inode 15 (err -117) [ 120.103522][ T8733] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 120.110079][ T8733] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 120.118484][ T8733] vhci_hcd vhci_hcd.0: Device attached [ 120.130609][ T8737] loop3: detected capacity change from 0 to 512 [ 120.132428][ T8739] FAULT_INJECTION: forcing a failure. [ 120.132428][ T8739] name failslab, interval 1, probability 0, space 0, times 0 [ 120.150323][ T8739] CPU: 0 UID: 0 PID: 8739 Comm: syz.0.2043 Not tainted syzkaller #0 PREEMPT(voluntary) [ 120.150347][ T8739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 120.150359][ T8739] Call Trace: [ 120.150364][ T8739] [ 120.150370][ T8739] __dump_stack+0x1d/0x30 [ 120.150395][ T8739] dump_stack_lvl+0xe8/0x140 [ 120.150445][ T8739] dump_stack+0x15/0x1b [ 120.150465][ T8739] should_fail_ex+0x265/0x280 [ 120.150529][ T8739] should_failslab+0x8c/0xb0 [ 120.150557][ T8739] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 120.150591][ T8739] ? __alloc_skb+0x101/0x320 [ 120.150621][ T8739] ? __rtnl_unlock+0x95/0xb0 [ 120.150727][ T8739] __alloc_skb+0x101/0x320 [ 120.150750][ T8739] netlink_ack+0xfd/0x500 [ 120.150778][ T8739] ? avc_has_perm_noaudit+0x1b1/0x200 [ 120.150872][ T8739] netlink_rcv_skb+0x192/0x220 [ 120.150939][ T8739] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 120.150969][ T8739] rtnetlink_rcv+0x1c/0x30 [ 120.150990][ T8739] netlink_unicast+0x5c0/0x690 [ 120.151016][ T8739] netlink_sendmsg+0x58b/0x6b0 [ 120.151150][ T8739] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.151182][ T8739] __sock_sendmsg+0x145/0x180 [ 120.151207][ T8739] ____sys_sendmsg+0x345/0x4e0 [ 120.151323][ T8739] ___sys_sendmsg+0x17b/0x1d0 [ 120.151374][ T8739] __sys_sendmmsg+0x178/0x300 [ 120.151472][ T8739] __x64_sys_sendmmsg+0x57/0x70 [ 120.151503][ T8739] x64_sys_call+0x1c4a/0x3000 [ 120.151529][ T8739] do_syscall_64+0xd2/0x200 [ 120.151599][ T8739] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 120.151627][ T8739] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 120.151725][ T8739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.151751][ T8739] RIP: 0033:0x7fad312cefc9 [ 120.151768][ T8739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.151786][ T8739] RSP: 002b:00007fad2fd2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 120.151856][ T8739] RAX: ffffffffffffffda RBX: 00007fad31525fa0 RCX: 00007fad312cefc9 [ 120.151871][ T8739] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 120.151887][ T8739] RBP: 00007fad2fd2f090 R08: 0000000000000000 R09: 0000000000000000 [ 120.151902][ T8739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.151916][ T8739] R13: 00007fad31526038 R14: 00007fad31525fa0 R15: 00007fff41b01de8 [ 120.152002][ T8739] [ 120.396056][ T8734] vhci_hcd: connection closed [ 120.408229][ T31] vhci_hcd: stop threads [ 120.418022][ T31] vhci_hcd: release socket [ 120.422451][ T31] vhci_hcd: disconnect device [ 120.435533][ T8737] ext4 filesystem being mounted at /440/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.457793][ T8745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.476049][ T8745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.510511][ T8753] sctp: [Deprecated]: syz.4.2046 (pid 8753) Use of int in max_burst socket option. [ 120.510511][ T8753] Use struct sctp_assoc_value instead [ 120.532917][ T8754] siw: device registration error -23 [ 120.574631][ T8762] loop3: detected capacity change from 0 to 512 [ 120.587460][ T8762] EXT4-fs: test_dummy_encryption option not supported [ 120.681343][ T8772] loop3: detected capacity change from 0 to 128 [ 120.715779][ T8775] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 120.900084][ T8782] loop2: detected capacity change from 0 to 128 [ 121.006408][ T8786] lo speed is unknown, defaulting to 1000 [ 121.126151][ T8793] sctp: [Deprecated]: syz.4.2064 (pid 8793) Use of int in max_burst socket option. [ 121.126151][ T8793] Use struct sctp_assoc_value instead [ 121.177078][ T8797] loop2: detected capacity change from 0 to 512 [ 121.185011][ T8797] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 121.205853][ T8797] EXT4-fs (loop2): 1 truncate cleaned up [ 121.282304][ T8810] loop2: detected capacity change from 0 to 512 [ 121.295495][ T8810] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.2069: error while reading EA inode 32 err=-116 [ 121.318338][ T8810] EXT4-fs (loop2): Remounting filesystem read-only [ 121.383939][ T8810] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 121.394210][ T8810] EXT4-fs (loop2): 1 orphan inode deleted [ 121.421485][ T8813] FAULT_INJECTION: forcing a failure. [ 121.421485][ T8813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.435358][ T8813] CPU: 0 UID: 0 PID: 8813 Comm: syz.1.2070 Not tainted syzkaller #0 PREEMPT(voluntary) [ 121.435393][ T8813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 121.435410][ T8813] Call Trace: [ 121.435417][ T8813] [ 121.435426][ T8813] __dump_stack+0x1d/0x30 [ 121.435484][ T8813] dump_stack_lvl+0xe8/0x140 [ 121.435504][ T8813] dump_stack+0x15/0x1b [ 121.435531][ T8813] should_fail_ex+0x265/0x280 [ 121.435570][ T8813] should_fail+0xb/0x20 [ 121.435654][ T8813] should_fail_usercopy+0x1a/0x20 [ 121.435681][ T8813] _copy_from_user+0x1c/0xb0 [ 121.435712][ T8813] copy_from_sockptr_offset+0x66/0xa0 [ 121.435794][ T8813] do_ipt_set_ctl+0x5c8/0x820 [ 121.435825][ T8813] ? lock_sock_nested+0x112/0x140 [ 121.435853][ T8813] nf_setsockopt+0x199/0x1b0 [ 121.435881][ T8813] ip_setsockopt+0x102/0x110 [ 121.435916][ T8813] udp_setsockopt+0x99/0xb0 [ 121.435969][ T8813] sock_common_setsockopt+0x69/0x80 [ 121.435999][ T8813] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 121.436029][ T8813] __sys_setsockopt+0x184/0x200 [ 121.436114][ T8813] __x64_sys_setsockopt+0x64/0x80 [ 121.436151][ T8813] x64_sys_call+0x20ec/0x3000 [ 121.436178][ T8813] do_syscall_64+0xd2/0x200 [ 121.436210][ T8813] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 121.436257][ T8813] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 121.436341][ T8813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.436379][ T8813] RIP: 0033:0x7f3b7c4cefc9 [ 121.436422][ T8813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.436446][ T8813] RSP: 002b:00007f3b7af37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 121.436466][ T8813] RAX: ffffffffffffffda RBX: 00007f3b7c725fa0 RCX: 00007f3b7c4cefc9 [ 121.436478][ T8813] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 121.436489][ T8813] RBP: 00007f3b7af37090 R08: 0000000000000548 R09: 0000000000000000 [ 121.436501][ T8813] R10: 0000200000000fc0 R11: 0000000000000246 R12: 0000000000000001 [ 121.436512][ T8813] R13: 00007f3b7c726038 R14: 00007f3b7c725fa0 R15: 00007ffd3b310408 [ 121.436615][ T8813] [ 121.729041][ T8817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.738186][ T8817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.817139][ T8832] sctp: [Deprecated]: syz.4.2079 (pid 8832) Use of int in max_burst socket option. [ 121.817139][ T8832] Use struct sctp_assoc_value instead [ 121.875491][ T8839] siw: device registration error -23 [ 121.922156][ T8843] FAULT_INJECTION: forcing a failure. [ 121.922156][ T8843] name failslab, interval 1, probability 0, space 0, times 0 [ 121.935584][ T8843] CPU: 0 UID: 0 PID: 8843 Comm: syz.4.2084 Not tainted syzkaller #0 PREEMPT(voluntary) [ 121.935640][ T8843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 121.935658][ T8843] Call Trace: [ 121.935718][ T8843] [ 121.935725][ T8843] __dump_stack+0x1d/0x30 [ 121.935778][ T8843] dump_stack_lvl+0xe8/0x140 [ 121.935803][ T8843] dump_stack+0x15/0x1b [ 121.935826][ T8843] should_fail_ex+0x265/0x280 [ 121.935947][ T8843] ? sctp_add_bind_addr+0x71/0x1e0 [ 121.935981][ T8843] should_failslab+0x8c/0xb0 [ 121.936064][ T8843] __kmalloc_cache_noprof+0x4c/0x4a0 [ 121.936098][ T8843] sctp_add_bind_addr+0x71/0x1e0 [ 121.936124][ T8843] sctp_do_bind+0x427/0x4b0 [ 121.936177][ T8843] sctp_connect_new_asoc+0x153/0x3a0 [ 121.936215][ T8843] sctp_sendmsg+0xf10/0x18d0 [ 121.936249][ T8843] ? selinux_socket_sendmsg+0x161/0x1b0 [ 121.936354][ T8843] ? __pfx_sctp_sendmsg+0x10/0x10 [ 121.936414][ T8843] inet_sendmsg+0xc5/0xd0 [ 121.936470][ T8843] __sock_sendmsg+0x102/0x180 [ 121.936495][ T8843] __sys_sendto+0x268/0x330 [ 121.936543][ T8843] __x64_sys_sendto+0x76/0x90 [ 121.936576][ T8843] x64_sys_call+0x2d14/0x3000 [ 121.936672][ T8843] do_syscall_64+0xd2/0x200 [ 121.936698][ T8843] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 121.936734][ T8843] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 121.936807][ T8843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.936832][ T8843] RIP: 0033:0x7fcccbf8efc9 [ 121.936851][ T8843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.936869][ T8843] RSP: 002b:00007fccca9f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 121.936889][ T8843] RAX: ffffffffffffffda RBX: 00007fcccc1e5fa0 RCX: 00007fcccbf8efc9 [ 121.936976][ T8843] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 121.936993][ T8843] RBP: 00007fccca9f7090 R08: 000020000005ffe4 R09: 000000000000001c [ 121.937007][ T8843] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000001 [ 121.937020][ T8843] R13: 00007fcccc1e6038 R14: 00007fcccc1e5fa0 R15: 00007fff726bb8a8 [ 121.937045][ T8843] [ 122.167272][ T29] kauditd_printk_skb: 1153 callbacks suppressed [ 122.167288][ T29] audit: type=1400 audit(1760965913.862:15221): avc: denied { bind } for pid=8845 comm="syz.4.2085" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 122.194041][ T29] audit: type=1400 audit(1760965913.862:15222): avc: denied { name_bind } for pid=8845 comm="syz.4.2085" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 122.215218][ T29] audit: type=1400 audit(1760965913.862:15223): avc: denied { node_bind } for pid=8845 comm="syz.4.2085" saddr=172.20.20.187 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 122.240086][ T29] audit: type=1326 audit(1760965913.862:15224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8845 comm="syz.4.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcccbf8efc9 code=0x7ffc0000 [ 122.263654][ T29] audit: type=1326 audit(1760965913.862:15225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8845 comm="syz.4.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcccbf8efc9 code=0x7ffc0000 [ 122.287274][ T29] audit: type=1326 audit(1760965913.872:15226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8840 comm="syz.3.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7c18365e67 code=0x7ffc0000 [ 122.292025][ T8848] 0ªX¹¦À: renamed from 61ªX¹¦À [ 122.310753][ T29] audit: type=1326 audit(1760965913.872:15227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8840 comm="syz.3.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7c1830b099 code=0x7ffc0000 [ 122.310788][ T29] audit: type=1326 audit(1760965913.872:15228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8840 comm="syz.3.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f7c1836efc9 code=0x7ffc0000 [ 122.310824][ T29] audit: type=1326 audit(1760965913.872:15229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8845 comm="syz.4.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcccbf8efc9 code=0x7ffc0000 [ 122.310897][ T29] audit: type=1326 audit(1760965913.872:15230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8845 comm="syz.4.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcccbf8efc9 code=0x7ffc0000 [ 122.426047][ T8848] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 122.568246][ T8863] __nla_validate_parse: 18 callbacks suppressed [ 122.568344][ T8863] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2093'. [ 122.584338][ T8863] 1ªX¹¦À: renamed from 60ªX¹¦À [ 122.591646][ T8863] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 122.631425][ T8865] loop1: detected capacity change from 0 to 1024 [ 122.639644][ T8865] EXT4-fs: Ignoring removed orlov option [ 122.808961][ T8872] loop3: detected capacity change from 0 to 128 [ 122.956609][ T8881] FAULT_INJECTION: forcing a failure. [ 122.956609][ T8881] name failslab, interval 1, probability 0, space 0, times 0 [ 122.969269][ T8881] CPU: 0 UID: 0 PID: 8881 Comm: syz.0.2100 Not tainted syzkaller #0 PREEMPT(voluntary) [ 122.969353][ T8881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 122.969366][ T8881] Call Trace: [ 122.969373][ T8881] [ 122.969381][ T8881] __dump_stack+0x1d/0x30 [ 122.969408][ T8881] dump_stack_lvl+0xe8/0x140 [ 122.969431][ T8881] dump_stack+0x15/0x1b [ 122.969453][ T8881] should_fail_ex+0x265/0x280 [ 122.969535][ T8881] should_failslab+0x8c/0xb0 [ 122.969562][ T8881] kmem_cache_alloc_noprof+0x50/0x480 [ 122.969650][ T8881] ? inet_bind2_bucket_create+0x2f/0x220 [ 122.969696][ T8881] inet_bind2_bucket_create+0x2f/0x220 [ 122.969725][ T8881] inet_csk_get_port+0xbca/0x10b0 [ 122.969745][ T8881] ? inet_csk_get_port+0x971/0x10b0 [ 122.969810][ T8881] ? avc_has_perm+0xf7/0x180 [ 122.969848][ T8881] ? _raw_spin_unlock_bh+0x36/0x40 [ 122.969929][ T8881] ? lock_sock_nested+0x112/0x140 [ 122.969953][ T8881] ? selinux_socket_bind+0x5e9/0x6b0 [ 122.970000][ T8881] __inet6_bind+0x792/0x8b0 [ 122.970024][ T8881] inet6_bind+0x98/0xb0 [ 122.970043][ T8881] __sys_bind+0x1d1/0x2a0 [ 122.970069][ T8881] __x64_sys_bind+0x3f/0x50 [ 122.970120][ T8881] x64_sys_call+0x2b72/0x3000 [ 122.970143][ T8881] do_syscall_64+0xd2/0x200 [ 122.970207][ T8881] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 122.970238][ T8881] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 122.970406][ T8881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.970426][ T8881] RIP: 0033:0x7fad312cefc9 [ 122.970488][ T8881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.970508][ T8881] RSP: 002b:00007fad2fd2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 122.970531][ T8881] RAX: ffffffffffffffda RBX: 00007fad31525fa0 RCX: 00007fad312cefc9 [ 122.970546][ T8881] RDX: 000000000000001c RSI: 0000200000000080 RDI: 0000000000000003 [ 122.970561][ T8881] RBP: 00007fad2fd2f090 R08: 0000000000000000 R09: 0000000000000000 [ 122.970580][ T8881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.970591][ T8881] R13: 00007fad31526038 R14: 00007fad31525fa0 R15: 00007fff41b01de8 [ 122.970670][ T8881] [ 123.206366][ T8883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.219038][ T8883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.237234][ T8885] netlink: 'syz.2.2103': attribute type 10 has an invalid length. [ 123.245950][ T8885] bond0: (slave dummy0): Releasing backup interface [ 123.255225][ T8885] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 123.264373][ T8885] team0: Failed to send options change via netlink (err -105) [ 123.271844][ T8885] team0: Port device dummy0 added [ 123.295920][ T8885] netlink: 'syz.2.2103': attribute type 10 has an invalid length. [ 123.307628][ T8885] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 123.359045][ T8885] team0: Failed to send options change via netlink (err -105) [ 123.382304][ T8885] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 123.391278][ T8885] team0: Port device dummy0 removed [ 123.399540][ T8885] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 123.457362][ T8898] loop4: detected capacity change from 0 to 512 [ 123.480741][ T8896] ------------[ cut here ]------------ [ 123.486420][ T8896] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x0, 0x7800000000] s64=[0x0, 0xffffffffffffffff] u32=[0x80000000, 0x0] s32=[0x0, 0xffffffff] var_off=(0x0, 0x7800000000) [ 123.506492][ T8896] WARNING: CPU: 1 PID: 8896 at kernel/bpf/verifier.c:2721 reg_bounds_sanity_check+0x673/0x680 [ 123.516870][ T8896] Modules linked in: [ 123.520827][ T8896] CPU: 1 UID: 0 PID: 8896 Comm: syz.0.2105 Not tainted syzkaller #0 PREEMPT(voluntary) [ 123.530653][ T8896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 123.540799][ T8896] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 123.540900][ T8903] loop3: detected capacity change from 0 to 1024 [ 123.547181][ T8896] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 92 00 bb ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 123.547208][ T8896] RSP: 0018:ffffc9000fcb7408 EFLAGS: 00010282 [ 123.547228][ T8896] RAX: 0669f0dd2e229300 RBX: ffff888119cc7840 RCX: 0000000000080000 [ 123.547246][ T8896] RDX: ffffc9000327d000 RSI: 00000000000146a6 RDI: 00000000000146a7 [ 123.547261][ T8896] RBP: 0000000000000000 R08: 0001c9000fcb7257 R09: 0000000000000000 [ 123.547277][ T8896] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff888119cc7800 [ 123.547293][ T8896] R13: ffff888104838000 R14: ffff888104838000 R15: ffff888119cc7838 [ 123.547309][ T8896] FS: 00007fad2fbed6c0(0000) GS:ffff8882aef39000(0000) knlGS:0000000000000000 [ 123.547387][ T8896] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 123.547403][ T8896] CR2: 0000200000002ec0 CR3: 000000011ab56000 CR4: 00000000003506f0 [ 123.547505][ T8896] Call Trace: [ 123.547514][ T8896] [ 123.547531][ T8896] reg_set_min_max+0x1eb/0x260 [ 123.547584][ T8896] check_cond_jmp_op+0x1370/0x19e0 [ 123.547623][ T8896] do_check+0x3363/0x8460 [ 123.547742][ T8896] do_check_common+0xc5e/0x12b0 [ 123.547788][ T8896] bpf_check+0xaaae/0xd9d0 [ 123.547835][ T8896] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 123.547917][ T8896] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 123.557865][ T8903] EXT4-fs: Ignoring removed orlov option [ 123.574013][ T8896] ? _find_next_zero_bit+0x29/0xa0 [ 123.633433][ T8900] loop2: detected capacity change from 0 to 128 [ 123.635716][ T8896] ? pcpu_block_update+0x24e/0x3b0 [ 123.675242][ T8898] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.2107: error while reading EA inode 32 err=-116 [ 123.679559][ T8896] ? pcpu_block_refresh_hint+0x157/0x170 [ 123.725724][ T8896] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 123.731836][ T8896] ? css_rstat_updated+0xb7/0x240 [ 123.736961][ T8896] ? __rcu_read_unlock+0x4f/0x70 [ 123.741940][ T8896] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 123.747902][ T8896] ? bpf_prog_alloc+0x5b/0x150 [ 123.752769][ T8896] ? pcpu_alloc_noprof+0xd29/0x1250 [ 123.758051][ T8896] ? should_fail_ex+0x30/0x280 [ 123.762933][ T8896] ? should_failslab+0x8c/0xb0 [ 123.767757][ T8896] ? __kmalloc_noprof+0x2a2/0x570 [ 123.772826][ T8896] ? security_bpf_prog_load+0x60/0x140 [ 123.778338][ T8896] ? selinux_bpf_prog_load+0xad/0xd0 [ 123.783711][ T8896] ? security_bpf_prog_load+0x9e/0x140 [ 123.789209][ T8896] bpf_prog_load+0xf6e/0x1100 [ 123.794096][ T8896] ? security_bpf+0x2b/0x90 [ 123.798630][ T8896] __sys_bpf+0x469/0x7c0 [ 123.802923][ T8896] __x64_sys_bpf+0x41/0x50 [ 123.807400][ T8896] x64_sys_call+0x2aee/0x3000 [ 123.812109][ T8896] do_syscall_64+0xd2/0x200 [ 123.816728][ T8896] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 123.822907][ T8896] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 123.828783][ T8896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.834733][ T8896] RIP: 0033:0x7fad312cefc9 [ 123.839174][ T8896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.858838][ T8896] RSP: 002b:00007fad2fbed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 123.861100][ T8907] loop1: detected capacity change from 0 to 512 [ 123.867299][ T8896] RAX: ffffffffffffffda RBX: 00007fad31526090 RCX: 00007fad312cefc9 [ 123.867318][ T8896] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 123.867334][ T8896] RBP: 00007fad31351f91 R08: 0000000000000000 R09: 0000000000000000 [ 123.867347][ T8896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.867411][ T8896] R13: 00007fad31526128 R14: 00007fad31526090 R15: 00007fff41b01de8 [ 123.867437][ T8896] [ 123.867445][ T8896] ---[ end trace 0000000000000000 ]--- [ 123.887772][ T8898] EXT4-fs (loop4): Remounting filesystem read-only [ 123.930814][ T8907] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.2110: error while reading EA inode 32 err=-116 [ 123.945325][ T8907] EXT4-fs (loop1): Remounting filesystem read-only [ 123.951864][ T8907] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 123.962368][ T8907] EXT4-fs (loop1): 1 orphan inode deleted [ 123.985238][ T8898] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 123.996299][ T8898] EXT4-fs (loop4): 1 orphan inode deleted [ 124.138294][ T8913] netlink: 'syz.2.2114': attribute type 10 has an invalid length. [ 124.149962][ T8913] bond0: (slave dummy0): Releasing backup interface [ 124.159588][ T8917] loop1: detected capacity change from 0 to 128 [ 124.166625][ T8915] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2113'. [ 124.179128][ T8913] team0: Port device dummy0 added [ 124.194575][ T8915] 0ªX¹¦À: renamed from 61ªX¹¦À [ 124.207936][ T8919] netlink: 'syz.2.2114': attribute type 10 has an invalid length. [ 124.218723][ T8915] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 124.239322][ T8919] team0: Port device dummy0 removed [ 124.263878][ T8922] netlink: 'syz.4.2116': attribute type 10 has an invalid length. [ 124.278564][ T8919] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 124.336670][ T8928] FAULT_INJECTION: forcing a failure. [ 124.336670][ T8928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.350606][ T8928] CPU: 0 UID: 0 PID: 8928 Comm: syz.3.2118 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 124.350638][ T8928] Tainted: [W]=WARN [ 124.350644][ T8928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 124.350658][ T8928] Call Trace: [ 124.350664][ T8928] [ 124.350673][ T8928] __dump_stack+0x1d/0x30 [ 124.350693][ T8928] dump_stack_lvl+0xe8/0x140 [ 124.350716][ T8928] dump_stack+0x15/0x1b [ 124.350732][ T8928] should_fail_ex+0x265/0x280 [ 124.350778][ T8928] should_fail+0xb/0x20 [ 124.350811][ T8928] should_fail_usercopy+0x1a/0x20 [ 124.350837][ T8928] strncpy_from_user+0x25/0x230 [ 124.350872][ T8928] ? kmem_cache_alloc_noprof+0x242/0x480 [ 124.350917][ T8928] ? getname_flags+0x80/0x3b0 [ 124.351032][ T8928] getname_flags+0xae/0x3b0 [ 124.351097][ T8928] user_path_at+0x28/0x130 [ 124.351213][ T8928] __x64_sys_umount+0x85/0xe0 [ 124.351281][ T8928] x64_sys_call+0xdd2/0x3000 [ 124.351309][ T8928] do_syscall_64+0xd2/0x200 [ 124.351343][ T8928] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 124.351380][ T8928] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 124.351478][ T8928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.351506][ T8928] RIP: 0033:0x7f7c1836efc9 [ 124.351525][ T8928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.351551][ T8928] RSP: 002b:00007f7c16dcf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 124.351640][ T8928] RAX: ffffffffffffffda RBX: 00007f7c185c5fa0 RCX: 00007f7c1836efc9 [ 124.351671][ T8928] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 124.351684][ T8928] RBP: 00007f7c16dcf090 R08: 0000000000000000 R09: 0000000000000000 [ 124.351698][ T8928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.351710][ T8928] R13: 00007f7c185c6038 R14: 00007f7c185c5fa0 R15: 00007fffcc34ba78 [ 124.351729][ T8928] [ 124.622752][ T8936] netlink: 'syz.4.2122': attribute type 10 has an invalid length. [ 124.651460][ T8929] random: crng reseeded on system resumption [ 124.667774][ T8936] bond0: (slave dummy0): Releasing backup interface [ 124.686768][ T8936] team0: Port device dummy0 added [ 124.692045][ T8938] loop1: detected capacity change from 0 to 128 [ 124.721020][ T8936] netlink: 'syz.4.2122': attribute type 10 has an invalid length. [ 124.742071][ T8936] team0: Port device dummy0 removed [ 124.750188][ T8936] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 125.051787][ T8956] loop1: detected capacity change from 0 to 512 [ 125.078912][ T8958] netlink: 'syz.3.2130': attribute type 10 has an invalid length. [ 125.092141][ T8960] netlink: 'syz.0.2131': attribute type 13 has an invalid length. [ 125.241656][ T8966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2134'. [ 125.339216][ T8976] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2137'. [ 125.410780][ T8979] loop3: detected capacity change from 0 to 1024 [ 125.417619][ T8979] EXT4-fs: Ignoring removed orlov option [ 125.423831][ T8976] 1ªX¹¦À: renamed from 60ªX¹¦À [ 125.432162][ T8976] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 125.600739][ T8982] ================================================================== [ 125.608878][ T8982] BUG: KCSAN: data-race in filemap_read / filemap_read [ 125.615772][ T8982] [ 125.618107][ T8982] read to 0xffff88811c5c0ca8 of 8 bytes by task 8979 on cpu 1: [ 125.625666][ T8982] filemap_read+0x6f/0xa00 [ 125.630129][ T8982] generic_file_read_iter+0x79/0x330 [ 125.635454][ T8982] ext4_file_read_iter+0x1cc/0x290 [ 125.640616][ T8982] copy_splice_read+0x442/0x660 [ 125.645503][ T8982] splice_direct_to_actor+0x290/0x680 [ 125.650904][ T8982] do_splice_direct+0xda/0x150 [ 125.655680][ T8982] do_sendfile+0x380/0x650 [ 125.660125][ T8982] __x64_sys_sendfile64+0x105/0x150 [ 125.665356][ T8982] x64_sys_call+0x2bb4/0x3000 [ 125.670064][ T8982] do_syscall_64+0xd2/0x200 [ 125.674617][ T8982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.680536][ T8982] [ 125.682877][ T8982] write to 0xffff88811c5c0ca8 of 8 bytes by task 8982 on cpu 0: [ 125.690524][ T8982] filemap_read+0x974/0xa00 [ 125.695053][ T8982] generic_file_read_iter+0x79/0x330 [ 125.700364][ T8982] ext4_file_read_iter+0x1cc/0x290 [ 125.705495][ T8982] copy_splice_read+0x442/0x660 [ 125.710352][ T8982] splice_direct_to_actor+0x290/0x680 [ 125.715731][ T8982] do_splice_direct+0xda/0x150 [ 125.720599][ T8982] do_sendfile+0x380/0x650 [ 125.725134][ T8982] __x64_sys_sendfile64+0x105/0x150 [ 125.730360][ T8982] x64_sys_call+0x2bb4/0x3000 [ 125.735053][ T8982] do_syscall_64+0xd2/0x200 [ 125.739661][ T8982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.745566][ T8982] [ 125.747898][ T8982] value changed: 0x0000000000000243 -> 0x0000000000000244 [ 125.755013][ T8982] [ 125.757342][ T8982] Reported by Kernel Concurrency Sanitizer on: [ 125.763499][ T8982] CPU: 0 UID: 0 PID: 8982 Comm: syz.3.2138 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 125.774790][ T8982] Tainted: [W]=WARN [ 125.778599][ T8982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 125.788750][ T8982] ==================================================================