last executing test programs: 35.150361317s ago: executing program 4 (id=59): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000200000000000000000000000000000000fcffffff00000000"]}, 0x108) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000000)=0x7fffffff, 0x4) 35.049830887s ago: executing program 4 (id=62): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r2}}], 0x20, 0x2400e044}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000580)=ANY=[@ANYBLOB='unlock i'], 0xe) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0\x00'}) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f0000000440)={{0x3, 0x7}, 0x100, './file0/../file0\x00'}) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x4001, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x120000, 0x0) 34.173897027s ago: executing program 4 (id=77): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000300)}, 0x20) r2 = socket(0x25, 0x2, 0x9) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000004c0)=@req3={0xbe, 0x9, 0x7ff, 0xff7f8000, 0x3, 0x6, 0xf}, 0x1c) r3 = dup3(r2, r2, 0x0) recvmmsg(r3, &(0x7f0000004a40)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000e80)=""/222, 0xde}], 0x1}, 0x3}], 0x1, 0x40000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRES8=r0], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x28, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="30020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x230}, 0x1, 0x0, 0x0, 0xc000}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x2f, 0xfb, 0x3, 0x7, 0x54, @mcast2, @local, 0x80, 0x27, 0x3, 0x35}}) sendmsg$ETHTOOL_MSG_EEE_GET(r3, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000428bd7000fcdbdf25170000002c000180140002006272696467655f736c6176655f3000001400020076657468315f746f5f687372000000000c00018008000100", @ANYRES32=r5, @ANYBLOB="0400018044000180080003000000000008000300000000001400020064756d6d79300000000000000000000014000200626f6e645f736c6176655f30000000000800030000000000"], 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r6 = socket(0x10, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000900)={0x3, 0x4, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0x6}, 0x18) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r10, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x1, &(0x7f0000000480)=@gcm_128={{0x181}, "615eed2e8563cc90", "953c86174474a46fbc960c8129b732d3", '\x00', "aa07d445f8d7e225"}, 0x28) write$binfmt_script(r10, &(0x7f0000000500)={'#! ', './file0'}, 0xb) close_range(r6, r10, 0x0) 34.103129574s ago: executing program 4 (id=79): r0 = geteuid() ioprio_set$uid(0x0, r0, 0x2007) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x40850}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa70a8010081001000080045b4002800000000a3069078ac1414bbac1414aa4e204001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500e000090780000"], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000018600000030000000000000006000000185a00000e00000000000000000000009500000000000000", @ANYRES32=r2], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x5, 0x267, &(0x7f0000000740)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800402, &(0x7f0000000840), 0x2, 0x5c7, &(0x7f0000000880)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000150081044e81f782db44b9040a78080206000000040000a118000300ff05000006000e1208000f0100810401a80016eaa400010000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e00600000000d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccf85df947e5e0", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) close(r4) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/mdstat\x00', 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x5}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r10}, 0x18) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r11}, 0x10) 33.427701894s ago: executing program 4 (id=85): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001440)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x400002, {0x1, 0x1, 0x4}, 0x1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) faccessat(r3, &(0x7f0000000000)='./file0\x00', 0x5) r4 = geteuid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0xfc, 0x0, 0xfffff034}, {0x6, 0xfe, 0x4}]}, 0x10) sendmmsg(r5, &(0x7f0000000180), 0x4000190, 0x0) setuid(r4) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x20000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@mmap}, {@cache_mmap}, {@msize={'msize', 0x3d, 0x2}}, {@noxattr}, {@cachetag={'cachetag', 0x3d, '/+[@['}}], [{@fsuuid={'fsuuid', 0x3d, {[0x37, 0x62, 0x65, 0x36, 0x36, 0x63, 0x34, 0x33], 0x2d, [0x37, 0x31, 0x37, 0x62], 0x2d, [0x36, 0x64, 0x63, 0x35], 0x2d, [0x61, 0x35, 0x34, 0x61], 0x2d, [0x34, 0x62, 0x35, 0x51, 0x37, 0x1, 0x37, 0x37]}}}, {@euid_gt={'euid>', r4}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '$-=-\x9b#:\'\\!+^%$\x1f^'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@appraise}, {@pcr={'pcr', 0x3d, 0x34}}]}}) getpeername$packet(r8, &(0x7f0000000440)={0x11, 0x0, 0x0}, &(0x7f0000000480)=0x14) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000004c0)={0x1, 0x1, 0x38, r10, 0x1}, 0xc) 32.899936488s ago: executing program 4 (id=90): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/self/attr/current\x00', 0x64, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) pread64(r1, 0x0, 0x0, 0x4) 32.849426803s ago: executing program 32 (id=90): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/self/attr/current\x00', 0x64, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) pread64(r1, 0x0, 0x0, 0x4) 3.781431521s ago: executing program 2 (id=491): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x5f, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xfff, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0xd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x2, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x75, 0x100, 0x0, 0x8, 0xfffffffd, 0x2000000, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0xfffc, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000c80)={'syztnl1\x00', &(0x7f0000000c00)={'syztnl2\x00', 0x0, 0x20, 0x700, 0x2, 0x0, {{0xc, 0x4, 0x1, 0x2, 0x30, 0x68, 0x0, 0x7f, 0x4, 0x0, @multicast2, @loopback, {[@rr={0x7, 0x1b, 0x23, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @broadcast, @multicast1]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000d40)={'syztnl1\x00', &(0x7f0000000cc0)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x1, 0x10, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @remote}, 0x10, 0x7800, 0x2, 0x9bb1}}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r6, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r8}, 0x80, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000d80)={0x1b0, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x4}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x84}, 0x4001) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000580)='kmem_cache_free\x00', r9}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 3.706451619s ago: executing program 2 (id=492): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6f766572c5647780319926277065726d2c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',nocompress,block=0x0000000000001f00,gid=', @ANYRESHEX=0x0, @ANYBLOB=',check=relaxed,map=normal,iocharset=default,map=off,map=off,gid=', @ANYRESHEX=0x0, @ANYBLOB=',session=0x0000000000000027,mode=0x0000000080000000,map=off,nocompress,sbsector=0x0000000000000009,nocompress,map=acorn,\x00'], 0x2, 0xa28, &(0x7f0000000180)="$eJzs3c9vHGf5APBn1nbiuFWStvn2W6K2nqQkdVvjrG2aYPUAjnftbLG9yHakRBya0jgoiqHQgtRGSE0lxAFRgQTiwq3ixKlSL/SCeoMbnDggof4LFadwWjSza3tt73pj1/G6yedj7e78eOZ9n/mx82Ynu/MGXy61YxvGarX8scvxy3/ah4w5wC6WPvvwow+yx/t34lD0xMvJnyP6IyKN6I2IpyL6pkoL1bkOBd2KuBYRn0YkEXE46q/35Fokv45H18c/jeQPWb1tHbrXkumkxkOt28cfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcRMlUqVgcTQ5FZf7ylbQuIt1iqrRQTaJW2zpndZm6T/Jev5NPfvlIh3ojkuwR/f2rXX0/dWJ99pMRkZ6Op+tjT+cdkkd/3H7kyeOvPNFbWF2+XTZfyOE2xfbElg3z9ru3b72+srL81g6r6N9tbgfMTHm+slitzE3OlNPKYjWdOH++eO7S9GI6XZktL15dXCrPpVML5cml6kI6NPVCOjoxMZ6WR65WL8/PlEZmy6sTL3xtrFg8n7468p3y5MJidf7cqyOLU5cqs7OV+Zk8JpudxVzIDsRvV5bSpfLkXJreuLmyPL4ppy27KQsa7bQmWdBYp6Cx4tjY6OjY2Oj7jd6z1yacf3ni5QvFYm9xk9gScZ8OWg6WI+138/04jcOuFOrtf8RsVGI+LseVSFv+TUUpFqIac23mN6y2/2fOlbett7n9b7TyvU2zT2ZPp+PZxmh/m/a/TS779/d2vBu341a8HiuxEsvxVtcz2vqX7ZE284580bJnohzzUYnFqEYl5mIyn5I2pqQxEefjfBTjtbgUg7EYaUxHJWajHItxNRZjKcr5ETUVC1GOyViKaixEGkMxFS9EGqMxERMxHmmUYySuRjUux3zMRCkm81JuxM18u49vk+Na0Oi9BI1tE7SlMd9x+1/e+m9IHiq1Wu29vT+Nw67UGu3/oc6hQ1P7kRAAAACw577ytzh64vG//jsiiWfy6/LTldlysdtpAQAAAHsoiSTi6eypLxt9JhKf/wEAAOBBk+S/sUsiYiAG60Orv4RyEQAAAAAeEPntep6NZHB9gs//AAAA8IBZu8d+/UrA2j12r/SsTu14F/5kePX2v+n1+uv1RkSjiIHpymx5ZKo6+8ponM3vMpD/0mBLaT0RSV/+84MX41Q96tRA3MleB9ZLzOrsz6JGR14ZjRfjdGNFhp7LXp4bahE5Vo98vh75fHNkT2yIHM8iAeBBd3qb9rh+j/3O7f+LMVyPGD6ZN/m9J1u0wUUtKwAcFGt97Py30aVZi/a/EfFsu/b/69t8/s8iHo8bg/WvFIzEG/FmrMT1GI7GNw4GW5W62htB/WsIw01XA3KbrgYMNL6y8I8LhRjecj2gf21dm2OXYyyGG1cEjjTmN64dJGuxyWoO4/WAnvuwAwCgC05v2w7fW/s/3OHz/4CvFALAgbLWg/19HOj2OgIAG2mlAQAAAAAAAAAAAAAAAAAAAAAAAAAAYO81366/1u4G/n8/G7GyshyxD50FrA30t8hwlwOF2Kec373du2/bp+VAT0R0q/Zvxo6XyvZxdzbUfg0cORhp7GKgyycmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9kUS0dNqeuFw/lKMiHP7ndP9dKfbCeyVdHeLJXfjbrwTR/c6HQAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh13j/v+FqL8+Up8UvYWIMxFxLSK+2+0c99LdbifQNT/In5vu/1+I6ItaEr313R5J31RpoTqX7f7kcDb/sw8/+iB7dC57a68KefcRhU2dSzRqaJrSt3Gpx/KlBkrLb9/6yZs/SksX8wPz4tL0bGluZuFb64FPJh/Xu0Bo7gZhNd+fnfnLb5omH2pU/nG2pq1trnc6r7e0td7/b7V0m3rvwc2V5bGspqXylaWf/vDmO02zHo9TEc8NRQxtrOn72aNNTac2b8+Nks+TXyRH4/dxLd//2dZIakm2i47l63/kxs2V5ZE33ly5vpbTextyOh6DEXE9ov/ecxrMzyct5UddoS+rtZgHZU8nOpS3raYSR9ts18fyQ2ZgR+uQtl+HXIft3shovGVGv/3xE3F2x3v6bIcaW0o+T/6VXIp/xs+b+v8oZPv/TLR8d7YoIo9sOlKa5214exXqkfmajzXPeG1zmW3fldwHv4rvxTfW9n+h6fzf2Ff7cz5qqrH1+yJi5++LPx7b0qKsy1ukE5tapMbZp+UC/Wt5nqhHtcnz/+KliN6TOzqjvNThjLL37/9GfXeG4j9xR/8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAwZdE9LSaXog4ExHHI+JYNp5G1DbH3NlFfYWBZDdp7pnd5PzlkzSt6MY1Tu7G3XgnjnYjKwAAAAAAAAD23sXSZx9+9EH2yP8/vie+WmjMSSN6I+J48ru+qdJCda5DQX0R11b/S79/Zzlcy54eXR//NBt7qsNC3f36AAB8qf0vAAD//11ccUg=") 3.506807399s ago: executing program 2 (id=497): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000008000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)='%-010d \x00'}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x41ee, 0x4) sendmmsg$inet(r5, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) recvfrom(r5, 0x0, 0x0, 0x2101, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="090000000000000000ff0200004a140001800500020001"], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x84, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x41}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}, @MPTCP_PM_ADDR_ATTR_IF_IDX, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040040) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)=@usbdevfs_disconnect={0x9}) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = dup(r7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) (fail_nth: 11) 3.378991373s ago: executing program 2 (id=499): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = inotify_init1(0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_int(r1, 0x29, 0x49, 0x0, &(0x7f0000000080)) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x52000775) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000300000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r6, 0x80044940, &(0x7f0000000600)=0x14) ioctl$IMADDTIMER(r6, 0x80044940, &(0x7f0000000080)=0x14) close(r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r7}, 0x18) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r10}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @multicast}) r12 = memfd_create(&(0x7f00000003c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,U\xb1]*\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3S\xef}\xfd\x12\xbc:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec=\x9e\xc3\xfd\x85d\x0fl5\xf3\xbe\" 6\r<\xea\x8dz\xcf6\x99\x91\xear8p\xaaR\xd5\xa6\xab#N>\x9a\xdf\xea\x009\xfbB\xc1\xd0_\xc0\'Z\xeb\xd8\xaf\xf0\'J\xe2\xff\xe5x*;(p\xf7p\xce\xbb\xa7\xfe\x04\xd0t\x81\x1a\x1b?m/\x1ex\xf8\x88^\xbaU\xb9\xa6\xab\x8d\a\xa6\"\xd9\x13\xeb\xe2\rh\x8dsx\xaa!\xd5Q\xf8\xce*\x95\x0es\xfaZ\x94t\x19\xdc\xdc\xcf\x0f\x9a\xa2O>\xb9\xfc\x01\fW\xee\xffh\xbd\xb2\xb4z\xeb\x84\x13\x13u\x8f\xe2\\Z\xef\xa3\xe1c\xc5\xe6', 0x0) write$bt_hci(r12, &(0x7f0000000280)=ANY=[@ANYBLOB="01", @ANYRES16=r5], 0x2b) execveat(r12, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r13, &(0x7f0000000380)='memory.stat\x00', 0x275a, 0x0) 2.246503059s ago: executing program 1 (id=512): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18004, &(0x7f0000000400), 0x3, 0x4cd, &(0x7f0000001180)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 2.132677231s ago: executing program 5 (id=515): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) close(0x3) close_range(r0, 0xffffffffffffffff, 0x0) 2.025356172s ago: executing program 5 (id=517): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002dc0)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0xd6ab, @private2, 0xc3ca}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000400)='t', 0x1}], 0x1}}, {{&(0x7f00000009c0)={0xa, 0x4e24, 0x8000, @private0, 0x10001}, 0x1c, &(0x7f0000000a80)=[{&(0x7f0000000a00)="a7", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x45, 0x0, 0x1, 0xffffffd0}, {0x3d, 0x0, 0x2}, {0x16, 0x0, 0x3, 0x20000000}]}) 1.994043185s ago: executing program 1 (id=518): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}}) ptrace$ARCH_GET_GS(0x1e, 0xffffffffffffffff, &(0x7f0000000640), 0x1004) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000003c0)="83f2a8adc00f021c7f234f1cbfb62f9c3a188950ebf0533a3e1d33baf1f6f73355890e53f8c9486d9f4c56785a0c4d504046a6451f365a3134630ac7c8099ed9182a3f0be362f3", 0x47, 0x0, &(0x7f00000004c0)={0x11, 0xc, r4, 0x1, 0xb3, 0x6, @local}, 0x14) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8008a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x899, 0xd7}, 0x0, 0xc8, 0x0, 0x1, 0x4}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102036c00fefd000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], 0x0, 0x8c, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000005c0), &(0x7f0000000540), 0x8, 0xf9, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES64=r7, @ANYBLOB="0000000000000000b70500000800000085000000690000009560bce9b8dea85d356f40ba4d1e08d2bf5b48cbc56e98143d3d08e5f07387fd111747539d994e61813a64dd88a8160a6d7b87d8e6b89450b0d5890907792f36"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffed}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r9}, 0x10) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000004c0)='kfree\x00', r11, 0x0, 0x4ab}, 0x18) r12 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) dup(r12) 1.921078972s ago: executing program 5 (id=519): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001440)={'vcan0\x00', 0x0}) bind$can_j1939(r0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) faccessat(r3, &(0x7f0000000000)='./file0\x00', 0x5) r4 = geteuid() sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0xfc, 0x0, 0xfffff034}, {0x6, 0xfe, 0x4}]}, 0x10) sendmmsg(r5, &(0x7f0000000180), 0x4000190, 0x0) setuid(r4) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x20000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@mmap}, {@cache_mmap}, {@msize={'msize', 0x3d, 0x2}}, {@noxattr}, {@cachetag={'cachetag', 0x3d, '/+[@['}}], [{@fsuuid={'fsuuid', 0x3d, {[0x37, 0x62, 0x65, 0x36, 0x36, 0x63, 0x34, 0x33], 0x2d, [0x37, 0x31, 0x37, 0x62], 0x2d, [0x36, 0x64, 0x63, 0x35], 0x2d, [0x61, 0x35, 0x34, 0x61], 0x2d, [0x34, 0x62, 0x35, 0x51, 0x37, 0x1, 0x37, 0x37]}}}, {@euid_gt={'euid>', r4}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '$-=-\x9b#:\'\\!+^%$\x1f^'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@appraise}, {@pcr={'pcr', 0x3d, 0x34}}]}}) getpeername$packet(r8, &(0x7f0000000440)={0x11, 0x0, 0x0}, &(0x7f0000000480)=0x14) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000004c0)={0x1, 0x1, 0x38, r10, 0x1}, 0xc) 1.908203464s ago: executing program 0 (id=521): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x4) fchdir(r1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$rxrpc(0x21, 0x2, 0xa) mkdirat(r1, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(0xffffffffffffffff, 0x807f, 0x1000000, 0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00fd583bf43affffff0000"], 0x48) fsopen(&(0x7f0000000400)='autofs\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x4001084) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}}) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc1}, &(0x7f0000000340)={0x0, "60cfc7e5a9992101d7f1c5aca325a25884f9c3c0c5ce07602565fef1599658ea0d1dfa9decf9a7d5cbc1410b90e108ecbce34e8fcbc5c7c6d4f9f335cb4a4d3c", 0x39}, 0x48, 0xfffffffffffffffc) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") 1.819876003s ago: executing program 5 (id=522): tee(0xffffffffffffffff, 0xffffffffffffffff, 0x8f5, 0x0) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r1, 0x8, 0x0, 0x0, 0x14}, 0x94) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="61000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 1.65862133s ago: executing program 5 (id=523): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000100)=0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) read$qrtrtun(r2, 0x0, 0xeffd) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x8, 0x0) r3 = syz_io_uring_complete(0x0) write$P9_RFSYNC(r3, &(0x7f0000000000)={0x7, 0x33, 0x2}, 0x7) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 1.106495246s ago: executing program 0 (id=530): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe18}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8, 0x40}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r5}, 0x18) (async) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) r9 = fcntl$dupfd(r8, 0x0, r8) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a00010200000000000000000a000000", @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r7], 0x24}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r12}, 0x10) (async) r13 = socket$can_raw(0x1d, 0x3, 0x1) unshare(0x2040400) (async) bind$can_raw(r13, &(0x7f00000002c0), 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xc7e}}, './file0\x00'}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r12, r14, 0x25, 0x0, @void}, 0x10) (async) syz_open_dev$loop(&(0x7f0000000000), 0xa, 0x80000) (async) ioctl$BLKBSZGET(r14, 0x80081270, &(0x7f0000000040)) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r10}, 0x10) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) 1.105714706s ago: executing program 0 (id=531): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x5f, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xfff, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0xd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x2, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x75, 0x100, 0x0, 0x8, 0xfffffffd, 0x2000000, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0xfffc, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000c80)={'syztnl1\x00', &(0x7f0000000c00)={'syztnl2\x00', 0x0, 0x20, 0x700, 0x2, 0x0, {{0xc, 0x4, 0x1, 0x2, 0x30, 0x68, 0x0, 0x7f, 0x4, 0x0, @multicast2, @loopback, {[@rr={0x7, 0x1b, 0x23, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @broadcast, @multicast1]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000d40)={'syztnl1\x00', &(0x7f0000000cc0)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x1, 0x10, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @remote}, 0x10, 0x7800, 0x2, 0x9bb1}}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r6, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r8}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)}], 0x1}}], 0x1, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000d80)={0x1b0, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x4}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x84}, 0x4001) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000580)='kmem_cache_free\x00', r9}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 1.085606518s ago: executing program 0 (id=532): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x40}}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x2000005, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x7fffffff, 0x4, 0x0, 'queue0\x00', 0x10000}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) close_range(r0, 0xffffffffffffffff, 0x0) 1.000874247s ago: executing program 1 (id=533): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001440)={'vcan0\x00', 0x0}) bind$can_j1939(r0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) faccessat(r3, &(0x7f0000000000)='./file0\x00', 0x5) r4 = geteuid() sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0xfc, 0x0, 0xfffff034}, {0x6, 0xfe, 0x4}]}, 0x10) sendmmsg(r5, &(0x7f0000000180), 0x4000190, 0x0) setuid(r4) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x20000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@mmap}, {@cache_mmap}, {@msize={'msize', 0x3d, 0x2}}, {@noxattr}, {@cachetag={'cachetag', 0x3d, '/+[@['}}], [{@fsuuid={'fsuuid', 0x3d, {[0x37, 0x62, 0x65, 0x36, 0x36, 0x63, 0x34, 0x33], 0x2d, [0x37, 0x31, 0x37, 0x62], 0x2d, [0x36, 0x64, 0x63, 0x35], 0x2d, [0x61, 0x35, 0x34, 0x61], 0x2d, [0x34, 0x62, 0x35, 0x51, 0x37, 0x1, 0x37, 0x37]}}}, {@euid_gt={'euid>', r4}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '$-=-\x9b#:\'\\!+^%$\x1f^'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@appraise}, {@pcr={'pcr', 0x3d, 0x34}}]}}) getpeername$packet(r8, &(0x7f0000000440)={0x11, 0x0, 0x0}, &(0x7f0000000480)=0x14) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000004c0)={0x1, 0x1, 0x38, r10, 0x1}, 0xc) 963.483281ms ago: executing program 3 (id=534): r0 = socket(0x11, 0x2, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) syz_emit_ethernet(0x82, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x2a}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010101}, {@private}, {@dev}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f0000000400)='.\x00', 0xa4000829) creat(&(0x7f00000000c0)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 890.681139ms ago: executing program 2 (id=535): syz_open_procfs(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='sys_enter\x00', r0, 0x0, 0x5d0b}, 0x18) getresgid(&(0x7f0000001180), &(0x7f00000011c0), &(0x7f00000021c0)) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r1, 0x2000) accept$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r2 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r2, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fb7fd, 0x20005}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x2054) accept4$inet6(r1, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) socket(0x2, 0x80805, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x20040040) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@md5={0x1, "2dc780229cf5d1a5cac7b877428c2675"}, 0x11, 0x3) 890.049778ms ago: executing program 3 (id=536): io_setup(0x8000, &(0x7f0000000280)=0x0) (async) r1 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x6) io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0xfffffc98}]) (async) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x80280, 0x0) pwritev2(r2, &(0x7f00000000c0)=[{&(0x7f0000002040)="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", 0x1000}, {&(0x7f0000000280)="57469005eea79e4675f914d238f21e3e191239f0308484a79a54be6f700fc5d263d5530b9b49a7468567aae44c164d667551dadb6afa1aecbf8326632176237d98944bbeba120c42488d7c784746f148a9b49cc0774279d28bb51519577b60c58bfaa4c080c756970e4d582b07731880e8ea4ee335554e2ed3c52227db4d15f1b16969fecfa904b66710759dd227bcfc3630a2ec2b61cb7b9843260fd03847167af87de9a945c4710a85cedf8ce6f1501f", 0xb1}], 0x2, 0x4, 0x101, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) (rerun: 32) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000040000000100"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x47863f0598a89dd4}, 0x94) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2400000020000111965e4194f59533171b8cf802000000000000000000000a0000000300000000000000080017004e284e26"], 0x24}}, 0x0) (async, rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r6}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async, rerun: 64) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (rerun: 64) vmsplice(r7, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) (async, rerun: 32) r8 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x10000003}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) (rerun: 32) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r8, 0x48e9, 0x0, 0x2, 0x0, 0x0) (async) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r11, 0x0, 0x101}, 0x18) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x106, 0x8}}, 0x20) close_range(r12, r12, 0x0) 889.347399ms ago: executing program 1 (id=537): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='ext4_mballoc_alloc\x00', r0}, 0x18) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x10000000, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x0, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) syz_emit_ethernet(0x5e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000286dd600a843500140601fe80000000000000000000000000bbfe80000000000e0000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a08000009078000013128e9bd1bcfa9a44cc18c7c11b454d80600000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000280)={[], [{@smackfshat={'smackfshat', 0x3d, '(-&'}}]}, 0x3, 0x4e2, &(0x7f0000001c80)="$eJzs3d9rXFkdAPDvnSRt0qYmVR9q0Vq0khbtTNLYNvhQI4g+Faz1PcZkEkImmZCZtE0okuIfIIi/0CeffBF8FkH6J6hQ0HcRUYrbdh92YXdnmcmdbZudSSbb+dEmnw+c3HPuvZPv98wwZ+bcudwbwJF1PiKmI6IvIi5FxEi6PpOW2N4p1f2ePrk/Vy1JVCq3/59Ekq6r/68kXZ5MHzYYEd//bsSPko/HLW1uLc8WCvn1tJ0rr6zlSptbl5dWZhfzi/nV6cmJa1PXp65Ojbetrze+/Z9f/vT337nxl6/d/dfM/y7+uJrWcByrbXuxH63YbnG/na4P1J6Luv6IWD9IsNdYX9qfgV4nAgBAS6rf8T8dEV+KiGe/6XU2AAAAQCdUvjkc7yURFQAAAODQytTOgU0y2fRcgOHIZLLZnXN4PxsnMoViqfzVheLG6nx1W8RoDGQWlgr58fRc4dEYSKrtiVr9efvKrvZkRJyOiJ+PDNXa2bliYb7XBz8AAADgiDi5a/7/9sjO/B8AAAA4ZEZ7nQAAAADQceb/AAAAcPg1nf8n/d1NBAAAAOiE7928WS2V+v2v5+9sbiwX71yez5eWsysbc9m54vpadrFYXKxds29lv/9XKBbXvh6rG/dy5XypnCttbs2sFDdWyzO1+3rP5N0nGgAAALrv9Bcf/jOJiO1vDNVK1bF0Wwtz9enOZgd0UuZguyedygPovr5eJwD0zD4n+P7t891KBOg6v8cD+0zsf7GrfcDDBgAAwOtg7HOv9Pu/3wPhDWYiD0dX357NJk51Jhegu1zgC46upnN8EwM4Go7vv8tgsw1/bXMuAABAxwzXSpLJplP+4chkstmdQ/yjMZAsLBXy4xHxqYj4x8jA8Wp7otdJAwAAAAAAAAAAAAAAAAAAAAAAAMAbplJJogIAAAAcahGZ/ybpjfzHRi4M7z4+cCx5Z6S2jIi7v739q3uz5fL6RHX9Wx+tL/86XX+lF0cwAAAAgN3q8/T6PB4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2unpk/tz9dLNuI+/FRGjjeL3x2BtOfinkYg48SyJ/hcel0REXxvibz+IiDON4ifVtGI0zWJ3/ExEDLUj/uAnj3+yDfHhKHtYHX+mG73/MnG+tmz8/utPy6t6fL7Z+Jepj3+1ca7R+HeqxRhnH/0x1zT+g4iz/Y3Hn3r85BXH3x/+YGur2bbK7yLGGn7+JC/FypVX1nKlza3LSyuzi/nF/Ork5MS1qetTV6fGcwtLhXz6t2GMn33hzx/s1f8TTeKP7tP/Cy32//1H9558Zo/4F7+8O/67tdf/zB7xq8/9V9LPger2sXp9e6f+onN/+Pu5vfo/36T/+73+F1vs/6VbP/l3i7sCAF1Q2txani0U8usqb2RlwCvY5spQvBZptKtyK32jH/jhPR6YAACAtnv+pb/XmQAAAAAAAAAAAAAAAAAAAMDR1fGLkB1/+coCg73rKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAnj4MAAD//1Q90vA=") r3 = msgget$private(0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x22004001, 0x0, 0x0) shutdown(r5, 0x1) splice(r5, 0x0, r4, 0x0, 0x2, 0x0) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYRES8=r6], 0x0}, 0x94) msgsnd(r3, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x2000, 0x0) msgrcv(r3, &(0x7f0000001080), 0x8, 0x2, 0x3000) io_uring_setup(0x4539, &(0x7f0000000040)={0x0, 0x81fc, 0x8000, 0x3, 0x48}) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000540)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1b8, 0x7}, 0x0, 0x0, 0x6, 0x2, 0xffffffff, 0xd5, 0x6, 0x2, 0xfffe, 0x9}) syz_emit_ethernet(0xaa, &(0x7f0000000b00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "f7d8ff", 0x74, 0x3c, 0x0, @local, @loopback, {[@srh={0x2c, 0xc, 0x4, 0x6, 0x5, 0x60, 0x9, [@mcast2, @empty, @private2={0xfc, 0x2, '\x00', 0x4}, @dev={0xfe, 0x80, '\x00', 0x12}, @remote, @private0={0xfc, 0x0, '\x00', 0x1}]}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x0, 0x0, @void}}}}}}}}, 0x0) 864.925691ms ago: executing program 0 (id=538): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=@base={0xe, 0x0, 0x0, 0x2000}, 0x50) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x802}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x18, r3, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000180)) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x85, &(0x7f0000000240)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000280), &(0x7f0000000340), 0x8, 0xc8, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000500)={r4}, 0x4) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00'}, 0x18) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r6, &(0x7f0000000180), 0x40010) 809.114967ms ago: executing program 3 (id=539): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) close(0x3) close_range(r0, 0xffffffffffffffff, 0x0) 798.634978ms ago: executing program 0 (id=540): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='alloc_extent_state\x00', r0, 0x0, 0x3}, 0x32) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x44d6f8832e1bdab3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3545, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x10004000}, 0x4000000) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000cd129589edb511cd0d8c00"/35, @ANYRES64, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000c5", @ANYBLOB='\x00\x00\x00\x00'], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_TBF={0x30}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg$unix(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r8, 0x402, 0x8000001f) close_range(r8, 0xffffffffffffffff, 0x0) 773.22118ms ago: executing program 5 (id=541): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0xb}, 0x18) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x2201, 0x0) write$binfmt_elf32(r1, 0x0, 0x69) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) ioctl$sock_proto_private(r2, 0x89e0, &(0x7f0000001080)) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='sched_switch\x00', r3, 0x0, 0x2}, 0x64) socket$nl_route(0x10, 0x3, 0x0) fsopen(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x8, 0x69, 0x6, 0x1000}]}) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r4, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) syz_usbip_server_init(0x6) pipe2$watch_queue(&(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_genetlink_get_family_id$mptcp(&(0x7f0000001080), r5) 754.735742ms ago: executing program 3 (id=542): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x5f, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xfff, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0xd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x2, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x75, 0x100, 0x0, 0x8, 0xfffffffd, 0x2000000, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0xfffc, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000c80)={'syztnl1\x00', &(0x7f0000000c00)={'syztnl2\x00', 0x0, 0x20, 0x700, 0x2, 0x0, {{0xc, 0x4, 0x1, 0x2, 0x30, 0x68, 0x0, 0x7f, 0x4, 0x0, @multicast2, @loopback, {[@rr={0x7, 0x1b, 0x23, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @broadcast, @multicast1]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000d40)={'syztnl1\x00', &(0x7f0000000cc0)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x1, 0x10, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @remote}, 0x10, 0x7800, 0x2, 0x9bb1}}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r6, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r8}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)}], 0x1}}], 0x1, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000d80)={0x1b0, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x4}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x84}, 0x4001) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000580)='kmem_cache_free\x00', r9}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 648.554673ms ago: executing program 3 (id=543): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="090000120000000aa71053d044e26d02911d843a33810b92b606edf1e1f9947f572f0793a383350a5e95dc3999d57266e54eb34356c48fcd86026b45f311387bfe42df65c2f2b1ecdb5d8514fe8041d92ce20f2365330a6400c7d9c749c522434fdaecebdfbba9809cba89259622a9cf32a6ca5ce4f651c64adf0c171b0f76bcd640b69195b428a083cbfa65d8dc0f2a8ead6404fa14c52262b735f5df4721a9ccbc44dcc9a5d082e1f2a1fa2a6545fcffdf2216dc619e743252bbed", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000181100008970183fb56dc8a362a9022691ec0999bd2994820ef388255a4dfd0e0dbd8c995f7f7bfbe319a8a1e92b88249eafd4b2f8574e80bac5114a502078a9aff2d55e", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x9}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r3, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50) syz_io_uring_submit(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = openat(0xffffffffffffff9c, 0x0, 0x1c1202, 0x0) recvmsg(r4, 0x0, 0x12160) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r4) io_uring_enter(r4, 0x478f, 0xe1f8, 0x3, &(0x7f0000000080)={[0x3ff]}, 0x8) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x2}, 0x2052, 0x0, 0x1, 0x0, 0x5, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x6}) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) 490.683339ms ago: executing program 3 (id=544): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18004, &(0x7f0000000400), 0x3, 0x4cd, &(0x7f0000001180)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpi8Ezi3Xg03jTxqkfjyT8ADx5MDAkxXABPa2Z3pt3ur+7CtqXs55Ns+zwzz8zzPDPzzD77PDsbwMAaS/8kEf+LiFsR8VQtujLBWO3f/btXZx7cvToTi5XKqX+Sarp7aTyTb7c9i4wXIgpfJg07rJm/fOXcdLk8dymLTy6c/2xy/vKV18+enz4zd2buwtSJE8eOHjn+5tQbvVeqRX5pve7t/eLivj3vnr75/kwxXz6S/a+vR1vF3oox1mHdK73t6rG3oy6cNB+na+taGLo2kl3WpbT9Xy0fPL3RBQLWTaVSqQy3X71YaXS9aQmwaSWx0SUANkb+Rp9+/s1f69T1eCzcOVn7AJTW+372qq0pRiFLU2r4fNtPYxHx8eK/36Sv6DQO8ecaFQAAGDi/nMx7go39v0Lsrkv3/2wOZTQino6InRHxTETsiohnI6ppn4uI5xszSCIqHfLf1RBfzv/HbBahcPuRK9lB2v97K5vbWtn/y3t/MTqUxXZE5B3mucPZMRmP0vAnZ8tzR9rsf8sq+df3/9JXmn/eF8zKcbvYMEA3O70w/XC1bXbnesTeYmP9k2J64vJpnCQi9kTE3h72O1oXPvvad/uWIqWV6Vavf1WlxZRez/NxrVS+jXi1dv4XY8X5X84x6Tw/OTkS5bnDk+lVcLhlHr/9fuODdvmvWv+f/mrc5J3jP5961GovSc//trrrP/L52+X6jyYRydJ87XxEZai3PG788VV1v2OHmtc97PW/JfmoGs7b1+fTCwuXjkRsSd5rXj61vG0ez9On9R8/1Lr978y2SY/ECxGRXsQvRsRLEbE/K/uBiDgYES2qtuTXt1/+tN26Lq//NZPWf7bl/W/F+V+er+8ykG+cLhk6d+DWgzY3j+7O/7FqaDxb0vr+l6y4RXRb0kc7egAAALA5FKL63f/CxFK4UJiYqI0B7YpthfLF+YX9EXFhtvaMwGiUCvlIV208uJTk45+jdfGphvjRbNz466Gt1fjEzMXy7EZXHgbc9mqbT5raf+rvHsd5gU2oD/NowCa1WvvffXOdCgKsO+//MLjq2v9imySLvikDTybv/zC4WrX/a/F9x2cX3DNg86toyzDQtH8YXMX4cClcfey55dO2wJPI+z8MpF6f6+8tUBluvWokWvxiwMjaFGNri7w2JJD2rPq4w1JEdJd468NkkXcB2//CQ6G3HQ5H86qh6LRV0sPvOOSB9KismvjM7r5f/PlvovT7svlhuZ2WujzdfQpsyO0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg7/4LAAD///QJ1ng=") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)=0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r2}, 0x18) io_uring_enter(0xffffffffffffffff, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 489.740529ms ago: executing program 1 (id=545): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x2, 0x7fe2, 0x3, 0x12}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) (fail_nth: 7) 22.898627ms ago: executing program 2 (id=546): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) fcntl$notify(r1, 0x402, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x10007ffffffff}, 0x18) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) 0s ago: executing program 1 (id=547): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x20780, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe01}, 0x94) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000004000000f10000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000002d00e6ffffff000000000000000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f0000000180)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {}, {@inlinecrypt}, {@usrjquota}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x566, &(0x7f0000000740)="$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") r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff1f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r10 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$BLKGETZONESZ(r10, 0x80041284, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00'}, 0x18) r12 = ioctl$LOOP_CTL_ADD(r10, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r12) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): dmsg+0x145/0x180 [ 53.946396][ T4012] ____sys_sendmsg+0x31e/0x4e0 [ 53.946496][ T4012] ___sys_sendmsg+0x17b/0x1d0 [ 53.946543][ T4012] __x64_sys_sendmsg+0xd4/0x160 [ 53.946644][ T4012] x64_sys_call+0x191e/0x3000 [ 53.946675][ T4012] do_syscall_64+0xd2/0x200 [ 53.946704][ T4012] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 53.946741][ T4012] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 53.946864][ T4012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.946912][ T4012] RIP: 0033:0x7f804441f6c9 [ 53.946933][ T4012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.946956][ T4012] RSP: 002b:00007f8042e7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.946994][ T4012] RAX: ffffffffffffffda RBX: 00007f8044675fa0 RCX: 00007f804441f6c9 [ 53.947007][ T4012] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000006 [ 53.947019][ T4012] RBP: 00007f8042e7f090 R08: 0000000000000000 R09: 0000000000000000 [ 53.947030][ T4012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 53.947045][ T4012] R13: 00007f8044676038 R14: 00007f8044675fa0 R15: 00007ffd60d03978 [ 53.947142][ T4012] [ 54.145004][ T4019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.154'. [ 54.213590][ T4019] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 54.253837][ T4021] loop1: detected capacity change from 0 to 512 [ 54.278914][ T4021] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.155: iget: bad i_size value: 38620345925642 [ 54.318792][ T4021] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.155: couldn't read orphan inode 15 (err -117) [ 54.331294][ T4021] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.358056][ T4024] IPVS: Unknown mcast interface: wlan1 [ 54.417705][ T4021] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.155: bg 0: block 5: invalid block bitmap [ 54.460766][ T4021] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 54.473302][ T4021] EXT4-fs (loop1): This should not happen!! Data will be lost [ 54.473302][ T4021] [ 54.483156][ T4021] EXT4-fs (loop1): Total free blocks count 0 [ 54.489476][ T4021] EXT4-fs (loop1): Free/Dirty block details [ 54.495450][ T4021] EXT4-fs (loop1): free_blocks=0 [ 54.500512][ T4021] EXT4-fs (loop1): dirty_blocks=2588 [ 54.505823][ T4021] EXT4-fs (loop1): Block reservation details [ 54.511845][ T4021] EXT4-fs (loop1): i_reserved_data_blocks=2588 [ 54.519092][ T4032] netlink: 'syz.0.156': attribute type 4 has an invalid length. [ 54.563516][ T4021] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 532 with error 28 [ 54.580813][ T4036] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 54.637288][ T4041] netlink: 48 bytes leftover after parsing attributes in process `syz.3.163'. [ 54.649548][ T4032] netlink: 'syz.0.156': attribute type 4 has an invalid length. [ 54.699844][ T4032] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.707174][ T4032] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.753502][ T4032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.764646][ T4032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.850180][ T37] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.858755][ T37] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.871661][ T37] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.891078][ T37] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.954949][ T4057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.166'. [ 55.325844][ T4078] loop2: detected capacity change from 0 to 2048 [ 55.437938][ T4078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.442131][ T4085] loop0: detected capacity change from 0 to 512 [ 55.451261][ T4078] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.523458][ T4077] loop5: detected capacity change from 0 to 8192 [ 55.530431][ T4085] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.175: iget: bad i_size value: 38620345925642 [ 55.577780][ T4089] random: crng reseeded on system resumption [ 55.630857][ T3306] loop5: p2 p3 p4 [ 55.635144][ T4085] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.175: couldn't read orphan inode 15 (err -117) [ 55.647879][ T3306] loop5: p2 start 2936012800 is beyond EOD, truncated [ 55.655260][ T3306] loop5: p3 start 1912602624 is beyond EOD, truncated [ 55.662524][ T3306] loop5: p4 size 656640 extends beyond EOD, truncated [ 55.756416][ T4085] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.779429][ T4091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.794175][ T4077] loop5: p2 p3 p4 [ 55.798005][ T4077] loop5: p2 start 2936012800 is beyond EOD, truncated [ 55.803734][ T4091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.805156][ T4077] loop5: p3 start 1912602624 is beyond EOD, truncated [ 55.820147][ T4077] loop5: p4 size 656640 extends beyond EOD, truncated [ 55.829798][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.941704][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 55.996038][ T4096] netlink: 'syz.0.176': attribute type 83 has an invalid length. [ 56.127406][ T4099] loop1: detected capacity change from 0 to 2048 [ 56.140968][ T4109] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 56.157751][ T4104] loop0: detected capacity change from 0 to 512 [ 56.204905][ T4104] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.233380][ T4104] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.268723][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.317203][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 56.317220][ T29] audit: type=1400 audit(1762917867.655:651): avc: denied { firmware_load } for pid=4115 comm="syz.3.185" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 56.373615][ T29] audit: type=1400 audit(1762917867.705:652): avc: denied { create } for pid=4115 comm="syz.3.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 56.409584][ T4124] loop5: detected capacity change from 0 to 512 [ 56.418885][ T4124] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.186: iget: bad i_size value: 38620345925642 [ 56.419854][ T4127] __nla_validate_parse: 5 callbacks suppressed [ 56.419872][ T4127] netlink: 32 bytes leftover after parsing attributes in process `syz.1.188'. [ 56.432257][ T29] audit: type=1400 audit(1762917867.715:653): avc: denied { connect } for pid=4115 comm="syz.3.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 56.467007][ T29] audit: type=1400 audit(1762917867.715:654): avc: denied { write } for pid=4115 comm="syz.3.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 56.472398][ T4124] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.186: couldn't read orphan inode 15 (err -117) [ 56.505124][ T4129] netlink: 32 bytes leftover after parsing attributes in process `syz.1.188'. [ 56.514476][ T4131] netlink: 32 bytes leftover after parsing attributes in process `syz.3.189'. [ 56.514697][ T4124] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.536810][ T4131] netlink: 32 bytes leftover after parsing attributes in process `syz.3.189'. [ 56.569559][ T29] audit: type=1400 audit(1762917867.905:655): avc: denied { name_bind } for pid=4132 comm="syz.1.190" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 56.581152][ T3780] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.596135][ T29] audit: type=1400 audit(1762917867.905:656): avc: denied { node_bind } for pid=4132 comm="syz.1.190" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 56.641851][ T4138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.192'. [ 56.652536][ T4138] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 56.678715][ T4143] IPVS: length: 111 != 24 [ 56.682364][ T4144] netlink: 32 bytes leftover after parsing attributes in process `syz.5.191'. [ 56.694021][ T4144] FAULT_INJECTION: forcing a failure. [ 56.694021][ T4144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.707458][ T4144] CPU: 1 UID: 0 PID: 4144 Comm: syz.5.191 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.707536][ T4144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 56.707575][ T4144] Call Trace: [ 56.707583][ T4144] [ 56.707593][ T4144] __dump_stack+0x1d/0x30 [ 56.707636][ T4144] dump_stack_lvl+0xe8/0x140 [ 56.707665][ T4144] dump_stack+0x15/0x1b [ 56.707690][ T4144] should_fail_ex+0x265/0x280 [ 56.707717][ T4144] should_fail+0xb/0x20 [ 56.707775][ T4144] should_fail_usercopy+0x1a/0x20 [ 56.707805][ T4144] _copy_from_user+0x1c/0xb0 [ 56.707842][ T4144] ___sys_sendmsg+0xc1/0x1d0 [ 56.707888][ T4144] __x64_sys_sendmsg+0xd4/0x160 [ 56.707919][ T4144] x64_sys_call+0x191e/0x3000 [ 56.707948][ T4144] do_syscall_64+0xd2/0x200 [ 56.707975][ T4144] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 56.708093][ T4144] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 56.708139][ T4144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.708168][ T4144] RIP: 0033:0x7f420ec1f6c9 [ 56.708266][ T4144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.708292][ T4144] RSP: 002b:00007f420d687038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.708313][ T4144] RAX: ffffffffffffffda RBX: 00007f420ee75fa0 RCX: 00007f420ec1f6c9 [ 56.708326][ T4144] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 56.708338][ T4144] RBP: 00007f420d687090 R08: 0000000000000000 R09: 0000000000000000 [ 56.708350][ T4144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.708392][ T4144] R13: 00007f420ee76038 R14: 00007f420ee75fa0 R15: 00007ffe7b46e558 [ 56.708426][ T4144] [ 56.893066][ T4143] loop1: detected capacity change from 0 to 512 [ 56.900249][ T4143] EXT4-fs: Ignoring removed orlov option [ 56.906317][ T4143] EXT4-fs: Invalid want_extra_isize 9 [ 56.917718][ T4150] netlink: 16 bytes leftover after parsing attributes in process `syz.5.196'. [ 56.927832][ T29] audit: type=1400 audit(1762917868.255:657): avc: denied { create } for pid=4149 comm="syz.5.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 56.949921][ T29] audit: type=1400 audit(1762917868.255:658): avc: denied { ioctl } for pid=4149 comm="syz.5.196" path="socket:[8204]" dev="sockfs" ino=8204 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 56.981552][ T4153] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 57.048538][ T3341] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 345: padding at end of block bitmap is not set [ 57.064416][ T3341] EXT4-fs (loop2): Remounting filesystem read-only [ 57.150106][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.159020][ T4160] loop0: detected capacity change from 0 to 512 [ 57.200979][ T4160] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.201: iget: bad i_size value: 38620345925642 [ 57.222143][ T4160] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.201: couldn't read orphan inode 15 (err -117) [ 57.249074][ T4166] loop2: detected capacity change from 0 to 512 [ 57.263843][ T4166] msdos: Bad value for 'tz' [ 57.266299][ T4160] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.301810][ T4171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.205'. [ 57.322036][ T4171] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 57.333002][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.740481][ T4177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.740504][ T4177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.751152][ T4177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.751173][ T4177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.923802][ T4196] loop5: detected capacity change from 0 to 128 [ 57.932178][ T4196] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 57.974975][ T4198] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 58.045995][ T4191] loop0: detected capacity change from 0 to 32768 [ 58.091758][ T4202] loop3: detected capacity change from 0 to 512 [ 58.169882][ T4202] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.216: iget: bad i_size value: 38620345925642 [ 58.201640][ T4206] delete_channel: no stack [ 58.207255][ T4206] delete_channel: no stack [ 58.220283][ T4202] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.216: couldn't read orphan inode 15 (err -117) [ 58.233513][ T29] audit: type=1326 audit(1762917869.535:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4204 comm="syz.5.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f420ec1f6c9 code=0x7ffc0000 [ 58.259835][ T29] audit: type=1326 audit(1762917869.545:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4204 comm="syz.5.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f420ec1f6c9 code=0x7ffc0000 [ 58.271603][ T4202] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.348209][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.395985][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 58.416164][ T4223] loop5: detected capacity change from 0 to 256 [ 58.873702][ T4240] loop0: detected capacity change from 0 to 1024 [ 58.888835][ T4240] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 58.908282][ T4240] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #11: comm syz.0.223: iget: bogus i_mode (1) [ 58.925347][ T4240] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.223: couldn't read orphan inode 11 (err -117) [ 58.939125][ T4240] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.985534][ T4233] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.169530][ T4214] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 59.226004][ T4249] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 59.283021][ T4252] loop5: detected capacity change from 0 to 512 [ 59.387751][ T4252] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.232: iget: bad i_size value: 38620345925642 [ 59.429041][ T4252] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.232: couldn't read orphan inode 15 (err -117) [ 59.586097][ T4228] syz.0.223 (4228) used greatest stack depth: 7304 bytes left [ 59.604096][ T4252] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.973917][ T4260] loop0: detected capacity change from 0 to 2048 [ 60.059716][ T4260] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.122814][ T3780] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.379593][ T4283] loop3: detected capacity change from 0 to 512 [ 60.391043][ T4285] loop5: detected capacity change from 0 to 128 [ 60.398052][ T4283] EXT4-fs (loop3): invalid first ino: 0 [ 60.406186][ T4285] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 60.459268][ T4286] loop1: detected capacity change from 0 to 1024 [ 60.470956][ T4286] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 60.483284][ T4291] FAULT_INJECTION: forcing a failure. [ 60.483284][ T4291] name failslab, interval 1, probability 0, space 0, times 0 [ 60.496169][ T4291] CPU: 1 UID: 0 PID: 4291 Comm: syz.3.245 Not tainted syzkaller #0 PREEMPT(voluntary) [ 60.496203][ T4291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 60.496218][ T4291] Call Trace: [ 60.496226][ T4291] [ 60.496302][ T4291] __dump_stack+0x1d/0x30 [ 60.496330][ T4291] dump_stack_lvl+0xe8/0x140 [ 60.496389][ T4291] dump_stack+0x15/0x1b [ 60.496407][ T4291] should_fail_ex+0x265/0x280 [ 60.496426][ T4291] should_failslab+0x8c/0xb0 [ 60.496460][ T4291] kmem_cache_alloc_noprof+0x50/0x480 [ 60.496547][ T4291] ? dst_alloc+0xbd/0x100 [ 60.496591][ T4291] dst_alloc+0xbd/0x100 [ 60.496623][ T4291] ip_route_output_key_hash_rcu+0xf29/0x1380 [ 60.496757][ T4291] ip_route_output_flow+0x65/0x110 [ 60.496834][ T4291] udp_sendmsg+0x11b0/0x13c0 [ 60.496870][ T4291] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 60.496910][ T4291] ? avc_has_perm+0xf7/0x180 [ 60.496943][ T4291] ? __pfx_udp_sendmsg+0x10/0x10 [ 60.497027][ T4291] inet_sendmsg+0xac/0xd0 [ 60.497056][ T4291] __sock_sendmsg+0x102/0x180 [ 60.497084][ T4291] ____sys_sendmsg+0x345/0x4e0 [ 60.497122][ T4291] ___sys_sendmsg+0x17b/0x1d0 [ 60.497202][ T4291] __sys_sendmmsg+0x178/0x300 [ 60.497244][ T4291] __x64_sys_sendmmsg+0x57/0x70 [ 60.497271][ T4291] x64_sys_call+0x1c4a/0x3000 [ 60.497302][ T4291] do_syscall_64+0xd2/0x200 [ 60.497396][ T4291] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 60.497485][ T4291] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 60.497578][ T4291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.497606][ T4291] RIP: 0033:0x7f7e7296f6c9 [ 60.497668][ T4291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.497692][ T4291] RSP: 002b:00007f7e713d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 60.497787][ T4291] RAX: ffffffffffffffda RBX: 00007f7e72bc5fa0 RCX: 00007f7e7296f6c9 [ 60.497799][ T4291] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000004 [ 60.497856][ T4291] RBP: 00007f7e713d7090 R08: 0000000000000000 R09: 0000000000000000 [ 60.497869][ T4291] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 60.497880][ T4291] R13: 00007f7e72bc6038 R14: 00007f7e72bc5fa0 R15: 00007ffe0fa384c8 [ 60.497900][ T4291] [ 60.500019][ T4285] FAULT_INJECTION: forcing a failure. [ 60.500019][ T4285] name failslab, interval 1, probability 0, space 0, times 0 [ 60.738342][ T4285] CPU: 0 UID: 0 PID: 4285 Comm: syz.5.243 Not tainted syzkaller #0 PREEMPT(voluntary) [ 60.738416][ T4285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 60.738427][ T4285] Call Trace: [ 60.738434][ T4285] [ 60.738513][ T4285] __dump_stack+0x1d/0x30 [ 60.738534][ T4285] dump_stack_lvl+0xe8/0x140 [ 60.738582][ T4285] dump_stack+0x15/0x1b [ 60.738598][ T4285] should_fail_ex+0x265/0x280 [ 60.738616][ T4285] should_failslab+0x8c/0xb0 [ 60.738644][ T4285] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 60.738703][ T4285] ? __d_alloc+0x3d/0x340 [ 60.738734][ T4285] __d_alloc+0x3d/0x340 [ 60.738836][ T4285] d_alloc+0x2e/0x100 [ 60.738865][ T4285] lookup_one_qstr_excl+0x99/0x250 [ 60.738912][ T4285] filename_create+0x149/0x230 [ 60.738937][ T4285] do_mknodat+0xe7/0x610 [ 60.739042][ T4285] __x64_sys_mknod+0x51/0x60 [ 60.739074][ T4285] x64_sys_call+0x2d56/0x3000 [ 60.739145][ T4285] do_syscall_64+0xd2/0x200 [ 60.739164][ T4285] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 60.739240][ T4285] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 60.739310][ T4285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.739330][ T4285] RIP: 0033:0x7f420ec1f6c9 [ 60.739388][ T4285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.739405][ T4285] RSP: 002b:00007f420d687038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 60.739422][ T4285] RAX: ffffffffffffffda RBX: 00007f420ee75fa0 RCX: 00007f420ec1f6c9 [ 60.739433][ T4285] RDX: 000000000000070a RSI: 0000000000008000 RDI: 00002000000001c0 [ 60.739444][ T4285] RBP: 00007f420d687090 R08: 0000000000000000 R09: 0000000000000000 [ 60.739456][ T4285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.739518][ T4285] R13: 00007f420ee76038 R14: 00007f420ee75fa0 R15: 00007ffe7b46e558 [ 60.739536][ T4285] [ 60.743735][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.987873][ T4297] loop5: detected capacity change from 0 to 512 [ 61.017515][ T4297] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.248: iget: bad i_size value: 38620345925642 [ 61.039279][ T4297] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.248: couldn't read orphan inode 15 (err -117) [ 61.062854][ T4297] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.103602][ T4310] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 61.111877][ T3780] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.156589][ T4313] FAULT_INJECTION: forcing a failure. [ 61.156589][ T4313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.170305][ T4313] CPU: 0 UID: 0 PID: 4313 Comm: syz.1.253 Not tainted syzkaller #0 PREEMPT(voluntary) [ 61.170337][ T4313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 61.170432][ T4313] Call Trace: [ 61.170446][ T4313] [ 61.170486][ T4313] __dump_stack+0x1d/0x30 [ 61.170515][ T4313] dump_stack_lvl+0xe8/0x140 [ 61.170623][ T4313] dump_stack+0x15/0x1b [ 61.170645][ T4313] should_fail_ex+0x265/0x280 [ 61.170671][ T4313] should_fail+0xb/0x20 [ 61.170691][ T4313] should_fail_usercopy+0x1a/0x20 [ 61.170781][ T4313] _copy_from_user+0x1c/0xb0 [ 61.170815][ T4313] __sys_sendto+0x19e/0x330 [ 61.170890][ T4313] __x64_sys_sendto+0x76/0x90 [ 61.170929][ T4313] x64_sys_call+0x2d14/0x3000 [ 61.170952][ T4313] do_syscall_64+0xd2/0x200 [ 61.170973][ T4313] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 61.171040][ T4313] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 61.171082][ T4313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.171108][ T4313] RIP: 0033:0x7f804441f6c9 [ 61.171127][ T4313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.171215][ T4313] RSP: 002b:00007f8042e7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 61.171238][ T4313] RAX: ffffffffffffffda RBX: 00007f8044675fa0 RCX: 00007f804441f6c9 [ 61.171253][ T4313] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 61.171267][ T4313] RBP: 00007f8042e7f090 R08: 0000200000000040 R09: 000000000000001c [ 61.171344][ T4313] R10: 0000000000044004 R11: 0000000000000246 R12: 0000000000000001 [ 61.171359][ T4313] R13: 00007f8044676038 R14: 00007f8044675fa0 R15: 00007ffd60d03978 [ 61.171381][ T4313] [ 61.346410][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 61.346428][ T29] audit: type=1400 audit(1762917872.685:709): avc: denied { mounton } for pid=4314 comm="syz.5.252" path="/26/file0" dev="tmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 61.375257][ T29] audit: type=1400 audit(1762917872.685:710): avc: denied { setopt } for pid=4314 comm="syz.5.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 61.419827][ T29] audit: type=1400 audit(1762917872.745:711): avc: denied { open } for pid=4320 comm="syz.0.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 61.439088][ T29] audit: type=1400 audit(1762917872.745:712): avc: denied { kernel } for pid=4320 comm="syz.0.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 61.458551][ T29] audit: type=1400 audit(1762917872.745:713): avc: denied { tracepoint } for pid=4320 comm="syz.0.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 61.478196][ T29] audit: type=1400 audit(1762917872.745:714): avc: denied { write } for pid=4320 comm="syz.0.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 61.529133][ T29] audit: type=1400 audit(1762917872.865:715): avc: denied { create } for pid=4325 comm="syz.0.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 61.530687][ T4326] FAULT_INJECTION: forcing a failure. [ 61.530687][ T4326] name failslab, interval 1, probability 0, space 0, times 0 [ 61.561417][ T4326] CPU: 0 UID: 0 PID: 4326 Comm: syz.0.256 Not tainted syzkaller #0 PREEMPT(voluntary) [ 61.561451][ T4326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 61.561546][ T4326] Call Trace: [ 61.561555][ T4326] [ 61.561565][ T4326] __dump_stack+0x1d/0x30 [ 61.561594][ T4326] dump_stack_lvl+0xe8/0x140 [ 61.561615][ T4326] dump_stack+0x15/0x1b [ 61.561632][ T4326] should_fail_ex+0x265/0x280 [ 61.561779][ T4326] should_failslab+0x8c/0xb0 [ 61.561814][ T4326] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 61.561928][ T4326] ? __alloc_skb+0x101/0x320 [ 61.561960][ T4326] __alloc_skb+0x101/0x320 [ 61.561988][ T4326] ? ip_generic_getfrag+0x135/0x1b0 [ 61.562095][ T4326] __ip_append_data+0x1935/0x2440 [ 61.562137][ T4326] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 61.562183][ T4326] ip_append_data+0xd6/0x130 [ 61.562256][ T4326] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 61.562341][ T4326] udp_sendmsg+0x36e/0x13c0 [ 61.562393][ T4326] ? mntput+0x4b/0x80 [ 61.562416][ T4326] ? __rcu_read_unlock+0x4f/0x70 [ 61.562500][ T4326] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 61.562532][ T4326] ? avc_has_perm+0xf7/0x180 [ 61.562638][ T4326] ? __pfx_udp_sendmsg+0x10/0x10 [ 61.562666][ T4326] inet_sendmsg+0xac/0xd0 [ 61.562750][ T4326] __sock_sendmsg+0x102/0x180 [ 61.562846][ T4326] __sys_sendto+0x268/0x330 [ 61.562888][ T4326] __x64_sys_sendto+0x76/0x90 [ 61.562972][ T4326] x64_sys_call+0x2d14/0x3000 [ 61.563000][ T4326] do_syscall_64+0xd2/0x200 [ 61.563023][ T4326] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 61.563067][ T4326] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 61.563101][ T4326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.563122][ T4326] RIP: 0033:0x7f9252ccf6c9 [ 61.563141][ T4326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.563165][ T4326] RSP: 002b:00007f925172f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 61.563211][ T4326] RAX: ffffffffffffffda RBX: 00007f9252f25fa0 RCX: 00007f9252ccf6c9 [ 61.563228][ T4326] RDX: 000000000000fdbe RSI: 0000200000000100 RDI: 0000000000000006 [ 61.563242][ T4326] RBP: 00007f925172f090 R08: 0000000000000000 R09: 0000000011000a00 [ 61.563259][ T4326] R10: 0000000004004084 R11: 0000000000000246 R12: 0000000000000002 [ 61.563275][ T4326] R13: 00007f9252f26038 R14: 00007f9252f25fa0 R15: 00007ffdf00ac638 [ 61.563301][ T4326] [ 61.578726][ T29] audit: type=1400 audit(1762917872.865:716): avc: denied { create } for pid=4325 comm="syz.0.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 61.623539][ T4328] __nla_validate_parse: 10 callbacks suppressed [ 61.623569][ T4328] netlink: 8 bytes leftover after parsing attributes in process `syz.5.257'. [ 61.625705][ T29] audit: type=1400 audit(1762917872.965:717): avc: denied { read } for pid=4327 comm="syz.5.257" dev="nsfs" ino=4026533014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.632080][ T4328] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 61.634976][ T29] audit: type=1400 audit(1762917872.965:718): avc: denied { open } for pid=4327 comm="syz.5.257" path="net:[4026533014]" dev="nsfs" ino=4026533014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.955765][ T4331] loop5: detected capacity change from 0 to 1024 [ 61.982771][ T4334] FAULT_INJECTION: forcing a failure. [ 61.982771][ T4334] name failslab, interval 1, probability 0, space 0, times 0 [ 61.995670][ T4334] CPU: 0 UID: 0 PID: 4334 Comm: syz.1.260 Not tainted syzkaller #0 PREEMPT(voluntary) [ 61.995710][ T4334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 61.995726][ T4334] Call Trace: [ 61.995736][ T4334] [ 61.995746][ T4334] __dump_stack+0x1d/0x30 [ 61.995770][ T4334] dump_stack_lvl+0xe8/0x140 [ 61.995792][ T4334] dump_stack+0x15/0x1b [ 61.995809][ T4334] should_fail_ex+0x265/0x280 [ 61.995848][ T4334] ? alloc_lookup_fw_priv+0x147/0x350 [ 61.995880][ T4334] should_failslab+0x8c/0xb0 [ 61.995934][ T4334] __kmalloc_cache_noprof+0x4c/0x4a0 [ 61.996023][ T4334] alloc_lookup_fw_priv+0x147/0x350 [ 61.996055][ T4334] _request_firmware+0x28b/0xbb0 [ 61.996122][ T4334] ? avc_has_perm_noaudit+0x1b1/0x200 [ 61.996151][ T4334] ? cred_has_capability+0x210/0x280 [ 61.996188][ T4334] ? __rcu_read_unlock+0x4f/0x70 [ 61.996225][ T4334] request_firmware+0x36/0x50 [ 61.996325][ T4334] devlink_compat_flash_update+0xb2/0x1b0 [ 61.996398][ T4334] dev_ethtool+0x14ac/0x1670 [ 61.996420][ T4334] ? full_name_hash+0x92/0xe0 [ 61.996463][ T4334] dev_ioctl+0x2e0/0x960 [ 61.996498][ T4334] sock_do_ioctl+0x197/0x220 [ 61.996600][ T4334] sock_ioctl+0x41b/0x610 [ 61.996625][ T4334] ? __pfx_sock_ioctl+0x10/0x10 [ 61.996647][ T4334] __se_sys_ioctl+0xce/0x140 [ 61.996728][ T4334] __x64_sys_ioctl+0x43/0x50 [ 61.996749][ T4334] x64_sys_call+0x1816/0x3000 [ 61.996773][ T4334] do_syscall_64+0xd2/0x200 [ 61.996862][ T4334] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 61.996891][ T4334] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 61.996930][ T4334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.996952][ T4334] RIP: 0033:0x7f804441f6c9 [ 61.996967][ T4334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.997016][ T4334] RSP: 002b:00007f8042e7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 61.997041][ T4334] RAX: ffffffffffffffda RBX: 00007f8044675fa0 RCX: 00007f804441f6c9 [ 61.997056][ T4334] RDX: 0000200000000340 RSI: 0000000000008946 RDI: 0000000000000005 [ 61.997068][ T4334] RBP: 00007f8042e7f090 R08: 0000000000000000 R09: 0000000000000000 [ 61.997080][ T4334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.997161][ T4334] R13: 00007f8044676038 R14: 00007f8044675fa0 R15: 00007ffd60d03978 [ 61.997187][ T4334] [ 62.241516][ T4331] EXT4-fs: Ignoring removed orlov option [ 62.260139][ T4331] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.295298][ T4342] loop3: detected capacity change from 0 to 512 [ 62.304613][ T4339] netlink: 12 bytes leftover after parsing attributes in process `syz.0.261'. [ 62.330408][ T4342] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.263: iget: bad i_size value: 38620345925642 [ 62.362969][ T4342] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.263: couldn't read orphan inode 15 (err -117) [ 62.413677][ T4351] netlink: 32 bytes leftover after parsing attributes in process `syz.2.265'. [ 62.445675][ T4342] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.597948][ T3341] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm kworker/u8:6: bg 0: block 5: invalid block bitmap [ 62.617379][ T3341] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1744 with error 28 [ 62.630509][ T3341] EXT4-fs (loop3): This should not happen!! Data will be lost [ 62.630509][ T3341] [ 62.640489][ T3341] EXT4-fs (loop3): Total free blocks count 0 [ 62.646809][ T3341] EXT4-fs (loop3): Free/Dirty block details [ 62.652903][ T3341] EXT4-fs (loop3): free_blocks=0 [ 62.657980][ T3341] EXT4-fs (loop3): dirty_blocks=1748 [ 62.663332][ T3341] EXT4-fs (loop3): Block reservation details [ 62.669498][ T3341] EXT4-fs (loop3): i_reserved_data_blocks=1748 [ 62.727718][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.753177][ T3780] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.804064][ T4374] FAULT_INJECTION: forcing a failure. [ 62.804064][ T4374] name failslab, interval 1, probability 0, space 0, times 0 [ 62.816864][ T4374] CPU: 0 UID: 0 PID: 4374 Comm: syz.2.273 Not tainted syzkaller #0 PREEMPT(voluntary) [ 62.816898][ T4374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 62.816914][ T4374] Call Trace: [ 62.816923][ T4374] [ 62.816932][ T4374] __dump_stack+0x1d/0x30 [ 62.816990][ T4374] dump_stack_lvl+0xe8/0x140 [ 62.817012][ T4374] dump_stack+0x15/0x1b [ 62.817102][ T4374] should_fail_ex+0x265/0x280 [ 62.817163][ T4374] should_failslab+0x8c/0xb0 [ 62.817195][ T4374] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 62.817234][ T4374] ? __alloc_skb+0x101/0x320 [ 62.817267][ T4374] __alloc_skb+0x101/0x320 [ 62.817301][ T4374] netlink_alloc_large_skb+0xbf/0xf0 [ 62.817335][ T4374] netlink_sendmsg+0x3cf/0x6b0 [ 62.817418][ T4374] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.817439][ T4374] __sock_sendmsg+0x145/0x180 [ 62.817466][ T4374] ____sys_sendmsg+0x31e/0x4e0 [ 62.817524][ T4374] ___sys_sendmsg+0x17b/0x1d0 [ 62.817625][ T4374] __x64_sys_sendmsg+0xd4/0x160 [ 62.817680][ T4374] x64_sys_call+0x191e/0x3000 [ 62.817705][ T4374] do_syscall_64+0xd2/0x200 [ 62.817727][ T4374] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 62.817860][ T4374] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 62.817896][ T4374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.817919][ T4374] RIP: 0033:0x7f843212f6c9 [ 62.818008][ T4374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.818028][ T4374] RSP: 002b:00007f8430b97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.818048][ T4374] RAX: ffffffffffffffda RBX: 00007f8432385fa0 RCX: 00007f843212f6c9 [ 62.818061][ T4374] RDX: 0000000000040000 RSI: 0000200000000100 RDI: 0000000000000005 [ 62.818074][ T4374] RBP: 00007f8430b97090 R08: 0000000000000000 R09: 0000000000000000 [ 62.818086][ T4374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.818169][ T4374] R13: 00007f8432386038 R14: 00007f8432385fa0 R15: 00007ffd348aab08 [ 62.818190][ T4374] [ 63.021168][ T4379] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 63.121607][ T4388] FAULT_INJECTION: forcing a failure. [ 63.121607][ T4388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.134750][ T4388] CPU: 1 UID: 0 PID: 4388 Comm: syz.2.278 Not tainted syzkaller #0 PREEMPT(voluntary) [ 63.134779][ T4388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 63.134857][ T4388] Call Trace: [ 63.134864][ T4388] [ 63.134872][ T4388] __dump_stack+0x1d/0x30 [ 63.134896][ T4388] dump_stack_lvl+0xe8/0x140 [ 63.134917][ T4388] dump_stack+0x15/0x1b [ 63.134936][ T4388] should_fail_ex+0x265/0x280 [ 63.134968][ T4388] should_fail+0xb/0x20 [ 63.134986][ T4388] should_fail_usercopy+0x1a/0x20 [ 63.135013][ T4388] _copy_from_iter+0xd2/0xe80 [ 63.135038][ T4388] ? alloc_pages_mpol+0x217/0x260 [ 63.135126][ T4388] copy_page_from_iter+0x178/0x2a0 [ 63.135254][ T4388] tun_get_user+0x679/0x26e0 [ 63.135301][ T4388] ? ref_tracker_alloc+0x1f2/0x2f0 [ 63.135375][ T4388] tun_chr_write_iter+0x15e/0x210 [ 63.135410][ T4388] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 63.135439][ T4388] vfs_write+0x52a/0x960 [ 63.135491][ T4388] ksys_write+0xda/0x1a0 [ 63.135519][ T4388] __x64_sys_write+0x40/0x50 [ 63.135546][ T4388] x64_sys_call+0x2802/0x3000 [ 63.135603][ T4388] do_syscall_64+0xd2/0x200 [ 63.135704][ T4388] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 63.135732][ T4388] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 63.135772][ T4388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.135858][ T4388] RIP: 0033:0x7f843212e17f [ 63.135877][ T4388] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 63.135983][ T4388] RSP: 002b:00007f8430b97000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 63.136062][ T4388] RAX: ffffffffffffffda RBX: 00007f8432385fa0 RCX: 00007f843212e17f [ 63.136080][ T4388] RDX: 0000000000000036 RSI: 0000200000000000 RDI: 00000000000000c8 [ 63.136096][ T4388] RBP: 00007f8430b97090 R08: 0000000000000000 R09: 0000000000000000 [ 63.136112][ T4388] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 63.136128][ T4388] R13: 00007f8432386038 R14: 00007f8432385fa0 R15: 00007ffd348aab08 [ 63.136158][ T4388] [ 63.396606][ T4398] loop2: detected capacity change from 0 to 512 [ 63.427917][ T4398] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.281: iget: bad i_size value: 38620345925642 [ 63.452426][ T4398] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.281: couldn't read orphan inode 15 (err -117) [ 63.489890][ T4398] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.568520][ T4409] FAULT_INJECTION: forcing a failure. [ 63.568520][ T4409] name failslab, interval 1, probability 0, space 0, times 0 [ 63.583044][ T4409] CPU: 1 UID: 0 PID: 4409 Comm: syz.3.285 Not tainted syzkaller #0 PREEMPT(voluntary) [ 63.583079][ T4409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 63.583164][ T4409] Call Trace: [ 63.583172][ T4409] [ 63.583180][ T4409] __dump_stack+0x1d/0x30 [ 63.583204][ T4409] dump_stack_lvl+0xe8/0x140 [ 63.583245][ T4409] dump_stack+0x15/0x1b [ 63.583264][ T4409] should_fail_ex+0x265/0x280 [ 63.583285][ T4409] should_failslab+0x8c/0xb0 [ 63.583398][ T4409] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 63.583432][ T4409] ? __alloc_skb+0x101/0x320 [ 63.583475][ T4409] __alloc_skb+0x101/0x320 [ 63.583569][ T4409] ? audit_log_start+0x342/0x720 [ 63.583599][ T4409] audit_log_start+0x3a0/0x720 [ 63.583621][ T4409] ? kstrtouint+0x76/0xc0 [ 63.583662][ T4409] audit_seccomp+0x48/0x100 [ 63.583746][ T4409] ? __seccomp_filter+0x82d/0x1250 [ 63.583800][ T4409] __seccomp_filter+0x83e/0x1250 [ 63.583839][ T4409] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 63.583947][ T4409] ? vfs_write+0x7e8/0x960 [ 63.583973][ T4409] ? __rcu_read_unlock+0x4f/0x70 [ 63.584006][ T4409] ? __fget_files+0x184/0x1c0 [ 63.584064][ T4409] __secure_computing+0x82/0x150 [ 63.584093][ T4409] syscall_trace_enter+0xcf/0x1e0 [ 63.584129][ T4409] do_syscall_64+0xac/0x200 [ 63.584204][ T4409] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 63.584306][ T4409] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 63.584357][ T4409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.584383][ T4409] RIP: 0033:0x7f7e7296f6c9 [ 63.584398][ T4409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.584417][ T4409] RSP: 002b:00007f7e713d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000000c [ 63.584468][ T4409] RAX: ffffffffffffffda RBX: 00007f7e72bc5fa0 RCX: 00007f7e7296f6c9 [ 63.584485][ T4409] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 63.584520][ T4409] RBP: 00007f7e713d7090 R08: 0000000000000000 R09: 0000000000000000 [ 63.584538][ T4409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.584554][ T4409] R13: 00007f7e72bc6038 R14: 00007f7e72bc5fa0 R15: 00007ffe0fa384c8 [ 63.584639][ T4409] [ 63.886705][ T4414] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 63.895809][ T37] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm kworker/u8:2: bg 0: block 5: invalid block bitmap [ 63.910109][ T37] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 200 with error 28 [ 63.922550][ T37] EXT4-fs (loop2): This should not happen!! Data will be lost [ 63.922550][ T37] [ 63.932252][ T37] EXT4-fs (loop2): Total free blocks count 0 [ 63.938541][ T37] EXT4-fs (loop2): Free/Dirty block details [ 63.944516][ T37] EXT4-fs (loop2): free_blocks=0 [ 63.949667][ T37] EXT4-fs (loop2): dirty_blocks=204 [ 63.955209][ T37] EXT4-fs (loop2): Block reservation details [ 63.961249][ T37] EXT4-fs (loop2): i_reserved_data_blocks=204 [ 63.995254][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.012333][ T4417] loop0: detected capacity change from 0 to 164 [ 64.053857][ T4424] TCP: tcp_parse_options: Illegal window scaling value 163 > 14 received [ 64.071798][ T4417] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 64.137217][ T4429] loop5: detected capacity change from 0 to 1024 [ 64.174741][ T4429] EXT4-fs: Ignoring removed orlov option [ 64.206029][ T4429] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 64.311837][ T4447] loop0: detected capacity change from 0 to 512 [ 64.342839][ T4450] FAULT_INJECTION: forcing a failure. [ 64.342839][ T4450] name failslab, interval 1, probability 0, space 0, times 0 [ 64.355602][ T4450] CPU: 0 UID: 0 PID: 4450 Comm: syz.2.299 Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.355710][ T4450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 64.355726][ T4450] Call Trace: [ 64.355735][ T4450] [ 64.355745][ T4450] __dump_stack+0x1d/0x30 [ 64.355774][ T4450] dump_stack_lvl+0xe8/0x140 [ 64.355796][ T4450] dump_stack+0x15/0x1b [ 64.355889][ T4450] should_fail_ex+0x265/0x280 [ 64.355914][ T4450] should_failslab+0x8c/0xb0 [ 64.355950][ T4450] __kvmalloc_node_noprof+0x12e/0x670 [ 64.356037][ T4450] ? vmemdup_user+0x2b/0xd0 [ 64.356077][ T4450] vmemdup_user+0x2b/0xd0 [ 64.356108][ T4450] map_get_next_key+0x140/0x330 [ 64.356170][ T4450] ? __sys_bpf+0x599/0x7c0 [ 64.356196][ T4450] __sys_bpf+0x5a3/0x7c0 [ 64.356231][ T4450] __x64_sys_bpf+0x41/0x50 [ 64.356342][ T4450] x64_sys_call+0x2aee/0x3000 [ 64.356381][ T4450] do_syscall_64+0xd2/0x200 [ 64.356404][ T4450] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 64.356451][ T4450] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 64.356493][ T4450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.356523][ T4450] RIP: 0033:0x7f843212f6c9 [ 64.356543][ T4450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.356596][ T4450] RSP: 002b:00007f8430b97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 64.356620][ T4450] RAX: ffffffffffffffda RBX: 00007f8432385fa0 RCX: 00007f843212f6c9 [ 64.356636][ T4450] RDX: 0000000000000020 RSI: 0000200000000000 RDI: 0000000000000004 [ 64.356715][ T4450] RBP: 00007f8430b97090 R08: 0000000000000000 R09: 0000000000000000 [ 64.356728][ T4450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.356740][ T4450] R13: 00007f8432386038 R14: 00007f8432385fa0 R15: 00007ffd348aab08 [ 64.356803][ T4450] [ 64.604406][ T4447] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.298: iget: bad i_size value: 38620345925642 [ 64.618692][ T4453] FAULT_INJECTION: forcing a failure. [ 64.618692][ T4453] name failslab, interval 1, probability 0, space 0, times 0 [ 64.626150][ T4429] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.631387][ T4453] CPU: 1 UID: 0 PID: 4453 Comm: syz.2.300 Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.631414][ T4453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 64.631433][ T4453] Call Trace: [ 64.631440][ T4453] [ 64.631517][ T4453] __dump_stack+0x1d/0x30 [ 64.631550][ T4453] dump_stack_lvl+0xe8/0x140 [ 64.631582][ T4453] dump_stack+0x15/0x1b [ 64.631607][ T4453] should_fail_ex+0x265/0x280 [ 64.631653][ T4453] should_failslab+0x8c/0xb0 [ 64.631695][ T4453] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 64.631803][ T4453] ? __alloc_skb+0x101/0x320 [ 64.631847][ T4453] __alloc_skb+0x101/0x320 [ 64.631891][ T4453] netlink_alloc_large_skb+0xbf/0xf0 [ 64.632025][ T4453] netlink_sendmsg+0x3cf/0x6b0 [ 64.632056][ T4453] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.632085][ T4453] __sock_sendmsg+0x145/0x180 [ 64.632187][ T4453] ____sys_sendmsg+0x31e/0x4e0 [ 64.632290][ T4453] ___sys_sendmsg+0x17b/0x1d0 [ 64.632338][ T4453] __x64_sys_sendmsg+0xd4/0x160 [ 64.632372][ T4453] x64_sys_call+0x191e/0x3000 [ 64.632424][ T4453] do_syscall_64+0xd2/0x200 [ 64.632454][ T4453] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 64.632529][ T4453] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 64.632579][ T4453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.632610][ T4453] RIP: 0033:0x7f843212f6c9 [ 64.632633][ T4453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.632657][ T4453] RSP: 002b:00007f8430b97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.632685][ T4453] RAX: ffffffffffffffda RBX: 00007f8432385fa0 RCX: 00007f843212f6c9 [ 64.632767][ T4453] RDX: 0000000000000000 RSI: 00002000000037c0 RDI: 0000000000000009 [ 64.632784][ T4453] RBP: 00007f8430b97090 R08: 0000000000000000 R09: 0000000000000000 [ 64.632802][ T4453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.632819][ T4453] R13: 00007f8432386038 R14: 00007f8432385fa0 R15: 00007ffd348aab08 [ 64.632893][ T4453] [ 64.634652][ T4447] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.298: couldn't read orphan inode 15 (err -117) [ 64.698519][ T4457] pimreg: entered allmulticast mode [ 64.740766][ T4458] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20002 [ 64.874661][ T4447] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.937666][ T4465] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 64.980832][ T3341] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm kworker/u8:6: bg 0: block 5: invalid block bitmap [ 64.999475][ T3341] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1472 with error 28 [ 65.012041][ T3341] EXT4-fs (loop0): This should not happen!! Data will be lost [ 65.012041][ T3341] [ 65.021726][ T3341] EXT4-fs (loop0): Total free blocks count 0 [ 65.027749][ T3341] EXT4-fs (loop0): Free/Dirty block details [ 65.033753][ T3341] EXT4-fs (loop0): free_blocks=0 [ 65.038710][ T3341] EXT4-fs (loop0): dirty_blocks=1476 [ 65.044103][ T3341] EXT4-fs (loop0): Block reservation details [ 65.050191][ T3341] EXT4-fs (loop0): i_reserved_data_blocks=1476 [ 65.371260][ T4489] loop5: detected capacity change from 0 to 512 [ 65.378083][ T4489] EXT4-fs: Ignoring removed nobh option [ 65.437653][ T4489] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 65.474417][ T4496] loop1: detected capacity change from 0 to 512 [ 65.497417][ T4498] loop2: detected capacity change from 0 to 128 [ 65.512394][ T4496] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.315: iget: bad i_size value: 38620345925642 [ 65.544200][ T4498] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.561207][ T4502] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 65.571522][ T4489] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.312: iget: bad i_size value: 38620345925642 [ 65.585571][ T4496] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.315: couldn't read orphan inode 15 (err -117) [ 65.597877][ T4489] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.312: couldn't read orphan inode 15 (err -117) [ 65.685736][ T4496] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.315: bg 0: block 5: invalid block bitmap [ 65.707150][ T4508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.318'. [ 65.731374][ T4496] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1232 with error 28 [ 65.743944][ T4496] EXT4-fs (loop1): This should not happen!! Data will be lost [ 65.743944][ T4496] [ 65.753767][ T4496] EXT4-fs (loop1): Total free blocks count 0 [ 65.759791][ T4496] EXT4-fs (loop1): Free/Dirty block details [ 65.765787][ T4496] EXT4-fs (loop1): free_blocks=0 [ 65.770801][ T4496] EXT4-fs (loop1): dirty_blocks=1236 [ 65.776112][ T4496] EXT4-fs (loop1): Block reservation details [ 65.782172][ T4496] EXT4-fs (loop1): i_reserved_data_blocks=1236 [ 66.025608][ T4532] FAULT_INJECTION: forcing a failure. [ 66.025608][ T4532] name failslab, interval 1, probability 0, space 0, times 0 [ 66.038324][ T4532] CPU: 0 UID: 0 PID: 4532 Comm: syz.1.328 Not tainted syzkaller #0 PREEMPT(voluntary) [ 66.038360][ T4532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 66.038380][ T4532] Call Trace: [ 66.038385][ T4532] [ 66.038460][ T4532] __dump_stack+0x1d/0x30 [ 66.038488][ T4532] dump_stack_lvl+0xe8/0x140 [ 66.038509][ T4532] dump_stack+0x15/0x1b [ 66.038544][ T4532] should_fail_ex+0x265/0x280 [ 66.038681][ T4532] should_failslab+0x8c/0xb0 [ 66.038711][ T4532] __kmalloc_noprof+0xa5/0x570 [ 66.038754][ T4532] ? load_msg+0xab/0x2f0 [ 66.038849][ T4532] load_msg+0xab/0x2f0 [ 66.038886][ T4532] do_msgsnd+0xdc/0xb00 [ 66.038919][ T4532] ? bpf_trace_run2+0x124/0x1c0 [ 66.038958][ T4532] __x64_sys_msgsnd+0xa8/0xc0 [ 66.039021][ T4532] x64_sys_call+0x17c1/0x3000 [ 66.039105][ T4532] do_syscall_64+0xd2/0x200 [ 66.039128][ T4532] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 66.039208][ T4532] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 66.039244][ T4532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.039315][ T4532] RIP: 0033:0x7f804441f6c9 [ 66.039331][ T4532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.039350][ T4532] RSP: 002b:00007f8042e7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000045 [ 66.039461][ T4532] RAX: ffffffffffffffda RBX: 00007f8044675fa0 RCX: 00007f804441f6c9 [ 66.039474][ T4532] RDX: 0000000000002000 RSI: 0000200000000480 RDI: 0000000000000000 [ 66.039487][ T4532] RBP: 00007f8042e7f090 R08: 0000000000000000 R09: 0000000000000000 [ 66.039499][ T4532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.039512][ T4532] R13: 00007f8044676038 R14: 00007f8044675fa0 R15: 00007ffd60d03978 [ 66.039533][ T4532] [ 66.236068][ T4523] FAULT_INJECTION: forcing a failure. [ 66.236068][ T4523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.250048][ T4523] CPU: 0 UID: 0 PID: 4523 Comm: syz.2.323 Not tainted syzkaller #0 PREEMPT(voluntary) [ 66.250084][ T4523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 66.250127][ T4523] Call Trace: [ 66.250134][ T4523] [ 66.250144][ T4523] __dump_stack+0x1d/0x30 [ 66.250170][ T4523] dump_stack_lvl+0xe8/0x140 [ 66.250384][ T4523] dump_stack+0x15/0x1b [ 66.250410][ T4523] should_fail_ex+0x265/0x280 [ 66.250443][ T4523] should_fail+0xb/0x20 [ 66.250464][ T4523] should_fail_usercopy+0x1a/0x20 [ 66.250493][ T4523] _copy_to_user+0x20/0xa0 [ 66.250595][ T4523] simple_read_from_buffer+0xb5/0x130 [ 66.250631][ T4523] proc_fail_nth_read+0x10e/0x150 [ 66.250677][ T4523] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 66.250752][ T4523] vfs_read+0x1a8/0x770 [ 66.250785][ T4523] ? __rcu_read_unlock+0x4f/0x70 [ 66.250844][ T4523] ? __fget_files+0x184/0x1c0 [ 66.250885][ T4523] ksys_read+0xda/0x1a0 [ 66.250921][ T4523] __x64_sys_read+0x40/0x50 [ 66.251016][ T4523] x64_sys_call+0x27c0/0x3000 [ 66.251046][ T4523] do_syscall_64+0xd2/0x200 [ 66.251071][ T4523] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 66.251277][ T4523] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 66.251348][ T4523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.251378][ T4523] RIP: 0033:0x7f843212e0dc [ 66.251454][ T4523] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 66.251479][ T4523] RSP: 002b:00007f8430b97030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 66.251505][ T4523] RAX: ffffffffffffffda RBX: 00007f8432385fa0 RCX: 00007f843212e0dc [ 66.251547][ T4523] RDX: 000000000000000f RSI: 00007f8430b970a0 RDI: 0000000000000006 [ 66.251560][ T4523] RBP: 00007f8430b97090 R08: 0000000000000000 R09: 0000000000000000 [ 66.251578][ T4523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.251591][ T4523] R13: 00007f8432386038 R14: 00007f8432385fa0 R15: 00007ffd348aab08 [ 66.251615][ T4523] [ 66.514076][ T4541] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 66.525913][ T4543] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.562448][ T29] kauditd_printk_skb: 304 callbacks suppressed [ 66.562463][ T29] audit: type=1400 audit(1762917886.903:1021): avc: denied { ioctl } for pid=4542 comm="syz.0.331" path="socket:[7868]" dev="sockfs" ino=7868 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.618800][ T4548] loop2: detected capacity change from 0 to 512 [ 66.649611][ T29] audit: type=1400 audit(1762917886.953:1022): avc: denied { accept } for pid=4542 comm="syz.0.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.670482][ T29] audit: type=1326 audit(1762917886.953:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4542 comm="syz.0.331" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9252ccf6c9 code=0x0 [ 66.694505][ T29] audit: type=1326 audit(1762917886.983:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4544 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f420ec1f6c9 code=0x7ffc0000 [ 66.718415][ T29] audit: type=1326 audit(1762917886.983:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4544 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f420ec1f6c9 code=0x7ffc0000 [ 66.726490][ T4548] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.332: iget: bad i_size value: 38620345925642 [ 66.742151][ T29] audit: type=1326 audit(1762917886.983:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4544 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f420ec1f6c9 code=0x7ffc0000 [ 66.778424][ T29] audit: type=1326 audit(1762917886.983:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4544 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f420ec1f6c9 code=0x7ffc0000 [ 66.799208][ T4548] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.332: couldn't read orphan inode 15 (err -117) [ 66.802388][ T29] audit: type=1326 audit(1762917886.983:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4544 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f420ec1f6c9 code=0x7ffc0000 [ 66.837864][ T29] audit: type=1326 audit(1762917886.983:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4544 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f420ec1f6c9 code=0x7ffc0000 [ 66.863003][ T29] audit: type=1400 audit(1762917887.063:1030): avc: denied { append } for pid=4542 comm="syz.0.331" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.946634][ T4561] FAULT_INJECTION: forcing a failure. [ 66.946634][ T4561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.959885][ T4561] CPU: 0 UID: 0 PID: 4561 Comm: syz.1.338 Not tainted syzkaller #0 PREEMPT(voluntary) [ 66.959912][ T4561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 66.959947][ T4561] Call Trace: [ 66.959955][ T4561] [ 66.959964][ T4561] __dump_stack+0x1d/0x30 [ 66.960042][ T4561] dump_stack_lvl+0xe8/0x140 [ 66.960069][ T4561] dump_stack+0x15/0x1b [ 66.960093][ T4561] should_fail_ex+0x265/0x280 [ 66.960153][ T4561] should_fail+0xb/0x20 [ 66.960172][ T4561] should_fail_usercopy+0x1a/0x20 [ 66.960199][ T4561] _copy_from_user+0x1c/0xb0 [ 66.960233][ T4561] ___sys_sendmsg+0xc1/0x1d0 [ 66.960303][ T4561] __x64_sys_sendmsg+0xd4/0x160 [ 66.960330][ T4561] x64_sys_call+0x191e/0x3000 [ 66.960359][ T4561] do_syscall_64+0xd2/0x200 [ 66.960386][ T4561] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 66.960446][ T4561] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 66.960490][ T4561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.960519][ T4561] RIP: 0033:0x7f804441f6c9 [ 66.960540][ T4561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.960564][ T4561] RSP: 002b:00007f8042e7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.960614][ T4561] RAX: ffffffffffffffda RBX: 00007f8044675fa0 RCX: 00007f804441f6c9 [ 66.960627][ T4561] RDX: 0000000004000080 RSI: 0000200000001540 RDI: 0000000000000006 [ 66.960639][ T4561] RBP: 00007f8042e7f090 R08: 0000000000000000 R09: 0000000000000000 [ 66.960651][ T4561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.960668][ T4561] R13: 00007f8044676038 R14: 00007f8044675fa0 R15: 00007ffd60d03978 [ 66.960694][ T4561] [ 66.974168][ T4548] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.332: bg 0: block 5: invalid block bitmap [ 67.164939][ T4548] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 67.177823][ T4548] EXT4-fs (loop2): This should not happen!! Data will be lost [ 67.177823][ T4548] [ 67.187715][ T4548] EXT4-fs (loop2): Total free blocks count 0 [ 67.193816][ T4548] EXT4-fs (loop2): Free/Dirty block details [ 67.199738][ T4548] EXT4-fs (loop2): free_blocks=0 [ 67.199890][ T4566] loop1: detected capacity change from 0 to 8192 [ 67.204758][ T4548] EXT4-fs (loop2): dirty_blocks=2204 [ 67.204776][ T4548] EXT4-fs (loop2): Block reservation details [ 67.204790][ T4548] EXT4-fs (loop2): i_reserved_data_blocks=2204 [ 67.216818][ T4548] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 148 with error 28 [ 67.241619][ T4548] EXT4-fs (loop2): This should not happen!! Data will be lost [ 67.241619][ T4548] [ 67.336890][ T4569] netlink: 64 bytes leftover after parsing attributes in process `syz.3.340'. [ 67.461657][ T4578] loop5: detected capacity change from 0 to 1764 [ 67.481388][ T4578] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 67.516231][ T4580] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 67.521651][ T4577] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 67.777889][ T4595] 9pnet_fd: Insufficient options for proto=fd [ 67.812443][ T4600] loop0: detected capacity change from 0 to 512 [ 67.846210][ T4600] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.352: iget: bad i_size value: 38620345925642 [ 67.873075][ T4600] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.352: couldn't read orphan inode 15 (err -117) [ 68.017085][ T4600] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.352: bg 0: block 5: invalid block bitmap [ 68.054609][ T4600] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 588 with error 28 [ 68.067244][ T4600] EXT4-fs (loop0): This should not happen!! Data will be lost [ 68.067244][ T4600] [ 68.077648][ T4600] EXT4-fs (loop0): Total free blocks count 0 [ 68.085677][ T4600] EXT4-fs (loop0): Free/Dirty block details [ 68.094622][ T4600] EXT4-fs (loop0): free_blocks=0 [ 68.100053][ T4600] EXT4-fs (loop0): dirty_blocks=592 [ 68.106306][ T4600] EXT4-fs (loop0): Block reservation details [ 68.112782][ T4600] EXT4-fs (loop0): i_reserved_data_blocks=592 [ 68.125913][ T4618] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.156876][ T4620] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 68.179275][ T4618] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.242993][ T4618] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.286335][ T4629] loop5: detected capacity change from 0 to 164 [ 68.308642][ T4633] FAULT_INJECTION: forcing a failure. [ 68.308642][ T4633] name failslab, interval 1, probability 0, space 0, times 0 [ 68.321525][ T4633] CPU: 1 UID: 0 PID: 4633 Comm: syz.3.360 Not tainted syzkaller #0 PREEMPT(voluntary) [ 68.321656][ T4633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 68.321671][ T4633] Call Trace: [ 68.321678][ T4633] [ 68.321686][ T4633] __dump_stack+0x1d/0x30 [ 68.321730][ T4633] dump_stack_lvl+0xe8/0x140 [ 68.321758][ T4633] dump_stack+0x15/0x1b [ 68.321781][ T4633] should_fail_ex+0x265/0x280 [ 68.321808][ T4633] should_failslab+0x8c/0xb0 [ 68.321890][ T4633] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 68.321921][ T4633] ? __alloc_skb+0x101/0x320 [ 68.321962][ T4633] __alloc_skb+0x101/0x320 [ 68.322037][ T4633] ? ip_generic_getfrag+0x135/0x1b0 [ 68.322168][ T4633] __ip_append_data+0x1935/0x2440 [ 68.322213][ T4633] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 68.322337][ T4633] ip_append_data+0xd6/0x130 [ 68.322373][ T4633] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 68.322416][ T4633] udp_sendmsg+0x36e/0x13c0 [ 68.322445][ T4633] ? mntput+0x4b/0x80 [ 68.322463][ T4633] ? __rcu_read_unlock+0x4f/0x70 [ 68.322489][ T4633] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 68.322551][ T4633] ? avc_has_perm+0xf7/0x180 [ 68.322586][ T4633] ? __pfx_udp_sendmsg+0x10/0x10 [ 68.322671][ T4633] inet_sendmsg+0xac/0xd0 [ 68.322695][ T4633] __sock_sendmsg+0x102/0x180 [ 68.322767][ T4633] __sys_sendto+0x268/0x330 [ 68.322859][ T4633] __x64_sys_sendto+0x76/0x90 [ 68.322893][ T4633] x64_sys_call+0x2d14/0x3000 [ 68.322940][ T4633] do_syscall_64+0xd2/0x200 [ 68.322967][ T4633] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 68.323064][ T4633] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 68.323154][ T4633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.323183][ T4633] RIP: 0033:0x7f7e7296f6c9 [ 68.323204][ T4633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.323228][ T4633] RSP: 002b:00007f7e713d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 68.323258][ T4633] RAX: ffffffffffffffda RBX: 00007f7e72bc5fa0 RCX: 00007f7e7296f6c9 [ 68.323275][ T4633] RDX: 000000000000fdbe RSI: 0000200000000100 RDI: 0000000000000005 [ 68.323293][ T4633] RBP: 00007f7e713d7090 R08: 0000000000000000 R09: 0000000011000a00 [ 68.323309][ T4633] R10: 0000000004004084 R11: 0000000000000246 R12: 0000000000000002 [ 68.323326][ T4633] R13: 00007f7e72bc6038 R14: 00007f7e72bc5fa0 R15: 00007ffe0fa384c8 [ 68.323351][ T4633] [ 68.612060][ T4618] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.696502][ T4652] loop1: detected capacity change from 0 to 512 [ 68.704271][ T4653] mmap: syz.0.364 (4653) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 68.736410][ T4656] loop5: detected capacity change from 0 to 128 [ 68.744376][ T4656] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 68.757393][ T4652] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 68.781163][ T3448] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.804410][ T3448] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.843944][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.860401][ T4652] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 68.874792][ T4652] EXT4-fs (loop1): 1 truncate cleaned up [ 68.879475][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.967536][ T4667] SELinux: policydb magic number 0x280 does not match expected magic number 0xf97cff8c [ 68.978899][ T4667] SELinux: failed to load policy [ 69.015986][ T4670] loop2: detected capacity change from 0 to 512 [ 69.038228][ T4670] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.372: iget: bad i_size value: 38620345925642 [ 69.067293][ T4670] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.372: couldn't read orphan inode 15 (err -117) [ 69.158679][ T4670] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.372: bg 0: block 5: invalid block bitmap [ 69.172297][ T12] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 69.172944][ T4670] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 69.194539][ T4670] EXT4-fs (loop2): This should not happen!! Data will be lost [ 69.194539][ T4670] [ 69.204439][ T4670] EXT4-fs (loop2): Total free blocks count 0 [ 69.210493][ T4670] EXT4-fs (loop2): Free/Dirty block details [ 69.216471][ T4670] EXT4-fs (loop2): free_blocks=0 [ 69.221475][ T4670] EXT4-fs (loop2): dirty_blocks=2452 [ 69.226776][ T4670] EXT4-fs (loop2): Block reservation details [ 69.232994][ T4670] EXT4-fs (loop2): i_reserved_data_blocks=2452 [ 69.253267][ T4670] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 396 with error 28 [ 69.266119][ T4670] EXT4-fs (loop2): This should not happen!! Data will be lost [ 69.266119][ T4670] [ 69.301929][ T4681] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 69.362531][ T4680] FAULT_INJECTION: forcing a failure. [ 69.362531][ T4680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.375859][ T4680] CPU: 1 UID: 0 PID: 4680 Comm: syz.3.376 Not tainted syzkaller #0 PREEMPT(voluntary) [ 69.375920][ T4680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 69.375934][ T4680] Call Trace: [ 69.375940][ T4680] [ 69.375947][ T4680] __dump_stack+0x1d/0x30 [ 69.375981][ T4680] dump_stack_lvl+0xe8/0x140 [ 69.376003][ T4680] dump_stack+0x15/0x1b [ 69.376021][ T4680] should_fail_ex+0x265/0x280 [ 69.376047][ T4680] should_fail+0xb/0x20 [ 69.376072][ T4680] should_fail_usercopy+0x1a/0x20 [ 69.376096][ T4680] _copy_from_user+0x1c/0xb0 [ 69.376129][ T4680] ____sys_sendmsg+0x1c5/0x4e0 [ 69.376222][ T4680] ___sys_sendmsg+0x17b/0x1d0 [ 69.376258][ T4680] __sys_sendmmsg+0x178/0x300 [ 69.376290][ T4680] __x64_sys_sendmmsg+0x57/0x70 [ 69.376345][ T4680] x64_sys_call+0x1c4a/0x3000 [ 69.376369][ T4680] do_syscall_64+0xd2/0x200 [ 69.376455][ T4680] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 69.376516][ T4680] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 69.376551][ T4680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.376602][ T4680] RIP: 0033:0x7f7e7296f6c9 [ 69.376618][ T4680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.376637][ T4680] RSP: 002b:00007f7e713d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 69.376803][ T4680] RAX: ffffffffffffffda RBX: 00007f7e72bc5fa0 RCX: 00007f7e7296f6c9 [ 69.376886][ T4680] RDX: 0000000000000001 RSI: 00002000000017c0 RDI: 0000000000000003 [ 69.376967][ T4680] RBP: 00007f7e713d7090 R08: 0000000000000000 R09: 0000000000000000 [ 69.376979][ T4680] R10: 0000000008000004 R11: 0000000000000246 R12: 0000000000000001 [ 69.377010][ T4680] R13: 00007f7e72bc6038 R14: 00007f7e72bc5fa0 R15: 00007ffe0fa384c8 [ 69.377031][ T4680] [ 69.569774][ T4687] netlink: 19 bytes leftover after parsing attributes in process `syz.2.377'. [ 69.651804][ T4698] random: crng reseeded on system resumption [ 69.709351][ T4706] loop0: detected capacity change from 0 to 128 [ 69.724554][ T4706] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 69.734893][ T4706] FAT-fs (loop0): Filesystem has been set read-only [ 69.750541][ T3317] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 69.816970][ T4716] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 69.858981][ T4702] loop5: detected capacity change from 0 to 132 [ 69.865548][ T4720] loop1: detected capacity change from 0 to 512 [ 69.867338][ T4702] iso9660: Unknown parameter 'Ã0$î.<Ôc9A?n ^ô·³«»ŽPö©FíȬ‹ú"‰0»kõªŽ' [ 69.896901][ T4720] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.389: iget: bad i_size value: 38620345925642 [ 69.985311][ T4727] FAULT_INJECTION: forcing a failure. [ 69.985311][ T4727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.998417][ T4727] CPU: 0 UID: 0 PID: 4727 Comm: syz.2.394 Not tainted syzkaller #0 PREEMPT(voluntary) [ 69.998445][ T4727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 69.998459][ T4727] Call Trace: [ 69.998465][ T4727] [ 69.998473][ T4727] __dump_stack+0x1d/0x30 [ 69.998502][ T4727] dump_stack_lvl+0xe8/0x140 [ 69.998581][ T4727] dump_stack+0x15/0x1b [ 69.998616][ T4727] should_fail_ex+0x265/0x280 [ 69.998640][ T4727] should_fail+0xb/0x20 [ 69.998660][ T4727] should_fail_usercopy+0x1a/0x20 [ 69.998684][ T4727] _copy_to_user+0x20/0xa0 [ 69.998769][ T4727] simple_read_from_buffer+0xb5/0x130 [ 69.998799][ T4727] proc_fail_nth_read+0x10e/0x150 [ 69.998876][ T4727] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 69.998916][ T4727] vfs_read+0x1a8/0x770 [ 69.999003][ T4727] ? __rcu_read_unlock+0x4f/0x70 [ 69.999078][ T4727] ? __fget_files+0x184/0x1c0 [ 69.999118][ T4727] ksys_read+0xda/0x1a0 [ 69.999153][ T4727] __x64_sys_read+0x40/0x50 [ 69.999228][ T4727] x64_sys_call+0x27c0/0x3000 [ 69.999261][ T4727] do_syscall_64+0xd2/0x200 [ 69.999285][ T4727] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 69.999327][ T4727] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 69.999371][ T4727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.999398][ T4727] RIP: 0033:0x7f843212e0dc [ 69.999413][ T4727] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 69.999436][ T4727] RSP: 002b:00007f8430b97030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 69.999527][ T4727] RAX: ffffffffffffffda RBX: 00007f8432385fa0 RCX: 00007f843212e0dc [ 69.999545][ T4727] RDX: 000000000000000f RSI: 00007f8430b970a0 RDI: 0000000000000006 [ 69.999561][ T4727] RBP: 00007f8430b97090 R08: 0000000000000000 R09: 0000000000000000 [ 69.999578][ T4727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.999594][ T4727] R13: 00007f8432386038 R14: 00007f8432385fa0 R15: 00007ffd348aab08 [ 69.999628][ T4727] [ 70.003753][ T4720] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.389: couldn't read orphan inode 15 (err -117) [ 70.079456][ T4718] netlink: 16 bytes leftover after parsing attributes in process `syz.3.390'. [ 70.192565][ T4720] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.389: bg 0: block 5: invalid block bitmap [ 70.235960][ T4730] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.250256][ T4720] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1408 with error 28 [ 70.263053][ T4720] EXT4-fs (loop1): This should not happen!! Data will be lost [ 70.263053][ T4720] [ 70.272821][ T4720] EXT4-fs (loop1): Total free blocks count 0 [ 70.279052][ T4720] EXT4-fs (loop1): Free/Dirty block details [ 70.285004][ T4720] EXT4-fs (loop1): free_blocks=0 [ 70.290071][ T4720] EXT4-fs (loop1): dirty_blocks=1412 [ 70.295907][ T4720] EXT4-fs (loop1): Block reservation details [ 70.302382][ T4720] EXT4-fs (loop1): i_reserved_data_blocks=1412 [ 70.404515][ T4730] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.454734][ T4748] loop3: detected capacity change from 0 to 1024 [ 70.472502][ T4748] EXT4-fs: Ignoring removed bh option [ 70.507528][ T4748] unsupported nlmsg_type 40 [ 70.534249][ T4730] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.557007][ T4760] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 70.583697][ T4730] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.658470][ T4753] loop0: detected capacity change from 0 to 132 [ 70.665376][ T4753] iso9660: Unknown parameter 'Ã0$î.<Ôc9A?n ^ô·³«»ŽPö©FíȬ‹ú"‰0»kõªŽ' [ 70.811104][ T4779] FAULT_INJECTION: forcing a failure. [ 70.811104][ T4779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.824374][ T4779] CPU: 0 UID: 0 PID: 4779 Comm: syz.3.407 Not tainted syzkaller #0 PREEMPT(voluntary) [ 70.824411][ T4779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 70.824429][ T4779] Call Trace: [ 70.824436][ T4779] [ 70.824446][ T4779] __dump_stack+0x1d/0x30 [ 70.824500][ T4779] dump_stack_lvl+0xe8/0x140 [ 70.824586][ T4779] dump_stack+0x15/0x1b [ 70.824604][ T4779] should_fail_ex+0x265/0x280 [ 70.824626][ T4779] should_fail+0xb/0x20 [ 70.824647][ T4779] should_fail_usercopy+0x1a/0x20 [ 70.824677][ T4779] _copy_from_user+0x1c/0xb0 [ 70.824745][ T4779] sk_setsockopt+0x1fa/0x20e0 [ 70.824793][ T4779] ? selinux_socket_setsockopt+0x1ad/0x1e0 [ 70.824874][ T4779] sock_setsockopt+0x40/0x50 [ 70.824910][ T4779] unix_setsockopt+0xe8/0x1e0 [ 70.824944][ T4779] ? __pfx_unix_setsockopt+0x10/0x10 [ 70.825048][ T4779] __sys_setsockopt+0x184/0x200 [ 70.825084][ T4779] __x64_sys_setsockopt+0x64/0x80 [ 70.825184][ T4779] x64_sys_call+0x20ec/0x3000 [ 70.825212][ T4779] do_syscall_64+0xd2/0x200 [ 70.825239][ T4779] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 70.825287][ T4779] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 70.825332][ T4779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.825423][ T4779] RIP: 0033:0x7f7e7296f6c9 [ 70.825442][ T4779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.825460][ T4779] RSP: 002b:00007f7e713b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 70.825479][ T4779] RAX: ffffffffffffffda RBX: 00007f7e72bc6090 RCX: 00007f7e7296f6c9 [ 70.825494][ T4779] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000007 [ 70.825507][ T4779] RBP: 00007f7e713b6090 R08: 0000000000000010 R09: 0000000000000000 [ 70.825590][ T4779] R10: 000020000002eff0 R11: 0000000000000246 R12: 0000000000000001 [ 70.825603][ T4779] R13: 00007f7e72bc6128 R14: 00007f7e72bc6090 R15: 00007ffe0fa384c8 [ 70.825628][ T4779] [ 71.640038][ T4787] loop3: detected capacity change from 0 to 512 [ 71.653387][ T4787] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.410: iget: bad i_size value: 38620345925642 [ 71.673091][ T4787] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.410: couldn't read orphan inode 15 (err -117) [ 71.745516][ T4787] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.410: bg 0: block 5: invalid block bitmap [ 71.758239][ T4787] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 71.770779][ T4787] EXT4-fs (loop3): This should not happen!! Data will be lost [ 71.770779][ T4787] [ 71.780425][ T4787] EXT4-fs (loop3): Total free blocks count 0 [ 71.786489][ T4787] EXT4-fs (loop3): Free/Dirty block details [ 71.792516][ T4787] EXT4-fs (loop3): free_blocks=0 [ 71.797514][ T4787] EXT4-fs (loop3): dirty_blocks=2052 [ 71.802855][ T4787] EXT4-fs (loop3): Block reservation details [ 71.808935][ T4787] EXT4-fs (loop3): i_reserved_data_blocks=2052 [ 71.845458][ T3322] EXT4-fs unmount: 21 callbacks suppressed [ 71.845545][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.012575][ T4801] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 72.211222][ T3507] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 72.572714][ T29] kauditd_printk_skb: 253 callbacks suppressed [ 72.572722][ T4811] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 72.572732][ T29] audit: type=1400 audit(1762917892.913:1282): avc: denied { mac_admin } for pid=4810 comm="syz.1.419" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 72.588662][ T4811] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 72.609777][ T29] audit: type=1400 audit(1762917892.913:1283): avc: denied { relabelto } for pid=4810 comm="syz.1.419" name="cgroup.procs" dev="cgroup" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 72.626878][ T4811] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 72.645381][ T29] audit: type=1400 audit(1762917892.913:1284): avc: denied { associate } for pid=4810 comm="syz.1.419" name="cgroup.procs" dev="cgroup" ino=53 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:netutils_exec_t:s0" [ 72.645435][ T29] audit: type=1400 audit(1762917892.913:1285): avc: denied { create } for pid=4810 comm="syz.1.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 72.645548][ T29] audit: type=1400 audit(1762917892.913:1286): avc: denied { setopt } for pid=4810 comm="syz.1.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 72.683447][ T4811] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 72.699952][ T29] audit: type=1400 audit(1762917892.913:1287): avc: denied { create } for pid=4810 comm="syz.1.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 72.746745][ T29] audit: type=1400 audit(1762917892.963:1288): avc: denied { write } for pid=4810 comm="syz.1.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 72.771180][ T3507] Bluetooth: hci1: command 0x1003 tx timeout [ 72.777736][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 72.921576][ T29] audit: type=1400 audit(1762917893.263:1289): avc: denied { mount } for pid=4812 comm="syz.1.420" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 72.975759][ T4827] loop3: detected capacity change from 0 to 512 [ 73.011244][ T4827] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.424: iget: bad i_size value: 38620345925642 [ 73.024135][ T4827] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.424: couldn't read orphan inode 15 (err -117) [ 73.037095][ T4827] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.063944][ T29] audit: type=1400 audit(1762917893.393:1290): avc: denied { write } for pid=4812 comm="syz.1.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 73.083389][ T29] audit: type=1400 audit(1762917893.393:1291): avc: denied { connect } for pid=4812 comm="syz.1.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 73.106959][ T4813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.420'. [ 73.144859][ T4827] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.424: bg 0: block 5: invalid block bitmap [ 73.158835][ T4827] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 73.171509][ T4827] EXT4-fs (loop3): This should not happen!! Data will be lost [ 73.171509][ T4827] [ 73.181300][ T4827] EXT4-fs (loop3): Total free blocks count 0 [ 73.187312][ T4827] EXT4-fs (loop3): Free/Dirty block details [ 73.193319][ T4827] EXT4-fs (loop3): free_blocks=0 [ 73.198720][ T4827] EXT4-fs (loop3): dirty_blocks=2140 [ 73.204063][ T4827] EXT4-fs (loop3): Block reservation details [ 73.210159][ T4827] EXT4-fs (loop3): i_reserved_data_blocks=2140 [ 73.241201][ T3448] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 84 with error 28 [ 73.269508][ T4838] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 73.347129][ T4843] loop1: detected capacity change from 0 to 512 [ 73.377087][ T4843] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 73.473170][ T4851] netlink: 'syz.3.431': attribute type 10 has an invalid length. [ 73.486515][ T4851] team0: Port device dummy0 added [ 73.494646][ T4851] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=4851 comm=syz.3.431 [ 73.602090][ T4860] loop5: detected capacity change from 0 to 512 [ 73.613144][ T4860] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.621705][ T4860] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 73.632620][ T4860] EXT4-fs (loop5): 1 truncate cleaned up [ 73.638807][ T4860] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.837203][ T3780] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.879888][ T4873] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 73.925468][ T4875] loop5: detected capacity change from 0 to 512 [ 73.937950][ T4875] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.440: iget: bad i_size value: 38620345925642 [ 73.957762][ T4875] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.440: couldn't read orphan inode 15 (err -117) [ 73.970271][ T4875] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.044014][ T4875] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.440: bg 0: block 5: invalid block bitmap [ 74.056691][ T4875] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 74.069874][ T4875] EXT4-fs (loop5): This should not happen!! Data will be lost [ 74.069874][ T4875] [ 74.080786][ T4875] EXT4-fs (loop5): Total free blocks count 0 [ 74.087831][ T4875] EXT4-fs (loop5): Free/Dirty block details [ 74.094289][ T4875] EXT4-fs (loop5): free_blocks=0 [ 74.099463][ T4875] EXT4-fs (loop5): dirty_blocks=2888 [ 74.105449][ T4875] EXT4-fs (loop5): Block reservation details [ 74.111537][ T4875] EXT4-fs (loop5): i_reserved_data_blocks=2888 [ 74.130091][ T4875] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 832 with error 28 [ 74.261070][ T3341] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.282616][ T3341] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.302741][ T4888] netlink: 268 bytes leftover after parsing attributes in process `syz.1.445'. [ 74.312005][ T4888] unsupported nla_type 65024 [ 74.326339][ T3341] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.342691][ T3341] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.435077][ T37] Bluetooth: hci0: Frame reassembly failed (-84) [ 74.523150][ T4909] loop1: detected capacity change from 0 to 2048 [ 74.544068][ T4916] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 74.568853][ T4909] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.591009][ T4921] loop2: detected capacity change from 0 to 512 [ 74.605256][ T4921] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.453: iget: bad i_size value: 38620345925642 [ 74.606203][ T4909] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.630661][ T4921] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.453: couldn't read orphan inode 15 (err -117) [ 74.653719][ T4921] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.694230][ T4926] FAULT_INJECTION: forcing a failure. [ 74.694230][ T4926] name failslab, interval 1, probability 0, space 0, times 0 [ 74.707021][ T4926] CPU: 1 UID: 0 PID: 4926 Comm: syz.0.454 Not tainted syzkaller #0 PREEMPT(voluntary) [ 74.707061][ T4926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 74.707079][ T4926] Call Trace: [ 74.707087][ T4926] [ 74.707098][ T4926] __dump_stack+0x1d/0x30 [ 74.707126][ T4926] dump_stack_lvl+0xe8/0x140 [ 74.707234][ T4926] dump_stack+0x15/0x1b [ 74.707260][ T4926] should_fail_ex+0x265/0x280 [ 74.707283][ T4926] should_failslab+0x8c/0xb0 [ 74.707323][ T4926] kmem_cache_alloc_noprof+0x50/0x480 [ 74.707443][ T4926] ? alloc_empty_file+0x76/0x200 [ 74.707467][ T4926] alloc_empty_file+0x76/0x200 [ 74.707494][ T4926] path_openat+0x68/0x2170 [ 74.707527][ T4926] ? _parse_integer_limit+0x170/0x190 [ 74.707665][ T4926] ? _parse_integer+0x27/0x40 [ 74.707765][ T4926] ? kstrtoull+0x111/0x140 [ 74.707816][ T4926] ? kstrtouint+0x76/0xc0 [ 74.707922][ T4926] do_filp_open+0x109/0x230 [ 74.707972][ T4926] do_sys_openat2+0xa6/0x110 [ 74.708000][ T4926] __x64_sys_creat+0x65/0x90 [ 74.708091][ T4926] x64_sys_call+0x2da3/0x3000 [ 74.708118][ T4926] do_syscall_64+0xd2/0x200 [ 74.708148][ T4926] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 74.708189][ T4926] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 74.708347][ T4926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.708381][ T4926] RIP: 0033:0x7f9252ccf6c9 [ 74.708399][ T4926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.708493][ T4926] RSP: 002b:00007f925172f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 74.708514][ T4926] RAX: ffffffffffffffda RBX: 00007f9252f25fa0 RCX: 00007f9252ccf6c9 [ 74.708531][ T4926] RDX: 0000000000000000 RSI: ecf86c37d53048fc RDI: 0000200000000280 [ 74.708550][ T4926] RBP: 00007f925172f090 R08: 0000000000000000 R09: 0000000000000000 [ 74.708576][ T4926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.708594][ T4926] R13: 00007f9252f26038 R14: 00007f9252f25fa0 R15: 00007ffdf00ac638 [ 74.708621][ T4926] [ 74.977569][ T4932] SELinux: Context system_u:object_r:udev_var_run_t:s0 is not valid (left unmapped). [ 75.010593][ T4921] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.453: bg 0: block 5: invalid block bitmap [ 75.032966][ T4921] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 212 with error 28 [ 75.045634][ T4921] EXT4-fs (loop2): This should not happen!! Data will be lost [ 75.045634][ T4921] [ 75.055370][ T4921] EXT4-fs (loop2): Total free blocks count 0 [ 75.061534][ T4921] EXT4-fs (loop2): Free/Dirty block details [ 75.067441][ T4921] EXT4-fs (loop2): free_blocks=0 [ 75.072445][ T4921] EXT4-fs (loop2): dirty_blocks=216 [ 75.077671][ T4921] EXT4-fs (loop2): Block reservation details [ 75.083954][ T4921] EXT4-fs (loop2): i_reserved_data_blocks=216 [ 75.161291][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.348048][ T4966] FAULT_INJECTION: forcing a failure. [ 75.348048][ T4966] name failslab, interval 1, probability 0, space 0, times 0 [ 75.361025][ T4966] CPU: 1 UID: 0 PID: 4966 Comm: syz.2.464 Not tainted syzkaller #0 PREEMPT(voluntary) [ 75.361076][ T4966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 75.361124][ T4966] Call Trace: [ 75.361132][ T4966] [ 75.361141][ T4966] __dump_stack+0x1d/0x30 [ 75.361172][ T4966] dump_stack_lvl+0xe8/0x140 [ 75.361240][ T4966] dump_stack+0x15/0x1b [ 75.361261][ T4966] should_fail_ex+0x265/0x280 [ 75.361283][ T4966] ? sctp_add_bind_addr+0x71/0x1e0 [ 75.361313][ T4966] should_failslab+0x8c/0xb0 [ 75.361354][ T4966] __kmalloc_cache_noprof+0x4c/0x4a0 [ 75.361408][ T4966] sctp_add_bind_addr+0x71/0x1e0 [ 75.361432][ T4966] sctp_copy_local_addr_list+0x199/0x220 [ 75.361472][ T4966] sctp_copy_one_addr+0x7f/0x280 [ 75.361558][ T4966] sctp_bind_addr_copy+0x79/0x290 [ 75.361597][ T4966] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 75.361635][ T4966] sctp_connect_new_asoc+0x1c3/0x3a0 [ 75.361713][ T4966] sctp_sendmsg+0xf10/0x18d0 [ 75.361746][ T4966] ? selinux_socket_sendmsg+0xb1/0x1b0 [ 75.361779][ T4966] ? __pfx_sctp_sendmsg+0x10/0x10 [ 75.361812][ T4966] inet_sendmsg+0xc5/0xd0 [ 75.361891][ T4966] __sock_sendmsg+0x102/0x180 [ 75.361917][ T4966] __sys_sendto+0x268/0x330 [ 75.361964][ T4966] __x64_sys_sendto+0x76/0x90 [ 75.362065][ T4966] x64_sys_call+0x2d14/0x3000 [ 75.362089][ T4966] do_syscall_64+0xd2/0x200 [ 75.362178][ T4966] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 75.362277][ T4966] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 75.362383][ T4966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.362412][ T4966] RIP: 0033:0x7f843212f6c9 [ 75.362428][ T4966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.362520][ T4966] RSP: 002b:00007f8430b97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 75.362546][ T4966] RAX: ffffffffffffffda RBX: 00007f8432385fa0 RCX: 00007f843212f6c9 [ 75.362559][ T4966] RDX: 0000000000020a00 RSI: 0000200000000040 RDI: 0000000000000003 [ 75.362571][ T4966] RBP: 00007f8430b97090 R08: 0000200000000100 R09: 000000000000001c [ 75.362656][ T4966] R10: 0000000000044004 R11: 0000000000000246 R12: 0000000000000001 [ 75.362690][ T4966] R13: 00007f8432386038 R14: 00007f8432385fa0 R15: 00007ffd348aab08 [ 75.362710][ T4966] [ 75.631642][ T4968] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 75.664723][ T37] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set [ 75.703457][ T37] EXT4-fs (loop1): Remounting filesystem read-only [ 75.710581][ T3341] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 75.734446][ T4970] netlink: 168 bytes leftover after parsing attributes in process `syz.2.467'. [ 75.738811][ T4975] loop0: detected capacity change from 0 to 128 [ 75.794578][ T4977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.470'. [ 75.837009][ T4979] loop2: detected capacity change from 0 to 512 [ 75.855724][ T4977] bridge1: entered promiscuous mode [ 75.862791][ T4979] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.471: iget: bad i_size value: 38620345925642 [ 75.878934][ T4979] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.471: couldn't read orphan inode 15 (err -117) [ 75.897033][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.902005][ T4979] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.009959][ T4979] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.471: bg 0: block 5: invalid block bitmap [ 76.023187][ T4979] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1680 with error 28 [ 76.035984][ T4979] EXT4-fs (loop2): This should not happen!! Data will be lost [ 76.035984][ T4979] [ 76.046891][ T4979] EXT4-fs (loop2): Total free blocks count 0 [ 76.054016][ T4979] EXT4-fs (loop2): Free/Dirty block details [ 76.060599][ T4979] EXT4-fs (loop2): free_blocks=0 [ 76.065624][ T4979] EXT4-fs (loop2): dirty_blocks=1684 [ 76.071281][ T4979] EXT4-fs (loop2): Block reservation details [ 76.077388][ T4979] EXT4-fs (loop2): i_reserved_data_blocks=1684 [ 76.114457][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.190014][ T5000] loop2: detected capacity change from 0 to 512 [ 76.192608][ T4987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49168 sclass=netlink_route_socket pid=4987 comm=syz.1.466 [ 76.200559][ T5000] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 76.225137][ T5000] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.477: Invalid block bitmap block 0 in block_group 0 [ 76.228176][ T4987] loop1: detected capacity change from 0 to 1024 [ 76.239414][ T5000] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 76.266533][ T5000] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.477: attempt to clear invalid blocks 983261 len 1 [ 76.280135][ T5000] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz.2.477: Invalid inode table block 0 in block_group 0 [ 76.292169][ T4987] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.293570][ T5000] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 76.315462][ T5000] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 76.324388][ T5000] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz.2.477: Invalid inode table block 0 in block_group 0 [ 76.347549][ T5000] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 76.357746][ T5000] EXT4-fs error (device loop2): ext4_truncate:4637: inode #11: comm syz.2.477: mark_inode_dirty error [ 76.369169][ T5000] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 76.382510][ T5000] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz.2.477: Invalid inode table block 0 in block_group 0 [ 76.395576][ T5000] EXT4-fs (loop2): 1 truncate cleaned up [ 76.403718][ T5000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.412811][ T5006] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 76.424474][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.450485][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 76.450683][ T3507] Bluetooth: hci0: command 0x1003 tx timeout [ 76.456977][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.670215][ T5021] netlink: 'syz.2.483': attribute type 10 has an invalid length. [ 76.716441][ T5021] FAULT_INJECTION: forcing a failure. [ 76.716441][ T5021] name failslab, interval 1, probability 0, space 0, times 0 [ 76.729506][ T5021] CPU: 0 UID: 0 PID: 5021 Comm: syz.2.483 Not tainted syzkaller #0 PREEMPT(voluntary) [ 76.729582][ T5021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 76.729598][ T5021] Call Trace: [ 76.729605][ T5021] [ 76.729659][ T5021] __dump_stack+0x1d/0x30 [ 76.729686][ T5021] dump_stack_lvl+0xe8/0x140 [ 76.729715][ T5021] dump_stack+0x15/0x1b [ 76.729740][ T5021] should_fail_ex+0x265/0x280 [ 76.729763][ T5021] ? rtnl_newlink+0x5c/0x12d0 [ 76.729795][ T5021] should_failslab+0x8c/0xb0 [ 76.729945][ T5021] __kmalloc_cache_noprof+0x4c/0x4a0 [ 76.729990][ T5021] rtnl_newlink+0x5c/0x12d0 [ 76.730027][ T5021] ? bpf_get_stackid+0x102/0x120 [ 76.730075][ T5021] ? bpf_prog_eae01479079411c8+0x2a/0x35 [ 76.730131][ T5021] ? bpf_get_stackid_raw_tp+0xf6/0x120 [ 76.730247][ T5021] ? __rcu_read_unlock+0x34/0x70 [ 76.730354][ T5021] ? bpf_trace_run3+0x12c/0x1d0 [ 76.730424][ T5021] ? __memcg_slab_free_hook+0x135/0x230 [ 76.730520][ T5021] ? __rcu_read_unlock+0x4f/0x70 [ 76.730685][ T5021] ? avc_has_perm_noaudit+0x1b1/0x200 [ 76.730714][ T5021] ? cred_has_capability+0x210/0x280 [ 76.730759][ T5021] ? selinux_capable+0x31/0x40 [ 76.730833][ T5021] ? security_capable+0x83/0x90 [ 76.730930][ T5021] ? ns_capable+0x7d/0xb0 [ 76.730961][ T5021] ? __pfx_rtnl_newlink+0x10/0x10 [ 76.731028][ T5021] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 76.731057][ T5021] netlink_rcv_skb+0x123/0x220 [ 76.731105][ T5021] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 76.731136][ T5021] rtnetlink_rcv+0x1c/0x30 [ 76.731223][ T5021] netlink_unicast+0x5c0/0x690 [ 76.731262][ T5021] netlink_sendmsg+0x58b/0x6b0 [ 76.731293][ T5021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 76.731319][ T5021] __sock_sendmsg+0x145/0x180 [ 76.731411][ T5021] ____sys_sendmsg+0x31e/0x4e0 [ 76.731456][ T5021] ___sys_sendmsg+0x17b/0x1d0 [ 76.731502][ T5021] __x64_sys_sendmsg+0xd4/0x160 [ 76.731534][ T5021] x64_sys_call+0x191e/0x3000 [ 76.731640][ T5021] do_syscall_64+0xd2/0x200 [ 76.731668][ T5021] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 76.731706][ T5021] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 76.731805][ T5021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.731827][ T5021] RIP: 0033:0x7f843212f6c9 [ 76.731842][ T5021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.731906][ T5021] RSP: 002b:00007f8430b97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.731929][ T5021] RAX: ffffffffffffffda RBX: 00007f8432385fa0 RCX: 00007f843212f6c9 [ 76.731979][ T5021] RDX: 0000000000008000 RSI: 0000200000000600 RDI: 0000000000000005 [ 76.731996][ T5021] RBP: 00007f8430b97090 R08: 0000000000000000 R09: 0000000000000000 [ 76.732010][ T5021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.732022][ T5021] R13: 00007f8432386038 R14: 00007f8432385fa0 R15: 00007ffd348aab08 [ 76.732042][ T5021] [ 76.778170][ T5027] loop0: detected capacity change from 0 to 512 [ 77.032379][ T5027] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.486: iget: bad i_size value: 38620345925642 [ 77.055147][ T5027] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.486: couldn't read orphan inode 15 (err -117) [ 77.074846][ T5027] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.132337][ T5035] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.489'. [ 77.164270][ T5040] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 77.215551][ T5046] netlink: 12 bytes leftover after parsing attributes in process `syz.3.493'. [ 77.229249][ T5027] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.486: bg 0: block 5: invalid block bitmap [ 77.244974][ T5046] bridge2: entered promiscuous mode [ 77.256164][ T5027] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 77.268888][ T5027] EXT4-fs (loop0): This should not happen!! Data will be lost [ 77.268888][ T5027] [ 77.277093][ T5050] loop2: detected capacity change from 0 to 1764 [ 77.278883][ T5027] EXT4-fs (loop0): Total free blocks count 0 [ 77.291531][ T5027] EXT4-fs (loop0): Free/Dirty block details [ 77.297449][ T5027] EXT4-fs (loop0): free_blocks=0 [ 77.302573][ T5027] EXT4-fs (loop0): dirty_blocks=3304 [ 77.303487][ T5050] iso9660: Unknown parameter 'overÅdw€1™&'perm' [ 77.307883][ T5027] EXT4-fs (loop0): Block reservation details [ 77.320157][ T5027] EXT4-fs (loop0): i_reserved_data_blocks=3304 [ 77.402421][ T5057] FAULT_INJECTION: forcing a failure. [ 77.402421][ T5057] name failslab, interval 1, probability 0, space 0, times 0 [ 77.404907][ T5027] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 1248 with error 28 [ 77.415690][ T5057] CPU: 0 UID: 0 PID: 5057 Comm: syz.2.497 Not tainted syzkaller #0 PREEMPT(voluntary) [ 77.415725][ T5057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 77.415742][ T5057] Call Trace: [ 77.415752][ T5057] [ 77.415764][ T5057] __dump_stack+0x1d/0x30 [ 77.415800][ T5057] dump_stack_lvl+0xe8/0x140 [ 77.415833][ T5057] dump_stack+0x15/0x1b [ 77.415858][ T5057] should_fail_ex+0x265/0x280 [ 77.415891][ T5057] should_failslab+0x8c/0xb0 [ 77.415999][ T5057] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 77.416055][ T5057] ? v9fs_session_init+0x78/0xde0 [ 77.416167][ T5057] kstrdup+0x3e/0xd0 [ 77.416234][ T5057] v9fs_session_init+0x78/0xde0 [ 77.416286][ T5057] ? __rcu_read_unlock+0x4f/0x70 [ 77.416326][ T5057] ? avc_has_perm_noaudit+0x1b1/0x200 [ 77.416381][ T5057] ? should_fail_ex+0xdb/0x280 [ 77.416408][ T5057] ? v9fs_mount+0x51/0x5c0 [ 77.416509][ T5057] ? should_failslab+0x8c/0xb0 [ 77.416550][ T5057] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 77.416654][ T5057] v9fs_mount+0x67/0x5c0 [ 77.416735][ T5057] ? selinux_capable+0x31/0x40 [ 77.416767][ T5057] ? __pfx_v9fs_mount+0x10/0x10 [ 77.416799][ T5057] legacy_get_tree+0x78/0xd0 [ 77.416838][ T5057] vfs_get_tree+0x57/0x1d0 [ 77.416942][ T5057] do_new_mount+0x24d/0x660 [ 77.416994][ T5057] ? security_capable+0x83/0x90 [ 77.417045][ T5057] path_mount+0x4a5/0xb70 [ 77.417078][ T5057] ? user_path_at+0x109/0x130 [ 77.417109][ T5057] __se_sys_mount+0x28c/0x2e0 [ 77.417158][ T5057] ? fput+0x8f/0xc0 [ 77.417188][ T5057] __x64_sys_mount+0x67/0x80 [ 77.417228][ T5057] x64_sys_call+0x2b51/0x3000 [ 77.417299][ T5057] do_syscall_64+0xd2/0x200 [ 77.417320][ T5057] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 77.417435][ T5057] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 77.417469][ T5057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.417523][ T5057] RIP: 0033:0x7f843212f6c9 [ 77.417596][ T5057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.417617][ T5057] RSP: 002b:00007f8430b97038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 77.417645][ T5057] RAX: ffffffffffffffda RBX: 00007f8432385fa0 RCX: 00007f843212f6c9 [ 77.417664][ T5057] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 77.417682][ T5057] RBP: 00007f8430b97090 R08: 0000200000001d40 R09: 0000000000000000 [ 77.417720][ T5057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 77.417738][ T5057] R13: 00007f8432386038 R14: 00007f8432385fa0 R15: 00007ffd348aab08 [ 77.417766][ T5057] [ 77.523783][ T5058] loop3: detected capacity change from 0 to 1024 [ 77.696866][ T5058] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 77.710331][ T5062] pim6reg1: entered promiscuous mode [ 77.715710][ T5062] pim6reg1: entered allmulticast mode [ 77.724284][ T29] kauditd_printk_skb: 264 callbacks suppressed [ 77.724303][ T29] audit: type=1400 audit(1762917898.063:1556): avc: denied { execute_no_trans } for pid=5061 comm="syz.2.499" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 77.796204][ T5066] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 77.868848][ T5076] FAULT_INJECTION: forcing a failure. [ 77.868848][ T5076] name failslab, interval 1, probability 0, space 0, times 0 [ 77.881648][ T5076] CPU: 0 UID: 0 PID: 5076 Comm: syz.1.505 Not tainted syzkaller #0 PREEMPT(voluntary) [ 77.881680][ T5076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 77.881692][ T5076] Call Trace: [ 77.881698][ T5076] [ 77.881707][ T5076] __dump_stack+0x1d/0x30 [ 77.881807][ T5076] dump_stack_lvl+0xe8/0x140 [ 77.881835][ T5076] dump_stack+0x15/0x1b [ 77.881858][ T5076] should_fail_ex+0x265/0x280 [ 77.881936][ T5076] ? alloc_tty_struct+0x4c/0x400 [ 77.881959][ T5076] should_failslab+0x8c/0xb0 [ 77.882063][ T5076] __kmalloc_cache_noprof+0x4c/0x4a0 [ 77.882220][ T5076] ? obj_cgroup_charge_account+0x122/0x1a0 [ 77.882255][ T5076] alloc_tty_struct+0x4c/0x400 [ 77.882283][ T5076] ? tty_open+0x81/0xaf0 [ 77.882317][ T5076] ? should_failslab+0x8c/0xb0 [ 77.882365][ T5076] tty_init_dev+0x39/0x330 [ 77.882390][ T5076] tty_open+0x6c7/0xaf0 [ 77.882422][ T5076] chrdev_open+0x2eb/0x3a0 [ 77.882464][ T5076] do_dentry_open+0x649/0xa20 [ 77.882489][ T5076] ? __pfx_chrdev_open+0x10/0x10 [ 77.882659][ T5076] vfs_open+0x37/0x1e0 [ 77.882682][ T5076] path_openat+0x1c5e/0x2170 [ 77.882773][ T5076] do_filp_open+0x109/0x230 [ 77.882873][ T5076] do_sys_openat2+0xa6/0x110 [ 77.882896][ T5076] __x64_sys_openat+0xf2/0x120 [ 77.882935][ T5076] x64_sys_call+0x2eab/0x3000 [ 77.882964][ T5076] do_syscall_64+0xd2/0x200 [ 77.882991][ T5076] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 77.883027][ T5076] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 77.883149][ T5076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.883184][ T5076] RIP: 0033:0x7f804441f6c9 [ 77.883200][ T5076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.883231][ T5076] RSP: 002b:00007f8042e7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 77.883325][ T5076] RAX: ffffffffffffffda RBX: 00007f8044675fa0 RCX: 00007f804441f6c9 [ 77.883343][ T5076] RDX: 0000000000000000 RSI: 0000200000000540 RDI: ffffffffffffff9c [ 77.883360][ T5076] RBP: 00007f8042e7f090 R08: 0000000000000000 R09: 0000000000000000 [ 77.883377][ T5076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.883417][ T5076] R13: 00007f8044676038 R14: 00007f8044675fa0 R15: 00007ffd60d03978 [ 77.883473][ T5076] [ 78.186387][ T5081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.507'. [ 78.220106][ T5081] netlink: 7 bytes leftover after parsing attributes in process `syz.1.507'. [ 78.232424][ T29] audit: type=1400 audit(1762917898.573:1557): avc: denied { read } for pid=5084 comm="syz.3.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 78.265745][ T5087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.509'. [ 78.319179][ T5092] netlink: 'syz.1.511': attribute type 10 has an invalid length. [ 78.337232][ T29] audit: type=1400 audit(1762917898.673:1558): avc: denied { ioctl } for pid=5091 comm="syz.3.510" path="socket:[11041]" dev="sockfs" ino=11041 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 78.339080][ T5093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.510'. [ 78.381773][ T5095] netlink: 'syz.1.511': attribute type 10 has an invalid length. [ 78.396985][ T29] audit: type=1400 audit(1762917898.733:1559): avc: granted { setsecparam } for pid=5077 comm="syz.0.506" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 78.419702][ T5092] team0: Port device dummy0 added [ 78.426066][ T5098] loop5: detected capacity change from 0 to 1024 [ 78.433341][ T5098] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 78.451589][ T5098] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #11: comm syz.5.508: iget: bogus i_mode (1) [ 78.459457][ T29] audit: type=1400 audit(1762917898.783:1560): avc: denied { block_suspend } for pid=5077 comm="syz.0.506" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 78.477862][ T5098] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.508: couldn't read orphan inode 11 (err -117) [ 78.496405][ T5093] team0: Port device team_slave_1 removed [ 78.497246][ T5098] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.526072][ T5083] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.535521][ T5095] team0: Port device dummy0 removed [ 78.542779][ T29] audit: type=1400 audit(1762917898.883:1561): avc: denied { ioctl } for pid=5082 comm="syz.5.508" path="socket:[11019]" dev="sockfs" ino=11019 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.543755][ T5095] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 78.580573][ T29] audit: type=1400 audit(1762917898.913:1562): avc: denied { name_connect } for pid=5082 comm="syz.5.508" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 78.635568][ T5102] loop1: detected capacity change from 0 to 512 [ 78.647022][ T5102] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.512: iget: bad i_size value: 38620345925642 [ 78.660113][ T5102] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.512: couldn't read orphan inode 15 (err -117) [ 78.673139][ T5102] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.771814][ T5102] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.512: bg 0: block 5: invalid block bitmap [ 78.789219][ T5102] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1996 with error 28 [ 78.801913][ T5102] EXT4-fs (loop1): This should not happen!! Data will be lost [ 78.801913][ T5102] [ 78.811817][ T5102] EXT4-fs (loop1): Total free blocks count 0 [ 78.817973][ T5102] EXT4-fs (loop1): Free/Dirty block details [ 78.824035][ T5102] EXT4-fs (loop1): free_blocks=0 [ 78.829547][ T5102] EXT4-fs (loop1): dirty_blocks=2000 [ 78.836440][ T5102] EXT4-fs (loop1): Block reservation details [ 78.843426][ T5102] EXT4-fs (loop1): i_reserved_data_blocks=2000 [ 78.900530][ T5115] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 78.919993][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.929997][ T29] audit: type=1400 audit(1762917899.263:1563): avc: denied { shutdown } for pid=5112 comm="syz.5.517" lport=40466 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.053957][ T5121] loop0: detected capacity change from 0 to 2048 [ 79.061627][ T29] audit: type=1400 audit(1762917899.403:1564): avc: denied { mounton } for pid=5120 comm="syz.0.521" path="/file0" dev="ramfs" ino=9988 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 79.091125][ T5119] loop3: detected capacity change from 0 to 2048 [ 79.115555][ T5121] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.130262][ T5128] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.140678][ T5128] bridge0: port 3(bond1) entered blocking state [ 79.147004][ T5128] bridge0: port 3(bond1) entered disabled state [ 79.153759][ T5128] bond1: entered allmulticast mode [ 79.160848][ T5128] bond1: entered promiscuous mode [ 79.162699][ T5121] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.166432][ T5128] bridge0: port 3(bond1) entered blocking state [ 79.182959][ T5128] bridge0: port 3(bond1) entered forwarding state [ 79.185722][ T5071] loop3: p2 p3 p7 [ 79.224375][ T5119] loop3: p2 p3 p7 [ 79.230015][ T5121] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.277811][ T29] audit: type=1326 audit(1762917899.613:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5118 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e7296f6c9 code=0x7ffc0000 [ 79.362724][ T5121] loop0: detected capacity change from 0 to 1024 [ 79.369839][ T5121] EXT4-fs: Ignoring removed bh option [ 79.376882][ T5121] EXT4-fs: inline encryption not supported [ 79.384743][ T5121] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 79.407602][ T5121] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 79.412571][ T3523] udevd[3523]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 79.434920][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 79.436735][ T5071] udevd[5071]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 79.459315][ T5121] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.521: lblock 2 mapped to illegal pblock 2 (length 1) [ 79.469171][ T5071] udevd[5071]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 79.475192][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 79.485518][ T3523] udevd[3523]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 79.506793][ T5121] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.521: lblock 0 mapped to illegal pblock 48 (length 1) [ 79.538128][ T5121] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.521: Failed to acquire dquot type 0 [ 79.556242][ T5121] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 79.567937][ T5121] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.521: mark_inode_dirty error [ 79.582103][ T5121] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 79.601951][ T5121] EXT4-fs (loop0): 1 orphan inode deleted [ 79.608604][ T5121] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.621490][ T3448] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 79.636503][ T3448] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:7: Failed to release dquot type 0 [ 79.649301][ T5121] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.659587][ T5121] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz.0.521: Invalid inode table block 1 in block_group 0 [ 79.672653][ T5121] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 79.682543][ T5121] EXT4-fs error (device loop0): ext4_quota_off:7229: inode #3: comm syz.0.521: mark_inode_dirty error [ 79.719351][ T5149] loop3: detected capacity change from 0 to 512 [ 79.728365][ T5149] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.529: iget: bad i_size value: 38620345925642 [ 79.742818][ T5149] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.529: couldn't read orphan inode 15 (err -117) [ 79.765107][ T5149] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.798724][ T5157] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 79.842866][ T5149] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.529: bg 0: block 5: invalid block bitmap [ 79.856190][ T5149] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1536 with error 28 [ 79.868693][ T5149] EXT4-fs (loop3): This should not happen!! Data will be lost [ 79.868693][ T5149] [ 79.878580][ T5149] EXT4-fs (loop3): Total free blocks count 0 [ 79.884715][ T5149] EXT4-fs (loop3): Free/Dirty block details [ 79.891111][ T5149] EXT4-fs (loop3): free_blocks=0 [ 79.896342][ T5149] EXT4-fs (loop3): dirty_blocks=1540 [ 79.901720][ T5149] EXT4-fs (loop3): Block reservation details [ 79.907989][ T5149] EXT4-fs (loop3): i_reserved_data_blocks=1540 [ 79.915245][ T3448] bridge0: port 3(bond1) entered disabled state [ 79.949329][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.052196][ T5174] xt_hashlimit: max too large, truncated to 1048576 [ 80.059672][ T5174] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 80.070341][ T5175] ip6gretap0: entered promiscuous mode [ 80.075887][ T5174] netlink: 'syz.1.537': attribute type 10 has an invalid length. [ 80.075905][ T5174] netlink: 40 bytes leftover after parsing attributes in process `syz.1.537'. [ 80.119371][ T5175] ip6gretap0: left promiscuous mode [ 80.133168][ T5183] loop1: detected capacity change from 0 to 512 [ 80.159293][ T5182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.540'. [ 80.172876][ T5183] ext4: Unknown parameter 'smackfshat' [ 80.193025][ T5188] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 80.214748][ T5174] batman_adv: batadv0: Adding interface: veth1_vlan [ 80.221710][ T5174] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.222427][ T5189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.540'. [ 80.251895][ T5174] batman_adv: batadv0: Interface activated: veth1_vlan [ 80.284237][ T5193] netlink: 3 bytes leftover after parsing attributes in process `syz.3.543'. [ 80.297772][ T5193] 0ªX¹¦À: renamed from caif0 [ 80.305989][ T5185] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12) [ 80.314246][ T5185] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 80.322803][ T5185] vhci_hcd vhci_hcd.0: Device attached [ 80.328773][ T5193] 0ªX¹¦À: entered allmulticast mode [ 80.334098][ T5193] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 80.348825][ T5194] vhci_hcd: connection closed [ 80.350182][ T52] vhci_hcd: stop threads [ 80.359226][ T52] vhci_hcd: release socket [ 80.363968][ T52] vhci_hcd: disconnect device [ 80.391421][ T5198] loop3: detected capacity change from 0 to 512 [ 80.406485][ T5198] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.544: iget: bad i_size value: 38620345925642 [ 80.423200][ T5198] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.544: couldn't read orphan inode 15 (err -117) [ 80.436870][ T5198] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.446460][ T5189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.540'. [ 80.461624][ T5201] netlink: 3 bytes leftover after parsing attributes in process `syz.1.545'. [ 80.483146][ T5201] 0ªX¹¦À: renamed from caif0 [ 80.487816][ T5201] FAULT_INJECTION: forcing a failure. [ 80.487816][ T5201] name failslab, interval 1, probability 0, space 0, times 0 [ 80.500816][ T5201] CPU: 0 UID: 0 PID: 5201 Comm: syz.1.545 Not tainted syzkaller #0 PREEMPT(voluntary) [ 80.500895][ T5201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 80.500913][ T5201] Call Trace: [ 80.500920][ T5201] [ 80.500936][ T5201] __dump_stack+0x1d/0x30 [ 80.500974][ T5201] dump_stack_lvl+0xe8/0x140 [ 80.501003][ T5201] dump_stack+0x15/0x1b [ 80.501027][ T5201] should_fail_ex+0x265/0x280 [ 80.501115][ T5201] should_failslab+0x8c/0xb0 [ 80.501296][ T5201] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 80.501373][ T5201] ? kstrdup_const+0x3e/0x50 [ 80.501399][ T5201] ? _printk+0x79/0xa0 [ 80.501431][ T5201] kstrdup+0x3e/0xd0 [ 80.501516][ T5201] kstrdup_const+0x3e/0x50 [ 80.501580][ T5201] kernfs_rename_ns+0x22c/0x410 [ 80.501605][ T5201] sysfs_rename_link_ns+0xfc/0x120 [ 80.501644][ T5201] device_rename+0xd2/0x180 [ 80.501667][ T5201] netif_change_name+0x1eb/0x6b0 [ 80.501692][ T5201] ? __rcu_read_unlock+0x4f/0x70 [ 80.501726][ T5201] ? xfd_validate_state+0x45/0xf0 [ 80.501756][ T5201] ? nla_strscpy+0xec/0x120 [ 80.501794][ T5201] do_setlink+0x80b/0x2810 [ 80.501822][ T5201] ? __schedule+0x6b9/0xb30 [ 80.501852][ T5201] ? __list_del_entry_valid_or_report+0x65/0x130 [ 80.501914][ T5201] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 80.501952][ T5201] ? __mutex_lock+0x25d/0xcc0 [ 80.502042][ T5201] rtnl_setlink+0x311/0x420 [ 80.502154][ T5201] ? selinux_capable+0x31/0x40 [ 80.502186][ T5201] ? security_capable+0x83/0x90 [ 80.502262][ T5201] ? ns_capable+0x7d/0xb0 [ 80.502287][ T5201] ? __pfx_rtnl_setlink+0x10/0x10 [ 80.502311][ T5201] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 80.502370][ T5201] netlink_rcv_skb+0x123/0x220 [ 80.502487][ T5201] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 80.502569][ T5201] rtnetlink_rcv+0x1c/0x30 [ 80.502595][ T5201] netlink_unicast+0x5c0/0x690 [ 80.502639][ T5201] netlink_sendmsg+0x58b/0x6b0 [ 80.502724][ T5201] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.502751][ T5201] __sock_sendmsg+0x145/0x180 [ 80.502777][ T5201] sock_write_iter+0x1a7/0x1f0 [ 80.502811][ T5201] do_iter_readv_writev+0x4a1/0x540 [ 80.502894][ T5201] vfs_writev+0x2df/0x8b0 [ 80.502939][ T5201] do_writev+0xe7/0x210 [ 80.502978][ T5201] __x64_sys_writev+0x45/0x50 [ 80.503007][ T5201] x64_sys_call+0x1e9a/0x3000 [ 80.503065][ T5201] do_syscall_64+0xd2/0x200 [ 80.503085][ T5201] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 80.503113][ T5201] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 80.503155][ T5201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.503208][ T5201] RIP: 0033:0x7f804441f6c9 [ 80.503225][ T5201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.503244][ T5201] RSP: 002b:00007f8042e7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 80.503263][ T5201] RAX: ffffffffffffffda RBX: 00007f8044675fa0 RCX: 00007f804441f6c9 [ 80.503275][ T5201] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 80.503372][ T5201] RBP: 00007f8042e7f090 R08: 0000000000000000 R09: 0000000000000000 [ 80.503389][ T5201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.503406][ T5201] R13: 00007f8044676038 R14: 00007f8044675fa0 R15: 00007ffd60d03978 [ 80.503428][ T5201] [ 80.873520][ T5198] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.544: bg 0: block 5: invalid block bitmap [ 80.895975][ T5198] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1976 with error 28 [ 80.908516][ T5198] EXT4-fs (loop3): This should not happen!! Data will be lost [ 80.908516][ T5198] [ 80.918549][ T5198] EXT4-fs (loop3): Total free blocks count 0 [ 80.924584][ T5198] EXT4-fs (loop3): Free/Dirty block details [ 80.930525][ T5198] EXT4-fs (loop3): free_blocks=0 [ 80.935547][ T5198] EXT4-fs (loop3): dirty_blocks=1980 [ 80.940948][ T5198] EXT4-fs (loop3): Block reservation details [ 80.946986][ T5198] EXT4-fs (loop3): i_reserved_data_blocks=1980 [ 80.967419][ T5207] loop1: detected capacity change from 0 to 1024 [ 80.977722][ T3306] ================================================================== [ 80.979041][ T5207] EXT4-fs: inline encryption not supported [ 80.985961][ T3306] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod [ 80.986012][ T3306] [ 80.986020][ T3306] write to 0xffff8881035e725c of 4 bytes by task 3523 on cpu 0: [ 80.994711][ T5207] EXT4-fs: Ignoring removed bh option [ 80.998762][ T3306] shmem_mknod+0x137/0x180 [ 81.018683][ T3306] shmem_create+0x34/0x50 [ 81.023300][ T3306] path_openat+0x1105/0x2170 [ 81.028285][ T3306] do_filp_open+0x109/0x230 [ 81.032907][ T3306] do_sys_openat2+0xa6/0x110 [ 81.037531][ T3306] __x64_sys_openat+0xf2/0x120 [ 81.043798][ T3306] x64_sys_call+0x2eab/0x3000 [ 81.048504][ T3306] do_syscall_64+0xd2/0x200 [ 81.053033][ T3306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.060271][ T3306] [ 81.064246][ T3306] read to 0xffff8881035e725c of 4 bytes by task 3306 on cpu 1: [ 81.074250][ T3306] fill_mg_cmtime+0x5b/0x260 [ 81.079942][ T3306] generic_fillattr+0x24a/0x340 [ 81.084843][ T3306] shmem_getattr+0x181/0x200 [ 81.089464][ T3306] vfs_getattr_nosec+0x146/0x1e0 [ 81.094439][ T3306] vfs_statx+0x113/0x390 [ 81.098826][ T3306] vfs_fstatat+0x115/0x170 [ 81.103277][ T3306] __se_sys_newfstatat+0x55/0x260 [ 81.108415][ T3306] __x64_sys_newfstatat+0x55/0x70 [ 81.113469][ T3306] x64_sys_call+0x135a/0x3000 [ 81.118169][ T3306] do_syscall_64+0xd2/0x200 [ 81.122714][ T3306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.128619][ T3306] [ 81.130949][ T3306] value changed: 0x13550f56 -> 0x135da5f6 [ 81.136669][ T3306] [ 81.139003][ T3306] Reported by Kernel Concurrency Sanitizer on: [ 81.145245][ T3306] CPU: 1 UID: 0 PID: 3306 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 81.154536][ T3306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 81.164891][ T3306] ================================================================== [ 81.173544][ T5207] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 81.214163][ T5207] bridge: RTM_NEWNEIGH with invalid ether address [ 81.231199][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.