last executing test programs: 1m4.666809263s ago: executing program 4 (id=17): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2, 0x0, 0xd}, 0x18) getrlimit(0xe, &(0x7f0000000240)) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0xe9, 0x400) syz_usb_disconnect(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/59, 0x3b}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000000180)=""/92, 0x5c}], 0x4}, 0x10002) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103302) ioctl$SG_IO(r6, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0x6, 0x0, @scatter={0x1, 0x3, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/204, 0xcc}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) 1m3.785074251s ago: executing program 4 (id=25): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9ee6, 0x200000005}, 0x104022, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8}]}, {0xfffffffffffffe45}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x2000000, 0x0, 0xa25bb844b084a7a1}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timerfd_create(0x8, 0x80000) 1m3.689557821s ago: executing program 4 (id=26): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7fff}, 0x18) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async) r3 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x6e2842, 0x1c1) (async) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRES8=0x0, @ANYBLOB], 0x1, 0x221, &(0x7f0000000d00)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000004c0), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0xffffffffffffffff}, 0x18) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x41, 0xfe8ee28a1d9fac77, 0x6, 0x6, 0x2, 0x40, 0x3, 0x0, 0x6, 0x3}) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r7, 0xc0a85320, &(0x7f00000007c0)={{0x80}, 'port0\x00', 0x3c, 0x151625, 0xd, 0x2, 0x20107, 0x6, 0x5, 0x0, 0x4, 0x3}) close(r7) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x801e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0xfffffffffffffce8, 0xa]}}) fstat(r0, &(0x7f0000000140)) 1m2.70147931s ago: executing program 4 (id=29): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29}, 0x48) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000640)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) inotify_init() futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file2\x00', 0x4204, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$eJzs3M9rG0cUwPEnWZYlGVs6lJYWiof20l4WW+25VBQbSgU1tlVqFwxre9UKbSWjFS4qpbZPvZbccwrkYHz0zZD4H/Alt+SSS266BHKICSEb9pf107asyJFjfz8QdjQzTzujGYW3i1f1X///s5i3tLxelXBMSUhE5EQkJWEJhPxj2C1HpdmOfD3+4vHni8srP2Wy2dkFpeYyS9+klVKTUw/++ifudzsck+PUav15+tnxx8ef1t8s/VGwVMFSpXJV6Wqt/LSqr5mG2ihYRU2pedPQLUMVSpZR8drLXnveLG9u1pRe2phIbFYMy1J6qaaKRk1Vy6paqSn9d71QUpqmqYmE4ALOgi7omT6j1wc8GlyRSiWjj4hIvKMltzeUAQEAgKFqz//DTkrfV/4vk27+73Ru5P/7XxxVx385mDx0Ylfrh9Fu+f+3T7z3asn/YyLST/5/Vy6R/3dmRLdLbm+h//wf18NUtKMq1PLKyf8T/vfXtfvb/rRbIP8HAAAAAAAAAAAAAAAAAAAAAOBDcGLbSdu2k8Ex+Nd4hMB/jRvprPUfE5GYs/o263+TLS6vSMx9cM9ZY/O/rdxWzjv6HY5ExBRDpiUpr9394HPKwZNHypGSh+a2G//KOY64LZm8FNz4GUlKqj3etud+zM7OKI8ff/qYUqI5Pi1J+ah7fLo13hn/9lYuKl992RSvSVIerUtZTNlw93Uj/t8ZpX74OdsWH/dOAgAAAADADaApFfIvn1Ot17/e9bumKdW93fuVkUzevU10xv0B7/p6uuv1eST5WWTYswcAAAAA4Hawan8XddM0KucU4nJxn/4Lkd46R9tqRs/rPNI0w17HE3VvZIi867zu9fipthSCP6RoaYr5lf2NJ5j/wNZrp7kmLD1ERdoHP+VUqEuefdefyGlNcNsoesbnLPOd7xM+ZyeMDmw/f3Ln/svBfUG+Owh2wMWdd/s9V6x917mF0av+fwcAAADA+9dI+oOa75ubQ0MZFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAt8yV/KRfW2HYcwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACui7cBAAD//5Oa+gc=") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioperm(0x0, 0x2, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) r6 = syz_io_uring_setup(0x235, &(0x7f0000001240)={0x0, 0x10008cc8, 0x10100, 0x2, 0x75}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x3b, 0x2, 0x1}) io_uring_enter(r6, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76) syz_clone(0x308000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m2.520217298s ago: executing program 4 (id=32): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000380)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r2, &(0x7f00000003c0)="10", 0x1, 0x80, &(0x7f0000000140)={0x11, 0xf7, r3, 0x1, 0x0, 0x6, @local}, 0x14) 1m1.982057202s ago: executing program 4 (id=38): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x45833af92e4bbbfe, 0x0) 1m1.981737872s ago: executing program 32 (id=38): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x45833af92e4bbbfe, 0x0) 3.857405073s ago: executing program 5 (id=837): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) syz_open_dev$usbfs(&(0x7f0000000900), 0x5, 0x408b82) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x5, &(0x7f00000008c0)=ANY=[@ANYRESOCT], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@newsa={0x13c, 0x10, 0x713, 0x70bd26, 0x0, {{@in=@rand_addr=0x64010101, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x0, 0x4e23, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r2, @ANYBLOB], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r6}, 0x18) statx(0xffffffffffffffff, 0x0, 0x5000, 0x7ff, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) shutdown(0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) r7 = io_uring_setup(0x68af, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x1}) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) close_range(r7, 0xffffffffffffffff, 0x0) 3.835934825s ago: executing program 5 (id=838): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="ff0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000002000000040000000000000035b861873b77787d58c0377f00"/40], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x9, 0x0, r0, 0x439, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000001180), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x27, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @generic={0x0, 0x2, 0x4, 0x6, 0x80000000}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r6, 0x0, 0x4ab}, 0x18) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r8, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x3b}}}}, [@NL80211_ATTR_DURATION={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 3.777015291s ago: executing program 5 (id=839): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") utimensat(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', &(0x7f0000000200)={{0x0, 0x2710}}, 0x100) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, &(0x7f0000000800)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e612721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ec3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a068e9607f57f626a5b8d476636ef1ee76307524009ae49be402000000000000001e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408074c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dfff01a9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669cabc206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb252f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2e02fad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea093680ffffff802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c59d88a29af5886c1f5dfc6837c58aaef12a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e2cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe90400fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97107339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f40029d7cfcaf26fd1900d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60e7222697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b787bdb26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20d4774d66c5ae270adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac39b204a814f5ece5961621358e36f8a2cf7196c76959824bbb475a7cad8f57853fe05f59f341b5207cc9bb8d686982c2f158e0d8f5c7ec6cbfd500"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) 3.69036498s ago: executing program 5 (id=841): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20048a, &(0x7f0000000140)={[{@i_version}, {@noinit_itable}, {@user_xattr}, {@nombcache}]}, 0x12, 0x52f, &(0x7f0000001900)="$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") r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r2 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, 0x0, 0x0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = io_uring_setup(0x5594, &(0x7f0000000100)={0x0, 0x10000000, 0x1, 0x1, 0x21e}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000080)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)=""/4108, 0x100c}], &(0x7f0000000200), 0x1}, 0x20) ptrace(0x10, r2) r6 = socket$nl_route(0x10, 0x3, 0x0) fallocate(r6, 0x0, 0xbf6, 0x2000402) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000100)={0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) r8 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) fallocate(r8, 0x0, 0x0, 0x1001f3) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000000)={0x0, 0x0, "a01d5c5f5fb9bd29fa7f3e145c5e439a"}) fallocate(r8, 0x8, 0x0, 0x10000) fallocate(r1, 0x36, 0xbf5, 0x2000401) openat$pfkey(0xffffffffffffff9c, 0x0, 0x20c00, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r10) sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r11, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="240003"], 0x10e0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x20, 0x0, 0x0, 0xfffffffffdffffff}) 3.342963244s ago: executing program 5 (id=844): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2, 0x0, 0xd}, 0x18) getrlimit(0xe, &(0x7f0000000240)) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0xe9, 0x400) syz_usb_disconnect(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/59, 0x3b}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000000180)=""/92, 0x5c}], 0x4}, 0x10002) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103302) ioctl$SG_IO(r6, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0x6, 0x0, @scatter={0x1, 0x3, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/204, 0xcc}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) 3.09116501s ago: executing program 5 (id=848): mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f00000002c0)='system_u:object_r:logrotate_exec_t:s0\x00', 0x26, 0x0) (fail_nth: 3) 3.054704084s ago: executing program 33 (id=848): mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f00000002c0)='system_u:object_r:logrotate_exec_t:s0\x00', 0x26, 0x0) (fail_nth: 3) 2.238682015s ago: executing program 2 (id=859): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0xfd, 0x3, 0x2, 0x5c, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x40, 0x4, 0x4}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) 1.89300183s ago: executing program 3 (id=863): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b408000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) syz_clone3(&(0x7f0000001180)={0x1000200, 0x0, &(0x7f0000000080)=0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_pidfd_open(r4, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x851}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x18) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs(0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r11, &(0x7f0000000400)="aa", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x3f66400, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r11, 0x1) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0x0, 0x1}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x1) 1.79742309s ago: executing program 2 (id=865): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0xfd, 0x3, 0x2, 0x5c, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x40, 0x4, 0x4}}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) 1.674594242s ago: executing program 1 (id=866): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r0}, 0x10) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x2201, 0x0) write$binfmt_elf32(r1, 0x0, 0x69) 1.673833571s ago: executing program 1 (id=867): r0 = socket(0x2, 0x80805, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d0400000004000000040000000000000000000010040000000000000000000002030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={r4, 0x20, &(0x7f0000000080)={&(0x7f0000001680)=""/4098, 0x1002, 0x0, &(0x7f0000000000)=""/65, 0x41}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) name_to_handle_at(r2, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000200)=ANY=[@ANYBLOB='('], &(0x7f00000002c0), 0x600) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r5, 0x0, 0x4ab}, 0x18) sendmmsg$inet_sctp(r0, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1, 0x0, 0x0, 0x80}], 0x49249249249256b, 0x0) unshare(0x22020600) r6 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x18) pidfd_getfd(r7, 0xffffffffffffffff, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)='5', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c"], 0x30}], 0x1, 0x0) 1.653831974s ago: executing program 2 (id=868): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xdb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xcff, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd9}, 0x50) 1.566025322s ago: executing program 3 (id=869): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='sched_switch\x00', r1, 0x0, 0x2}, 0x64) r2 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={{0x14, 0x3ea, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) keyctl$clear(0x3, 0xfffffffffffffffd) 1.368636173s ago: executing program 3 (id=872): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.301864399s ago: executing program 3 (id=873): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r0, 0x0, 0x1000000000000}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x4002}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r6 = getpid() r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r6, r7, 0x0, r5, r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r8}, 0x10) 1.135132626s ago: executing program 3 (id=874): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) dup3(r2, r3, 0x80000) ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0x3ff) fcntl$setstatus(r3, 0x4, 0x7c00) dup3(r4, r3, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) 1.081532411s ago: executing program 1 (id=876): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r0}, 0x10) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x2201, 0x0) write$binfmt_elf32(r1, 0x0, 0x69) 1.070647102s ago: executing program 1 (id=877): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0xfd, 0x3, 0x2, 0x5c, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x40, 0x4, 0x4}}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) 982.399541ms ago: executing program 1 (id=878): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x24072, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f0000000180)=[{0x0, 0xea}], 0x8}, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) arch_prctl$ARCH_GET_FS(0x1003, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@noinit_itable}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {0x0}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 863.517533ms ago: executing program 3 (id=879): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYRES8], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000000000000000000000000001e110000", @ANYRES32=r0, @ANYRESDEC=r0, @ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000300)=0x3, 0x80, 0x2) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) ioctl$TCFLSH(r3, 0x400455c8, 0x2) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000004c0)=@ccm_128={{0x303}, "5f45a3f1b79d09bc", "e48eb2a10aa57fe8edfef6a6c564e51e", "bf5ba5a8", "263e14b238f66f7a"}, 0x28) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_io_uring_setup(0x4ac6, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x8, 0x10040004}, &(0x7f0000000040), &(0x7f0000000140)) io_uring_enter(r6, 0x2d3e, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=0x0, @ANYRES32=r5, @ANYRES8=r0], 0x40}}, 0x200048d0) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) lsm_set_self_attr(0x67, &(0x7f0000000380)={0x0, 0x7, 0x105, 0xe5, "619da4034272facd2640c327516be05661cbadc189327843c2b105f53a20567bf1f9c1545e3bb208a6fd93bb1bf17d781ac0cec00b74435c80b417f108cd6364b0b64d7aec93144f810243b0902327581a93a2d6bcac15a8803eda0fc9e6a2d545a38833931512de6937b2ae109395e0eb97fa420e15345f3ad7c75ad9e4071865af91e388afd1471b3e0c056f61e596e66df3cd0b0ed03b75efad9198fe527800a36bcc96c1af5460cbbe6670c16f04944ac34a94fb01501f60970334935b7c416a319e3ef95e10cbab25d4cf7d9e2a4ac0b1e73a81c2164ce56860f127d7926dfa069a72"}, 0x105, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) bind$unix(r10, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r10, 0x8) accept$unix(r10, &(0x7f0000000180)=@abs, &(0x7f00000000c0)=0x6e) connect$unix(r9, &(0x7f0000000240)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r11, {0x0, 0x7}, {0xb}, {0xffff, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) 611.893838ms ago: executing program 2 (id=880): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @local}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000040)="620326ffd755af056510120800afbcf711e12b7f96e5521c8cf217300100000093c1cdf632dbb86770380e8ddd9aff775f8eff5b0b0bc283e136f46c68c6586680", 0x94}, {&(0x7f0000002300)="fb16656fa9b4bdc7cbe98fd90c4fe8405e1b233bfe248ce87873125788c8f84cdd6a907d0642fcd2fb131cfd03bb642fdac200385073782c51eb70432dd40adbe7ad9113035e7fa8c4bcc076243aad85074aadbf02802d6cb7525c164265e34747d82169fe6293736d02e9488bad013c72b51d303303bd4ed1865891f6cab78b54083b36ab3ec12f4e9fcbee4bd2e5ee3721b95494d5429b858b42d6b1eb1858cb655305d71463943fa47fad0bac0b80e79ec4e276cad1b3c55464d2912c6821592761e0fb9da72ee50b8fd9fc3462e1715549421af29c203abbe79d510bb4b60d40491af903d49c43d0a39ce733440a8171a7341e929ae1286fe721fdcf8be3e236a10449736e344ab1414eda4a964f1068ae7215596eff8e8720eb32bdcbe049867ea30918ea664770ce1e9f14f3f9d4f2ffdc8b0c7b8b59de9a6cd7d34d06471b9423c4d1974b15886d2917a7782b74d68f0342783ca90587b982e2df98fb19393fa4942d650d79812835352fe59fcd063b9439216a9adc28061f602440cc5924154a25774f81e1c3ce1bb29d78948e8da5855d2623080f45272d39de46ad5e193bda1c242e80c74841a8725367c74cb34838f96e2870e66cb243d31f9df582b1a33edc92af0d422fcf7715ad3eb748b38e089c6db34311aeded259c2fe4673cdfd2e0105be682f3291f13bdbf6ecf61b3a0a2606fcf51df1423a025719a9168916df934b976d86af2a5464e92203facc8c77614fb03b6f6b60a02cdcddd0fcf07b37a53a1f02f15203910be1b5a78b6e923d7bcd66d1d93b71f6672268d5a533919af8696bf49842fafffc2bdb1005fab6243785ee8ffe214ca8e3ec0a7441d94639b7003f08929560c6d1ca20f7163d743dc92116de808bd9b1fd2e7bc2095e8341d636f465adf8250adbc5541a8e5a5c65bdaea4a06c5106fcefbd78604220a1a8e3ddcee8c4cfbb4c68e6634df80bd83d5b4990e5d2245e840d569baea06d1d479b8de29672d0b43ef1d45c10aaa0e1d64299e181939bc1c541cc3992bf83ea39475e9d02e2dc9d29a43eb036682d22910343a143f4720843dc5334c2524a21111f8a9b3b999c9f4de60ed70048da6b8ca964ff5cc1ea82bb81cc0b7c2b5cad8715097e9646ff455cd58ebd4e254633962a415b59bdd9ef549cc098c3e7d4888b405069aaa27dd7592aac2cea464d68b02c924a94647f64f8ce880ebd46a6fe0097a6b938413f6f26f2793b1adcf04c5b932500ce90b28093839dab697e95e07e55b4875e4e4faa78c5f02750b5093a0f4e52c14d444764fddd28cc9b35237d213654f9b929d97a1da368e9ec37d223e4202086d46f7e529e2c01e17d8638b06d6bc0560a66fb5994b3f2f569b4db0257680527bebe79ef156331a1b534c0ea164e921ac24462b67462ba61c820640847606a66ac470a0ad608eaec0e50a3073eb631c4698b351a7b97441b80769b821a8048fa82a84ce0726d84035ab1eb19481f5972428c90619768bf83532fb96549f5c84c8f4525d19e1fd4d5311b2374349ce8a98a8c4fca2b3093ac8fde22dfaf913c45869be4b7dab0435642735c2cfbfbc3ffd1438ed4c9e1f18b0989d31e604f48e129a3a1e09b03cf4a370a5827f195b228f22094438c75384436d810d25c4bbc856199c045129a2ec5cc8446a43279b9475a903e476029b839d195ec47b5a625e4f8da76825e0aaedc2ac57d0bdbe460281969d04423684cf8f8bbfb76798f819ed7963fac56c22fb5ffc7381cd88d5c6bd5b6e484cadbb74c30109125a8c5f23387144a5fa531da1aa3e8c10dec242e522b7c035773bc6c38e51a29e162884716978deab927d232f2bbee93e21ea862de6d525d8ad147ca94aefa92c25be100da06dd4d56a363a15243d619f3aca793ca2f6ce24f75ddcf0b3d5e3db578783e2b9efc9493a77e6456fed90034fe392c78df233a329ee888449e1ddee9d560fb20c1bcc6495595ec6db666365a3369cdde2828e8feb52ac11d707e3dee5232f00be6cb10e8e04c0dfb2c0b609b13acb56627de701970bec6180c19ecf6d0c5c44dabdaf43716e83876807894ecdf5b605d2537499d75d845c8b81b12d89e01e52eb8cbea63c8c113b6768e9b7acc2e17dfec2641b87147ea7f6a0901486a2b4faaaf1d1be261f3a75382538eb25bfdbeab5c618f68030e1ac751750ba62d0cab03c2aacea183749ee9bf1dca964c22df527d92e77e6d1ac89ba796f0ea4a23cf219de64173ee02e880c86ee5a910edfcc31f6893c1b85dc46973a8df6153170e40123976b85760cade5be1667c6ba93ca7b7d316102aeb9ae5cc9a5c1bb54734af212c03ada022ebe3f58a3626082fd23dac521e5db215193f9d70cb8050fcb55d234dfa871d8a00f23994f2728b3adc7b9736953b1974f99dda4eeb0f2d50f23b020c964acab414088c6946e7f294c5959139aebd18077441005397f43c273d8901c717e5a044237dd31042036e5129d74f4c0f76d800054a8e8660f7c688b47878ad6c5352a00db703b0ad34c12472a93aee647b0b1a2d79e96e9a435981e1b786d2e4ed72b1eb458dcf80e68a8d35c46c93eff209d06c96a4bb934426cdc1b6e8bd3f3d419ccfc763e0b3c978a78ea5d8816a0c4ea54e18905a938d6e032084d769c739f39378675135b5cb86826a3abc1591e974c399aff884c2c904b2c0d435a18d3ee25dde55d3607c7ac31825a1017eb7d5f46ab79ade884d92080909d81afaa8c1c054675c16b7637728e3c7e4ca059c7065ec953d5176496aebc9667a772cc93cba7ecaf776da83ea4859c8d25f3d3e343352f8b3256a521c47edb587515783035305752ba837adcb5d0a0665b2eac5cd0f616294fb11ff94365f5c10a25f35f0c3e6fc3156ee2273a47befdb57e9c7dc1119b819d1f0a77efa85721d832f257a644390adf27e5b799eb9df07eecf7059c6b779a3619fa71fe770bc0a9056f6b7b31d86e32440355f733dadaddc2975b1852b1c3ad165281ef4c8513ec2f363cc00f6f9d06b1e0cef8a2dae7de666d1ca470e5ac9dd5ddbe3d831852ce48ab6145e13ad58ccc31b0eebe3053e661c20fa59abf985ecc34bc79e9239c28842f2a5d7dcea8008c3315e7f05cc2841adbc611e85bedb04f618b68f3723d91e40bef3d12fcaf01fb7f2b41428711d4e8e3cf42754639692d3f538317d08eafe63eadf561e35ed3e5c915b4b1a2b62da6fb436186c45129b73b7fdc7136729b2ac72e2580f549c28ee848bcf13daf446389b4f64bc83d78041fd4fc397b7f2e8ed3491912622458317d89a13c01b045731ed3e82d9859100897297a1db43e0ce06b5109ee9354cb4a4a2167111470b3b9fcdcfb8b967156a8538fbe827b6265b487cc85192e220eb7f9aea4266718c2c276f6fe72d70e33f066166706ce43450ca54447b3254e7995e4466710ef5f1bfd37dc0e5caa95213600841dcac99edfba65a619628725c669f8cc36e2d381144f34f404b26f57bda9c51a061a089a39208e6aff497ed0f10bac29e38f971dfeeaf2a32b76adec374e180f767d4fca6bfdbcc1f5105aa37f60e4eb950561f0a69b638de4a0eb814758bee9a6455f2455c8330758a80c95cc9feebdfe08ef8322f4f1dd7cfed4da51371586f54358e5221107455ce2eb4fab2032b46a98c6a162f272167e48ad948b0d5332088c8476c5bdb354043f7042dc8ad54d0a1a741f6cb93d3c572017d315eb439d976cd21e96a718f90b6b48d536fee331949410ea43f66ebbe038cf9dd76d8030d0f22258ee10aacb31093fd946fb484f5bb52a2d3b277da62619a80001f4f73d304c0231afbf5d6b587407d2bd62dfc8548b68b30dd6baece9249bf7b7f895a76177157df8cb36344c18fbd818bc06bfb04a7bf4f3745f76099e78cdbce101d700a64d32ebe4f61ca6dec9d9acfbd26566aa4c4884664c2ab868ff06cda6c1263c3dfd525ca4b8b96fa41d6ec4c8919a74d5b5b10bb348ec1d7a7e96e9f307e33f318e44ffa485cce52e2b57a1704671772ed43ee069add6d5c06256d97c653dce05e059caa32c546cda73b5cc4b276687a19067885197717a441317f3ab32a22dc10124dad8809a0a07fab1be409d1f4a33d762bd4c69da51fe23f08ec51c2682206c0f44d398c6bff01dbbc742dcaebfa43b3b7b4044f2fcbe82d10558ab8dc27a99025ad3708daebd43121dc633041d9bad0c20431428b592957ee3d1d383724168643e945801854cb44a8a335afb5bf933aa9726fd34ec35b7900e8fd4c98227316a77ca7283667fa4dfd48b3456d3a5ea84f611236fa28b1520ea8c5afe62ae765a953f0b7d60b8fd1cc19745a0e091d416c4e3da7f13687054519849b5d9a9c9ca637b1af695e28484b0e29d4103cdac8d9e7e7586d881480ed7388e355c69d20fa58e55d524eddfd8d41936d13b8ad7d57a25469bc551b618cb3e3bce01fb3f850863e2eeda392dc95d42df987a50d869dce76e5d39f8c5f8caadd3b0143c0144519226bb0167851943e7aa3e378965c8f2201343e6f2a488449de44fa121baa97418d4cff05ff09b5d99cf714b85ce9d41cb164d18840a5d3c91d5afbd5ad7f42c38262a03f9203cdbc5f07a3a9b4a73cf8d40384a44da8bb80a642bfd8e4211cb31e23e3e1c1f0e8b56cf208eac547c91e560a89d0e7fa6d4cbb864a2d5e79a44437c8bd3ba6dd293ca54af89db518421501be4a1fcb0b505674eb718061fcce1fb2826880f3089106857f9f055aebd3ec2e124950ea04165b2c99de751008862848b2c65926af50ab99df4efa8b26665f1a90e4e23e49d8fa54f630f38dd348a22eea64fe2c08ad15cc8a093b7ac4b485140005958d017cc55261ec9f8a5c81e62a4537b55406769011f4aeef87ae1bdff78fc7b63ce5e85a915784417d3306c1e84702e6abeb5e6fae1b48c8870c36c047bf13199330b1b9a5f041367e436903bfd325caaa975d26520550345b89dd9a11fd394bd95408612782827f9bef1f7fc729a96aa8f47684400286800a1de94b913d028b9cd620034eeecc0fd245736d4919b17beaf4002731f65e0208d7d07dfd5f04fe207ed687c222e792941a4775dd6f0e23f90287961a13156473ae86062aaa05bb0a6e3df20046c4faf4f08e521da2131c01687b146479439de74cc9a19ad43d1e5f69995f42da77ac3558165b800a365f34795616f09c73b30b634c5463004d34fa2186492021ec04712231b02a25a5d821fb65357d5e2eddd80fa59a629dc6686443693e97cd4c36427aff7467bb4c0f8107013d4adea5b4ca277cc7a50f31bfd4d65a2ba59d1e47373bf0f3a066720c691a6fdfa648831dcb5271628a64e0ab67790e42faf291b0c00666199b55be4e91f27673113efbd413d96ac26340c005f9cbf5aac2b02dcf0553fc2e45a458ad23dd646c0353eed5c5abe26b8201769b5007a665f8b93603d5d2f42b79d20d8341e400392802b5ea6051794f188624b55ff1d78a1abe60be1ff454c9c5028f272bc27dcf33c72304f6dff5a0afa5882c2acc6ecfe0a2e1f5b8085e7c75c3de708ec8fff521b0f954a35c560c4c4f8a796fce6c4ae66ba7291f6c30b2563cf945188bbcaaf15523e6f15ccbf72af43024e7cc20ac7f653831370cb13c87b9deb7a3d50026644afa8a1e86f3f40f5671f41eb50fad5c83a122", 0xfeef}], 0x2}, 0x4084) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r5}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) openat$cgroup_subtree(r6, &(0x7f00000001c0), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') setsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f0000000080)="5ec78db485c534bdf7a2172f3f1f30da", 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x32, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000", @ANYRES8=r3], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r9}, 0x10) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x8, r8}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r10, &(0x7f0000000280)="4ca761d948c0fe051ac7f2b1dc16b7a5028f7c554f125938e7", &(0x7f00000002c0)=@buf="e6d86995a50e572a9f4ac7a349fc8741236ba3f7f3359babc43e92e3c728a94f3f0008ce8b319634cb9ffc07c31c4525cf216272d2a6c35bf27779787ca0c830d2d8e282e305ad956842a7ef5688db262f022f1fad288f54c51f1ad1dad113e7fae422ff0d3cadcf1728ffd8db2f55c118de671daff955f9205db44b3a1ca3f7cf2211d81c4de3b2a54321b9b6fa4647be22115206bfabdd2697e1a06828a1"}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x15, 0x0, 0x0, 0x7ffc1ffb}]}) 490.11766ms ago: executing program 2 (id=881): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, {0x2}}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x1c0, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 483.035681ms ago: executing program 0 (id=883): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x0, &(0x7f0000000780)}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 482.595461ms ago: executing program 2 (id=884): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xdb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xcff, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd9}, 0x50) 295.30937ms ago: executing program 0 (id=885): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000340000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280"], 0xc4}}, 0x20050890) 206.144199ms ago: executing program 0 (id=886): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r0}, 0x10) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x2201, 0x0) write$binfmt_elf32(r1, 0x0, 0x69) 185.391561ms ago: executing program 0 (id=887): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0xfd, 0x3, 0x2, 0x5c, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x40, 0x4, 0x4}}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) 167.973083ms ago: executing program 6 (id=849): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000005f900000500000000000000000000000000000064bc20f7"], 0x50) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRES8=r0], 0xc4}, 0x1, 0x0, 0x0, 0x4}, 0x20050890) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRESDEC=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000600)='page_pool_state_release\x00', r2, 0x0, 0x200000000000006}, 0x18) (async) syz_emit_ethernet(0xcb, &(0x7f0000002a40)=ANY=[@ANYBLOB="0180c20000001780c2020900809b62771ed001901b7479f051f767cd04b52ddc3c22d811bb01060cc31cbe26cd4223c82126ab86040050bdee0d4ed06800ef1945062036242d04c0d685c21c77531155431d4359b6a3b7f279586f5459756aff57ec7d486641514db15343700b85be879a90818c5494e8d13f26a08f0442f3f363e3a50ab5ba56bfae409f4a92ba2275fb6bc4dcc3217bba8120f19b321e14db693dfd513bc8f693f820e17163936dd55efdd90e1f50667daeae01433130d5c3970ba4d083614a38ec9126"], 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000a30c55bf75e000", @ANYRES16=0x0, @ANYBLOB="2b000000000000000000010000000800010002000000"], 0x1c}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x40000000) close(r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000d80), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e40)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00042bbd7000ffdbdf250100000008000200030000002000018014000400fe800000000000000000000000000036060001000200000008000300040000000800030008000000d40d253822c042caf23486869c481b3acc717f33b4125b6323579b3ac386"], 0x4c}, 0x1, 0x0, 0x0, 0x44800}, 0x240400d0) (async) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) close_range(r0, r1, 0x2) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r4, @ANYRES64=r3], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r10}, 0x9) (async) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000240)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$netlink(0x10, 0x3, 0x0) (async) bind$tipc(r1, &(0x7f0000000980)=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x2, 0x4}}, 0x10) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000c80)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100626174000000000004e7018008000a0051d9302f880b7ef0336eb7495b158db146882201ea0a7a12651400af681e99fa48dd5862f2acf37b353bb47d268b40eaec2a36c50909132cbe97accdf04c6fe3a6e47af4587cab205c82634a57efe0c6f309362fd9f43965b438aae2f7d71a277f66f544a43cb43e9d48809d8d0e68"], 0x3c}}, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000001, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) remap_file_pages(&(0x7f0000330000/0x2000)=nil, 0x2000, 0x0, 0x600, 0x20) (async) socket$inet_sctp(0x2, 0x4, 0x84) (async) writev(r11, &(0x7f0000000b80)=[{&(0x7f0000000800)="0cf0acaf685e0b5676c8bd23f8fcf2566f6a84fbcc7f79871fa1924ec821df090bc2995f1cf74c8d67b51903ba7e4c76e9e494e620026ebd018c705f03698618e240429fc8a07bdd4730c858a4a8462f344e6e6be0397494b3b9bb849b1644c525e0f5827ea2708e0a1c235c2dba78d793e72ad4f94f88fa5acc2b59498c88a047965b1a8fb6", 0x86}, {&(0x7f00000008c0)="ae12f4fb9f31570741b06634920b982e592c4e3da6ce35e42784e6dde4abae7d94d4b86374710f3bbf1c085a4e43738e08257f485d4ecb8096e015b74ee2b07242", 0x41}, {&(0x7f0000000a00)="748a7b7e952e6442ee4ba225ee86726f2ee1d548276fb35772b38672352368435af8c29e9d5696ed8e2ed6c02005b975737c18697bbcde18aabf1175c6766b481b28e2c3c58d6a411cf9b66c36fae068f19958d5a0eb310937c9ae6cf777e910d6f1ab7027b24ee765be4ec7bb1d90d3e73362f29bcd5aad657951f09eacfe2abaed1bdd03cdf138f9dc59de29a21549a02691eeb4d6aebcf9ed0418a59f6127c8406d557def0f2057fcda61f8225202482500da8c180ff16fd063a2c6", 0xbd}, {&(0x7f0000000ac0)="64d39fafde81559bc4310030f729bda948d00f7657f7bbbabe03d1764225381c53cc0a3fb217fb0cd3e810609eb4730a7b3a59712584f4f53e3f9ec95c6b6c6a6cda9b131313746ef88feeccdf21683e7516eac995e3823ce94fe7c6cf664b88f89215e73a63287a080828b3d5349e82811f9173d24f327091dd207aa4aade5e445725f1c88c8724ba5198c69b1af2f8504e55f521b4e0b403aade3d3053623a9b35f5c96d0dbfbb856ec34bfca5ea", 0xaf}, {&(0x7f0000001a40)="0b6bd61e2988f0ea4d95f39818c305005ec39bb11cb97cdbbb0d4956641ea341fa0b8ab33650444f52229c4c9a123bf696fb73afa32e35810da6abf3678307d24c2feedc0b076ce463907bfbddd14ebf0fe56e723811602dd1f01325b925357db5dff27e4af516a27930f84fce65f077055ee4c3d8f52f53b68b31c6c04e6019f1eb3434969e7c61f22c84fbe12d8353ce409bfa7e447e399a6af4b5b5f9f20d21316e2ea22a8f48d19cdfd31c0770cc1e2b79fc171448827d41f31da4f2572d773d6b20400d25b785bc888e9813f4915a5090daa981b4046c289f24f23cac0fd7bcd2dd44d5066ac3db80b0d86783cbcceb2486f7ceffa6cfccc4a2c3911c717d1c392065316e0ce1f86f65e8444a9875a8c16c0bb8b6c6aa6d9aad0d8c401e6ad97f79c9c6798d508284b49f7f468604c098f4f5534afbbc881d7cb58cab94cb36e7a4b9daf7e3ee041d95043d74b24373e13dc371c5bbab1eae0bcfc404b1b1abb2c9209e8bb11d6f9d12507312515bb9ade4b643d17081a2d30e986e8c8166ba35937fd2e2346c5c2a92ee898fcd6e6fdb4455ee9b57c3ea4fd6fd2953842d5b58abebed14e2db6020b0651acc91bd00b3c4c9665c8f78c8c69d7d64d87f43752335b7d61719f8c0662c3af8be616c2954672d13f536172471fb99134e4d0280d585d0e8c152cdc8940c8e5f164823ebcf464c3c65f436a2fce8ee4e7d6d9461cea6c2e01ee76d9f320f2bbb243258b77f629a6d3996c0b62d0de86a64db0c47f8f4dd9c96d6414f18790c52e366103366079d84171254ec9c77adefcd9c7b267479a9f8fd2838ecdb7fb751c2a05e3944a6603f48ba2feaa907e6da15801e19910bc5b35b13509fb7c6cfd4c563744c5ccf829c7946bf66c60130f4b40c5ce56ce434fa9224931dee6e20d465227dd96ad8c1b453f0db174f9215f55cdbfd5d4be74bc2d2fee73ee52ca74ce862699ccd91bd4c1ae5d2ef86d9d59b978271af7ffdb9e009d5c0711894026edbdede2738fb2ae62acea42a86277a9a11b04da15eeb06a975e8639b1f52281c671c8d9e7a53c94e225bbdc27e4a05806d387992197171dc853791167619f05e1b9b980d5de6bb0a629b2860bcd70283e89b70c3d8c070c024bf534844c520dcfcbe2c9d22a27691a102ffe0740bb5b861bb22e311aadda4eedaedd49c75de30ba9a88a0ad6b47a99ecdf4fc8f9f11d4c23fbd9859aad7ce4b2ab39e50924c30738b28e0869dc47c7a0680eb4cc5520ff2303df4c62695fc2acac8431b6580777ab9ccf5da61377ef64eadb099a4fbcb693159647e23b2b89841f4f8ac53d08aa89f4fde9a0e58117d7e1d954ab5f1acfd9a0e1c65ed2f48fe38556f01d74de7ecf23c1e9435408b508a77947fb0028ff0429813bab8cd0d1b962bcfbc74b109687f1f28e5b3d9a10039d3b2721c7c7ba19477e5496640de31fdbcdd72e464d2112a392c56e2d7cd6cfdff57b3f47dc9de5e11bb4214bdd2245b5b8f8cf6cfc0e555c4c42b05d466f63ce3c443ddd96f29ff3f0222f38a37e46fca94ed026acc0085a6f1295ee74299257deabd8bc45b9e4ffb5647704c65910c6c270cbb5a35071af73dfaf41711650be0e0ac38fcb00c80d321d463395a53bb559964581736750363a3fb64aaad0e7eb765bac9544e14f6df416e845a34a72f3b893051f5bd6cc76a9d0ade62fb73c82c9d00922ee60ac7b9e1ea60c2b424cd1dd45c1989b70f72e66bebe88aa98ebd9e1b7031cb01f449d8a803c830d3b0e3a766029f8568b16d1b02ec7c6c21fdf6ad7a61d26a0de565dd6b0f3075aca0e877b9df1a6865de0a30457606b25bc303ed42b7477ffc5583dab82a10c3e1a22c6f18ebb66259a8bd8649b76dfbe7a1c985e2b60791e07132f623b031af494e59d702176cfa408cb69dba55ec42ad93a13149def383d7047a17c0629b3a6c7a2a3bf303aee9dff7365d593d027aaf01b96c29fe0e3e43d077ded0fd6bb43cd0b85324a6cd14f96f391df5c34bf5da5c529ccaa41a1179f197e6744ed8089987fc5354db98fa0fe89c968cadb62df9029b2cca284125b7fc295fc448e2acae2527667c304dc3a27133a73f7eaedc3dbaa5b86a99ae287ce74d66ad9181e4b4745701ba80f1a845bbc13fb20a3a4727225d94410afd6bee990bd199269e340563f1ef59ce325d13ac354477796842f22bbd7dc26ed0c766ffec279633a64eb0931873ee1a042f6cef91a16eee6b9c136b1ac1eec9ee45529b40d14002857a167dcc9842576811f960905adcd689d3b082220c4a1e93e79bd4049ce62096ca73ab4f7fa42d43c695013ea76da33a68a66a7a82eee78177c83e08f2a06efad59f0a5d49f91fcdcf2398953c09d5d1d2ab78b37d97027f3c3ef8af3b40e84e82d94926e78acc0ee712fe988910d3351ba1bf05e610df9ff4985ee4f3ddfcfa1cbe056ec3388582762dd2f4665ab85ff311b9060813b52cfed02244547ca2b8082ff8103e1dc3b1e49e7f4af062113c2ef2322bbdbb83d53fbd3b9b03ad36646fee565de6c493ffbad8b603a8dc77889aa8cd908fefecfd1868da65162ed73c1c66c04892d9dbf787d7d8e657127ebe4fdd6e3234e41fe50624b6c73aa5361f3e4cf71280c38e4e56f7c0b743bdbc6fa6770c2a47fa15c275f65f3dfb6a0d4c367398fadbeb6487f8c6a6054912edd3f18e76989136ecad401b18dcf6d17e661b0bd3d9926da449db1f85c452a90d6ae2776890400001b1ad40558fb8ec3b851a200550b69403fcbfc8f49569902c2bfb157a7b70c57d50e6ec8d1558ebab0da295ccfbf8eabec97febcebc3e30df77a91d787297c147c4c547a4b0c463c66d9cc4ca0d2aaee0ca266e093f3a18c79893648295dae237d52ad63565bf3e3a19d6b6ee858098547de52859d128b064645d718a82280f06b9b7b70116c7f1be2436c0cf340dbf3daf9f899b82a495dcb47ad70b79b32c8804746e243f93e9936272c3356fecb5d5c82bc1e6f57a44df7d4660aa8c548bc1fa3df0029250695cf1740a69fb84162c72d6212ba3b475d24f3f613116bc49bc2cedf8b3cd9b7db83c8384a7e986ac3b1c192fadba4ae43c1a7a862594c85b5cea9c76605604542e8780604301d2976812ab0ed1b06b8f760e359d43129ad428eb9794cc917c8926f79ea664fa1f9d0944e6e82a3483fc2614b40c104eeae06c3691bdf4c05cac2bb517b47bc16bb78f16e75edce0ba9a359819147847a52d2e1d081e1d447f23674a72dc8b691fa7f11fe8286ebe76927456bb95bbd5965f384916440c4caf25aa802363e04dbaae917ce689ab68708050b236f0c6d747c2ec3c7fc1cef0fe474de5e473e84a9677dd6da2f3b914a1a426c255a5eff22b708b1585665ce9a3b1a94f6c9cbe9150e78a7cd2f4f3ab6ec8f1f699429af8eb701344dab08742d28cb2efb5ffaac3f098404303c6de0be0193b081af1b6dbcea5914240d0f7e85f80047b677299a65856aab2e15c2da313c1c3d5ff8d8a8bfce759dd080a4bcc1b78dbac81cd971efdff5c21b23d9916a36a5c1785153ef6310c4b4960ffc420050262411f88e6a2bc8f2a47561681466a69160d2c8044bbc16d683d573ded94cdf51f50b91f652edca929eee5fdb486d5ac4e625fec58fb2f9df8d80b753ec6aa21a016ec8891b4c05529b735e4004a7d8f9c549e9bd5770e027257c38a3a6fcc37eded7600fef186288d12aa89010809c5e0e0496708c22cce4d0743d8597853dcbdfc78442b6f8a80ee703ddf388499071507c1f61ee6a056a04234d40abb9c2cec28b76976a7b7291fb3ce76332cd7af412cc6c1785eef789cb5b2270571f4737caecb4f61a290a36ebc0326c5722d3ffe4adb11feee311a50e7a2e3ee7e0d6fb338df68880fa2285a2fff34ae0042edc71b0db3e45367b92b4919650b35935ca6e09c2dffc5a36c2865790db90e05421cddc8451caefd1879c6bdb76d869b98f1976d6f821753297f134b28ed5824430354edfc3100030495c182b28e3010fca4ec09c4e7789939e1dec035a9c2c2d0355523fcd67b942c8cba7429a55cf7a844b408195d412f9e1959b5a06bf40901cf0602ee48a31eb4459630c7cd812b701052bdd5d0286a1eed352fb197d00bc73279923419c1cfc3c904b5492ce8a94488386aa143d99432d387ccdf3c7b3beddf22197e41be6aa3659f749c663174249425a0af0b0fd5cce63fa96b3ca6161a36d153bb428c131cb9f42360106823d68f6be69aa34ed5bc9623dc968f5d46ff664d7a7a61747fb56d34e08676808df5dd7c1bb776d4eba8fd2f0ff870eb4fcf65c0d25208cd6a34af693571f6198f09bd844f62eb7504a7cb5b23eb5b81485e6ef124f8fb7effac07881e96f508d100f08522851a2f005f2547ff1cc8329a6d132a0248bb1884e58342dd8555afc4251255dd099f920abe73e3d1f5700fc60db670354dd51eae97db7096a33538e929528826671c254c48a22b93e44ea32d7ad3703f15d100c562f6f8aa6e7842f1acde1f0124e8da17f87affe9b694a977469826d43f1952db06899711064f08b229da55231770c7e6f7b60f2875a470f75405de8ca87137dd22d42a1803e49082d417ae157e2bcd0d018df6d35ce5aa7038dd5061058043a576fecbf7e6522b8a32271eb6f022189d9f693baa13b34e2fce22a43e9415664d885daf57146a645fcb7d311033f59970d9f1b290fae323598e5399964d501d8f558f6e3e126968f1fb974e59ad079da659dc06bccc9738f6981bfe3806d981e92ca83fac0a525c8f414db057010d5e85ad4afc4f97945bf1e102db9afab89dab8484319a3f7c0ca8b8a524e0b76528482dab269984fc597ced7d3f8557671f2ae10925de22155f9fd267dc34268d6b3aa740b72d54303b132701021cd89f7c06a3b3ee298e128b51bcfba13f318048f1f5603f377dfa590a822fdc436cba8e7c2c8de7d7f6f6d0e007a6c2b35dd1dc56cb5804dcafd3f058b54da9e22f40fa90d6064240ff448feef87148f1a5de157678fdcbaa34628d186955409cf8af8cbc023fded711452772c3f4c25349a3eb3333c8061b93bb807f959dd0ec52c008b529cd1413a06306f9e8f93a33399c26d926796b05cd6faf67574911c8bb218753138ebd8d334d242dd41536b5afdac529e65bb8371df5a12cf402200260ce789334177f6e46b12465af65513d866fbc4477dfa81df6c0c46b16a9c91cdc3564d54fb5cabd8e8dcd596c73a0c59f86687f4f290942a755b0ccb3fc6924f03e1250bde91e3c8303f560257cde0bbb6baa3a7a8785e4999ed998082c30ee14502edfcc65f7e26cb6e4825c0b5643609107d71f5821cc2699244bb377e5d8855e973e4cc3027254f1c59c36d44fcecb0a58f30ad6eff8d4a8bbd5871e46870bf8ba1cff100fd1fa3d14b6f2be78580cbf9583721268547c823d7b78a2816bc581810e075ee009ff233e549744b34f171fcd0a4220a070f94bd33fd7385b3fb47d419cd8f1715257f9f9e28f760002ead3be27bc4f39d140817cf34f7854cbcb16274d8796b2cda182546da9251353f8f93f5184e7a77a51690ab2b848fb9f8da3ff12d4e51eba865eb1c0026403762479dcbeb255729755c78466756aaca79e207094288fd6139403e4f21963546a324fc3c09ab939b5d1dff5d7630017d9c358162fbfac22c460a546913e2c0de7533d995c8bf3ff7bdec632d2009c90adab80bbe9e1453643e18538f7b290ac0b65f0983f7f03f157a38f04ec9e38f1276d4711fca6f9ff7e0b5ffa", 0x1000}, {&(0x7f0000000940)="5e770753e9af7c3f478ccc534797e6cf02e5129b3cc21159e95e4b4d6244223a56df3ca1d74c660b3a", 0x29}], 0x6) 120.566147ms ago: executing program 1 (id=888): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) socket$kcm(0x10, 0x2, 0x0) 105.622379ms ago: executing program 0 (id=889): r0 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r4, 0x0, 0xc1c, 0x80000000) 17.741697ms ago: executing program 6 (id=890): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYRES64=r2, @ANYRES32, @ANYRESDEC, @ANYRES64=0x0], 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000180)=[{0x5, 0x4, 0xd, 0x6}, {0x4, 0x8, 0x3, 0x2}], 0x10, 0x26}, 0x94) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000003000000f40108807000008048000980282000f8060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a034e200000040100000000000000000000ffffac14142a06000000240001000000000000000000000000000000000000000000000000000000000000000000d4000980"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x18) syz_io_uring_setup(0x2225, &(0x7f00000006c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffc}, &(0x7f0000000780), &(0x7f0000000740)) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x3}]}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000400)='kmem_cache_free\x00', r10}, 0x18) getcwd(&(0x7f0000000140)=""/237, 0xed) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r12, 0x0, 0x200000000000006}, 0x18) fstatfs(r11, &(0x7f0000000180)=""/12) socket$kcm(0x29, 0x2, 0x0) 1.094939ms ago: executing program 6 (id=891): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_procfs(0x0, 0x0) lseek(r1, 0x9, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES8=r0, @ANYRES64=r1], 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) bind$netlink(r2, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd25, 0x1, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x31310}}}}}}]}, 0x48}}, 0x4040004) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0) socket$netlink(0x10, 0x3, 0xf) (async) syz_open_procfs(0x0, 0x0) (async) lseek(r1, 0x9, 0x0) (async) socket$netlink(0x10, 0x3, 0xf) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES8=r0, @ANYRES64=r1], 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) (async) bind$netlink(r2, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd25, 0x1, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x31310}}}}}}]}, 0x48}}, 0x4040004) (async) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0) (async) 0s ago: executing program 0 (id=892): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x0, 0x14, 0x2009, 0xffc}, 0x8, 0x7, 0x200, 0x0, 0xce2, 0x0, 0x0}) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@var={0xa, 0x0, 0x0, 0xe, 0x5, 0x2}, @func={0x7, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x70]}}, &(0x7f00000000c0)=""/97, 0x37, 0x61, 0x0, 0x6, 0x10000}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x3, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3}, 0x9) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) kernel console output (not intermixed with test programs): SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11280 sclass=netlink_route_socket pid=4372 comm=syz.0.249 [ 52.096910][ T4377] loop3: detected capacity change from 0 to 512 [ 52.106117][ T4377] EXT4-fs: Ignoring removed nobh option [ 52.135658][ T4377] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.252: corrupted inode contents [ 52.147993][ T4377] EXT4-fs (loop3): Remounting filesystem read-only [ 52.155017][ T4377] EXT4-fs (loop3): 1 truncate cleaned up [ 52.161119][ T4377] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.174105][ T4377] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.199627][ T389] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 52.210214][ T389] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 52.221772][ T389] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 52.238301][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.311976][ T4368] Set syz1 is full, maxelem 65536 reached [ 52.590787][ T4412] netlink: 6 bytes leftover after parsing attributes in process `syz.0.268'. [ 52.605154][ T4412] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 52.651487][ T4416] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 52.658138][ T4416] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 52.665772][ T4416] vhci_hcd vhci_hcd.0: Device attached [ 52.794230][ T4417] vhci_hcd: connection closed [ 52.808099][ T161] vhci_hcd: stop threads [ 52.817208][ T161] vhci_hcd: release socket [ 52.821639][ T161] vhci_hcd: disconnect device [ 52.863326][ T3394] vhci_hcd: vhci_device speed not set [ 53.814153][ T4449] sctp: [Deprecated]: syz.2.267 (pid 4449) Use of int in maxseg socket option. [ 53.814153][ T4449] Use struct sctp_assoc_value instead [ 53.891942][ T4449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11280 sclass=netlink_route_socket pid=4449 comm=syz.2.267 [ 53.924115][ T4457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.270'. [ 53.944106][ T4462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.271'. [ 54.342102][ T4495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 54.399314][ T4503] loop0: detected capacity change from 0 to 128 [ 54.424496][ T4503] EXT4-fs: Ignoring removed nobh option [ 54.444934][ T4503] EXT4-fs (loop0): unable to read superblock [ 54.787113][ T4534] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.806239][ T4532] loop2: detected capacity change from 0 to 512 [ 54.907640][ T4548] bond1: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 54.936730][ T4551] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.991665][ T4551] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.066975][ T4551] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.098800][ T4562] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 55.146967][ T4551] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.226642][ T29] kauditd_printk_skb: 253 callbacks suppressed [ 55.226659][ T29] audit: type=1326 audit(1763047675.413:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4573 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6d72cf6c9 code=0x7ffc0000 [ 55.259995][ T29] audit: type=1326 audit(1763047675.413:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4573 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6d72cf6c9 code=0x7ffc0000 [ 55.280147][ T4576] netlink: 'syz.2.304': attribute type 13 has an invalid length. [ 55.283427][ T29] audit: type=1326 audit(1763047675.413:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4573 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6d72cf6c9 code=0x7ffc0000 [ 55.314636][ T29] audit: type=1326 audit(1763047675.413:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4573 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6d72cf6c9 code=0x7ffc0000 [ 55.338059][ T29] audit: type=1326 audit(1763047675.413:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4573 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6d72cf6c9 code=0x7ffc0000 [ 55.361441][ T29] audit: type=1326 audit(1763047675.413:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4573 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6d72cf6c9 code=0x7ffc0000 [ 55.384977][ T29] audit: type=1326 audit(1763047675.413:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4573 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6d72cf6c9 code=0x7ffc0000 [ 55.408423][ T29] audit: type=1326 audit(1763047675.413:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4573 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6d72cf6c9 code=0x7ffc0000 [ 55.431794][ T29] audit: type=1326 audit(1763047675.413:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4573 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fd6d72cf6c9 code=0x7ffc0000 [ 55.455241][ T29] audit: type=1326 audit(1763047675.413:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4573 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6d72cf6c9 code=0x7ffc0000 [ 55.530499][ T37] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.542331][ T37] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.556324][ T37] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.568863][ T37] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.714999][ T4590] netlink: 6 bytes leftover after parsing attributes in process `syz.3.309'. [ 55.723855][ T4590] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 55.850593][ T4594] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 55.857236][ T4594] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 55.864929][ T4594] vhci_hcd vhci_hcd.0: Device attached [ 55.876683][ T4580] sctp: [Deprecated]: syz.2.306 (pid 4580) Use of int in maxseg socket option. [ 55.876683][ T4580] Use struct sctp_assoc_value instead [ 55.918239][ T4595] vhci_hcd: connection closed [ 55.918521][ T37] vhci_hcd: stop threads [ 55.927542][ T37] vhci_hcd: release socket [ 55.931964][ T37] vhci_hcd: disconnect device [ 55.934295][ T4593] loop0: detected capacity change from 0 to 8192 [ 55.953596][ T4593] vfat: Unknown parameter '' [ 56.028653][ T4598] netlink: 72 bytes leftover after parsing attributes in process `syz.2.310'. [ 56.097116][ T4603] loop2: detected capacity change from 0 to 1024 [ 56.105815][ T4603] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 56.116881][ T4603] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 56.139262][ T4603] jbd2_journal_init_inode: Cannot locate journal superblock [ 56.146658][ T4603] EXT4-fs (loop2): Could not load journal inode [ 56.176075][ T4607] netlink: 4 bytes leftover after parsing attributes in process `syz.5.313'. [ 56.228649][ T4610] netlink: 4 bytes leftover after parsing attributes in process `syz.5.313'. [ 56.343801][ T4614] loop5: detected capacity change from 0 to 1024 [ 56.374619][ T4614] EXT4-fs: inline encryption not supported [ 56.399230][ T4616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.317'. [ 56.414684][ T4614] EXT4-fs (loop5): orphan cleanup on readonly fs [ 56.456682][ T4614] EXT4-fs (loop5): 1 truncate cleaned up [ 56.480718][ T4614] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 56.655721][ T3611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.688626][ T4630] netlink: 24 bytes leftover after parsing attributes in process `syz.0.323'. [ 56.750468][ T4632] loop5: detected capacity change from 0 to 1024 [ 56.800216][ T4632] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.846057][ T4639] loop1: detected capacity change from 0 to 1024 [ 56.863044][ T4639] EXT4-fs: inline encryption not supported [ 56.891003][ T4639] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.913577][ T4632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.938571][ T4632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.967862][ T4639] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 56.983553][ T4639] EXT4-fs (loop1): Remounting filesystem read-only [ 57.097931][ T4639] RDS: rds_bind could not find a transport for ::ffff:172.20.20.27, load rds_tcp or rds_rdma? [ 57.169984][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.173724][ T4672] loop2: detected capacity change from 0 to 1024 [ 57.190885][ T4672] EXT4-fs: inline encryption not supported [ 57.196203][ T4672] EXT4-fs (loop2): orphan cleanup on readonly fs [ 57.209016][ T4672] EXT4-fs (loop2): 1 truncate cleaned up [ 57.215375][ T4672] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 57.237014][ T4675] loop1: detected capacity change from 0 to 512 [ 57.248658][ T4675] journal_path: Non-blockdev passed as './bus' [ 57.248689][ T4675] EXT4-fs: error: could not find journal device path [ 57.303645][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.369069][ T4677] loop3: detected capacity change from 0 to 128 [ 57.425281][ T4677] syz.3.335: attempt to access beyond end of device [ 57.425281][ T4677] loop3: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 57.425661][ T4677] syz.3.335: attempt to access beyond end of device [ 57.425661][ T4677] loop3: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 57.425692][ T4677] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 57.425719][ T4677] syz.3.335: attempt to access beyond end of device [ 57.425719][ T4677] loop3: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 57.425745][ T4677] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 57.425922][ T4677] syz.3.335: attempt to access beyond end of device [ 57.425922][ T4677] loop3: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 57.426270][ T4677] syz.3.335: attempt to access beyond end of device [ 57.426270][ T4677] loop3: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 57.426322][ T4677] Buffer I/O error on dev loop3, logical block 83, lost async page write [ 57.426349][ T4677] syz.3.335: attempt to access beyond end of device [ 57.426349][ T4677] loop3: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 57.426377][ T4677] Buffer I/O error on dev loop3, logical block 84, lost async page write [ 57.426634][ T4677] syz.3.335: attempt to access beyond end of device [ 57.426634][ T4677] loop3: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 57.426865][ T4677] syz.3.335: attempt to access beyond end of device [ 57.426865][ T4677] loop3: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 57.426894][ T4677] Buffer I/O error on dev loop3, logical block 95, lost async page write [ 57.426920][ T4677] syz.3.335: attempt to access beyond end of device [ 57.426920][ T4677] loop3: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 57.426946][ T4677] Buffer I/O error on dev loop3, logical block 96, lost async page write [ 57.427249][ T4677] syz.3.335: attempt to access beyond end of device [ 57.427249][ T4677] loop3: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 57.427596][ T4677] Buffer I/O error on dev loop3, logical block 99, lost async page write [ 57.427674][ T4677] Buffer I/O error on dev loop3, logical block 100, lost async page write [ 57.428236][ T4677] Buffer I/O error on dev loop3, logical block 111, lost async page write [ 57.428338][ T4677] Buffer I/O error on dev loop3, logical block 112, lost async page write [ 57.907259][ T3611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.274360][ T4693] x_tables: duplicate underflow at hook 2 [ 58.405101][ T4701] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.448095][ T4702] netlink: 4 bytes leftover after parsing attributes in process `syz.5.341'. [ 58.449154][ T4701] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.453986][ T4702] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 58.464862][ T4702] team0: Failed to send options change via netlink (err -105) [ 58.464929][ T4702] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 58.465039][ T4702] team0: Port device team_slave_1 removed [ 58.485177][ T4701] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.524931][ T4701] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.619968][ T145] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.620016][ T145] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.620074][ T145] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.630523][ T145] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.835641][ T4707] batadv0: entered promiscuous mode [ 58.993615][ T4715] loop5: detected capacity change from 0 to 1024 [ 58.994059][ T4715] EXT4-fs: inline encryption not supported [ 59.000412][ T4715] EXT4-fs (loop5): orphan cleanup on readonly fs [ 59.009039][ T4715] EXT4-fs (loop5): 1 truncate cleaned up [ 59.009625][ T4715] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 59.022085][ T3611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.419725][ T4733] __nla_validate_parse: 1 callbacks suppressed [ 59.419739][ T4733] netlink: 4 bytes leftover after parsing attributes in process `syz.5.347'. [ 59.435996][ T4733] bridge_slave_1: left allmulticast mode [ 59.441680][ T4733] bridge_slave_1: left promiscuous mode [ 59.447453][ T4733] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.457018][ T4733] bridge_slave_0: left allmulticast mode [ 59.462734][ T4733] bridge_slave_0: left promiscuous mode [ 59.468505][ T4733] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.479307][ T4733] bridge0 (unregistering): left allmulticast mode [ 59.520035][ T4734] loop0: detected capacity change from 0 to 512 [ 59.528401][ T4734] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.351: inode has both inline data and extents flags [ 59.542281][ T4734] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.351: couldn't read orphan inode 15 (err -117) [ 59.555730][ T4734] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.587619][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.704053][ T4756] loop2: detected capacity change from 0 to 1024 [ 59.722165][ T4756] EXT4-fs: inline encryption not supported [ 59.758346][ T4756] EXT4-fs (loop2): orphan cleanup on readonly fs [ 59.775234][ T4756] EXT4-fs (loop2): 1 truncate cleaned up [ 59.786101][ T4756] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 59.863438][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.070109][ T4794] loop2: detected capacity change from 0 to 1024 [ 60.319044][ T4794] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.513294][ T29] kauditd_printk_skb: 306 callbacks suppressed [ 60.513309][ T29] audit: type=1400 audit(1763047680.673:1587): avc: denied { create } for pid=4793 comm="syz.2.363" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 60.539847][ T29] audit: type=1400 audit(1763047680.673:1588): avc: denied { append } for pid=4793 comm="syz.2.363" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 60.562228][ T29] audit: type=1400 audit(1763047680.673:1589): avc: denied { open } for pid=4793 comm="syz.2.363" path="/94/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 60.585222][ T29] audit: type=1400 audit(1763047680.693:1590): avc: denied { kexec_image_load } for pid=4793 comm="syz.2.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 60.614475][ T4818] netlink: 6 bytes leftover after parsing attributes in process `syz.3.365'. [ 60.623314][ T4818] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 60.764387][ T4794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.834046][ T4794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.896633][ T4821] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 60.903444][ T4821] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 60.911195][ T4821] vhci_hcd vhci_hcd.0: Device attached [ 60.952719][ T29] audit: type=1400 audit(1763047680.833:1591): avc: denied { read write } for pid=4793 comm="syz.2.363" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 60.975935][ T29] audit: type=1400 audit(1763047680.833:1592): avc: denied { open } for pid=4793 comm="syz.2.363" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 60.999129][ T29] audit: type=1400 audit(1763047680.833:1593): avc: denied { ioctl } for pid=4793 comm="syz.2.363" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 61.023747][ T29] audit: type=1400 audit(1763047680.953:1594): avc: denied { read write } for pid=4793 comm="syz.2.363" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 61.047200][ T29] audit: type=1400 audit(1763047680.953:1595): avc: denied { open } for pid=4793 comm="syz.2.363" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 61.070600][ T29] audit: type=1400 audit(1763047680.953:1596): avc: denied { ioctl } for pid=4793 comm="syz.2.363" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 61.147216][ T4822] vhci_hcd: connection closed [ 61.153216][ T161] vhci_hcd: stop threads [ 61.162208][ T161] vhci_hcd: release socket [ 61.166688][ T161] vhci_hcd: disconnect device [ 61.173198][ T23] vhci_hcd: vhci_device speed not set [ 61.328915][ T4828] netlink: 'syz.0.367': attribute type 10 has an invalid length. [ 61.347885][ T4828] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 61.676703][ T4833] loop3: detected capacity change from 0 to 256 [ 61.716940][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.887819][ T4841] netlink: 60 bytes leftover after parsing attributes in process `syz.3.371'. [ 61.897716][ T4841] netlink: 60 bytes leftover after parsing attributes in process `syz.3.371'. [ 62.049413][ T4847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.374'. [ 62.075666][ T4849] netlink: 20 bytes leftover after parsing attributes in process `syz.1.375'. [ 62.190333][ T4858] loop3: detected capacity change from 0 to 128 [ 62.321815][ T4866] loop0: detected capacity change from 0 to 1024 [ 62.358826][ T4866] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.451144][ T4866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.503322][ T4866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.511817][ T4877] random: crng reseeded on system resumption [ 62.595883][ T4887] loop2: detected capacity change from 0 to 512 [ 62.771730][ T4906] loop1: detected capacity change from 0 to 512 [ 62.794786][ T4906] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.807402][ T4906] ext4 filesystem being mounted at /70/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 62.845569][ T4906] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 62.857143][ T4906] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 62.885118][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.935328][ T4914] loop2: detected capacity change from 0 to 128 [ 62.947190][ T4913] bio_check_eod: 32 callbacks suppressed [ 62.947205][ T4913] syz.2.407: attempt to access beyond end of device [ 62.947205][ T4913] loop2: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 63.041962][ T4910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.050575][ T4910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.143012][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.170120][ T4918] random: crng reseeded on system resumption [ 63.310602][ T4935] loop0: detected capacity change from 0 to 512 [ 63.327925][ T4937] loop2: detected capacity change from 0 to 512 [ 63.329496][ T4935] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.408: corrupted in-inode xattr: e_value size too large [ 63.353469][ T4937] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.409: corrupted in-inode xattr: e_value size too large [ 63.354005][ T4935] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.408: couldn't read orphan inode 15 (err -117) [ 63.379702][ T4937] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.409: couldn't read orphan inode 15 (err -117) [ 63.385928][ T4935] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.397924][ T4937] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.029540][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.042881][ T4949] loop1: detected capacity change from 0 to 512 [ 64.058825][ T4949] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c01c, mo2=0002] [ 64.069969][ T4949] System zones: 1-3, 19-19, 35-38 [ 64.077242][ T4949] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.100761][ T4949] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.209463][ T4962] loop5: detected capacity change from 0 to 1024 [ 64.217432][ T4962] EXT4-fs: inline encryption not supported [ 64.240823][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.251452][ T4962] EXT4-fs (loop5): orphan cleanup on readonly fs [ 64.258991][ T4962] EXT4-fs (loop5): 1 truncate cleaned up [ 64.265481][ T4962] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 64.322048][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.347683][ T3611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.401670][ T4975] loop2: detected capacity change from 0 to 512 [ 64.454995][ T4975] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.423: corrupted in-inode xattr: e_value size too large [ 64.469364][ T4975] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.423: couldn't read orphan inode 15 (err -117) [ 64.472320][ T4979] netlink: 412 bytes leftover after parsing attributes in process `syz.0.424'. [ 64.483642][ T4975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.518866][ T4979] loop0: detected capacity change from 0 to 512 [ 64.543837][ T4979] EXT4-fs: Ignoring removed oldalloc option [ 64.568657][ T4979] EXT4-fs: Mount option(s) incompatible with ext2 [ 64.600138][ T4984] netlink: 4 bytes leftover after parsing attributes in process `syz.5.425'. [ 64.870183][ T4990] bridge0: entered promiscuous mode [ 64.973788][ T4992] FAULT_INJECTION: forcing a failure. [ 64.973788][ T4992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.986900][ T4992] CPU: 1 UID: 0 PID: 4992 Comm: syz.5.428 Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.986935][ T4992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 64.986951][ T4992] Call Trace: [ 64.987025][ T4992] [ 64.987035][ T4992] __dump_stack+0x1d/0x30 [ 64.987146][ T4992] dump_stack_lvl+0xe8/0x140 [ 64.987170][ T4992] dump_stack+0x15/0x1b [ 64.987187][ T4992] should_fail_ex+0x265/0x280 [ 64.987205][ T4992] should_fail+0xb/0x20 [ 64.987220][ T4992] should_fail_usercopy+0x1a/0x20 [ 64.987275][ T4992] _copy_from_user+0x1c/0xb0 [ 64.987366][ T4992] ___sys_sendmsg+0xc1/0x1d0 [ 64.987406][ T4992] __x64_sys_sendmsg+0xd4/0x160 [ 64.987428][ T4992] x64_sys_call+0x191e/0x3000 [ 64.987518][ T4992] do_syscall_64+0xd2/0x200 [ 64.987540][ T4992] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 64.987571][ T4992] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 64.987610][ T4992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.987688][ T4992] RIP: 0033:0x7fc529e8f6c9 [ 64.987706][ T4992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.987729][ T4992] RSP: 002b:00007fc5288ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.987753][ T4992] RAX: ffffffffffffffda RBX: 00007fc52a0e5fa0 RCX: 00007fc529e8f6c9 [ 64.987770][ T4992] RDX: 0000000000008808 RSI: 0000200000000100 RDI: 0000000000000003 [ 64.987785][ T4992] RBP: 00007fc5288ef090 R08: 0000000000000000 R09: 0000000000000000 [ 64.987798][ T4992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.987813][ T4992] R13: 00007fc52a0e6038 R14: 00007fc52a0e5fa0 R15: 00007ffcb2ffffa8 [ 64.987833][ T4992] [ 64.989526][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.265321][ T4997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.429'. [ 65.349866][ T5002] netlink: 12 bytes leftover after parsing attributes in process `syz.5.431'. [ 65.375358][ T5009] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=5009 comm=syz.2.434 [ 65.447877][ T5014] netlink: 14 bytes leftover after parsing attributes in process `syz.1.436'. [ 65.544345][ T29] kauditd_printk_skb: 224 callbacks suppressed [ 65.544362][ T29] audit: type=1400 audit(1763047685.733:1821): avc: denied { bind } for pid=5026 comm="syz.0.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 65.618089][ T29] audit: type=1400 audit(1763047685.803:1822): avc: denied { create } for pid=5030 comm="syz.0.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 65.637990][ T29] audit: type=1400 audit(1763047685.803:1823): avc: denied { connect } for pid=5030 comm="syz.0.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 65.657756][ T29] audit: type=1400 audit(1763047685.803:1824): avc: denied { ioctl } for pid=5030 comm="syz.0.443" path="socket:[11385]" dev="sockfs" ino=11385 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 65.717446][ T5036] tipc: Started in network mode [ 65.722419][ T5036] tipc: Node identity 1eb25cd8b432, cluster identity 4711 [ 65.729769][ T5036] tipc: Enabled bearer , priority 0 [ 65.737826][ T5036] +: renamed from syzkaller0 [ 65.744428][ T5036] tipc: Disabling bearer [ 65.754633][ T5036] pimreg: entered allmulticast mode [ 65.847447][ T5044] loop3: detected capacity change from 0 to 512 [ 65.859123][ T5047] tipc: Started in network mode [ 65.864124][ T5047] tipc: Node identity ac14140f, cluster identity 4711 [ 65.864824][ T5044] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 65.871915][ T5047] tipc: New replicast peer: 255.255.255.255 [ 65.885823][ T5047] tipc: Enabled bearer , priority 10 [ 65.923161][ T29] audit: type=1326 audit(1763047686.103:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.3.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd0a2f6c9 code=0x7ffc0000 [ 65.946656][ T29] audit: type=1326 audit(1763047686.103:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.3.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0dd0a2f6c9 code=0x7ffc0000 [ 65.969921][ T29] audit: type=1326 audit(1763047686.103:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.3.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd0a2f6c9 code=0x7ffc0000 [ 65.993346][ T29] audit: type=1326 audit(1763047686.103:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.3.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0dd0a2f6c9 code=0x7ffc0000 [ 66.010231][ T5044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.448'. [ 66.016824][ T29] audit: type=1326 audit(1763047686.103:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.3.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd0a2f6c9 code=0x7ffc0000 [ 66.055988][ T29] audit: type=1326 audit(1763047686.113:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.3.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0dd0a2f6c9 code=0x7ffc0000 [ 66.165535][ T5060] ip6tnl0: entered promiscuous mode [ 66.170798][ T5060] ip6tnl0: entered allmulticast mode [ 66.185011][ T5059] loop3: detected capacity change from 0 to 2048 [ 66.341476][ T5074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.459'. [ 66.502430][ T5089] netlink: 'syz.0.465': attribute type 27 has an invalid length. [ 66.582949][ T5089] loop0: detected capacity change from 0 to 512 [ 66.617133][ T5089] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #12: comm syz.0.465: missing EA_INODE flag [ 66.635229][ T5089] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.465: error while reading EA inode 12 err=-117 [ 66.649979][ T5089] EXT4-fs (loop0): 1 orphan inode deleted [ 66.685415][ T5111] loop3: detected capacity change from 0 to 512 [ 66.703314][ T5111] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 66.748469][ T5111] EXT4-fs (loop3): 1 truncate cleaned up [ 66.801041][ T5119] loop0: detected capacity change from 0 to 1024 [ 66.808249][ T5119] EXT4-fs: inline encryption not supported [ 66.862333][ T5119] EXT4-fs (loop0): orphan cleanup on readonly fs [ 66.883236][ T23] tipc: Node number set to 2886997007 [ 66.902257][ T5119] EXT4-fs (loop0): 1 truncate cleaned up [ 66.971637][ T5132] loop3: detected capacity change from 0 to 164 [ 66.982646][ T5132] ISOFS: unable to read i-node block [ 66.988183][ T5132] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 67.008353][ T5132] netlink: 'syz.3.481': attribute type 1 has an invalid length. [ 67.044904][ T5132] 8021q: adding VLAN 0 to HW filter on device bond2 [ 67.076563][ T5132] bond2: (slave geneve2): making interface the new active one [ 67.116780][ T5132] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 67.248792][ T5145] netem: incorrect ge model size [ 67.253904][ T5145] netem: change failed [ 67.276028][ T5143] SELinux: ebitmap: truncated map [ 68.114307][ T5159] loop1: detected capacity change from 0 to 512 [ 68.130081][ T5143] SELinux: failed to load policy [ 68.327597][ T5168] loop5: detected capacity change from 0 to 1024 [ 68.345917][ T5168] EXT4-fs: inline encryption not supported [ 68.957074][ T5168] EXT4-fs (loop5): orphan cleanup on readonly fs [ 68.973018][ T5168] EXT4-fs (loop5): 1 truncate cleaned up [ 68.986468][ T5159] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.483: bg 0: block 248: padding at end of block bitmap is not set [ 69.136485][ T5159] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.483: Failed to acquire dquot type 1 [ 69.199092][ T5186] netlink: 6 bytes leftover after parsing attributes in process `syz.5.492'. [ 69.276610][ T5159] EXT4-fs (loop1): 1 truncate cleaned up [ 69.325212][ T5186] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 69.361880][ T5159] EXT4-fs mount: 10 callbacks suppressed [ 69.361942][ T5159] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.412851][ T5189] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 69.419535][ T5189] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 69.427200][ T5189] vhci_hcd vhci_hcd.0: Device attached [ 69.489102][ T5159] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.511317][ T5143] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.483: Failed to acquire dquot type 1 [ 69.613210][ T3394] vhci_hcd: vhci_device speed not set [ 69.670236][ T5159] syz.1.483 (5159) used greatest stack depth: 9120 bytes left [ 69.687644][ T3394] usb 11-1: new full-speed USB device number 2 using vhci_hcd [ 69.781955][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.801710][ T5190] vhci_hcd: connection reset by peer [ 69.823276][ T12] vhci_hcd: stop threads [ 69.827602][ T12] vhci_hcd: release socket [ 69.832033][ T12] vhci_hcd: disconnect device [ 69.865290][ T5210] ip6tnl0: entered promiscuous mode [ 69.870560][ T5210] ip6tnl0: entered allmulticast mode [ 69.881857][ T5200] loop3: detected capacity change from 0 to 1024 [ 69.903867][ T5213] loop1: detected capacity change from 0 to 1024 [ 69.905180][ T5200] ext4: Unknown parameter 'permit_directio' [ 69.916434][ T5213] EXT4-fs: inline encryption not supported [ 69.936214][ T5213] EXT4-fs (loop1): orphan cleanup on readonly fs [ 69.945881][ T5213] EXT4-fs (loop1): 1 truncate cleaned up [ 69.969450][ T5213] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.105364][ T5216] loop0: detected capacity change from 0 to 128 [ 70.274386][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.296053][ T5223] IPVS: set_ctl: invalid protocol: 115 10.1.1.2:20004 [ 70.309137][ T5223] netlink: 56 bytes leftover after parsing attributes in process `syz.0.507'. [ 70.424025][ T5228] loop5: detected capacity change from 0 to 512 [ 70.451713][ T5228] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 70.566171][ T29] kauditd_printk_skb: 586 callbacks suppressed [ 70.572407][ T29] audit: type=1326 audit(1763047946.655:2413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5230 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40931f6c9 code=0x7ffc0000 [ 70.595832][ T29] audit: type=1326 audit(1763047946.655:2414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5230 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40931f6c9 code=0x7ffc0000 [ 70.619255][ T29] audit: type=1326 audit(1763047946.655:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5230 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40931f6c9 code=0x7ffc0000 [ 70.642601][ T29] audit: type=1326 audit(1763047946.655:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5230 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7ff40931f6c9 code=0x7ffc0000 [ 70.666026][ T29] audit: type=1326 audit(1763047946.655:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5230 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40931f6c9 code=0x7ffc0000 [ 70.689371][ T29] audit: type=1326 audit(1763047946.655:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5230 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40931f6c9 code=0x7ffc0000 [ 70.699675][ T5228] System zones: 0-2, 18-18, 34-34 [ 70.712780][ T29] audit: type=1326 audit(1763047946.655:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5230 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40931f6c9 code=0x7ffc0000 [ 70.712892][ T29] audit: type=1326 audit(1763047946.655:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5230 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7ff40931f6c9 code=0x7ffc0000 [ 70.712936][ T29] audit: type=1326 audit(1763047946.655:2421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5230 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40931f6c9 code=0x7ffc0000 [ 70.718032][ T5228] [ 70.741320][ T29] audit: type=1326 audit(1763047946.655:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5230 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40931f6c9 code=0x7ffc0000 [ 70.959221][ T5228] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.509: bg 0: block 248: padding at end of block bitmap is not set [ 71.079275][ T5228] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.509: Failed to acquire dquot type 1 [ 71.125119][ T5228] EXT4-fs (loop5): 1 truncate cleaned up [ 71.151532][ T5228] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.214041][ T5228] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.262150][ T5228] EXT4-fs error (device loop5): ext4_lookup:1787: inode #15: comm syz.5.509: iget: bad i_size value: 360287970189639690 [ 71.293011][ T5228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.310364][ T5228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.378920][ T5246] netlink: 4 bytes leftover after parsing attributes in process `syz.5.509'. [ 71.480839][ T5254] loop2: detected capacity change from 0 to 1024 [ 71.489317][ T5254] ext4: Unknown parameter 'smackfsroot' [ 71.529343][ T5253] loop2: detected capacity change from 0 to 512 [ 71.558502][ T5253] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 71.764935][ T5268] loop3: detected capacity change from 0 to 1024 [ 71.789027][ T5268] EXT4-fs: inline encryption not supported [ 71.811981][ T5268] EXT4-fs (loop3): orphan cleanup on readonly fs [ 71.836830][ T5268] EXT4-fs (loop3): 1 truncate cleaned up [ 71.846634][ T5268] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.944193][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.021793][ T5282] random: crng reseeded on system resumption [ 72.184362][ T5289] loop3: detected capacity change from 0 to 512 [ 72.248915][ T3611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.740098][ T5311] loop1: detected capacity change from 0 to 1024 [ 72.776813][ T5311] EXT4-fs: inline encryption not supported [ 72.800541][ T5320] loop2: detected capacity change from 0 to 512 [ 72.811975][ T5311] EXT4-fs (loop1): orphan cleanup on readonly fs [ 72.822182][ T5304] loop3: detected capacity change from 0 to 32768 [ 72.847660][ T5311] EXT4-fs (loop1): 1 truncate cleaned up [ 72.855590][ T5320] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.537: corrupted in-inode xattr: e_value size too large [ 72.880204][ T3303] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 72.895105][ T5313] loop5: detected capacity change from 0 to 512 [ 72.902262][ T5311] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.916146][ T3303] loop3: p1 start 460800 is beyond EOD, truncated [ 72.922683][ T3303] loop3: p2 size 83886080 extends beyond EOD, truncated [ 72.933442][ T5313] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 72.951662][ T3303] loop3: p5 start 460800 is beyond EOD, truncated [ 72.951903][ T5320] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.537: couldn't read orphan inode 15 (err -117) [ 72.958185][ T3303] loop3: p6 size 83886080 extends beyond EOD, truncated [ 72.978017][ T5304] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 72.984799][ T5320] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.984906][ T5304] loop3: p1 start 460800 is beyond EOD, truncated [ 72.998157][ T5313] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 73.003330][ T5304] loop3: p2 size 83886080 extends beyond EOD, truncated [ 73.018463][ T5313] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 73.026558][ T5313] System zones: 0-1, 15-15, 18-18, 34-34 [ 73.032519][ T5313] EXT4-fs (loop5): orphan cleanup on readonly fs [ 73.039135][ T5313] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 73.053704][ T5313] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 73.055210][ T5304] loop3: p5 start 460800 is beyond EOD, truncated [ 73.066870][ T5304] loop3: p6 size 83886080 extends beyond EOD, truncated [ 73.074219][ T5313] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.535: bg 0: block 40: padding at end of block bitmap is not set [ 73.098938][ T5313] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 73.118287][ T5313] EXT4-fs (loop5): 1 truncate cleaned up [ 73.127801][ T5313] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.184526][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.202070][ T5313] EXT4-fs error (device loop5): ext4_encrypted_get_link:46: inode #16: comm syz.5.535: bad symlink. [ 73.302352][ T5339] atomic_op ffff888126470928 conn xmit_atomic 0000000000000000 [ 73.333396][ T3526] udevd[3526]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 73.344778][ T3622] udevd[3622]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 73.380525][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 73.385668][ T3621] udevd[3621]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 73.406738][ T3611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.446141][ T3878] udevd[3878]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 73.457222][ T3526] udevd[3526]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 73.484534][ T3622] udevd[3622]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 73.498610][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 73.513022][ T5347] netlink: 'syz.1.542': attribute type 2 has an invalid length. [ 73.520756][ T5347] netlink: 160 bytes leftover after parsing attributes in process `syz.1.542'. [ 73.547260][ T5348] netlink: 12 bytes leftover after parsing attributes in process `syz.5.544'. [ 73.651423][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.670142][ T5348] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 73.787030][ T5356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.546'. [ 73.860190][ T5356] team0: Port device team_slave_1 removed [ 74.248186][ T37] tipc: Subscription rejected, illegal request [ 74.507781][ T5374] loop5: detected capacity change from 0 to 1024 [ 74.559759][ T5377] loop3: detected capacity change from 0 to 1024 [ 74.574874][ T5374] EXT4-fs: inline encryption not supported [ 74.614457][ T5377] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 74.624398][ T5377] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 74.653453][ T5374] EXT4-fs (loop5): orphan cleanup on readonly fs [ 74.672954][ T5374] EXT4-fs (loop5): 1 truncate cleaned up [ 74.690350][ T5377] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 74.713635][ T3394] usb 11-1: enqueue for inactive port 0 [ 74.719230][ T3394] usb 11-1: enqueue for inactive port 0 [ 74.735353][ T5377] EXT4-fs error (device loop3): ext4_get_journal_inode:5808: inode #5: comm syz.3.552: unexpected bad inode w/o EXT4_IGET_BAD [ 74.753077][ T5385] loop1: detected capacity change from 0 to 512 [ 74.768225][ T5385] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.555: corrupted in-inode xattr: e_value size too large [ 74.782953][ T5377] EXT4-fs (loop3): no journal found [ 74.788261][ T5377] EXT4-fs (loop3): can't get journal size [ 74.794648][ T5385] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.555: couldn't read orphan inode 15 (err -117) [ 74.807635][ T5374] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.823253][ T3394] vhci_hcd: vhci_device speed not set [ 74.824330][ T5377] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.842153][ T5385] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.347589][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.595843][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.634972][ T3611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.700241][ T5404] loop5: detected capacity change from 0 to 512 [ 75.721140][ T5406] SELinux: policydb version 0 does not match my version range 15-35 [ 75.730461][ T5406] SELinux: failed to load policy [ 75.737568][ T5399] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 75.748937][ T5399] bond1 (unregistering): Released all slaves [ 75.779577][ T5404] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.806307][ T5404] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.817377][ T5406] loop2: detected capacity change from 0 to 4096 [ 75.832201][ T5406] EXT4-fs (loop2): unsupported descriptor size 255 [ 75.850332][ T5404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.860404][ T5406] netlink: 21088 bytes leftover after parsing attributes in process `syz.2.561'. [ 75.869815][ T5404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.901873][ T29] kauditd_printk_skb: 401 callbacks suppressed [ 75.901890][ T29] audit: type=1400 audit(1763047952.085:2821): avc: denied { read write } for pid=5405 comm="syz.2.561" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 75.940682][ T29] audit: type=1400 audit(1763047952.085:2822): avc: denied { open } for pid=5405 comm="syz.2.561" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 75.998952][ T5424] loop0: detected capacity change from 0 to 512 [ 76.006606][ T5425] FAULT_INJECTION: forcing a failure. [ 76.006606][ T5425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.019808][ T5425] CPU: 1 UID: 0 PID: 5425 Comm: syz.1.567 Not tainted syzkaller #0 PREEMPT(voluntary) [ 76.019835][ T5425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 76.019925][ T5425] Call Trace: [ 76.019933][ T5425] [ 76.019942][ T5425] __dump_stack+0x1d/0x30 [ 76.019970][ T5425] dump_stack_lvl+0xe8/0x140 [ 76.019995][ T5425] dump_stack+0x15/0x1b [ 76.020015][ T5425] should_fail_ex+0x265/0x280 [ 76.020040][ T5425] should_fail+0xb/0x20 [ 76.020065][ T5425] should_fail_usercopy+0x1a/0x20 [ 76.020092][ T5425] _copy_from_user+0x1c/0xb0 [ 76.020126][ T5425] ___sys_sendmsg+0xc1/0x1d0 [ 76.020166][ T5425] __x64_sys_sendmsg+0xd4/0x160 [ 76.020197][ T5425] x64_sys_call+0x191e/0x3000 [ 76.020281][ T5425] do_syscall_64+0xd2/0x200 [ 76.020303][ T5425] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 76.020336][ T5425] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 76.020426][ T5425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.020456][ T5425] RIP: 0033:0x7fe8dc1cf6c9 [ 76.020476][ T5425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.020510][ T5425] RSP: 002b:00007fe8dac2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.020533][ T5425] RAX: ffffffffffffffda RBX: 00007fe8dc425fa0 RCX: 00007fe8dc1cf6c9 [ 76.020550][ T5425] RDX: 0000000004000000 RSI: 0000200000000540 RDI: 0000000000000004 [ 76.020566][ T5425] RBP: 00007fe8dac2f090 R08: 0000000000000000 R09: 0000000000000000 [ 76.020581][ T5425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.020595][ T5425] R13: 00007fe8dc426038 R14: 00007fe8dc425fa0 R15: 00007fffe7f7fb78 [ 76.020621][ T5425] [ 76.020612][ T5424] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.568: corrupted in-inode xattr: e_value size too large [ 76.204787][ T5424] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.568: couldn't read orphan inode 15 (err -117) [ 76.218090][ T5424] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.606951][ T3611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.665711][ T29] audit: type=1400 audit(1763047952.835:2823): avc: denied { setopt } for pid=5437 comm="syz.3.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 76.685153][ T29] audit: type=1400 audit(1763047952.845:2824): avc: denied { ioctl } for pid=5437 comm="syz.3.571" path="socket:[12110]" dev="sockfs" ino=12110 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 76.900971][ T5443] loop3: detected capacity change from 0 to 512 [ 76.986593][ T5443] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.031499][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.079212][ T5443] ext4 filesystem being mounted at /120/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.143684][ T5443] FAULT_INJECTION: forcing a failure. [ 77.143684][ T5443] name failslab, interval 1, probability 0, space 0, times 0 [ 77.156452][ T5443] CPU: 0 UID: 0 PID: 5443 Comm: syz.3.573 Not tainted syzkaller #0 PREEMPT(voluntary) [ 77.156483][ T5443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 77.156498][ T5443] Call Trace: [ 77.156503][ T5443] [ 77.156510][ T5443] __dump_stack+0x1d/0x30 [ 77.156538][ T5443] dump_stack_lvl+0xe8/0x140 [ 77.156566][ T5443] dump_stack+0x15/0x1b [ 77.156619][ T5443] should_fail_ex+0x265/0x280 [ 77.156643][ T5443] should_failslab+0x8c/0xb0 [ 77.156683][ T5443] kmem_cache_alloc_noprof+0x50/0x480 [ 77.156714][ T5443] ? dquot_alloc+0x26/0x30 [ 77.156825][ T5443] dquot_alloc+0x26/0x30 [ 77.156853][ T5443] dqget+0x2b5/0x8d0 [ 77.156931][ T5443] dquot_set_dqblk+0x2b/0x890 [ 77.156960][ T5443] quota_setquota+0x321/0x350 [ 77.157006][ T5443] do_quotactl+0x5bc/0x670 [ 77.157115][ T5443] __se_sys_quotactl+0x3a5/0x670 [ 77.157152][ T5443] __x64_sys_quotactl+0x55/0x70 [ 77.157235][ T5443] x64_sys_call+0x15d6/0x3000 [ 77.157260][ T5443] do_syscall_64+0xd2/0x200 [ 77.157287][ T5443] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 77.157361][ T5443] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 77.157402][ T5443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.157423][ T5443] RIP: 0033:0x7f0dd0a2f6c9 [ 77.157491][ T5443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.157546][ T5443] RSP: 002b:00007f0dcf48f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 77.157584][ T5443] RAX: ffffffffffffffda RBX: 00007f0dd0c85fa0 RCX: 00007f0dd0a2f6c9 [ 77.157658][ T5443] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffff80000800 [ 77.157670][ T5443] RBP: 00007f0dcf48f090 R08: 0000000000000000 R09: 0000000000000000 [ 77.157682][ T5443] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 77.157694][ T5443] R13: 00007f0dd0c86038 R14: 00007f0dd0c85fa0 R15: 00007fff2a719e28 [ 77.157714][ T5443] [ 77.379510][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.434333][ T29] audit: type=1326 audit(1763047953.615:2825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5447 comm="syz.3.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd0a2f6c9 code=0x7ffc0000 [ 77.457706][ T29] audit: type=1326 audit(1763047953.615:2826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5447 comm="syz.3.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0dd0a2f6c9 code=0x7ffc0000 [ 77.481123][ T29] audit: type=1326 audit(1763047953.615:2827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5447 comm="syz.3.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd0a2f6c9 code=0x7ffc0000 [ 77.504482][ T29] audit: type=1326 audit(1763047953.615:2828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5447 comm="syz.3.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0dd0a2f6c9 code=0x7ffc0000 [ 77.527847][ T29] audit: type=1326 audit(1763047953.615:2829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5447 comm="syz.3.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd0a2f6c9 code=0x7ffc0000 [ 77.551183][ T29] audit: type=1326 audit(1763047953.615:2830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5447 comm="syz.3.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0dd0a2f6c9 code=0x7ffc0000 [ 77.775341][ T5457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.804512][ T5457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.889213][ T5464] loop0: detected capacity change from 0 to 1024 [ 77.924236][ T5464] EXT4-fs: Ignoring removed orlov option [ 77.947725][ T5464] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.971587][ T5470] IPVS: set_ctl: invalid protocol: 115 10.1.1.2:20004 [ 78.062096][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.243522][ T5542] netlink: 16 bytes leftover after parsing attributes in process `gtp'. [ 78.744280][ T5568] loop1: detected capacity change from 0 to 1024 [ 78.763236][ T5568] EXT4-fs: inline encryption not supported [ 78.796831][ T5568] EXT4-fs (loop1): orphan cleanup on readonly fs [ 78.818496][ T5568] EXT4-fs (loop1): 1 truncate cleaned up [ 78.833903][ T5568] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.915708][ T5578] netlink: 20 bytes leftover after parsing attributes in process `syz.3.594'. [ 78.929352][ T5580] loop5: detected capacity change from 0 to 512 [ 78.929399][ T5578] tipc: Trying to set illegal importance in message [ 78.942677][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.962194][ T5578] netlink: 28 bytes leftover after parsing attributes in process `syz.3.594'. [ 79.114499][ T5591] loop5: detected capacity change from 0 to 512 [ 79.214985][ T5591] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 79.250693][ T5591] EXT4-fs (loop5): mount failed [ 79.269459][ T5600] loop1: detected capacity change from 0 to 512 [ 79.304269][ T5591] loop5: detected capacity change from 0 to 1024 [ 79.315458][ T5591] EXT4-fs: Ignoring removed bh option [ 79.323187][ T5591] EXT4-fs: inline encryption not supported [ 79.332128][ T5591] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 79.357811][ T5591] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 79.368152][ T5591] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.599: lblock 2 mapped to illegal pblock 2 (length 1) [ 79.413540][ T5591] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.599: lblock 0 mapped to illegal pblock 48 (length 1) [ 79.428784][ T5591] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.599: Failed to acquire dquot type 0 [ 79.443463][ T5591] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 79.454496][ T5591] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.599: mark_inode_dirty error [ 79.483315][ T5591] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 79.511928][ T5591] EXT4-fs (loop5): 1 orphan inode deleted [ 79.525934][ T5610] loop0: detected capacity change from 0 to 512 [ 79.532797][ T5591] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.572923][ T5503] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:40: lblock 1 mapped to illegal pblock 1 (length 1) [ 79.582934][ T5591] ext4: Unknown parameter 'esC%' [ 79.606872][ T5503] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:40: Failed to release dquot type 0 [ 79.620905][ T5610] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.605: corrupted in-inode xattr: e_value size too large [ 79.632018][ T3611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.644810][ T3611] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 79.658530][ T3611] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 79.659935][ T5612] SELinux: ebitmap: truncated map [ 79.668846][ T5610] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.605: couldn't read orphan inode 15 (err -117) [ 79.685205][ T3611] EXT4-fs error (device loop5): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 79.697662][ T5610] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.722188][ T5612] SELinux: failed to load policy [ 80.516369][ T5626] loop1: detected capacity change from 0 to 512 [ 80.567286][ T5626] EXT4-fs (loop1): invalid first ino: 0 [ 80.624308][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.682416][ T5626] serio: Serial port ptm0 [ 80.841323][ T5642] SELinux: policydb version 0 does not match my version range 15-35 [ 80.852724][ T5640] loop3: detected capacity change from 0 to 2048 [ 80.872978][ T5642] SELinux: failed to load policy [ 80.904106][ T5640] loop3: p1 < > p4 [ 80.909825][ T5640] loop3: p4 size 8388608 extends beyond EOD, truncated [ 80.953736][ T5642] loop5: detected capacity change from 0 to 4096 [ 80.984788][ T5642] EXT4-fs (loop5): unsupported descriptor size 255 [ 81.037211][ T3622] udevd[3622]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 81.050164][ T3621] udevd[3621]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 81.067627][ T5642] netlink: 21088 bytes leftover after parsing attributes in process `syz.5.616'. [ 81.082290][ T5646] loop3: detected capacity change from 0 to 1024 [ 81.101625][ T29] kauditd_printk_skb: 296 callbacks suppressed [ 81.101717][ T29] audit: type=1326 audit(1763047957.285:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5647 comm="syz.0.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40931f6c9 code=0x7ffc0000 [ 81.131401][ T29] audit: type=1326 audit(1763047957.285:3124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5647 comm="syz.0.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40931f6c9 code=0x7ffc0000 [ 81.154832][ T29] audit: type=1326 audit(1763047957.285:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5647 comm="syz.0.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff4093215e7 code=0x7ffc0000 [ 81.178157][ T29] audit: type=1326 audit(1763047957.285:3126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5647 comm="syz.0.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff40932155c code=0x7ffc0000 [ 81.201412][ T29] audit: type=1326 audit(1763047957.285:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5647 comm="syz.0.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff409321494 code=0x7ffc0000 [ 81.224695][ T29] audit: type=1326 audit(1763047957.285:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5647 comm="syz.0.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff409321494 code=0x7ffc0000 [ 81.247983][ T29] audit: type=1326 audit(1763047957.285:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5647 comm="syz.0.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff40931e32a code=0x7ffc0000 [ 81.276806][ T5646] EXT4-fs: inline encryption not supported [ 81.282837][ T5646] EXT4-fs: Ignoring removed orlov option [ 81.298871][ T5646] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 81.322282][ T29] audit: type=1326 audit(1763047957.465:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5647 comm="syz.0.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40931f6c9 code=0x7ffc0000 [ 81.345856][ T29] audit: type=1326 audit(1763047957.465:3131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5647 comm="syz.0.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40931f6c9 code=0x7ffc0000 [ 81.369365][ T29] audit: type=1326 audit(1763047957.465:3132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5647 comm="syz.0.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7ff40931f6c9 code=0x7ffc0000 [ 81.432020][ T5646] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 81.455515][ T5646] System zones: 0-1, 3-12 [ 81.471495][ T5646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.657454][ T5664] loop2: detected capacity change from 0 to 512 [ 81.687503][ T5664] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.623: corrupted in-inode xattr: e_value size too large [ 81.706345][ T5664] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.623: couldn't read orphan inode 15 (err -117) [ 81.720557][ T5664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.858683][ T5676] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5676 comm=syz.0.627 [ 81.903715][ T5681] loop1: detected capacity change from 0 to 128 [ 81.910601][ T5681] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 81.991359][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.445602][ T5693] loop9: detected capacity change from 0 to 7 [ 82.615010][ T5693] buffer_io_error: 18 callbacks suppressed [ 82.615025][ T5693] Buffer I/O error on dev loop9, logical block 0, async page read [ 82.845059][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.911448][ T5699] FAULT_INJECTION: forcing a failure. [ 82.911448][ T5699] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 82.924783][ T5699] CPU: 1 UID: 0 PID: 5699 Comm: syz.1.634 Not tainted syzkaller #0 PREEMPT(voluntary) [ 82.924860][ T5699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 82.924872][ T5699] Call Trace: [ 82.924879][ T5699] [ 82.924888][ T5699] __dump_stack+0x1d/0x30 [ 82.924911][ T5699] dump_stack_lvl+0xe8/0x140 [ 82.924931][ T5699] dump_stack+0x15/0x1b [ 82.924948][ T5699] should_fail_ex+0x265/0x280 [ 82.925028][ T5699] should_fail_alloc_page+0xf2/0x100 [ 82.925065][ T5699] __alloc_frozen_pages_noprof+0xff/0x360 [ 82.925095][ T5699] alloc_pages_mpol+0xb3/0x260 [ 82.925124][ T5699] alloc_pages_noprof+0x90/0x130 [ 82.925190][ T5699] alloc_skb_with_frags+0x193/0x470 [ 82.925257][ T5699] sock_alloc_send_pskb+0x430/0x4e0 [ 82.925288][ T5699] ? mntput+0x4b/0x80 [ 82.925313][ T5699] tun_get_user+0x9b4/0x26e0 [ 82.925348][ T5699] ? ref_tracker_alloc+0x1f2/0x2f0 [ 82.925447][ T5699] ? selinux_file_permission+0x2f0/0x320 [ 82.925489][ T5699] tun_chr_write_iter+0x15e/0x210 [ 82.925586][ T5699] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 82.925674][ T5699] vfs_write+0x52a/0x960 [ 82.925714][ T5699] ksys_write+0xda/0x1a0 [ 82.925811][ T5699] __x64_sys_write+0x40/0x50 [ 82.925843][ T5699] x64_sys_call+0x2802/0x3000 [ 82.925952][ T5699] do_syscall_64+0xd2/0x200 [ 82.925987][ T5699] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 82.926020][ T5699] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 82.926083][ T5699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.926112][ T5699] RIP: 0033:0x7fe8dc1ce17f [ 82.926129][ T5699] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 82.926147][ T5699] RSP: 002b:00007fe8dac2f000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 82.926166][ T5699] RAX: ffffffffffffffda RBX: 00007fe8dc425fa0 RCX: 00007fe8dc1ce17f [ 82.926282][ T5699] RDX: 000000000000104a RSI: 0000200000005140 RDI: 00000000000000c8 [ 82.926298][ T5699] RBP: 00007fe8dac2f090 R08: 0000000000000000 R09: 0000000000000000 [ 82.926314][ T5699] R10: 000000000000104a R11: 0000000000000293 R12: 0000000000000001 [ 82.926330][ T5699] R13: 00007fe8dc426038 R14: 00007fe8dc425fa0 R15: 00007fffe7f7fb78 [ 82.926355][ T5699] [ 83.163627][ T5693] Buffer I/O error on dev loop9, logical block 0, async page read [ 83.171582][ T5693] loop9: unable to read partition table [ 83.223154][ T5693] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 83.223154][ T5693] ) failed (rc=-5) [ 83.244393][ T3622] Buffer I/O error on dev loop9, logical block 0, async page read [ 83.252332][ T3622] Buffer I/O error on dev loop9, logical block 0, async page read [ 83.288079][ T3622] Buffer I/O error on dev loop9, logical block 0, async page read [ 83.305712][ T5701] loop0: detected capacity change from 0 to 512 [ 83.311418][ T3622] Buffer I/O error on dev loop9, logical block 0, async page read [ 83.313206][ T5705] netlink: 332 bytes leftover after parsing attributes in process `syz.2.633'. [ 83.345254][ T3622] Buffer I/O error on dev loop9, logical block 0, async page read [ 83.361876][ T5701] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 83.419239][ T5708] loop2: detected capacity change from 0 to 512 [ 83.435764][ T5708] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.448064][ T5710] IPVS: set_ctl: invalid protocol: 115 10.1.1.2:20004 [ 83.457399][ T5701] EXT4-fs (loop0): 1 truncate cleaned up [ 83.468189][ T5701] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.506875][ T5708] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 83.553762][ T5708] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.657045][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 83.798074][ T5729] loop1: detected capacity change from 0 to 512 [ 83.807496][ T5729] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 83.825441][ T5729] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 83.838719][ T5729] EXT4-fs (loop1): 1 truncate cleaned up [ 83.845332][ T5729] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.915030][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.925034][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.933907][ T5732] FAULT_INJECTION: forcing a failure. [ 83.933907][ T5732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.947199][ T5732] CPU: 0 UID: 0 PID: 5732 Comm: syz.5.648 Not tainted syzkaller #0 PREEMPT(voluntary) [ 83.947291][ T5732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 83.947303][ T5732] Call Trace: [ 83.947310][ T5732] [ 83.947319][ T5732] __dump_stack+0x1d/0x30 [ 83.947347][ T5732] dump_stack_lvl+0xe8/0x140 [ 83.947374][ T5732] dump_stack+0x15/0x1b [ 83.947396][ T5732] should_fail_ex+0x265/0x280 [ 83.947424][ T5732] should_fail+0xb/0x20 [ 83.947440][ T5732] should_fail_usercopy+0x1a/0x20 [ 83.947465][ T5732] _copy_to_user+0x20/0xa0 [ 83.947560][ T5732] simple_read_from_buffer+0xb5/0x130 [ 83.947599][ T5732] proc_fail_nth_read+0x10e/0x150 [ 83.947709][ T5732] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 83.947742][ T5732] vfs_read+0x1a8/0x770 [ 83.947808][ T5732] ? __rcu_read_unlock+0x4f/0x70 [ 83.947982][ T5732] ? __fget_files+0x184/0x1c0 [ 83.948010][ T5732] ksys_read+0xda/0x1a0 [ 83.948033][ T5732] __x64_sys_read+0x40/0x50 [ 83.948055][ T5732] x64_sys_call+0x27c0/0x3000 [ 83.948076][ T5732] do_syscall_64+0xd2/0x200 [ 83.948095][ T5732] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 83.948173][ T5732] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 83.948222][ T5732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.948242][ T5732] RIP: 0033:0x7fc529e8e0dc [ 83.948259][ T5732] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 83.948276][ T5732] RSP: 002b:00007fc5288ef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 83.948293][ T5732] RAX: ffffffffffffffda RBX: 00007fc52a0e5fa0 RCX: 00007fc529e8e0dc [ 83.948304][ T5732] RDX: 000000000000000f RSI: 00007fc5288ef0a0 RDI: 0000000000000005 [ 83.948324][ T5732] RBP: 00007fc5288ef090 R08: 0000000000000000 R09: 0000000000000000 [ 83.948335][ T5732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.948345][ T5732] R13: 00007fc52a0e6038 R14: 00007fc52a0e5fa0 R15: 00007ffcb2ffffa8 [ 83.948363][ T5732] [ 84.175318][ T5735] loop1: detected capacity change from 0 to 1024 [ 84.182302][ T5735] EXT4-fs: inline encryption not supported [ 84.219830][ T5738] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 84.225189][ T5740] IPVS: set_ctl: invalid protocol: 115 10.1.1.2:20004 [ 84.238448][ T5735] EXT4-fs (loop1): orphan cleanup on readonly fs [ 84.257040][ T5741] loop2: detected capacity change from 0 to 1024 [ 84.302846][ T5744] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 84.318338][ T5744] pim6reg: entered allmulticast mode [ 84.325812][ T5744] pim6reg: left allmulticast mode [ 84.334569][ T5741] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.342692][ T5735] EXT4-fs (loop1): 1 truncate cleaned up [ 84.365822][ T5735] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 84.392412][ T5737] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.641: Allocating blocks 449-513 which overlap fs metadata [ 84.442318][ T5736] EXT4-fs (loop2): pa ffff888106ea1d90: logic 48, phys. 177, len 21 [ 84.450460][ T5736] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 84.499272][ T5756] loop0: detected capacity change from 0 to 512 [ 84.526081][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.543458][ T5756] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 84.561097][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.621533][ T5756] EXT4-fs (loop0): 1 truncate cleaned up [ 84.629487][ T5756] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.772362][ T5770] loop1: detected capacity change from 0 to 2048 [ 84.845479][ T5770] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.926183][ T5770] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 84.985699][ T5770] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 84.998393][ T5770] EXT4-fs (loop1): This should not happen!! Data will be lost [ 84.998393][ T5770] [ 85.008074][ T5770] EXT4-fs (loop1): Total free blocks count 0 [ 85.014111][ T5770] EXT4-fs (loop1): Free/Dirty block details [ 85.020117][ T5770] EXT4-fs (loop1): free_blocks=2415919104 [ 85.025888][ T5770] EXT4-fs (loop1): dirty_blocks=32 [ 85.031075][ T5770] EXT4-fs (loop1): Block reservation details [ 85.037098][ T5770] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 85.150771][ T5779] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 85.301402][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.603136][ T5793] IPVS: set_ctl: invalid protocol: 115 10.1.1.2:20004 [ 85.896980][ T5814] loop1: detected capacity change from 0 to 1024 [ 85.915058][ T5814] EXT4-fs: inline encryption not supported [ 85.956648][ T5814] EXT4-fs (loop1): orphan cleanup on readonly fs [ 85.964694][ T5814] EXT4-fs (loop1): 1 truncate cleaned up [ 85.998274][ T5814] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 86.547286][ T5830] pim6reg: entered allmulticast mode [ 86.564019][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 86.564109][ T29] audit: type=1326 audit(1763047962.755:3310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5828 comm="syz.5.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc529e8f6c9 code=0x7ffc0000 [ 86.613405][ T5830] pim6reg: left allmulticast mode [ 86.618829][ T29] audit: type=1326 audit(1763047962.785:3311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5828 comm="syz.5.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc529e8f6c9 code=0x7ffc0000 [ 86.642203][ T29] audit: type=1326 audit(1763047962.785:3312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5828 comm="syz.5.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc529e8f6c9 code=0x7ffc0000 [ 86.665544][ T29] audit: type=1326 audit(1763047962.785:3313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5828 comm="syz.5.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc529e8f6c9 code=0x7ffc0000 [ 86.688875][ T29] audit: type=1326 audit(1763047962.785:3314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5828 comm="syz.5.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc529e8f6c9 code=0x7ffc0000 [ 86.712352][ T29] audit: type=1326 audit(1763047962.785:3315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5828 comm="syz.5.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc529e8f6c9 code=0x7ffc0000 [ 86.735814][ T29] audit: type=1326 audit(1763047962.785:3316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5828 comm="syz.5.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc529e8f6c9 code=0x7ffc0000 [ 86.759159][ T29] audit: type=1326 audit(1763047962.785:3317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5828 comm="syz.5.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fc529e8f6c9 code=0x7ffc0000 [ 86.768813][ T5833] loop5: detected capacity change from 0 to 128 [ 86.782495][ T29] audit: type=1326 audit(1763047962.785:3318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5828 comm="syz.5.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc529e8f6c9 code=0x7ffc0000 [ 86.812128][ T29] audit: type=1326 audit(1763047962.785:3319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5831 comm="syz.5.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc529ec1f85 code=0x7ffc0000 [ 86.843459][ T5833] vfat: Unknown parameter 'u' [ 86.968235][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.064642][ T5813] syz.0.669 (5813) used greatest stack depth: 6184 bytes left [ 87.436711][ T5861] SELinux: policydb version -148255111 does not match my version range 15-35 [ 87.445840][ T5861] SELinux: failed to load policy [ 87.556706][ T5867] SELinux: policydb version 0 does not match my version range 15-35 [ 87.565066][ T5867] SELinux: failed to load policy [ 87.590209][ T5867] loop5: detected capacity change from 0 to 4096 [ 87.601096][ T5867] EXT4-fs (loop5): unsupported descriptor size 255 [ 87.758170][ T5867] netlink: 21088 bytes leftover after parsing attributes in process `syz.5.681'. [ 87.917874][ T5874] loop0: detected capacity change from 0 to 1024 [ 88.005920][ T5874] EXT4-fs: inline encryption not supported [ 88.067402][ T5874] EXT4-fs (loop0): orphan cleanup on readonly fs [ 88.148248][ T5874] EXT4-fs (loop0): 1 truncate cleaned up [ 88.165591][ T5874] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 88.206926][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.293307][ T5888] loop5: detected capacity change from 0 to 512 [ 88.301010][ T5888] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 88.336110][ T5888] EXT4-fs (loop5): 1 truncate cleaned up [ 88.342289][ T5888] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.494267][ T3611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.564169][ T5915] FAULT_INJECTION: forcing a failure. [ 88.564169][ T5915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.577438][ T5915] CPU: 1 UID: 0 PID: 5915 Comm: syz.3.700 Not tainted syzkaller #0 PREEMPT(voluntary) [ 88.577467][ T5915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 88.577479][ T5915] Call Trace: [ 88.577557][ T5915] [ 88.577565][ T5915] __dump_stack+0x1d/0x30 [ 88.577591][ T5915] dump_stack_lvl+0xe8/0x140 [ 88.577612][ T5915] dump_stack+0x15/0x1b [ 88.577657][ T5915] should_fail_ex+0x265/0x280 [ 88.577677][ T5915] should_fail+0xb/0x20 [ 88.577696][ T5915] should_fail_usercopy+0x1a/0x20 [ 88.577715][ T5915] _copy_to_user+0x20/0xa0 [ 88.577739][ T5915] simple_read_from_buffer+0xb5/0x130 [ 88.577804][ T5915] proc_fail_nth_read+0x10e/0x150 [ 88.577840][ T5915] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 88.577943][ T5915] vfs_read+0x1a8/0x770 [ 88.578052][ T5915] ? kern_path+0x106/0x130 [ 88.578074][ T5915] ? __rcu_read_unlock+0x4f/0x70 [ 88.578108][ T5915] ? __fget_files+0x184/0x1c0 [ 88.578146][ T5915] ksys_read+0xda/0x1a0 [ 88.578199][ T5915] __x64_sys_read+0x40/0x50 [ 88.578240][ T5915] x64_sys_call+0x27c0/0x3000 [ 88.578296][ T5915] do_syscall_64+0xd2/0x200 [ 88.578322][ T5915] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 88.578360][ T5915] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 88.578405][ T5915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.578433][ T5915] RIP: 0033:0x7f0dd0a2e0dc [ 88.578454][ T5915] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 88.578547][ T5915] RSP: 002b:00007f0dcf48f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 88.578578][ T5915] RAX: ffffffffffffffda RBX: 00007f0dd0c85fa0 RCX: 00007f0dd0a2e0dc [ 88.578592][ T5915] RDX: 000000000000000f RSI: 00007f0dcf48f0a0 RDI: 0000000000000006 [ 88.578607][ T5915] RBP: 00007f0dcf48f090 R08: 0000000000000000 R09: 0000000000000000 [ 88.578639][ T5915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.578654][ T5915] R13: 00007f0dd0c86038 R14: 00007f0dd0c85fa0 R15: 00007fff2a719e28 [ 88.578680][ T5915] [ 88.851459][ T5932] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 88.851459][ T5932] program syz.0.704 not setting count and/or reply_len properly [ 88.886830][ T5916] usb usb7: usbfs: process 5916 (syz.1.699) did not claim interface 0 before use [ 88.937661][ T5939] batman_adv: batadv0: Adding interface: dummy0 [ 88.943993][ T5939] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.993390][ T5939] batman_adv: batadv0: Interface activated: dummy0 [ 89.010377][ T5945] FAULT_INJECTION: forcing a failure. [ 89.010377][ T5945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.023571][ T5945] CPU: 0 UID: 0 PID: 5945 Comm: syz.1.708 Not tainted syzkaller #0 PREEMPT(voluntary) [ 89.023604][ T5945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 89.023620][ T5945] Call Trace: [ 89.023627][ T5945] [ 89.023636][ T5945] __dump_stack+0x1d/0x30 [ 89.023665][ T5945] dump_stack_lvl+0xe8/0x140 [ 89.023692][ T5945] dump_stack+0x15/0x1b [ 89.023720][ T5948] loop0: detected capacity change from 0 to 512 [ 89.023724][ T5945] should_fail_ex+0x265/0x280 [ 89.023753][ T5945] should_fail+0xb/0x20 [ 89.023771][ T5945] should_fail_usercopy+0x1a/0x20 [ 89.023803][ T5945] _copy_from_iter+0xd2/0xe80 [ 89.023837][ T5945] ? mntput_no_expire+0x6f/0x440 [ 89.023872][ T5945] ? mntput+0x4b/0x80 [ 89.023930][ T5945] tun_get_user+0x3d0/0x26e0 [ 89.023975][ T5945] ? _parse_integer_limit+0x170/0x190 [ 89.024045][ T5945] ? ref_tracker_alloc+0x1f2/0x2f0 [ 89.024104][ T5945] ? selinux_file_permission+0x1e4/0x320 [ 89.024176][ T5945] tun_chr_write_iter+0x15e/0x210 [ 89.024224][ T5945] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 89.024263][ T5945] vfs_write+0x52a/0x960 [ 89.024323][ T5945] ksys_write+0xda/0x1a0 [ 89.024486][ T5945] __x64_sys_write+0x40/0x50 [ 89.024523][ T5945] x64_sys_call+0x2802/0x3000 [ 89.024555][ T5945] do_syscall_64+0xd2/0x200 [ 89.024584][ T5945] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 89.024642][ T5945] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 89.024688][ T5945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.024716][ T5945] RIP: 0033:0x7fe8dc1cf6c9 [ 89.024744][ T5945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.024769][ T5945] RSP: 002b:00007fe8dac2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 89.024795][ T5945] RAX: ffffffffffffffda RBX: 00007fe8dc425fa0 RCX: 00007fe8dc1cf6c9 [ 89.024813][ T5945] RDX: 0000000000000052 RSI: 00002000000014c0 RDI: 0000000000000003 [ 89.024830][ T5945] RBP: 00007fe8dac2f090 R08: 0000000000000000 R09: 0000000000000000 [ 89.024847][ T5945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.024863][ T5945] R13: 00007fe8dc426038 R14: 00007fe8dc425fa0 R15: 00007fffe7f7fb78 [ 89.024918][ T5945] [ 89.244625][ T5948] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 89.269261][ T5948] EXT4-fs (loop0): 1 truncate cleaned up [ 89.275622][ T5948] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.329239][ T5958] netlink: 24 bytes leftover after parsing attributes in process `syz.5.712'. [ 89.350391][ T5958] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 89.360434][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.403170][ T5967] loop5: detected capacity change from 0 to 256 [ 89.887888][ T5986] loop1: detected capacity change from 0 to 512 [ 89.894934][ T5986] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 89.912392][ T5986] EXT4-fs (loop1): 1 truncate cleaned up [ 89.922851][ T5986] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.968863][ T5992] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 89.975463][ T5992] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 89.982991][ T5992] vhci_hcd vhci_hcd.0: Device attached [ 89.998113][ T5992] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 90.004702][ T5992] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 90.012367][ T5992] vhci_hcd vhci_hcd.0: Device attached [ 90.018876][ T5992] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 90.027640][ T5992] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 90.063824][ T5992] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(11) [ 90.070456][ T5992] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 90.078435][ T5992] vhci_hcd vhci_hcd.0: Device attached [ 90.113795][ T5992] tipc: Enabling of bearer rejected, failed to enable media [ 90.123923][ T5992] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(15) [ 90.130652][ T5992] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 90.138337][ T5992] vhci_hcd vhci_hcd.0: Device attached [ 90.287442][ T6001] vhci_hcd: connection closed [ 90.287761][ T5476] vhci_hcd: stop threads [ 90.296781][ T5476] vhci_hcd: release socket [ 90.301209][ T5476] vhci_hcd: disconnect device [ 90.306653][ T5995] vhci_hcd: connection closed [ 90.306688][ T6005] loop2: detected capacity change from 0 to 512 [ 90.307224][ T5998] vhci_hcd: connection closed [ 90.311569][ T5993] vhci_hcd: connection closed [ 90.322767][ T5476] vhci_hcd: stop threads [ 90.331833][ T5476] vhci_hcd: release socket [ 90.333354][ T6005] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 90.336311][ T5476] vhci_hcd: disconnect device [ 90.348115][ T6005] EXT4-fs (loop2): 1 truncate cleaned up [ 90.357093][ T6005] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.372711][ T5476] vhci_hcd: stop threads [ 90.377034][ T5476] vhci_hcd: release socket [ 90.381572][ T5476] vhci_hcd: disconnect device [ 90.387131][ T5476] vhci_hcd: stop threads [ 90.391418][ T5476] vhci_hcd: release socket [ 90.395901][ T5476] vhci_hcd: disconnect device [ 90.437478][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.718402][ T6018] FAULT_INJECTION: forcing a failure. [ 90.718402][ T6018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.731578][ T6018] CPU: 0 UID: 0 PID: 6018 Comm: syz.2.727 Not tainted syzkaller #0 PREEMPT(voluntary) [ 90.731614][ T6018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 90.731630][ T6018] Call Trace: [ 90.731716][ T6018] [ 90.731725][ T6018] __dump_stack+0x1d/0x30 [ 90.731748][ T6018] dump_stack_lvl+0xe8/0x140 [ 90.731770][ T6018] dump_stack+0x15/0x1b [ 90.731794][ T6018] should_fail_ex+0x265/0x280 [ 90.731856][ T6018] should_fail+0xb/0x20 [ 90.731877][ T6018] should_fail_usercopy+0x1a/0x20 [ 90.731906][ T6018] copy_fpstate_to_sigframe+0x628/0x7d0 [ 90.731943][ T6018] ? copy_fpstate_to_sigframe+0xe6/0x7d0 [ 90.732008][ T6018] ? x86_task_fpu+0x36/0x60 [ 90.732054][ T6018] get_sigframe+0x34d/0x490 [ 90.732079][ T6018] ? get_signal+0xdc7/0xf70 [ 90.732112][ T6018] x64_setup_rt_frame+0xa8/0x580 [ 90.732206][ T6018] arch_do_signal_or_restart+0x23e/0x440 [ 90.732242][ T6018] exit_to_user_mode_loop+0x77/0x110 [ 90.732278][ T6018] do_syscall_64+0x1d6/0x200 [ 90.732341][ T6018] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 90.732373][ T6018] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 90.732407][ T6018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.732555][ T6018] RIP: 0033:0x7fd6d72cf6c7 [ 90.732573][ T6018] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 90.732592][ T6018] RSP: 002b:00007fd6d5d37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 90.732617][ T6018] RAX: 000000000000002f RBX: 00007fd6d7525fa0 RCX: 00007fd6d72cf6c9 [ 90.732634][ T6018] RDX: 0000000000010002 RSI: 0000200000000580 RDI: 0000000000000006 [ 90.732673][ T6018] RBP: 00007fd6d5d37090 R08: 0000000000000000 R09: 0000000000000000 [ 90.732689][ T6018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.732705][ T6018] R13: 00007fd6d7526038 R14: 00007fd6d7525fa0 R15: 00007ffefac18e38 [ 90.732787][ T6018] [ 90.991809][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.098092][ T6034] vhci_hcd: invalid port number 9 [ 91.103189][ T6034] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 91.144312][ T6034] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 91.218772][ T6041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.736'. [ 91.257083][ T6046] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=6046 comm=syz.3.738 [ 91.269573][ T6046] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6046 comm=syz.3.738 [ 91.281455][ T6041] SELinux: failed to load policy [ 91.388229][ T6050] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6050 comm=syz.1.740 [ 91.422431][ T6053] loop1: detected capacity change from 0 to 512 [ 91.429242][ T6053] EXT4-fs: dax option not supported [ 91.483026][ T6053] loop1: detected capacity change from 0 to 128 [ 91.491802][ T6053] serio: Serial port ptm1 [ 91.530719][ T6056] netlink: 'syz.5.742': attribute type 30 has an invalid length. [ 91.679893][ T29] kauditd_printk_skb: 760 callbacks suppressed [ 91.679997][ T29] audit: type=1326 audit(1763047967.865:4080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6057 comm="syz.5.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc529e8f6c9 code=0x7ffc0000 [ 91.710702][ T29] audit: type=1326 audit(1763047967.865:4081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6057 comm="syz.5.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc529e8f6c9 code=0x7ffc0000 [ 91.734145][ T29] audit: type=1326 audit(1763047967.875:4082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6057 comm="syz.5.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc529e8f6c9 code=0x7ffc0000 [ 91.757652][ T29] audit: type=1326 audit(1763047967.875:4083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6057 comm="syz.5.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc529e8f6c9 code=0x7ffc0000 [ 91.781350][ T29] audit: type=1326 audit(1763047967.875:4084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6057 comm="syz.5.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc529e8f6c9 code=0x7ffc0000 [ 91.804885][ T29] audit: type=1326 audit(1763047967.875:4085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6057 comm="syz.5.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc529e8f6c9 code=0x7ffc0000 [ 91.828545][ T29] audit: type=1326 audit(1763047967.875:4086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6057 comm="syz.5.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc529e8f6c9 code=0x7ffc0000 [ 91.851938][ T29] audit: type=1326 audit(1763047967.895:4087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6057 comm="syz.5.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc529e8f6c9 code=0x7ffc0000 [ 91.878450][ T29] audit: type=1326 audit(1763047967.895:4088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6057 comm="syz.5.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc529e8f6c9 code=0x7ffc0000 [ 91.901966][ T29] audit: type=1326 audit(1763047967.905:4089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6057 comm="syz.5.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc529e8f6c9 code=0x7ffc0000 [ 91.945720][ T6062] netlink: 83992 bytes leftover after parsing attributes in process `+}[@'. [ 91.954859][ T6062] netlink: zone id is out of range [ 91.960097][ T6062] netlink: zone id is out of range [ 91.965538][ T6062] netlink: zone id is out of range [ 91.970716][ T6062] netlink: zone id is out of range [ 91.976172][ T6062] netlink: zone id is out of range [ 91.989633][ T6062] netlink: zone id is out of range [ 91.995364][ T6062] netlink: zone id is out of range [ 92.010499][ T6062] netlink: zone id is out of range [ 92.016458][ T6062] netlink: zone id is out of range [ 92.051593][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 92.059521][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 92.067770][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3 [ 92.076744][ T10] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 92.109968][ T6071] fido_id[6071]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 92.185883][ T6078] loop2: detected capacity change from 0 to 1024 [ 92.192807][ T6078] EXT4-fs: Ignoring removed orlov option [ 92.222570][ T6076] infiniband syz!: set active [ 92.227524][ T6076] infiniband syz!: added team_slave_0 [ 92.241603][ T6076] RDS/IB: syz!: added [ 92.246840][ T6076] smc: adding ib device syz! with port count 1 [ 92.253647][ T6076] smc: ib device syz! port 1 has no pnetid [ 92.297422][ T6083] netlink: '+}[@': attribute type 4 has an invalid length. [ 92.462472][ T6088] loop1: detected capacity change from 0 to 1024 [ 92.476422][ T6088] EXT4-fs: Ignoring removed orlov option [ 92.482490][ T6088] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.547556][ T6097] loop0: detected capacity change from 0 to 1024 [ 92.555527][ T6097] EXT4-fs: Ignoring removed orlov option [ 92.681639][ T6102] 9pnet_fd: Insufficient options for proto=fd [ 92.711079][ T6111] team0: Device vxcan3 is of different type [ 92.732665][ T6109] xt_CT: You must specify a L4 protocol and not use inversions on it [ 92.877890][ T6116] IPVS: set_ctl: invalid protocol: 115 10.1.1.2:20004 [ 92.895417][ T6116] netlink: 56 bytes leftover after parsing attributes in process `syz.5.762'. [ 92.912317][ T6118] loop1: detected capacity change from 0 to 1024 [ 92.951966][ T6121] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 92.977066][ T6118] EXT4-fs: inline encryption not supported [ 93.026014][ T6118] EXT4-fs (loop1): orphan cleanup on readonly fs [ 93.041421][ T6118] EXT4-fs (loop1): 1 truncate cleaned up [ 93.458568][ T6143] IPVS: set_ctl: invalid protocol: 115 10.1.1.2:20004 [ 93.466575][ T6143] netlink: 56 bytes leftover after parsing attributes in process `syz.1.772'. [ 93.508475][ T6138] loop5: detected capacity change from 0 to 8192 [ 93.512088][ T6146] loop1: detected capacity change from 0 to 512 [ 93.539704][ T6146] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 93.560577][ T6146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.773'. [ 93.572509][ T6141] 9pnet_fd: Insufficient options for proto=fd [ 93.702143][ T6162] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 93.723747][ T6162] SELinux: failed to load policy [ 93.904094][ T6172] IPVS: set_ctl: invalid protocol: 115 10.1.1.2:20004 [ 93.930205][ T6172] netlink: 56 bytes leftover after parsing attributes in process `syz.2.783'. [ 93.970382][ T6173] loop1: detected capacity change from 0 to 512 [ 94.097857][ T6175] usb usb7: usbfs: process 6175 (syz.2.784) did not claim interface 0 before use [ 94.253778][ T6173] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 94.262024][ T6173] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #13: comm syz.1.780: iget: bad i_size value: 12154757448730 [ 94.280898][ T6173] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.780: couldn't read orphan inode 13 (err -117) [ 94.302360][ T6166] ip6t_srh: unknown srh match flags 4000 [ 94.310971][ T6166] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=6166 comm=syz.1.780 [ 94.517689][ T6200] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 94.527519][ T6200] SELinux: failed to load policy [ 94.556686][ T6205] IPVS: set_ctl: invalid protocol: 115 10.1.1.2:20004 [ 94.564347][ T6205] netlink: 56 bytes leftover after parsing attributes in process `syz.0.794'. [ 94.600039][ T6206] netlink: 56 bytes leftover after parsing attributes in process `syz.2.793'. [ 94.673644][ T6206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.793'. [ 94.682578][ T6206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.690087][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.708465][ T6206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.716128][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.828972][ T6230] loop0: detected capacity change from 0 to 512 [ 94.837698][ T6230] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 94.854741][ T6230] EXT4-fs (loop0): 1 truncate cleaned up [ 95.007996][ T6242] loop1: detected capacity change from 0 to 1024 [ 95.026401][ T6242] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.805: Invalid block bitmap block 0 in block_group 0 [ 95.051322][ T6242] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.805: Failed to acquire dquot type 0 [ 95.062788][ T6242] EXT4-fs error (device loop1): ext4_free_blocks:6706: comm syz.1.805: Freeing blocks not in datazone - block = 0, count = 4096 [ 95.076487][ T6242] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.805: Invalid inode bitmap blk 0 in block_group 0 [ 95.089192][ T6242] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 95.097827][ T5531] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:63: Failed to release dquot type 0 [ 95.113494][ T6242] EXT4-fs (loop1): 1 orphan inode deleted [ 95.221866][ T6252] usb usb7: usbfs: process 6252 (syz.1.808) did not claim interface 0 before use [ 95.282384][ T6261] FAULT_INJECTION: forcing a failure. [ 95.282384][ T6261] name failslab, interval 1, probability 0, space 0, times 0 [ 95.295397][ T6261] CPU: 0 UID: 0 PID: 6261 Comm: wޣ Not tainted syzkaller #0 PREEMPT(voluntary) [ 95.295423][ T6261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 95.295434][ T6261] Call Trace: [ 95.295440][ T6261] [ 95.295446][ T6261] __dump_stack+0x1d/0x30 [ 95.295467][ T6261] dump_stack_lvl+0xe8/0x140 [ 95.295518][ T6261] dump_stack+0x15/0x1b [ 95.295534][ T6261] should_fail_ex+0x265/0x280 [ 95.295551][ T6261] ? audit_log_d_path+0x8d/0x150 [ 95.295611][ T6261] should_failslab+0x8c/0xb0 [ 95.295639][ T6261] __kmalloc_cache_noprof+0x4c/0x4a0 [ 95.295675][ T6261] audit_log_d_path+0x8d/0x150 [ 95.295695][ T6261] audit_log_d_path_exe+0x42/0x70 [ 95.295722][ T6261] audit_log_task+0x1e9/0x250 [ 95.295753][ T6261] ? kstrtouint+0x76/0xc0 [ 95.295835][ T6261] audit_seccomp+0x61/0x100 [ 95.295870][ T6261] ? __seccomp_filter+0x82d/0x1250 [ 95.295953][ T6261] __seccomp_filter+0x83e/0x1250 [ 95.295979][ T6261] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 95.296009][ T6261] ? vfs_write+0x7e8/0x960 [ 95.296094][ T6261] ? __rcu_read_unlock+0x4f/0x70 [ 95.296117][ T6261] ? __fget_files+0x184/0x1c0 [ 95.296190][ T6261] __secure_computing+0x82/0x150 [ 95.296216][ T6261] syscall_trace_enter+0xcf/0x1e0 [ 95.296312][ T6261] do_syscall_64+0xac/0x200 [ 95.296370][ T6261] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 95.296395][ T6261] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 95.296426][ T6261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.296449][ T6261] RIP: 0033:0x7fe8dc1cf6c9 [ 95.296463][ T6261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.296480][ T6261] RSP: 002b:00007fe8dac2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000006a [ 95.296515][ T6261] RAX: ffffffffffffffda RBX: 00007fe8dc425fa0 RCX: 00007fe8dc1cf6c9 [ 95.296542][ T6261] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 95.296553][ T6261] RBP: 00007fe8dac2f090 R08: 0000000000000000 R09: 0000000000000000 [ 95.296626][ T6261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.296637][ T6261] R13: 00007fe8dc426038 R14: 00007fe8dc425fa0 R15: 00007fffe7f7fb78 [ 95.296654][ T6261] [ 95.542763][ T6263] loop2: detected capacity change from 0 to 256 [ 95.591725][ T6263] lo speed is unknown, defaulting to 1000 [ 95.610495][ T6263] lo speed is unknown, defaulting to 1000 [ 95.616732][ T6263] lo speed is unknown, defaulting to 1000 [ 95.698656][ T6263] infiniband sz1: set down [ 95.703274][ T6263] infiniband sz1: added lo [ 95.708782][ T3394] lo speed is unknown, defaulting to 1000 [ 95.720360][ T6263] RDS/IB: sz1: added [ 95.725465][ T6263] smc: adding ib device sz1 with port count 1 [ 95.731791][ T6263] smc: ib device sz1 port 1 has no pnetid [ 95.745892][ T36] lo speed is unknown, defaulting to 1000 [ 95.751716][ T6263] lo speed is unknown, defaulting to 1000 [ 95.849351][ T6286] netlink: 60 bytes leftover after parsing attributes in process `syz.0.821'. [ 95.906665][ T6263] lo speed is unknown, defaulting to 1000 [ 96.048512][ T6263] lo speed is unknown, defaulting to 1000 [ 96.095969][ T6263] lo speed is unknown, defaulting to 1000 [ 96.141769][ T6306] program syz.3.828 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.170138][ T6263] lo speed is unknown, defaulting to 1000 [ 96.177712][ T6306] program syz.3.828 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.216129][ T6306] program syz.3.828 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.253180][ T6306] program syz.3.828 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.253353][ T6309] ref_ctr_offset mismatch. inode: 0x34d offset: 0x0 ref_ctr_offset(old): 0x5c ref_ctr_offset(new): 0x200000000180 [ 96.277972][ T6306] program syz.3.828 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.295171][ T6306] program syz.3.828 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.304885][ T6306] program syz.3.828 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.315405][ T6263] lo speed is unknown, defaulting to 1000 [ 96.397227][ T6321] netlink: 8 bytes leftover after parsing attributes in process `syz.5.833'. [ 96.406882][ T6319] loop0: detected capacity change from 0 to 1024 [ 96.443759][ T6319] EXT4-fs: Ignoring removed orlov option [ 96.510168][ T6321] SELinux: failed to load policy [ 96.531122][ T6322] FAULT_INJECTION: forcing a failure. [ 96.531122][ T6322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.544295][ T6322] CPU: 1 UID: 0 PID: 6322 Comm: syz.3.831 Not tainted syzkaller #0 PREEMPT(voluntary) [ 96.544390][ T6322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 96.544407][ T6322] Call Trace: [ 96.544416][ T6322] [ 96.544427][ T6322] __dump_stack+0x1d/0x30 [ 96.544457][ T6322] dump_stack_lvl+0xe8/0x140 [ 96.544485][ T6322] dump_stack+0x15/0x1b [ 96.544576][ T6322] should_fail_ex+0x265/0x280 [ 96.544605][ T6322] should_fail+0xb/0x20 [ 96.544621][ T6322] should_fail_usercopy+0x1a/0x20 [ 96.544649][ T6322] copy_folio_from_iter_atomic+0x278/0x11b0 [ 96.544761][ T6322] ? shmem_write_begin+0xa8/0x190 [ 96.544787][ T6322] ? shmem_write_begin+0xe1/0x190 [ 96.544815][ T6322] generic_perform_write+0x2c2/0x490 [ 96.544926][ T6322] shmem_file_write_iter+0xc5/0xf0 [ 96.544998][ T6322] aio_write+0x2e5/0x410 [ 96.545048][ T6322] io_submit_one+0xacd/0x11d0 [ 96.545101][ T6322] __se_sys_io_submit+0xfb/0x280 [ 96.545191][ T6322] __x64_sys_io_submit+0x43/0x50 [ 96.545230][ T6322] x64_sys_call+0x2d6c/0x3000 [ 96.545279][ T6322] do_syscall_64+0xd2/0x200 [ 96.545304][ T6322] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 96.545337][ T6322] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 96.545383][ T6322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.545465][ T6322] RIP: 0033:0x7f0dd0a2f6c9 [ 96.545485][ T6322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.545654][ T6322] RSP: 002b:00007f0dcf46e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 96.545736][ T6322] RAX: ffffffffffffffda RBX: 00007f0dd0c86090 RCX: 00007f0dd0a2f6c9 [ 96.545751][ T6322] RDX: 0000200000000540 RSI: 000000000000003b RDI: 00007f0dcf445000 [ 96.545766][ T6322] RBP: 00007f0dcf46e090 R08: 0000000000000000 R09: 0000000000000000 [ 96.545780][ T6322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.545794][ T6322] R13: 00007f0dd0c86128 R14: 00007f0dd0c86090 R15: 00007fff2a719e28 [ 96.545817][ T6322] [ 96.713308][ T29] kauditd_printk_skb: 308 callbacks suppressed [ 96.713328][ T29] audit: type=1326 audit(1763047972.735:4395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6318 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff40931df10 code=0x7ffc0000 [ 96.783034][ T29] audit: type=1326 audit(1763047972.735:4396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6318 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7ff40931e417 code=0x7ffc0000 [ 96.806312][ T29] audit: type=1326 audit(1763047972.735:4397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6318 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff40931df10 code=0x7ffc0000 [ 96.829699][ T29] audit: type=1326 audit(1763047972.735:4398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6318 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40931f6c9 code=0x7ffc0000 [ 96.853176][ T29] audit: type=1326 audit(1763047972.735:4399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6318 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40931f6c9 code=0x7ffc0000 [ 96.876543][ T29] audit: type=1326 audit(1763047972.735:4400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6318 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff40931f6c9 code=0x7ffc0000 [ 96.899886][ T29] audit: type=1326 audit(1763047972.735:4401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6318 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40931f6c9 code=0x7ffc0000 [ 96.923251][ T29] audit: type=1326 audit(1763047972.735:4402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6318 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40931f6c9 code=0x7ffc0000 [ 96.946684][ T29] audit: type=1326 audit(1763047972.745:4403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6318 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff40931f6c9 code=0x7ffc0000 [ 96.970038][ T29] audit: type=1326 audit(1763047972.745:4404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6318 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40931f6c9 code=0x7ffc0000 [ 97.038686][ T6326] xt_CT: You must specify a L4 protocol and not use inversions on it [ 97.168560][ T6340] netlink: 16 bytes leftover after parsing attributes in process `syz.5.838'. [ 97.227357][ T6343] loop5: detected capacity change from 0 to 128 [ 97.282914][ T6345] loop5: detected capacity change from 0 to 512 [ 97.314960][ T6345] EXT4-fs: Ignoring removed i_version option [ 97.370600][ T6345] ext4 filesystem being mounted at /142/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.398534][ T6357] FAULT_INJECTION: forcing a failure. [ 97.398534][ T6357] name failslab, interval 1, probability 0, space 0, times 0 [ 97.411353][ T6357] CPU: 1 UID: 0 PID: 6357 Comm: syz.0.843 Not tainted syzkaller #0 PREEMPT(voluntary) [ 97.411380][ T6357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 97.411392][ T6357] Call Trace: [ 97.411399][ T6357] [ 97.411407][ T6357] __dump_stack+0x1d/0x30 [ 97.411434][ T6357] dump_stack_lvl+0xe8/0x140 [ 97.411507][ T6357] dump_stack+0x15/0x1b [ 97.411531][ T6357] should_fail_ex+0x265/0x280 [ 97.411554][ T6357] should_failslab+0x8c/0xb0 [ 97.411588][ T6357] kmem_cache_alloc_noprof+0x50/0x480 [ 97.411646][ T6357] ? audit_log_start+0x342/0x720 [ 97.411725][ T6357] audit_log_start+0x342/0x720 [ 97.411761][ T6357] ? kstrtouint+0x76/0xc0 [ 97.411847][ T6357] audit_seccomp+0x48/0x100 [ 97.411889][ T6357] ? __seccomp_filter+0x82d/0x1250 [ 97.411973][ T6357] __seccomp_filter+0x83e/0x1250 [ 97.412002][ T6357] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 97.412042][ T6357] ? vfs_write+0x7e8/0x960 [ 97.412083][ T6357] __secure_computing+0x82/0x150 [ 97.412170][ T6357] syscall_trace_enter+0xcf/0x1e0 [ 97.412205][ T6357] do_syscall_64+0xac/0x200 [ 97.412257][ T6357] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 97.412285][ T6357] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 97.412338][ T6357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.412367][ T6357] RIP: 0033:0x7ff40931f6c9 [ 97.412383][ T6357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.412407][ T6357] RSP: 002b:00007ff407d7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 97.412452][ T6357] RAX: ffffffffffffffda RBX: 00007ff409575fa0 RCX: 00007ff40931f6c9 [ 97.412470][ T6357] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 97.412483][ T6357] RBP: 00007ff407d7f090 R08: 0000000000000000 R09: 0000000000000000 [ 97.412508][ T6357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.412520][ T6357] R13: 00007ff409576038 R14: 00007ff409575fa0 R15: 00007fff41174c48 [ 97.412539][ T6357] [ 97.640932][ T3611] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz-executor: Failed to acquire dquot type 0 [ 97.719981][ T6362] usb usb7: usbfs: process 6362 (syz.3.845) did not claim interface 0 before use [ 97.888959][ T5476] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.955658][ T5476] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.025778][ T5476] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.062523][ T6376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.851'. [ 98.075718][ T5476] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.120896][ T6370] lo speed is unknown, defaulting to 1000 [ 98.182068][ T6387] SELinux: policydb version 0 does not match my version range 15-35 [ 98.193609][ T6387] SELinux: failed to load policy [ 98.250584][ T6387] loop2: detected capacity change from 0 to 4096 [ 98.266522][ T6387] EXT4-fs (loop2): unsupported descriptor size 255 [ 98.277971][ T6391] loop0: detected capacity change from 0 to 512 [ 98.284907][ T6387] netlink: 21088 bytes leftover after parsing attributes in process `syz.2.853'. [ 98.299683][ T6391] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.854: corrupted in-inode xattr: e_value size too large [ 98.321219][ T6391] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.854: couldn't read orphan inode 15 (err -117) [ 98.447831][ T5476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.462613][ T5476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.474517][ T5476] bond0 (unregistering): Released all slaves [ 98.477830][ T6399] random: crng reseeded on system resumption [ 98.505060][ T6397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.855'. [ 98.539338][ T5476] tipc: Disabling bearer [ 98.544877][ T5476] tipc: Left network mode [ 98.578954][ T6371] lo speed is unknown, defaulting to 1000 [ 98.596663][ T6403] netlink: 108 bytes leftover after parsing attributes in process `syz.2.857'. [ 98.644129][ T6405] loop2: detected capacity change from 0 to 1024 [ 98.652351][ T6405] EXT4-fs: inline encryption not supported [ 98.669664][ T6405] EXT4-fs (loop2): orphan cleanup on readonly fs [ 98.713322][ T6405] EXT4-fs (loop2): 1 truncate cleaned up [ 98.775824][ T5476] hsr_slave_0: left promiscuous mode [ 98.786626][ T5476] hsr_slave_1: left promiscuous mode [ 98.794149][ T5476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.801571][ T5476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.812148][ T5476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.819757][ T5476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.828552][ T5476] batman_adv: batadv0: Interface deactivated: dummy0 [ 98.835431][ T5476] batman_adv: batadv0: Removing interface: dummy0 [ 98.875186][ T5476] veth1_macvtap: left promiscuous mode [ 98.880810][ T5476] veth0_macvtap: left promiscuous mode [ 98.948877][ T6411] loop1: detected capacity change from 0 to 164 [ 98.973011][ T5476] team0 (unregistering): Port device team_slave_0 removed [ 98.996165][ T6411] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 99.057094][ T3394] infiniband syz1: ib_query_port failed (-19) [ 99.111978][ T6371] chnl_net:caif_netlink_parms(): no params data found [ 99.119277][ T6411] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 99.136970][ T6411] rock: directory entry would overflow storage [ 99.143280][ T6411] rock: sig=0x4f50, size=4, remaining=3 [ 99.148871][ T6411] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 99.175644][ T6425] SELinux: policydb version 0 does not match my version range 15-35 [ 99.187479][ T6425] SELinux: failed to load policy [ 99.205116][ T6371] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.212244][ T6371] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.212703][ T6411] netlink: 20 bytes leftover after parsing attributes in process `syz.1.860'. [ 99.231307][ T6371] bridge_slave_0: entered allmulticast mode [ 99.238158][ T6371] bridge_slave_0: entered promiscuous mode [ 99.256352][ T6425] loop0: detected capacity change from 0 to 4096 [ 99.265012][ T6371] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.272097][ T6371] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.292563][ T6425] EXT4-fs (loop0): unsupported descriptor size 255 [ 99.307474][ T6371] bridge_slave_1: entered allmulticast mode [ 99.329172][ T6371] bridge_slave_1: entered promiscuous mode [ 99.356152][ T6425] netlink: 21088 bytes leftover after parsing attributes in process `syz.0.864'. [ 99.375570][ T6371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.394741][ T6371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.405361][ T6440] loop2: detected capacity change from 0 to 1024 [ 99.416311][ T6440] EXT4-fs: Ignoring removed orlov option [ 99.451295][ T6444] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6444 comm=syz.3.869 [ 99.474535][ T6440] EXT4-fs mount: 22 callbacks suppressed [ 99.474548][ T6440] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.496688][ T6371] team0: Port device team_slave_0 added [ 99.503454][ T6371] team0: Port device team_slave_1 added [ 99.525255][ T6371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.532303][ T6371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.558320][ T6371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.582599][ T6371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.589656][ T6371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.615838][ T6371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.674378][ T6453] xt_CT: You must specify a L4 protocol and not use inversions on it [ 99.714718][ T6371] hsr_slave_0: entered promiscuous mode [ 99.721429][ T6371] hsr_slave_1: entered promiscuous mode [ 99.739657][ T6371] debugfs: 'hsr0' already exists in 'hsr' [ 99.745463][ T6371] Cannot create hsr debugfs directory [ 99.992856][ T6371] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 100.019388][ T6371] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 100.029554][ T6371] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 100.038851][ T6476] netlink: 24 bytes leftover after parsing attributes in process `syz.3.874'. [ 100.051140][ T6371] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 100.102235][ T6371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.122252][ T6475] loop1: detected capacity change from 0 to 1024 [ 100.135867][ T6371] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.149108][ T5531] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.156373][ T5531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.168379][ T6475] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 100.178281][ T6475] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 100.205029][ T5531] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.210224][ T6484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.879'. [ 100.212167][ T5531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.223211][ T6475] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 100.239692][ T5503] Bluetooth: hci0: Frame reassembly failed (-84) [ 100.242219][ T6475] EXT4-fs error (device loop1): ext4_get_journal_inode:5808: inode #5: comm syz.1.878: unexpected bad inode w/o EXT4_IGET_BAD [ 100.259692][ T6475] EXT4-fs (loop1): no journal found [ 100.264985][ T6475] EXT4-fs (loop1): can't get journal size [ 100.294036][ T6475] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.385095][ T6371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.393296][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.529523][ T6509] loop2: detected capacity change from 0 to 1024 [ 100.538119][ T6509] EXT4-fs: Ignoring removed orlov option [ 100.560267][ T6509] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.630669][ T6371] veth0_vlan: entered promiscuous mode [ 100.644121][ T6371] veth1_vlan: entered promiscuous mode [ 100.661479][ T6371] veth0_macvtap: entered promiscuous mode [ 100.668890][ T6371] veth1_macvtap: entered promiscuous mode [ 100.680519][ T6371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.692021][ T6371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.706652][ T5500] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.714378][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.885'. [ 100.721686][ T6520] xt_CT: You must specify a L4 protocol and not use inversions on it [ 100.743704][ T5503] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.766328][ T5503] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.775976][ T5503] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.874773][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.019537][ T6542] SELinux: failed to load policy [ 101.041578][ T6544] veth2: entered promiscuous mode [ 101.046700][ T6544] veth2: entered allmulticast mode [ 101.061810][ T6509] ================================================================== [ 101.069935][ T6509] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 101.077863][ T6509] [ 101.080198][ T6509] write to 0xffff88811a0d1844 of 4 bytes by task 6519 on cpu 0: [ 101.087847][ T6509] xas_set_mark+0x12b/0x140 [ 101.092396][ T6509] __folio_start_writeback+0x155/0x390 [ 101.097910][ T6509] ext4_bio_write_folio+0x5ad/0x9f0 [ 101.103138][ T6509] mpage_process_page_bufs+0x4a1/0x620 [ 101.108630][ T6509] mpage_prepare_extent_to_map+0x786/0xc00 [ 101.114458][ T6509] ext4_do_writepages+0xa05/0x2750 [ 101.119578][ T6509] ext4_writepages+0x176/0x300 [ 101.124359][ T6509] do_writepages+0x1c6/0x310 [ 101.128955][ T6509] file_write_and_wait_range+0x156/0x2c0 [ 101.134609][ T6509] generic_buffers_fsync_noflush+0x45/0x120 [ 101.140523][ T6509] ext4_sync_file+0x1ab/0x690 [ 101.145221][ T6509] vfs_fsync_range+0x10d/0x130 [ 101.150006][ T6509] ext4_buffered_write_iter+0x34f/0x3c0 [ 101.155565][ T6509] ext4_file_write_iter+0x387/0xf60 [ 101.160777][ T6509] iter_file_splice_write+0x666/0xa60 [ 101.166160][ T6509] direct_splice_actor+0x156/0x2a0 [ 101.171327][ T6509] splice_direct_to_actor+0x312/0x680 [ 101.176708][ T6509] do_splice_direct+0xda/0x150 [ 101.181498][ T6509] do_sendfile+0x380/0x650 [ 101.185970][ T6509] __x64_sys_sendfile64+0x105/0x150 [ 101.191192][ T6509] x64_sys_call+0x2bb4/0x3000 [ 101.195910][ T6509] do_syscall_64+0xd2/0x200 [ 101.200428][ T6509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.206349][ T6509] [ 101.208680][ T6509] read to 0xffff88811a0d1844 of 4 bytes by task 6509 on cpu 1: [ 101.216225][ T6509] __writeback_single_inode+0x1f9/0x7c0 [ 101.221866][ T6509] writeback_single_inode+0x16d/0x3f0 [ 101.227255][ T6509] sync_inode_metadata+0x5b/0x90 [ 101.232215][ T6509] generic_buffers_fsync_noflush+0xd9/0x120 [ 101.238128][ T6509] ext4_sync_file+0x1ab/0x690 [ 101.242816][ T6509] vfs_fsync_range+0x10d/0x130 [ 101.247599][ T6509] ext4_buffered_write_iter+0x34f/0x3c0 [ 101.253160][ T6509] ext4_file_write_iter+0x387/0xf60 [ 101.258372][ T6509] iter_file_splice_write+0x666/0xa60 [ 101.263756][ T6509] direct_splice_actor+0x156/0x2a0 [ 101.268878][ T6509] splice_direct_to_actor+0x312/0x680 [ 101.274266][ T6509] do_splice_direct+0xda/0x150 [ 101.279054][ T6509] do_sendfile+0x380/0x650 [ 101.283499][ T6509] __x64_sys_sendfile64+0x105/0x150 [ 101.288726][ T6509] x64_sys_call+0x2bb4/0x3000 [ 101.293429][ T6509] do_syscall_64+0xd2/0x200 [ 101.297947][ T6509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.303852][ T6509] [ 101.306183][ T6509] value changed: 0x0a000021 -> 0x04000021 [ 101.311924][ T6509] [ 101.314304][ T6509] Reported by Kernel Concurrency Sanitizer on: [ 101.320472][ T6509] CPU: 1 UID: 0 PID: 6509 Comm: syz.2.884 Not tainted syzkaller #0 PREEMPT(voluntary) [ 101.330119][ T6509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 101.340180][ T6509] ================================================================== [ 101.495640][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.233232][ T3534] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 102.233310][ T6485] Bluetooth: hci0: command 0x1003 tx timeout