last executing test programs: 3m8.0663934s ago: executing program 0 (id=158): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x40000) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16, @ANYBLOB="00032bbd7000fcdbdf25150000003000018008000300", @ANYRES32, @ANYRES32], 0xe4}, 0x1, 0x0, 0x0, 0x4}, 0x80) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="08010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000800010000000000140004800500030000000000050003"], 0x108}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) close_range(r0, 0xffffffffffffffff, 0x400000000000000) 3m7.983307211s ago: executing program 0 (id=161): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x3) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000028000000000006907864010101ac1414aa00004e22ebfeff4ac432dbca2879e808c756c22373cf2886a5dd8fdbc2cc8677ecda859ed50e6a8deb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02ffff90780000"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) lsm_get_self_attr(0x67, &(0x7f0000000580)={0x0, 0x0, 0xfd, 0xdd, ""/221}, &(0x7f00000000c0)=0xfd, 0x0) (fail_nth: 3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008650000b70400000000000085000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000200)=0x7ffffffc) ioctl$EVIOCGRAB(r5, 0x40044590, 0x0) 3m7.515888479s ago: executing program 0 (id=166): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xb4}}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0x80045505, &(0x7f0000000400)=@usbdevfs_driver={0xffffffff, 0x8, 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) sysinfo(&(0x7f0000000000)=""/8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x22, 0x800, 0x7ff) r5 = socket$unix(0x1, 0x5, 0x0) getpeername$qrtr(r5, &(0x7f0000000200), &(0x7f0000000300)=0xc) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r7}, 0x10) perf_event_open(&(0x7f0000000040)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x10000, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r9 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f0000000300)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}, @in={0x2, 0x4e22, @broadcast}], 0x20) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff2, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 3m7.168175975s ago: executing program 0 (id=173): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1be) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_emit_ethernet(0xfc1, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xfb3, 0x0, 0x0, 0x0, 0x84, 0x0, @empty, @broadcast}, "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"}}}}, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x31001, 0x0) mount$bind(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x85801, 0x0) 3m7.141493215s ago: executing program 0 (id=175): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a50000000060a0b0400000000000000000200000014000480100001800a00010072656469720000000900010073797a30000000001c000580080001400000003a0800014000000010080002400000000020000000030a010100000000f1ffffff010000060900010073797a300000000014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x68, &(0x7f0000000100)={@broadcast, @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x2, 0x10, [], "7f1a"}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = io_uring_setup(0x4074, &(0x7f00000002c0)={0x0, 0xb7ea, 0x10, 0x2, 0x5f}) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, 0x0) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[], 0x30}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x200000000000000) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000300)=0x3) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000000180)="00214717", 0x4}], 0x1, 0x3, 0x0) 3m6.955600888s ago: executing program 0 (id=179): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) (fail_nth: 3) 3m6.951198009s ago: executing program 32 (id=179): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) (fail_nth: 3) 2.45723338s ago: executing program 3 (id=4769): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) 2.115060485s ago: executing program 3 (id=4775): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='mm_page_alloc\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x9f, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffe, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000b70500000800000085000000a50000001801000020206405000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000003c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setgroups(0x0, 0x0) rmdir(&(0x7f0000000340)='./file0\x00') bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x24}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000400)='\b', 0x1}, {0x0}], 0x2, &(0x7f00000004c0)}, 0x20004000) r2 = open(&(0x7f0000000300)='./file0\x00', 0x101000, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000200)={{0x2, 0x4e24, @multicast1}, {0x306, @random="a737146951fe"}, 0x0, {0x2, 0x4e23, @broadcast}, 'hsr0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r10, r9, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) sendmsg$inet(r8, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) close(r7) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x18, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.964539618s ago: executing program 5 (id=4782): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 1.963655768s ago: executing program 5 (id=4783): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='mm_page_alloc\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x9f, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffe, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000b70500000800000085000000a50000001801000020206405000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000003c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setgroups(0x0, 0x0) rmdir(&(0x7f0000000340)='./file0\x00') bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x24}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000400)='\b', 0x1}, {0x0}], 0x2, &(0x7f00000004c0)}, 0x20004000) r2 = open(&(0x7f0000000300)='./file0\x00', 0x101000, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000200)={{0x2, 0x4e24, @multicast1}, {0x306, @random="a737146951fe"}, 0x0, {0x2, 0x4e23, @broadcast}, 'hsr0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r9, r8, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) close(r6) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x18, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.866161749s ago: executing program 3 (id=4786): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) 1.865909469s ago: executing program 1 (id=4787): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 1.84518083s ago: executing program 2 (id=4789): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='workqueue_queue_work\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r1) 1.83270663s ago: executing program 1 (id=4790): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x13, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) syz_emit_ethernet(0x12, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x5}}, {@generic={0x88fb}}}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe0}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000380)="47436b4c816815fc81d0e21fd7ec4a1915dc9fc0fe06f8eb6d722e85f699369715ed9263c36e63cd683296a55146b9b4f5c821c452ab0e1d9ef91b74c6f4ef51627f74acf58d70ac5acc56480ea6be72acae424a39866ba6ae3667ac959a", 0x5e}], 0x1}}], 0x1, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000002080)={0xfc, {"a2e3ad09ed0d09f91b37071887f70e09d038e7ff7fc6e5539b0d5b0a8b089b3f38316e030890e0879b0a71c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 1.79585843s ago: executing program 2 (id=4791): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40) (fail_nth: 1) 981.808554ms ago: executing program 1 (id=4792): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x9, 0x3, 0x1b8, 0x90, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x120, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@ip={@multicast2, @multicast2, 0xff000000, 0x0, 'macvtap0\x00', 'bridge_slave_0\x00', {}, {}, 0x4, 0x1, 0x21}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x218) signalfd(r1, &(0x7f0000000200)={[0x6]}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @fwd={0x2, 0x0, 0x0, 0x12}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f0000000440), &(0x7f0000000480)=r1}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) 981.198934ms ago: executing program 2 (id=4793): syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604) r0 = syz_open_dev$evdev(&(0x7f0000000380), 0x1, 0x282) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000080)={0x0, 0x5, 0x0, 0x1000101, "0020946fc67f0000201b14700c1e0ac74f0000000016000000f9000900"}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x841, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x1, 0x8, 0xfff, 0x7, {{0x14, 0x4, 0x3, 0x1, 0x50, 0x67, 0x0, 0x1, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x9f, 0x7, "b3e4cd38b4"}, @generic={0x94, 0xb, "6a72be35ec6a76d515"}, @generic={0x88, 0x11, "85d11b26c7c9d0cc17dc961b55db20"}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x43, 0x1, 0x4, [{@multicast1, 0x9}, {@empty, 0x5}]}]}}}}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYRES32=r2], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r3, @fallback=0x1d, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4, 0x0, 0x7}, 0x18) socket$tipc(0x1e, 0x5, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='ext4_es_lookup_extent_exit\x00', r5}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000004c0)={[{@usrjquota}, {@noblock_validity}, {@abort}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x1f5}}, {@grpjquota, 0x2e}, {@barrier}, {@nolazytime}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4aa, &(0x7f0000000c00)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x44090) socket(0x1e, 0x3, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000002c0)=0x0) capset(&(0x7f0000000300)={0x20071026, r7}, &(0x7f0000000340)={0x200, 0x2, 0xffffff58, 0x3, 0x7f}) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close_range(r6, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xffb3, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 981.035674ms ago: executing program 3 (id=4794): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 980.848454ms ago: executing program 4 (id=4795): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095", @ANYRES64=r1, @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') openat(r3, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) 980.352864ms ago: executing program 5 (id=4802): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) 929.669425ms ago: executing program 1 (id=4796): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40) 909.183375ms ago: executing program 3 (id=4797): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x306, @multicast}, 0x1c, {0x2, 0x4e21, @multicast2}, 'veth0\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r1, &(0x7f0000000c00)=[{&(0x7f0000000500)=""/234, 0xea}], 0x1, 0xffff, 0x5dd073cf) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40) 876.227675ms ago: executing program 1 (id=4798): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r5) (async) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8004) (async) syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000a40), 0x1, 0x4be, &(0x7f0000000540)="$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") (async) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) (async) lseek(r7, 0xa, 0x0) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="414601", @ANYRES32=r5, @ANYRESOCT=r6, @ANYRES8=r0], 0xffffffffffffffab) (async) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0xc0, 0x4, 0x38, 0x7fffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f00000002c0)) 813.490927ms ago: executing program 3 (id=4799): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 812.817237ms ago: executing program 5 (id=4800): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) syz_open_procfs(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)=""/2, 0x2}], 0x1) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) 805.228297ms ago: executing program 4 (id=4801): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 775.054367ms ago: executing program 4 (id=4803): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9998500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r0}, 0x18) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r1, 0x4bfa, &(0x7f0000000080)) 716.129488ms ago: executing program 1 (id=4804): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe0}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 715.519098ms ago: executing program 4 (id=4805): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='mm_page_alloc\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x9f, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffe, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000b70500000800000085000000a50000001801000020206405000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000003c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setgroups(0x0, 0x0) rmdir(&(0x7f0000000340)='./file0\x00') bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x24}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000400)='\b', 0x1}, {0x0}], 0x2, &(0x7f00000004c0)}, 0x20004000) r2 = open(&(0x7f0000000300)='./file0\x00', 0x101000, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000200)={{0x2, 0x4e24, @multicast1}, {0x306, @random="a737146951fe"}, 0x0, {0x2, 0x4e23, @broadcast}, 'hsr0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r10, r9, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) sendmsg$inet(r8, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) close(r7) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x18, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 677.580859ms ago: executing program 2 (id=4806): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='mm_page_alloc\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x9f, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffe, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000b70500000800000085000000a50000001801000020206405000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000003c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setgroups(0x0, 0x0) rmdir(&(0x7f0000000340)='./file0\x00') bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x24}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000400)='\b', 0x1}, {0x0}], 0x2, &(0x7f00000004c0)}, 0x20004000) r2 = open(&(0x7f0000000300)='./file0\x00', 0x101000, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000200)={{0x2, 0x4e24, @multicast1}, {0x306, @random="a737146951fe"}, 0x0, {0x2, 0x4e23, @broadcast}, 'hsr0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r9, r8, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) close(r6) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x18, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 676.809999ms ago: executing program 5 (id=4816): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) syz_open_procfs(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)=""/2, 0x2}], 0x1) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) 599.4148ms ago: executing program 5 (id=4807): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x13, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) syz_emit_ethernet(0x12, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x5}}, {@generic={0x88fb}}}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe0}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000380)="47436b4c816815fc81d0e21fd7ec4a1915dc9fc0fe06f8eb6d722e85f699369715ed9263c36e63cd683296a55146b9b4f5c821c452ab0e1d9ef91b74c6f4ef51627f74acf58d70ac5acc56480ea6be72acae424a39866ba6ae3667ac959a", 0x5e}], 0x1}}], 0x1, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 557.776071ms ago: executing program 4 (id=4808): socket$nl_audit(0x10, 0x3, 0x9) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000280)=ANY=[], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$rxrpc(0x21, 0x2, 0xa) socket$kcm(0x10, 0x2, 0x4) r1 = syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x1, 0x10100, 0x0, 0x40000}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[@ANYRES64=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r5, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 448.339943ms ago: executing program 2 (id=4809): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 431.770153ms ago: executing program 2 (id=4810): socket$nl_audit(0x10, 0x3, 0x9) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000280)=ANY=[], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$rxrpc(0x21, 0x2, 0xa) socket$kcm(0x10, 0x2, 0x4) r1 = syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x1, 0x10100, 0x0, 0x40000}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[@ANYRES64=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r5, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=4811): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0x23, 0x101}}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x83, &(0x7f00000005c0)={[{@norecovery}, {@noblock_validity}, {@sysvgroups}]}, 0x21, 0x624, &(0x7f0000000d80)="$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") (async) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x83, &(0x7f00000005c0)={[{@norecovery}, {@noblock_validity}, {@sysvgroups}]}, 0x21, 0x624, &(0x7f0000000d80)="$eJzs3UtvFFcWAOBT7fZ7ZmzQaGaYxWBpNAJpBht7IEJRpMAeIfLYJVk42CCCwQg7SkyQMBLZRImyySJSVlmE/IokSNnmD2SRTVYREooiFiFCoaMqV5n2o+32o122+/ukwvVw1z1lfHxv3763KoC2NZT+U4k4FBHXk4iBumPVyA8OLXzfo19uXUiXJGq1V35O4tbtZL7+XEn+9UBEpAd+H4gkffnBsa9WlDszd/PK+NTU5I18e2T26vWRmbmbxy5fHb80eWny2thzY6dOnjh5avT41q8vd/buW+8MfHDutS8+e5KMfvnDuSROx9OOhWPpdS1/bfd6J0/WK3soagse1+9Pf66nmr+EXe3XgeL3pNAbSbbjdlkhsQEX89/Hzoj4ewxER93/5kC8/1KpwQEtVUuiqKOAtpNsKv97tj8QYIcV7YDivf1q74NXqrS4VQLshIdnFjoAFnK/MyKK/K/mfWc9Wd9A36NkST9PEhFb65lbkJbx3bfn7qZLNOiHA1pj/k533o29vP5PstwcjJ5sq+9RZUn+V+qWdP/Lmyx/aNm2/IedM38nIv6R1/9dsaH8H6rL/zc3Wb78BwAAAAAAgO1z/0xE/G+18X+VxfE/XauM/+mPiNPbUP76n/9VHuQr68y2Azbq4ZmIF1Yd/7s4xnewI9/6czYeoDO5eHlq8nhE/CUijkZnd7o9uuy89SOEj3108NNG5deP/0uXtPxiLGB+pgfVZRNxJ8Znx7d63UDEwzsR/8zG/x7O9ywd/5PW/8kq9X+a39ebLOPgf+6db3Rs/fwHWqX2ecSRVev/Z83tZO37c4xk7YGRolVQeNYC+Nd7H3/dqHz5D+VJ6/++tfO/O6m/X89Mtu+NZs/fFRH/n6vWGh3fbPu/K3m1ozh/6t3x2dkboxFdydmV+8eajRb2tyIfinxJ8//ov9fu/1ts/9flYW9+j68lGvTQ/e1p/4+N4lH/Q3nS/J9Yu/4fXFr/b3xl7N7gN43KP99U/X8iq9OP5nv0/0G9lffjaDZBSwkXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPa4SkT8KZLK8OJ6pTI8HNEfEX+NvsrU9Mzsfy9Ov31tIj2WPf+/Ujzpd2BhOyme/z9Ytz22dLs3LetARHzS0ZsdH74wPTVR9sUDAAAAAAAAAAAAAAAAAADALtGfzfmvdS+f/5/6qaPs6ICWq+Zf5Tu0nzz/P3x9w6+sdW9/NMBOqpYdAFCa5vO/s6VxADuvcf4/flLL7Gg4wA7S/of2tcn893EB7APqf2hXTfbp9bQ6DqAMjet//f0AAAAAALAHHTh8//skIuaf782WVFd+TOc/7G+VsgMASmMML7Sv6nTZEQBl8R4fSBbXflt1sn/j0f9JawICAAAAAAAAAAAAAFY4csj8f2hXa8//N7Yf9rM15v9nyV9t+tuBvabxoz/U/bDfrfEe3wO/oE2sV9ub/w8AAAAAAAAAAAAAu0DPzSvjU1OTN2bm9t7Ki7sjjI2tzI/vijC2utIbEYt7nramrM6IKP9Ky1jJbsGR/ojLC6PsP0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDhjwAAAP//qsEneg==") kernel console output (not intermixed with test programs): 16878][T14080] loop3: detected capacity change from 0 to 512 [ 182.325253][T14080] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 182.355559][T14088] loop4: detected capacity change from 0 to 512 [ 182.378635][T14080] EXT4-fs (loop3): 1 truncate cleaned up [ 182.421396][T14088] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.3686: corrupted in-inode xattr: invalid ea_ino [ 182.435253][T14088] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.3686: couldn't read orphan inode 15 (err -117) [ 182.449254][T14075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.457992][T14075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.511457][T14096] loop4: detected capacity change from 0 to 512 [ 182.520352][T14096] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.3689: corrupted in-inode xattr: invalid ea_ino [ 182.534851][T14096] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.3689: couldn't read orphan inode 15 (err -117) [ 182.756470][T14108] loop1: detected capacity change from 0 to 2048 [ 182.772225][T14108] siw: device registration error -23 [ 182.792518][T14108] bridge0: entered promiscuous mode [ 182.798835][T14108] batadv0: entered promiscuous mode [ 182.806821][T14108] bridge0: left promiscuous mode [ 182.814114][T14108] batadv0: left promiscuous mode [ 182.962807][T14117] loop1: detected capacity change from 0 to 512 [ 182.973374][T14117] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.3698: corrupted in-inode xattr: invalid ea_ino [ 182.991268][T14117] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.3698: couldn't read orphan inode 15 (err -117) [ 183.220254][T14134] loop1: detected capacity change from 0 to 512 [ 183.237101][T14141] __nla_validate_parse: 42 callbacks suppressed [ 183.237119][T14141] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3706'. [ 183.254742][T14134] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.3703: corrupted in-inode xattr: invalid ea_ino [ 183.281375][T14134] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.3703: couldn't read orphan inode 15 (err -117) [ 183.282934][T14134] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3703'. [ 183.323654][T14145] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3706'. [ 183.332724][T14144] loop1: detected capacity change from 0 to 2048 [ 183.356613][T14144] siw: device registration error -23 [ 183.371218][T14144] bridge0: entered promiscuous mode [ 183.377522][T14144] batadv0: entered promiscuous mode [ 183.386578][T14144] bridge0: left promiscuous mode [ 183.392777][T14144] batadv0: left promiscuous mode [ 183.483193][T14150] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3709'. [ 183.557376][T14152] loop5: detected capacity change from 0 to 512 [ 183.568212][T14152] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.3711: corrupted in-inode xattr: invalid ea_ino [ 183.596922][T14152] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.3711: couldn't read orphan inode 15 (err -117) [ 184.132755][T14160] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3715'. [ 184.148008][T14164] loop5: detected capacity change from 0 to 512 [ 184.156626][T14164] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.3723: corrupted in-inode xattr: invalid ea_ino [ 184.170902][T14164] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.3723: couldn't read orphan inode 15 (err -117) [ 184.203744][ T29] kauditd_printk_skb: 357 callbacks suppressed [ 184.203758][ T29] audit: type=1400 audit(1745205160.486:13371): avc: denied { write } for pid=14167 comm="syz.3.3716" path="socket:[41934]" dev="sockfs" ino=41934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 184.245081][T14170] loop3: detected capacity change from 0 to 512 [ 184.271992][T14170] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.3718: corrupted in-inode xattr: invalid ea_ino [ 184.287197][T14170] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.3718: couldn't read orphan inode 15 (err -117) [ 184.301133][T14170] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3718'. [ 184.333791][T14178] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3720'. [ 184.346518][T14160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.355249][T14160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.416150][T14182] loop2: detected capacity change from 0 to 2048 [ 184.423045][T14178] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3720'. [ 184.446013][T14182] siw: device registration error -23 [ 184.455100][T14182] bridge0: entered promiscuous mode [ 184.461651][T14182] batadv0: entered promiscuous mode [ 184.469893][T14182] bridge0: left promiscuous mode [ 184.476846][T14182] batadv0: left promiscuous mode [ 184.523133][T14189] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3726'. [ 184.611735][T14195] loop2: detected capacity change from 0 to 512 [ 184.628934][T14198] loop5: detected capacity change from 0 to 2048 [ 184.638287][T14195] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.3729: corrupted in-inode xattr: invalid ea_ino [ 184.659167][T14198] siw: device registration error -23 [ 184.669038][T14198] bridge0: entered promiscuous mode [ 184.678455][T14198] batadv0: entered promiscuous mode [ 184.684255][T14195] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.3729: couldn't read orphan inode 15 (err -117) [ 184.696226][T14198] bridge0: left promiscuous mode [ 184.702231][T14198] batadv0: left promiscuous mode [ 184.739618][T14206] FAULT_INJECTION: forcing a failure. [ 184.739618][T14206] name failslab, interval 1, probability 0, space 0, times 0 [ 184.752430][T14206] CPU: 0 UID: 0 PID: 14206 Comm: syz.1.3732 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(voluntary) [ 184.752463][T14206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 184.752479][T14206] Call Trace: [ 184.752485][T14206] [ 184.752493][T14206] dump_stack_lvl+0xf6/0x150 [ 184.752525][T14206] dump_stack+0x15/0x1a [ 184.752541][T14206] should_fail_ex+0x261/0x270 [ 184.752649][T14206] should_failslab+0x8f/0xb0 [ 184.752676][T14206] __kvmalloc_node_noprof+0x12c/0x520 [ 184.752769][T14206] ? xt_alloc_table_info+0x3d/0x80 [ 184.752801][T14206] ? should_fail_ex+0xd7/0x270 [ 184.752830][T14206] xt_alloc_table_info+0x3d/0x80 [ 184.752868][T14206] do_arpt_set_ctl+0x5a2/0x9b0 [ 184.752964][T14206] ? _raw_spin_unlock_bh+0x36/0x40 [ 184.753007][T14206] ? tcp_release_cb+0x108/0x390 [ 184.753040][T14206] ? _raw_spin_unlock_bh+0x36/0x40 [ 184.753146][T14206] ? release_sock+0x117/0x150 [ 184.753188][T14206] nf_setsockopt+0x195/0x1b0 [ 184.753212][T14206] ip_setsockopt+0xea/0x100 [ 184.753284][T14206] tcp_setsockopt+0x93/0xb0 [ 184.753323][T14206] sock_common_setsockopt+0x64/0x80 [ 184.753427][T14206] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 184.753458][T14206] smc_setsockopt+0x184/0x7b0 [ 184.753489][T14206] ? __pfx_smc_setsockopt+0x10/0x10 [ 184.753537][T14206] __sys_setsockopt+0x187/0x200 [ 184.753565][T14206] __x64_sys_setsockopt+0x66/0x80 [ 184.753589][T14206] x64_sys_call+0x2a09/0x2e10 [ 184.753694][T14206] do_syscall_64+0xc9/0x1a0 [ 184.753728][T14206] ? clear_bhb_loop+0x25/0x80 [ 184.753794][T14206] ? clear_bhb_loop+0x25/0x80 [ 184.753814][T14206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.753839][T14206] RIP: 0033:0x7fef3de9e169 [ 184.753857][T14206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.753952][T14206] RSP: 002b:00007fef3c507038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 184.753981][T14206] RAX: ffffffffffffffda RBX: 00007fef3e0c5fa0 RCX: 00007fef3de9e169 [ 184.753996][T14206] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000004 [ 184.754010][T14206] RBP: 00007fef3c507090 R08: 0000000000000440 R09: 0000000000000000 [ 184.754024][T14206] R10: 0000200000000f40 R11: 0000000000000246 R12: 0000000000000001 [ 184.754077][T14206] R13: 0000000000000000 R14: 00007fef3e0c5fa0 R15: 00007ffddf97fda8 [ 184.754096][T14206] [ 185.005943][T14208] loop2: detected capacity change from 0 to 512 [ 185.015280][T14208] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.3733: corrupted in-inode xattr: invalid ea_ino [ 185.029041][T14208] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.3733: couldn't read orphan inode 15 (err -117) [ 185.044008][T14208] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3733'. [ 186.018951][T14237] loop2: detected capacity change from 0 to 512 [ 186.034066][T14237] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.3743: corrupted in-inode xattr: invalid ea_ino [ 186.075844][T14237] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.3743: couldn't read orphan inode 15 (err -117) [ 186.105862][T14243] loop3: detected capacity change from 0 to 2048 [ 186.113968][T14248] loop2: detected capacity change from 0 to 512 [ 186.122495][T14248] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.3748: corrupted in-inode xattr: invalid ea_ino [ 186.126798][T14243] siw: device registration error -23 [ 186.136566][T14248] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.3748: couldn't read orphan inode 15 (err -117) [ 186.146588][T14243] bridge0: entered promiscuous mode [ 186.159521][T14243] batadv0: entered promiscuous mode [ 186.166448][T14243] bridge0: left promiscuous mode [ 186.173047][T14243] batadv0: left promiscuous mode [ 186.421517][T14273] loop3: detected capacity change from 0 to 512 [ 186.430136][T14273] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.3762: corrupted in-inode xattr: invalid ea_ino [ 186.444646][T14273] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.3762: couldn't read orphan inode 15 (err -117) [ 186.477866][T14277] loop3: detected capacity change from 0 to 512 [ 186.486141][T14277] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.3763: corrupted in-inode xattr: invalid ea_ino [ 186.499788][T14277] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.3763: couldn't read orphan inode 15 (err -117) [ 186.561175][T14267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.570255][T14267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.589740][T14284] loop3: detected capacity change from 0 to 2048 [ 186.603073][T14284] siw: device registration error -23 [ 186.612009][T14284] bridge0: entered promiscuous mode [ 186.617990][T14284] batadv0: entered promiscuous mode [ 186.624853][T14284] bridge0: left promiscuous mode [ 186.630304][T14284] batadv0: left promiscuous mode [ 186.911614][T14301] loop5: detected capacity change from 0 to 512 [ 186.920921][T14301] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.3774: corrupted in-inode xattr: invalid ea_ino [ 186.936077][T14301] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.3774: couldn't read orphan inode 15 (err -117) [ 186.940351][T14304] loop4: detected capacity change from 0 to 512 [ 186.971872][T14304] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.3775: corrupted in-inode xattr: invalid ea_ino [ 186.987738][T14304] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.3775: couldn't read orphan inode 15 (err -117) [ 187.026007][T14311] loop3: detected capacity change from 0 to 2048 [ 187.048392][T14311] siw: device registration error -23 [ 187.072850][T14311] bridge0: entered promiscuous mode [ 187.079605][T14311] batadv0: entered promiscuous mode [ 187.087045][T14311] bridge0: left promiscuous mode [ 187.095891][T14311] batadv0: left promiscuous mode [ 187.260493][T14336] loop2: detected capacity change from 0 to 512 [ 187.273595][T14336] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.3788: corrupted in-inode xattr: invalid ea_ino [ 187.273742][T14336] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.3788: couldn't read orphan inode 15 (err -117) [ 187.437425][T14354] loop1: detected capacity change from 0 to 2048 [ 187.455633][ T29] audit: type=1400 audit(1745205163.746:13372): avc: denied { create } for pid=14355 comm="syz.3.3797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 187.484416][T14354] siw: device registration error -23 [ 187.494965][T14354] bridge0: entered promiscuous mode [ 187.501385][T14354] batadv0: entered promiscuous mode [ 187.516395][ T29] audit: type=1400 audit(1745205163.776:13373): avc: denied { write } for pid=14355 comm="syz.3.3797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 187.536249][T14354] bridge0: left promiscuous mode [ 187.541805][T14354] batadv0: left promiscuous mode [ 188.081526][T14372] loop1: detected capacity change from 0 to 512 [ 188.094640][T14372] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.3802: corrupted in-inode xattr: invalid ea_ino [ 188.111654][T14372] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.3802: couldn't read orphan inode 15 (err -117) [ 188.274062][T14374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.282657][T14374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.311767][T14392] loop1: detected capacity change from 0 to 2048 [ 188.326447][T14392] siw: device registration error -23 [ 188.335928][T14392] bridge0: entered promiscuous mode [ 188.343268][T14392] batadv0: entered promiscuous mode [ 188.351208][T14392] bridge0: left promiscuous mode [ 188.356785][T14392] batadv0: left promiscuous mode [ 188.449244][T14402] __nla_validate_parse: 24 callbacks suppressed [ 188.449257][T14402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3815'. [ 188.519605][T14408] loop2: detected capacity change from 0 to 512 [ 188.527772][T14408] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.3818: corrupted in-inode xattr: invalid ea_ino [ 188.541591][T14408] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.3818: couldn't read orphan inode 15 (err -117) [ 188.577571][T14412] loop3: detected capacity change from 0 to 2048 [ 188.592946][T14412] siw: device registration error -23 [ 188.603131][T14412] bridge0: entered promiscuous mode [ 188.609624][T14412] batadv0: entered promiscuous mode [ 188.615036][T14416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3820'. [ 188.625077][T14412] bridge0: left promiscuous mode [ 188.630569][T14412] batadv0: left promiscuous mode [ 188.658263][T14416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3820'. [ 188.724420][T14421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3822'. [ 188.745358][T14420] loop1: detected capacity change from 0 to 512 [ 188.753524][T14420] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.3832: corrupted in-inode xattr: invalid ea_ino [ 188.769112][T14420] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.3832: couldn't read orphan inode 15 (err -117) [ 188.819038][T14430] loop3: detected capacity change from 0 to 2048 [ 188.843417][T14430] siw: device registration error -23 [ 188.853534][T14430] bridge0: entered promiscuous mode [ 188.859803][T14430] batadv0: entered promiscuous mode [ 188.866636][T14430] bridge0: left promiscuous mode [ 188.872528][T14430] batadv0: left promiscuous mode [ 188.891367][T14436] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3828'. [ 189.006599][T14444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3833'. [ 189.051154][T14444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3833'. [ 189.080077][T14452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3836'. [ 189.089154][T14450] loop2: detected capacity change from 0 to 2048 [ 189.108753][T14450] siw: device registration error -23 [ 189.118420][T14450] bridge0: entered promiscuous mode [ 189.126065][T14450] batadv0: entered promiscuous mode [ 189.132993][T14450] bridge0: left promiscuous mode [ 189.138461][T14450] batadv0: left promiscuous mode [ 189.266813][T14463] loop2: detected capacity change from 0 to 512 [ 189.277203][T14462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3848'. [ 189.286862][T14463] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.3838: corrupted in-inode xattr: invalid ea_ino [ 189.303005][T14463] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.3838: couldn't read orphan inode 15 (err -117) [ 189.332915][T14468] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3841'. [ 189.366185][T14470] loop4: detected capacity change from 0 to 2048 [ 189.393896][T14470] bridge0: entered promiscuous mode [ 189.400230][T14470] batadv0: entered promiscuous mode [ 189.407553][T14470] bridge0: left promiscuous mode [ 189.413257][T14470] batadv0: left promiscuous mode [ 189.560773][T14468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.573422][T14468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.878061][T14492] loop5: detected capacity change from 0 to 2048 [ 189.896928][T14492] siw: device registration error -23 [ 189.906607][T14492] bridge0: entered promiscuous mode [ 189.913367][T14492] batadv0: entered promiscuous mode [ 189.923060][T14492] bridge0: left promiscuous mode [ 189.928679][T14492] batadv0: left promiscuous mode [ 189.961968][T14500] loop2: detected capacity change from 0 to 512 [ 190.018890][T14500] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.3856: corrupted in-inode xattr: invalid ea_ino [ 190.033565][T14500] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.3856: couldn't read orphan inode 15 (err -117) [ 190.082380][T14506] loop1: detected capacity change from 0 to 2048 [ 190.097818][T14506] siw: device registration error -23 [ 190.107068][T14506] bridge0: entered promiscuous mode [ 190.113281][T14506] batadv0: entered promiscuous mode [ 190.121441][T14506] bridge0: left promiscuous mode [ 190.126633][T14506] batadv0: left promiscuous mode [ 190.483163][T14535] loop4: detected capacity change from 0 to 2048 [ 190.500545][T14531] loop1: detected capacity change from 0 to 512 [ 190.531750][T14531] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.3870: corrupted in-inode xattr: invalid ea_ino [ 190.548252][T14531] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.3870: couldn't read orphan inode 15 (err -117) [ 190.565900][T14535] bridge0: entered promiscuous mode [ 190.572361][T14535] batadv0: entered promiscuous mode [ 190.579848][T14535] bridge0: left promiscuous mode [ 190.585301][T14535] batadv0: left promiscuous mode [ 190.633596][T14541] loop5: detected capacity change from 0 to 512 [ 190.645270][T14541] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.3883: corrupted in-inode xattr: invalid ea_ino [ 190.662845][T14541] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.3883: couldn't read orphan inode 15 (err -117) [ 190.762005][T14552] loop5: detected capacity change from 0 to 2048 [ 190.777214][T14552] siw: device registration error -23 [ 190.786312][T14552] bridge0: entered promiscuous mode [ 190.792796][T14552] batadv0: entered promiscuous mode [ 190.800415][T14552] bridge0: left promiscuous mode [ 190.809162][T14552] batadv0: left promiscuous mode [ 191.098562][T14573] loop4: detected capacity change from 0 to 512 [ 191.107009][T14573] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.3888: corrupted in-inode xattr: invalid ea_ino [ 191.122257][T14573] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.3888: couldn't read orphan inode 15 (err -117) [ 191.147781][T14578] loop2: detected capacity change from 0 to 512 [ 191.155929][T14578] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.3890: corrupted in-inode xattr: invalid ea_ino [ 191.171980][T14578] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.3890: couldn't read orphan inode 15 (err -117) [ 191.243945][T14589] loop4: detected capacity change from 0 to 2048 [ 191.281222][T14589] bridge0: entered promiscuous mode [ 191.298052][T14589] batadv0: entered promiscuous mode [ 191.305397][T14589] bridge0: left promiscuous mode [ 191.310934][T14589] batadv0: left promiscuous mode [ 191.404190][T14598] loop4: detected capacity change from 0 to 128 [ 191.410772][ T29] audit: type=1400 audit(1745205167.696:13374): avc: denied { name_connect } for pid=14597 comm="syz.4.3899" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 191.432624][ T29] audit: type=1400 audit(1745205167.706:13375): avc: denied { listen } for pid=14597 comm="syz.4.3899" lport=59781 faddr=::ffff:100.1.1.1 fport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 191.464448][ T29] audit: type=1400 audit(1745205167.756:13376): avc: denied { accept } for pid=14597 comm="syz.4.3899" lport=59781 faddr=::ffff:100.1.1.1 fport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 191.492551][T14598] sctp: [Deprecated]: syz.4.3899 (pid 14598) Use of struct sctp_assoc_value in delayed_ack socket option. [ 191.492551][T14598] Use struct sctp_sack_info instead [ 191.492569][ T29] audit: type=1400 audit(1745205167.786:13377): avc: denied { setopt } for pid=14597 comm="syz.4.3899" lport=59781 faddr=::ffff:100.1.1.1 fport=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 191.532359][T14598] tipc: Started in network mode [ 191.541173][T14598] tipc: Node identity 4, cluster identity 4711 [ 191.541187][T14598] tipc: Node number set to 4 [ 191.541715][ T29] audit: type=1400 audit(1745205167.846:13378): avc: denied { write } for pid=14597 comm="syz.4.3899" lport=59781 faddr=::ffff:100.1.1.1 fport=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 191.637221][T14612] loop5: detected capacity change from 0 to 512 [ 191.658788][T14612] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.3902: corrupted in-inode xattr: invalid ea_ino [ 191.672603][T14612] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.3902: couldn't read orphan inode 15 (err -117) [ 191.738615][T14621] loop5: detected capacity change from 0 to 512 [ 191.763703][T14621] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.3904: corrupted in-inode xattr: invalid ea_ino [ 191.860607][T14621] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.3904: couldn't read orphan inode 15 (err -117) [ 191.886417][T14632] loop2: detected capacity change from 0 to 2048 [ 191.914017][T14632] siw: device registration error -23 [ 191.922870][T14632] bridge0: entered promiscuous mode [ 191.926162][T14641] FAULT_INJECTION: forcing a failure. [ 191.926162][T14641] name failslab, interval 1, probability 0, space 0, times 0 [ 191.931885][T14632] batadv0: entered promiscuous mode [ 191.940792][T14641] CPU: 0 UID: 0 PID: 14641 Comm: syz.4.3915 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(voluntary) [ 191.940849][T14641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 191.940931][T14641] Call Trace: [ 191.940940][T14641] [ 191.940950][T14641] dump_stack_lvl+0xf6/0x150 [ 191.940980][T14641] dump_stack+0x15/0x1a [ 191.941001][T14641] should_fail_ex+0x261/0x270 [ 191.941031][T14641] should_failslab+0x8f/0xb0 [ 191.941140][T14641] __kmalloc_cache_noprof+0x55/0x320 [ 191.941177][T14641] ? tcp_sendmsg_fastopen+0x163/0x500 [ 191.941273][T14641] ? xas_load+0x3ba/0x3d0 [ 191.941303][T14641] tcp_sendmsg_fastopen+0x163/0x500 [ 191.941341][T14641] tcp_sendmsg_locked+0x2574/0x2760 [ 191.941458][T14641] ? memcg_list_lru_alloc+0xde/0x4a0 [ 191.941492][T14641] ? __mod_memcg_lruvec_state+0x141/0x290 [ 191.941542][T14641] ? __rcu_read_unlock+0x34/0x70 [ 191.941567][T14641] ? __rcu_read_unlock+0x4e/0x70 [ 191.941590][T14641] ? avc_has_perm_noaudit+0x1cc/0x210 [ 191.941622][T14641] ? avc_has_perm+0xd6/0x150 [ 191.941706][T14641] ? _raw_spin_unlock_bh+0x36/0x40 [ 191.941752][T14641] ? __pfx_tcp_sendmsg+0x10/0x10 [ 191.941784][T14641] tcp_sendmsg+0x30/0x50 [ 191.941814][T14641] inet6_sendmsg+0x77/0xd0 [ 191.941841][T14641] __sock_sendmsg+0x8b/0x180 [ 191.941911][T14641] sock_write_iter+0x186/0x1c0 [ 191.941949][T14641] aio_write+0x324/0x460 [ 191.941982][T14641] io_submit_one+0xb0c/0x1230 [ 191.942043][T14641] __se_sys_io_submit+0xf7/0x280 [ 191.942085][T14641] __x64_sys_io_submit+0x43/0x50 [ 191.942184][T14641] x64_sys_call+0xa8b/0x2e10 [ 191.942211][T14641] do_syscall_64+0xc9/0x1a0 [ 191.942244][T14641] ? clear_bhb_loop+0x25/0x80 [ 191.942272][T14641] ? clear_bhb_loop+0x25/0x80 [ 191.942342][T14641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.942368][T14641] RIP: 0033:0x7f395901e169 [ 191.942387][T14641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.942410][T14641] RSP: 002b:00007f3957687038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 191.942505][T14641] RAX: ffffffffffffffda RBX: 00007f3959245fa0 RCX: 00007f395901e169 [ 191.942521][T14641] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 00007f3959d80000 [ 191.942559][T14641] RBP: 00007f3957687090 R08: 0000000000000000 R09: 0000000000000000 [ 191.942574][T14641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.942589][T14641] R13: 0000000000000000 R14: 00007f3959245fa0 R15: 00007ffd20c53458 [ 191.942612][T14641] [ 192.201638][T14632] bridge0: left promiscuous mode [ 192.210971][T14632] batadv0: left promiscuous mode [ 192.226835][T14647] loop5: detected capacity change from 0 to 512 [ 192.236713][T14647] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.3926: corrupted in-inode xattr: invalid ea_ino [ 192.261327][T14647] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.3926: couldn't read orphan inode 15 (err -117) [ 192.374441][T14662] loop2: detected capacity change from 0 to 512 [ 192.395866][T14662] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.3921: corrupted in-inode xattr: invalid ea_ino [ 192.418603][T14662] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.3921: couldn't read orphan inode 15 (err -117) [ 192.572991][T14681] loop2: detected capacity change from 0 to 512 [ 192.582720][T14683] loop3: detected capacity change from 0 to 2048 [ 192.598061][T14683] siw: device registration error -23 [ 192.608059][T14683] bridge0: entered promiscuous mode [ 192.614400][T14683] batadv0: entered promiscuous mode [ 192.619818][T14681] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.3931: corrupted in-inode xattr: invalid ea_ino [ 192.635717][T14683] bridge0: left promiscuous mode [ 192.635718][T14681] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.3931: couldn't read orphan inode 15 (err -117) [ 192.686609][T14683] batadv0: left promiscuous mode [ 193.456480][T14715] loop4: detected capacity change from 0 to 512 [ 193.467389][T14717] __nla_validate_parse: 28 callbacks suppressed [ 193.467479][T14717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3946'. [ 193.494560][T14715] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.3945: corrupted in-inode xattr: invalid ea_ino [ 193.508588][T14715] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.3945: couldn't read orphan inode 15 (err -117) [ 193.559599][T14722] loop5: detected capacity change from 0 to 2048 [ 193.575436][T14722] siw: device registration error -23 [ 193.585017][T14722] bridge0: entered promiscuous mode [ 193.591539][T14722] batadv0: entered promiscuous mode [ 193.600580][T14722] bridge0: left promiscuous mode [ 193.610699][T14722] batadv0: left promiscuous mode [ 193.631973][ T29] audit: type=1400 audit(1745205169.916:13379): avc: denied { write } for pid=14731 comm="syz.2.3953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 193.652604][ T29] audit: type=1400 audit(1745205169.916:13380): avc: denied { nlmsg_read } for pid=14731 comm="syz.2.3953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 193.715187][T14732] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3953'. [ 193.724270][T14732] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3953'. [ 193.788533][T14743] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3955'. [ 193.832474][T14745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3957'. [ 193.883457][T14755] loop3: detected capacity change from 0 to 512 [ 193.893695][T14753] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3959'. [ 193.902724][T14755] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.3961: corrupted in-inode xattr: invalid ea_ino [ 193.903017][T14755] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.3961: couldn't read orphan inode 15 (err -117) [ 193.926695][T14758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3962'. [ 193.955553][T14761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3957'. [ 193.991618][T14766] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3959'. [ 194.114655][T14770] loop1: detected capacity change from 0 to 2048 [ 194.143002][T14770] siw: device registration error -23 [ 194.151987][T14770] bridge0: entered promiscuous mode [ 194.158224][T14770] batadv0: entered promiscuous mode [ 194.179856][T14770] bridge0: left promiscuous mode [ 194.185679][T14770] batadv0: left promiscuous mode [ 194.280064][T14785] loop1: detected capacity change from 0 to 512 [ 194.288160][T14785] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.3973: corrupted in-inode xattr: invalid ea_ino [ 194.302030][T14785] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.3973: couldn't read orphan inode 15 (err -117) [ 194.388824][T14793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3976'. [ 194.643637][T14811] loop5: detected capacity change from 0 to 2048 [ 194.663443][T14811] siw: device registration error -23 [ 194.672902][T14811] bridge0: entered promiscuous mode [ 194.673123][T14813] loop2: detected capacity change from 0 to 512 [ 194.679418][T14811] batadv0: entered promiscuous mode [ 194.693385][T14811] bridge0: left promiscuous mode [ 194.699094][T14811] batadv0: left promiscuous mode [ 194.712889][T14813] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.3985: corrupted in-inode xattr: invalid ea_ino [ 194.731497][T14813] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.3985: couldn't read orphan inode 15 (err -117) [ 195.102927][T14844] loop1: detected capacity change from 0 to 512 [ 195.114230][T14844] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.3999: corrupted in-inode xattr: invalid ea_ino [ 195.114352][T14844] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.3999: couldn't read orphan inode 15 (err -117) [ 195.205563][T14850] loop5: detected capacity change from 0 to 2048 [ 195.229808][T14850] siw: device registration error -23 [ 195.243142][T14850] bridge0: entered promiscuous mode [ 195.256567][T14850] batadv0: entered promiscuous mode [ 195.263857][T14850] bridge0: left promiscuous mode [ 195.272454][T14850] batadv0: left promiscuous mode [ 195.471494][T14874] loop1: detected capacity change from 0 to 512 [ 195.481315][T14874] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.4012: corrupted in-inode xattr: invalid ea_ino [ 195.505238][T14874] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.4012: couldn't read orphan inode 15 (err -117) [ 195.619488][T14889] loop4: detected capacity change from 0 to 2048 [ 195.639579][T14889] bridge0: entered promiscuous mode [ 195.646031][T14889] batadv0: entered promiscuous mode [ 195.654458][T14889] bridge0: left promiscuous mode [ 195.663743][T14889] batadv0: left promiscuous mode [ 195.691495][T14893] loop5: detected capacity change from 0 to 2048 [ 195.720706][T14893] siw: device registration error -23 [ 195.743857][T14893] bridge0: entered promiscuous mode [ 195.751341][T14893] batadv0: entered promiscuous mode [ 195.758451][T14893] bridge0: left promiscuous mode [ 195.763870][T14893] batadv0: left promiscuous mode [ 195.906889][T14908] loop2: detected capacity change from 0 to 512 [ 195.930041][T14908] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.4027: corrupted in-inode xattr: invalid ea_ino [ 195.949399][T14908] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.4027: couldn't read orphan inode 15 (err -117) [ 196.095287][T14929] loop1: detected capacity change from 0 to 2048 [ 196.118543][T14929] siw: device registration error -23 [ 196.130966][T14929] bridge0: entered promiscuous mode [ 196.140758][T14929] batadv0: entered promiscuous mode [ 196.150564][T14929] bridge0: left promiscuous mode [ 196.157510][T14929] batadv0: left promiscuous mode [ 196.164580][T14935] loop2: detected capacity change from 0 to 2048 [ 196.177594][T14935] siw: device registration error -23 [ 196.217829][T14935] bridge0: entered promiscuous mode [ 196.250238][T14935] batadv0: entered promiscuous mode [ 196.278729][T14935] bridge0: left promiscuous mode [ 196.286412][T14935] batadv0: left promiscuous mode [ 196.349516][T14946] loop1: detected capacity change from 0 to 512 [ 196.357343][T14946] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.4043: corrupted in-inode xattr: invalid ea_ino [ 196.372160][T14946] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.4043: couldn't read orphan inode 15 (err -117) [ 196.543168][ T29] audit: type=1400 audit(1745205172.826:13381): avc: denied { setopt } for pid=14964 comm="syz.4.4050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 196.634389][T14972] loop1: detected capacity change from 0 to 512 [ 196.652743][T14972] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.4056: corrupted in-inode xattr: invalid ea_ino [ 196.668689][T14972] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.4056: couldn't read orphan inode 15 (err -117) [ 196.696021][T14978] loop4: detected capacity change from 0 to 2048 [ 196.717500][T14978] bridge0: entered promiscuous mode [ 196.723946][T14978] batadv0: entered promiscuous mode [ 196.731964][T14978] bridge0: left promiscuous mode [ 196.737592][T14978] batadv0: left promiscuous mode [ 197.502366][T15000] loop2: detected capacity change from 0 to 2048 [ 197.530191][T15000] siw: device registration error -23 [ 197.534580][T15000] bridge0: entered promiscuous mode [ 197.544379][T15000] batadv0: entered promiscuous mode [ 197.549808][T15000] bridge0: left promiscuous mode [ 197.557756][T15000] batadv0: left promiscuous mode [ 197.590727][T15007] loop3: detected capacity change from 0 to 512 [ 197.620849][T15007] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.4070: corrupted in-inode xattr: invalid ea_ino [ 197.642079][T15007] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.4070: couldn't read orphan inode 15 (err -117) [ 197.734207][T15018] loop3: detected capacity change from 0 to 2048 [ 197.769188][T15018] siw: device registration error -23 [ 197.779387][T15018] bridge0: entered promiscuous mode [ 197.785674][T15018] batadv0: entered promiscuous mode [ 197.794948][T15018] bridge0: left promiscuous mode [ 197.804506][T15018] batadv0: left promiscuous mode [ 197.958450][T15038] loop1: detected capacity change from 0 to 1024 [ 197.958695][T15038] EXT4-fs: test_dummy_encryption option not supported [ 198.074803][T15044] loop3: detected capacity change from 0 to 512 [ 198.093603][T15044] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.4085: corrupted in-inode xattr: invalid ea_ino [ 198.108433][T15044] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.4085: couldn't read orphan inode 15 (err -117) [ 198.376788][T15061] loop3: detected capacity change from 0 to 2048 [ 198.392149][T15061] siw: device registration error -23 [ 198.401453][T15061] bridge0: entered promiscuous mode [ 198.408057][T15061] batadv0: entered promiscuous mode [ 198.416000][T15061] bridge0: left promiscuous mode [ 198.422044][T15061] batadv0: left promiscuous mode [ 198.488345][T15066] __nla_validate_parse: 34 callbacks suppressed [ 198.488365][T15066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4095'. [ 198.537004][T15066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4095'. [ 198.573005][T15070] loop5: detected capacity change from 0 to 512 [ 198.594792][T15070] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.4097: corrupted in-inode xattr: invalid ea_ino [ 198.610441][T15070] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.4097: couldn't read orphan inode 15 (err -117) [ 198.716656][T15086] netlink: 'syz.2.4105': attribute type 1 has an invalid length. [ 198.729361][ T29] audit: type=1326 audit(1745205175.026:13382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15084 comm="syz.2.4105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3390e169 code=0x7ffc0000 [ 198.774002][T15094] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4108'. [ 198.788158][ T29] audit: type=1326 audit(1745205175.026:13383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15084 comm="syz.2.4105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3390e169 code=0x7ffc0000 [ 198.793703][T15095] loop1: detected capacity change from 0 to 2048 [ 198.811909][ T29] audit: type=1326 audit(1745205175.026:13384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15084 comm="syz.2.4105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7faa3390e169 code=0x7ffc0000 [ 198.841734][ T29] audit: type=1326 audit(1745205175.026:13385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15084 comm="syz.2.4105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3390e169 code=0x7ffc0000 [ 198.852017][T15099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4110'. [ 198.865424][ T29] audit: type=1326 audit(1745205175.026:13386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15084 comm="syz.2.4105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3390e169 code=0x7ffc0000 [ 198.919735][T15101] loop5: detected capacity change from 0 to 512 [ 198.936579][T15095] siw: device registration error -23 [ 198.940099][T15095] bridge0: entered promiscuous mode [ 198.941134][T15095] batadv0: entered promiscuous mode [ 198.954274][T15095] bridge0: left promiscuous mode [ 198.960554][T15101] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.4111: corrupted in-inode xattr: invalid ea_ino [ 198.960756][T15101] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.4111: couldn't read orphan inode 15 (err -117) [ 198.969523][T15095] batadv0: left promiscuous mode [ 198.987311][T15105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4110'. [ 199.208048][T15130] syz_tun: entered allmulticast mode [ 199.215918][T15129] syz_tun: left allmulticast mode [ 199.226174][T15132] loop5: detected capacity change from 0 to 512 [ 199.245334][T15132] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.4124: corrupted in-inode xattr: invalid ea_ino [ 199.259415][T15132] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.4124: couldn't read orphan inode 15 (err -117) [ 199.282292][T15138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4126'. [ 199.326523][T15138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4126'. [ 199.366853][T15144] loop1: detected capacity change from 0 to 2048 [ 199.382436][T15144] siw: device registration error -23 [ 199.393242][T15144] bridge0: entered promiscuous mode [ 199.399688][T15144] batadv0: entered promiscuous mode [ 199.406921][T15144] bridge0: left promiscuous mode [ 199.413776][T15144] batadv0: left promiscuous mode [ 199.528427][T15149] FAULT_INJECTION: forcing a failure. [ 199.528427][T15149] name failslab, interval 1, probability 0, space 0, times 0 [ 199.541165][T15149] CPU: 0 UID: 0 PID: 15149 Comm: syz.5.4128 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(voluntary) [ 199.541251][T15149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 199.541264][T15149] Call Trace: [ 199.541270][T15149] [ 199.541286][T15149] dump_stack_lvl+0xf6/0x150 [ 199.541315][T15149] dump_stack+0x15/0x1a [ 199.541335][T15149] should_fail_ex+0x261/0x270 [ 199.541361][T15149] should_failslab+0x8f/0xb0 [ 199.541389][T15149] kmem_cache_alloc_lru_noprof+0x5e/0x330 [ 199.541428][T15149] ? shmem_alloc_inode+0x34/0x50 [ 199.541455][T15149] shmem_alloc_inode+0x34/0x50 [ 199.541485][T15149] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 199.541534][T15149] alloc_inode+0x40/0x170 [ 199.541586][T15149] new_inode+0x1e/0xe0 [ 199.541606][T15149] shmem_get_inode+0x24e/0x730 [ 199.541639][T15149] __shmem_file_setup+0x127/0x1f0 [ 199.541668][T15149] shmem_file_setup+0x3b/0x50 [ 199.541693][T15149] __se_sys_memfd_create+0x2e1/0x5a0 [ 199.541750][T15149] __x64_sys_memfd_create+0x31/0x40 [ 199.541880][T15149] x64_sys_call+0x1163/0x2e10 [ 199.541918][T15149] do_syscall_64+0xc9/0x1a0 [ 199.541945][T15149] ? clear_bhb_loop+0x25/0x80 [ 199.542025][T15149] ? clear_bhb_loop+0x25/0x80 [ 199.542058][T15149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.542083][T15149] RIP: 0033:0x7f85309be169 [ 199.542099][T15149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.542130][T15149] RSP: 002b:00007f852efe4e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 199.542150][T15149] RAX: ffffffffffffffda RBX: 00000000000005e2 RCX: 00007f85309be169 [ 199.542162][T15149] RDX: 00007f852efe4ef0 RSI: 0000000000000000 RDI: 00007f8530a41404 [ 199.542173][T15149] RBP: 0000200000001200 R08: 00007f852efe4bb7 R09: 00007f852efe4e40 [ 199.542185][T15149] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000005c0 [ 199.542241][T15149] R13: 00007f852efe4ef0 R14: 00007f852efe4eb0 R15: 0000200000000380 [ 199.542265][T15149] [ 200.020095][T15167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4139'. [ 200.038560][T15166] loop1: detected capacity change from 0 to 512 [ 200.100855][T15167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4139'. [ 200.156381][T15174] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4142'. [ 200.200459][T15166] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.4138: corrupted in-inode xattr: invalid ea_ino [ 200.222318][T15179] loop2: detected capacity change from 0 to 2048 [ 200.228738][T15166] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.4138: couldn't read orphan inode 15 (err -117) [ 200.249042][T15179] siw: device registration error -23 [ 200.283365][T15179] bridge0: entered promiscuous mode [ 200.289613][T15179] batadv0: entered promiscuous mode [ 200.299048][T15179] bridge0: left promiscuous mode [ 200.321028][T15179] batadv0: left promiscuous mode [ 200.332619][ T29] audit: type=1326 audit(1745205176.616:13387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15186 comm="syz.5.4149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85309be169 code=0x7ffc0000 [ 200.356442][ T29] audit: type=1326 audit(1745205176.616:13388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15186 comm="syz.5.4149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f85309be169 code=0x7ffc0000 [ 200.380204][ T29] audit: type=1326 audit(1745205176.616:13389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15186 comm="syz.5.4149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85309be169 code=0x7ffc0000 [ 200.403915][ T29] audit: type=1326 audit(1745205176.616:13390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15186 comm="syz.5.4149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85309be169 code=0x7ffc0000 [ 200.489896][T15196] netlink: 'syz.5.4149': attribute type 13 has an invalid length. [ 200.631528][T15196] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.638831][T15196] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.707363][T15196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.720794][T15196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.765556][T15196] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.774553][T15196] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.783490][T15196] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.792556][T15196] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.881411][T15226] loop2: detected capacity change from 0 to 512 [ 200.891526][T15226] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.4158: corrupted in-inode xattr: invalid ea_ino [ 200.905517][T15226] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.4158: couldn't read orphan inode 15 (err -117) [ 201.056269][T15238] loop4: detected capacity change from 0 to 2048 [ 201.099156][T15247] FAULT_INJECTION: forcing a failure. [ 201.099156][T15247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.109939][T15238] bridge0: entered promiscuous mode [ 201.112351][T15247] CPU: 1 UID: 0 PID: 15247 Comm: syz.1.4168 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(voluntary) [ 201.112389][T15247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 201.112405][T15247] Call Trace: [ 201.112445][T15247] [ 201.112454][T15247] dump_stack_lvl+0xf6/0x150 [ 201.112563][T15247] dump_stack+0x15/0x1a [ 201.112584][T15247] should_fail_ex+0x261/0x270 [ 201.112615][T15247] should_fail+0xb/0x10 [ 201.112641][T15247] should_fail_usercopy+0x1a/0x20 [ 201.112732][T15247] _copy_from_user+0x1c/0xa0 [ 201.112769][T15247] copy_msghdr_from_user+0x54/0x2b0 [ 201.112815][T15247] ? __fget_files+0x186/0x1c0 [ 201.112918][T15247] __sys_sendmsg+0x141/0x240 [ 201.112973][T15247] __x64_sys_sendmsg+0x46/0x50 [ 201.113002][T15247] x64_sys_call+0x26f3/0x2e10 [ 201.113029][T15247] do_syscall_64+0xc9/0x1a0 [ 201.113150][T15247] ? clear_bhb_loop+0x25/0x80 [ 201.113177][T15247] ? clear_bhb_loop+0x25/0x80 [ 201.113238][T15247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.113263][T15247] RIP: 0033:0x7fef3de9e169 [ 201.113281][T15247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.113303][T15247] RSP: 002b:00007fef3c507038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.113343][T15247] RAX: ffffffffffffffda RBX: 00007fef3e0c5fa0 RCX: 00007fef3de9e169 [ 201.113358][T15247] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 201.113529][T15247] RBP: 00007fef3c507090 R08: 0000000000000000 R09: 0000000000000000 [ 201.113544][T15247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.113559][T15247] R13: 0000000000000000 R14: 00007fef3e0c5fa0 R15: 00007ffddf97fda8 [ 201.113625][T15247] [ 201.294864][T15238] batadv0: entered promiscuous mode [ 201.310006][T15238] bridge0: left promiscuous mode [ 201.315552][T15238] batadv0: left promiscuous mode [ 201.363176][T15256] loop2: detected capacity change from 0 to 512 [ 201.381715][T15256] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.4171: corrupted in-inode xattr: invalid ea_ino [ 201.395404][T15256] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.4171: couldn't read orphan inode 15 (err -117) [ 201.513532][T15269] netlink: 'syz.2.4173': attribute type 13 has an invalid length. [ 201.649170][T15269] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.656525][T15269] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.754836][T15269] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.767143][T15269] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.802716][T15301] loop1: detected capacity change from 0 to 512 [ 201.819898][T15301] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.4184: corrupted in-inode xattr: invalid ea_ino [ 201.820098][T15301] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.4184: couldn't read orphan inode 15 (err -117) [ 201.894831][T15269] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.894882][T15269] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.894912][T15269] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.894947][T15269] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.934114][T15299] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=15299 comm=syz.1.4184 [ 201.978023][T15308] loop5: detected capacity change from 0 to 2048 [ 202.021437][T15308] siw: device registration error -23 [ 202.030602][T15308] bridge0: entered promiscuous mode [ 202.036332][T15308] batadv0: entered promiscuous mode [ 202.042302][T15308] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 202.052366][T15308] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 202.109465][T15308] bridge0: left promiscuous mode [ 202.127740][T15308] batadv0: left promiscuous mode [ 202.272232][T15335] loop4: detected capacity change from 0 to 512 [ 202.280859][T15335] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.4197: corrupted in-inode xattr: invalid ea_ino [ 202.294582][T15335] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.4197: couldn't read orphan inode 15 (err -117) [ 202.373392][T15342] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18810 sclass=netlink_route_socket pid=15342 comm=syz.4.4200 [ 202.430676][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 202.430693][ T29] audit: type=1400 audit(1745205178.726:13478): avc: denied { connect } for pid=15341 comm="syz.4.4200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 202.468351][T15347] loop4: detected capacity change from 0 to 512 [ 202.475967][T15347] EXT4-fs: Ignoring removed nobh option [ 202.488501][ T29] audit: type=1326 audit(1745205178.776:13479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15350 comm="syz.1.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3de9e169 code=0x7ffc0000 [ 202.515173][ T29] audit: type=1326 audit(1745205178.776:13480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15350 comm="syz.1.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fef3de9e169 code=0x7ffc0000 [ 202.538906][ T29] audit: type=1326 audit(1745205178.776:13481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15350 comm="syz.1.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3de9e169 code=0x7ffc0000 [ 202.562540][ T29] audit: type=1326 audit(1745205178.776:13482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15350 comm="syz.1.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7fef3de9e169 code=0x7ffc0000 [ 202.586120][ T29] audit: type=1326 audit(1745205178.776:13483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15350 comm="syz.1.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3de9e169 code=0x7ffc0000 [ 202.607545][T15351] netlink: 'syz.1.4204': attribute type 13 has an invalid length. [ 202.609766][ T29] audit: type=1326 audit(1745205178.776:13484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15350 comm="syz.1.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef3de9e169 code=0x7ffc0000 [ 202.641455][ T29] audit: type=1326 audit(1745205178.776:13485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15350 comm="syz.1.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3de9e169 code=0x7ffc0000 [ 202.665101][ T29] audit: type=1326 audit(1745205178.776:13486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15350 comm="syz.1.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fef3de9e169 code=0x7ffc0000 [ 202.688737][ T29] audit: type=1326 audit(1745205178.776:13487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15350 comm="syz.1.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3de9e169 code=0x7ffc0000 [ 202.715288][T15356] loop3: detected capacity change from 0 to 2048 [ 202.723669][T15347] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #16: comm syz.4.4200: corrupted inode contents [ 202.726449][T15356] msdos: Unknown parameter 'ÿÿÿÿÿÿÿÿ184467440737095516150xffffffffffffffff' [ 202.776621][T15353] siw: device registration error -23 [ 202.785992][T15347] EXT4-fs (loop4): Remounting filesystem read-only [ 202.799765][T15347] EXT4-fs (loop4): 1 truncate cleaned up [ 202.806036][T15347] ext4 filesystem being mounted at /255/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.830861][T15351] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.838351][T15351] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.888028][ T38] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 202.898698][ T38] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 202.911428][ T38] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 202.978293][T15351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.991816][T15351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.063610][T15351] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.073693][T15351] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.083143][T15351] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.092906][T15351] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.151348][T15353] bridge0: entered promiscuous mode [ 203.157411][T15353] batadv0: entered promiscuous mode [ 203.194545][T15353] bridge0: left promiscuous mode [ 203.216751][T15353] batadv0: left promiscuous mode [ 203.312747][T15372] loop4: detected capacity change from 0 to 512 [ 203.347598][T15372] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.4210: corrupted in-inode xattr: invalid ea_ino [ 203.396933][T15372] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.4210: couldn't read orphan inode 15 (err -117) [ 203.414623][T15372] EXT4-fs mount: 110 callbacks suppressed [ 203.414639][T15372] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.455029][T11264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.536480][T15377] __nla_validate_parse: 12 callbacks suppressed [ 203.536499][T15377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4214'. [ 203.591081][T15395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4221'. [ 203.641546][T15400] loop5: detected capacity change from 0 to 2048 [ 203.662817][T15400] siw: device registration error -23 [ 203.670830][T15400] bridge0: entered promiscuous mode [ 203.671576][T15400] batadv0: entered promiscuous mode [ 203.682111][T15400] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 203.689818][T15395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4221'. [ 203.692190][T15400] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 203.721001][T15400] bridge0: left promiscuous mode [ 203.726604][T15400] batadv0: left promiscuous mode [ 203.810215][T15409] loop5: detected capacity change from 0 to 512 [ 203.828323][T15409] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.4227: corrupted in-inode xattr: invalid ea_ino [ 203.843839][T15409] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.4227: couldn't read orphan inode 15 (err -117) [ 203.856996][T15409] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.881481][T12627] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.943486][T15418] netlink: 'syz.4.4230': attribute type 13 has an invalid length. [ 204.044757][T15418] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.052099][T15418] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.107300][T15418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.118492][T15418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.158235][T15418] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.167470][T15418] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.176643][T15418] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.185836][T15418] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.371173][T15432] loop1: detected capacity change from 0 to 2048 [ 204.386030][T15436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4240'. [ 204.409243][T15432] siw: device registration error -23 [ 204.418218][T15432] bridge0: entered promiscuous mode [ 204.424067][T15432] batadv0: entered promiscuous mode [ 204.430027][T15432] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 204.440120][T15432] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 204.459121][T15432] bridge0: left promiscuous mode [ 204.467800][T15432] batadv0: left promiscuous mode [ 204.534167][T15443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4244'. [ 204.571060][T15443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4244'. [ 204.580909][T15436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4240'. [ 204.590545][T15444] loop4: detected capacity change from 0 to 512 [ 204.598666][T15444] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.4243: corrupted in-inode xattr: invalid ea_ino [ 204.612434][T15444] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.4243: couldn't read orphan inode 15 (err -117) [ 204.625093][T15444] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.650040][T11264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.854419][T15459] netlink: 'syz.3.4251': attribute type 13 has an invalid length. [ 204.964381][T15459] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.971872][T15459] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.057905][T15459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.073605][T15459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.162026][T15459] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.172021][T15459] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.181204][T15459] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.190231][T15459] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.320554][T15468] loop5: detected capacity change from 0 to 2048 [ 205.335411][T15468] siw: device registration error -23 [ 205.346319][T15468] bridge0: entered promiscuous mode [ 205.352644][T15468] batadv0: entered promiscuous mode [ 205.358338][T15468] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 205.368425][T15468] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 205.383606][T15468] bridge0: left promiscuous mode [ 205.388998][T15468] batadv0: left promiscuous mode [ 205.430478][T15470] loop2: detected capacity change from 0 to 512 [ 205.448936][T15470] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.4256: corrupted in-inode xattr: invalid ea_ino [ 205.470571][T15470] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.4256: couldn't read orphan inode 15 (err -117) [ 205.495303][T15470] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.527652][T11637] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.544038][T15483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4262'. [ 205.602519][T15489] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4264'. [ 206.307945][T15493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4265'. [ 206.330524][T15494] loop4: detected capacity change from 0 to 2048 [ 206.358374][T15494] bridge0: entered promiscuous mode [ 206.359165][T15494] batadv0: entered promiscuous mode [ 206.369566][T15494] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 206.369623][T15494] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 206.370714][T15494] bridge0: left promiscuous mode [ 206.396981][T15494] batadv0: left promiscuous mode [ 206.467772][T15503] loop5: detected capacity change from 0 to 2048 [ 206.476271][T15503] siw: device registration error -23 [ 206.480362][T15503] bridge0: entered promiscuous mode [ 206.495654][T15503] batadv0: entered promiscuous mode [ 206.496139][T15503] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 206.511107][T15503] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 206.522256][T15503] bridge0: left promiscuous mode [ 206.527755][T15503] batadv0: left promiscuous mode [ 206.590202][T15509] netlink: 'syz.2.4271': attribute type 13 has an invalid length. [ 206.618488][T15511] loop4: detected capacity change from 0 to 512 [ 206.635160][T15511] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.4272: corrupted in-inode xattr: invalid ea_ino [ 206.650719][T15511] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.4272: couldn't read orphan inode 15 (err -117) [ 206.665996][T15511] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.694252][T11264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.832330][T15533] loop2: detected capacity change from 0 to 2048 [ 206.847996][T15533] siw: device registration error -23 [ 206.857685][T15533] bridge0: entered promiscuous mode [ 206.863640][T15533] batadv0: entered promiscuous mode [ 206.869277][T15533] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 206.879443][T15533] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 206.890206][T15533] bridge0: left promiscuous mode [ 206.895523][T15533] batadv0: left promiscuous mode [ 207.083515][T15540] loop2: detected capacity change from 0 to 2048 [ 207.096945][T15540] siw: device registration error -23 [ 207.106898][T15540] bridge0: entered promiscuous mode [ 207.112979][T15540] batadv0: entered promiscuous mode [ 207.118613][T15540] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 207.128664][T15540] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 207.139626][T15540] bridge0: left promiscuous mode [ 207.145061][T15540] batadv0: left promiscuous mode [ 207.160975][T15543] netlink: 'syz.1.4286': attribute type 13 has an invalid length. [ 207.222935][T15549] loop1: detected capacity change from 0 to 512 [ 207.231962][T15549] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.4289: corrupted in-inode xattr: invalid ea_ino [ 207.246155][T15549] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.4289: couldn't read orphan inode 15 (err -117) [ 207.259849][T15549] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.288107][T12348] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.397737][T15565] loop1: detected capacity change from 0 to 2048 [ 207.419494][T15565] siw: device registration error -23 [ 207.428743][T15565] bridge0: entered promiscuous mode [ 207.434799][T15565] batadv0: entered promiscuous mode [ 207.440583][T15565] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 207.450712][T15565] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 207.460556][T15570] netlink: 'syz.2.4298': attribute type 13 has an invalid length. [ 207.468839][T15565] bridge0: left promiscuous mode [ 207.474316][T15565] batadv0: left promiscuous mode [ 207.520361][T15577] loop3: detected capacity change from 0 to 2048 [ 207.537743][T15577] siw: device registration error -23 [ 207.546577][T15577] bridge0: entered promiscuous mode [ 207.552413][T15577] batadv0: entered promiscuous mode [ 207.558536][T15577] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 207.568658][T15577] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 207.581017][T15577] bridge0: left promiscuous mode [ 207.600775][T15577] batadv0: left promiscuous mode [ 207.623668][T15583] loop1: detected capacity change from 0 to 512 [ 207.643733][T15583] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.4303: corrupted in-inode xattr: invalid ea_ino [ 207.658034][T15583] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.4303: couldn't read orphan inode 15 (err -117) [ 207.680028][T15583] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.709280][T12348] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.824165][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 207.824181][ T29] audit: type=1326 audit(1745205184.116:13648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15602 comm="syz.3.4312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ba851e169 code=0x7ffc0000 [ 207.860751][ T29] audit: type=1326 audit(1745205184.156:13649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15602 comm="syz.3.4312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f0ba851e169 code=0x7ffc0000 [ 207.884482][ T29] audit: type=1326 audit(1745205184.156:13650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15602 comm="syz.3.4312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ba851e169 code=0x7ffc0000 [ 207.908316][ T29] audit: type=1326 audit(1745205184.156:13651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15602 comm="syz.3.4312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f0ba851e169 code=0x7ffc0000 [ 207.929727][T15610] netlink: 'syz.3.4312': attribute type 13 has an invalid length. [ 207.931828][ T29] audit: type=1326 audit(1745205184.156:13652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15602 comm="syz.3.4312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ba851e169 code=0x7ffc0000 [ 207.963295][ T29] audit: type=1326 audit(1745205184.156:13653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15602 comm="syz.3.4312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ba851e169 code=0x7ffc0000 [ 207.986897][ T29] audit: type=1326 audit(1745205184.156:13654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15602 comm="syz.3.4312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ba851e169 code=0x7ffc0000 [ 208.010543][ T29] audit: type=1326 audit(1745205184.156:13655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15602 comm="syz.3.4312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0ba851e169 code=0x7ffc0000 [ 208.034058][ T29] audit: type=1326 audit(1745205184.156:13656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15602 comm="syz.3.4312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ba851e169 code=0x7ffc0000 [ 208.057736][ T29] audit: type=1326 audit(1745205184.156:13657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15602 comm="syz.3.4312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f0ba851e169 code=0x7ffc0000 [ 208.061682][T15614] loop5: detected capacity change from 0 to 2048 [ 208.095995][T15613] siw: device registration error -23 [ 208.105773][T15613] bridge0: entered promiscuous mode [ 208.112861][T15613] batadv0: entered promiscuous mode [ 208.118537][T15613] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 208.128653][T15613] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 208.139601][T15613] bridge0: left promiscuous mode [ 208.145003][T15613] batadv0: left promiscuous mode [ 208.178678][T15616] loop3: detected capacity change from 0 to 512 [ 208.186860][T15616] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.4316: corrupted in-inode xattr: invalid ea_ino [ 208.200817][T15616] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.4316: couldn't read orphan inode 15 (err -117) [ 208.213358][T15616] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.249411][T11406] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.279764][T15623] loop3: detected capacity change from 0 to 2048 [ 208.292591][T15623] siw: device registration error -23 [ 208.302133][T15623] bridge0: entered promiscuous mode [ 208.307759][T15623] batadv0: entered promiscuous mode [ 208.313486][T15623] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 208.323572][T15623] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 208.334118][T15623] bridge0: left promiscuous mode [ 208.339688][T15623] batadv0: left promiscuous mode [ 208.627920][T15643] netlink: 'syz.3.4327': attribute type 13 has an invalid length. [ 208.641742][T15645] loop2: detected capacity change from 0 to 512 [ 208.650028][T15645] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.4328: corrupted in-inode xattr: invalid ea_ino [ 208.663568][T15645] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.4328: couldn't read orphan inode 15 (err -117) [ 208.676576][T15645] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.701639][T11637] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.721442][T15649] netlink: 'syz.1.4329': attribute type 13 has an invalid length. [ 208.736642][T15650] __nla_validate_parse: 12 callbacks suppressed [ 208.736661][T15650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4330'. [ 208.796356][T15656] loop3: detected capacity change from 0 to 2048 [ 208.814138][T15650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4330'. [ 208.824048][T15658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4334'. [ 208.824587][T15656] siw: device registration error -23 [ 208.844475][T15656] bridge0: entered promiscuous mode [ 208.851120][T15656] batadv0: entered promiscuous mode [ 208.856928][T15656] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 208.866997][T15656] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 208.879202][T15656] bridge0: left promiscuous mode [ 208.884689][T15656] batadv0: left promiscuous mode [ 208.978562][T15669] loop3: detected capacity change from 0 to 512 [ 208.987191][T15669] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.4339: corrupted in-inode xattr: invalid ea_ino [ 209.001037][T15669] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.4339: couldn't read orphan inode 15 (err -117) [ 209.013884][T15669] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.037201][T11406] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.178071][T15681] netlink: 'syz.4.4342': attribute type 13 has an invalid length. [ 209.188814][T15682] netlink: 'syz.5.4344': attribute type 13 has an invalid length. [ 209.266749][T15687] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4346'. [ 209.271392][T15690] loop5: detected capacity change from 0 to 2048 [ 209.289231][T15690] siw: device registration error -23 [ 209.311325][T15690] bridge0: entered promiscuous mode [ 209.318766][T15690] batadv0: entered promiscuous mode [ 209.324622][T15690] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 209.334712][T15690] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 209.349351][T15690] bridge0: left promiscuous mode [ 209.355025][T15690] batadv0: left promiscuous mode [ 209.376694][T15697] loop4: detected capacity change from 0 to 512 [ 209.385048][T15697] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.4351: corrupted in-inode xattr: invalid ea_ino [ 209.398779][T15697] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.4351: couldn't read orphan inode 15 (err -117) [ 209.412384][T15697] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.439750][T11264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.488297][T15708] netlink: 'syz.3.4356': attribute type 13 has an invalid length. [ 209.643508][T15718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4360'. [ 209.691930][T15722] netlink: 'syz.3.4362': attribute type 13 has an invalid length. [ 209.790407][T15726] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4364'. [ 209.816920][T15728] loop3: detected capacity change from 0 to 2048 [ 209.822024][T15730] loop2: detected capacity change from 0 to 512 [ 209.831384][T15730] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.4366: corrupted in-inode xattr: invalid ea_ino [ 209.845213][T15730] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.4366: couldn't read orphan inode 15 (err -117) [ 209.855948][T15728] siw: device registration error -23 [ 209.866083][T15728] bridge0: entered promiscuous mode [ 209.871984][T15728] batadv0: entered promiscuous mode [ 209.877721][T15728] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 209.887765][T15728] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 209.891482][T15730] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.910934][T15728] bridge0: left promiscuous mode [ 209.917842][T15728] batadv0: left promiscuous mode [ 209.926844][T11637] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.955249][T15738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4369'. [ 210.003089][T15738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4369'. [ 210.094219][T15752] netlink: 'syz.3.4376': attribute type 13 has an invalid length. [ 210.280738][T15758] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4378'. [ 210.314357][T15761] loop3: detected capacity change from 0 to 512 [ 210.322770][T15761] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.4379: corrupted in-inode xattr: invalid ea_ino [ 210.340921][T15761] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.4379: couldn't read orphan inode 15 (err -117) [ 210.355885][T15761] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.379970][T15766] loop4: detected capacity change from 0 to 2048 [ 210.398141][T15766] bridge0: entered promiscuous mode [ 210.404086][T15766] batadv0: entered promiscuous mode [ 210.409800][T15770] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4383'. [ 210.420213][T15766] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 210.430353][T15766] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 210.446946][T15766] bridge0: left promiscuous mode [ 210.452549][T11406] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.461765][T15766] batadv0: left promiscuous mode [ 210.564464][T15783] netlink: 'syz.4.4390': attribute type 13 has an invalid length. [ 210.681107][T15789] loop1: detected capacity change from 0 to 2048 [ 210.737962][T15789] siw: device registration error -23 [ 210.757476][T15789] bridge0: entered promiscuous mode [ 210.773530][T15789] batadv0: entered promiscuous mode [ 210.787860][T15789] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 210.798103][T15789] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 210.811000][T15789] bridge0: left promiscuous mode [ 210.812006][T15801] loop4: detected capacity change from 0 to 512 [ 210.826181][T15789] batadv0: left promiscuous mode [ 210.853957][T15801] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.4395: corrupted in-inode xattr: invalid ea_ino [ 210.869158][T15801] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.4395: couldn't read orphan inode 15 (err -117) [ 210.883106][T15801] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.912224][T11264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.008512][T15813] netlink: 'syz.3.4403': attribute type 13 has an invalid length. [ 211.195719][T15833] loop4: detected capacity change from 0 to 512 [ 211.217185][T15833] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.4412: corrupted in-inode xattr: invalid ea_ino [ 211.237047][T15833] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.4412: couldn't read orphan inode 15 (err -117) [ 211.268436][T15833] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.281176][T15842] loop2: detected capacity change from 0 to 2048 [ 211.307070][T11264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.310503][T15842] siw: device registration error -23 [ 211.326414][T15842] bridge0: entered promiscuous mode [ 211.334108][T15842] batadv0: entered promiscuous mode [ 211.339858][T15842] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 211.350075][T15842] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 211.361075][T15842] bridge0: left promiscuous mode [ 211.366588][T15842] batadv0: left promiscuous mode [ 211.811357][T15859] netlink: 'syz.5.4422': attribute type 13 has an invalid length. [ 211.902397][T15869] loop5: detected capacity change from 0 to 512 [ 211.915942][T15869] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.4428: corrupted in-inode xattr: invalid ea_ino [ 211.932284][T15869] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.4428: couldn't read orphan inode 15 (err -117) [ 211.945687][T15872] loop2: detected capacity change from 0 to 2048 [ 211.947738][T15869] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.972386][T15872] siw: device registration error -23 [ 211.981688][T12627] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.983396][T15872] bridge0: entered promiscuous mode [ 211.996707][T15872] batadv0: entered promiscuous mode [ 212.016489][T15872] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 212.026608][T15872] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 212.039969][T15872] bridge0: left promiscuous mode [ 212.045638][T15872] batadv0: left promiscuous mode [ 212.195144][T15901] loop4: detected capacity change from 0 to 512 [ 212.217012][T15901] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.4442: corrupted in-inode xattr: invalid ea_ino [ 212.231341][T15901] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.4442: couldn't read orphan inode 15 (err -117) [ 212.244270][T15901] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.260132][T15898] netlink: 'syz.3.4441': attribute type 13 has an invalid length. [ 212.272097][T11264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.437667][T15919] loop4: detected capacity change from 0 to 2048 [ 212.464610][T15919] bridge0: entered promiscuous mode [ 212.470495][T15919] batadv0: entered promiscuous mode [ 212.476212][T15919] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 212.486354][T15919] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 212.496994][T15919] bridge0: left promiscuous mode [ 212.502689][T15919] batadv0: left promiscuous mode [ 212.586602][T15930] loop4: detected capacity change from 0 to 512 [ 212.594854][T15930] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.4454: corrupted in-inode xattr: invalid ea_ino [ 212.608833][T15930] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.4454: couldn't read orphan inode 15 (err -117) [ 212.621685][T15930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.644861][T11264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.918425][ T29] kauditd_printk_skb: 429 callbacks suppressed [ 212.918440][ T29] audit: type=1326 audit(1745205189.206:14087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15941 comm="syz.5.4460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85309be169 code=0x7ffc0000 [ 212.948471][ T29] audit: type=1326 audit(1745205189.206:14088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15941 comm="syz.5.4460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85309be169 code=0x7ffc0000 [ 212.972310][ T29] audit: type=1326 audit(1745205189.206:14089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15941 comm="syz.5.4460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f85309be169 code=0x7ffc0000 [ 212.982119][T15942] netlink: 'syz.5.4460': attribute type 13 has an invalid length. [ 212.996001][ T29] audit: type=1326 audit(1745205189.206:14090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15941 comm="syz.5.4460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85309be169 code=0x7ffc0000 [ 213.027574][ T29] audit: type=1326 audit(1745205189.206:14091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15941 comm="syz.5.4460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f85309be169 code=0x7ffc0000 [ 213.051076][ T29] audit: type=1326 audit(1745205189.206:14092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15941 comm="syz.5.4460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85309be169 code=0x7ffc0000 [ 213.074684][ T29] audit: type=1326 audit(1745205189.206:14093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15941 comm="syz.5.4460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85309be169 code=0x7ffc0000 [ 213.098333][ T29] audit: type=1326 audit(1745205189.206:14094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15941 comm="syz.5.4460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85309be169 code=0x7ffc0000 [ 213.122523][ T29] audit: type=1326 audit(1745205189.206:14095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15941 comm="syz.5.4460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f85309be169 code=0x7ffc0000 [ 213.146102][ T29] audit: type=1326 audit(1745205189.206:14096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15941 comm="syz.5.4460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85309be169 code=0x7ffc0000 [ 213.302219][T15957] loop2: detected capacity change from 0 to 512 [ 213.312144][T15958] loop3: detected capacity change from 0 to 2048 [ 213.321085][T15957] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.4467: corrupted in-inode xattr: invalid ea_ino [ 213.347562][T15958] siw: device registration error -23 [ 213.356369][T15958] bridge0: entered promiscuous mode [ 213.362397][T15958] batadv0: entered promiscuous mode [ 213.366364][T15957] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.4467: couldn't read orphan inode 15 (err -117) [ 213.370870][T15958] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 213.389588][T15958] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 213.416438][T15957] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.429384][T15958] bridge0: left promiscuous mode [ 213.467389][T15958] batadv0: left promiscuous mode [ 213.468219][T11637] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.562145][T15977] loop2: detected capacity change from 0 to 512 [ 213.573497][T15977] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.4484: corrupted in-inode xattr: invalid ea_ino [ 213.597232][T15977] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.4484: couldn't read orphan inode 15 (err -117) [ 213.640501][T15977] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.667182][T11637] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.324596][T16006] loop5: detected capacity change from 0 to 2048 [ 214.333836][T16008] loop2: detected capacity change from 0 to 512 [ 214.338512][T16006] siw: device registration error -23 [ 214.346240][T16008] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.4488: corrupted in-inode xattr: invalid ea_ino [ 214.360142][T16008] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.4488: couldn't read orphan inode 15 (err -117) [ 214.368380][T16006] bridge0: entered promiscuous mode [ 214.375238][T16008] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.377921][T16006] batadv0: entered promiscuous mode [ 214.391501][T16008] __nla_validate_parse: 19 callbacks suppressed [ 214.391519][T16008] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4488'. [ 214.395417][T16006] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 214.420206][T16006] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 214.432331][T16008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4488'. [ 214.455735][T16014] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=16014 comm=syz.1.4490 [ 214.468431][T16006] bridge0: left promiscuous mode [ 214.482798][T11637] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.497136][T16006] batadv0: left promiscuous mode [ 214.603970][T16031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4497'. [ 214.647417][T16031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4497'. [ 214.667407][T16032] validate_nla: 1 callbacks suppressed [ 214.667420][T16032] netlink: 'syz.2.4495': attribute type 13 has an invalid length. [ 214.804695][T16043] loop2: detected capacity change from 0 to 512 [ 214.813622][T16043] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.4502: corrupted in-inode xattr: invalid ea_ino [ 214.828962][T16043] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.4502: couldn't read orphan inode 15 (err -117) [ 214.843217][T16043] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.857151][T16043] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4502'. [ 214.866316][T16043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4502'. [ 214.886340][T11637] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.899640][T16048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=16048 comm=syz.4.4504 [ 214.941780][T16054] loop2: detected capacity change from 0 to 2048 [ 214.954989][T16054] siw: device registration error -23 [ 214.964150][T16054] bridge0: entered promiscuous mode [ 214.970037][T16054] batadv0: entered promiscuous mode [ 214.975859][T16054] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 214.986018][T16054] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 214.996879][T16054] bridge0: left promiscuous mode [ 215.002935][T16054] batadv0: left promiscuous mode [ 215.257110][T16073] netlink: 'syz.2.4514': attribute type 13 has an invalid length. [ 215.276408][T16078] loop3: detected capacity change from 0 to 512 [ 215.284718][T16078] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.4516: corrupted in-inode xattr: invalid ea_ino [ 215.299283][T16078] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.4516: couldn't read orphan inode 15 (err -117) [ 215.300071][T16076] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=16076 comm=syz.4.4517 [ 215.313410][T16078] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.340077][T16078] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4516'. [ 215.349143][T16078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4516'. [ 215.369205][T11406] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.416481][T16086] loop2: detected capacity change from 0 to 2048 [ 215.432053][T16086] siw: device registration error -23 [ 215.441882][T16086] bridge0: entered promiscuous mode [ 215.448018][T16086] batadv0: entered promiscuous mode [ 215.456102][T16086] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 215.466230][T16086] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 215.491204][T16086] bridge0: left promiscuous mode [ 215.499471][T16086] batadv0: left promiscuous mode [ 215.612442][T16107] loop1: detected capacity change from 0 to 512 [ 215.622414][T16107] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.4530: corrupted in-inode xattr: invalid ea_ino [ 215.646981][T16107] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.4530: couldn't read orphan inode 15 (err -117) [ 215.667199][T16113] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=16113 comm=syz.2.4529 [ 215.682431][T16107] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.698357][T16107] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4530'. [ 215.720813][T12348] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.751049][T16121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4534'. [ 215.790074][T16117] netlink: 'syz.3.4533': attribute type 13 has an invalid length. [ 215.878294][T16134] loop3: detected capacity change from 0 to 2048 [ 215.892000][T16134] siw: device registration error -23 [ 215.908778][T16134] bridge0: entered promiscuous mode [ 215.914587][T16134] batadv0: entered promiscuous mode [ 215.920660][T16134] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 215.930701][T16134] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 215.941551][T16134] bridge0: left promiscuous mode [ 215.946936][T16134] batadv0: left promiscuous mode [ 216.154251][T16145] loop2: detected capacity change from 0 to 512 [ 216.162492][T16145] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.4544: corrupted in-inode xattr: invalid ea_ino [ 216.176232][T16145] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.4544: couldn't read orphan inode 15 (err -117) [ 216.190329][T16145] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.216305][T11637] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.236420][T16148] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=16148 comm=syz.3.4545 [ 216.326106][T16164] loop3: detected capacity change from 0 to 2048 [ 216.346291][T16164] siw: device registration error -23 [ 216.356184][T16164] bridge0: entered promiscuous mode [ 216.362026][T16164] batadv0: entered promiscuous mode [ 216.367614][T16164] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 216.377697][T16164] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 216.389238][T16162] netlink: 'syz.5.4551': attribute type 13 has an invalid length. [ 216.398590][T16164] bridge0: left promiscuous mode [ 216.404672][T16164] batadv0: left promiscuous mode [ 216.526948][T16176] loop3: detected capacity change from 0 to 512 [ 216.546607][T16176] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.4558: corrupted in-inode xattr: invalid ea_ino [ 216.564623][T16176] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.4558: couldn't read orphan inode 15 (err -117) [ 216.597144][T16181] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=16181 comm=syz.2.4560 [ 216.626100][T16176] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.692325][T11406] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.759608][T16201] loop4: detected capacity change from 0 to 2048 [ 216.778766][T16201] bridge0: entered promiscuous mode [ 216.785153][T16201] batadv0: entered promiscuous mode [ 216.792432][T16201] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 216.792709][T16199] netlink: 'syz.3.4568': attribute type 13 has an invalid length. [ 216.802537][T16201] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 216.822197][T16201] bridge0: left promiscuous mode [ 216.827305][T16205] loop5: detected capacity change from 0 to 512 [ 216.833900][T16201] batadv0: left promiscuous mode [ 216.860997][T16205] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 216.873550][T16205] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.900039][T16205] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #19: comm syz.5.4571: corrupted inode contents [ 216.912278][T16205] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #19: comm syz.5.4571: mark_inode_dirty error [ 216.927293][T16205] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #19: comm syz.5.4571: corrupted inode contents [ 216.947165][T16205] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #19: comm syz.5.4571: mark_inode_dirty error [ 216.960041][T16205] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2994: inode #19: comm syz.5.4571: mark inode dirty (error -117) [ 216.979851][T16205] EXT4-fs warning (device loop5): ext4_evict_inode:279: xattr delete (err -117) [ 217.014061][T12627] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 217.159800][T16225] loop5: detected capacity change from 0 to 512 [ 217.167921][T16225] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.4579: corrupted in-inode xattr: invalid ea_ino [ 217.181725][T16225] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.4579: couldn't read orphan inode 15 (err -117) [ 217.194442][T16225] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.219704][T12627] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.269000][T16234] loop5: detected capacity change from 0 to 2048 [ 217.283037][T16234] siw: device registration error -23 [ 217.292728][T16234] bridge0: entered promiscuous mode [ 217.299055][T16234] batadv0: entered promiscuous mode [ 217.305048][T16234] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 217.315143][T16234] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 217.326080][T16234] bridge0: left promiscuous mode [ 217.331796][T16234] batadv0: left promiscuous mode [ 217.408588][T16238] netlink: 'syz.3.4584': attribute type 13 has an invalid length. [ 217.536750][T16254] loop1: detected capacity change from 0 to 512 [ 217.545443][T16254] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.4591: corrupted in-inode xattr: invalid ea_ino [ 217.571029][T16254] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.4591: couldn't read orphan inode 15 (err -117) [ 217.583698][T16254] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.634861][T12348] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.721622][T16268] loop1: detected capacity change from 0 to 2048 [ 217.750238][T16268] siw: device registration error -23 [ 217.766036][T16279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.774635][T16279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.778688][T16268] bridge0: entered promiscuous mode [ 217.788734][T16268] batadv0: entered promiscuous mode [ 217.796106][T16268] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 217.806231][T16268] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 217.819838][T16268] bridge0: left promiscuous mode [ 217.826313][T16277] netlink: 'syz.3.4601': attribute type 13 has an invalid length. [ 217.835377][T16268] batadv0: left promiscuous mode [ 217.881481][T16289] loop4: detected capacity change from 0 to 512 [ 217.889726][T16289] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.4606: corrupted in-inode xattr: invalid ea_ino [ 217.903876][T16289] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.4606: couldn't read orphan inode 15 (err -117) [ 217.916465][T16289] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.951188][T11264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.253329][T16316] loop4: detected capacity change from 0 to 2048 [ 218.270388][T16316] bridge0: entered promiscuous mode [ 218.276273][T16316] batadv0: entered promiscuous mode [ 218.282090][T16316] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 218.292151][T16316] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 218.302914][T16316] bridge0: left promiscuous mode [ 218.308566][T16316] batadv0: left promiscuous mode [ 218.317788][ T29] kauditd_printk_skb: 472 callbacks suppressed [ 218.317806][ T29] audit: type=1326 audit(1745205194.616:14567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16317 comm="syz.5.4619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85309be169 code=0x7ffc0000 [ 218.334793][T16318] netlink: 'syz.5.4619': attribute type 13 has an invalid length. [ 218.353411][ T29] audit: type=1326 audit(1745205194.616:14568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16317 comm="syz.5.4619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f85309be169 code=0x7ffc0000 [ 218.379350][ T29] audit: type=1326 audit(1745205194.616:14569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16317 comm="syz.5.4619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85309be169 code=0x7ffc0000 [ 218.403054][ T29] audit: type=1326 audit(1745205194.616:14570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16317 comm="syz.5.4619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f85309be169 code=0x7ffc0000 [ 218.426711][ T29] audit: type=1326 audit(1745205194.616:14571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16317 comm="syz.5.4619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85309be169 code=0x7ffc0000 [ 218.450317][ T29] audit: type=1326 audit(1745205194.616:14572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16317 comm="syz.5.4619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85309be169 code=0x7ffc0000 [ 218.473925][ T29] audit: type=1326 audit(1745205194.616:14573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16317 comm="syz.5.4619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85309be169 code=0x7ffc0000 [ 218.497521][ T29] audit: type=1326 audit(1745205194.616:14574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16317 comm="syz.5.4619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f85309be169 code=0x7ffc0000 [ 218.521113][ T29] audit: type=1326 audit(1745205194.616:14575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16317 comm="syz.5.4619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85309be169 code=0x7ffc0000 [ 218.544707][ T29] audit: type=1326 audit(1745205194.616:14576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16317 comm="syz.5.4619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f85309be169 code=0x7ffc0000 [ 218.592500][T16321] loop4: detected capacity change from 0 to 512 [ 218.600764][T16321] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.4620: corrupted in-inode xattr: invalid ea_ino [ 218.614709][T16321] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.4620: couldn't read orphan inode 15 (err -117) [ 218.627277][T16321] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.659430][T11264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.818044][T16345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.826965][T16345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.848276][T16347] loop2: detected capacity change from 0 to 2048 [ 218.865139][T16347] siw: device registration error -23 [ 218.871030][T16349] FAULT_INJECTION: forcing a failure. [ 218.871030][T16349] name failslab, interval 1, probability 0, space 0, times 0 [ 218.874758][T16347] bridge0: entered promiscuous mode [ 218.883685][T16349] CPU: 0 UID: 0 PID: 16349 Comm: syz.5.4632 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(voluntary) [ 218.883879][T16349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 218.883896][T16349] Call Trace: [ 218.883904][T16349] [ 218.883915][T16349] dump_stack_lvl+0xf6/0x150 [ 218.883947][T16349] dump_stack+0x15/0x1a [ 218.883969][T16349] should_fail_ex+0x261/0x270 [ 218.884000][T16349] should_failslab+0x8f/0xb0 [ 218.884030][T16349] kmem_cache_alloc_noprof+0x59/0x340 [ 218.884138][T16349] ? getname_flags+0x81/0x3b0 [ 218.884170][T16349] getname_flags+0x81/0x3b0 [ 218.884201][T16349] user_path_at+0x26/0x140 [ 218.884306][T16349] __se_sys_fspick+0xa1/0x260 [ 218.884336][T16349] __x64_sys_fspick+0x43/0x50 [ 218.884362][T16349] x64_sys_call+0x21b4/0x2e10 [ 218.884390][T16349] do_syscall_64+0xc9/0x1a0 [ 218.884424][T16349] ? clear_bhb_loop+0x25/0x80 [ 218.884453][T16349] ? clear_bhb_loop+0x25/0x80 [ 218.884498][T16349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.884524][T16349] RIP: 0033:0x7f85309be169 [ 218.884539][T16349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.884563][T16349] RSP: 002b:00007f852f027038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b1 [ 218.884587][T16349] RAX: ffffffffffffffda RBX: 00007f8530be5fa0 RCX: 00007f85309be169 [ 218.884603][T16349] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: ffffffffffffffff [ 218.884619][T16349] RBP: 00007f852f027090 R08: 0000000000000000 R09: 0000000000000000 [ 218.884649][T16349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.884665][T16349] R13: 0000000000000001 R14: 00007f8530be5fa0 R15: 00007ffd77509d28 [ 218.884690][T16349] [ 218.943462][T16355] loop4: detected capacity change from 0 to 512 [ 218.947333][T16347] batadv0: entered promiscuous mode [ 218.964812][T16355] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.4633: corrupted in-inode xattr: invalid ea_ino [ 218.970021][T16347] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 218.974138][T16355] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.4633: couldn't read orphan inode 15 (err -117) [ 218.978318][T16347] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 218.992909][T16355] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.134171][T16347] bridge0: left promiscuous mode [ 219.139603][T16347] batadv0: left promiscuous mode [ 219.155106][T16351] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=16351 comm=syz.4.4633 [ 219.180673][T11264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.183509][T16358] netlink: 'syz.3.4635': attribute type 13 has an invalid length. [ 219.409134][T16384] loop1: detected capacity change from 0 to 512 [ 219.424728][T16387] loop3: detected capacity change from 0 to 2048 [ 219.432141][T16384] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.4647: corrupted in-inode xattr: invalid ea_ino [ 219.445809][T16384] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.4647: couldn't read orphan inode 15 (err -117) [ 219.460224][T16384] __nla_validate_parse: 18 callbacks suppressed [ 219.460242][T16384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4647'. [ 219.465520][T16387] siw: device registration error -23 [ 219.485483][T16387] bridge0: entered promiscuous mode [ 219.491582][T16387] batadv0: entered promiscuous mode [ 219.497347][T16387] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 219.507446][T16387] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 219.519080][T16387] bridge0: left promiscuous mode [ 219.524554][T16387] batadv0: left promiscuous mode [ 219.691155][T16400] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4653'. [ 219.701720][T16402] netlink: 'syz.1.4654': attribute type 13 has an invalid length. [ 219.834439][T16414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.843238][T16414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.036475][T16420] loop5: detected capacity change from 0 to 512 [ 220.044770][T16420] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.4660: corrupted in-inode xattr: invalid ea_ino [ 220.058997][T16420] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.4660: couldn't read orphan inode 15 (err -117) [ 220.072765][T16420] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4660'. [ 220.099738][T16423] xt_ecn: cannot match TCP bits for non-tcp packets [ 220.107631][T16423] Cannot find del_set index 1 as target [ 220.235894][T16434] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4666'. [ 220.340093][T16437] netlink: 'syz.5.4671': attribute type 13 has an invalid length. [ 220.408228][T16448] loop3: detected capacity change from 0 to 512 [ 220.427234][T16448] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.4674: corrupted in-inode xattr: invalid ea_ino [ 220.442423][T16448] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.4674: couldn't read orphan inode 15 (err -117) [ 220.456375][T16448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4674'. [ 220.504406][T16453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4677'. [ 220.576724][T16453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4677'. [ 220.699870][T16464] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4681'. [ 220.800010][T16475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.808542][T16475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.830186][T16476] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4695'. [ 220.856664][T16480] loop1: detected capacity change from 0 to 512 [ 220.865067][T16480] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.4687: corrupted in-inode xattr: invalid ea_ino [ 220.871845][T16478] netlink: 'syz.3.4686': attribute type 13 has an invalid length. [ 220.878851][T16480] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.4687: couldn't read orphan inode 15 (err -117) [ 220.900955][T16480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4687'. [ 221.132560][T16493] netlink: 'syz.1.4692': attribute type 13 has an invalid length. [ 221.217620][T16496] loop1: detected capacity change from 0 to 512 [ 221.225916][T16496] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.4693: corrupted in-inode xattr: invalid ea_ino [ 221.239662][T16496] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.4693: couldn't read orphan inode 15 (err -117) [ 221.408557][T16511] loop2: detected capacity change from 0 to 512 [ 221.423275][T16511] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.4700: corrupted in-inode xattr: invalid ea_ino [ 221.439636][T16511] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.4700: couldn't read orphan inode 15 (err -117) [ 221.522553][T16524] loop5: detected capacity change from 0 to 512 [ 221.532224][T16524] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.4706: corrupted in-inode xattr: invalid ea_ino [ 221.546599][T16514] netlink: 'syz.1.4701': attribute type 13 has an invalid length. [ 221.555141][T16524] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.4706: couldn't read orphan inode 15 (err -117) [ 221.581572][T16522] netlink: 'syz.2.4705': attribute type 13 has an invalid length. [ 221.842111][T16549] loop1: detected capacity change from 0 to 512 [ 221.852750][T16549] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.4715: corrupted in-inode xattr: invalid ea_ino [ 221.866643][T16549] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.4715: couldn't read orphan inode 15 (err -117) [ 222.508813][T16562] loop4: detected capacity change from 0 to 512 [ 222.526510][T16562] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.4719: corrupted in-inode xattr: invalid ea_ino [ 222.549576][T16562] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.4719: couldn't read orphan inode 15 (err -117) [ 222.576419][T16565] netlink: 'syz.1.4720': attribute type 13 has an invalid length. [ 222.712457][T16587] loop5: detected capacity change from 0 to 512 [ 222.721404][T16587] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.4729: corrupted in-inode xattr: invalid ea_ino [ 222.735442][T16587] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.4729: couldn't read orphan inode 15 (err -117) [ 222.757191][T16578] netlink: 'syz.3.4724': attribute type 13 has an invalid length. [ 222.816195][T16598] x_tables: duplicate underflow at hook 3 [ 222.989608][T16610] netlink: 'syz.3.4741': attribute type 13 has an invalid length. [ 223.024372][T16619] syz_tun: entered allmulticast mode [ 223.034082][T16619] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.043103][T16619] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.051918][T16619] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.060802][T16619] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.069702][T16619] geneve2: entered promiscuous mode [ 223.076833][T16618] syz_tun: left allmulticast mode [ 223.162864][T16627] loop1: detected capacity change from 0 to 512 [ 223.178364][T16627] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 223.199403][T16627] EXT4-fs (loop1): orphan cleanup on readonly fs [ 223.206311][T16627] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.4739: invalid indirect mapped block 256 (level 2) [ 223.221440][T16627] EXT4-fs (loop1): 2 truncates cleaned up [ 223.636846][T16633] x_tables: duplicate underflow at hook 3 [ 223.702882][ T29] kauditd_printk_skb: 737 callbacks suppressed [ 223.702929][ T29] audit: type=1326 audit(1745205199.996:15314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16632 comm="syz.2.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3390e169 code=0x7ffc0000 [ 223.732805][ T29] audit: type=1326 audit(1745205199.996:15315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16632 comm="syz.2.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3390e169 code=0x7ffc0000 [ 223.756455][ T29] audit: type=1326 audit(1745205199.996:15316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16632 comm="syz.2.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7faa3390e169 code=0x7ffc0000 [ 223.780259][ T29] audit: type=1326 audit(1745205199.996:15317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16632 comm="syz.2.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3390e169 code=0x7ffc0000 [ 223.803938][ T29] audit: type=1326 audit(1745205199.996:15318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16632 comm="syz.2.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3390e169 code=0x7ffc0000 [ 223.899565][T16645] syz_tun: entered allmulticast mode [ 223.905708][T16644] syz_tun: left allmulticast mode [ 223.999392][ T29] audit: type=1326 audit(1745205200.276:15319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16654 comm="syz.3.4759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ba851e169 code=0x7ffc0000 [ 224.023126][ T29] audit: type=1326 audit(1745205200.276:15320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16654 comm="syz.3.4759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f0ba851e169 code=0x7ffc0000 [ 224.046908][ T29] audit: type=1326 audit(1745205200.276:15321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16654 comm="syz.3.4759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ba851e169 code=0x7ffc0000 [ 224.070528][ T29] audit: type=1326 audit(1745205200.276:15322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16654 comm="syz.3.4759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f0ba851e169 code=0x7ffc0000 [ 224.094122][ T29] audit: type=1326 audit(1745205200.276:15323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16654 comm="syz.3.4759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ba851e169 code=0x7ffc0000 [ 224.118543][T16659] netlink: 'syz.3.4759': attribute type 13 has an invalid length. [ 224.121939][T16649] loop5: detected capacity change from 0 to 4096 [ 224.284075][T16667] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.293244][T16667] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.302235][T16667] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.311399][T16667] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.354922][T16677] x_tables: duplicate underflow at hook 3 [ 224.445952][T16689] FAULT_INJECTION: forcing a failure. [ 224.445952][T16689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.459135][T16689] CPU: 0 UID: 0 PID: 16689 Comm: syz.5.4771 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(voluntary) [ 224.459165][T16689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 224.459177][T16689] Call Trace: [ 224.459183][T16689] [ 224.459190][T16689] dump_stack_lvl+0xf6/0x150 [ 224.459314][T16689] dump_stack+0x15/0x1a [ 224.459335][T16689] should_fail_ex+0x261/0x270 [ 224.459360][T16689] should_fail+0xb/0x10 [ 224.459385][T16689] should_fail_usercopy+0x1a/0x20 [ 224.459417][T16689] _copy_from_iter+0xd8/0xd10 [ 224.459448][T16689] ? __build_skb_around+0x199/0x1f0 [ 224.459490][T16689] ? __virt_addr_valid+0x1ed/0x250 [ 224.459527][T16689] ? __check_object_size+0x367/0x510 [ 224.459607][T16689] pppol2tp_sendmsg+0x30a/0x450 [ 224.459638][T16689] ? __pfx_pppol2tp_sendmsg+0x10/0x10 [ 224.459666][T16689] __sock_sendmsg+0x140/0x180 [ 224.459752][T16689] sock_write_iter+0x186/0x1c0 [ 224.459796][T16689] do_iter_readv_writev+0x40d/0x4b0 [ 224.459826][T16689] vfs_writev+0x2da/0x880 [ 224.459923][T16689] ? get_pid_task+0x94/0xd0 [ 224.459955][T16689] do_writev+0xf7/0x230 [ 224.459986][T16689] __x64_sys_writev+0x45/0x50 [ 224.460010][T16689] x64_sys_call+0x1d68/0x2e10 [ 224.460035][T16689] do_syscall_64+0xc9/0x1a0 [ 224.460129][T16689] ? clear_bhb_loop+0x25/0x80 [ 224.460154][T16689] ? clear_bhb_loop+0x25/0x80 [ 224.460179][T16689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.460267][T16689] RIP: 0033:0x7f85309be169 [ 224.460284][T16689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.460383][T16689] RSP: 002b:00007f852f027038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 224.460405][T16689] RAX: ffffffffffffffda RBX: 00007f8530be5fa0 RCX: 00007f85309be169 [ 224.460480][T16689] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000006 [ 224.460494][T16689] RBP: 00007f852f027090 R08: 0000000000000000 R09: 0000000000000000 [ 224.460508][T16689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.460522][T16689] R13: 0000000000000000 R14: 00007f8530be5fa0 R15: 00007ffd77509d28 [ 224.460544][T16689] [ 224.801456][T16706] x_tables: duplicate underflow at hook 3 [ 224.824807][T16709] validate_nla: 1 callbacks suppressed [ 224.824824][T16709] netlink: 'syz.3.4775': attribute type 13 has an invalid length. [ 225.017619][T16715] netlink: 'syz.5.4783': attribute type 13 has an invalid length. [ 225.035910][T16732] __nla_validate_parse: 15 callbacks suppressed [ 225.035925][T16732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4790'. [ 225.070213][T16735] FAULT_INJECTION: forcing a failure. [ 225.070213][T16735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.083367][T16735] CPU: 0 UID: 0 PID: 16735 Comm: syz.2.4791 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(voluntary) [ 225.083465][T16735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 225.083481][T16735] Call Trace: [ 225.083527][T16735] [ 225.083536][T16735] dump_stack_lvl+0xf6/0x150 [ 225.083566][T16735] dump_stack+0x15/0x1a [ 225.083587][T16735] should_fail_ex+0x261/0x270 [ 225.083644][T16735] should_fail+0xb/0x10 [ 225.083670][T16735] should_fail_usercopy+0x1a/0x20 [ 225.083701][T16735] _copy_from_user+0x1c/0xa0 [ 225.083789][T16735] copy_msghdr_from_user+0x54/0x2b0 [ 225.083899][T16735] ? __fget_files+0x186/0x1c0 [ 225.083929][T16735] __sys_sendmsg+0x141/0x240 [ 225.083974][T16735] __x64_sys_sendmsg+0x46/0x50 [ 225.084064][T16735] x64_sys_call+0x26f3/0x2e10 [ 225.084088][T16735] do_syscall_64+0xc9/0x1a0 [ 225.084128][T16735] ? clear_bhb_loop+0x25/0x80 [ 225.084225][T16735] ? clear_bhb_loop+0x25/0x80 [ 225.084251][T16735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.084277][T16735] RIP: 0033:0x7faa3390e169 [ 225.084296][T16735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.084343][T16735] RSP: 002b:00007faa31f77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.084365][T16735] RAX: ffffffffffffffda RBX: 00007faa33b35fa0 RCX: 00007faa3390e169 [ 225.084377][T16735] RDX: 0000000000000040 RSI: 0000200000000180 RDI: 0000000000000003 [ 225.084389][T16735] RBP: 00007faa31f77090 R08: 0000000000000000 R09: 0000000000000000 [ 225.084404][T16735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.084483][T16735] R13: 0000000000000000 R14: 00007faa33b35fa0 R15: 00007fffb0a80798 [ 225.084505][T16735] [ 225.287532][T16732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4790'. [ 225.896095][T16745] x_tables: duplicate underflow at hook 3 [ 225.971130][T16749] loop2: detected capacity change from 0 to 512 [ 226.000083][T16749] EXT4-fs warning (device loop2): dx_probe:848: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 226.011749][T16749] EXT4-fs warning (device loop2): dx_probe:851: Enable large directory feature to access it [ 226.021850][T16749] EXT4-fs warning (device loop2): dx_probe:936: inode #2: comm syz.2.4793: Corrupt directory, running e2fsck is recommended [ 226.029389][T16757] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 226.057134][T16749] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 226.068247][T16749] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.4793: corrupted in-inode xattr: invalid ea_ino [ 226.084126][T16749] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.4793: couldn't read orphan inode 15 (err -117) [ 226.192557][T16773] netlink: 'syz.4.4805': attribute type 13 has an invalid length. [ 226.265729][T16778] netlink: 'syz.2.4806': attribute type 13 has an invalid length. [ 226.274074][T16783] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4807'. [ 226.315917][T16783] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4807'. [ 226.823785][T16790] ================================================================== [ 226.831896][T16790] BUG: KCSAN: data-race in call_rcu / mtree_range_walk [ 226.838766][T16790] [ 226.841090][T16790] write to 0xffff888104599510 of 8 bytes by task 16791 on cpu 0: [ 226.848806][T16790] call_rcu+0x3d/0x430 [ 226.852890][T16790] mas_wmb_replace+0xff5/0x1510 [ 226.857761][T16790] mas_wr_store_entry+0x158c/0x2460 [ 226.862973][T16790] mas_store_prealloc+0x6d5/0x960 [ 226.868008][T16790] vma_iter_store_new+0x1d3/0x210 [ 226.873046][T16790] mmap_region+0xe0c/0x1490 [ 226.877563][T16790] do_mmap+0x9ef/0xc80 [ 226.881632][T16790] vm_mmap_pgoff+0x16d/0x2d0 [ 226.886238][T16790] ksys_mmap_pgoff+0xd0/0x340 [ 226.890919][T16790] x64_sys_call+0x1945/0x2e10 [ 226.895601][T16790] do_syscall_64+0xc9/0x1a0 [ 226.900112][T16790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.906011][T16790] [ 226.908330][T16790] read to 0xffff888104599510 of 8 bytes by task 16790 on cpu 1: [ 226.915957][T16790] mtree_range_walk+0x1b3/0x460 [ 226.920813][T16790] mas_walk+0x16e/0x320 [ 226.924972][T16790] lock_vma_under_rcu+0xa7/0x340 [ 226.929917][T16790] exc_page_fault+0x150/0x6a0 [ 226.934617][T16790] asm_exc_page_fault+0x26/0x30 [ 226.939469][T16790] [ 226.941788][T16790] value changed: 0x00007f3957645fff -> 0xffffffff8561d830 [ 226.948892][T16790] [ 226.951211][T16790] Reported by Kernel Concurrency Sanitizer on: [ 226.957362][T16790] CPU: 1 UID: 0 PID: 16790 Comm: syz.4.4811 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(voluntary) [ 226.969862][T16790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 226.980001][T16790] ================================================================== [ 226.995583][T16791] loop4: detected capacity change from 0 to 1024 [ 227.002827][T16791] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 227.012707][T16791] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 227.026502][T16791] EXT4-fs error (device loop4): ext4_get_journal_inode:5798: inode #32: comm syz.4.4811: iget: special inode unallocated [ 227.040465][T16791] EXT4-fs (loop4): no journal found [ 227.045677][T16791] EXT4-fs (loop4): can't get journal size [ 227.051685][T16791] EXT4-fs error (device loop4): __ext4_fill_super:5502: inode #2: comm syz.4.4811: iget: special inode unallocated [ 227.063999][T16791] EXT4-fs (loop4): get root inode failed [ 227.069692][T16791] EXT4-fs (loop4): mount failed