last executing test programs: 3m44.807486175s ago: executing program 4 (id=1088): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) socket(0x1e, 0x80004, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18) io_destroy(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) uname(&(0x7f0000000080)=""/31) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) recvmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 3m44.687641887s ago: executing program 4 (id=1090): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000000)=ANY=[], 0x3, 0x7bf, &(0x7f0000000d80)="$eJzs3U1sHPXZAPBnHDsEI0UR76sURSFMApWCFMx6DaYWB1jWY2dgvWvtrqtEVUUj4iArDiAoaskFokrQVq2qnnqkXLn11qpSK/XQ9lSpHHrpDYlTRaV+iQpVcjWzu47t+It8OND8fivvf3bmmfk/Mx7Ps7PenQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIJL6dKUynkQjby6cSbdWn2635raZPljer9c16zy9rt+IpPiJAwfik3/0xv3/1cmHi7sTcbT36GgcKJoDcfmew4ee/L/hocH82yR0vY7vMi6JeKtI6uK55eXFV29BInvo+7/8zLP8e6W4n82aeSfyudpsluadVjo1OVl59PRMJ53JG1nnbKebzaX1dlbrttrpyfrD6fjU1ESajZ1tLTRnp2uNbDDyiUeqlcpk+uzYfFZrd1rNR5+NTv103mjkzdkyplr5VhQxTxQ74nN5N+1mtbk0vbC0vDixU6pF0PhmE/b19p+jDx366PUP/760WOyQWy0k6e+Y1fHxanV88vGpx5+oVIarler6EZUNYjUihiKKiFuy0/IFcnMP4HADhvr1PxqRRzMW4kykm9xGoh7T0Y5WzBWP/zRyTUTfoP5/+dG//mG7ftfW/0GVv+/q5CNR1v9jvUfHtqr/m+a6l7fX4o24HBfjXCzHcizGq7c9ox1uQze6hGTdo9nIohl5dKIVecxFrRyT9sekMRWTMRmVeD5Ox0x0Io2ZyKMRWXTibHSiG1m5R9WjHVnUohutaEcaJ6MeD0ca4zEVUzERaWQxFmejFQvRjNmYjlq5lAuxVG73iQ1ZHr47fvHiHz96txheDRrfbrWKJ3NF0N+2Cbqm3G9b/1dWiucLGyPU/zvA/u0m3oKjOFyflUH9BwAAAP5nJeWr78X5/0jcXw7N5I3sa7c7LQAAAOAmKv/zf7RoRoqh+yMpzv8rm0R+sOe5AQAAADdHUn7GLomI0XigN3QhluKtWIzNXgSIiEN7nSIAAABwg8r//x8rmtGIN8sRg8ulbHH+DwAAAHzRfHera+x/OLjGbmf+ruRXIxExklyZP/NQcqlWxNUu7evN12++urrE7syR5GB/IWUzOXz5niQihuvZ0WRw9cv/3NVrPy7vjwyvzr7Vtf6TdnvbBGL7BMpH8YM43os5fr5s7unPMpz0ehmdyRvZWL3VeLK8JGLx0339paVvRxS9f685dzCJC0vLi2MvvLx8vszlSjH7lUv9Cyhecx3FbXJZ6W+BuH/zNR4pP4jR73e0129l7foP9WYf2r7PZG2fb8eJXsyJ0V47OpjS6/NA0ef42JPjUasdHOpmZ7qvr6xZ+34W46trPnJda/52PNiLefDkg71mkyyq67J46dosqmu3/+62xa6zePf4m2f+9dtWkk3slMXEZ8hiZV/ExiwAbpcL5VV/rlahu8sq9OlKT1H/e3W3KFa1XkDfLo61/7zay+qzjMH8a2rdcGys7kOrB8bdVfeV6B3RT/ZiTvaeTwwf2aSuVDY5or+y9Mrv+kf0x97/yU+/fuz3Pyv7va7q9n483IvpN3Hvb7aoscU6/3BDVX2vmOO9LfvtNKpJXInY981Lr8Th1964/MjSpXMvLr64+FK1OjFZeaxSeby6vx87Uj5j2CZTAO5cO3/HzpYRgzqTPLbhrDrOr6+7966+pWAsXoiXYznOx6ny0wYR8cDm/Y6ueRvCqR3OWkfXfMPLqR3OLa/GVq+NTWKL2Ik1W+xLPy6bT27JrwMA9sSJHerwNvV/9ZX5Uzucd6+v5RvOjmPrWr6Zr9zSrQEAd4as/XEy2n0nabfz+efHp6bGa93TWdpu1Z9L2/n0bJbmzW7Wrp+uNWezdL7d6rbqgxeOp7NO2lmYn2+1u+lMq53GUCc/U37ze9r/6vdONldrdvN6Z76R1TpZWm81u7V6N53OO/V0fuGZRt45nbXLmTvzWT2fyeu1bt5qpp3WQruejaVpJ8vWBObTWbObz+TFYDOdb+dztfaViGgszGXpdNapt/P5bqu3wEFfeXOm1Z4rFzt27er/Za+3NwB8Hrz2xuWL55aXF1+9voE/7yb4dq8jALCeKg0AAAAAAAAAAAAAAJ9/q+//PzQYKMbewCcCP9vAXXHLu7hjB4pf5Ocgjds78I2nnrq4Vcwzb953enfLid1+UjbeORix/+c/6o15euvg7/T//m7Omn4QEdcx+0qyyaRPV3oD6w4T+/f+yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1/pvAAAA//9Inly9") inotify_add_watch(0xffffffffffffffff, 0x0, 0x10000404) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x200000000000002c, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) listen(r1, 0x4) close_range(0xffffffffffffffff, r1, 0x0) 3m44.647191907s ago: executing program 4 (id=1091): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file7\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') openat(r3, &(0x7f0000000700)='./file0/../file0\x00', 0x515a02, 0x52abe154ad664f64) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 3m44.591861808s ago: executing program 4 (id=1092): socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x3, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1}, 0x100c, 0x0, 0x2, 0x0, 0x0, 0xf, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x60842, 0xc) pwritev2(r0, 0x0, 0x0, 0xe7b, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x808, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7fff, 0x7, 0x1}, 0x0, 0xfffff7ffffffffff, r0, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000d00"], 0x0, 0x26, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)) socket$kcm(0x1e, 0x5, 0x0) socket$kcm(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 3m44.366912751s ago: executing program 4 (id=1097): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x5a) 3m44.018231036s ago: executing program 4 (id=1099): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xa5be, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1, 0x0, 0x40}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4, 0x0, 0x5}, 0x18) mkdir(&(0x7f00000005c0)='./bus\x00', 0x1) (fail_nth: 6) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x7c) 3m28.638462117s ago: executing program 32 (id=1099): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xa5be, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1, 0x0, 0x40}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4, 0x0, 0x5}, 0x18) mkdir(&(0x7f00000005c0)='./bus\x00', 0x1) (fail_nth: 6) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x7c) 2m28.384568191s ago: executing program 1 (id=1785): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) io_setup(0x400, &(0x7f0000001080)=0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_submit(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) socket(0x1e, 0x80004, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18) io_destroy(0x0) gettid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001840)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x5, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x4}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffc0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff2, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xe6, 0xffffffff, 0x7f, 0x9, 0xb8, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0xb, 0x0, 0x0, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x80000002, 0x0, 0x1000, 0x1, 0x3, 0x7, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x8, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x6, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x7, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x40, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x0, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x0, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x5, 0x5, 0x4, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x7, 0x2, 0x0, 0x6ee1847d, 0x10003, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x8, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x80008, 0x0, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x8006, 0x2, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x40, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000000, 0xd, 0x7, 0x5, 0x2, 0x4]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x4000000) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) uname(&(0x7f0000000080)=""/31) r4 = socket(0x40000000015, 0x5, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) 2m28.248813813s ago: executing program 1 (id=1787): bpf$PROG_LOAD(0x5, 0x0, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r0, 0x0, 0x0) 2m28.202652763s ago: executing program 1 (id=1788): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000800), 0x20040, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000b00)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) r5 = socket$inet6(0xa, 0x80002, 0x88) recvmsg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x22) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001d80)=ANY=[@ANYRES8=r2, @ANYRESOCT=r4, @ANYBLOB="3028d07aac7b27108373b65adbdd34799f87ad231580c4c3fbf28a59c1d1071707fd3137010c6adbeef23567d2bb724a6f416fccb8ff1f9d4fffb92707979d5e259cdce0a6063e0b95a49e9f520819345ef1027a4342476aab605bd09f3b3dbab0160cb2af85e789f8443d7bfe9cd2258d31a1c9c97cd170fbbde255f4fdd7e04277c21cb9e786886f9a82c7fce74b96a8f546abe7ce3cb2fef2bcaa016a168d6e84669ba9d135086d1c1b1b5a47a1b9ee5eecb10f", @ANYRESDEC=r3, @ANYRESOCT=r5, @ANYBLOB="8220c4ba9d49a921146ebb5a908489c9384fe33c2003208ea51b4f3eafea51b5e3538987e5c0c9210e6c5ef7f7c2c955dd25aeb15ca7cd3b90d87570258baed976c447e82bdfc5333dd3f0952bf489bc404e0d71ed0dccba1c0b761d57545502137065c6f38d7c69d1cb8cf926b271d6461975697921456560305e3c17ca4152"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r7}, 0x18) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000740)={'syztnl2\x00', 0x0, 0x92a43c6ee2a7303, 0x2, 0x2d, 0xf3d, 0x28, @private0, @remote, 0x1, 0x20, 0xdaf, 0x40}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0x20, &(0x7f00000008c0)={&(0x7f00000007c0)=""/8, 0x8, 0x0, &(0x7f0000000a00)=""/4096, 0x1000}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x13, 0x1a, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@generic={0x7, 0x5, 0x8, 0x10, 0x1}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffa}, @map_val={0x18, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @ldst={0x3, 0x1, 0x6, 0x7, 0x9, 0x30}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x8, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x400}, @jmp={0x5, 0x1, 0x1, 0x5, 0x0, 0x50, 0x8}, @map_fd={0x18, 0xa, 0x1, 0x0, r8}, @map_fd={0x18, 0xb, 0x1, 0x0, r9}]}, &(0x7f00000001c0)='GPL\x00', 0x1, 0x30, &(0x7f0000000200)=""/48, 0x41000, 0x60, '\x00', r10, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x2, 0x10, 0x80000001, 0x96b62010}, 0x10, r11, r7, 0x5, &(0x7f0000000940)=[r1], &(0x7f0000001a00)=[{0x0, 0x3, 0x8, 0x1}, {0x2, 0x2, 0xe, 0x6}, {0x5, 0x3, 0xe, 0xc}, {0x1, 0x1, 0x2, 0x1}, {0x2, 0x4, 0x7, 0x9}], 0x10, 0x80, @void, @value}, 0x94) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 2m27.289298516s ago: executing program 1 (id=1793): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file1\x00', 0x1004081, &(0x7f0000000380)=ANY=[], 0x2, 0x81c, &(0x7f0000001540)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_clone(0x44066000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4004040) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r4, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 2m26.96501159s ago: executing program 1 (id=1797): r0 = socket$inet6(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000004c0)={[{@acl}, {@barrier}, {@barrier_val}, {@sysvgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x587, &(0x7f0000002100)="$eJzs3U1rG9caAOB3ZMn5cO6NAyHcexeXQBZNSSPHdj9SKDRdljY00O5TYSsmWI6CJYfYDTRZNJtuSiiU0kDpD+i+y9A/0F8RaAOhBNMuSkFl5JGt2JIdOzJSoueBSc6ZD595feY9PqORUABD62T6Ty7ivxHxVRJxtG1bPrKNJ9f2W31yayZdkmg0Pv49iSRb19o/yf4fyyr/iYifv4g4k9vabm15Zb5UqZQXs/pEfeH6RG155ezVhdJcea58bWp6+vwb01Nvv/Vmz2J99dKf33704P3zX55a/ebHR8fuJXEhjmTb2uN4DrfbKydLf2elQlzYtONkDxobJEm/T4A9GcnyvBDpGHA0RrKsB15+n0dEY02uAQyZpJn/YxvjADAkWvOA1r19j+6DXxiP31u7AWrGPtoef37ttZE42Lw3OryaPHVnlN7vjveg/bSNn367fy9dYvvXIQ7tUAfYldt3IuJcPr91/E+y8W/vzjVfPN7e5jaG7e8P9NODdP7zWqf5X259/hMd5j9jHXJ3L3bO/9yjHjTTVTr/e6fj/Hd96BofyWr/as75CsmVq5XyuYj4d0ScjsKBtL7d85zzqw8b3ba1z//SJW2/NRfMzuNR/sDTx8yW6qWIGH2euFse34n4X75T/Ml6/ycd+j/9fVzq+BMLW9acKN//f7f2d45/fzV+iHilY/9vPNFKtn8+OdG8HiZaV8VWf9w98Uu39vsdf9r/h7ePfzxpf15b230b3x/8q9xt216v/9Hkk2a5lQQ3S/X64mTEaPJhs36wff3UxrGtemv/NP7Tp7Yf/zpd/+nN16fPGP/d43e77joI/T+7q/7ffeHhB5991639Z+v/15ul09mabPzrLLtWnvUEn/f3BwAAAAAAAIMkFxFHIskV18u5XLG49v6O43E4V6nW6meuVJeuzUbzs7LjUci1nnQfbXs/xGT2fthWfWpTfToijkXE1yOHmvXiTLUy2+/gAQAAAAAAAAAAAAAAAAAAYECMdfn8f+rXkX6fHbDvml9scKDfZwH0w45f+d+Lb3oCBtKO+Q+8tOQ/DC/5D8NL/sPwkv8wvOQ/DC/5D8NL/gMAAAAAAAAAAAAAAAAAAAAAAAAAAEBPXbp4MV0aq09uzaT12RvLS/PVG2dny7X54sLSTHGmuni9OFetzlXKxZnqwk4/r1KtXp+ciqWbE/VyrT5RW165vFBdula/fHWhNFe+XC5s7Jrb38gAAAAAAAAAAAAAAAAAAADgxVFbXpkvVSrlRYWuhXdjIE5jPwNcs6fD84MShUKXwp2se3d3VB8HJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY5J8AAAD//9ybLZI=") chdir(&(0x7f0000000100)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) link(&(0x7f0000000440)='./file0\x00', 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newlink={0x58, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x50483}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @gre={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4}, @IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x8dd00}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000008c0)={0x1d4, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xfc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}]}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5a}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x53}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdbc4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff75e0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4800}, 0x20000090) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 2m26.728454994s ago: executing program 1 (id=1798): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) io_setup(0x400, &(0x7f0000001080)=0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_submit(r1, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) socket(0x1e, 0x80004, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18) io_destroy(0x0) gettid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001840)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x5, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x4}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffc0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff2, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xe6, 0xffffffff, 0x7f, 0x9, 0xb8, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0xb, 0x0, 0x0, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x80000002, 0x0, 0x1000, 0x1, 0x3, 0x7, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x8, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x6, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x7, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x40, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x0, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x0, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x5, 0x5, 0x4, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x7, 0x2, 0x0, 0x6ee1847d, 0x10003, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x8, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x80008, 0x0, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x8006, 0x2, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x40, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000000, 0xd, 0x7, 0x5, 0x2, 0x4]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x4000000) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) uname(&(0x7f0000000080)=""/31) r4 = socket(0x40000000015, 0x5, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) 2m26.726236854s ago: executing program 33 (id=1798): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) io_setup(0x400, &(0x7f0000001080)=0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_submit(r1, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) socket(0x1e, 0x80004, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18) io_destroy(0x0) gettid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001840)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x5, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x4}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffc0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff2, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xe6, 0xffffffff, 0x7f, 0x9, 0xb8, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0xb, 0x0, 0x0, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x80000002, 0x0, 0x1000, 0x1, 0x3, 0x7, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x8, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x6, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x7, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x40, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x0, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x0, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x5, 0x5, 0x4, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x7, 0x2, 0x0, 0x6ee1847d, 0x10003, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x8, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x80008, 0x0, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x8006, 0x2, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x40, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000000, 0xd, 0x7, 0x5, 0x2, 0x4]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x4000000) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) uname(&(0x7f0000000080)=""/31) r4 = socket(0x40000000015, 0x5, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) 1.715788957s ago: executing program 3 (id=3632): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0x5, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000233b43f6a312f83c00", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f00000001c0), 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x380006, @loopback, 0x100}, 0x1c) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = fcntl$dupfd(r5, 0x406, r5) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0x8000000}, 0x18) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00000014000100fffffffbffdbdf250a00a100", @ANYRES32=r12, @ANYBLOB="1400010000000000000000000000000000000001"], 0x2c}}, 0x24005040) (async) writev(r7, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) 1.542604939s ago: executing program 3 (id=3642): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbb3811404fc85461b978dfda78df4bbbbb0800450000380000000000019078ac1e0001ac1414aa030490781200183f2500000000680000000100007f00"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.449111191s ago: executing program 3 (id=3645): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="1800000006000000e4650000060000000700000005512e0002000000ebac0814"], &(0x7f0000000380), 0x1000) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b", 0x17}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648daf351a32ad5ea7e5599da7a5b3d468381d8ff50420", 0x24}], 0x2) 1.345638532s ago: executing program 3 (id=3648): socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x3, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1}, 0x100c, 0x0, 0x2, 0x0, 0x0, 0xf, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x60842, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000d00"], 0x0, 0x26, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)) socket$kcm(0x1e, 0x5, 0x0) socket$kcm(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 1.281066583s ago: executing program 3 (id=3649): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000010018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)}}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) mq_notify(0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x6}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x1c, 0x1b, &(0x7f00000012c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x31}, [@exit, @btf_id={0x18, 0xf, 0x3, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='syzkaller\x00', 0x6, 0x39, &(0x7f0000000240)=""/57, 0x41100, 0x28, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x4, 0x0, 0x44, 0xa51}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000001440)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], 0x0, 0x10, 0xffff0001, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000000), 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r3, 0xa, 0x13) fcntl$setlease(r3, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 1.144264125s ago: executing program 2 (id=3653): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x80000000000}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x80800, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x8040) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r2, &(0x7f0000000140)='./file1\x00', r2, &(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000580)={'erspan0\x00', 0x0, 0x10, 0x7800, 0x1, 0x5, {{0xa, 0x4, 0x3, 0x15, 0x28, 0x65, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast, {[@ssrr={0x89, 0x13, 0x75, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @empty]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x5, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f00000007c0)="$eJzs3b9rO2UYAPDn0jQJOiSCkwge6OD05dvv6pIiLRQzKRnUQYttQZogtFDwB8ZOri6Ori6C4OY/4eJ/ILgKbhYsnNzlrklqGpPatP74fJa+fe953nve69uWDvf03eeHxwdpHJ1/8lO0WknUutGNiyQ6UYvKZzGj+0UAAP9mF1kWv2Zjq+QlEdFaX1kAwBqt/Pv/u7WXBACs2RtvvvXadq+383qatmJ3+PlZP//LPv84vr59FO/HIA7jcbTjMiK7Mh7vZlk2qqe5Trw0HJ3188zhOz+U62//ElHkb0U7OsXUbP5eb2crHZvKH+V1PFXev5vnP4l2PDvn/nu9nSdz8qPfiJdfnKr/UbTjx/figxjEQVHEOD9qEZ9upemr2Ze/ffx2Xl6en4zO+s0ibiLbuOcvDQAAAAAAAAAAAAAAAAAAAAAA/2GPyt45zSj69+RTZf+djcv8k81IK53Z/jzj/KRa6Fp/oFEWX1X9eR6naZqVgZP8ejxXj/rD7BoAAAAAAAAAAAAAAAAAAAD+WU4//Oh4fzA4PLmTQdUNoHqt/7brdKdmXojFwc3JvWrlcMHKsVHFJBELy8g3sXTNv5dtD2736J65qeZvvl16na//eu/lYHOJmL85qE7X8X4y/xk2o5ppVYfk++mYRix5r8ZNl7KVjl9j7qX2yntvPF0MRgtiIllU2Cs/j59cOZNc30WjeKpz0zfLwVT6bExr+fOcf6f8SXLVrSO52x9CAAAAAAAAAAAAAAAAAABAYfLS75yL5wtTa1lzbWUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwL2a/P//FQajMnmJ4EacnD7wFgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgf+CMAAP//SfdjDw==") socket$unix(0x1, 0x5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r6 = dup(r5) write$P9_RLERRORu(r6, &(0x7f0000000500)=ANY=[@ANYBLOB='S\x00\x00\x00\a'], 0x53) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 961.102307ms ago: executing program 2 (id=3658): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="1800000006000000e4650000060000000700000005512e0002000000ebac0814"], &(0x7f0000000380), 0x1000) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b", 0x17}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648daf351a32ad5ea7e5599da7a5b3d468381d8ff50420", 0x24}], 0x2) 898.437948ms ago: executing program 0 (id=3661): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xb1}, 0x100002, 0x2, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x0, &(0x7f0000000140), 0xc1, 0x7c1, &(0x7f0000000f80)="$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") 873.160938ms ago: executing program 2 (id=3663): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r4, 0xffffffffffffffff, 0x0) 847.574609ms ago: executing program 2 (id=3665): r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r1, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x204004, &(0x7f00000004c0)={[{@dioread_nolock}, {@i_version}, {@nolazytime}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x141842, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="0001042cbd7000ffdbdf251bd6c3e7000000000165a486ecfe0bf429f8974329f0f9fde5ba26f984b2839c505cd554a24f6b8585dab5f3cef9b58d347dee1b179ab315bb5dd7d2a25c68e4337a2e1b917b169ad759b365e1cd", @ANYRES32=r5, @ANYBLOB="0822020014310000"], 0x20}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="9c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="8750a754ac0000007c0012800b000100697036746e6c00106c000280140002000000000000000000000000000000000114000200fe8000000000000000000000000000aa14000300fe8000000000000000000000000000bb08"], 0x9c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r3, 0x20, &(0x7f0000000540)={&(0x7f0000000700)=""/129, 0x81, 0x0, &(0x7f0000000800)=""/86, 0x56}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x6, 0x9, &(0x7f0000001000)=ANY=[@ANYBLOB="18110000", @ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000000300)='syzkaller\x00', 0xd6, 0x1000, &(0x7f00000029c0)=""/4096, 0xc3200, 0x4, '\x00', r5, @fallback=0x18, r3, 0x8, &(0x7f00000003c0)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, r7, r2, 0x6, 0x0, &(0x7f0000000880)=[{0x0, 0x2, 0x3, 0x9}, {0x5, 0x2, 0x3, 0x8}, {0x1, 0x5, 0x9}, {0x1, 0x5, 0x4}, {0x5, 0x4, 0xe, 0x2}, {0x2, 0x2, 0x6, 0x1}], 0x10, 0x6, @void, @value}, 0x94) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYRESOCT=r3], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r9, 0x0, 0x100000000}, 0x18) pwrite64(r3, &(0x7f00000007c0)='c', 0xfdef, 0xfecc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./file0\x00', r2}, 0x18) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b80)=@security={'security\x00', 0xe, 0x4, 0x3f8, 0xffffffff, 0x0, 0xd0, 0x0, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xfffffff7, 0x7ff}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x1, 0x1, 0x1, [0x11, 0x400, 0x0, 0x7, 0x4, 0x1, 0x4, 0x2, 0x9, 0x700, 0xd7a, 0xfffe, 0x1, 0x400, 0x4, 0x800], 0x10}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48}, {0x7, 0x0, 0x0, [0x7, 0x48e0, 0x8, 0xce0, 0x7, 0x1, 0x4, 0x0, 0x0, 0x5, 0x9, 0x6, 0x4, 0x7, 0x7, 0x7], 0x5}}, @common=@mh={{0x28}, {"8ec3", 0x1}}]}, @common=@unspec=@AUDIT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, r3, 0x1, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$TCSBRKP(r3, 0x5425, 0x5) 806.253199ms ago: executing program 0 (id=3666): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="68ad23b10b69581a", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = syz_open_dev$usbfs(&(0x7f0000000280), 0x813, 0x10000) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x8008551d, &(0x7f0000000300)=ANY=[@ANYBLOB="dcd70000100000000c00080084010f0a89838080810e8904"]) r7 = open$dir(&(0x7f0000000500)='./file0\x00', 0x101000, 0x110) fchmodat(r7, &(0x7f0000000680)='./file0\x00', 0x20) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000400)='udp_fail_queue_rcv_skb\x00', r4, 0x0, 0x8}, 0xfffffffffffffd1f) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0xb, 0x0, 0x7fff, 0x6}, {0xff, 0x0, 0x18}, 0x0, 0x1}}, @TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1ff, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0xffffdfff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x5e, 0xfffffffc, 0x8, 0x0, 0xfffffffd, 0x400000, 0x3, 0x100, 0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb484, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xf20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x3fe, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x2509, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd]}]}}]}, 0x45c}}, 0x0) recvmsg$can_j1939(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000700)=""/245, 0xf5}, {&(0x7f0000000540)=""/118, 0x76}, {&(0x7f0000000900)=""/4096, 0x1000}], 0x3, &(0x7f0000001900)=""/4096, 0x1000}, 0x10022) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f00000004c0)=ANY=[@ANYRES8=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0xfffffd6b, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r14, 0x26, &(0x7f0000000000)) 652.860391ms ago: executing program 0 (id=3668): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x4ab}, 0x18) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb57ae0fffc5a2a630b00c145", 0x18, 0xffffffffffffffff) 644.981692ms ago: executing program 0 (id=3669): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@block_validity}, {@dioread_lock}, {@usrquota}, {@abort}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400d0e200", 0x7}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r2, 0x0, 0x0, 0x400000000000000) 547.714123ms ago: executing program 0 (id=3672): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) io_setup(0x400, &(0x7f0000001080)=0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) socket(0x1e, 0x80004, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18) io_destroy(0x0) gettid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001840)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x5, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x4}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffc0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff2, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xe6, 0xffffffff, 0x7f, 0x9, 0xb8, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0xb, 0x0, 0x0, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x80000002, 0x0, 0x1000, 0x1, 0x3, 0x7, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x8, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x6, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x7, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x40, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x0, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x0, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x5, 0x5, 0x4, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x7, 0x2, 0x0, 0x6ee1847d, 0x10003, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x8, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x80008, 0x0, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x8006, 0x2, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x40, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000000, 0xd, 0x7, 0x5, 0x2, 0x4]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x4000000) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) uname(&(0x7f0000000080)=""/31) r5 = socket(0x40000000015, 0x5, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg(r5, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) 529.058053ms ago: executing program 2 (id=3674): r0 = io_uring_setup(0x60f7, &(0x7f0000000400)={0x0, 0x39bd, 0x2, 0xfffffbff, 0x3c0}) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x200000000000002c, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) listen(r1, 0x4) close_range(r0, r1, 0x0) 489.053924ms ago: executing program 2 (id=3677): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@block_validity}, {@dioread_lock}, {@usrquota}, {@abort}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400d0e200", 0x7}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfe000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x5}, 0x18) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x444, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRES8], 0xfe, 0x68f, &(0x7f0000000c00)="$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") r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r3, &(0x7f0000000000)='./file0\x00', 0x5) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r4, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4) accept4(r4, 0x0, 0x0, 0x400000000000000) 449.116244ms ago: executing program 0 (id=3679): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000010018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x6}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x1c, 0x1b, &(0x7f00000012c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x31}, [@exit, @btf_id={0x18, 0xf, 0x3, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='syzkaller\x00', 0x6, 0x39, &(0x7f0000000240)=""/57, 0x41100, 0x28, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x4, 0x0, 0x44, 0xa51}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000001440)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], 0x0, 0x10, 0xffff0001, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000000), 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r3, 0xa, 0x13) fcntl$setlease(r3, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 429.796595ms ago: executing program 3 (id=3680): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/netlink\x00') setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095", @ANYBLOB="2816602e10b666c0d32b3de97a3f139213e58f53148a09022f916ca94810cd7902a4b57775e61ee6df73a329b892ff29024604275f0416837639442e28d581fca894225a9a5701bc6bc9c4a73c8f64e08d483e2def1f1f97b72caa0bdc822282936da0d02d18b8afd530ae4d643aedad9d363dcaa1267233935a50dd29eb63c6625461d850d03d73f64a6838f523ebadb5f6353e335985a7d9f963baf8f760e9472a45f448560cdca4caa562669c3b55f3f77b0ff037e6c59fa1b72a2537f14e9787232957a086fcb235131dbe493a0b380329118e76cdce05d24e3968aca5e9b1c5449bbcf76d2e319cf5c2267aaac1a5667998081690ad"], &(0x7f0000000040)='GPL\x00', 0xa049, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000000300)={0x62, "a4395026f7fca8f411d271a8ac0352f02647be56f7af5c020d00a854bde7a3a2e42c1c5fcac45b88f2eb03642b134fd8e5b9bfd57889164508e1794a753cea7f"}) write$UHID_DESTROY(r1, &(0x7f00000001c0), 0x4) 342.848196ms ago: executing program 5 (id=3682): socket$kcm(0x10, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xff8, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x0) 331.274996ms ago: executing program 5 (id=3683): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0xc008, &(0x7f0000001140)=ANY=[@ANYRES8=0x0, @ANYBLOB="150372626c9d5f3317ad8221d37e160e79c5f6e278be2130ca7330b2", @ANYRESDEC, @ANYRES16, @ANYBLOB="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"], 0x40, 0x2f6, &(0x7f0000000e40)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000300"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000100b704000000000200850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0xe6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) 296.256986ms ago: executing program 5 (id=3684): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) sync() 260.070507ms ago: executing program 5 (id=3686): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r4, 0xffffffffffffffff, 0x0) 242.326767ms ago: executing program 5 (id=3688): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e880000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0xfffffffe, 0x13580}, &(0x7f0000000100), &(0x7f0000000280)) ppoll(&(0x7f0000000280)=[{r2, 0x1080}], 0x1, &(0x7f00000002c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'geneve1\x00'}) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x50, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) 216.257407ms ago: executing program 5 (id=3690): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000010018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)}}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) mq_notify(0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x6}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x1c, 0x1b, &(0x7f00000012c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x31}, [@exit, @btf_id={0x18, 0xf, 0x3, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='syzkaller\x00', 0x6, 0x39, &(0x7f0000000240)=""/57, 0x41100, 0x28, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x4, 0x0, 0x44, 0xa51}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000001440)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], 0x0, 0x10, 0xffff0001, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000000), 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r3, 0xa, 0x13) fcntl$setlease(r3, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 146.821248ms ago: executing program 6 (id=3691): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x4ab}, 0x18) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb57ae0fffc5a2a630b00c145", 0x18, 0xffffffffffffffff) 136.215448ms ago: executing program 6 (id=3692): syz_emit_ethernet(0x5e, &(0x7f0000000440)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xf, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x34}, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@empty}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x3ffc}]}, @ssrr={0x89, 0xf, 0xce, [@broadcast, @multicast1, @empty]}, @generic={0x83, 0x2}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x1}}}}}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x8}, 0x1901, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000008000/0x4000)=nil) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2005, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000cafcf7dad2377407020000f8ffffffb703000008000000b7040000000000008500"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r2 = socket$inet(0x2, 0x2000000080002, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x100) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000500)={0xa2e3, {{0x2, 0x4e24, @empty}}}, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000004c0)={r4, 0x6e0, 0x20, 0x9, 0x6}, &(0x7f00000005c0)=0x18) r5 = socket(0x21, 0x6, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$sock_inet_SIOCSIFNETMASK(r6, 0x891c, &(0x7f0000000380)={'netdevsim0\x00', {0x2, 0x4e24, @private=0xa010101}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000740)={'erspan0\x00', &(0x7f0000000680)={'syztnl1\x00', r8, 0x7, 0x20, 0x0, 0x6, {{0x22, 0x4, 0x0, 0x8, 0x88, 0x67, 0x0, 0xf5, 0x29, 0x0, @private=0xa010100, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x69, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x27}, 0x9}, {@multicast1, 0xf039}]}, @rr={0x7, 0xf, 0xc4, [@dev={0xac, 0x14, 0x14, 0x1e}, @multicast1, @dev={0xac, 0x14, 0x14, 0xf}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xf, 0x3e, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @timestamp_addr={0x44, 0x1c, 0x3d, 0x1, 0x9, [{@empty, 0x8}, {@remote, 0x4b5}, {@rand_addr=0x64010101, 0x2}]}, @rr={0x7, 0xb, 0xde, [@rand_addr=0x64010101, @rand_addr=0x64010102]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0x2d, [@multicast1]}, @generic={0x7, 0xc, "489637265e88a7821f1d"}]}}}}}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x34, 0x24, 0x200, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r9, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4, 0x8}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640), &(0x7f0000000a00)={0x0, 0xfb, 0x114, 0x1, 0x8e, "db3cf9ee4d5161b3d9e6b4e802153cc1", "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"}, 0x114, 0x3) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000080)="95e59e9bcade10ce46026f716e9cdaa5163fc4a364", &(0x7f0000000200)=@udp=r3, 0x2}, 0x20) 82.354929ms ago: executing program 6 (id=3693): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) sync() 81.727359ms ago: executing program 6 (id=3694): socket$kcm(0x10, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xff8, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x0) 28.74251ms ago: executing program 6 (id=3695): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7], 0x38}}, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="1800000006000000e4650000060000000700000005512e0002000000ebac0814"], &(0x7f0000000380), 0x1000) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b", 0x17}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648daf351a32ad5ea7e5599da7a5b3d468381d8ff50420", 0x24}], 0x2) 0s ago: executing program 6 (id=3696): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000000)={0x2, 0xf, 0x0, 0x7, 0x8, "9afce4aeac9acbb49b00541d7d6a304eb7f873", 0xffff, 0x3}) dup3(r2, r1, 0x0) ppoll(&(0x7f0000000140)=[{r1}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x2127, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r3}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000c851, 0x0, 0x0) kernel console output (not intermixed with test programs): eft promiscuous mode [ 308.877707][T13642] 1猉功D: entered allmulticast mode [ 308.886453][T13642] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 308.925418][T13648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3219'. [ 308.962064][T13650] loop6: detected capacity change from 0 to 512 [ 308.971138][T13650] EXT4-fs (loop6): orphan cleanup on readonly fs [ 308.977821][T13650] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.3220: bad orphan inode 13 [ 308.989179][T13650] ext4_test_bit(bit=12, block=18) = 1 [ 308.994657][T13650] is_bad_inode(inode)=0 [ 309.000070][T13650] NEXT_ORPHAN(inode)=2130706432 [ 309.004980][T13650] max_ino=32 [ 309.008405][T13650] i_nlink=1 [ 309.015793][T13650] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 309.037507][T13650] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3220: bg 0: block 248: padding at end of block bitmap is not set [ 309.052451][T13650] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.3220: Failed to acquire dquot type 1 [ 309.065401][T13650] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 309.084072][T13650] netlink: 9 bytes leftover after parsing attributes in process `syz.6.3220'. [ 309.095439][T13650] 1猉功D: entered promiscuous mode [ 309.100666][T13650] 1猉功D: left allmulticast mode [ 309.111435][T13650] netlink: 5 bytes leftover after parsing attributes in process `syz.6.3220'. [ 309.122057][T13650] 0猉功D: renamed from 31猉功D [ 309.139585][T13650] 0猉功D: left promiscuous mode [ 309.144505][T13650] 0猉功D: entered allmulticast mode [ 309.151973][T13650] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 309.216192][T13666] loop6: detected capacity change from 0 to 1024 [ 309.224724][T13666] EXT4-fs: Ignoring removed nobh option [ 309.230460][T13666] EXT4-fs: Ignoring removed bh option [ 309.238792][T13664] loop3: detected capacity change from 0 to 128 [ 309.258476][T13664] lo speed is unknown, defaulting to 1000 [ 309.588504][T13673] loop3: detected capacity change from 0 to 8192 [ 309.984321][T13685] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3227'. [ 310.002230][T13684] loop2: detected capacity change from 0 to 512 [ 310.010335][T13684] EXT4-fs (loop2): orphan cleanup on readonly fs [ 310.016945][T13684] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.3231: bad orphan inode 13 [ 310.027457][T13684] ext4_test_bit(bit=12, block=18) = 1 [ 310.032903][T13684] is_bad_inode(inode)=0 [ 310.037754][T13684] NEXT_ORPHAN(inode)=2130706432 [ 310.042626][T13684] max_ino=32 [ 310.045842][T13684] i_nlink=1 [ 310.053395][T13684] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 310.074574][T13684] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3231: bg 0: block 248: padding at end of block bitmap is not set [ 310.103192][T13684] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.3231: Failed to acquire dquot type 1 [ 310.116516][T13684] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 310.135341][T13692] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3231'. [ 310.144902][T13692] 0猉功D: entered promiscuous mode [ 310.152373][T13684] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3231'. [ 310.161376][T13684] 1猉功D: renamed from 30猉功D [ 310.169541][T13684] 1猉功D: left promiscuous mode [ 310.174413][T13684] 1猉功D: entered allmulticast mode [ 310.180488][T13684] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 310.230361][T13696] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3234'. [ 310.322632][T13700] tipc: Enabled bearer , priority 0 [ 310.331332][T13699] tipc: Resetting bearer [ 310.346521][T13699] tipc: Disabling bearer [ 310.474505][T13707] loop0: detected capacity change from 0 to 8192 [ 310.533081][T13715] wg2: entered promiscuous mode [ 310.539116][T13715] wg2: entered allmulticast mode [ 311.013452][T13730] loop6: detected capacity change from 0 to 1024 [ 311.021481][T13730] EXT4-fs: Ignoring removed nobh option [ 311.027161][T13730] EXT4-fs: Ignoring removed bh option [ 311.056356][ T3594] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 311.064136][ T3594] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 311.180492][T13746] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3251'. [ 311.441415][T13750] loop3: detected capacity change from 0 to 512 [ 311.449367][T13750] EXT4-fs (loop3): orphan cleanup on readonly fs [ 311.456256][T13750] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.3253: bad orphan inode 13 [ 311.468611][T13750] ext4_test_bit(bit=12, block=18) = 1 [ 311.474145][T13750] is_bad_inode(inode)=0 [ 311.478970][T13750] NEXT_ORPHAN(inode)=2130706432 [ 311.483824][T13750] max_ino=32 [ 311.487136][T13750] i_nlink=1 [ 311.494705][T13750] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 311.508951][T13750] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 311.519178][T13750] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3253'. [ 311.528559][T13750] 1猉功D: entered promiscuous mode [ 311.533706][T13750] 1猉功D: left allmulticast mode [ 311.542101][T13750] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3253'. [ 311.551196][T13750] 0猉功D: renamed from 31猉功D [ 311.558897][T13750] 0猉功D: left promiscuous mode [ 311.563831][T13750] 0猉功D: entered allmulticast mode [ 311.572565][T13750] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 311.610673][ T29] kauditd_printk_skb: 386 callbacks suppressed [ 311.610729][ T29] audit: type=1326 audit(1747807282.248:22995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13753 comm="syz.3.3254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c196be969 code=0x7ffc0000 [ 311.641558][ T29] audit: type=1326 audit(1747807282.248:22996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13753 comm="syz.3.3254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c196be969 code=0x7ffc0000 [ 311.665420][ T29] audit: type=1326 audit(1747807282.248:22997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13753 comm="syz.3.3254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f8c196be969 code=0x7ffc0000 [ 311.689090][ T29] audit: type=1326 audit(1747807282.248:22998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13753 comm="syz.3.3254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c196be969 code=0x7ffc0000 [ 311.714044][ T29] audit: type=1326 audit(1747807282.248:22999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13753 comm="syz.3.3254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8c196be969 code=0x7ffc0000 [ 311.738911][ T29] audit: type=1326 audit(1747807282.248:23000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13753 comm="syz.3.3254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c196be969 code=0x7ffc0000 [ 311.762535][ T29] audit: type=1326 audit(1747807282.248:23001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13753 comm="syz.3.3254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f8c196be969 code=0x7ffc0000 [ 311.766398][T13756] loop5: detected capacity change from 0 to 128 [ 311.787417][ T29] audit: type=1326 audit(1747807282.248:23002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13753 comm="syz.3.3254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c196be969 code=0x7ffc0000 [ 311.787453][ T29] audit: type=1326 audit(1747807282.248:23003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13753 comm="syz.3.3254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f8c196be969 code=0x7ffc0000 [ 311.787484][ T29] audit: type=1326 audit(1747807282.248:23004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13753 comm="syz.3.3254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c196be969 code=0x7ffc0000 [ 311.870548][T13756] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 311.899825][ T48] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 312.015541][T13776] Illegal XDP return value 4294967294 on prog (id 2243) dev N/A, expect packet loss! [ 312.127126][T13782] tipc: Started in network mode [ 312.132039][T13782] tipc: Node identity be68118fbba7, cluster identity 4711 [ 312.139468][T13782] tipc: Enabled bearer , priority 0 [ 312.141086][ T3594] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 312.154553][T13781] tipc: Resetting bearer [ 312.170064][T13781] tipc: Disabling bearer [ 312.180059][T13790] loop3: detected capacity change from 0 to 128 [ 312.186097][ T3594] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 312.186844][T13790] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 312.242081][ T3501] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 312.304210][T13800] loop6: detected capacity change from 0 to 1024 [ 312.313417][T13802] loop5: detected capacity change from 0 to 512 [ 312.328201][T13800] EXT4-fs: Ignoring removed nobh option [ 312.333836][T13800] EXT4-fs: Ignoring removed bh option [ 312.384729][T13802] ext4 filesystem being mounted at /397/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.399198][T13807] FAULT_INJECTION: forcing a failure. [ 312.399198][T13807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.413669][T13807] CPU: 0 UID: 0 PID: 13807 Comm: syz.3.3277 Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(voluntary) [ 312.413771][T13807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 312.413858][T13807] Call Trace: [ 312.413865][T13807] [ 312.413874][T13807] __dump_stack+0x1d/0x30 [ 312.413980][T13807] dump_stack_lvl+0xe8/0x140 [ 312.414003][T13807] dump_stack+0x15/0x1b [ 312.414042][T13807] should_fail_ex+0x265/0x280 [ 312.414075][T13807] should_fail+0xb/0x20 [ 312.414171][T13807] should_fail_usercopy+0x1a/0x20 [ 312.414191][T13807] _copy_from_user+0x1c/0xb0 [ 312.414220][T13807] ___sys_sendmsg+0xc1/0x1d0 [ 312.414259][T13807] __x64_sys_sendmsg+0xd4/0x160 [ 312.414409][T13807] x64_sys_call+0x2999/0x2fb0 [ 312.414434][T13807] do_syscall_64+0xd0/0x1a0 [ 312.414533][T13807] ? clear_bhb_loop+0x40/0x90 [ 312.414634][T13807] ? clear_bhb_loop+0x40/0x90 [ 312.414734][T13807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.414759][T13807] RIP: 0033:0x7f8c196be969 [ 312.414775][T13807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.414794][T13807] RSP: 002b:00007f8c17d27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.414841][T13807] RAX: ffffffffffffffda RBX: 00007f8c198e5fa0 RCX: 00007f8c196be969 [ 312.414858][T13807] RDX: 0000000000000800 RSI: 0000200000000700 RDI: 0000000000000003 [ 312.414875][T13807] RBP: 00007f8c17d27090 R08: 0000000000000000 R09: 0000000000000000 [ 312.414902][T13807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.414917][T13807] R13: 0000000000000000 R14: 00007f8c198e5fa0 R15: 00007ffcd127bbe8 [ 312.415001][T13807] [ 312.596110][T13802] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.3275: Failed to acquire dquot type 0 [ 312.829582][T13826] tipc: Enabled bearer , priority 0 [ 312.860152][T13829] loop3: detected capacity change from 0 to 2048 [ 312.866771][T13829] EXT4-fs: Ignoring removed i_version option [ 312.874633][T13825] tipc: Resetting bearer [ 312.890908][T13818] loop6: detected capacity change from 0 to 512 [ 312.905114][T13825] tipc: Disabling bearer [ 312.911450][T13818] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 312.912451][T13829] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.920554][T13818] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 312.949871][T13818] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 312.970539][T13818] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 312.991161][T13818] System zones: 0-2, 18-18, 34-34 [ 313.001638][T13818] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 313.049746][T13818] EXT4-fs (loop6): 1 truncate cleaned up [ 313.092998][T13829] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3285: bg 0: block 345: padding at end of block bitmap is not set [ 313.124774][T13829] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 313.125245][T13847] loop2: detected capacity change from 0 to 1024 [ 313.139658][T13829] EXT4-fs (loop3): This should not happen!! Data will be lost [ 313.139658][T13829] [ 313.155819][T13840] loop0: detected capacity change from 0 to 128 [ 313.169782][T13847] EXT4-fs: Ignoring removed nobh option [ 313.175375][T13847] EXT4-fs: Ignoring removed bh option [ 313.256859][T13840] lo speed is unknown, defaulting to 1000 [ 313.340181][T13863] loop5: detected capacity change from 0 to 512 [ 313.596902][T13863] ext4 filesystem being mounted at /401/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.630016][T13863] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.3294: Failed to acquire dquot type 0 [ 313.801114][T13885] tipc: Enabled bearer , priority 0 [ 313.808903][T13884] tipc: Resetting bearer [ 313.852074][T13884] tipc: Disabling bearer [ 313.911196][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 313.920461][ T9] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 314.304018][T13900] loop0: detected capacity change from 0 to 1024 [ 314.341769][T13900] EXT4-fs: Ignoring removed nobh option [ 314.347475][T13900] EXT4-fs: Ignoring removed bh option [ 314.687089][T13888] loop6: detected capacity change from 0 to 512 [ 314.766494][T13888] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 314.775586][T13888] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 314.794819][T13911] loop0: detected capacity change from 0 to 512 [ 314.849566][T13911] ext4: Unknown parameter 'fsmagic' [ 314.880795][T13888] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 314.883181][T13921] __nla_validate_parse: 2 callbacks suppressed [ 314.883196][T13921] netlink: 188 bytes leftover after parsing attributes in process `syz.5.3310'. [ 315.050197][T13888] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 315.083662][T13888] System zones: 0-2, 18-18, 34-34 [ 315.279411][T13888] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 315.374256][T13933] 0猉功D: left allmulticast mode [ 315.425035][T13935] netlink: 'syz.3.3312': attribute type 1 has an invalid length. [ 315.447342][T13935] loop3: detected capacity change from 0 to 512 [ 315.454572][T13935] EXT4-fs: test_dummy_encryption option not supported [ 315.474866][T13888] EXT4-fs (loop6): 1 truncate cleaned up [ 315.480875][T13933] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 316.182843][T13939] loop5: detected capacity change from 0 to 128 [ 316.301019][T13939] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3315'. [ 316.493689][T13937] lo speed is unknown, defaulting to 1000 [ 316.821287][T13946] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3318'. [ 316.829146][ T29] kauditd_printk_skb: 450 callbacks suppressed [ 316.829163][ T29] audit: type=1326 audit(1747807287.458:23451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13945 comm="syz.6.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2066ebe969 code=0x7ffc0000 [ 316.861180][ T29] audit: type=1326 audit(1747807287.458:23452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13945 comm="syz.6.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2066ebe969 code=0x7ffc0000 [ 316.884852][ T29] audit: type=1326 audit(1747807287.458:23453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13945 comm="syz.6.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2066ebe969 code=0x7ffc0000 [ 316.909761][ T29] audit: type=1326 audit(1747807287.458:23454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13945 comm="syz.6.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2066ebe969 code=0x7ffc0000 [ 316.933385][ T29] audit: type=1326 audit(1747807287.458:23455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13945 comm="syz.6.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2066ebe969 code=0x7ffc0000 [ 316.958277][ T29] audit: type=1326 audit(1747807287.458:23456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13945 comm="syz.6.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f2066ec07fc code=0x7ffc0000 [ 317.578748][ T29] audit: type=1326 audit(1747807287.678:23457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13945 comm="syz.6.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f2066ec0734 code=0x7ffc0000 [ 317.603631][ T29] audit: type=1326 audit(1747807287.678:23458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13945 comm="syz.6.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2066ebe969 code=0x7ffc0000 [ 317.628631][ T29] audit: type=1326 audit(1747807287.678:23459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13945 comm="syz.6.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2066ebe969 code=0x7ffc0000 [ 317.652256][ T29] audit: type=1326 audit(1747807287.748:23460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13945 comm="syz.6.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2066ebe969 code=0x7ffc0000 [ 317.667599][T13951] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3320'. [ 317.886129][T13959] netlink: 188 bytes leftover after parsing attributes in process `syz.5.3323'. [ 318.416350][T13967] loop6: detected capacity change from 0 to 2048 [ 318.494284][T13967] EXT4-fs: Ignoring removed i_version option [ 318.519756][T13967] EXT4-fs mount: 30 callbacks suppressed [ 318.519838][T13967] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.542689][T13967] ext4 filesystem being mounted at /304/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.556280][T13967] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3325: bg 0: block 345: padding at end of block bitmap is not set [ 318.574189][T13967] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 318.586734][T13967] EXT4-fs (loop6): This should not happen!! Data will be lost [ 318.586734][T13967] [ 318.612407][ T8726] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.867572][T13987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3332'. [ 318.925029][T13987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3332'. [ 319.041016][T13998] loop3: detected capacity change from 0 to 128 [ 319.063007][T13998] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3337'. [ 319.102580][T14004] loop0: detected capacity change from 0 to 512 [ 319.111691][T14004] SELinux: security_context_str_to_sid (unconfined_u,errors=continue) failed with errno=-22 [ 319.123305][T13998] lo speed is unknown, defaulting to 1000 [ 319.127437][T14006] FAULT_INJECTION: forcing a failure. [ 319.127437][T14006] name failslab, interval 1, probability 0, space 0, times 0 [ 319.144004][T14006] CPU: 0 UID: 0 PID: 14006 Comm: syz.5.3340 Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(voluntary) [ 319.144067][T14006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 319.144079][T14006] Call Trace: [ 319.144086][T14006] [ 319.144093][T14006] __dump_stack+0x1d/0x30 [ 319.144117][T14006] dump_stack_lvl+0xe8/0x140 [ 319.144142][T14006] dump_stack+0x15/0x1b [ 319.144183][T14006] should_fail_ex+0x265/0x280 [ 319.144224][T14006] should_failslab+0x8c/0xb0 [ 319.144304][T14006] __kmalloc_node_noprof+0xa9/0x410 [ 319.144392][T14006] ? __vmalloc_node_range_noprof+0x3c5/0xdf0 [ 319.144426][T14006] __vmalloc_node_range_noprof+0x3c5/0xdf0 [ 319.144460][T14006] ? mod_objcg_state+0x40e/0x530 [ 319.144488][T14006] ? copy_process+0x399/0x1f90 [ 319.144601][T14006] __vmalloc_node_noprof+0x63/0x80 [ 319.144627][T14006] ? copy_process+0x399/0x1f90 [ 319.144654][T14006] dup_task_struct+0x449/0x6a0 [ 319.144757][T14006] ? freezing_slow_path+0xed/0x100 [ 319.144786][T14006] copy_process+0x399/0x1f90 [ 319.144818][T14006] ? kstrtouint+0x76/0xc0 [ 319.144923][T14006] ? kstrtouint_from_user+0x9f/0xf0 [ 319.144962][T14006] ? __rcu_read_unlock+0x4f/0x70 [ 319.145021][T14006] kernel_clone+0x16c/0x5b0 [ 319.145054][T14006] ? vfs_write+0x75e/0x8d0 [ 319.145081][T14006] __x64_sys_clone+0xe6/0x120 [ 319.145113][T14006] x64_sys_call+0x2c59/0x2fb0 [ 319.145140][T14006] do_syscall_64+0xd0/0x1a0 [ 319.145258][T14006] ? clear_bhb_loop+0x40/0x90 [ 319.145285][T14006] ? clear_bhb_loop+0x40/0x90 [ 319.145312][T14006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.145339][T14006] RIP: 0033:0x7fa2b2eee969 [ 319.145359][T14006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.145435][T14006] RSP: 002b:00007fa2b1556fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 319.145532][T14006] RAX: ffffffffffffffda RBX: 00007fa2b3115fa0 RCX: 00007fa2b2eee969 [ 319.145549][T14006] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 319.145564][T14006] RBP: 00007fa2b1557090 R08: 0000000000000000 R09: 0000000000000000 [ 319.145589][T14006] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 319.145606][T14006] R13: 0000000000000000 R14: 00007fa2b3115fa0 R15: 00007ffd4f30e558 [ 319.145626][T14006] [ 319.145635][T14006] syz.5.3340: vmalloc error: size 16384, failed to allocated page array size 32, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 319.416121][T14006] CPU: 0 UID: 0 PID: 14006 Comm: syz.5.3340 Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(voluntary) [ 319.416154][T14006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 319.416245][T14006] Call Trace: [ 319.416254][T14006] [ 319.416264][T14006] __dump_stack+0x1d/0x30 [ 319.416287][T14006] dump_stack_lvl+0xe8/0x140 [ 319.416306][T14006] dump_stack+0x15/0x1b [ 319.416322][T14006] warn_alloc+0x12b/0x1a0 [ 319.416405][T14006] __vmalloc_node_range_noprof+0x455/0xdf0 [ 319.416441][T14006] ? copy_process+0x399/0x1f90 [ 319.416468][T14006] __vmalloc_node_noprof+0x63/0x80 [ 319.416538][T14006] ? copy_process+0x399/0x1f90 [ 319.416567][T14006] dup_task_struct+0x449/0x6a0 [ 319.416677][T14006] ? freezing_slow_path+0xed/0x100 [ 319.416706][T14006] copy_process+0x399/0x1f90 [ 319.416730][T14006] ? kstrtouint+0x76/0xc0 [ 319.416781][T14006] ? kstrtouint_from_user+0x9f/0xf0 [ 319.416819][T14006] ? __rcu_read_unlock+0x4f/0x70 [ 319.416846][T14006] kernel_clone+0x16c/0x5b0 [ 319.416953][T14006] ? vfs_write+0x75e/0x8d0 [ 319.416979][T14006] __x64_sys_clone+0xe6/0x120 [ 319.417019][T14006] x64_sys_call+0x2c59/0x2fb0 [ 319.417045][T14006] do_syscall_64+0xd0/0x1a0 [ 319.417123][T14006] ? clear_bhb_loop+0x40/0x90 [ 319.417152][T14006] ? clear_bhb_loop+0x40/0x90 [ 319.417175][T14006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.417197][T14006] RIP: 0033:0x7fa2b2eee969 [ 319.417233][T14006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.417254][T14006] RSP: 002b:00007fa2b1556fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 319.417275][T14006] RAX: ffffffffffffffda RBX: 00007fa2b3115fa0 RCX: 00007fa2b2eee969 [ 319.417288][T14006] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 319.417301][T14006] RBP: 00007fa2b1557090 R08: 0000000000000000 R09: 0000000000000000 [ 319.417316][T14006] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 319.417332][T14006] R13: 0000000000000000 R14: 00007fa2b3115fa0 R15: 00007ffd4f30e558 [ 319.417354][T14006] [ 319.629398][T14006] Mem-Info: [ 319.632545][T14006] active_anon:30227 inactive_anon:3 isolated_anon:0 [ 319.632545][T14006] active_file:14877 inactive_file:12635 isolated_file:0 [ 319.632545][T14006] unevictable:0 dirty:143 writeback:1 [ 319.632545][T14006] slab_reclaimable:3225 slab_unreclaimable:31711 [ 319.632545][T14006] mapped:44574 shmem:20722 pagetables:977 [ 319.632545][T14006] sec_pagetables:0 bounce:0 [ 319.632545][T14006] kernel_misc_reclaimable:0 [ 319.632545][T14006] free:1843690 free_pcp:8073 free_cma:0 [ 319.680135][T14006] Node 0 active_anon:123808kB inactive_anon:12kB active_file:59508kB inactive_file:50540kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:150224kB dirty:572kB writeback:4kB shmem:85788kB writeback_tmp:0kB kernel_stack:3872kB pagetables:3908kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 319.711669][T14006] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 319.740900][T14006] lowmem_reserve[]: 0 2884 7863 7863 [ 319.746241][T14006] Node 0 DMA32 free:2949928kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953560kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 319.777138][T14006] lowmem_reserve[]: 0 0 4978 4978 [ 319.782268][T14006] Node 0 Normal free:4406624kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:108736kB inactive_anon:12kB active_file:59600kB inactive_file:50508kB unevictable:0kB writepending:548kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:43880kB local_pcp:26472kB free_cma:0kB [ 319.815402][T14006] lowmem_reserve[]: 0 0 0 0 [ 319.820046][T14006] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 319.832878][T14006] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 1*16kB (M) 4*32kB (M) 2*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949928kB [ 319.851442][T14006] Node 0 Normal: 4*4kB (UE) 14*8kB (UME) 16*16kB (UE) 45*32kB (UE) 125*64kB (UME) 210*128kB (UME) 112*256kB (UME) 35*512kB (UME) 30*1024kB (UME) 38*2048kB (UME) 1029*4096kB (UME) = 4406624kB [ 319.870667][T14006] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 319.882306][T14006] 36758 total pagecache pages [ 319.887085][T14006] 4 pages in swap cache [ 319.891287][T14006] Free swap = 124980kB [ 319.895450][T14006] Total swap = 124996kB [ 319.899664][T14006] 2097051 pages RAM [ 319.903486][T14006] 0 pages HighMem/MovableOnly [ 319.910562][T14006] 80260 pages reserved [ 320.101649][T14023] loop6: detected capacity change from 0 to 512 [ 320.130689][T14022] loop0: detected capacity change from 0 to 2048 [ 320.164736][T14019] loop5: detected capacity change from 0 to 8192 [ 320.174617][T14027] loop3: detected capacity change from 0 to 512 [ 320.186698][T14023] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.200501][T14023] ext4 filesystem being mounted at /308/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.215802][T14023] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.3346: Failed to acquire dquot type 0 [ 320.216609][T14027] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.280090][ T8726] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.294017][T14033] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3345'. [ 320.304014][T14022] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3345'. [ 320.322782][T14027] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.405121][T14027] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.3348: Failed to acquire dquot type 0 [ 320.430805][T14043] loop0: detected capacity change from 0 to 128 [ 320.438756][T14043] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 320.449877][T14045] loop5: detected capacity change from 0 to 2048 [ 320.456673][T14045] EXT4-fs: Ignoring removed i_version option [ 320.492967][T14047] FAULT_INJECTION: forcing a failure. [ 320.492967][T14047] name failslab, interval 1, probability 0, space 0, times 0 [ 320.493038][T14045] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.505660][T14047] CPU: 0 UID: 0 PID: 14047 Comm: syz.6.3355 Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(voluntary) [ 320.505693][T14047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 320.505778][T14047] Call Trace: [ 320.505786][T14047] [ 320.505795][T14047] __dump_stack+0x1d/0x30 [ 320.505819][T14047] dump_stack_lvl+0xe8/0x140 [ 320.505894][T14047] dump_stack+0x15/0x1b [ 320.505913][T14047] should_fail_ex+0x265/0x280 [ 320.505948][T14047] should_failslab+0x8c/0xb0 [ 320.505982][T14047] kmem_cache_alloc_node_noprof+0x57/0x320 [ 320.506005][T14047] ? __alloc_skb+0x101/0x320 [ 320.506071][T14047] __alloc_skb+0x101/0x320 [ 320.506118][T14047] netlink_alloc_large_skb+0xba/0xf0 [ 320.506150][T14047] netlink_sendmsg+0x3cf/0x6b0 [ 320.506173][T14047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.506195][T14047] __sock_sendmsg+0x145/0x180 [ 320.506252][T14047] ____sys_sendmsg+0x31e/0x4e0 [ 320.506277][T14047] ___sys_sendmsg+0x17b/0x1d0 [ 320.506353][T14047] __x64_sys_sendmsg+0xd4/0x160 [ 320.506380][T14047] x64_sys_call+0x2999/0x2fb0 [ 320.506403][T14047] do_syscall_64+0xd0/0x1a0 [ 320.506429][T14047] ? clear_bhb_loop+0x40/0x90 [ 320.506461][T14047] ? clear_bhb_loop+0x40/0x90 [ 320.506491][T14047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.506514][T14047] RIP: 0033:0x7f2066ebe969 [ 320.506532][T14047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.506551][T14047] RSP: 002b:00007f2065527038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.506574][T14047] RAX: ffffffffffffffda RBX: 00007f20670e5fa0 RCX: 00007f2066ebe969 [ 320.506657][T14047] RDX: 0000000000048010 RSI: 0000200000000040 RDI: 0000000000000003 [ 320.506671][T14047] RBP: 00007f2065527090 R08: 0000000000000000 R09: 0000000000000000 [ 320.506685][T14047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.506699][T14047] R13: 0000000000000000 R14: 00007f20670e5fa0 R15: 00007ffe80632748 [ 320.506719][T14047] [ 320.728594][T14045] ext4 filesystem being mounted at /422/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.728839][T12264] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.754149][ T48] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 320.782810][T14051] loop6: detected capacity change from 0 to 128 [ 320.791669][T14051] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3358'. [ 320.812875][T14055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3357'. [ 320.815582][T14051] lo speed is unknown, defaulting to 1000 [ 320.824884][T14055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3357'. [ 320.865398][T14057] loop3: detected capacity change from 0 to 512 [ 320.893734][T14045] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3354: bg 0: block 345: padding at end of block bitmap is not set [ 320.909247][T14045] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 320.923063][T14045] EXT4-fs (loop5): This should not happen!! Data will be lost [ 320.923063][T14045] [ 320.944695][T14057] EXT4-fs (loop3): orphan cleanup on readonly fs [ 320.952870][T14057] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.3356: bad orphan inode 13 [ 320.969692][T14057] ext4_test_bit(bit=12, block=18) = 1 [ 320.975147][T14057] is_bad_inode(inode)=0 [ 320.979351][T14057] NEXT_ORPHAN(inode)=2130706432 [ 320.984215][T14057] max_ino=32 [ 320.987449][T14057] i_nlink=1 [ 321.028388][T14060] loop0: detected capacity change from 0 to 8192 [ 321.035827][T14057] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 321.053378][T14057] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 321.090742][T14057] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3356: bg 0: block 248: padding at end of block bitmap is not set [ 321.111973][T14070] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3356'. [ 321.129019][T14057] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.3356: Failed to acquire dquot type 1 [ 321.177699][T14079] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3356'. [ 321.186624][T14070] 0猉功D: entered promiscuous mode [ 321.194754][T14079] 1猉功D: renamed from 30猉功D [ 321.201445][T14057] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 321.234708][ T6580] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.247844][T14079] 1猉功D: left promiscuous mode [ 321.252791][T14079] 1猉功D: entered allmulticast mode [ 321.260772][T14079] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 321.304767][T12264] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.433714][T14089] netlink: 188 bytes leftover after parsing attributes in process `syz.5.3361'. [ 321.614042][T14093] loop6: detected capacity change from 0 to 512 [ 321.630256][T14102] loop5: detected capacity change from 0 to 128 [ 321.635340][T14093] EXT4-fs (loop6): orphan cleanup on readonly fs [ 321.644850][T14102] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 321.645226][T14093] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.3363: bad orphan inode 13 [ 321.666665][T14093] ext4_test_bit(bit=12, block=18) = 1 [ 321.672155][T14093] is_bad_inode(inode)=0 [ 321.676379][T14093] NEXT_ORPHAN(inode)=2130706432 [ 321.682611][T14093] max_ino=32 [ 321.685805][T14093] i_nlink=1 [ 321.688995][ T3516] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 321.689238][T14093] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 321.758175][T14093] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 321.774915][T14106] loop5: detected capacity change from 0 to 8192 [ 321.782150][T14093] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 321.804883][ T8726] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.838264][T14111] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3372'. [ 321.878173][T14115] loop6: detected capacity change from 0 to 128 [ 321.887486][T14115] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3374'. [ 321.909627][T14115] lo speed is unknown, defaulting to 1000 [ 322.023875][ T29] kauditd_printk_skb: 293 callbacks suppressed [ 322.023931][ T29] audit: type=1326 audit(1747807292.658:23748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14124 comm="syz.0.3377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694908e969 code=0x7ffc0000 [ 322.113872][ T29] audit: type=1326 audit(1747807292.698:23749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14124 comm="syz.0.3377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f694908e969 code=0x7ffc0000 [ 322.140027][ T29] audit: type=1326 audit(1747807292.698:23750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14124 comm="syz.0.3377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694908e969 code=0x7ffc0000 [ 322.163794][ T29] audit: type=1326 audit(1747807292.698:23751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14124 comm="syz.0.3377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f694908e969 code=0x7ffc0000 [ 322.187435][ T29] audit: type=1326 audit(1747807292.698:23752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14124 comm="syz.0.3377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694908e969 code=0x7ffc0000 [ 322.213904][ T29] audit: type=1326 audit(1747807292.698:23753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14124 comm="syz.0.3377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f694908e969 code=0x7ffc0000 [ 322.239829][ T29] audit: type=1326 audit(1747807292.698:23754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14124 comm="syz.0.3377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694908e969 code=0x7ffc0000 [ 322.263492][ T29] audit: type=1326 audit(1747807292.698:23755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14124 comm="syz.0.3377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f694908e969 code=0x7ffc0000 [ 322.289553][ T29] audit: type=1326 audit(1747807292.698:23756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14124 comm="syz.0.3377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694908e969 code=0x7ffc0000 [ 322.313233][ T29] audit: type=1326 audit(1747807292.698:23757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14124 comm="syz.0.3377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694908e969 code=0x7ffc0000 [ 322.422098][T14130] program syz.6.3379 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 322.474780][T14132] loop3: detected capacity change from 0 to 2048 [ 322.500230][T14134] FAULT_INJECTION: forcing a failure. [ 322.500230][T14134] name failslab, interval 1, probability 0, space 0, times 0 [ 322.512945][T14134] CPU: 1 UID: 0 PID: 14134 Comm: syz.2.3381 Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(voluntary) [ 322.513001][T14134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 322.513017][T14134] Call Trace: [ 322.513026][T14134] [ 322.513035][T14134] __dump_stack+0x1d/0x30 [ 322.513059][T14134] dump_stack_lvl+0xe8/0x140 [ 322.513146][T14134] dump_stack+0x15/0x1b [ 322.513167][T14134] should_fail_ex+0x265/0x280 [ 322.513201][T14134] ? cma_alloc_port+0x3d/0x2f0 [ 322.513241][T14134] should_failslab+0x8c/0xb0 [ 322.513352][T14134] __kmalloc_cache_noprof+0x4c/0x320 [ 322.513379][T14134] cma_alloc_port+0x3d/0x2f0 [ 322.513408][T14134] rdma_bind_addr_dst+0x19fb/0x1cf0 [ 322.513438][T14134] ? do_user_addr_fault+0xdaf/0x1090 [ 322.513596][T14134] ? mntput+0x4b/0x80 [ 322.513623][T14134] rdma_resolve_addr+0x424/0x1340 [ 322.513659][T14134] ? _parse_integer_limit+0x170/0x190 [ 322.513696][T14134] ucma_resolve_ip+0x212/0x2e0 [ 322.513764][T14134] ucma_write+0x1b0/0x250 [ 322.513831][T14134] ? __pfx_ucma_write+0x10/0x10 [ 322.513893][T14134] vfs_write+0x269/0x8d0 [ 322.513917][T14134] ? __rcu_read_unlock+0x4f/0x70 [ 322.513940][T14134] ? __fget_files+0x184/0x1c0 [ 322.514008][T14134] ksys_write+0xda/0x1a0 [ 322.514054][T14134] __x64_sys_write+0x40/0x50 [ 322.514097][T14134] x64_sys_call+0x2cdd/0x2fb0 [ 322.514166][T14134] do_syscall_64+0xd0/0x1a0 [ 322.514193][T14134] ? clear_bhb_loop+0x40/0x90 [ 322.514285][T14134] ? clear_bhb_loop+0x40/0x90 [ 322.514310][T14134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.514337][T14134] RIP: 0033:0x7f58f086e969 [ 322.514357][T14134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.514380][T14134] RSP: 002b:00007f58eeed7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 322.514410][T14134] RAX: ffffffffffffffda RBX: 00007f58f0a95fa0 RCX: 00007f58f086e969 [ 322.514426][T14134] RDX: 0000000000000048 RSI: 0000200000000280 RDI: 000000000000000b [ 322.514439][T14134] RBP: 00007f58eeed7090 R08: 0000000000000000 R09: 0000000000000000 [ 322.514452][T14134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.514465][T14134] R13: 0000000000000000 R14: 00007f58f0a95fa0 R15: 00007fff2064e9f8 [ 322.514488][T14134] [ 322.751084][T14132] EXT4-fs: Ignoring removed i_version option [ 322.766589][T14125] loop0: detected capacity change from 0 to 512 [ 322.776800][T14125] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 322.785917][T14125] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 322.802349][T14132] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.824664][T14141] loop2: detected capacity change from 0 to 764 [ 322.831381][T14125] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 322.843082][T14132] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.856558][T14125] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 322.874486][T14125] System zones: 0-2, 18-18, 34-34 [ 322.882854][T14132] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3380: bg 0: block 345: padding at end of block bitmap is not set [ 322.898748][T14141] /dev/loop2: Can't open blockdev [ 322.906281][T14125] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 322.925792][T14132] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 322.938359][T14132] EXT4-fs (loop3): This should not happen!! Data will be lost [ 322.938359][T14132] [ 322.957493][T14125] EXT4-fs (loop0): 1 truncate cleaned up [ 322.963726][T14125] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.988067][T14146] loop2: detected capacity change from 0 to 128 [ 322.995950][T14146] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 323.041929][T12476] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.092855][ T3488] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 323.181907][T14163] loop2: detected capacity change from 0 to 8192 [ 323.203581][T12264] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.313380][T14179] loop6: detected capacity change from 0 to 512 [ 323.345963][T14172] loop3: detected capacity change from 0 to 8192 [ 323.364649][T14179] EXT4-fs (loop6): orphan cleanup on readonly fs [ 323.371493][T14179] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.3391: bad orphan inode 13 [ 323.391947][T14183] netlink: 'syz.2.3393': attribute type 13 has an invalid length. [ 323.413700][T14179] ext4_test_bit(bit=12, block=18) = 1 [ 323.421473][T14179] is_bad_inode(inode)=0 [ 323.425746][T14179] NEXT_ORPHAN(inode)=2130706432 [ 323.430683][T14179] max_ino=32 [ 323.433881][T14179] i_nlink=1 [ 323.474439][T14179] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 323.491063][T14183] loop2: detected capacity change from 0 to 2048 [ 323.521349][T14175] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 323.538489][T14175] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3391: bg 0: block 248: padding at end of block bitmap is not set [ 323.558675][T14175] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.3391: Failed to acquire dquot type 1 [ 323.572618][T14183] Alternate GPT is invalid, using primary GPT. [ 323.581397][T14183] loop2: p2 p3 p7 [ 323.592462][T14179] 0猉功D: entered promiscuous mode [ 323.597738][T14179] 0猉功D: left allmulticast mode [ 323.608352][T14175] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 323.640375][T14179] 1猉功D: renamed from 30猉功D [ 323.646843][T14190] FAULT_INJECTION: forcing a failure. [ 323.646843][T14190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.662259][T14190] CPU: 0 UID: 0 PID: 14190 Comm: syz.2.3396 Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(voluntary) [ 323.662289][T14190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 323.662362][T14190] Call Trace: [ 323.662417][T14190] [ 323.662427][T14190] __dump_stack+0x1d/0x30 [ 323.662452][T14190] dump_stack_lvl+0xe8/0x140 [ 323.662475][T14190] dump_stack+0x15/0x1b [ 323.662493][T14190] should_fail_ex+0x265/0x280 [ 323.662584][T14190] should_fail+0xb/0x20 [ 323.662668][T14190] should_fail_usercopy+0x1a/0x20 [ 323.662693][T14190] _copy_from_user+0x1c/0xb0 [ 323.662717][T14190] __sys_bpf+0x178/0x790 [ 323.662818][T14190] __x64_sys_bpf+0x41/0x50 [ 323.662843][T14190] x64_sys_call+0x2478/0x2fb0 [ 323.662906][T14190] do_syscall_64+0xd0/0x1a0 [ 323.662935][T14190] ? clear_bhb_loop+0x40/0x90 [ 323.663041][T14190] ? clear_bhb_loop+0x40/0x90 [ 323.663067][T14190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.663146][T14190] RIP: 0033:0x7f58f086e969 [ 323.663166][T14190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.663245][T14190] RSP: 002b:00007f58eeed7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 323.663269][T14190] RAX: ffffffffffffffda RBX: 00007f58f0a95fa0 RCX: 00007f58f086e969 [ 323.663286][T14190] RDX: 0000000000000020 RSI: 0000200000000280 RDI: 0000000000000003 [ 323.663302][T14190] RBP: 00007f58eeed7090 R08: 0000000000000000 R09: 0000000000000000 [ 323.663316][T14190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.663329][T14190] R13: 0000000000000000 R14: 00007f58f0a95fa0 R15: 00007fff2064e9f8 [ 323.663362][T14190] [ 323.848617][T14179] 1猉功D: left promiscuous mode [ 323.853541][T14179] 1猉功D: entered allmulticast mode [ 323.864779][T14179] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 323.920386][ T8726] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.934223][T14199] loop2: detected capacity change from 0 to 1024 [ 323.945282][T14199] EXT4-fs: Ignoring removed nobh option [ 323.953283][T14199] EXT4-fs: Ignoring removed bh option [ 323.981935][T14199] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.003803][T14201] loop6: detected capacity change from 0 to 2048 [ 324.013189][T14201] EXT4-fs: Ignoring removed i_version option [ 324.020388][T14187] loop3: detected capacity change from 0 to 512 [ 324.027841][T14187] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 324.036917][T14187] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 324.050047][T14201] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.062224][T14201] ext4 filesystem being mounted at /319/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.080939][T14201] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3399: bg 0: block 345: padding at end of block bitmap is not set [ 324.096131][T14187] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 324.124370][T14187] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 324.135024][T14201] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 324.148156][T14201] EXT4-fs (loop6): This should not happen!! Data will be lost [ 324.148156][T14201] [ 324.159782][T14187] System zones: 0-2, 18-18, 34-34 [ 324.167353][T14187] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 324.189320][T14187] EXT4-fs (loop3): 1 truncate cleaned up [ 324.195414][T14187] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.285290][T12264] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.330303][ T8726] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.353503][T14224] loop0: detected capacity change from 0 to 8192 [ 324.451551][T14234] loop0: detected capacity change from 0 to 2048 [ 324.468529][T14234] EXT4-fs: Ignoring removed i_version option [ 324.488975][T14234] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.505627][T14237] program syz.5.3406 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 324.516748][T14234] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.538960][T14234] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3405: bg 0: block 345: padding at end of block bitmap is not set [ 324.554842][T14234] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 324.568511][T14234] EXT4-fs (loop0): This should not happen!! Data will be lost [ 324.568511][T14234] [ 324.593477][T12476] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.671726][T14245] FAULT_INJECTION: forcing a failure. [ 324.671726][T14245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.684930][T14245] CPU: 0 UID: 0 PID: 14245 Comm: syz.0.3407 Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(voluntary) [ 324.684964][T14245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 324.685050][T14245] Call Trace: [ 324.685057][T14245] [ 324.685066][T14245] __dump_stack+0x1d/0x30 [ 324.685088][T14245] dump_stack_lvl+0xe8/0x140 [ 324.685146][T14245] dump_stack+0x15/0x1b [ 324.685188][T14245] should_fail_ex+0x265/0x280 [ 324.685292][T14245] should_fail+0xb/0x20 [ 324.685326][T14245] should_fail_usercopy+0x1a/0x20 [ 324.685351][T14245] _copy_from_user+0x1c/0xb0 [ 324.685380][T14245] ___sys_sendmsg+0xc1/0x1d0 [ 324.685492][T14245] __x64_sys_sendmsg+0xd4/0x160 [ 324.685520][T14245] x64_sys_call+0x2999/0x2fb0 [ 324.685546][T14245] do_syscall_64+0xd0/0x1a0 [ 324.685573][T14245] ? clear_bhb_loop+0x40/0x90 [ 324.685676][T14245] ? clear_bhb_loop+0x40/0x90 [ 324.685699][T14245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.685797][T14245] RIP: 0033:0x7f694908e969 [ 324.685817][T14245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.685839][T14245] RSP: 002b:00007f69476f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 324.685865][T14245] RAX: ffffffffffffffda RBX: 00007f69492b5fa0 RCX: 00007f694908e969 [ 324.685890][T14245] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000006 [ 324.685932][T14245] RBP: 00007f69476f7090 R08: 0000000000000000 R09: 0000000000000000 [ 324.685955][T14245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.685971][T14245] R13: 0000000000000000 R14: 00007f69492b5fa0 R15: 00007ffdb7241df8 [ 324.685994][T14245] [ 324.870890][T12110] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.902139][ T3594] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 324.910278][ T3594] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 325.024795][T14258] loop5: detected capacity change from 0 to 2048 [ 325.036125][T14258] EXT4-fs: Ignoring removed i_version option [ 325.060710][T14258] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.073042][T14258] ext4 filesystem being mounted at /434/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.087659][T14258] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3414: bg 0: block 345: padding at end of block bitmap is not set [ 325.104138][T14258] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 325.117838][T14258] EXT4-fs (loop5): This should not happen!! Data will be lost [ 325.117838][T14258] [ 325.192601][T14266] loop3: detected capacity change from 0 to 512 [ 325.202787][T14266] EXT4-fs (loop3): orphan cleanup on readonly fs [ 325.218507][T14266] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.3416: bad orphan inode 13 [ 325.248130][T14266] ext4_test_bit(bit=12, block=18) = 1 [ 325.253589][T14266] is_bad_inode(inode)=0 [ 325.257926][T14266] NEXT_ORPHAN(inode)=2130706432 [ 325.262808][T14266] max_ino=32 [ 325.266030][T14266] i_nlink=1 [ 325.277509][T14266] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 325.311376][T14266] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 325.329573][T14279] FAULT_INJECTION: forcing a failure. [ 325.329573][T14279] name failslab, interval 1, probability 0, space 0, times 0 [ 325.342370][T14279] CPU: 1 UID: 0 PID: 14279 Comm: syz.2.3419 Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(voluntary) [ 325.342406][T14279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 325.342421][T14279] Call Trace: [ 325.342431][T14279] [ 325.342440][T14279] __dump_stack+0x1d/0x30 [ 325.342463][T14279] dump_stack_lvl+0xe8/0x140 [ 325.342541][T14279] dump_stack+0x15/0x1b [ 325.342561][T14279] should_fail_ex+0x265/0x280 [ 325.342628][T14279] should_failslab+0x8c/0xb0 [ 325.342660][T14279] kmem_cache_alloc_noprof+0x50/0x310 [ 325.342681][T14279] ? getname_flags+0x80/0x3b0 [ 325.342780][T14279] getname_flags+0x80/0x3b0 [ 325.342851][T14279] do_sys_openat2+0x60/0x110 [ 325.342874][T14279] __x64_sys_openat+0xf2/0x120 [ 325.342900][T14279] x64_sys_call+0x1af/0x2fb0 [ 325.342926][T14279] do_syscall_64+0xd0/0x1a0 [ 325.343110][T14279] ? clear_bhb_loop+0x40/0x90 [ 325.343136][T14279] ? clear_bhb_loop+0x40/0x90 [ 325.343164][T14279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.343229][T14279] RIP: 0033:0x7f58f086e969 [ 325.343246][T14279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.343267][T14279] RSP: 002b:00007f58eeed7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 325.343292][T14279] RAX: ffffffffffffffda RBX: 00007f58f0a95fa0 RCX: 00007f58f086e969 [ 325.343333][T14279] RDX: 0000000000000100 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 325.343346][T14279] RBP: 00007f58eeed7090 R08: 0000000000000000 R09: 0000000000000000 [ 325.343360][T14279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.343374][T14279] R13: 0000000000000000 R14: 00007f58f0a95fa0 R15: 00007fff2064e9f8 [ 325.343396][T14279] [ 325.345055][T14266] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3416: bg 0: block 248: padding at end of block bitmap is not set [ 325.517717][T14285] __nla_validate_parse: 5 callbacks suppressed [ 325.517734][T14285] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3416'. [ 325.558689][T14266] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.3416: Failed to acquire dquot type 1 [ 325.576866][T14266] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 325.591836][T14285] 1猉功D: entered promiscuous mode [ 325.596974][T14285] 1猉功D: left allmulticast mode [ 325.604958][T14286] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3416'. [ 325.625552][ T6580] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.636497][T14286] 0猉功D: renamed from 31猉功D [ 325.643677][T14286] 0猉功D: left promiscuous mode [ 325.648638][T14286] 0猉功D: entered allmulticast mode [ 325.655733][T14286] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 325.696608][T12264] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.754291][T14304] loop5: detected capacity change from 0 to 512 [ 325.763612][T14304] EXT4-fs (loop5): orphan cleanup on readonly fs [ 325.771536][T14304] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.3425: bad orphan inode 13 [ 325.784960][T14304] ext4_test_bit(bit=12, block=18) = 1 [ 325.791529][T14304] is_bad_inode(inode)=0 [ 325.795798][T14304] NEXT_ORPHAN(inode)=2130706432 [ 325.795991][T14312] loop0: detected capacity change from 0 to 512 [ 325.800689][T14304] max_ino=32 [ 325.800701][T14304] i_nlink=1 [ 325.803361][T14304] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 325.831871][T14312] EXT4-fs (loop0): orphan cleanup on readonly fs [ 325.840673][T14312] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.3426: bad orphan inode 13 [ 325.862313][T14312] ext4_test_bit(bit=12, block=18) = 1 [ 325.867849][T14312] is_bad_inode(inode)=0 [ 325.872184][T14312] NEXT_ORPHAN(inode)=2130706432 [ 325.877734][T14312] max_ino=32 [ 325.880960][T14312] i_nlink=1 [ 325.885476][T14312] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 325.921737][T14304] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 325.922491][T14316] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3425'. [ 325.944039][T14317] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3428'. [ 325.954076][T14316] 1猉功D: entered promiscuous mode [ 325.959704][T14306] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 325.959818][T14304] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3425: bg 0: block 248: padding at end of block bitmap is not set [ 325.960145][T14304] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.3425: Failed to acquire dquot type 1 [ 325.988915][T14306] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3426: bg 0: block 248: padding at end of block bitmap is not set [ 325.999467][T14304] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 326.012513][T14319] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3425'. [ 326.041192][T14319] 0猉功D: renamed from 31猉功D [ 326.046189][T14306] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.3426: Failed to acquire dquot type 1 [ 326.058121][T14322] FAULT_INJECTION: forcing a failure. [ 326.058121][T14322] name failslab, interval 1, probability 0, space 0, times 0 [ 326.058155][T14322] CPU: 0 UID: 0 PID: 14322 Comm: syz.2.3430 Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(voluntary) [ 326.058235][T14322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 326.058250][T14322] Call Trace: [ 326.058258][T14322] [ 326.058266][T14322] __dump_stack+0x1d/0x30 [ 326.058288][T14322] dump_stack_lvl+0xe8/0x140 [ 326.058350][T14322] dump_stack+0x15/0x1b [ 326.058370][T14322] should_fail_ex+0x265/0x280 [ 326.058410][T14322] should_failslab+0x8c/0xb0 [ 326.058476][T14322] kmem_cache_alloc_noprof+0x50/0x310 [ 326.058499][T14322] ? alloc_empty_file+0x76/0x200 [ 326.058588][T14322] ? fast_dput+0x44/0x2c0 [ 326.058620][T14322] alloc_empty_file+0x76/0x200 [ 326.058651][T14322] dentry_open+0x2d/0x90 [ 326.058675][T14322] ptm_open_peer+0x113/0x180 [ 326.058726][T14322] tty_ioctl+0x3bc/0xb80 [ 326.058751][T14322] ? __pfx_tty_ioctl+0x10/0x10 [ 326.058775][T14322] __se_sys_ioctl+0xce/0x140 [ 326.058802][T14322] __x64_sys_ioctl+0x43/0x50 [ 326.058841][T14322] x64_sys_call+0x19a8/0x2fb0 [ 326.058886][T14322] do_syscall_64+0xd0/0x1a0 [ 326.058956][T14322] ? clear_bhb_loop+0x40/0x90 [ 326.058979][T14322] ? clear_bhb_loop+0x40/0x90 [ 326.059002][T14322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.059025][T14322] RIP: 0033:0x7f58f086e969 [ 326.059060][T14322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.059080][T14322] RSP: 002b:00007f58eeed7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 326.059102][T14322] RAX: ffffffffffffffda RBX: 00007f58f0a95fa0 RCX: 00007f58f086e969 [ 326.059116][T14322] RDX: 0000000000000006 RSI: 0000000000005441 RDI: 0000000000000003 [ 326.059130][T14322] RBP: 00007f58eeed7090 R08: 0000000000000000 R09: 0000000000000000 [ 326.059183][T14322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.059197][T14322] R13: 0000000000000000 R14: 00007f58f0a95fa0 R15: 00007fff2064e9f8 [ 326.059216][T14322] [ 326.104903][T14312] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3426'. [ 326.128606][T14319] 0猉功D: left promiscuous mode [ 326.140179][T14326] loop2: detected capacity change from 0 to 512 [ 326.140946][T14319] 0猉功D: entered allmulticast mode [ 326.151075][T14326] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 326.151140][T14326] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 326.156168][T14306] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 326.170560][T14319] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 326.174811][T14329] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3426'. [ 326.180526][T14326] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 326.185395][T14329] 1猉功D: renamed from 30猉功D (while UP) [ 326.338485][T14326] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 326.338523][T14326] System zones: 0-2, 18-18, 34-34 [ 326.398220][T14326] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 326.402631][T14329] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 326.430903][ T6580] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.443373][T14326] EXT4-fs (loop2): 1 truncate cleaned up [ 326.454284][T14312] 1猉功D: entered promiscuous mode [ 326.459517][T14312] 1猉功D: left allmulticast mode [ 326.466247][T14326] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.600760][T12476] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.656467][T12110] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.674196][T14347] netlink: 188 bytes leftover after parsing attributes in process `syz.5.3440'. [ 326.686749][T14355] FAULT_INJECTION: forcing a failure. [ 326.686749][T14355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.686782][T14355] CPU: 0 UID: 0 PID: 14355 Comm: syz.2.3443 Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(voluntary) [ 326.686815][T14355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 326.686828][T14355] Call Trace: [ 326.686835][T14355] [ 326.686844][T14355] __dump_stack+0x1d/0x30 [ 326.686931][T14355] dump_stack_lvl+0xe8/0x140 [ 326.686965][T14355] dump_stack+0x15/0x1b [ 326.686985][T14355] should_fail_ex+0x265/0x280 [ 326.687029][T14355] should_fail+0xb/0x20 [ 326.687138][T14355] should_fail_usercopy+0x1a/0x20 [ 326.687162][T14355] _copy_from_user+0x1c/0xb0 [ 326.687212][T14355] ___sys_recvmsg+0xaa/0x370 [ 326.687238][T14355] ? _parse_integer+0x27/0x40 [ 326.687281][T14355] do_recvmmsg+0x1ef/0x540 [ 326.687317][T14355] ? fput+0x8f/0xc0 [ 326.687339][T14355] __x64_sys_recvmmsg+0xe5/0x170 [ 326.687368][T14355] x64_sys_call+0x1c6a/0x2fb0 [ 326.687395][T14355] do_syscall_64+0xd0/0x1a0 [ 326.687474][T14355] ? clear_bhb_loop+0x40/0x90 [ 326.687497][T14355] ? clear_bhb_loop+0x40/0x90 [ 326.687589][T14355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.687615][T14355] RIP: 0033:0x7f58f086e969 [ 326.687641][T14355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.687661][T14355] RSP: 002b:00007f58eeed7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 326.687684][T14355] RAX: ffffffffffffffda RBX: 00007f58f0a95fa0 RCX: 00007f58f086e969 [ 326.687700][T14355] RDX: 0400000000000284 RSI: 0000200000000040 RDI: 0000000000000004 [ 326.687762][T14355] RBP: 00007f58eeed7090 R08: 0000000000000000 R09: 0000000000000000 [ 326.687777][T14355] R10: 000000000000002b R11: 0000000000000246 R12: 0000000000000001 [ 326.687792][T14355] R13: 0000000000000000 R14: 00007f58f0a95fa0 R15: 00007fff2064e9f8 [ 326.687815][T14355] [ 326.719287][T14359] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 326.719287][T14359] The task syz.6.3441 (14359) triggered the difference, watch for misbehavior. [ 326.902462][T14360] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3441'. [ 326.915812][T14361] loop2: detected capacity change from 0 to 512 [ 326.964910][T14361] EXT4-fs (loop2): orphan cleanup on readonly fs [ 326.972165][T14361] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.3444: bad orphan inode 13 [ 326.984900][T14361] ext4_test_bit(bit=12, block=18) = 1 [ 326.990457][T14361] is_bad_inode(inode)=0 [ 326.994648][T14361] NEXT_ORPHAN(inode)=2130706432 [ 326.999613][T14361] max_ino=32 [ 327.002831][T14361] i_nlink=1 [ 327.006708][T14361] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 327.024911][T14358] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 327.040962][ T29] kauditd_printk_skb: 420 callbacks suppressed [ 327.040979][ T29] audit: type=1326 audit(1747807297.678:24170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14367 comm="syz.5.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b2eee969 code=0x7ffc0000 [ 327.073437][ T29] audit: type=1326 audit(1747807297.678:24171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14367 comm="syz.5.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b2eee969 code=0x7ffc0000 [ 327.075233][T14358] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3444: bg 0: block 248: padding at end of block bitmap is not set [ 327.097107][ T29] audit: type=1326 audit(1747807297.678:24172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14367 comm="syz.5.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2b2eee969 code=0x7ffc0000 [ 327.097145][ T29] audit: type=1326 audit(1747807297.678:24173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14367 comm="syz.5.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b2eee969 code=0x7ffc0000 [ 327.097239][ T29] audit: type=1326 audit(1747807297.678:24174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14367 comm="syz.5.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2b2eee969 code=0x7ffc0000 [ 327.097329][ T29] audit: type=1326 audit(1747807297.678:24175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14367 comm="syz.5.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b2eee969 code=0x7ffc0000 [ 327.097358][ T29] audit: type=1326 audit(1747807297.678:24176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14367 comm="syz.5.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2b2eee969 code=0x7ffc0000 [ 327.097429][ T29] audit: type=1326 audit(1747807297.678:24177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14367 comm="syz.5.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b2eee969 code=0x7ffc0000 [ 327.097460][ T29] audit: type=1326 audit(1747807297.678:24178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14367 comm="syz.5.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2b2eee969 code=0x7ffc0000 [ 327.097546][ T29] audit: type=1326 audit(1747807297.678:24179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14367 comm="syz.5.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b2eee969 code=0x7ffc0000 [ 327.117408][T14361] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3444'. [ 327.139867][T14358] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.3444: Failed to acquire dquot type 1 [ 327.328551][T14361] 1猉功D: entered promiscuous mode [ 327.333747][T14361] 1猉功D: left allmulticast mode [ 327.340217][T14358] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 327.356900][T14372] 0猉功D: renamed from 31猉功D [ 327.366976][T14372] 0猉功D: left promiscuous mode [ 327.373160][T14372] 0猉功D: entered allmulticast mode [ 327.379549][T14372] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 327.415397][T12110] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.519122][ T10] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 327.528041][ T10] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 327.608989][T14394] bridge0: entered promiscuous mode [ 327.616013][T14394] bridge0: port 3(macvlan2) entered blocking state [ 327.622660][T14394] bridge0: port 3(macvlan2) entered disabled state [ 327.633552][T14394] macvlan2: entered allmulticast mode [ 327.639003][T14394] bridge0: entered allmulticast mode [ 327.654149][T14394] macvlan2: left allmulticast mode [ 327.661564][T14394] bridge0: left allmulticast mode [ 327.678655][T14394] bridge0: left promiscuous mode [ 327.754847][T14390] netlink: 'syz.0.3453': attribute type 33 has an invalid length. [ 327.780547][T14371] loop5: detected capacity change from 0 to 1024 [ 327.870217][T14371] EXT4-fs: Ignoring removed bh option [ 328.001270][T14371] EXT4-fs: inline encryption not supported [ 328.009220][T14371] EXT4-fs: Ignoring removed i_version option [ 328.031100][T14371] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 328.666033][T14423] FAULT_INJECTION: forcing a failure. [ 328.666033][T14423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.679830][T14423] CPU: 1 UID: 0 PID: 14423 Comm: syz.2.3462 Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(voluntary) [ 328.679972][T14423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 328.679987][T14423] Call Trace: [ 328.679995][T14423] [ 328.680003][T14423] __dump_stack+0x1d/0x30 [ 328.680029][T14423] dump_stack_lvl+0xe8/0x140 [ 328.680053][T14423] dump_stack+0x15/0x1b [ 328.680155][T14423] should_fail_ex+0x265/0x280 [ 328.680193][T14423] should_fail+0xb/0x20 [ 328.680243][T14423] should_fail_usercopy+0x1a/0x20 [ 328.680268][T14423] _copy_from_user+0x1c/0xb0 [ 328.680296][T14423] ___sys_sendmsg+0xc1/0x1d0 [ 328.680331][T14423] __x64_sys_sendmsg+0xd4/0x160 [ 328.680435][T14423] x64_sys_call+0x2999/0x2fb0 [ 328.680460][T14423] do_syscall_64+0xd0/0x1a0 [ 328.680488][T14423] ? clear_bhb_loop+0x40/0x90 [ 328.680575][T14423] ? clear_bhb_loop+0x40/0x90 [ 328.680598][T14423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.680643][T14423] RIP: 0033:0x7f58f086e969 [ 328.680659][T14423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.680680][T14423] RSP: 002b:00007f58eeed7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.680701][T14423] RAX: ffffffffffffffda RBX: 00007f58f0a95fa0 RCX: 00007f58f086e969 [ 328.680715][T14423] RDX: 0000000000040000 RSI: 00002000000003c0 RDI: 0000000000000009 [ 328.680729][T14423] RBP: 00007f58eeed7090 R08: 0000000000000000 R09: 0000000000000000 [ 328.680748][T14423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.680764][T14423] R13: 0000000000000000 R14: 00007f58f0a95fa0 R15: 00007fff2064e9f8 [ 328.680785][T14423] [ 328.863868][T14371] EXT4-fs error (device loop5): ext4_map_blocks:709: inode #3: block 1: comm syz.5.3448: lblock 1 mapped to illegal pblock 1 (length 1) [ 329.115303][T14445] loop3: detected capacity change from 0 to 512 [ 329.120892][T14445] EXT4-fs (loop3): orphan cleanup on readonly fs [ 329.121143][T14445] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.3468: bad orphan inode 13 [ 329.122148][T14445] ext4_test_bit(bit=12, block=18) = 1 [ 329.122165][T14445] is_bad_inode(inode)=0 [ 329.122174][T14445] NEXT_ORPHAN(inode)=2130706432 [ 329.122183][T14445] max_ino=32 [ 329.122190][T14445] i_nlink=1 [ 329.122616][T14445] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 329.223470][T14445] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 329.248760][T14371] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.3448: Failed to acquire dquot type 0 [ 329.281585][ T3367] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 329.283365][T14371] EXT4-fs error (device loop5): ext4_free_blocks:6587: comm syz.5.3448: Freeing blocks not in datazone - block = 0, count = 4096 [ 329.322770][ T3367] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 329.323113][T14445] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 329.386008][T14371] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.3448: Invalid inode bitmap blk 0 in block_group 0 [ 329.433505][ T3516] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:47: lblock 1 mapped to illegal pblock 1 (length 1) [ 329.435327][T14371] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 329.458026][ T3516] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:47: Failed to release dquot type 0 [ 329.463373][T12264] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.472586][T14461] loop6: detected capacity change from 0 to 512 [ 329.473153][T14461] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 329.473813][T14461] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 329.473862][T14461] System zones: 1-12 [ 329.474120][T14461] EXT4-fs (loop6): orphan cleanup on readonly fs [ 329.474141][T14461] EXT4-fs error (device loop6): ext4_read_inode_bitmap:167: comm syz.6.3476: Inode bitmap for bg 0 marked uninitialized [ 329.474829][T14461] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 329.596523][T14464] EXT4-fs error (device loop6): ext4_map_blocks:675: inode #2: block 5: comm syz.6.3476: lblock 0 mapped to illegal pblock 5 (length 1) [ 329.596831][T14464] EXT4-fs warning (device loop6): dx_probe:793: inode #2: lblock 0: comm syz.6.3476: error -117 reading directory block [ 329.706574][T14371] EXT4-fs (loop5): 1 orphan inode deleted [ 329.792138][T14474] FAULT_INJECTION: forcing a failure. [ 329.792138][T14474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.792173][T14474] CPU: 1 UID: 0 PID: 14474 Comm: syz.3.3478 Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(voluntary) [ 329.792235][T14474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 329.792251][T14474] Call Trace: [ 329.792258][T14474] [ 329.792267][T14474] __dump_stack+0x1d/0x30 [ 329.792292][T14474] dump_stack_lvl+0xe8/0x140 [ 329.792315][T14474] dump_stack+0x15/0x1b [ 329.792336][T14474] should_fail_ex+0x265/0x280 [ 329.792420][T14474] should_fail+0xb/0x20 [ 329.792456][T14474] should_fail_usercopy+0x1a/0x20 [ 329.792479][T14474] _copy_from_user+0x1c/0xb0 [ 329.792507][T14474] ___sys_sendmsg+0xc1/0x1d0 [ 329.792620][T14474] __x64_sys_sendmsg+0xd4/0x160 [ 329.792646][T14474] x64_sys_call+0x2999/0x2fb0 [ 329.792670][T14474] do_syscall_64+0xd0/0x1a0 [ 329.792723][T14474] ? clear_bhb_loop+0x40/0x90 [ 329.792748][T14474] ? clear_bhb_loop+0x40/0x90 [ 329.792775][T14474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.792811][T14474] RIP: 0033:0x7f8c196be969 [ 329.792830][T14474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.792859][T14474] RSP: 002b:00007f8c17d27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.792902][T14474] RAX: ffffffffffffffda RBX: 00007f8c198e5fa0 RCX: 00007f8c196be969 [ 329.792938][T14474] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000006 [ 329.792953][T14474] RBP: 00007f8c17d27090 R08: 0000000000000000 R09: 0000000000000000 [ 329.792968][T14474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.792983][T14474] R13: 0000000000000000 R14: 00007f8c198e5fa0 R15: 00007ffcd127bbe8 [ 329.793004][T14474] [ 330.225293][T14371] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.593231][T14488] FAULT_INJECTION: forcing a failure. [ 330.593231][T14488] name failslab, interval 1, probability 0, space 0, times 0 [ 330.606630][T14488] CPU: 1 UID: 0 PID: 14488 Comm: syz.3.3483 Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(voluntary) [ 330.606737][T14488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 330.606752][T14488] Call Trace: [ 330.606759][T14488] [ 330.606775][T14488] __dump_stack+0x1d/0x30 [ 330.606800][T14488] dump_stack_lvl+0xe8/0x140 [ 330.606823][T14488] dump_stack+0x15/0x1b [ 330.606867][T14488] should_fail_ex+0x265/0x280 [ 330.606939][T14488] should_failslab+0x8c/0xb0 [ 330.606974][T14488] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 330.607002][T14488] ? __d_alloc+0x3d/0x350 [ 330.607093][T14488] __d_alloc+0x3d/0x350 [ 330.607114][T14488] ? avc_has_perm_noaudit+0x1b1/0x200 [ 330.607139][T14488] d_alloc_parallel+0x53/0xc40 [ 330.607162][T14488] ? selinux_inode_permission+0x32a/0x400 [ 330.607196][T14488] ? __rcu_read_unlock+0x4f/0x70 [ 330.607272][T14488] ? __d_lookup+0x316/0x340 [ 330.607294][T14488] ? inode_permission+0xb5/0x300 [ 330.607332][T14488] __lookup_slow+0x8c/0x250 [ 330.607436][T14488] lookup_one_len+0xf7/0x1d0 [ 330.607459][T14488] __se_sys_mq_unlink+0x12d/0x220 [ 330.607540][T14488] __x64_sys_mq_unlink+0x1f/0x30 [ 330.607650][T14488] x64_sys_call+0x1c2a/0x2fb0 [ 330.607673][T14488] do_syscall_64+0xd0/0x1a0 [ 330.607700][T14488] ? clear_bhb_loop+0x40/0x90 [ 330.607725][T14488] ? clear_bhb_loop+0x40/0x90 [ 330.607751][T14488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.607824][T14488] RIP: 0033:0x7f8c196be969 [ 330.607843][T14488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.607872][T14488] RSP: 002b:00007f8c17d27038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f1 [ 330.607897][T14488] RAX: ffffffffffffffda RBX: 00007f8c198e5fa0 RCX: 00007f8c196be969 [ 330.607913][T14488] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000340 [ 330.607928][T14488] RBP: 00007f8c17d27090 R08: 0000000000000000 R09: 0000000000000000 [ 330.607944][T14488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.608026][T14488] R13: 0000000000000000 R14: 00007f8c198e5fa0 R15: 00007ffcd127bbe8 [ 330.608048][T14488] [ 330.854705][T14489] __nla_validate_parse: 3 callbacks suppressed [ 330.854724][T14489] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3482'. [ 330.919634][T14461] Set syz1 is full, maxelem 65536 reached [ 331.031748][ T8726] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.055051][T14500] loop6: detected capacity change from 0 to 512 [ 331.068639][T14500] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.082381][T14500] ext4 filesystem being mounted at /332/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.095115][T14500] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.3486: Failed to acquire dquot type 0 [ 331.311732][ T8726] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.323791][T14511] loop3: detected capacity change from 0 to 128 [ 331.335092][T14511] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3489'. [ 331.414438][T14513] loop6: detected capacity change from 0 to 8192 [ 331.439883][T14511] lo speed is unknown, defaulting to 1000 [ 331.614610][T14525] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3496'. [ 331.628560][ T6580] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.673376][T14529] loop5: detected capacity change from 0 to 512 [ 331.684235][T14529] EXT4-fs (loop5): orphan cleanup on readonly fs [ 331.691861][T14529] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.3498: bad orphan inode 13 [ 331.704291][T14529] ext4_test_bit(bit=12, block=18) = 1 [ 331.709741][T14529] is_bad_inode(inode)=0 [ 331.713934][T14529] NEXT_ORPHAN(inode)=2130706432 [ 331.719490][T14529] max_ino=32 [ 331.722720][T14529] i_nlink=1 [ 331.722886][T14534] loop0: detected capacity change from 0 to 512 [ 331.727825][T14529] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 331.753283][T14529] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 331.764426][T14534] EXT4-fs (loop0): orphan cleanup on readonly fs [ 331.772031][T14534] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.3499: bad orphan inode 13 [ 331.784988][T14534] ext4_test_bit(bit=12, block=18) = 1 [ 331.790437][T14534] is_bad_inode(inode)=0 [ 331.794118][T14537] loop3: detected capacity change from 0 to 2048 [ 331.794679][T14534] NEXT_ORPHAN(inode)=2130706432 [ 331.806071][T14534] max_ino=32 [ 331.809047][T14537] EXT4-fs (loop3): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.811544][T14534] i_nlink=1 [ 331.824823][T14529] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3498: bg 0: block 248: padding at end of block bitmap is not set [ 331.825210][T14540] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3498'. [ 331.849704][T14529] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.3498: Failed to acquire dquot type 1 [ 331.851476][T14534] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 331.876816][T12264] EXT4-fs (loop3): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 331.884987][T14542] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3498'. [ 331.888898][T14529] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 331.911109][T14542] 1猉功D: renamed from 30猉功D (while UP) [ 331.918694][T14531] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 331.920803][T14542] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 331.949456][T14540] 1猉功D: entered promiscuous mode [ 331.954651][T14540] 1猉功D: left allmulticast mode [ 331.964900][T14531] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 331.999806][T12476] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.038879][T14555] loop0: detected capacity change from 0 to 512 [ 332.056558][ T6580] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.081655][T14555] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.088593][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 332.088612][ T29] audit: type=1326 audit(1747807302.728:24243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14559 comm="syz.2.3504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f086e969 code=0x7ffc0000 [ 332.109741][T14555] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 332.128988][ T29] audit: type=1326 audit(1747807302.768:24244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14559 comm="syz.2.3504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f58f086e969 code=0x7ffc0000 [ 332.149816][T14568] loop5: detected capacity change from 0 to 512 [ 332.161537][ T29] audit: type=1326 audit(1747807302.768:24245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14559 comm="syz.2.3504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f086e969 code=0x7ffc0000 [ 332.161622][ T29] audit: type=1326 audit(1747807302.768:24246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14559 comm="syz.2.3504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f58f086e969 code=0x7ffc0000 [ 332.161653][ T29] audit: type=1326 audit(1747807302.768:24247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14559 comm="syz.2.3504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f086e969 code=0x7ffc0000 [ 332.161681][ T29] audit: type=1326 audit(1747807302.768:24248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14559 comm="syz.2.3504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f58f086e969 code=0x7ffc0000 [ 332.161727][ T29] audit: type=1326 audit(1747807302.768:24249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14559 comm="syz.2.3504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f086e969 code=0x7ffc0000 [ 332.161755][ T29] audit: type=1326 audit(1747807302.768:24250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14559 comm="syz.2.3504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f58f086e969 code=0x7ffc0000 [ 332.161787][ T29] audit: type=1326 audit(1747807302.768:24251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14559 comm="syz.2.3504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f086e969 code=0x7ffc0000 [ 332.161879][ T29] audit: type=1326 audit(1747807302.768:24252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14559 comm="syz.2.3504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f58f086e969 code=0x7ffc0000 [ 332.170401][T14555] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.3502: Failed to acquire dquot type 0 [ 332.260719][T14568] EXT4-fs (loop5): 1 orphan inode deleted [ 332.382632][T14568] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.383462][ T3516] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:47: Failed to release dquot type 1 [ 332.395763][T14568] ext4 filesystem being mounted at /447/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 332.427887][T12476] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.448647][T14573] loop0: detected capacity change from 0 to 1024 [ 332.553307][T14581] loop2: detected capacity change from 0 to 8192 [ 332.631611][T14587] loop6: detected capacity change from 0 to 512 [ 332.645665][T14593] lo speed is unknown, defaulting to 1000 [ 332.655181][T14587] EXT4-fs (loop6): orphan cleanup on readonly fs [ 332.665704][T14587] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.3512: bad orphan inode 13 [ 332.682171][T14587] ext4_test_bit(bit=12, block=18) = 1 [ 332.687658][T14587] is_bad_inode(inode)=0 [ 332.691949][T14587] NEXT_ORPHAN(inode)=2130706432 [ 332.696858][T14587] max_ino=32 [ 332.701447][T14587] i_nlink=1 [ 332.716765][T14587] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 332.737972][T14587] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 332.762817][T14600] loop2: detected capacity change from 0 to 2048 [ 332.770008][T14587] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3512: bg 0: block 248: padding at end of block bitmap is not set [ 332.785140][T14587] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.3512: Failed to acquire dquot type 1 [ 332.797845][T14603] netlink: 9 bytes leftover after parsing attributes in process `syz.6.3512'. [ 332.800521][T14587] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 332.810713][T14600] EXT4-fs (loop2): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.822666][T14603] 1猉功D: entered promiscuous mode [ 332.841409][T14603] 1猉功D: left allmulticast mode [ 332.875672][T14587] netlink: 5 bytes leftover after parsing attributes in process `syz.6.3512'. [ 332.884918][T14587] 0猉功D: renamed from 31猉功D [ 332.892464][T14587] 0猉功D: left promiscuous mode [ 332.899904][T14587] 0猉功D: entered allmulticast mode [ 332.906866][T14587] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 332.907273][T12110] EXT4-fs (loop2): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 332.942667][ T8726] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.992350][ T6580] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.997053][T14608] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 333.143994][T14619] loop2: detected capacity change from 0 to 8192 [ 333.282387][T14637] loop6: detected capacity change from 0 to 1024 [ 333.290459][T14637] EXT4-fs: Ignoring removed nobh option [ 333.296113][T14637] EXT4-fs: Ignoring removed bh option [ 333.308655][T14637] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.342708][ T8726] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.363423][T14642] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3532'. [ 333.459454][T14646] loop0: detected capacity change from 0 to 128 [ 333.468651][T14646] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 333.482406][T14646] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.495947][T14646] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 333.519881][T12476] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 333.595019][T14655] lo speed is unknown, defaulting to 1000 [ 333.769006][T14661] loop3: detected capacity change from 0 to 128 [ 333.784457][T14661] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.815785][T14666] netlink: 192 bytes leftover after parsing attributes in process `syz.0.3541'. [ 333.828447][T14661] FAULT_INJECTION: forcing a failure. [ 333.828447][T14661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.841614][T14661] CPU: 1 UID: 0 PID: 14661 Comm: syz.3.3539 Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(voluntary) [ 333.841668][T14661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 333.841681][T14661] Call Trace: [ 333.841690][T14661] [ 333.841699][T14661] __dump_stack+0x1d/0x30 [ 333.841722][T14661] dump_stack_lvl+0xe8/0x140 [ 333.841742][T14661] dump_stack+0x15/0x1b [ 333.841859][T14661] should_fail_ex+0x265/0x280 [ 333.841911][T14661] should_fail+0xb/0x20 [ 333.841947][T14661] should_fail_usercopy+0x1a/0x20 [ 333.842016][T14661] strncpy_from_user+0x25/0x230 [ 333.842072][T14661] ? kmem_cache_alloc_noprof+0x186/0x310 [ 333.842093][T14661] ? getname_flags+0x80/0x3b0 [ 333.842133][T14661] getname_flags+0xae/0x3b0 [ 333.842172][T14661] __x64_sys_link+0x40/0x70 [ 333.842208][T14661] x64_sys_call+0x2af9/0x2fb0 [ 333.842253][T14661] do_syscall_64+0xd0/0x1a0 [ 333.842283][T14661] ? clear_bhb_loop+0x40/0x90 [ 333.842311][T14661] ? clear_bhb_loop+0x40/0x90 [ 333.842338][T14661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.842416][T14661] RIP: 0033:0x7f8c196be969 [ 333.842437][T14661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.842457][T14661] RSP: 002b:00007f8c17d27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 333.842477][T14661] RAX: ffffffffffffffda RBX: 00007f8c198e5fa0 RCX: 00007f8c196be969 [ 333.842494][T14661] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000200000000b40 [ 333.842575][T14661] RBP: 00007f8c17d27090 R08: 0000000000000000 R09: 0000000000000000 [ 333.842655][T14661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.842672][T14661] R13: 0000000000000000 R14: 00007f8c198e5fa0 R15: 00007ffcd127bbe8 [ 333.842695][T14661] [ 334.009785][T14666] SELinux: Context system_u:object_r:fsa is not valid (left unmapped). [ 334.045012][T14666] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3541'. [ 334.192152][T14676] loop0: detected capacity change from 0 to 2048 [ 334.200472][T14676] EXT4-fs: Ignoring removed i_version option [ 334.200738][T14678] netlink: 'syz.5.3547': attribute type 10 has an invalid length. [ 334.219724][T14678] hsr_slave_0: left promiscuous mode [ 334.228980][T14678] hsr_slave_1: left promiscuous mode [ 334.258091][T14676] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.284268][T14676] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3546: bg 0: block 345: padding at end of block bitmap is not set [ 334.302889][T14676] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 334.317916][T14676] EXT4-fs (loop0): This should not happen!! Data will be lost [ 334.317916][T14676] [ 334.562066][T14705] loop0: detected capacity change from 0 to 128 [ 334.594883][T14705] lo speed is unknown, defaulting to 1000 [ 334.892328][T14727] loop0: detected capacity change from 0 to 512 [ 334.900474][T14727] EXT4-fs (loop0): orphan cleanup on readonly fs [ 334.909422][T14727] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.3558: bad orphan inode 13 [ 334.919797][T14727] ext4_test_bit(bit=12, block=18) = 1 [ 334.925184][T14727] is_bad_inode(inode)=0 [ 334.929410][T14727] NEXT_ORPHAN(inode)=2130706432 [ 334.934275][T14727] max_ino=32 [ 334.939801][T14727] i_nlink=1 [ 334.945872][T14725] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 334.968613][T14725] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 335.085846][T14738] loop0: detected capacity change from 0 to 8192 [ 335.103272][T14741] FAULT_INJECTION: forcing a failure. [ 335.103272][T14741] name failslab, interval 1, probability 0, space 0, times 0 [ 335.116036][T14741] CPU: 0 UID: 0 PID: 14741 Comm: syz.2.3563 Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(voluntary) [ 335.116072][T14741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 335.116087][T14741] Call Trace: [ 335.116096][T14741] [ 335.116139][T14741] __dump_stack+0x1d/0x30 [ 335.116161][T14741] dump_stack_lvl+0xe8/0x140 [ 335.116181][T14741] dump_stack+0x15/0x1b [ 335.116198][T14741] should_fail_ex+0x265/0x280 [ 335.116294][T14741] should_failslab+0x8c/0xb0 [ 335.116361][T14741] kmem_cache_alloc_noprof+0x50/0x310 [ 335.116385][T14741] ? skb_clone+0x151/0x1f0 [ 335.116411][T14741] skb_clone+0x151/0x1f0 [ 335.116431][T14741] __netlink_deliver_tap+0x2c9/0x500 [ 335.116470][T14741] netlink_unicast+0x64c/0x670 [ 335.116508][T14741] netlink_sendmsg+0x58b/0x6b0 [ 335.116535][T14741] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.116569][T14741] __sock_sendmsg+0x145/0x180 [ 335.116625][T14741] ____sys_sendmsg+0x31e/0x4e0 [ 335.116653][T14741] ___sys_sendmsg+0x17b/0x1d0 [ 335.116691][T14741] __x64_sys_sendmsg+0xd4/0x160 [ 335.116720][T14741] x64_sys_call+0x2999/0x2fb0 [ 335.116837][T14741] do_syscall_64+0xd0/0x1a0 [ 335.116866][T14741] ? clear_bhb_loop+0x40/0x90 [ 335.116893][T14741] ? clear_bhb_loop+0x40/0x90 [ 335.116953][T14741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.116978][T14741] RIP: 0033:0x7f58f086e969 [ 335.117002][T14741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.117024][T14741] RSP: 002b:00007f58eeed7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 335.117048][T14741] RAX: ffffffffffffffda RBX: 00007f58f0a95fa0 RCX: 00007f58f086e969 [ 335.117063][T14741] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000005 [ 335.117110][T14741] RBP: 00007f58eeed7090 R08: 0000000000000000 R09: 0000000000000000 [ 335.117125][T14741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.117138][T14741] R13: 0000000000000000 R14: 00007f58f0a95fa0 R15: 00007fff2064e9f8 [ 335.117159][T14741] [ 335.354684][T14746] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.364436][T14746] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.379514][T14746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.387697][T14746] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.453177][T14752] @: renamed from vlan0 [ 335.464449][T14752] loop2: detected capacity change from 0 to 128 [ 335.489161][T14752] lo speed is unknown, defaulting to 1000 [ 335.592480][T14760] loop6: detected capacity change from 0 to 2048 [ 335.647957][T14766] loop6: detected capacity change from 0 to 512 [ 335.672491][T14766] ext4 filesystem being mounted at /347/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.708262][T14770] loop5: detected capacity change from 0 to 2048 [ 335.714766][T14766] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.3572: Failed to acquire dquot type 0 [ 335.716104][T14770] EXT4-fs: Ignoring removed i_version option [ 335.746310][T14773] FAULT_INJECTION: forcing a failure. [ 335.746310][T14773] name failslab, interval 1, probability 0, space 0, times 0 [ 335.759794][T14773] CPU: 0 UID: 0 PID: 14773 Comm: syz.3.3574 Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(voluntary) [ 335.759828][T14773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 335.759844][T14773] Call Trace: [ 335.759852][T14773] [ 335.759862][T14773] __dump_stack+0x1d/0x30 [ 335.759908][T14773] dump_stack_lvl+0xe8/0x140 [ 335.759932][T14773] dump_stack+0x15/0x1b [ 335.759953][T14773] should_fail_ex+0x265/0x280 [ 335.759992][T14773] should_failslab+0x8c/0xb0 [ 335.760060][T14773] __kmalloc_cache_node_noprof+0x54/0x320 [ 335.760086][T14773] ? __get_vm_area_node+0x106/0x1d0 [ 335.760116][T14773] __get_vm_area_node+0x106/0x1d0 [ 335.760145][T14773] __vmalloc_node_range_noprof+0x26a/0xdf0 [ 335.760237][T14773] ? bpf_check+0xe0/0xcc10 [ 335.760294][T14773] ? __alloc_frozen_pages_noprof+0x15f/0x360 [ 335.760333][T14773] ? bpf_check+0xe0/0xcc10 [ 335.760359][T14773] vzalloc_noprof+0x5e/0x70 [ 335.760398][T14773] ? bpf_check+0xe0/0xcc10 [ 335.760424][T14773] bpf_check+0xe0/0xcc10 [ 335.760451][T14773] ? page_counter_charge+0x207/0x230 [ 335.760483][T14773] ? __rcu_read_unlock+0x4f/0x70 [ 335.760509][T14773] ? obj_cgroup_charge_pages+0x136/0x1a0 [ 335.760574][T14773] ? __rcu_read_unlock+0x4f/0x70 [ 335.760599][T14773] ? __memcg_kmem_charge_page+0xd1/0x170 [ 335.760646][T14773] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 335.760679][T14773] ? alloc_pages_bulk_noprof+0x4b7/0x540 [ 335.760707][T14773] ? policy_nodemask+0x2a3/0x410 [ 335.760732][T14773] ? __vmap_pages_range_noflush+0x901/0x920 [ 335.760810][T14773] ? _find_next_zero_bit+0x29/0xa0 [ 335.760843][T14773] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 335.760878][T14773] ? cgroup_rstat_updated+0xa3/0x510 [ 335.760930][T14773] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 335.760994][T14773] ? cgroup_rstat_updated+0xa3/0x510 [ 335.761031][T14773] ? __mod_memcg_state+0x11e/0x270 [ 335.761068][T14773] ? __rcu_read_unlock+0x4f/0x70 [ 335.761094][T14773] ? pcpu_memcg_post_alloc_hook+0x15b/0x1c0 [ 335.761185][T14773] ? should_fail_ex+0xdb/0x280 [ 335.761214][T14773] ? selinux_bpf_prog_load+0x36/0xf0 [ 335.761243][T14773] ? should_failslab+0x8c/0xb0 [ 335.761297][T14773] ? __kmalloc_cache_noprof+0x189/0x320 [ 335.761327][T14773] ? selinux_bpf_prog_load+0xbf/0xf0 [ 335.761356][T14773] ? security_bpf_prog_load+0x2c/0xa0 [ 335.761421][T14773] bpf_prog_load+0xedd/0x1070 [ 335.761457][T14773] ? security_bpf+0x2b/0x90 [ 335.761482][T14773] __sys_bpf+0x51d/0x790 [ 335.761514][T14773] __x64_sys_bpf+0x41/0x50 [ 335.761592][T14773] x64_sys_call+0x2478/0x2fb0 [ 335.761631][T14773] do_syscall_64+0xd0/0x1a0 [ 335.761654][T14773] ? clear_bhb_loop+0x40/0x90 [ 335.761676][T14773] ? clear_bhb_loop+0x40/0x90 [ 335.761696][T14773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.761853][T14773] RIP: 0033:0x7f8c196be969 [ 335.761869][T14773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.761889][T14773] RSP: 002b:00007f8c17d27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 335.761909][T14773] RAX: ffffffffffffffda RBX: 00007f8c198e5fa0 RCX: 00007f8c196be969 [ 335.761921][T14773] RDX: 0000000000000094 RSI: 0000200000000b40 RDI: 0000000000000005 [ 335.761934][T14773] RBP: 00007f8c17d27090 R08: 0000000000000000 R09: 0000000000000000 [ 335.761946][T14773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 335.761958][T14773] R13: 0000000000000000 R14: 00007f8c198e5fa0 R15: 00007ffcd127bbe8 [ 335.762004][T14773] [ 335.762038][T14773] syz.3.3574: vmalloc error: size 240, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 335.775806][T14770] ext4 filesystem being mounted at /455/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.786821][T14773] ,cpuset= [ 335.803527][T14770] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3573: bg 0: block 345: padding at end of block bitmap is not set [ 335.805763][T14773] /,mems_allowed=0 [ 335.811766][T14770] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 335.811798][T14770] EXT4-fs (loop5): This should not happen!! Data will be lost [ 335.811798][T14770] [ 336.196664][T14773] [ 336.200364][T14773] CPU: 0 UID: 0 PID: 14773 Comm: syz.3.3574 Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(voluntary) [ 336.200460][T14773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 336.200511][T14773] Call Trace: [ 336.200515][T14773] [ 336.200521][T14773] __dump_stack+0x1d/0x30 [ 336.200594][T14773] dump_stack_lvl+0xe8/0x140 [ 336.200605][T14773] dump_stack+0x15/0x1b [ 336.200614][T14773] warn_alloc+0x12b/0x1a0 [ 336.200654][T14773] __vmalloc_node_range_noprof+0x28e/0xdf0 [ 336.200669][T14773] ? __alloc_frozen_pages_noprof+0x15f/0x360 [ 336.200710][T14773] ? bpf_check+0xe0/0xcc10 [ 336.200798][T14773] vzalloc_noprof+0x5e/0x70 [ 336.200812][T14773] ? bpf_check+0xe0/0xcc10 [ 336.200824][T14773] bpf_check+0xe0/0xcc10 [ 336.200836][T14773] ? page_counter_charge+0x207/0x230 [ 336.200915][T14773] ? __rcu_read_unlock+0x4f/0x70 [ 336.200929][T14773] ? obj_cgroup_charge_pages+0x136/0x1a0 [ 336.200941][T14773] ? __rcu_read_unlock+0x4f/0x70 [ 336.201001][T14773] ? __memcg_kmem_charge_page+0xd1/0x170 [ 336.201014][T14773] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 336.201029][T14773] ? alloc_pages_bulk_noprof+0x4b7/0x540 [ 336.201043][T14773] ? policy_nodemask+0x2a3/0x410 [ 336.201118][T14773] ? __vmap_pages_range_noflush+0x901/0x920 [ 336.201191][T14773] ? _find_next_zero_bit+0x29/0xa0 [ 336.201207][T14773] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 336.201223][T14773] ? cgroup_rstat_updated+0xa3/0x510 [ 336.201273][T14773] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 336.201290][T14773] ? cgroup_rstat_updated+0xa3/0x510 [ 336.201307][T14773] ? __mod_memcg_state+0x11e/0x270 [ 336.201364][T14773] ? __rcu_read_unlock+0x4f/0x70 [ 336.201376][T14773] ? pcpu_memcg_post_alloc_hook+0x15b/0x1c0 [ 336.201392][T14773] ? should_fail_ex+0xdb/0x280 [ 336.201409][T14773] ? selinux_bpf_prog_load+0x36/0xf0 [ 336.201480][T14773] ? should_failslab+0x8c/0xb0 [ 336.201496][T14773] ? __kmalloc_cache_noprof+0x189/0x320 [ 336.201509][T14773] ? selinux_bpf_prog_load+0xbf/0xf0 [ 336.201546][T14773] ? security_bpf_prog_load+0x2c/0xa0 [ 336.201562][T14773] bpf_prog_load+0xedd/0x1070 [ 336.201665][T14773] ? security_bpf+0x2b/0x90 [ 336.201679][T14773] __sys_bpf+0x51d/0x790 [ 336.201698][T14773] __x64_sys_bpf+0x41/0x50 [ 336.201743][T14773] x64_sys_call+0x2478/0x2fb0 [ 336.201755][T14773] do_syscall_64+0xd0/0x1a0 [ 336.201768][T14773] ? clear_bhb_loop+0x40/0x90 [ 336.201780][T14773] ? clear_bhb_loop+0x40/0x90 [ 336.201845][T14773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.201857][T14773] RIP: 0033:0x7f8c196be969 [ 336.201925][T14773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.201936][T14773] RSP: 002b:00007f8c17d27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 336.201996][T14773] RAX: ffffffffffffffda RBX: 00007f8c198e5fa0 RCX: 00007f8c196be969 [ 336.202003][T14773] RDX: 0000000000000094 RSI: 0000200000000b40 RDI: 0000000000000005 [ 336.202010][T14773] RBP: 00007f8c17d27090 R08: 0000000000000000 R09: 0000000000000000 [ 336.202087][T14773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 336.202094][T14773] R13: 0000000000000000 R14: 00007f8c198e5fa0 R15: 00007ffcd127bbe8 [ 336.202140][T14773] [ 336.202144][T14773] Mem-Info: [ 336.543930][T14773] active_anon:29150 inactive_anon:3 isolated_anon:0 [ 336.543930][T14773] active_file:14900 inactive_file:12640 isolated_file:0 [ 336.543930][T14773] unevictable:0 dirty:172 writeback:0 [ 336.543930][T14773] slab_reclaimable:3242 slab_unreclaimable:32492 [ 336.543930][T14773] mapped:32574 shmem:21935 pagetables:1147 [ 336.543930][T14773] sec_pagetables:0 bounce:0 [ 336.543930][T14773] kernel_misc_reclaimable:0 [ 336.543930][T14773] free:1846007 free_pcp:5855 free_cma:0 [ 336.591635][T14773] Node 0 active_anon:116600kB inactive_anon:12kB active_file:59600kB inactive_file:50560kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:130296kB dirty:688kB writeback:0kB shmem:87740kB writeback_tmp:0kB kernel_stack:3840kB pagetables:4588kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 336.623308][T14773] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 336.637967][T14795] loop0: detected capacity change from 0 to 512 [ 336.652362][T14773] lowmem_reserve[]: 0 2884 7863 7863 [ 336.662514][T14773] Node 0 DMA32 free:2949928kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953560kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 336.693342][T14773] lowmem_reserve[]: 0 0 4978 4978 [ 336.698449][T14773] Node 0 Normal free:4418444kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:116932kB inactive_anon:12kB active_file:59600kB inactive_file:50624kB unevictable:0kB writepending:760kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:19616kB local_pcp:14580kB free_cma:0kB [ 336.731453][T14773] lowmem_reserve[]: 0 0 0 0 [ 336.736105][T14773] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 336.748469][T14795] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.3578: Failed to acquire dquot type 1 [ 336.748903][T14773] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 1*16kB (M) 4*32kB (M) 2*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949928kB [ 336.775810][T14795] EXT4-fs (loop0): 1 truncate cleaned up [ 336.778306][T14773] Node 0 Normal: 2*4kB (E) 70*8kB (UE) 32*16kB (UME) 50*32kB (UE) 30*64kB (UME) 125*128kB (UME) 117*256kB (UME) 47*512kB (ME) 40*1024kB (UME) 41*2048kB (UME) 1030*4096kB (UME) = 4418424kB [ 336.794943][T14795] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.802775][T14773] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 336.821016][T14773] 49533 total pagecache pages [ 336.825758][T14773] 4 pages in swap cache [ 336.832356][T14773] Free swap = 124980kB [ 336.836591][T14773] Total swap = 124996kB [ 336.840778][T14773] 2097051 pages RAM [ 336.844620][T14773] 0 pages HighMem/MovableOnly [ 336.849361][T14773] 80260 pages reserved [ 337.056437][T14822] __nla_validate_parse: 8 callbacks suppressed [ 337.056459][T14822] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3582'. [ 337.127279][T14816] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3582'. [ 337.139792][T14829] loop5: detected capacity change from 0 to 2048 [ 337.251457][T14831] loop3: detected capacity change from 0 to 128 [ 337.275053][T14831] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3586'. [ 337.345977][T14831] lo speed is unknown, defaulting to 1000 [ 337.401624][ T29] kauditd_printk_skb: 223 callbacks suppressed [ 337.401642][ T29] audit: type=1326 audit(1747807308.038:24467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14849 comm="syz.2.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f086e969 code=0x7ffc0000 [ 337.454540][ T29] audit: type=1326 audit(1747807308.068:24468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14849 comm="syz.2.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58f086e969 code=0x7ffc0000 [ 337.480656][ T29] audit: type=1326 audit(1747807308.068:24469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14849 comm="syz.2.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f086e969 code=0x7ffc0000 [ 337.504400][ T29] audit: type=1326 audit(1747807308.068:24470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14849 comm="syz.2.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f086e969 code=0x7ffc0000 [ 337.530314][ T29] audit: type=1326 audit(1747807308.078:24471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14849 comm="syz.2.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58f086e969 code=0x7ffc0000 [ 337.554050][ T29] audit: type=1326 audit(1747807308.078:24472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14849 comm="syz.2.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f086e969 code=0x7ffc0000 [ 337.580048][ T29] audit: type=1326 audit(1747807308.078:24473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14849 comm="syz.2.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f086e969 code=0x7ffc0000 [ 337.603787][ T29] audit: type=1326 audit(1747807308.078:24474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14849 comm="syz.2.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58f086e969 code=0x7ffc0000 [ 337.629886][ T29] audit: type=1326 audit(1747807308.078:24475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14849 comm="syz.2.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f086e969 code=0x7ffc0000 [ 337.653741][ T29] audit: type=1326 audit(1747807308.078:24476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14849 comm="syz.2.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f086e969 code=0x7ffc0000 [ 337.718306][T14418] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 337.786550][T14870] loop2: detected capacity change from 0 to 2048 [ 337.813866][T14870] EXT4-fs: Ignoring removed i_version option [ 337.828506][T14870] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.856045][T14872] loop6: detected capacity change from 0 to 2048 [ 337.873258][T14870] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3591'. [ 337.892911][T14870] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3591: bg 0: block 345: padding at end of block bitmap is not set [ 337.911278][T14870] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 337.924421][T14870] EXT4-fs (loop2): This should not happen!! Data will be lost [ 337.924421][T14870] [ 337.973226][T14886] loop0: detected capacity change from 0 to 512 [ 337.988329][T14886] EXT4-fs (loop0): orphan cleanup on readonly fs [ 337.999594][T14886] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.3593: bad orphan inode 13 [ 338.012793][T14886] ext4_test_bit(bit=12, block=18) = 1 [ 338.018289][T14886] is_bad_inode(inode)=0 [ 338.022508][T14886] NEXT_ORPHAN(inode)=2130706432 [ 338.027411][T14886] max_ino=32 [ 338.030623][T14886] i_nlink=1 [ 338.064422][T14898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3597'. [ 338.074131][T14879] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 338.074955][T14898] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3597'. [ 338.104746][T14879] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 338.192282][T14910] loop3: detected capacity change from 0 to 1024 [ 338.204558][T14910] EXT4-fs: Ignoring removed i_version option [ 338.211137][T14910] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 338.221331][T14910] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 338.235276][T14910] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 338.243437][T14910] EXT4-fs (loop3): orphan cleanup on readonly fs [ 338.252892][T14910] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 338.282158][T14910] EXT4-fs (loop3): Remounting filesystem read-only [ 338.291092][T14910] EXT4-fs (loop3): 1 orphan inode deleted [ 338.371626][T14927] loop6: detected capacity change from 0 to 128 [ 338.391195][T14920] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3604'. [ 338.416950][T14920] lo speed is unknown, defaulting to 1000 [ 338.484822][T14939] loop2: detected capacity change from 0 to 2048 [ 338.508362][T14938] loop5: detected capacity change from 0 to 2048 [ 338.516364][T14938] EXT4-fs: Ignoring removed i_version option [ 338.531562][T14941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3611'. [ 338.541468][T14941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3611'. [ 338.546134][T14938] ext4 filesystem being mounted at /462/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.603568][T14938] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3610'. [ 338.642063][T14938] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3610: bg 0: block 345: padding at end of block bitmap is not set [ 338.659826][T14938] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 338.673057][T14938] EXT4-fs (loop5): This should not happen!! Data will be lost [ 338.673057][T14938] [ 338.692684][T14951] loop0: detected capacity change from 0 to 1024 [ 338.708221][T14951] EXT4-fs: Ignoring removed nobh option [ 338.713849][T14951] EXT4-fs: Ignoring removed bh option [ 338.941443][T14986] loop6: detected capacity change from 0 to 1024 [ 338.948311][T14986] EXT4-fs: Ignoring removed bh option [ 338.978024][T14986] bond1: entered promiscuous mode [ 338.983120][T14986] bond1: entered allmulticast mode [ 338.989394][T14986] 8021q: adding VLAN 0 to HW filter on device bond1 [ 339.001488][T14986] bond1 (unregistering): Released all slaves [ 339.019898][T14997] loop5: detected capacity change from 0 to 512 [ 339.033919][T14995] loop0: detected capacity change from 0 to 128 [ 339.041292][T14997] EXT4-fs (loop5): orphan cleanup on readonly fs [ 339.041776][T14997] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.3624: bad orphan inode 13 [ 339.041996][T14997] ext4_test_bit(bit=12, block=18) = 1 [ 339.061800][T14995] lo speed is unknown, defaulting to 1000 [ 339.064875][T14997] is_bad_inode(inode)=0 [ 339.064887][T14997] NEXT_ORPHAN(inode)=2130706432 [ 339.064897][T14997] max_ino=32 [ 339.083639][T14997] i_nlink=1 [ 339.118822][T14992] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 339.149417][T14992] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 339.189688][T15002] loop6: detected capacity change from 0 to 512 [ 339.228998][T15002] ext4 filesystem being mounted at /360/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 339.254453][T15002] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.3626: Failed to acquire dquot type 0 [ 339.282292][T15011] loop0: detected capacity change from 0 to 1024 [ 339.292856][T15011] EXT4-fs: Ignoring removed nobh option [ 339.299803][T15011] EXT4-fs: Ignoring removed bh option [ 339.363255][T15019] netlink: 'syz.3.3632': attribute type 4 has an invalid length. [ 339.398811][T15020] netlink: 'syz.3.3632': attribute type 4 has an invalid length. [ 339.539789][T15044] loop5: detected capacity change from 0 to 1024 [ 339.546686][T15044] EXT4-fs: Ignoring removed nobh option [ 339.554781][T15044] EXT4-fs: Ignoring removed bh option [ 339.572524][T15051] loop6: detected capacity change from 0 to 1024 [ 339.583804][T15053] loop2: detected capacity change from 0 to 128 [ 339.601917][T15041] lo speed is unknown, defaulting to 1000 [ 339.616810][T15051] EXT4-fs: Ignoring removed nobh option [ 339.623132][T15051] EXT4-fs: Ignoring removed bh option [ 339.723669][T15064] loop0: detected capacity change from 0 to 2048 [ 339.743364][T15063] loop6: detected capacity change from 0 to 2048 [ 339.751044][T15063] EXT4-fs: Ignoring removed i_version option [ 339.772543][T15063] ext4 filesystem being mounted at /366/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 339.804777][T15063] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3646: bg 0: block 345: padding at end of block bitmap is not set [ 339.838420][T15063] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 339.850982][T15063] EXT4-fs (loop6): This should not happen!! Data will be lost [ 339.850982][T15063] [ 340.015783][T15088] loop2: detected capacity change from 0 to 256 [ 340.052982][T15102] loop6: detected capacity change from 0 to 1024 [ 340.060275][T15102] EXT4-fs: Ignoring removed nobh option [ 340.065921][T15102] EXT4-fs: Ignoring removed bh option [ 340.198254][T15114] loop0: detected capacity change from 0 to 2048 [ 340.230831][T15124] loop2: detected capacity change from 0 to 2048 [ 340.240015][T15124] EXT4-fs: Ignoring removed i_version option [ 340.250206][T15122] loop6: detected capacity change from 0 to 512 [ 340.269000][T15122] EXT4-fs (loop6): orphan cleanup on readonly fs [ 340.275891][T15124] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.276167][T15122] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.3664: bad orphan inode 13 [ 340.304002][T15124] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3665: bg 0: block 345: padding at end of block bitmap is not set [ 340.319602][T15124] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 340.328864][T15122] ext4_test_bit(bit=12, block=18) = 1 [ 340.334321][T15124] EXT4-fs (loop2): This should not happen!! Data will be lost [ 340.334321][T15124] [ 340.337689][T15122] is_bad_inode(inode)=0 [ 340.352796][T15122] NEXT_ORPHAN(inode)=2130706432 [ 340.357688][T15122] max_ino=32 [ 340.360995][T15122] i_nlink=1 [ 340.379709][T15131] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 340.415804][T15122] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 340.422893][T15141] loop0: detected capacity change from 0 to 1024 [ 340.434667][T15122] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 340.435004][T15141] EXT4-fs: Ignoring removed nobh option [ 340.448820][T15141] EXT4-fs: Ignoring removed bh option [ 340.593100][T15171] loop2: detected capacity change from 0 to 1024 [ 340.600055][T15171] EXT4-fs: Ignoring removed nobh option [ 340.605672][T15171] EXT4-fs: Ignoring removed bh option [ 340.648240][ T1040] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 340.659862][ T1040] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 340.739578][T15188] loop5: detected capacity change from 0 to 128 [ 340.746242][T15188] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 340.769442][ T3488] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 341.141888][ T3516] ================================================================== [ 341.149987][ T3516] BUG: KCSAN: data-race in n_tty_receive_char_flow_ctrl / tty_set_termios [ 341.158478][ T3516] [ 341.160804][ T3516] write to 0xffff888118b48d08 of 44 bytes by task 15219 on cpu 0: [ 341.168588][ T3516] tty_set_termios+0xc0/0x8c0 [ 341.173264][ T3516] set_termios+0x35b/0x4e0 [ 341.177677][ T3516] tty_mode_ioctl+0x379/0x5c0 [ 341.182347][ T3516] n_tty_ioctl_helper+0x91/0x210 [ 341.187281][ T3516] n_tty_ioctl+0x101/0x200 [ 341.191698][ T3516] tty_ioctl+0x842/0xb80 [ 341.195947][ T3516] __se_sys_ioctl+0xce/0x140 [ 341.200564][ T3516] __x64_sys_ioctl+0x43/0x50 [ 341.205153][ T3516] x64_sys_call+0x19a8/0x2fb0 [ 341.209820][ T3516] do_syscall_64+0xd0/0x1a0 [ 341.214316][ T3516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.220214][ T3516] [ 341.222545][ T3516] read to 0xffff888118b48d21 of 1 bytes by task 3516 on cpu 1: [ 341.230071][ T3516] n_tty_receive_char_flow_ctrl+0x23/0x1a0 [ 341.235877][ T3516] n_tty_lookahead_flow_ctrl+0xed/0x130 [ 341.241454][ T3516] tty_port_default_lookahead_buf+0x91/0xc0 [ 341.247387][ T3516] flush_to_ldisc+0x318/0x410 [ 341.252083][ T3516] process_scheduled_works+0x4cb/0x9d0 [ 341.257530][ T3516] worker_thread+0x582/0x770 [ 341.262119][ T3516] kthread+0x486/0x510 [ 341.266206][ T3516] ret_from_fork+0x4b/0x60 [ 341.270694][ T3516] ret_from_fork_asm+0x1a/0x30 [ 341.275461][ T3516] [ 341.277788][ T3516] value changed: 0x11 -> 0x9b [ 341.282447][ T3516] [ 341.284755][ T3516] Reported by Kernel Concurrency Sanitizer on: [ 341.290913][ T3516] CPU: 1 UID: 0 PID: 3516 Comm: kworker/u8:47 Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(voluntary) [ 341.303586][ T3516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 341.313628][ T3516] Workqueue: events_unbound flush_to_ldisc [ 341.319427][ T3516] ==================================================================