last executing test programs: 4m16.119179705s ago: executing program 3 (id=3888): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r4], 0x38}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) 4m16.100278877s ago: executing program 3 (id=3889): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000540)={[{@nouser_xattr}, {@nolazytime}, {}, {@inlinecrypt}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x5}}, {@delalloc}, {@mblk_io_submit}, {@nodiscard}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") fsmount(0xffffffffffffffff, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0xc, &(0x7f00000024c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r1}, 0x18) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') writev(r2, &(0x7f0000000240)=[{&(0x7f0000000080)='=', 0x1}], 0x1) socket$netlink(0x10, 0x3, 0x14) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb08230001080006040001000000000000000000000180c200000e00000000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x6, 0x0) 4m15.178390077s ago: executing program 3 (id=3898): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r1, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r3 = socket(0x10, 0x3, 0x0) msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x3, 0x0, 0x1, 0x8, 0x7f, 0x3}) sendmsg$nl_route(r3, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NHA_GROUP={0x1c, 0x2, [{0x0, 0x4}, {0x1, 0xa}, {0x2, 0x8f}]}, @NHA_FDB={0x4}, @NHA_FDB={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) acct(&(0x7f00000001c0)='./file0\x00') syz_emit_ethernet(0xfdef, 0x0, 0x0) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, 0x0) 4m14.915796322s ago: executing program 3 (id=3900): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000b8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_sctp(0xa, 0x4528f0dd617f40ed, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1c, 0xc, &(0x7f0000000bc0)=ANY=[@ANYRES8=r1], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x18, 0x803, 0x55) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10001, 0x1, 0x3, 0x8, 0xffffffc0}, 0x4, 0x1, 0x8, 0x0, 0x3, 0x0, 0x16, 0x13, 0x3, 0xca, {0x0, 0x8, 0x3, 0x5, 0x84, 0x8}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newchain={0x24, 0x64, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x10, 0x1}, {0xfff3, 0x9}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x44851}, 0x20040054) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300)={0x0, 0xffff}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='cachefiles_mark_inactive\x00', 0xffffffffffffffff, 0x0, 0x100000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) select(0x20000088, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300}, &(0x7f0000000200)={0x0, 0x2710}) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000000040), 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000200), 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r8, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xe8038437e945a2fc}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYRESOCT=r8, @ANYRESHEX=r6], 0x24}}, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000500)={0x110c230000, 0x3, 0x2}) 4m14.758129229s ago: executing program 3 (id=3904): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000005c0)={[{@jqfmt_vfsold}, {@orlov}, {@user_xattr}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@nodiscard}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00\x00\x00\x00\x00\x00\x00'}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 4m14.588027026s ago: executing program 3 (id=3907): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000480)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x48) utimes(&(0x7f0000000380)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ioprio_set$pid(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r5) socket$rds(0x15, 0x5, 0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0x2, 0x4, 0x350, 0xffffffff, 0x1b0, 0x1b0, 0x0, 0xfeffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0xff], [0xff000000], 'macsec0\x00', 'wg0\x00', {}, {0xff}, 0x133, 0x0, 0x5}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x5, 0x5}, {0xffffffffffffffff, 0x4, 0x4}, {0x0, 0x4, 0x4}, 0x5, 0x3c1d}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x3, 0xc4}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r9, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x10, 0x1, 0x3, 0x1, {{0x15, 0x4, 0x0, 0xf, 0x54, 0x67, 0x0, 0x9, 0x4, 0x0, @local, @multicast2, {[@cipso={0x86, 0xb, 0x1, [{0x7, 0x2}, {0x1ccf3683e3e430f2, 0x3, 'X'}]}, @timestamp={0x44, 0x28, 0x89, 0x0, 0xc, [0x2, 0x9, 0x3, 0x5, 0x7, 0x1400, 0x3, 0xffffffff, 0x7]}, @ssrr={0x89, 0xb, 0x31, [@multicast1, @private=0xa010102]}]}}}}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000880)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="00022cbd7000fedbdf25040000003400068008000700", @ANYRES32=r10, @ANYBLOB="08000300ac1e010108000300e000000108000300ac1414bb060005004e240000060005004e2100000800030000000000300001800500020007000000060005004e24000014000400fe88000000000000000000000000010106000100020000000c00068008000300ac1414aa05000500100000000800040000000100080002000700000004000680"], 0xa8}, 0x1, 0x0, 0x0, 0x24044041}, 0x4004080) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, 0x0) 3m59.526922684s ago: executing program 32 (id=3907): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000480)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x48) utimes(&(0x7f0000000380)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ioprio_set$pid(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r5) socket$rds(0x15, 0x5, 0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0x2, 0x4, 0x350, 0xffffffff, 0x1b0, 0x1b0, 0x0, 0xfeffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0xff], [0xff000000], 'macsec0\x00', 'wg0\x00', {}, {0xff}, 0x133, 0x0, 0x5}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x5, 0x5}, {0xffffffffffffffff, 0x4, 0x4}, {0x0, 0x4, 0x4}, 0x5, 0x3c1d}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x3, 0xc4}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r9, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x10, 0x1, 0x3, 0x1, {{0x15, 0x4, 0x0, 0xf, 0x54, 0x67, 0x0, 0x9, 0x4, 0x0, @local, @multicast2, {[@cipso={0x86, 0xb, 0x1, [{0x7, 0x2}, {0x1ccf3683e3e430f2, 0x3, 'X'}]}, @timestamp={0x44, 0x28, 0x89, 0x0, 0xc, [0x2, 0x9, 0x3, 0x5, 0x7, 0x1400, 0x3, 0xffffffff, 0x7]}, @ssrr={0x89, 0xb, 0x31, [@multicast1, @private=0xa010102]}]}}}}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000880)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="00022cbd7000fedbdf25040000003400068008000700", @ANYRES32=r10, @ANYBLOB="08000300ac1e010108000300e000000108000300ac1414bb060005004e240000060005004e2100000800030000000000300001800500020007000000060005004e24000014000400fe88000000000000000000000000010106000100020000000c00068008000300ac1414aa05000500100000000800040000000100080002000700000004000680"], 0xa8}, 0x1, 0x0, 0x0, 0x24044041}, 0x4004080) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, 0x0) 2m54.979594125s ago: executing program 0 (id=4653): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000007c0)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2m54.815718461s ago: executing program 0 (id=4658): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0x2}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000100)={'macvtap0\x00', @random="b40007350060"}) 2m54.754870138s ago: executing program 0 (id=4659): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @multicast, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x3, 0x8, 0x34, 0x67, 0x0, 0x7, 0x6, 0x0, @empty, @private=0xa010100}, @payload_direct={{{{0x20, 0x0, 0x1, 0x1, 0x1, 0x8, 0x2, 0x2, 0x9, 0x0, 0x1, 0xc, 0x5, 0x3, 0x3, 0xfffb, 0x2, 0x4e24, 0x4e24}, 0x1, 0x3}}}}}}}, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getcwd(&(0x7f0000000380)=""/20, 0x14) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x66) 2m54.687480454s ago: executing program 0 (id=4660): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b00"/12], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040018}, 0x0) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 2m54.646972068s ago: executing program 0 (id=4661): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r0, &(0x7f0000000180)='1\x00', 0x2) socket(0x1e, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r1, 0x12, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x503, 0x0, 0x25dfdbfb, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x2, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000100)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@igmp={{0xe, 0x4, 0x1, 0x6, 0xb9, 0x68, 0x0, 0xff, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, @dev={0xac, 0x14, 0x14, 0x20}, {[@rr={0x7, 0x1f, 0x8b, [@private=0xa010102, @multicast2, @rand_addr=0x64010102, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast2]}, @ra={0x94, 0x4, 0x1}]}}, {0x14, 0x1, 0x0, @local, "c6975072cfd871f86f2dc034f64abd929ce0cc1d27cc836ac7657032adfd8520803fcf77760210e3530651365ce9d63b0db2852cc6bb28cfc5c6e4a671b2af79866cbc04397ebc780e249dbe0188b4569ea6485c8d3a3c5b69239a776927578cd576500ec3d7e2c21208a0110e01bbe6eaba004de184c06a1b"}}}, 0xc7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'ipvlan0\x00', 0x7101}) write$cgroup_devices(r1, &(0x7f0000000a80)=ANY=[@ANYBLOB="63202a3a2a20727700d7fc2d05c5496827e2ce620b6b45f82d5cdad76f7acd785d25ab31b71b6d2e2eebe319843a5480a0c03ba59aa96c172e09c38a971e0bd9a5ee997a4137d84f98e5af7dd46825513dd1456efeba6d8c"], 0x9) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41000}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x4a, {0x2, 0x0, @multicast2}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)=ANY=[@ANYBLOB="27000000150500000000000027000000e200002008000340000000010900010073797b3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) open(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) preadv(r6, &(0x7f0000000a00)=[{&(0x7f0000000400)=""/179, 0xb4}, {&(0x7f0000000300)=""/230, 0xffffffffffffffc4}, {&(0x7f00000004c0)=""/247, 0xf7}, {&(0x7f00000005c0)=""/215, 0xd7}, {&(0x7f00000006c0)=""/227, 0xe3}, {&(0x7f00000007c0)=""/253, 0xfd}, {&(0x7f0000000180)=""/88, 0x58}], 0x7, 0x8, 0x3) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000140), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2m54.450214727s ago: executing program 0 (id=4663): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000100)={'macvtap0\x00', @random="b40007350060"}) 2m39.443146659s ago: executing program 33 (id=4663): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000100)={'macvtap0\x00', @random="b40007350060"}) 7.241907819s ago: executing program 1 (id=6384): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000070000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) unshare(0x62040200) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB="008000050000000000000000000000dee6def7", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000105002000800000000000000000000003000000000200000002"], &(0x7f0000000340)=""/142, 0x4e, 0xfeaf, 0x1}, 0x20) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xffffff5c) r6 = io_uring_setup(0x4c22, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x359}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x19, &(0x7f0000000300), 0x0) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x1a, &(0x7f0000000000)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x3, 0x1}}, {@generic={0x8864, "11703067c7e064cc"}}}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@allocspi={0x150, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0x2, 0x80, 0x20, 0x5e}, {@in=@private=0xa010100, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x7, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0xffffffffffffffff, 0x3, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x0, 0x4, 0x6, 0x1}, 0x8, 0x74f}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256-neon\x00'}, 0x0, 0x100}}, @offload={0xc}]}, 0x150}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) 5.980152083s ago: executing program 1 (id=6387): socket$inet6(0xa, 0x805, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'batadv_slave_0\x00', &(0x7f0000000640)=@ethtool_sset_info={0x37, 0x3, 0x7}}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfc}}, 0x6, 0x400}, &(0x7f0000000480)=0x90) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x5437, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x1f5a685a}, 0x4dc8, 0x10000, 0xfffffffc, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_io_uring_setup(0x37db, &(0x7f0000000240)={0x0, 0x6ba5, 0x8, 0x0, 0x2f5}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd=r3, 0x0, 0x0}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='sched_switch\x00', r7}, 0x18) socket$netlink(0x10, 0x3, 0xe) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) getsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x8) 5.930720818s ago: executing program 2 (id=6388): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000540)={[{@nouser_xattr}, {@nolazytime}, {}, {@inlinecrypt}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x5}}, {@delalloc}, {@mblk_io_submit}, {@nodiscard}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") fsmount(0xffffffffffffffff, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000080000007b080000050000000100", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000010000000000000200"/28], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00'}, 0x18) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') writev(r0, &(0x7f0000000240)=[{&(0x7f0000000080)='=', 0x1}], 0x1) socket$netlink(0x10, 0x3, 0x14) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb08230001080006040001000000000000000000000180c200000e000000"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x6, 0x0) read(r3, &(0x7f0000032440)=""/102364, 0x18fdc) write$P9_RAUTH(r4, &(0x7f0000000a00)={0x14, 0x67, 0x2, {0x4}}, 0x14) 4.982835931s ago: executing program 2 (id=6396): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffa, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x281442, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="2300030000000000"], 0x8) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TCSETSW2(r3, 0x5453, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) futex(&(0x7f000000cffc)=0x1, 0x7, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) r4 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000340)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000a40)={0x60, 0x2, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffffff9, 0x0, 0x0, 0x7fff, 0x24, 0x8, 0x10, 0x3}) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x3) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x4c10, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.5619875s ago: executing program 5 (id=6404): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001400000000000000010000000100", @ANYRES32, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x160) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x1, r2, 0x1, 0x9}, 0x14) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x2000001, {0x0, 0x0, 0x0, r2, {0x7, 0xa}, {0xd, 0xffe0}, {0x8, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 3.46822608s ago: executing program 5 (id=6406): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@dioread_nolock}, {@acl}, {@usrjquota}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f00000026c0)="$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") 2.914397963s ago: executing program 5 (id=6410): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x3}, 0x10) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) 2.821409813s ago: executing program 5 (id=6412): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) unshare(0x62040200) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB="008000050000000000000000000000dee6def7", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000105002000800000000000000000000003000000000200000002"], &(0x7f0000000340)=""/142, 0x4e, 0xfeaf, 0x1}, 0x20) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xffffff5c) io_uring_setup(0x4c22, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x359}) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x1a, &(0x7f0000000000)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x3, 0x1}}, {@generic={0x8864, "11703067c7e064cc"}}}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@allocspi={0x150, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0x2, 0x80, 0x20, 0x5e}, {@in=@private=0xa010100, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x7, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0xffffffffffffffff, 0x3, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x0, 0x4, 0x6, 0x1}, 0x8, 0x74f}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256-neon\x00'}, 0x0, 0x100}}, @offload={0xc}]}, 0x150}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) 2.768018648s ago: executing program 2 (id=6413): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) listen(0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r6}, 0x10) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r4, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0x192}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}], 0x2}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x1}}], 0x3, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r7 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="03000000000000000a004e230000000cff010000000000000000000000000001f8ffffff000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003"], 0x210) setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xc2, @mcast1, 0x6}}, {{0xa, 0x4624, 0x9, @mcast2, 0xfffffe01}}}, 0x108) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000001900000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000feffffff000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000008b7030000000000008500000008000000bf09000000000000a5090100ffffff80bf00200000000100ad980000000000005e080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fdatasync(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.762061919s ago: executing program 4 (id=6414): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYBLOB="158804000300000008000d00010098d0ed4abc562af30000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000f8dbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='qdisc_reset\x00', 0xffffffffffffffff, 0x0, 0x20000000000000}, 0x18) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$cont(0x9, r4, 0x7, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_clone(0x2088c400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000c40)=ANY=[@ANYRES8, @ANYRES32=r1, @ANYRES8, @ANYRES16=r3, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x9) 2.619384122s ago: executing program 2 (id=6415): r0 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x280000, 0x4, 0x10009, 0x6}], 0x10, 0xfffffff6}, 0x94) sendmsg$kcm(r0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r3 = socket(0x10, 0x3, 0x0) r4 = msgget$private(0x0, 0x2) msgsnd(r4, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) msgctl$IPC_SET(r4, 0x1, &(0x7f00000004c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x3, 0x0, 0x1, 0x8, 0x7f, 0x3}) sendmsg$nl_route(r3, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NHA_GROUP={0x1c, 0x2, [{0x0, 0x4}, {0x1, 0xa}, {0x2, 0x8f}]}, @NHA_FDB={0x4}, @NHA_FDB={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) acct(&(0x7f00000001c0)='./file0\x00') syz_emit_ethernet(0xfdef, 0x0, 0x0) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, 0x0) 2.300729794s ago: executing program 6 (id=6416): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x6}, 0x14040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7647}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r5 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r5, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 1.574307765s ago: executing program 4 (id=6417): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001400000000000000010000000100", @ANYRES32, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x160) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x1, r2, 0x1, 0x9}, 0x14) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x2000001, {0x0, 0x0, 0x0, r2, {0x7, 0xa}, {0xd, 0xffe0}, {0x8, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 1.398054022s ago: executing program 6 (id=6418): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x3}, 0x10) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) 1.389508333s ago: executing program 4 (id=6419): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x2, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="5c00000000000000baa400000700000094047c0044145141ac141424000000007f00000100000006836cca00010a01010100000000ac1414aae000000200000000ac14140eac1e01010186106b1e243ae22c395dd70c4d15d5dd00000000"], 0x60}, 0x8000) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x804) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20048000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b40)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="1c000000004b7e00000009ef553d5ae4f83866aba3360daf59e57058f3a8a101b0f27922ee90c87e9e4adf38af361682fe4a6ea89135f79245003f08b1c1175d7b09fc43bb6f081f53cac7640b23565aa24dfeee103e60c3eb014b202f5d6da47e98e25ce284cbcc9cfd4c1a981fec3ef1834cf7f8028c6714e8b7c3afc8a70924dc4ddde1b6094d3f4308848ace94e6d1ba2cffcc7f6cdb93253a87d1a675bc0cf1cafc25d88005348f506668312ac1442bc5be371bc200b1fa8d8a881237d1617ddcc7368f00000000", @ANYBLOB="3f9000dc000030469bcc51c7ac24e431dad5d63c20e6fa3bc4ede44bb87f060100000000553e7c928080d2ef1a63ae6ff658a07662bc506550b78b866864357d0b990ce2ee8d743d8c2f6e2dcf3b95da1c1712f45b24ab97ce4c104cf935a50315d42d022acb9207ca575d570c01e5b762e3127ee803b9c3"], 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@dioread_nolock}, {@acl}, {@usrjquota}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f00000026c0)="$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") 1.352849507s ago: executing program 6 (id=6420): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="070000000400000000000000782f3ae890bd635c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000007750000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000040)=""/73}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003500)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd4d}, 0x41) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 1.243579488s ago: executing program 5 (id=6421): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) setreuid(0xee01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000080000000100000080000000", @ANYRES32, @ANYBLOB, @ANYRES8, @ANYRES32, @ANYBLOB="0000000000000012c5050000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x5, &(0x7f0000000580)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) munlockall() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000800)=ANY=[@ANYRESHEX=r1, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000950a4c08ef7fd81c7aba2df165abbbf1e46a419cd284202e96dbb488d1dba4e6bbcb4059b6579b45b382aa9cf25f091fabb89b1672f17d74ddcc0cc6930b4ac5185edd6986e8e1ad53b7fcaa37954bf27ddfe4ae3fadcc0ac3aa"], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r5, 0x6, 0x1f, 0x0, &(0x7f0000000200)) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 1.11438639s ago: executing program 2 (id=6422): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000200)) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000600)="e5f1fddfe175759743a2d6055bef6ad67f4806ff6ac3a93555c1b5b84294df29b09e92680ca8bd3dc842c3147716237f0ad0c3ab59f41083aeb894e76f3c7fc753f2fca40d24553fdd9396171c35ecfd0932f37aa306040bd37f78526b319e572be0ae8b40f01b3835c385e789683bed9c65ccd19545b738fb470ef7c7247c631882fe3cee1ad627ad729a685446e0c1b6ca16a98bececc6ed604084f0de672a6143", 0xa2}, {&(0x7f0000001840)="fa4930e2f7feb52241e739006ef78c0aeb4dd989f1bf69e01e4eb4bb743569e49e3db4ab502ed6980a5794e38f83ba0c77252adc9d177719cb1f7991ee501ad1ff9d69f88d4bb7a70b76402fd5b363", 0x4f}, {&(0x7f0000000840)="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", 0xa98}], 0x3}, 0x20000044) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r4, &(0x7f0000000280)={{0x107, 0x25, 0x9, 0x3ca, 0x146, 0x4, 0x154, 0x7fff}, "0dda4e896a38ec08ff6aeccada12334d3d24739da1107d9441821f14c13979aeb7a41907f7d108b524ddc6bb5977e7d9bb460981916f6a8fe064790c621346d063fbd438eaf6405068643e3b570e07e96a714d96c5c4437f29aeb0f523fd4a206791b7b1220bd9e7b4d3170282ac4d4b39fb71e603fbebdeaabf81eb8508d8b30c6f35c7e35bbd9df4b48ff79fa89ab6c6da981344f73d9d2b147e337af5f002a7a3d9e775483f2022d0edee1269ff98026d7d4926b2a9e5568d7d053d1f7b2234b2e439db60e317c45465b3599da29a692b91bc2bce5578f7b1e58fd5cc3642a7", ['\x00']}, 0x201) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) 1.069575464s ago: executing program 2 (id=6423): syz_usb_connect_ath9k(0x3, 0xfffffffffffffeec, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xffffffad}}]}}, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="1802000000000000000085f89f4307e221e5aebd15570d281e0e4b0edc4c46bf4bbde86b93224eae42a5138c4ba420551294263972717059ecf5ccfac47ca2889ec4c841fbd136746124df0555377c0b663c61ce0bd887222a09816589fad95ce34291885a9eb97a8097eb65334a1bc4cd503b46b199ff054210db2bcfeb9c2beb1e0a67c08d4e1a334990e067b2518a64c52893d4cc09d6ef64d396c68840d39968b67e45b72a47e3c616fc1de193658f2c02", @ANYRESOCT=r2], 0x0, 0x8000, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3, 0x0, 0x5}, 0x5f) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r6, 0x0, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000040)=0xfffffff7) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r9, &(0x7f0000000cc0)=ANY=[@ANYBLOB="7f454c4603040000ff7f08000000000002003e00ecffffff98030000000000004000000000000000560000000000000007000000000038000100000002000000030000000500000004000000000000000d20000000400000c8010000000000000c"], 0x678) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='kfree\x00', r10, 0x0, 0xf1c38fa000000000}, 0x18) close(r9) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x25, 0xbb8d02b3bcd9ded0, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 724.296068ms ago: executing program 6 (id=6424): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$inet6_udplite(0xa, 0x2, 0x88) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) 672.487584ms ago: executing program 4 (id=6425): r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4), 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 654.061245ms ago: executing program 6 (id=6426): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0xf8}, @TCA_MPLS_LABEL={0x8, 0x5, 0x199d2}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x9f, 0x10, 0x6, 0x88, 0x9c7}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008040}, 0x10) 514.015349ms ago: executing program 1 (id=6427): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x2, 0x7fe2, 0x3, 0x12}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x3}, 0x10) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) 478.604682ms ago: executing program 1 (id=6428): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB], 0xa4}}, 0x40) 399.86664ms ago: executing program 1 (id=6429): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000002cc0)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64=0x0, @ANYRESHEX], 0x8, 0x2ee, &(0x7f00000029c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000001100a200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0xad00ca360912be1d, 0x5, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50) io_uring_setup(0x49d4, &(0x7f0000000340)={0x0, 0x3a21, 0x8, 0x1, 0x2fa}) socket$inet6(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x3c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x10000, 0x0, 0x1}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5f, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff}}, 0x10) fcntl$notify(r6, 0x402, 0x8000001f) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x4) fcntl$notify(r7, 0x402, 0x8000003d) close_range(r6, r7, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r8 = socket(0x10, 0x3, 0x9) ioctl$PTP_SYS_OFFSET(r7, 0x43403d05, &(0x7f00000005c0)={0x8}) sendmsg$NFT_BATCH(r8, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000702000a"], 0x28}}, 0x0) 302.56969ms ago: executing program 4 (id=6430): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x10) close(r0) 293.888501ms ago: executing program 6 (id=6431): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000070000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) unshare(0x62040200) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB="008000050000000000000000000000dee6def7", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000105002000800000000000000000000003000000000200000002"], &(0x7f0000000340)=""/142, 0x4e, 0xfeaf, 0x1}, 0x20) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xffffff5c) r6 = io_uring_setup(0x4c22, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x359}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x19, &(0x7f0000000300), 0x0) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x1a, &(0x7f0000000000)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x3, 0x1}}, {@generic={0x8864, "11703067c7e064cc"}}}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@allocspi={0x150, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0x2, 0x80, 0x20, 0x5e}, {@in=@private=0xa010100, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x7, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0xffffffffffffffff, 0x3, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x0, 0x4, 0x6, 0x1}, 0x8, 0x74f}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256-neon\x00'}, 0x0, 0x100}}, @offload={0xc}]}, 0x150}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) 222.760028ms ago: executing program 4 (id=6432): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0xff, @loopback}], 0x1c) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x188, 0x194, 0x194, 0x188, 0x194, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x0, 0x74020000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x3, 0xf, {0x2}}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00', {}, {}, 0x11, 0x0, 0x44}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x4, 0x5, 0x3, 0x1, 0x2, 0x4], 0x4, 0x3}}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x5, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x5c}}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r5, 0x0, 0x200000000000006}, 0x18) migrate_pages(0x0, 0xfc, 0x0, &(0x7f0000000240)=0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) 100.4046ms ago: executing program 5 (id=6433): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@dioread_nolock}, {@acl}, {@usrjquota}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f00000026c0)="$eJzs28tvVNUfAPDvvX0APx7tD/EBolaJSaOxpQWVhRuNJsZgNNEFLms7kIaBGlqNIJFiDG5MDImujUujf4E7Y2LUlYlb3bgyJETZALqpuXfuLdNpp1A6ZWrn80lue869Z+ac79zXuefMBNCxBrI/ScS2iPg1Ivpq2YUFBmr/rl05O379ytnxJObmXvszyctdvXJ2vCxavm5rkRlMI9IPk6KShaZPnzk+Vq1WThX54ZkTbw1Pnz7zxDsnxo5VjlVOjh46dPDAyNNPjT7ZkjizuK7ueX9q7+4X37j48viRi2/++HXW3m3F9vo4WmUgC/yvuVzd6vxjerTVlbXZ9rp00t3GhrAiXRGR7a6e/Pzvi664sfP64oUP2to4YE1l96ZNzTfPzgEbWBLtbgHQHuWNPnv+LZc71PVYFy4/W3sAyuK+Viy1Ld2RFmV6Gp5vW2kgIo7M/v15tsQajUMAANT7ePyzw70R8d71r17K+h5981vSuCf//3v+d0cxh9IfEf+PiJ0RcVdE7IqIuyPysvdGxH2rbM/i/k96aZVvuays//dMMbe1sP9X9v6iv6vIbc/j70mOTlYr+4vPZDB6NmX5kWXq+Pb5Xz5ptq2+/5ctWf1lX7Box6XuhgG6ibGZsbxT2gKXz0fs6V4q/mR+JiCJiN0RsWdlb72jTEw+9uXeZoVuHv8yWjDPNPdFFt5sFv9sNMRfSurnJycXzU8Ob45qZf9weVQs9tPPF15tVv9AzN1+/C1wuRL/xMLjv7FIf1I/Xzu98jou/PZR02ea2zz+097k9XyeubdY9+7YzMypkYje5HCeX7B+9MZry3xZPjv+B/ctff7vLF6TxX9/RGQH8QMR8WBEPFS0/eGIeCQi9i0T/w/PNd9Wxh9pm/b/+YiJJa9/88d/w/5feaLr+PffNKv/1vb/wTw1WKzJr383sVRzsstFYwNX89kBAADAf0Wafwc+SYfm02k6NFT7Dv+u+F9anZqeefzo1NsnJ2rfle+PnrQc6eorxkOrk9XKSDJbvGNtfHS0GCsux0sPFOPGn3ZtyfND41PViTbHDp1ua5PzP/NHV7tbB6yxLUuuHe294w0B2qBxHj1dmD33SrgYwEbl99rQuZqf/5tjcXcA2Ejc/6FzLXX+n2vImwuAjcn9HzqX8x86VPpdu1sAtJH7P3Sk1fyufw0Tm9dHM9qTWK87JU9ElIl0XbRHYqWJLbdWuN1XJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNb4NwAA///Xm+pu") 0s ago: executing program 1 (id=6434): openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r0 = socket(0x2, 0x2, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f0000000000)=0x6d2, 0x15) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x3, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0xb}, 0x110d41, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x3}, 0x18) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) close_range(r0, r1, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x810000, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x1, 0x557, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x1) kernel console output (not intermixed with test programs): =0 arch=c000003e syscall=257 compat=0 ip=0x7f4d074ad810 code=0x7ffc0000 [ 638.948259][ T29] audit: type=1326 audit(1760953581.543:41824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23690 comm="syz.5.5954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f4d074b07f7 code=0x7ffc0000 [ 638.973104][T23658] bridge_slave_1: entered promiscuous mode [ 638.994512][T23683] lo speed is unknown, defaulting to 1000 [ 639.002252][T23685] lo speed is unknown, defaulting to 1000 [ 639.109382][T23691] hub 9-0:1.0: USB hub found [ 639.119959][T23658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 639.139037][T23691] hub 9-0:1.0: 8 ports detected [ 639.144934][T13465] bridge_slave_1: left allmulticast mode [ 639.150638][T13465] bridge_slave_1: left promiscuous mode [ 639.157067][T13465] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.416781][T13465] bridge_slave_0: left allmulticast mode [ 639.422483][T13465] bridge_slave_0: left promiscuous mode [ 639.429028][T13465] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.654591][T13465] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 639.664175][T13465] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 639.697556][T13465] .` (unregistering): Released all slaves [ 639.731102][T23658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 639.775502][T23658] team0: Port device team_slave_0 added [ 639.805269][T23658] team0: Port device team_slave_1 added [ 639.844527][T23658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 639.851512][T23658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 639.878215][T23658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 640.049700][T13465] hsr_slave_0: left promiscuous mode [ 640.058543][T13465] hsr_slave_1: left promiscuous mode [ 640.064288][T13465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 640.071817][T13465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 640.080474][T23711] loop5: detected capacity change from 0 to 128 [ 640.104930][T13465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 640.112451][T13465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 640.119779][T23707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5956'. [ 640.175072][T23713] loop4: detected capacity change from 0 to 128 [ 640.185368][T13465] veth1_macvtap: left promiscuous mode [ 640.191020][T13465] veth0_macvtap: left promiscuous mode [ 640.201112][T13465] veth1_vlan: left promiscuous mode [ 640.211008][T13465] veth0_vlan: left promiscuous mode [ 640.234689][T23713] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23713 comm=syz.4.5958 [ 640.247313][T23713] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=23713 comm=syz.4.5958 [ 640.402934][T23717] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5960'. [ 640.515593][T23722] loop4: detected capacity change from 0 to 1024 [ 640.530245][T23722] EXT4-fs: Ignoring removed orlov option [ 640.544792][T23722] EXT4-fs (loop4): Invalid log block size: 27052 [ 640.604754][T13465] team0 (unregistering): Port device team_slave_1 removed [ 640.618213][T13465] team0 (unregistering): Port device team_slave_0 removed [ 640.680580][T13465] team0 (unregistering): Port device dummy0 removed [ 640.706056][T23658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 640.713078][T23658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 640.739035][T23658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 640.830691][T23725] loop6: detected capacity change from 0 to 512 [ 640.876126][T23725] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.5963: EA inode hash validation failed [ 640.915130][T23658] hsr_slave_0: entered promiscuous mode [ 640.921316][T23658] hsr_slave_1: entered promiscuous mode [ 640.936198][T23733] Cannot find set identified by id 3 to match [ 640.949594][T23725] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #15: comm syz.6.5963: corrupted inode contents [ 640.962668][T23727] loop2: detected capacity change from 0 to 4096 [ 640.971506][T23658] debugfs: 'hsr0' already exists in 'hsr' [ 640.977314][T23658] Cannot create hsr debugfs directory [ 640.991008][T23727] ext4: Unknown parameter 'nouser_xattr' [ 640.998348][T23733] loop5: detected capacity change from 0 to 1024 [ 641.012285][T23725] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #15: comm syz.6.5963: mark_inode_dirty error [ 641.031485][T23725] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #15: comm syz.6.5963: corrupted inode contents [ 641.044570][T23725] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2996: inode #15: comm syz.6.5963: mark_inode_dirty error [ 641.050600][T23733] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 641.059166][T23725] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2999: inode #15: comm syz.6.5963: mark inode dirty (error -117) [ 641.081566][T23725] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 641.092134][T23725] EXT4-fs (loop6): 1 orphan inode deleted [ 641.098614][T23725] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 641.148085][T17729] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.174904][T23745] loop5: detected capacity change from 0 to 128 [ 641.185187][T20245] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.212728][T23745] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23745 comm=syz.5.5968 [ 641.225332][T23745] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=23745 comm=syz.5.5968 [ 641.349587][T23756] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5973'. [ 641.421546][T23658] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 641.432091][T23658] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 641.447114][T23658] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 641.457433][T23658] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 641.505744][T23658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 641.521658][T23658] 8021q: adding VLAN 0 to HW filter on device team0 [ 641.532503][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.539753][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 641.552225][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.559313][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 641.598602][T23773] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5976'. [ 641.617283][T23773] netlink: 256 bytes leftover after parsing attributes in process `syz.5.5976'. [ 641.709763][T23782] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5977'. [ 641.719292][T23782] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 641.728384][T23782] openvswitch: netlink: Message has 5 unknown bytes. [ 641.740363][T23658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 641.857583][T23658] veth0_vlan: entered promiscuous mode [ 641.866732][T23658] veth1_vlan: entered promiscuous mode [ 641.904730][T23658] veth0_macvtap: entered promiscuous mode [ 641.920860][T23658] veth1_macvtap: entered promiscuous mode [ 641.948315][T23658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 641.970651][T23658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 641.995248][T13459] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.005074][T13459] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.077447][T13459] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.096404][T13459] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.167583][T23799] loop1: detected capacity change from 0 to 256 [ 642.273332][T23804] loop1: detected capacity change from 0 to 128 [ 642.289270][T23804] bio_check_eod: 26 callbacks suppressed [ 642.289285][T23804] syz.1.5980: attempt to access beyond end of device [ 642.289285][T23804] loop1: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 642.309494][T23804] syz.1.5980: attempt to access beyond end of device [ 642.309494][T23804] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 642.343683][T23804] syz.1.5980: attempt to access beyond end of device [ 642.343683][T23804] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 642.359451][T23807] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23807 comm=syz.1.5980 [ 642.372053][T23807] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=23807 comm=syz.1.5980 [ 642.387530][T23804] syz.1.5980: attempt to access beyond end of device [ 642.387530][T23804] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 642.445576][T23811] lo speed is unknown, defaulting to 1000 [ 642.451435][T23811] lo speed is unknown, defaulting to 1000 [ 642.453707][T23804] syz.1.5980: attempt to access beyond end of device [ 642.453707][T23804] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 642.457843][T23811] lo speed is unknown, defaulting to 1000 [ 642.479410][T23811] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 642.490521][T23811] lo speed is unknown, defaulting to 1000 [ 642.499291][T23811] lo speed is unknown, defaulting to 1000 [ 642.518083][T23811] lo speed is unknown, defaulting to 1000 [ 642.523707][T23804] syz.1.5980: attempt to access beyond end of device [ 642.523707][T23804] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 642.542472][T23811] lo speed is unknown, defaulting to 1000 [ 642.564615][T23804] syz.1.5980: attempt to access beyond end of device [ 642.564615][T23804] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 642.569274][T23812] loop5: detected capacity change from 0 to 512 [ 642.586953][T23811] lo speed is unknown, defaulting to 1000 [ 642.603158][T23811] lo speed is unknown, defaulting to 1000 [ 642.613720][T23804] syz.1.5980: attempt to access beyond end of device [ 642.613720][T23804] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 642.646117][T23812] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.5983: EA inode hash validation failed [ 642.653677][T23804] syz.1.5980: attempt to access beyond end of device [ 642.653677][T23804] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 642.672650][T23812] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #15: comm syz.5.5983: corrupted inode contents [ 642.685011][T23812] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #15: comm syz.5.5983: mark_inode_dirty error [ 642.694757][T23804] syz.1.5980: attempt to access beyond end of device [ 642.694757][T23804] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 642.707276][T23812] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #15: comm syz.5.5983: corrupted inode contents [ 642.724015][T23812] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2996: inode #15: comm syz.5.5983: mark_inode_dirty error [ 642.766709][T23812] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2999: inode #15: comm syz.5.5983: mark inode dirty (error -117) [ 642.808452][T23823] loop1: detected capacity change from 0 to 1024 [ 642.834178][T23823] EXT4-fs: Ignoring removed orlov option [ 642.839909][T23823] EXT4-fs: Ignoring removed mblk_io_submit option [ 642.842686][T23812] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 642.859567][T23823] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 642.879626][T23812] EXT4-fs (loop5): 1 orphan inode deleted [ 642.889986][T23823] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 642.907730][T23812] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 642.926873][T23658] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.965084][T23812] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.001673][T23827] loop1: detected capacity change from 0 to 128 [ 643.169476][T23833] loop2: detected capacity change from 0 to 256 [ 643.303760][T23842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5994'. [ 643.328117][T23842] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5994'. [ 643.366139][T23849] loop2: detected capacity change from 0 to 128 [ 643.437113][T23853] hub 9-0:1.0: USB hub found [ 643.449703][T23853] hub 9-0:1.0: 8 ports detected [ 643.465020][T23849] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23849 comm=syz.2.5996 [ 643.478283][T23849] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=23849 comm=syz.2.5996 [ 643.613717][ T29] kauditd_printk_skb: 344 callbacks suppressed [ 643.613733][ T29] audit: type=1326 audit(1760953586.403:42169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23828 comm="syz.5.5988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4d074aefc9 code=0x7ffc0000 [ 643.644487][ T29] audit: type=1326 audit(1760953586.403:42170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23828 comm="syz.5.5988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d074aefc9 code=0x7ffc0000 [ 643.668293][ T29] audit: type=1326 audit(1760953586.403:42171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23828 comm="syz.5.5988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d074aefc9 code=0x7ffc0000 [ 643.692636][ T29] audit: type=1326 audit(1760953586.403:42172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23828 comm="syz.5.5988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f4d074aefc9 code=0x7ffc0000 [ 643.717008][ T29] audit: type=1326 audit(1760953586.403:42173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23828 comm="syz.5.5988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d074aefc9 code=0x7ffc0000 [ 643.740728][ T29] audit: type=1326 audit(1760953586.403:42174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23828 comm="syz.5.5988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d074aefc9 code=0x7ffc0000 [ 643.765218][ T29] audit: type=1326 audit(1760953586.403:42175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23828 comm="syz.5.5988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d074aefc9 code=0x7ffc0000 [ 643.778467][T23858] loop2: detected capacity change from 0 to 1024 [ 643.789038][ T29] audit: type=1326 audit(1760953586.403:42176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23828 comm="syz.5.5988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d074aefc9 code=0x7ffc0000 [ 643.819842][ T29] audit: type=1326 audit(1760953586.403:42177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23828 comm="syz.5.5988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f4d074aefc9 code=0x7ffc0000 [ 643.844378][ T29] audit: type=1326 audit(1760953586.403:42178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23828 comm="syz.5.5988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d074aefc9 code=0x7ffc0000 [ 643.845017][T23861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.871915][T23858] EXT4-fs: Ignoring removed orlov option [ 643.882945][T23858] EXT4-fs: Ignoring removed mblk_io_submit option [ 643.909838][T23858] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 643.938586][T23861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.981407][T23858] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 644.039582][T23861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5999'. [ 644.067694][T14306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.142803][T23870] loop2: detected capacity change from 0 to 128 [ 644.214834][T23878] loop6: detected capacity change from 0 to 256 [ 644.262119][T23875] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6003'. [ 644.323341][T23888] loop1: detected capacity change from 0 to 128 [ 644.407814][T23892] loop6: detected capacity change from 0 to 4096 [ 644.424767][T23892] ext4: Unknown parameter 'nouser_xattr' [ 644.430402][T23895] loop2: detected capacity change from 0 to 1024 [ 644.444878][T23888] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23888 comm=syz.1.6007 [ 644.453125][T23895] EXT4-fs: Ignoring removed orlov option [ 644.457488][T23888] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=23888 comm=syz.1.6007 [ 644.476334][T23895] EXT4-fs: Ignoring removed mblk_io_submit option [ 644.534140][T23895] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 644.554143][T23897] lo speed is unknown, defaulting to 1000 [ 644.560275][T23897] lo speed is unknown, defaulting to 1000 [ 644.604493][T23897] lo speed is unknown, defaulting to 1000 [ 644.610741][T23897] lo speed is unknown, defaulting to 1000 [ 644.929556][T23901] FAULT_INJECTION: forcing a failure. [ 644.929556][T23901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 644.943462][T23901] CPU: 1 UID: 0 PID: 23901 Comm: syz.5.6014 Not tainted syzkaller #0 PREEMPT(voluntary) [ 644.943497][T23901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 644.943537][T23901] Call Trace: [ 644.943546][T23901] [ 644.943557][T23901] __dump_stack+0x1d/0x30 [ 644.943582][T23901] dump_stack_lvl+0xe8/0x140 [ 644.943665][T23901] dump_stack+0x15/0x1b [ 644.943699][T23901] should_fail_ex+0x265/0x280 [ 644.943792][T23901] should_fail+0xb/0x20 [ 644.943827][T23901] should_fail_usercopy+0x1a/0x20 [ 644.943917][T23901] _copy_from_user+0x1c/0xb0 [ 644.944010][T23901] ___sys_sendmsg+0xc1/0x1d0 [ 644.944104][T23901] __x64_sys_sendmsg+0xd4/0x160 [ 644.944149][T23901] x64_sys_call+0x191e/0x3000 [ 644.944177][T23901] do_syscall_64+0xd2/0x200 [ 644.944216][T23901] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 644.944243][T23901] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 644.944271][T23901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.944304][T23901] RIP: 0033:0x7f4d074aefc9 [ 644.944365][T23901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 644.944387][T23901] RSP: 002b:00007f4d05f0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 644.944406][T23901] RAX: ffffffffffffffda RBX: 00007f4d07705fa0 RCX: 00007f4d074aefc9 [ 644.944418][T23901] RDX: 0000000000040044 RSI: 0000200000000000 RDI: 0000000000000006 [ 644.944432][T23901] RBP: 00007f4d05f0f090 R08: 0000000000000000 R09: 0000000000000000 [ 644.944447][T23901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.944515][T23901] R13: 00007f4d07706038 R14: 00007f4d07705fa0 R15: 00007ffdb26e73b8 [ 644.944534][T23901] [ 645.344976][T23908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6015'. [ 645.386562][T23908] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6015'. [ 645.396814][T23895] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 645.456282][T14306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.493156][T23921] loop5: detected capacity change from 0 to 256 [ 645.533263][T23927] Cannot find set identified by id 3 to match [ 645.573457][T23916] hub 9-0:1.0: USB hub found [ 645.580517][T23927] loop6: detected capacity change from 0 to 1024 [ 645.597159][T23930] loop2: detected capacity change from 0 to 128 [ 645.615219][T23916] hub 9-0:1.0: 8 ports detected [ 645.656365][T23927] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 645.788983][T20245] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.819145][T23942] loop2: detected capacity change from 0 to 128 [ 645.838313][T23942] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23942 comm=syz.2.6023 [ 645.846424][T23943] loop6: detected capacity change from 0 to 2048 [ 645.851028][T23942] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=23942 comm=syz.2.6023 [ 645.931422][T23950] loop6: detected capacity change from 0 to 128 [ 645.942536][T23946] ip6gre1: entered allmulticast mode [ 646.051114][T23963] loop5: detected capacity change from 0 to 128 [ 646.066781][T23966] loop4: detected capacity change from 0 to 256 [ 646.110889][T23968] Cannot find set identified by id 3 to match [ 646.143266][T23968] loop2: detected capacity change from 0 to 1024 [ 646.170813][T23968] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 646.209154][T14306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.240688][T23977] loop6: detected capacity change from 0 to 128 [ 646.271403][T23980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.285944][T23980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.370837][T23977] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23977 comm=syz.6.6038 [ 646.383634][T23977] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=23977 comm=syz.6.6038 [ 646.429209][T23997] __nla_validate_parse: 3 callbacks suppressed [ 646.429229][T23997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6045'. [ 646.491079][T23999] loop5: detected capacity change from 0 to 128 [ 646.542836][T24002] siw: device registration error -23 [ 646.563985][T24002] loop6: detected capacity change from 0 to 512 [ 646.667909][T24010] Cannot find set identified by id 3 to match [ 646.708496][T24012] loop5: detected capacity change from 0 to 512 [ 646.726990][T24010] loop2: detected capacity change from 0 to 1024 [ 646.734242][T24002] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #15: comm syz.6.6048: corrupted inode contents [ 646.802989][T24002] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem [ 646.811901][T24002] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #15: comm syz.6.6048: corrupted inode contents [ 646.823960][T24002] EXT4-fs error (device loop6): ext4_evict_inode:302: inode #15: comm syz.6.6048: mark_inode_dirty error [ 646.835481][T24002] EXT4-fs (loop6): 1 orphan inode deleted [ 646.841664][T24002] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 646.855239][T24002] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.866766][T24012] EXT4-fs: Ignoring removed i_version option [ 646.872855][T24012] EXT4-fs: Ignoring removed bh option [ 646.885495][T24010] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 646.906377][T24012] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 646.916755][T24002] loop6: detected capacity change from 0 to 512 [ 646.938048][T24012] ext4 filesystem being mounted at /415/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 646.950244][T14306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.952286][T24002] program syz.6.6048 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 647.027472][T17729] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.036816][T24019] loop2: detected capacity change from 0 to 4096 [ 647.037124][T24019] ext4: Unknown parameter 'nouser_xattr' [ 647.070277][T24026] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6055'. [ 647.086762][T24026] netlink: 256 bytes leftover after parsing attributes in process `syz.6.6055'. [ 647.149836][T24037] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6058'. [ 647.162013][T24037] Illegal XDP return value 4294967262 on prog (id 3625) dev N/A, expect packet loss! [ 647.188575][T24037] loop5: detected capacity change from 0 to 2048 [ 647.248191][T24037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.263782][T24037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.287855][T24041] loop1: detected capacity change from 0 to 128 [ 647.302970][T24041] bio_check_eod: 50 callbacks suppressed [ 647.302991][T24041] syz.1.6059: attempt to access beyond end of device [ 647.302991][T24041] loop1: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 647.323490][T24041] syz.1.6059: attempt to access beyond end of device [ 647.323490][T24041] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 647.338413][T24041] syz.1.6059: attempt to access beyond end of device [ 647.338413][T24041] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 647.352301][T24041] syz.1.6059: attempt to access beyond end of device [ 647.352301][T24041] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 647.366325][T24041] syz.1.6059: attempt to access beyond end of device [ 647.366325][T24041] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 647.380026][T24041] syz.1.6059: attempt to access beyond end of device [ 647.380026][T24041] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 647.409154][T24041] syz.1.6059: attempt to access beyond end of device [ 647.409154][T24041] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 647.426953][T24041] syz.1.6059: attempt to access beyond end of device [ 647.426953][T24041] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 647.440680][T24041] syz.1.6059: attempt to access beyond end of device [ 647.440680][T24041] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 647.454386][T24041] syz.1.6059: attempt to access beyond end of device [ 647.454386][T24041] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 647.472931][T24041] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=24041 comm=syz.1.6059 [ 647.485662][T24041] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=24041 comm=syz.1.6059 [ 647.560431][T24048] FAULT_INJECTION: forcing a failure. [ 647.560431][T24048] name failslab, interval 1, probability 0, space 0, times 0 [ 647.573896][T24048] CPU: 1 UID: 0 PID: 24048 Comm: syz.1.6061 Not tainted syzkaller #0 PREEMPT(voluntary) [ 647.573984][T24048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 647.574002][T24048] Call Trace: [ 647.574010][T24048] [ 647.574019][T24048] __dump_stack+0x1d/0x30 [ 647.574059][T24048] dump_stack_lvl+0xe8/0x140 [ 647.574084][T24048] dump_stack+0x15/0x1b [ 647.574107][T24048] should_fail_ex+0x265/0x280 [ 647.574224][T24048] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 647.574253][T24048] should_failslab+0x8c/0xb0 [ 647.574289][T24048] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 647.574322][T24048] ? debugfs_alloc_inode+0x34/0x40 [ 647.574414][T24048] ? lookup_noperm+0xc9/0x180 [ 647.574457][T24048] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 647.574559][T24048] debugfs_alloc_inode+0x34/0x40 [ 647.574579][T24048] alloc_inode+0x40/0x170 [ 647.574675][T24048] new_inode+0x1d/0xe0 [ 647.574708][T24048] __debugfs_create_file+0x109/0x330 [ 647.574778][T24048] debugfs_create_file_full+0x3f/0x60 [ 647.574822][T24048] ? __pfx_ipgre_tunnel_setup+0x10/0x10 [ 647.574853][T24048] ref_tracker_dir_debugfs+0x100/0x1e0 [ 647.574995][T24048] alloc_netdev_mqs+0x1a7/0xa50 [ 647.575035][T24048] ? sized_strscpy+0x157/0x1a0 [ 647.575076][T24048] __ip_tunnel_create+0x2bc/0x450 [ 647.575109][T24048] ? ip_tunnel_find+0x2b5/0x300 [ 647.575148][T24048] ip_tunnel_ctl+0x38f/0x750 [ 647.575185][T24048] ipgre_tunnel_ctl+0x22f/0x560 [ 647.575243][T24048] ip_tunnel_siocdevprivate+0x77/0xe0 [ 647.575330][T24048] dev_ifsioc+0x8f8/0xaa0 [ 647.575381][T24048] dev_ioctl+0x78d/0x960 [ 647.575424][T24048] sock_ioctl+0x593/0x610 [ 647.575450][T24048] ? __pfx_sock_ioctl+0x10/0x10 [ 647.575545][T24048] __se_sys_ioctl+0xce/0x140 [ 647.575571][T24048] __x64_sys_ioctl+0x43/0x50 [ 647.575623][T24048] x64_sys_call+0x1816/0x3000 [ 647.575646][T24048] do_syscall_64+0xd2/0x200 [ 647.575671][T24048] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 647.575771][T24048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.575798][T24048] RIP: 0033:0x7f9efeb3efc9 [ 647.575818][T24048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 647.575837][T24048] RSP: 002b:00007f9efd59f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 647.575880][T24048] RAX: ffffffffffffffda RBX: 00007f9efed95fa0 RCX: 00007f9efeb3efc9 [ 647.575893][T24048] RDX: 0000200000000280 RSI: 00000000000089f1 RDI: 0000000000000005 [ 647.575905][T24048] RBP: 00007f9efd59f090 R08: 0000000000000000 R09: 0000000000000000 [ 647.575920][T24048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.575936][T24048] R13: 00007f9efed96038 R14: 00007f9efed95fa0 R15: 00007fff87d2d048 [ 647.576024][T24048] [ 647.576034][T24048] debugfs: out of free dentries, can not create file 'netdev@ffff888117cd4550' [ 647.899635][T24052] Cannot find set identified by id 3 to match [ 647.950046][T24052] loop4: detected capacity change from 0 to 1024 [ 647.996384][T24060] loop6: detected capacity change from 0 to 512 [ 648.013531][T24065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6069'. [ 648.046171][T24052] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 648.062065][T24060] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 648.071546][T24071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6070'. [ 648.081294][T24060] EXT4-fs (loop6): orphan cleanup on readonly fs [ 648.094567][T24060] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 648.148947][T23204] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.183524][T24060] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 648.192945][T24072] vhci_hcd: invalid port number 96 [ 648.198176][T24072] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 648.213513][T24078] loop4: detected capacity change from 0 to 128 [ 648.214456][T24060] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6066: bg 0: block 40: padding at end of block bitmap is not set [ 648.236928][T24060] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 648.252141][T24060] EXT4-fs (loop6): 1 truncate cleaned up [ 648.276544][T24080] loop1: detected capacity change from 0 to 512 [ 648.276790][T24078] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=24078 comm=syz.4.6071 [ 648.295475][T24078] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=24078 comm=syz.4.6071 [ 648.315955][T24060] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 648.336395][T24082] loop2: detected capacity change from 0 to 512 [ 648.345422][T24080] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 648.363433][T24086] loop4: detected capacity change from 0 to 1024 [ 648.372496][T24080] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 648.375802][T24082] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 648.385326][T24060] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6066'. [ 648.396796][T24080] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.6074: corrupted inode contents [ 648.405202][T24086] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 648.426330][T24082] ext4 filesystem being mounted at /597/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 648.428428][T24086] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 648.448971][T24080] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.6074: mark_inode_dirty error [ 648.453874][T24086] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 648.471837][T24080] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.6074: corrupted inode contents [ 648.484268][T24080] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.6074: mark_inode_dirty error [ 648.497712][T24086] EXT4-fs (loop4): invalid journal inode [ 648.499249][T24082] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.6075: corrupted inode contents [ 648.503750][T24086] EXT4-fs (loop4): can't get journal size [ 648.516858][T24091] FAULT_INJECTION: forcing a failure. [ 648.516858][T24091] name failslab, interval 1, probability 0, space 0, times 0 [ 648.526698][T24082] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #2: comm syz.2.6075: mark_inode_dirty error [ 648.533718][T24091] CPU: 0 UID: 0 PID: 24091 Comm: syz.1.6074 Not tainted syzkaller #0 PREEMPT(voluntary) [ 648.533749][T24091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 648.533766][T24091] Call Trace: [ 648.533774][T24091] [ 648.533784][T24091] __dump_stack+0x1d/0x30 [ 648.533880][T24091] dump_stack_lvl+0xe8/0x140 [ 648.533901][T24091] dump_stack+0x15/0x1b [ 648.533918][T24091] should_fail_ex+0x265/0x280 [ 648.534031][T24091] should_failslab+0x8c/0xb0 [ 648.534063][T24091] kmem_cache_alloc_noprof+0x50/0x480 [ 648.534163][T24091] ? getname_flags+0x80/0x3b0 [ 648.534307][T24091] getname_flags+0x80/0x3b0 [ 648.534362][T24091] __x64_sys_mkdirat+0x40/0x60 [ 648.534389][T24091] x64_sys_call+0x2b7/0x3000 [ 648.534493][T24091] do_syscall_64+0xd2/0x200 [ 648.534590][T24091] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 648.534632][T24091] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 648.534667][T24091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.534737][T24091] RIP: 0033:0x7f9efeb3efc9 [ 648.534759][T24091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 648.534786][T24091] RSP: 002b:00007f9efd55d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 648.534814][T24091] RAX: ffffffffffffffda RBX: 00007f9efed96180 RCX: 00007f9efeb3efc9 [ 648.534854][T24091] RDX: 0000000000000000 RSI: 0000200000002040 RDI: ffffffffffffff9c [ 648.534872][T24091] RBP: 00007f9efd55d090 R08: 0000000000000000 R09: 0000000000000000 [ 648.534894][T24091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.534912][T24091] R13: 00007f9efed96218 R14: 00007f9efed96180 R15: 00007fff87d2d048 [ 648.534941][T24091] [ 648.554916][T24086] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #3: comm syz.4.6076: blocks 2-2 from inode overlap system zone [ 648.557762][T24082] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.6075: corrupted inode contents [ 648.584890][T24086] EXT4-fs (loop4): failed to initialize system zone (-117) [ 648.586080][T24082] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.6075: mark_inode_dirty error [ 648.591891][T24086] EXT4-fs (loop4): mount failed [ 648.606454][T23658] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.625563][ T29] kauditd_printk_skb: 684 callbacks suppressed [ 648.625583][ T29] audit: type=1400 audit(1760953591.423:42860): avc: denied { create } for pid=24084 comm="syz.4.6076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 648.802661][ T29] audit: type=1400 audit(1760953591.443:42861): avc: denied { write } for pid=24084 comm="syz.4.6076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 648.825333][T24095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6077'. [ 648.833701][T14306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.835291][ T29] audit: type=1326 audit(1760953591.633:42862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24094 comm="syz.1.6077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9efeb3efc9 code=0x7ffc0000 [ 648.866804][ T29] audit: type=1326 audit(1760953591.633:42863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24094 comm="syz.1.6077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9efeb3efc9 code=0x7ffc0000 [ 648.902840][T24100] loop2: detected capacity change from 0 to 512 [ 648.909969][T24095] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6077'. [ 648.920433][T24100] EXT4-fs: Ignoring removed bh option [ 648.942992][T24100] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 648.958958][ T29] audit: type=1326 audit(1760953591.663:42864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24094 comm="syz.1.6077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9efeb3efc9 code=0x7ffc0000 [ 648.982726][ T29] audit: type=1326 audit(1760953591.663:42865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24094 comm="syz.1.6077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9efeb3efc9 code=0x7ffc0000 [ 649.006383][ T29] audit: type=1326 audit(1760953591.663:42866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24094 comm="syz.1.6077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9efeb3efc9 code=0x7ffc0000 [ 649.030166][ T29] audit: type=1326 audit(1760953591.663:42867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24094 comm="syz.1.6077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9efeb3efc9 code=0x7ffc0000 [ 649.053783][ T29] audit: type=1326 audit(1760953591.663:42868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24094 comm="syz.1.6077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9efeb3efc9 code=0x7ffc0000 [ 649.077384][ T29] audit: type=1326 audit(1760953591.663:42869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24094 comm="syz.1.6077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9efeb3efc9 code=0x7ffc0000 [ 649.109451][T24107] loop4: detected capacity change from 0 to 512 [ 649.120556][T24100] EXT4-fs (loop2): 1 truncate cleaned up [ 649.136336][T24100] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 649.154865][T24107] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 649.168013][T24060] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.280226][T24107] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 649.304626][T14306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.336947][T24107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6081'. [ 649.425139][T24122] lo speed is unknown, defaulting to 1000 [ 649.431414][T24122] lo speed is unknown, defaulting to 1000 [ 649.504682][T24122] lo speed is unknown, defaulting to 1000 [ 649.511352][T24122] lo speed is unknown, defaulting to 1000 [ 649.769801][T24126] loop6: detected capacity change from 0 to 128 [ 649.832164][T24126] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=24126 comm=syz.6.6086 [ 649.844855][T24126] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=24126 comm=syz.6.6086 [ 649.946655][T23204] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.051607][T24133] loop5: detected capacity change from 0 to 512 [ 650.079679][T24133] EXT4-fs: Ignoring removed i_version option [ 650.085803][T24133] EXT4-fs: Ignoring removed bh option [ 650.215947][T24133] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 650.240793][T24133] ext4 filesystem being mounted at /424/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 650.357115][T24143] IPv6: Can't replace route, no match found [ 650.412076][T17729] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.697330][T24153] loop4: detected capacity change from 0 to 128 [ 650.917348][T24166] loop6: detected capacity change from 0 to 512 [ 650.944075][T24166] EXT4-fs: Ignoring removed i_version option [ 650.950137][T24166] EXT4-fs: Ignoring removed bh option [ 650.985375][T24166] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 651.009728][T24166] ext4 filesystem being mounted at /246/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 651.026376][T24174] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 651.057512][ T134] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.107064][ T134] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.145739][T20245] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.174804][ T134] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.224776][T24167] lo speed is unknown, defaulting to 1000 [ 651.231088][T24167] lo speed is unknown, defaulting to 1000 [ 651.279068][ T134] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.394442][ T134] bridge_slave_1: left allmulticast mode [ 651.400117][ T134] bridge_slave_1: left promiscuous mode [ 651.405834][ T134] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.434318][ T134] bridge_slave_0: left allmulticast mode [ 651.439990][ T134] bridge_slave_0: left promiscuous mode [ 651.445723][ T134] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.626789][ T134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 651.655450][ T134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 651.676213][ T134] bond0 (unregistering): Released all slaves [ 651.700202][T24167] chnl_net:caif_netlink_parms(): no params data found [ 651.778342][ T134] hsr_slave_0: left promiscuous mode [ 651.784428][ T134] hsr_slave_1: left promiscuous mode [ 651.793993][ T134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 651.801439][ T134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 651.817663][ T134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 651.825134][ T134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 651.836229][ T134] veth1_macvtap: left promiscuous mode [ 651.841733][ T134] veth0_macvtap: left promiscuous mode [ 651.847460][ T134] veth1_vlan: left promiscuous mode [ 651.852783][ T134] veth0_vlan: left promiscuous mode [ 651.903041][T24194] __nla_validate_parse: 5 callbacks suppressed [ 651.903057][T24194] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6104'. [ 651.979955][T24196] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6105'. [ 652.004294][ T134] team0 (unregistering): Port device team_slave_1 removed [ 652.027239][ T134] team0 (unregistering): Port device team_slave_0 removed [ 652.150279][T24204] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6107'. [ 652.172033][T24167] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.179165][T24167] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.214083][T24167] bridge_slave_0: entered allmulticast mode [ 652.223806][T24167] bridge_slave_0: entered promiscuous mode [ 652.244750][T24167] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.252024][T24167] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.269039][T24167] bridge_slave_1: entered allmulticast mode [ 652.276365][T24210] loop6: detected capacity change from 0 to 128 [ 652.284050][T24167] bridge_slave_1: entered promiscuous mode [ 652.291770][T24204] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6107'. [ 652.325054][T24167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 652.355245][T24167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 652.395331][T24167] team0: Port device team_slave_0 added [ 652.402211][T24167] team0: Port device team_slave_1 added [ 652.405820][T24218] loop5: detected capacity change from 0 to 256 [ 652.431360][T24167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 652.438468][T24167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 652.464448][T24167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 652.501347][T24167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 652.508401][T24167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 652.509883][T24220] loop6: detected capacity change from 0 to 512 [ 652.534490][T24167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 652.594934][T24220] EXT4-fs: Ignoring removed i_version option [ 652.601042][T24220] EXT4-fs: Ignoring removed bh option [ 652.608756][T24167] hsr_slave_0: entered promiscuous mode [ 652.615064][T24167] hsr_slave_1: entered promiscuous mode [ 652.620981][T24167] debugfs: 'hsr0' already exists in 'hsr' [ 652.626754][T24167] Cannot create hsr debugfs directory [ 652.645607][T24220] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 652.672642][T24220] ext4 filesystem being mounted at /251/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 652.773831][T20245] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.811198][T24232] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6115'. [ 653.035526][T24251] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6122'. [ 653.052952][T24167] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 653.062169][T24167] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 653.080771][T24167] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 653.090845][T24167] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 653.105709][T24257] loop1: detected capacity change from 0 to 512 [ 653.117124][T24167] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.124250][T24167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 653.131639][T24167] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.138762][T24167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 653.164891][ T134] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.173030][ T134] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.174917][T24257] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 653.193406][T24257] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 653.208043][T24257] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6123'. [ 653.260719][T24268] loop4: detected capacity change from 0 to 128 [ 653.269319][T24167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 653.330193][T24167] 8021q: adding VLAN 0 to HW filter on device team0 [ 653.363881][ T134] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.371022][ T134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 653.405052][T24167] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 653.415538][T24167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 653.429294][ T134] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.436440][ T134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 653.477885][T23658] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.505115][T24167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 653.653151][T24167] veth0_vlan: entered promiscuous mode [ 653.668867][T24167] veth1_vlan: entered promiscuous mode [ 653.701486][T24167] veth0_macvtap: entered promiscuous mode [ 653.720287][T24167] veth1_macvtap: entered promiscuous mode [ 653.744419][T24167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 653.766550][T24167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 653.793537][ T134] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.813389][T24293] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6131'. [ 653.827284][ T134] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.850673][ T29] kauditd_printk_skb: 463 callbacks suppressed [ 653.850689][ T29] audit: type=1326 audit(1760953596.643:43333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24292 comm="syz.6.6131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ebeaefc9 code=0x7ffc0000 [ 653.881219][ T29] audit: type=1326 audit(1760953596.643:43334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24292 comm="syz.6.6131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ebeaefc9 code=0x7ffc0000 [ 653.906788][ T134] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.917983][T24293] netlink: 256 bytes leftover after parsing attributes in process `syz.6.6131'. [ 653.922568][ T134] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.956884][ T29] audit: type=1326 audit(1760953596.643:43335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24292 comm="syz.6.6131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3ebeaefc9 code=0x7ffc0000 [ 653.981198][ T29] audit: type=1326 audit(1760953596.643:43336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24292 comm="syz.6.6131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ebeaefc9 code=0x7ffc0000 [ 654.005604][ T29] audit: type=1326 audit(1760953596.643:43337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24292 comm="syz.6.6131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ebeaefc9 code=0x7ffc0000 [ 654.029241][ T29] audit: type=1326 audit(1760953596.693:43338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24292 comm="syz.6.6131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3ebeaefc9 code=0x7ffc0000 [ 654.053638][ T29] audit: type=1326 audit(1760953596.693:43339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24292 comm="syz.6.6131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ebeaefc9 code=0x7ffc0000 [ 654.077955][ T29] audit: type=1326 audit(1760953596.693:43340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24292 comm="syz.6.6131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc3ebead810 code=0x7ffc0000 [ 654.101548][ T29] audit: type=1326 audit(1760953596.703:43341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24292 comm="syz.6.6131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ebeaefc9 code=0x7ffc0000 [ 654.125903][ T29] audit: type=1326 audit(1760953596.703:43342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24292 comm="syz.6.6131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc3ebead810 code=0x7ffc0000 [ 654.177107][T24303] loop2: detected capacity change from 0 to 128 [ 654.211759][T24303] bio_check_eod: 26 callbacks suppressed [ 654.211780][T24303] syz.2.6099: attempt to access beyond end of device [ 654.211780][T24303] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 654.226557][T24298] hub 9-0:1.0: USB hub found [ 654.235915][T24298] hub 9-0:1.0: 8 ports detected [ 654.273885][T24303] syz.2.6099: attempt to access beyond end of device [ 654.273885][T24303] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 654.306840][T24303] syz.2.6099: attempt to access beyond end of device [ 654.306840][T24303] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 654.307054][T24304] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=24304 comm=syz.2.6099 [ 654.333625][T24304] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=24304 comm=syz.2.6099 [ 654.384481][T24303] syz.2.6099: attempt to access beyond end of device [ 654.384481][T24303] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 654.398105][T24303] syz.2.6099: attempt to access beyond end of device [ 654.398105][T24303] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 654.424105][T24303] syz.2.6099: attempt to access beyond end of device [ 654.424105][T24303] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 654.485672][T24303] syz.2.6099: attempt to access beyond end of device [ 654.485672][T24303] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 654.499564][T24303] syz.2.6099: attempt to access beyond end of device [ 654.499564][T24303] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 654.513280][T24303] syz.2.6099: attempt to access beyond end of device [ 654.513280][T24303] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 654.530380][T24303] syz.2.6099: attempt to access beyond end of device [ 654.530380][T24303] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 654.597367][T24307] Cannot find set identified by id 3 to match [ 654.622217][T24307] loop2: detected capacity change from 0 to 1024 [ 654.633453][T24309] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6134'. [ 654.796174][T24307] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 654.918343][T24318] loop4: detected capacity change from 0 to 128 [ 654.958773][T24167] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 655.033975][T24322] lo speed is unknown, defaulting to 1000 [ 655.040488][T24322] lo speed is unknown, defaulting to 1000 [ 655.429019][T24328] lo speed is unknown, defaulting to 1000 [ 655.502886][T24328] lo speed is unknown, defaulting to 1000 [ 655.520721][T24323] lo speed is unknown, defaulting to 1000 [ 655.539664][T24337] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.702330][T24340] FAULT_INJECTION: forcing a failure. [ 655.702330][T24340] name failslab, interval 1, probability 0, space 0, times 0 [ 655.712645][T24323] lo speed is unknown, defaulting to 1000 [ 655.715014][T24340] CPU: 1 UID: 0 PID: 24340 Comm: syz.5.6143 Not tainted syzkaller #0 PREEMPT(voluntary) [ 655.715099][T24340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 655.715120][T24340] Call Trace: [ 655.715129][T24340] [ 655.715139][T24340] __dump_stack+0x1d/0x30 [ 655.715170][T24340] dump_stack_lvl+0xe8/0x140 [ 655.715217][T24340] dump_stack+0x15/0x1b [ 655.715241][T24340] should_fail_ex+0x265/0x280 [ 655.715346][T24340] ? __se_sys_memfd_create+0x1cc/0x590 [ 655.715379][T24340] should_failslab+0x8c/0xb0 [ 655.715496][T24340] __kmalloc_cache_noprof+0x4c/0x4a0 [ 655.715535][T24340] ? fput+0x8f/0xc0 [ 655.715649][T24340] __se_sys_memfd_create+0x1cc/0x590 [ 655.715694][T24340] __x64_sys_memfd_create+0x31/0x40 [ 655.715726][T24340] x64_sys_call+0x2ac2/0x3000 [ 655.715755][T24340] do_syscall_64+0xd2/0x200 [ 655.715816][T24340] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 655.715900][T24340] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 655.715931][T24340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.715980][T24340] RIP: 0033:0x7f4d074aefc9 [ 655.716002][T24340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 655.716084][T24340] RSP: 002b:00007f4d05f0ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 655.716111][T24340] RAX: ffffffffffffffda RBX: 000000000000072d RCX: 00007f4d074aefc9 [ 655.716129][T24340] RDX: 00007f4d05f0eef0 RSI: 0000000000000000 RDI: 00007f4d07532960 [ 655.716226][T24340] RBP: 00002000000014c0 R08: 00007f4d05f0ebb7 R09: 00007f4d05f0ee40 [ 655.716245][T24340] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000100 [ 655.716262][T24340] R13: 00007f4d05f0eef0 R14: 00007f4d05f0eeb0 R15: 0000200000000300 [ 655.716286][T24340] [ 655.874769][T24342] loop1: detected capacity change from 0 to 128 [ 655.911137][T24337] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.963860][T24342] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=24342 comm=syz.1.6144 [ 655.977136][T24342] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=24342 comm=syz.1.6144 [ 656.023834][T24337] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.151536][T24337] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.194007][T24361] hub 9-0:1.0: USB hub found [ 656.199934][T24361] hub 9-0:1.0: 8 ports detected [ 656.270125][ T3493] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.281470][ T3493] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.306667][ T3493] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.333673][ T3493] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.998166][T24377] loop1: detected capacity change from 0 to 512 [ 657.024831][T24379] __nla_validate_parse: 5 callbacks suppressed [ 657.024846][T24379] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6158'. [ 657.072481][T24377] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 657.085754][T24377] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 657.098373][T24377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6157'. [ 657.151263][T24385] loop4: detected capacity change from 0 to 512 [ 657.176882][T23658] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.214848][T24385] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 657.262595][T24385] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 657.398415][T24385] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6159'. [ 657.557012][T24395] lo speed is unknown, defaulting to 1000 [ 657.563536][T24395] lo speed is unknown, defaulting to 1000 [ 657.719911][T23204] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.939257][T24397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6162'. [ 657.968576][T24401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6163'. [ 657.982668][T24401] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6163'. [ 658.016146][T24403] siw: device registration error -23 [ 658.054775][T24403] loop2: detected capacity change from 0 to 512 [ 658.099203][T24403] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.6164: corrupted inode contents [ 658.203660][T24403] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 658.245522][T24403] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.6164: corrupted inode contents [ 658.283882][T24403] EXT4-fs error (device loop2): ext4_evict_inode:302: inode #15: comm syz.2.6164: mark_inode_dirty error [ 658.303440][T24403] EXT4-fs (loop2): 1 orphan inode deleted [ 658.324290][T24403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 658.349604][T24417] loop1: detected capacity change from 0 to 512 [ 658.365749][T24403] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.387053][T24417] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 658.435940][T24417] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 658.462520][T24423] loop2: detected capacity change from 0 to 512 [ 658.469358][T24423] EXT4-fs: Ignoring removed i_version option [ 658.473901][T24409] loop6: detected capacity change from 0 to 512 [ 658.475417][T24423] EXT4-fs: Ignoring removed bh option [ 658.486905][T24417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6167'. [ 658.489777][T24422] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6169'. [ 658.525397][T24409] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 658.533529][T24409] System zones: 1-12 [ 658.540714][T24409] EXT4-fs error (device loop6): dx_probe:791: inode #2: comm syz.6.6165: Directory hole found for htree index block 0 [ 658.545402][T24423] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 658.572043][T24409] EXT4-fs (loop6): Remounting filesystem read-only [ 658.583780][T24409] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -117 [ 658.592323][T24423] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 658.611391][T24409] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 658.624781][T24409] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 658.638162][T23658] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.705863][T24167] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.720771][T24436] FAULT_INJECTION: forcing a failure. [ 658.720771][T24436] name failslab, interval 1, probability 0, space 0, times 0 [ 658.734307][T24436] CPU: 1 UID: 0 PID: 24436 Comm: syz.1.6172 Not tainted syzkaller #0 PREEMPT(voluntary) [ 658.734342][T24436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 658.734355][T24436] Call Trace: [ 658.734369][T24436] [ 658.734378][T24436] __dump_stack+0x1d/0x30 [ 658.734527][T24436] dump_stack_lvl+0xe8/0x140 [ 658.734547][T24436] dump_stack+0x15/0x1b [ 658.734566][T24436] should_fail_ex+0x265/0x280 [ 658.734612][T24436] should_failslab+0x8c/0xb0 [ 658.734650][T24436] __kvmalloc_node_noprof+0x12e/0x670 [ 658.734686][T24436] ? alloc_netdev_mqs+0xa5/0xa50 [ 658.734807][T24436] ? __pfx_ipgre_tunnel_setup+0x10/0x10 [ 658.734833][T24436] alloc_netdev_mqs+0xa5/0xa50 [ 658.734873][T24436] ? sized_strscpy+0x157/0x1a0 [ 658.734910][T24436] __ip_tunnel_create+0x2bc/0x450 [ 658.735056][T24436] ? ip_tunnel_find+0x2b5/0x300 [ 658.735095][T24436] ip_tunnel_ctl+0x38f/0x750 [ 658.735127][T24436] ipgre_tunnel_ctl+0x22f/0x560 [ 658.735162][T24436] ip_tunnel_siocdevprivate+0x77/0xe0 [ 658.735198][T24436] dev_ifsioc+0x8f8/0xaa0 [ 658.735307][T24436] dev_ioctl+0x78d/0x960 [ 658.735394][T24436] sock_ioctl+0x593/0x610 [ 658.735420][T24436] ? __pfx_sock_ioctl+0x10/0x10 [ 658.735439][T24436] __se_sys_ioctl+0xce/0x140 [ 658.735462][T24436] __x64_sys_ioctl+0x43/0x50 [ 658.735480][T24436] x64_sys_call+0x1816/0x3000 [ 658.735506][T24436] do_syscall_64+0xd2/0x200 [ 658.735541][T24436] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 658.735704][T24436] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 658.735735][T24436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.735763][T24436] RIP: 0033:0x7f9efeb3efc9 [ 658.735839][T24436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 658.735873][T24436] RSP: 002b:00007f9efd59f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 658.735898][T24436] RAX: ffffffffffffffda RBX: 00007f9efed95fa0 RCX: 00007f9efeb3efc9 [ 658.735914][T24436] RDX: 0000200000000280 RSI: 00000000000089f1 RDI: 0000000000000004 [ 658.735929][T24436] RBP: 00007f9efd59f090 R08: 0000000000000000 R09: 0000000000000000 [ 658.735945][T24436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.735960][T24436] R13: 00007f9efed96038 R14: 00007f9efed95fa0 R15: 00007fff87d2d048 [ 658.735989][T24436] [ 658.737049][T20245] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.015125][T24438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6176'. [ 659.053990][T24445] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.6177'. [ 659.063532][T24445] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 659.072077][T24445] openvswitch: netlink: Message has 5 unknown bytes. [ 659.086485][ T29] kauditd_printk_skb: 498 callbacks suppressed [ 659.086503][ T29] audit: type=1326 audit(1760953601.883:43841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24440 comm="syz.6.6175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ebeaefc9 code=0x7ffc0000 [ 659.117115][ T29] audit: type=1326 audit(1760953601.883:43842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24440 comm="syz.6.6175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ebeaefc9 code=0x7ffc0000 [ 659.140760][ T29] audit: type=1326 audit(1760953601.883:43843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24440 comm="syz.6.6175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fc3ebeaefc9 code=0x7ffc0000 [ 659.165193][ T29] audit: type=1326 audit(1760953601.883:43844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24440 comm="syz.6.6175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ebeaefc9 code=0x7ffc0000 [ 659.189131][ T29] audit: type=1326 audit(1760953601.883:43845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24440 comm="syz.6.6175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3ebeaefc9 code=0x7ffc0000 [ 659.213718][ T29] audit: type=1326 audit(1760953601.883:43846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24440 comm="syz.6.6175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ebeaefc9 code=0x7ffc0000 [ 659.238173][ T29] audit: type=1326 audit(1760953601.883:43847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24440 comm="syz.6.6175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc3ebeaefc9 code=0x7ffc0000 [ 659.261766][ T29] audit: type=1326 audit(1760953601.883:43848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24440 comm="syz.6.6175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ebeaefc9 code=0x7ffc0000 [ 659.286215][ T29] audit: type=1326 audit(1760953601.883:43849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24440 comm="syz.6.6175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc3ebeaefc9 code=0x7ffc0000 [ 659.309937][ T29] audit: type=1326 audit(1760953601.883:43850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24440 comm="syz.6.6175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ebeaefc9 code=0x7ffc0000 [ 659.472028][T24462] Cannot find set identified by id 3 to match [ 659.495760][T24462] loop6: detected capacity change from 0 to 1024 [ 659.547196][T24462] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 659.704802][T20245] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.955290][T24473] loop2: detected capacity change from 0 to 512 [ 659.961847][T24473] EXT4-fs: Ignoring removed i_version option [ 659.968001][T24473] EXT4-fs: Ignoring removed bh option [ 660.017179][T24473] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 660.033763][T24473] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 660.045489][T24477] loop5: detected capacity change from 0 to 256 [ 660.192892][T24167] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.256080][T24484] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 660.265141][T24484] openvswitch: netlink: Message has 5 unknown bytes. [ 660.358094][T24488] loop5: detected capacity change from 0 to 4096 [ 660.370462][T24488] ext4: Unknown parameter 'nouser_xattr' [ 660.777784][T24506] lo speed is unknown, defaulting to 1000 [ 660.800636][T24506] lo speed is unknown, defaulting to 1000 [ 661.053305][T24514] lo speed is unknown, defaulting to 1000 [ 661.059921][T24514] lo speed is unknown, defaulting to 1000 [ 661.128953][T24514] lo speed is unknown, defaulting to 1000 [ 661.135439][T24514] lo speed is unknown, defaulting to 1000 [ 661.617959][T24522] siw: device registration error -23 [ 661.687102][T24522] loop6: detected capacity change from 0 to 512 [ 661.709948][T24525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.761488][T24525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.978618][T24522] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #15: comm syz.6.6199: corrupted inode contents [ 662.057162][T24522] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem [ 662.167530][T24522] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #15: comm syz.6.6199: corrupted inode contents [ 662.244137][T24522] EXT4-fs error (device loop6): ext4_evict_inode:302: inode #15: comm syz.6.6199: mark_inode_dirty error [ 662.283754][T24522] EXT4-fs (loop6): 1 orphan inode deleted [ 662.294095][T24522] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 662.358045][T24522] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.540807][T24544] __nla_validate_parse: 2 callbacks suppressed [ 662.540828][T24544] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6205'. [ 662.793555][T24555] loop5: detected capacity change from 0 to 512 [ 662.887900][T24555] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #15: comm syz.5.6209: corrupted inode contents [ 662.905135][T24555] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 662.917041][T24561] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6211'. [ 662.926278][T24555] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #15: comm syz.5.6209: corrupted inode contents [ 663.003381][T24562] lo speed is unknown, defaulting to 1000 [ 663.009802][T24562] lo speed is unknown, defaulting to 1000 [ 663.118358][T24562] lo speed is unknown, defaulting to 1000 [ 663.124960][T24562] lo speed is unknown, defaulting to 1000 [ 663.410389][T24555] EXT4-fs error (device loop5): ext4_evict_inode:302: inode #15: comm syz.5.6209: mark_inode_dirty error [ 663.442978][T24555] EXT4-fs (loop5): 1 orphan inode deleted [ 663.467795][T24555] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 663.511974][T24555] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 663.703128][T24574] tipc: Started in network mode [ 663.708077][T24574] tipc: Node identity 4, cluster identity 4711 [ 663.714277][T24574] tipc: Node number set to 4 [ 663.737504][T24576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6217'. [ 663.775787][T24576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6217'. [ 663.868791][T24583] FAULT_INJECTION: forcing a failure. [ 663.868791][T24583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 663.881936][T24583] CPU: 1 UID: 0 PID: 24583 Comm: syz.4.6220 Not tainted syzkaller #0 PREEMPT(voluntary) [ 663.882011][T24583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 663.882029][T24583] Call Trace: [ 663.882038][T24583] [ 663.882046][T24583] __dump_stack+0x1d/0x30 [ 663.882067][T24583] dump_stack_lvl+0xe8/0x140 [ 663.882091][T24583] dump_stack+0x15/0x1b [ 663.882112][T24583] should_fail_ex+0x265/0x280 [ 663.882259][T24583] should_fail+0xb/0x20 [ 663.882294][T24583] should_fail_usercopy+0x1a/0x20 [ 663.882316][T24583] copy_fpstate_to_sigframe+0x628/0x7d0 [ 663.882361][T24583] ? copy_fpstate_to_sigframe+0xe6/0x7d0 [ 663.882407][T24583] ? x86_task_fpu+0x36/0x60 [ 663.882493][T24583] get_sigframe+0x34d/0x490 [ 663.882517][T24583] ? get_signal+0xdc7/0xf70 [ 663.882545][T24583] x64_setup_rt_frame+0xa8/0x580 [ 663.882573][T24583] arch_do_signal_or_restart+0x23e/0x440 [ 663.882600][T24583] exit_to_user_mode_loop+0x77/0x110 [ 663.882649][T24583] do_syscall_64+0x1d6/0x200 [ 663.882684][T24583] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 663.882719][T24583] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 663.882749][T24583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.882822][T24583] RIP: 0033:0x7f3930d3efc7 [ 663.882837][T24583] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 663.882874][T24583] RSP: 002b:00007f392f7a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 663.882898][T24583] RAX: 0000000000000000 RBX: 00007f3930f95fa0 RCX: 00007f3930d3efc9 [ 663.882916][T24583] RDX: 0000000000018fdc RSI: 0000200000032440 RDI: 0000000000000007 [ 663.882999][T24583] RBP: 00007f392f7a7090 R08: 0000000000000000 R09: 0000000000000000 [ 663.883086][T24583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 663.883099][T24583] R13: 00007f3930f96038 R14: 00007f3930f95fa0 R15: 00007ffc01db1338 [ 663.883118][T24583] [ 664.105373][ T29] kauditd_printk_skb: 322 callbacks suppressed [ 664.105387][ T29] audit: type=1400 audit(1760953606.903:44173): avc: denied { setopt } for pid=24582 comm="syz.4.6220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 664.289718][T24590] loop5: detected capacity change from 0 to 512 [ 664.296107][ T29] audit: type=1326 audit(1760953607.093:44174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24582 comm="syz.4.6220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3930d3efc9 code=0x7ffc0000 [ 664.319732][ T29] audit: type=1326 audit(1760953607.093:44175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24582 comm="syz.4.6220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3930d3efc9 code=0x7ffc0000 [ 664.343346][ T29] audit: type=1326 audit(1760953607.093:44176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24582 comm="syz.4.6220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3930d3efc9 code=0x7ffc0000 [ 664.367010][ T29] audit: type=1326 audit(1760953607.093:44177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24582 comm="syz.4.6220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f3930d3efc9 code=0x7ffc0000 [ 664.390684][ T29] audit: type=1326 audit(1760953607.093:44178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24582 comm="syz.4.6220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3930d3efc9 code=0x7ffc0000 [ 664.414317][ T29] audit: type=1326 audit(1760953607.093:44179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24582 comm="syz.4.6220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3930d3efc9 code=0x7ffc0000 [ 664.418823][T24594] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6223'. [ 664.479750][T24590] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 664.553792][T24590] ext4 filesystem being mounted at /455/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 664.565617][T24600] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6225'. [ 664.574984][T24600] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 664.583278][ T29] audit: type=1400 audit(1760953607.353:44180): avc: denied { read } for pid=24601 comm="syz.4.6226" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 664.606703][ T29] audit: type=1400 audit(1760953607.353:44181): avc: denied { open } for pid=24601 comm="syz.4.6226" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 664.612567][T24598] lo speed is unknown, defaulting to 1000 [ 664.655853][T24602] loop4: detected capacity change from 0 to 164 [ 664.669886][T24598] lo speed is unknown, defaulting to 1000 [ 664.689219][T24605] lo speed is unknown, defaulting to 1000 [ 664.695935][ T29] audit: type=1400 audit(1760953607.443:44182): avc: denied { create } for pid=24601 comm="syz.4.6226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 664.705842][T24605] lo speed is unknown, defaulting to 1000 [ 664.723238][T24602] rock: corrupted directory entry. extent=32, offset=0, size=65773 [ 664.732128][T24602] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 664.741548][T24590] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6222'. [ 664.808488][T17729] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.272367][T24622] loop5: detected capacity change from 0 to 512 [ 665.298778][T24622] EXT4-fs: Ignoring removed i_version option [ 665.304920][T24622] EXT4-fs: Ignoring removed bh option [ 665.327302][T24622] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 665.353676][T24622] ext4 filesystem being mounted at /457/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 665.384796][T17729] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.436253][T24627] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6232'. [ 665.476315][T24627] loop5: detected capacity change from 0 to 128 [ 665.483135][T24627] vfat: Unknown parameter 'ÿÿ0xffffffffffffffff' [ 665.535934][T24633] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.6234'. [ 665.545432][T24633] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 665.553808][T24633] openvswitch: netlink: Message has 5 unknown bytes. [ 665.628867][T24639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6236'. [ 665.709652][T24645] hub 9-0:1.0: USB hub found [ 665.719123][T24645] hub 9-0:1.0: 8 ports detected [ 665.719235][T24617] FAULT_INJECTION: forcing a failure. [ 665.719235][T24617] name failslab, interval 1, probability 0, space 0, times 0 [ 665.737550][T24617] CPU: 1 UID: 0 PID: 24617 Comm: syz.4.6230 Not tainted syzkaller #0 PREEMPT(voluntary) [ 665.737635][T24617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 665.737648][T24617] Call Trace: [ 665.737736][T24617] [ 665.737744][T24617] __dump_stack+0x1d/0x30 [ 665.737800][T24617] dump_stack_lvl+0xe8/0x140 [ 665.737826][T24617] dump_stack+0x15/0x1b [ 665.737845][T24617] should_fail_ex+0x265/0x280 [ 665.737893][T24617] should_failslab+0x8c/0xb0 [ 665.737930][T24617] kmem_cache_alloc_noprof+0x50/0x480 [ 665.737965][T24617] ? taskstats_exit+0x297/0x6a0 [ 665.738043][T24617] taskstats_exit+0x297/0x6a0 [ 665.738076][T24617] do_exit+0x3fc/0x15c0 [ 665.738159][T24617] ? task_mm_cid_work+0x98/0x1d0 [ 665.738211][T24617] do_group_exit+0xff/0x140 [ 665.738246][T24617] ? get_signal+0xe50/0xf70 [ 665.738306][T24617] get_signal+0xe58/0xf70 [ 665.738339][T24617] arch_do_signal_or_restart+0x96/0x440 [ 665.738418][T24617] exit_to_user_mode_loop+0x77/0x110 [ 665.738446][T24617] do_syscall_64+0x1d6/0x200 [ 665.738529][T24617] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 665.738589][T24617] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 665.738663][T24617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.738705][T24617] RIP: 0033:0x7f3930d3efc9 [ 665.738724][T24617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 665.738761][T24617] RSP: 002b:00007f392f7a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 665.738786][T24617] RAX: fffffffffffffe00 RBX: 00007f3930f95fa0 RCX: 00007f3930d3efc9 [ 665.738800][T24617] RDX: 0000000000000001 RSI: 0000200000003d40 RDI: 0000000000000003 [ 665.738812][T24617] RBP: 00007f392f7a7090 R08: 0000000000000000 R09: 0000000000000000 [ 665.738824][T24617] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 665.738922][T24617] R13: 00007f3930f96038 R14: 00007f3930f95fa0 R15: 00007ffc01db1338 [ 665.738946][T24617] [ 665.993108][T24647] loop4: detected capacity change from 0 to 128 [ 666.488072][T24661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.521861][T24661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.813975][T24668] lo speed is unknown, defaulting to 1000 [ 666.820760][T24668] lo speed is unknown, defaulting to 1000 [ 666.898430][T24668] lo speed is unknown, defaulting to 1000 [ 666.905338][T24668] lo speed is unknown, defaulting to 1000 [ 667.533246][T24672] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 667.541668][T24672] openvswitch: netlink: Message has 5 unknown bytes. [ 668.145847][T24700] loop2: detected capacity change from 0 to 256 [ 668.226807][T24706] loop5: detected capacity change from 0 to 512 [ 668.234519][T24706] EXT4-fs: Ignoring removed i_version option [ 668.240581][T24706] EXT4-fs: Ignoring removed bh option [ 668.267322][T24709] __nla_validate_parse: 3 callbacks suppressed [ 668.267339][T24709] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6256'. [ 668.283951][T24710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6257'. [ 668.324466][T24714] loop2: detected capacity change from 0 to 128 [ 668.359793][T24706] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 668.374987][T24706] ext4 filesystem being mounted at /465/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 668.392104][T24714] bio_check_eod: 14 callbacks suppressed [ 668.392119][T24714] syz.2.6259: attempt to access beyond end of device [ 668.392119][T24714] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 668.437951][T24723] siw: device registration error -23 [ 668.452983][T17729] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.469309][T24723] loop4: detected capacity change from 0 to 512 [ 668.478419][T24714] syz.2.6259: attempt to access beyond end of device [ 668.478419][T24714] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 668.520714][T24714] syz.2.6259: attempt to access beyond end of device [ 668.520714][T24714] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 668.528238][T24728] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=24728 comm=syz.2.6259 [ 668.547378][T24728] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=24728 comm=syz.2.6259 [ 668.560973][T24723] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.6262: corrupted inode contents [ 668.579348][T24729] loop5: detected capacity change from 0 to 512 [ 668.583574][T24723] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 668.594515][T24714] syz.2.6259: attempt to access beyond end of device [ 668.594515][T24714] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 668.608781][T24714] syz.2.6259: attempt to access beyond end of device [ 668.608781][T24714] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 668.612301][T24729] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #15: comm syz.5.6263: corrupted inode contents [ 668.622321][T24714] syz.2.6259: attempt to access beyond end of device [ 668.622321][T24714] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 668.634392][T24723] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.6262: corrupted inode contents [ 668.634612][T24723] EXT4-fs error (device loop4): ext4_evict_inode:302: inode #15: comm syz.4.6262: mark_inode_dirty error [ 668.634854][T24723] EXT4-fs (loop4): 1 orphan inode deleted [ 668.635348][T24723] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 668.648379][T24714] syz.2.6259: attempt to access beyond end of device [ 668.648379][T24714] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 668.704345][T24729] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 668.723818][T24714] syz.2.6259: attempt to access beyond end of device [ 668.723818][T24714] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 668.724223][T24729] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #15: comm syz.5.6263: corrupted inode contents [ 668.770373][T24714] syz.2.6259: attempt to access beyond end of device [ 668.770373][T24714] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 668.785931][T23204] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.797498][T24729] EXT4-fs error (device loop5): ext4_evict_inode:302: inode #15: comm syz.5.6263: mark_inode_dirty error [ 668.813705][T24714] syz.2.6259: attempt to access beyond end of device [ 668.813705][T24714] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 668.827501][T24729] EXT4-fs (loop5): 1 orphan inode deleted [ 668.855743][T24729] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 668.950840][T24738] binfmt_misc: register: failed to install interpreter file ./file0 [ 668.974226][T24738] loop2: detected capacity change from 0 to 512 [ 668.992352][T24738] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 669.008024][T17729] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.135825][T24738] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 669.136977][T24746] loop4: detected capacity change from 0 to 512 [ 669.153871][ T29] kauditd_printk_skb: 403 callbacks suppressed [ 669.153941][ T29] audit: type=1400 audit(1760953611.953:44586): avc: denied { mac_admin } for pid=24737 comm="syz.2.6266" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 669.186936][T24738] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.6266: corrupted inode contents [ 669.199616][T24738] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #2: comm syz.2.6266: mark_inode_dirty error [ 669.211473][ T29] audit: type=1400 audit(1760953611.983:44587): avc: denied { relabelto } for pid=24737 comm="syz.2.6266" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 669.237940][ T29] audit: type=1400 audit(1760953611.983:44588): avc: denied { open } for pid=24747 comm="syz.5.6269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 669.238217][T24738] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.6266: corrupted inode contents [ 669.257473][ T29] audit: type=1400 audit(1760953611.983:44589): avc: denied { kernel } for pid=24747 comm="syz.5.6269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 669.259842][T24746] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 669.303247][T24746] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 669.318967][ T29] audit: type=1400 audit(1760953612.113:44590): avc: denied { add_name } for pid=24737 comm="syz.2.6266" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 669.328918][T24754] loop1: detected capacity change from 0 to 128 [ 669.340000][ T29] audit: type=1400 audit(1760953612.113:44591): avc: denied { create } for pid=24737 comm="syz.2.6266" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 669.367592][T24738] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.6266: corrupted inode contents [ 669.367973][T24746] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.6270: corrupted inode contents [ 669.402317][T24738] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #2: comm syz.2.6266: mark_inode_dirty error [ 669.415150][T24746] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.6270: mark_inode_dirty error [ 669.427470][T24738] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.6266: corrupted inode contents [ 669.439726][T24746] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.6270: corrupted inode contents [ 669.451856][T24738] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.6266: mark_inode_dirty error [ 669.468560][T24757] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.6270: corrupted inode contents [ 669.480438][ T29] audit: type=1400 audit(1760953612.263:44592): avc: denied { create } for pid=24745 comm="syz.4.6270" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 669.504724][T24757] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.6270: mark_inode_dirty error [ 669.516553][T24757] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.6270: corrupted inode contents [ 669.532003][T24738] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.6266: corrupted inode contents [ 669.546597][T24757] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.6270: mark_inode_dirty error [ 669.558322][T24738] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #2: comm syz.2.6266: mark_inode_dirty error [ 669.567483][T24767] loop5: detected capacity change from 0 to 512 [ 669.570187][T24757] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.6270: corrupted inode contents [ 669.589055][T24756] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.6266: corrupted inode contents [ 669.601151][T24757] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.6270: mark_inode_dirty error [ 669.603645][ T29] audit: type=1400 audit(1760953612.403:44593): avc: denied { create } for pid=24737 comm="syz.2.6266" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 669.641747][T24759] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.6270: corrupted inode contents [ 669.657179][T24167] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.667795][T24767] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 669.680379][T24767] ext4 filesystem being mounted at /469/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 669.695904][T24767] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6275'. [ 669.696984][T24772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.713687][T24772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.728197][ T29] audit: type=1400 audit(1760953612.493:44594): avc: denied { create } for pid=24766 comm="syz.5.6275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 669.747988][ T29] audit: type=1400 audit(1760953612.493:44595): avc: denied { create } for pid=24766 comm="syz.5.6275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 669.758412][T24772] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6277'. [ 669.831549][T23204] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.870211][T17729] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.883509][T24782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6279'. [ 670.115649][T24789] loop2: detected capacity change from 0 to 1024 [ 670.122351][T24789] EXT4-fs: Ignoring removed orlov option [ 670.128075][T24789] EXT4-fs: Ignoring removed mblk_io_submit option [ 670.138118][T24789] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 670.157965][T24789] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 670.228826][T24167] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.278557][T24802] loop4: detected capacity change from 0 to 128 [ 670.472323][T24813] loop4: detected capacity change from 0 to 512 [ 670.508207][T24813] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 670.536777][T24813] ext4 filesystem being mounted at /105/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 670.558899][T24813] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6291'. [ 670.635851][T23204] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.727152][T24824] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6295'. [ 670.736580][T24824] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 670.744958][T24824] openvswitch: netlink: Message has 5 unknown bytes. [ 670.758265][T24827] FAULT_INJECTION: forcing a failure. [ 670.758265][T24827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 670.771458][T24827] CPU: 1 UID: 0 PID: 24827 Comm: syz.6.6296 Not tainted syzkaller #0 PREEMPT(voluntary) [ 670.771493][T24827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 670.771507][T24827] Call Trace: [ 670.771513][T24827] [ 670.771521][T24827] __dump_stack+0x1d/0x30 [ 670.771546][T24827] dump_stack_lvl+0xe8/0x140 [ 670.771566][T24827] dump_stack+0x15/0x1b [ 670.771582][T24827] should_fail_ex+0x265/0x280 [ 670.771645][T24827] should_fail+0xb/0x20 [ 670.771684][T24827] should_fail_usercopy+0x1a/0x20 [ 670.771711][T24827] strncpy_from_user+0x25/0x230 [ 670.771782][T24827] ? kmem_cache_alloc_noprof+0x242/0x480 [ 670.771890][T24827] ? getname_flags+0x80/0x3b0 [ 670.771961][T24827] getname_flags+0xae/0x3b0 [ 670.772043][T24827] do_sys_openat2+0x60/0x110 [ 670.772087][T24827] __x64_sys_openat+0xf2/0x120 [ 670.772113][T24827] x64_sys_call+0x2eab/0x3000 [ 670.772149][T24827] do_syscall_64+0xd2/0x200 [ 670.772182][T24827] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 670.772264][T24827] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 670.772295][T24827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.772331][T24827] RIP: 0033:0x7fc3ebead810 [ 670.772351][T24827] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 670.772376][T24827] RSP: 002b:00007fc3ea916f70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 670.772461][T24827] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc3ebead810 [ 670.772477][T24827] RDX: 0000000000000000 RSI: 00007fc3ebf3207e RDI: 00000000ffffff9c [ 670.772551][T24827] RBP: 00007fc3ebf3207e R08: 0000000000000000 R09: 0000000000000000 [ 670.772567][T24827] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 670.772583][T24827] R13: 00007fc3ec106038 R14: 00007fc3ec105fa0 R15: 00007ffd02baae48 [ 670.772609][T24827] [ 670.989963][T24835] loop5: detected capacity change from 0 to 256 [ 671.101506][T24843] loop6: detected capacity change from 0 to 1024 [ 671.108434][T24843] EXT4-fs: Ignoring removed orlov option [ 671.114962][T24843] EXT4-fs: Ignoring removed mblk_io_submit option [ 671.185038][T24843] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 671.205234][T24843] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 671.312350][T24847] lo speed is unknown, defaulting to 1000 [ 671.318819][T24847] lo speed is unknown, defaulting to 1000 [ 671.488181][T24849] loop2: detected capacity change from 0 to 164 [ 671.543030][T24849] rock: corrupted directory entry. extent=32, offset=0, size=65773 [ 671.594271][T24849] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 671.804263][T24854] 8021q: VLANs not supported on ip6gre0 [ 671.875204][T20245] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 672.211011][T24879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6313'. [ 672.235022][T24879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6313'. [ 672.283457][T24884] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.6315'. [ 672.292853][T24884] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 672.301851][T24884] openvswitch: netlink: Message has 5 unknown bytes. [ 672.536451][T24901] vhci_hcd: invalid port number 96 [ 672.541618][T24901] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 672.956922][T24923] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 672.965293][T24923] openvswitch: netlink: Message has 5 unknown bytes. [ 673.195283][T24927] loop4: detected capacity change from 0 to 512 [ 673.227627][T24927] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 673.243880][T24927] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 673.276731][T24927] __nla_validate_parse: 3 callbacks suppressed [ 673.276817][T24927] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6328'. [ 673.336031][T23204] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.377254][T24935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.404807][T24935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.432807][T24933] loop5: detected capacity change from 0 to 128 [ 673.465620][T24935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6330'. [ 673.694678][T24947] loop5: detected capacity change from 0 to 256 [ 673.734932][T24950] loop2: detected capacity change from 0 to 128 [ 673.772822][T24950] bio_check_eod: 14 callbacks suppressed [ 673.772886][T24950] syz.2.6336: attempt to access beyond end of device [ 673.772886][T24950] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 673.827442][T24950] syz.2.6336: attempt to access beyond end of device [ 673.827442][T24950] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 673.860873][T24950] syz.2.6336: attempt to access beyond end of device [ 673.860873][T24950] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 673.875322][T24950] syz.2.6336: attempt to access beyond end of device [ 673.875322][T24950] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 673.888940][T24950] syz.2.6336: attempt to access beyond end of device [ 673.888940][T24950] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 673.902582][T24950] syz.2.6336: attempt to access beyond end of device [ 673.902582][T24950] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 673.935194][T24950] syz.2.6336: attempt to access beyond end of device [ 673.935194][T24950] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 673.976377][T24950] syz.2.6336: attempt to access beyond end of device [ 673.976377][T24950] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 674.010294][T24950] syz.2.6336: attempt to access beyond end of device [ 674.010294][T24950] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 674.043737][T24950] syz.2.6336: attempt to access beyond end of device [ 674.043737][T24950] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 674.061153][T24957] Cannot find set identified by id 3 to match [ 674.088842][T24957] loop5: detected capacity change from 0 to 1024 [ 674.140334][T24957] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 674.184603][ T29] kauditd_printk_skb: 285 callbacks suppressed [ 674.184620][ T29] audit: type=1326 audit(1760953616.983:44881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24956 comm="syz.5.6338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4d074ad810 code=0x7ffc0000 [ 674.236468][ T29] audit: type=1326 audit(1760953616.983:44882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24956 comm="syz.5.6338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f4d074add17 code=0x7ffc0000 [ 674.260847][ T29] audit: type=1326 audit(1760953616.983:44883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24956 comm="syz.5.6338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4d074ad810 code=0x7ffc0000 [ 674.284451][ T29] audit: type=1326 audit(1760953616.983:44884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24956 comm="syz.5.6338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d074aefc9 code=0x7ffc0000 [ 674.309073][ T29] audit: type=1326 audit(1760953616.983:44885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24956 comm="syz.5.6338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d074aefc9 code=0x7ffc0000 [ 674.332816][ T29] audit: type=1326 audit(1760953616.983:44886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24956 comm="syz.5.6338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d074aefc9 code=0x7ffc0000 [ 674.356574][ T29] audit: type=1326 audit(1760953616.983:44887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24956 comm="syz.5.6338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d074aefc9 code=0x7ffc0000 [ 674.380906][ T29] audit: type=1326 audit(1760953616.983:44888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24956 comm="syz.5.6338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d074aefc9 code=0x7ffc0000 [ 674.405331][ T29] audit: type=1326 audit(1760953616.983:44889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24956 comm="syz.5.6338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4d074aefc9 code=0x7ffc0000 [ 674.428999][ T29] audit: type=1326 audit(1760953616.983:44890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24956 comm="syz.5.6338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d074aefc9 code=0x7ffc0000 [ 674.453947][T17729] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.532107][T24970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.534116][T24969] loop6: detected capacity change from 0 to 512 [ 674.561115][T24970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.563665][T24969] EXT4-fs: Ignoring removed i_version option [ 674.575708][T24969] EXT4-fs: Ignoring removed bh option [ 674.590908][T24969] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 674.609370][T24969] ext4 filesystem being mounted at /294/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 674.648585][T24970] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6341'. [ 674.709412][T20245] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.730017][T24975] loop4: detected capacity change from 0 to 128 [ 674.813082][T24981] loop6: detected capacity change from 0 to 128 [ 674.886829][T24984] loop2: detected capacity change from 0 to 256 [ 675.006613][T24993] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.6351'. [ 675.015995][T24993] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 675.024304][T24993] openvswitch: netlink: Message has 5 unknown bytes. [ 675.037664][T24989] loop4: detected capacity change from 0 to 4096 [ 675.046040][T24990] loop1: detected capacity change from 0 to 4096 [ 675.053929][T24989] ext4: Unknown parameter 'nouser_xattr' [ 675.067855][T24995] Cannot find set identified by id 3 to match [ 675.081663][T24990] ext4: Unknown parameter 'nouser_xattr' [ 675.097407][T24995] loop2: detected capacity change from 0 to 1024 [ 675.116778][T24995] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 675.155728][T24167] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.195394][T25005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6354'. [ 675.214397][T25005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6354'. [ 675.270719][T25009] loop2: detected capacity change from 0 to 164 [ 675.278195][T25009] rock: corrupted directory entry. extent=32, offset=0, size=65773 [ 675.286506][T25009] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 675.320658][T25013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6356'. [ 675.586067][T25024] loop2: detected capacity change from 0 to 4096 [ 675.594218][T25024] ext4: Unknown parameter 'nouser_xattr' [ 675.656535][T25026] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6361'. [ 675.669774][T25026] netlink: 256 bytes leftover after parsing attributes in process `syz.5.6361'. [ 675.759121][T25035] loop6: detected capacity change from 0 to 128 [ 675.866743][T25040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6364'. [ 675.906067][T25037] loop4: detected capacity change from 0 to 164 [ 675.925444][T25037] rock: corrupted directory entry. extent=32, offset=0, size=65773 [ 675.945234][T25037] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 675.981912][T25049] loop6: detected capacity change from 0 to 512 [ 675.989204][T25050] hub 9-0:1.0: USB hub found [ 676.008857][T25050] hub 9-0:1.0: 8 ports detected [ 676.105834][T25049] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 676.235911][T25049] ext4 filesystem being mounted at /299/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 676.349952][T25057] lo speed is unknown, defaulting to 1000 [ 676.356344][T25057] lo speed is unknown, defaulting to 1000 [ 676.427835][T25057] lo speed is unknown, defaulting to 1000 [ 676.434318][T25057] lo speed is unknown, defaulting to 1000 [ 676.785444][T20245] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.852303][T25066] FAULT_INJECTION: forcing a failure. [ 676.852303][T25066] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 676.865625][T25066] CPU: 0 UID: 0 PID: 25066 Comm: syz.1.6371 Not tainted syzkaller #0 PREEMPT(voluntary) [ 676.865671][T25066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 676.865683][T25066] Call Trace: [ 676.865690][T25066] [ 676.865698][T25066] __dump_stack+0x1d/0x30 [ 676.865752][T25066] dump_stack_lvl+0xe8/0x140 [ 676.865778][T25066] dump_stack+0x15/0x1b [ 676.865800][T25066] should_fail_ex+0x265/0x280 [ 676.865921][T25066] should_fail_alloc_page+0xf2/0x100 [ 676.866009][T25066] __alloc_frozen_pages_noprof+0xff/0x360 [ 676.866051][T25066] alloc_pages_mpol+0xb3/0x260 [ 676.866069][T25066] ? alloc_pages_noprof+0xa9/0x130 [ 676.866090][T25066] vma_alloc_folio_noprof+0x1aa/0x300 [ 676.866118][T25066] handle_mm_fault+0xec2/0x2be0 [ 676.866204][T25066] ? vma_start_read+0x141/0x1f0 [ 676.866239][T25066] do_user_addr_fault+0x630/0x1080 [ 676.866274][T25066] ? __x64_sys_openat+0xf2/0x120 [ 676.866297][T25066] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 676.866392][T25066] exc_page_fault+0x62/0xa0 [ 676.866418][T25066] asm_exc_page_fault+0x26/0x30 [ 676.866461][T25066] RIP: 0033:0x7f9efea10580 [ 676.866485][T25066] Code: d1 12 00 89 c3 85 c0 0f 88 f5 07 00 00 83 f8 1d 0f 8f 4d 09 00 00 48 8d 3d ed ec 18 00 31 c0 e8 c6 dc fe ff 41 ba 01 00 00 00 44 0f c1 15 77 fd 4a 00 41 83 fa 05 7f 06 49 83 fd 1a 77 1b 48 [ 676.866507][T25066] RSP: 002b:00007f9efd59cf70 EFLAGS: 00010206 [ 676.866527][T25066] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000000000 [ 676.866543][T25066] RDX: 0000000000000000 RSI: 00007f9efebc1c6c RDI: 00007f9efeb9f260 [ 676.866558][T25066] RBP: 00007f9efd59f090 R08: 0000000000000000 R09: 0000000000000000 [ 676.866629][T25066] R10: 0000000000000001 R11: 0000000000000293 R12: 0000000000000003 [ 676.866645][T25066] R13: 000000000000005a R14: 0000200000000080 R15: 00007fff87d2d048 [ 676.866684][T25066] [ 676.866697][T25066] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 677.159230][T25068] loop4: detected capacity change from 0 to 4096 [ 677.174051][T25068] ext4: Unknown parameter 'nouser_xattr' [ 677.228674][T25071] loop5: detected capacity change from 0 to 4096 [ 677.274046][T25071] ext4: Unknown parameter 'nouser_xattr' [ 677.480336][T25082] loop6: detected capacity change from 0 to 512 [ 677.522905][T25082] EXT4-fs: Ignoring removed i_version option [ 677.528993][T25082] EXT4-fs: Ignoring removed bh option [ 677.575490][T25066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.594183][T25066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.607216][T25082] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 677.646764][T25082] ext4 filesystem being mounted at /302/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 677.796978][T20245] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.266210][T25108] hub 9-0:1.0: USB hub found [ 678.271916][T25100] sd 0:0:1:0: device reset [ 678.289496][T25108] hub 9-0:1.0: 8 ports detected [ 678.414535][T25112] lo speed is unknown, defaulting to 1000 [ 678.421349][T25112] lo speed is unknown, defaulting to 1000 [ 678.499499][T25112] lo speed is unknown, defaulting to 1000 [ 678.506018][T25112] lo speed is unknown, defaulting to 1000 [ 679.313490][T25114] loop5: detected capacity change from 0 to 256 [ 679.503157][T25116] loop6: detected capacity change from 0 to 512 [ 679.531346][ T29] kauditd_printk_skb: 379 callbacks suppressed [ 679.531388][ T29] audit: type=1400 audit(1760953622.323:45270): avc: denied { create } for pid=25118 comm="syz.1.6387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 679.599004][T25116] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 679.628873][T25116] EXT4-fs (loop6): orphan cleanup on readonly fs [ 679.647173][ T29] audit: type=1400 audit(1760953622.353:45271): avc: denied { getopt } for pid=25118 comm="syz.1.6387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 679.686731][T25121] loop2: detected capacity change from 0 to 4096 [ 679.717200][T25121] ext4: Unknown parameter 'nouser_xattr' [ 679.727125][T25116] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.6386: corrupted inode contents [ 679.751395][T25126] loop5: detected capacity change from 0 to 128 [ 679.764011][ T29] audit: type=1400 audit(1760953622.543:45272): avc: denied { create } for pid=25118 comm="syz.1.6387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 679.879123][T25116] EXT4-fs (loop6): Remounting filesystem read-only [ 679.892298][T25116] EXT4-fs (loop6): 1 truncate cleaned up [ 679.903492][T13461] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 679.914155][T13461] Quota error (device loop6): write_blk: dquota write failed [ 679.921605][T13461] Quota error (device loop6): remove_free_dqentry: Can't write block (5) with free entries [ 679.931652][T13461] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 679.942247][T13461] Quota error (device loop6): write_blk: dquota write failed [ 679.949699][T13461] Quota error (device loop6): free_dqentry: Can't move quota data block (5) to free list [ 680.012741][T13461] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 680.022927][T13461] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 680.032058][T13461] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 680.042495][T25116] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 680.058168][ T29] audit: type=1326 audit(1760953622.853:45273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25089 comm="syz.4.6378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3930d3efc9 code=0x7ffc0000 [ 680.220436][T20245] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 680.254725][T25136] loop5: detected capacity change from 0 to 256 [ 680.410840][T25146] Cannot find set identified by id 3 to match [ 680.445292][T25146] loop4: detected capacity change from 0 to 1024 [ 680.447862][T25149] __nla_validate_parse: 5 callbacks suppressed [ 680.447881][T25149] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6395'. [ 680.524082][T25146] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 680.557452][T23204] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 680.969824][T25162] lo speed is unknown, defaulting to 1000 [ 681.004526][T25162] lo speed is unknown, defaulting to 1000 [ 681.123642][T25163] lo speed is unknown, defaulting to 1000 [ 681.177187][T25163] lo speed is unknown, defaulting to 1000 [ 681.545221][T25168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6399'. [ 681.600630][T25172] loop4: detected capacity change from 0 to 128 [ 681.931724][T25178] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6404'. [ 682.053494][T25187] loop5: detected capacity change from 0 to 512 [ 682.115367][T25190] loop6: detected capacity change from 0 to 4096 [ 682.122026][T25190] ext4: Unknown parameter 'nouser_xattr' [ 682.139036][T25187] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #15: comm syz.5.6406: corrupted inode contents [ 682.263464][T25187] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 682.333816][T25187] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #15: comm syz.5.6406: corrupted inode contents [ 682.339622][T25195] loop6: detected capacity change from 0 to 4096 [ 682.362725][T25195] ext4: Unknown parameter 'nouser_xattr' [ 682.403895][T25187] EXT4-fs error (device loop5): ext4_evict_inode:302: inode #15: comm syz.5.6406: mark_inode_dirty error [ 682.444543][T25187] EXT4-fs (loop5): 1 orphan inode deleted [ 682.464068][T25187] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 682.550500][T17729] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.640100][T25203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6411'. [ 682.713265][T25208] loop2: detected capacity change from 0 to 128 [ 682.738499][T25209] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6414'. [ 683.413268][T25223] lo speed is unknown, defaulting to 1000 [ 683.464700][T25223] lo speed is unknown, defaulting to 1000 [ 683.513060][T25224] lo speed is unknown, defaulting to 1000 [ 683.527772][T25224] lo speed is unknown, defaulting to 1000 [ 683.977118][T25228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6417'. [ 684.178041][T25237] siw: device registration error -23 [ 684.233010][T25237] loop4: detected capacity change from 0 to 512 [ 684.307440][T25237] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.6419: corrupted inode contents [ 684.364775][T25237] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 684.396625][T25245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.433891][T25237] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.6419: corrupted inode contents [ 684.439314][T25245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.471793][T25245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6423'. [ 684.502316][T25237] EXT4-fs error (device loop4): ext4_evict_inode:302: inode #15: comm syz.4.6419: mark_inode_dirty error [ 684.652609][T25237] EXT4-fs (loop4): 1 orphan inode deleted [ 684.678234][T25237] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 684.754702][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 684.754717][ T29] audit: type=1326 audit(1760953627.553:45443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25250 comm="syz.6.6424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ebeaefc9 code=0x7ffc0000 [ 684.790403][T23204] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 684.816251][ T29] audit: type=1326 audit(1760953627.583:45444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25250 comm="syz.6.6424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc3ebeaefc9 code=0x7ffc0000 [ 684.840542][ T29] audit: type=1326 audit(1760953627.583:45445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25250 comm="syz.6.6424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ebeaefc9 code=0x7ffc0000 [ 684.840861][T25253] loop6: detected capacity change from 0 to 512 [ 684.864140][ T29] audit: type=1326 audit(1760953627.583:45446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25250 comm="syz.6.6424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7fc3ebeaefc9 code=0x7ffc0000 [ 684.864179][ T29] audit: type=1326 audit(1760953627.583:45447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25250 comm="syz.6.6424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ebeaefc9 code=0x7ffc0000 [ 684.910388][T25253] EXT4-fs: Ignoring removed i_version option [ 684.924326][T25253] EXT4-fs: Ignoring removed bh option [ 684.997082][T25253] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 685.093813][T25253] ext4 filesystem being mounted at /316/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 685.113269][T25265] loop1: detected capacity change from 0 to 128 [ 685.167079][T20245] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.176817][T25265] bio_check_eod: 2 callbacks suppressed [ 685.176834][T25265] syz.1.6429: attempt to access beyond end of device [ 685.176834][T25265] loop1: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 685.197558][T25265] syz.1.6429: attempt to access beyond end of device [ 685.197558][T25265] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 685.213768][T25265] syz.1.6429: attempt to access beyond end of device [ 685.213768][T25265] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 685.274668][T25272] Cannot find set identified by id 3 to match [ 685.288403][T25272] loop4: detected capacity change from 0 to 1024 [ 685.296511][T25265] syz.1.6429: attempt to access beyond end of device [ 685.296511][T25265] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 685.341095][T25265] syz.1.6429: attempt to access beyond end of device [ 685.341095][T25265] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 685.345714][ T29] audit: type=1326 audit(1760953628.053:45448): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25238 comm="syz.5.6421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d074aefc9 code=0x7ffc0000 [ 685.378577][T25265] syz.1.6429: attempt to access beyond end of device [ 685.378577][T25265] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 685.378634][T25265] syz.1.6429: attempt to access beyond end of device [ 685.378634][T25265] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 685.378781][T25265] syz.1.6429: attempt to access beyond end of device [ 685.378781][T25265] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 685.378820][T25265] syz.1.6429: attempt to access beyond end of device [ 685.378820][T25265] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 685.378874][T25265] syz.1.6429: attempt to access beyond end of device [ 685.378874][T25265] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 685.384482][T25265] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=25265 comm=syz.1.6429 [ 685.392885][ T29] audit: type=1326 audit(1760953628.053:45449): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25238 comm="syz.5.6421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f4d074aefc9 code=0x7ffc0000 [ 685.451745][T25277] loop5: detected capacity change from 0 to 512 [ 685.460512][ T29] audit: type=1326 audit(1760953628.053:45450): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25238 comm="syz.5.6421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d074aefc9 code=0x7ffc0000 [ 685.496529][T25280] lo speed is unknown, defaulting to 1000 [ 685.516115][ T29] audit: type=1326 audit(1760953628.053:45451): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25238 comm="syz.5.6421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d074aefc9 code=0x7ffc0000 [ 685.522058][T25280] lo speed is unknown, defaulting to 1000 [ 685.546544][ T29] audit: type=1326 audit(1760953628.053:45452): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25238 comm="syz.5.6421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d074aefc9 code=0x7ffc0000 [ 685.593446][T25277] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #15: comm syz.5.6433: corrupted inode contents [ 685.594094][T25270] lo speed is unknown, defaulting to 1000 [ 685.605694][T25277] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 685.605879][T25277] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #15: comm syz.5.6433: corrupted inode contents [ 685.606022][T25277] EXT4-fs error (device loop5): ext4_evict_inode:302: inode #15: comm syz.5.6433: mark_inode_dirty error [ 685.606202][T25277] EXT4-fs (loop5): 1 orphan inode deleted [ 685.612169][T25270] lo speed is unknown, defaulting to 1000 [ 685.724110][T20245] ================================================================== [ 685.732271][T20245] BUG: KCSAN: data-race in shmem_getattr / shmem_recalc_inode [ 685.739769][T20245] [ 685.742106][T20245] read-write to 0xffff888103ea7d18 of 8 bytes by task 25287 on cpu 0: [ 685.750276][T20245] shmem_recalc_inode+0x3b/0x200 [ 685.755257][T20245] shmem_get_folio_gfp+0x7a3/0xd60 [ 685.760421][T20245] shmem_write_begin+0xa8/0x190 [ 685.765320][T20245] generic_perform_write+0x184/0x490 [ 685.770656][T20245] shmem_file_write_iter+0xc5/0xf0 [ 685.775961][T20245] __kernel_write_iter+0x2d6/0x540 [ 685.781120][T20245] dump_user_range+0x61e/0x8f0 [ 685.785914][T20245] elf_core_dump+0x1de7/0x1f80 [ 685.790712][T20245] coredump_write+0xb12/0xe30 [ 685.795425][T20245] vfs_coredump+0x143a/0x20d0 [ 685.800136][T20245] get_signal+0xd84/0xf70 [ 685.804489][T20245] arch_do_signal_or_restart+0x96/0x440 [ 685.810060][T20245] irqentry_exit_to_user_mode+0x5b/0xa0 [ 685.815632][T20245] irqentry_exit+0x12/0x50 [ 685.820077][T20245] asm_exc_page_fault+0x26/0x30 [ 685.824946][T20245] [ 685.827277][T20245] read to 0xffff888103ea7d18 of 8 bytes by task 20245 on cpu 1: [ 685.834921][T20245] shmem_getattr+0x41/0x200 [ 685.839431][T20245] vfs_getattr_nosec+0x146/0x1e0 [ 685.844395][T20245] vfs_statx+0x113/0x390 [ 685.848658][T20245] vfs_fstatat+0x115/0x170 [ 685.853111][T20245] __se_sys_newfstatat+0x55/0x260 [ 685.858172][T20245] __x64_sys_newfstatat+0x55/0x70 [ 685.863236][T20245] x64_sys_call+0x135a/0x3000 [ 685.867928][T20245] do_syscall_64+0xd2/0x200 [ 685.872464][T20245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.878377][T20245] [ 685.880713][T20245] value changed: 0x0000000000000585 -> 0x0000000000000589 [ 685.887822][T20245] [ 685.890151][T20245] Reported by Kernel Concurrency Sanitizer on: [ 685.896312][T20245] CPU: 1 UID: 0 PID: 20245 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 685.906319][T20245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 685.916397][T20245] ================================================================== [ 685.948306][T25282] loop1: detected capacity change from 0 to 164 [ 685.957230][T25282] rock: corrupted directory entry. extent=32, offset=0, size=65773 [ 685.965353][T25282] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 686.000757][T25289] Cannot find set identified by id 3 to match [ 686.013557][T25289] loop6: detected capacity change from 0 to 1024