last executing test programs: 7m24.846547151s ago: executing program 3 (id=1439): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x10b000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xbbb}}, './file0\x00'}) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x4000000000]}, 0x8, 0x0) faccessat2(r3, &(0x7f0000000040)='\x00', 0x0, 0x1200) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="120000000d000000040200000200000000000000", @ANYRES32, @ANYBLOB="030000000000000000000000000000ee00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(r2, &(0x7f0000000200)='freezer.self_freezing\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0x2}, 0x18) r7 = syz_io_uring_setup(0x2439, &(0x7f0000001480)={0x0, 0x1064, 0x1000, 0x7, 0x40224}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r7, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2, 0x0, 0x530}, 0x0, 0x1000}) io_uring_enter(r7, 0x47f8, 0x1e43, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000340)="c75fd4a124758761a58e168ac6dfbfb9caba50bcde7e70acdd51e873a5876d3bfbb6a6e6db88f06831d429fa95c4f5308fdedb442058009502ebbb145dc917c1728ff6683653317ed86dc3543d762fc0d1a862a4d65447bb690746ef8252fa19e67a2875a33d3f70274a09cef144895be7eaa78f17d5eb46cfdda05debb8f2c16b3abc31d574b21fb39f8b38c000d2be46d90a39e0713f7dfea8", 0x9a) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000240), &(0x7f0000000280)=r4}, 0x20) 7m24.746998913s ago: executing program 3 (id=1442): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f0000"], 0x39) r1 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r1, &(0x7f0000007940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003001100000000000000000000001c2000"], 0x80}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, &(0x7f0000000000)={0x77359400}, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xf, &(0x7f0000000180)={@rand_addr, 0x0}, &(0x7f00000001c0)=0x14) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0x214000, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0xfff, 0x0, 0x1, 0x60421, r0, 0x3ebc, '\x00', r3, r4, 0x3, 0x3, 0x1, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x13, &(0x7f0000000780)=ANY=[@ANYRES32=r0, @ANYBLOB="00000000db050000c7230200e4ffffff1847000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000086000000184b00000100000000000000000000004769e0ff00000000"], &(0x7f0000000140)='syzkaller\x00', 0x86, 0xcd, &(0x7f00000004c0)=""/205, 0x40f00, 0x0, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000380)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x3, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000640)=[r5, r6], &(0x7f0000000680)=[{0x6, 0x5, 0xc, 0x8}, {0x2, 0x5, 0x1, 0xa}, {0x4, 0x3, 0x5}, {0x5, 0x1, 0xb, 0x4}], 0x10, 0x81}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r7, &(0x7f0000000200)={&(0x7f00000003c0)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x1, 0x4}}, 0x10, 0x0}, 0x4000001) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) socket$pppl2tp(0x18, 0x1, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr=0x64010102}, 0x2, 0x2}}, 0x26) 7m22.031904504s ago: executing program 3 (id=1466): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) sendmmsg(0xffffffffffffffff, &(0x7f0000001dc0)=[{{&(0x7f0000000180)=@ll={0x11, 0xf8, 0x0, 0x1, 0x6}, 0x80, &(0x7f0000000780)=[{0x0}, {&(0x7f00000003c0)="92d88209cb2b27a20f9166f0939244896618d4852c8a74270ec0bb707cc82d255fd085bb385b298ec2562435d2d05104b52a747f0227ad34292917e6efd17fcfb4894d5cec42e73045dec33ab9ea42440128fa235a66fa5ad8", 0x59}, {&(0x7f0000000640)="59d8d93524ff247b83274d497ddd3fccbb232aca5972097ec34dc4e00491dbdbcd0f72e347e627a225", 0x29}, {&(0x7f00000006c0)="d3c8d15eb4f442c500e3ebdd1074b4e5601227363e704c2f1d3a3026ad1a42678eda406610b9586f13f986b16b3d8eac78c11f85e3bd088e8fceeb31a958d561aa2cdf324c64a115d8fe9eed48da9b4dd7bf506d7533fb03052e83181941ea88df10bd7c2f290b19e5a3fbd057fb31558ef322b2fec18add710fc54c48cbcc965329c313", 0x84}], 0x4, &(0x7f0000000b80)}}, {{&(0x7f0000000800)=@in={0x2, 0x4e23, @loopback}, 0x80, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000940)="8496a0e74c8dbad966b1d471d124f26fd721c0818e6c52eab0d045c57dbf14592ab89b36273fe5def716a974519600dfc4879f", 0x33}], 0x2}}], 0x2, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000e100000000000000009a037562416c80e144960153412c18c8bbf5c4a0110d392a659a5daa7ab8b9daee0822048732fb2ac7152b3a86331b96caae7e1acf083a754a1420f00d1b25c48bd8716fe6a52e9856eafc49f8f949b79dab38aff59a427a9e9a3c89806d499b3c22cb1e34ad5793806e148ef5ee00bcf48d1ec2cdf7fcdb1d2765b55995e8d5555038e36eff5c80c0c4598b8089228755b82a99939a43d8b0df981614b34acf31f5b81cced908", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000005f00)={0x34, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x34}}, 0x4004) 7m21.994121185s ago: executing program 3 (id=1468): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2, 0x0, 0x5}, 0x18) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000a40)={'ip6gre0\x00', 0x0, 0x29, 0xff, 0xbb, 0x1, 0x16, @private0, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x8000, 0x7, 0x20, 0x5}}) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@bloom_filter={0x1e, 0x7, 0xc, 0x7fff, 0x20010, r1, 0x80000001, '\x00', r4, r3, 0x3, 0x4, 0x2}, 0x50) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0x2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000791000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r10 = dup(r6) timerfd_gettime(r0, &(0x7f0000000280)) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r10]) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r10, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r11, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xab}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfff8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0xc000) 7m21.697037911s ago: executing program 3 (id=1469): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x2000015d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x7, 0x0, 0x1, 0x0, 0x40008, 0x590, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x4, @perf_config_ext={0xf, 0x40014}, 0x4c58, 0x1, 0x0, 0x0, 0xa, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000001cc0)=@gcm_128={{0x304}, "c0a4997f901e2b1e", "7b06ae90b3ce53ef8e7981f5e2eb1d30", "e03d8a1f", "9d8aeac12036cd5f"}, 0x28) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000600), 0x200001, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40189429, &(0x7f0000000640)={0x0, 0xffffffffffffffb9, 0x100000001}) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r7 = dup(r3) write$P9_RLERRORu(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}], 0x10) sendmmsg$inet6(r8, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x87, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000400)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r8, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000005c0)='ext4_fc_stats\x00', r0, 0x0, 0x5}, 0xfee1) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='iso9660\x00', 0x1000080, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) socket$nl_netfilter(0x10, 0x3, 0xc) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000008c0)={{}, 0x0, 0x10, @unused=[0x4758, 0x6, 0x0, 0x60000000000000], @subvolid=0xf}) 7m21.440123316s ago: executing program 3 (id=1474): socket$inet6(0xa, 0x800000000000002, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioprio_set$pid(0x2, 0x0, 0x2007) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000370400000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b120500000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r4, 0x0, 0x80000003}, 0x18) bind$vsock_stream(r3, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000200)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r1, 0x0, 0x4001) perf_event_open(0x0, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0xb) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r8 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r8, 0x2007ffc) sendfile(r8, r8, 0x0, 0x800000009) r9 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) fcntl$dupfd(r9, 0x0, r9) 7m21.399473306s ago: executing program 32 (id=1474): socket$inet6(0xa, 0x800000000000002, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioprio_set$pid(0x2, 0x0, 0x2007) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000370400000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b120500000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r4, 0x0, 0x80000003}, 0x18) bind$vsock_stream(r3, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000200)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r1, 0x0, 0x4001) perf_event_open(0x0, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0xb) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r8 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r8, 0x2007ffc) sendfile(r8, r8, 0x0, 0x800000009) r9 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) fcntl$dupfd(r9, 0x0, r9) 3m17.738671092s ago: executing program 0 (id=4987): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x2f00, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) 3m17.737271582s ago: executing program 0 (id=4988): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44001}, 0x8094) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000003e000701fcfffffff6dbdf25017c0000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 3m17.716151662s ago: executing program 0 (id=4989): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) write$binfmt_format(r2, &(0x7f0000000100)='0\x00', 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r2, &(0x7f0000000300)="ca0e808bb3", 0x5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], 0x0, 0x0, 0x2}}, 0x40) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1ba7be033964942529c058f7329831ac86fb3d2f228844dc01ba48a38ee494fc88b01971d6d0b05cbddf6d8cfd55514366f0681d8b128007eaa3351aed44b0cca41ba396328cf86e956186d8bc20cdbc45259a1f1fffcce52234df4634e9bc76677f21b94d217f39ec21d9fc7558e4df325e68f7a31f6ddb3f0f4796dbd7b152c5", @ANYRES64=r1, @ANYRES16=r4, @ANYRESHEX=r2, @ANYRESHEX=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_usbip_server_init(0x3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080), 0x3, 0x4cd, &(0x7f00000000c0)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpi8Ezi3Xg03jTxqkfjyT8ADx5MDAkxXABPa2Z3pt3ur+7CtqXs55Ns+zwzz8zzPDPzzD77PDsbwMAaS/8kEf+LiFsR8VQtujLBWO3f/btXZx7cvToTi5XKqX+Sarp7aTyTb7c9i4wXIgpfJg07rJm/fOXcdLk8dymLTy6c/2xy/vKV18+enz4zd2buwtSJE8eOHjn+5tQbvVeqRX5pve7t/eLivj3vnr75/kwxXz6S/a+vR1vF3oox1mHdK73t6rG3oy6cNB+na+taGLo2kl3WpbT9Xy0fPL3RBQLWTaVSqQy3X71YaXS9aQmwaSWx0SUANkb+Rp9+/s1f69T1eCzcOVn7AJTW+372qq0pRiFLU2r4fNtPYxHx8eK/36Sv6DQO8ecaFQAAGDi/nMx7go39v0Lsrkv3/2wOZTQino6InRHxTETsiohnI6ppn4uI5xszSCIqHfLf1RBfzv/HbBahcPuRK9lB2v97K5vbWtn/y3t/MTqUxXZE5B3mucPZMRmP0vAnZ8tzR9rsf8sq+df3/9JXmn/eF8zKcbvYMEA3O70w/XC1bXbnesTeYmP9k2J64vJpnCQi9kTE3h72O1oXPvvad/uWIqWV6Vavf1WlxZRez/NxrVS+jXi1dv4XY8X5X84x6Tw/OTkS5bnDk+lVcLhlHr/9fuODdvmvWv+f/mrc5J3jP5961GovSc//trrrP/L52+X6jyYRydJ87XxEZai3PG788VV1v2OHmtc97PW/JfmoGs7b1+fTCwuXjkRsSd5rXj61vG0ez9On9R8/1Lr978y2SY/ECxGRXsQvRsRLEbE/K/uBiDgYES2qtuTXt1/+tN26Lq//NZPWf7bl/W/F+V+er+8ykG+cLhk6d+DWgzY3j+7O/7FqaDxb0vr+l6y4RXRb0kc7egAAALA5FKL63f/CxFK4UJiYqI0B7YpthfLF+YX9EXFhtvaMwGiUCvlIV208uJTk45+jdfGphvjRbNz466Gt1fjEzMXy7EZXHgbc9mqbT5raf+rvHsd5gU2oD/NowCa1WvvffXOdCgKsO+//MLjq2v9imySLvikDTybv/zC4WrX/a/F9x2cX3DNg86toyzDQtH8YXMX4cClcfey55dO2wJPI+z8MpF6f6+8tUBluvWokWvxiwMjaFGNri7w2JJD2rPq4w1JEdJd468NkkXcB2//CQ6G3HQ5H86qh6LRV0sPvOOSB9KismvjM7r5f/PlvovT7svlhuZ2WujzdfQpsyO0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg7/4LAAD///QJ1ng=") syz_mount_image$ext4(&(0x7f0000000a80)='ext2\x00', &(0x7f0000000a40)='./file0/file0\x00', 0x8e, &(0x7f00000001c0), 0x1, 0x463, &(0x7f0000000b80)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r9}, &(0x7f0000000800), &(0x7f0000000840)=r10}, 0x20) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522ec, 0x0, {0x0, 0x0, 0x74, r11, {0x10, 0xf}, {0x3}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r6, 0x0, 0x80) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r8, 0xc0189373, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r7, {0x6}}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="010000000d000000050010000200000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000009b2300000000", @ANYRES32=r11, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) ioctl$TUNSETGROUP(r13, 0x400454ce, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m17.054296845s ago: executing program 0 (id=5001): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0xf7d4, 0x8, 0x1, 0x8001, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x4bfa, 0x10000000000004) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8509}}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x458, &(0x7f0000000d80)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000001900)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="540000000104050000000000000000000200000708000340000000030500010004000000080004400000080006000640000700000500010002000000080004400000000d0600064000000000080005400000009951d2e266dc637847d03d7347b63cc96680a3c3b3c3909373ccc6d48ae0f96b72221d9d87ec3eae718fd4b9c89e"], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x440) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r8, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x5ef}], 0x1, 0x5412, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000140)) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r11, 0x0, 0x1000000000000}, 0x18) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYRES16=r11], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r12}, 0x10) syz_clone(0x8009080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340), &(0x7f00000001c0)) 3m16.891516498s ago: executing program 0 (id=5003): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x35, 0x0, 0x0, 0x80000}, {0x5c}, {0x6, 0x0, 0x0, 0x7ffffe39}]}) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000001480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf25070d000008000500020000000a0004007770616e3400000008000300", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x300048c0) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x1, 0x0, 0x3}}, 0x2e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000080)) recvmmsg(r1, &(0x7f0000006480)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x12002, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") 3m16.409045287s ago: executing program 0 (id=5009): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44001}, 0x8094) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000003e000701fcfffffff6dbdf25017c0000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 3m16.408796697s ago: executing program 33 (id=5009): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44001}, 0x8094) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000003e000701fcfffffff6dbdf25017c0000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 2.678046559s ago: executing program 2 (id=8933): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49dd, 0x0, 0x0, 0xc003, 0x8, "fa3d76170000001b"}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff3d) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000002c0)={0x0, 0xe, 0x8000003, 0x6, 0x4, "a85c45a2c25cc646300200"}) r1 = syz_open_pts(r0, 0x1a1000) r2 = dup3(r1, r0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6(0xa, 0x3, 0x20) msgsnd(0x0, 0x0, 0x401, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r7 = dup(r6) r8 = socket$inet6(0xa, 0x3, 0x5) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) sendmmsg$inet6(r8, &(0x7f0000005c40)=[{{&(0x7f0000000200)={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000280)="fff9f0be46fa2f12ca8267be27eed08816505e9087a114d25bde3cd87dad8195c54fc180ae1847f330fd90b097acc6681f7436c754107d", 0x37}, {&(0x7f0000000600)="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", 0xfb}, {&(0x7f0000000700)="9c76fbfe0269c37c25b7d3ad2e87e11cf82e537d1829b8b6fffc06c0a64aa3b148fe040d0b8414de8ce0e9b215d9bebedc149822eb55d077295183d8b66c78590ac827226eafbd3eca6904cbfc225871e218e531fb2032b629c6bf1a2f7d49049193c41ea937ec0a0a9c122ed7f5242a983cb739a421eaed00e1ab938780b6784b7847bbda128515a63d78c348f8be0796722784c2dec18c0c85f6f66d254b01bca0a733917d9a0199eeb6d3fdc2019586da8ad45b5e2bf19ccdeeecac82709d81c792135aa695b578e8af201dc578c7d28d4c8b5ef7af66c013be88a93992e20a", 0xe1}, {&(0x7f0000000800)="78fd9f6f7219d35ba35b8778ad9625a25fc2e6e474e86477cda449fa25bbcdf734c6ceafde648c234ecda94efab0b3b08c0551a7a91c8834d6deb8006031df3e125861b8afefba4dbbd55d6d34afbc2bfcdb0d2a2eea7070542aac199d18ed16cf6ceb96c6ead231f0fe5fa9569a78bfcf3417ddb3003158dc7973256cdff438bd57765472bc8a628b6e559d375e1e32756903003936bdf8f84d45b50f69ff90aec990ee734f38761e5b57dc6f9186b66ff2", 0xb2}, {&(0x7f00000008c0)="803fb43c3ca0678f66f2af97ce674d8916812dc53403e3803ef250dbf3e705335b23797768c079561f4f6e79dcc91d4c058466ba77f3ac5d0367bf75f0f95e0409f7e5551b4c83df175faa62b4cf89dfa43abbdc57fd10412f9a028385fb16f9b8b73dea604f", 0x66}, {&(0x7f0000000a00)="b1cabd3ecb26e859c174a2c29d2a942b6d4bd540351092d7c11c8da755925e397ed9eb0132d894a5cb7c72f5decc6dc8479caedb0e13040054c6537cf68e9c5de95688da6707502c5ef470d9030cddf4b6418e20d744a372e65eee0ddffb2052997b2892b03c9486ae5fdfbd956b53bf5d0c62760d7650787d30ad2e1f9d9b3b6b29b78a478fe122e9d2d2b60b21caa88ceae67f40ba3ff627efe297b562a497b3f4652c31cc7c6b4b3bd694ad", 0xad}, {&(0x7f0000000940)="97edd0c98491144831b1ab0e389576455c9b87c8fdf2a1458afa6e9c9259b60e58f39063c9cafef7980be770ef3e25a4bf42d1fb059f9b7dcd3fde1323e3f5069c22882441dc0fd59aa8e02859bab1e8622c801e879404b08cb5ffebf5d6627a820c28e82f67f3d7466ef6125f1ef2273ec7f16af6", 0x75}], 0x7}}, {{&(0x7f0000000b40)={0xa, 0x4e23, 0x5, @private0, 0x4}, 0x1c, &(0x7f0000000ec0)=[{&(0x7f0000000b80)="4d4a802cd75bf721daf4a425c2ff48186ebedcefb4a42b99bad429c7aaebeb075ccfb6a92f95352b985cdaacd30225807a395a581cba853d98bdf69d33fd6f65c32ebd650bc638060a9b544d57676805c4b4757a51933efd7ed0a93ab7be5c56d21507a5112818ed42400cfc1d5682287c09e4cdadc328b54aba1a6374ae5545461ef64d9eabbc1f00ac6ff39577d1048bc837295e3e8247b451", 0x9a}, {&(0x7f0000000c40)="9f07bc20513d19376eb7673f4c5fcfab5b2e35d40e6c1fda310a7c7e7bb349e8b534f0f071caf2900360dce40bd9f8a4393e1f6723baef282a031dbf654cf5b1e8fce9f2067c6c773e00e5eabebc215ae6b4b8eac8fbb8f0274dfa2e8a4e3f7e552791a0254797260d0accb3151918aec3ff4595634438e41445577162e552d68cbd87e394a736b12946ed36e4695534f5c02c3d6d628e6a4b23dc802abb132aacee27b352cd0024992d7a1c642bbfe5d0ac4a73d7", 0xb5}, {&(0x7f0000000d00)="d119b5fd9838b236aef0426dcb05a2d8460418008aad9df1f84d7c2e16b8798c701726cd3e605e95987f15d9b89d6b7c0da3e64ab60dd9c08110cb53bc6f6fcbcf58ea3f9e47ab5fbf2f5b4c1aaa591331103953d51c4a4e9f8586fddb91334027514f1ca1f1f783a0c05a67a18bd76b16089f2902fb28e1d685fd758185132342ae6f147a821e543fc0061d5ac5007922989faf181b5a4ea5795fb3bc057305832671d528e461e09cb8afbe8a6478862f05611d127f54dba0", 0xb9}, {&(0x7f0000000dc0)="7c341c31ceee32256ec7027bdb431dcd2968f4c59a14314d47c55fd4e3b4a6b64b887e7c1f20594c55d69193fce72b22eb66a386482c2a4ba84966d8077d8a8fa63e1f2e984e31530479ed3aa56af995f4040a19b0f3f4a9a1befab27ec75f0049bbb94703e0beed2a515789dc00aa4be5bfe70fc19baf82a7ea3461bb19fa4e3311ba26014b3ca3415341d730e7d4fa11227a3504d5628694eb9f13c7c4f410c295fbed512e8f0afc10d308aaf6579c0580a35c5914948f289e0e4e06c93c644b6f399b94cb525943666fd7361bcc1c6ccf", 0xd2}], 0x4, &(0x7f0000000f00)=[@tclass={{0x14, 0x29, 0x43, 0x1}}, @rthdrdstopts={{0x110, 0x29, 0x37, {0x5c, 0x1f, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x74, 0xeb, "65be35f88fbc0ed28dbe2aaa3ea990ac84dcd05b670a0f91cfbd9d6ec52091aad33eff666b3bb9faab418719901fc8b8d49699067748d0cca6ac33b8ffbd7d050a180976317748b5d2f41da356cbd4425bb499e7c8bbff981dafd63d642d39650247731d8bd7f59fff5dda2de81e5e0864578ff394866f05aaf3a77f6ce38ef117a3567f864d49093d17ae732932339e1cd93dba15e050e2cd4c1b333553537c67a1cf013911837b5aabdb4c4fb9d2fbae472145030931bf15656d42f16a2f19b79a01cc5626256d547f0c13737fe2d3f087b561cd1ba3f502b7eb463f7a1608671d27f1e7026f898b0000"}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x800}}, @tclass={{0x14, 0x29, 0x43, 0xa8}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}], 0x170}}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001080)="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", 0x1000}, {&(0x7f0000002080)="b8009e7c6c27f7dcf89679318cd164bb75a64d8525228c90f15a9b736971e4b5dc7d644fd2ebd9c16378e75c94a23e4e85c64136630acbe5cf9b07100fc50d47b98e27984b40fd63a641046cb42bfb4b5d2eacddea17d1bdb88e053386f2d560e7d74f1ab9f20cfbc0105f46a6fac4954ab5d7a1139a00596698efb2beb3f57e96a10c134c65efaa27cbd5624b9ddc712e1a9edf52b01699003366f6b6a88b15395a4f", 0xa3}, {&(0x7f0000002140)="935995a39dd215ea388c402fad21922253ecb5b5f9282b0e5f26e69ed694ff272256ffd101d0fcfd68673bfdda601d0c826c9f9da88bc226d14405a8f872ec8bf32e41805eb94327131cfa4d8f5fa01d36a15dff998f6d05aa674cdbb2b8080e1641c286cccecc0b1bf722fcf596fb73d3ced1fc69a54e5aa2428d2a78a595cfb1859daa3853ab956b15e7f8f3fb925e3889f5ec13", 0x95}, {&(0x7f0000002200)="acd7a2a3b1e928eeb67c53bf6c004562a9984b0753b3432abae4009be93bbe077a37180436dadd12e10623eb07993cfea4f5357fa49139ae48498b5afe3ada96a4cb38ff1dcf4b80eb7114d124da0e9184eeaf8b5fc892554cff1a3724079be998013733a5bf8da4d7d889d24de172b4d08e43697a1afdfbc396f21ac33c71bac3eb4c841780854371de8909943ccacda7cf0df90d8916cae697fbecda389580b1892a981352e8235d33a824a6af6050bff5d1f4e5f3ccb2fc701fc8b045b252249e72322033f5d4178a65", 0xcb}], 0x4}}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002340)="a1957fa9fa5e9fbc5296b6608b728171e2474e1b59311b052bda9b894dbd6d71c58d64f36cb9a657d945548548f74d31286fafd4fcb21cdc29b6eeb0f92a7baf65844e240c7833270f9fcad465e5056298e983bfda3a07b37a7acd760c23c3efde65895bfd6aa2d361be5e700a20b481739ace777c1270abc173b792dc18e42992793680d91766ba0c1ce234a01cd93d7dd723aa098fb8f2411ea3d9339735f530e31190d65e6290678e05d3d44714b8669284330d0af683a65260693735500ea124262b1b869cd7", 0xc8}, {&(0x7f0000002440)="52efc04c3d70190d59ef05750d62d04e26d672f2dfa3c9786502febd5d660f1b5c58ec66f8502128e789600c9214bd9bc52febde65cd1f54b25549c1cd3f5f7fb53c16abc566782a7fd11cb59e8d5467b35df4dabc6ebda86b28dc9ebaa3d3665eaf1e02721abd00517e5fe8e7d738ff97ad5c14477eb7cf50f133547adcc3455bb6a392c78a173c563223baf6aedb6d96e080dd285e8e807e32ae09d9b0e4201bd0af65501a570b1f2baeef407d9a11090676369b79669660d5b59c", 0xbc}], 0x2, &(0x7f0000002540)=[@dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x2e, 0x6, 0x1, 0x3, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3f}]}}}, @hoplimit={{0x14}}, @dstopts={{0x100, 0x29, 0x37, {0x2, 0x1c, '\x00', [@ra={0x5, 0x2, 0xdc}, @calipso={0x7, 0x10, {0x3, 0x2, 0xf, 0xc6, [0x7]}}, @generic={0x2, 0x8f, "4487d8ea0f6e732a134989060adad7462fb4f08d10297ba962ca3c25e24cf6ffadd7fa0d7ff2d62beae5a0daf5c7284ad7d49b4a83e3e6b8bf74024149b7b3b08b688cfc330e7d0455820f908e850f47df4983c6ae6f14d367ffb1cd047bd008b0877db1e9d2fa867a9eebc52509bdb9d166f0fbe0956b335d0ac137b5d2df0d8c643cf90961f2bf70adaadab04eb4"}, @jumbo={0xc2, 0x4, 0x8}, @pad1, @calipso={0x7, 0x30, {0x3, 0xa, 0x9, 0x40, [0xa, 0x3, 0x9a, 0x3, 0x4]}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xee2}}], 0x190}}, {{0x0, 0x0, &(0x7f00000047c0)=[{&(0x7f0000002700)="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", 0x1000}, {&(0x7f0000003700)="f68eb2ea6d6421423c8a68e7f4e4d3ef931281ae071a1b129bca9d5c08dde148b56d8a52fac586e4db368fa833bb26ded4024c07bfa1b4ee09598a55ce1c78e9111caabdface640503a15e35d81f35b0ad514497c532ed3420e646fb743fb95cdd41f0b9e5914756c8981f9ef83a62e88b4cfc84d93c610d798bf2b767391a7848add2394efe791502a395", 0x8b}, {&(0x7f00000037c0)="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", 0x1000}], 0x3, &(0x7f0000004800)=[@flowinfo={{0x14, 0x29, 0xb, 0x2}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x3b, 0x2, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @loopback}}]}}}, @rthdrdstopts={{0xd0, 0x29, 0x37, {0x89, 0x17, '\x00', [@calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x1, [0x800, 0x9]}}, @generic={0x0, 0x9c, "b599d7a43cdbd5d54a228c634a7eda4c5b10c7c80a9a128dfa128e6dc44c3549b07f9503de3beea893eba89106998fc343d821cba0bf49f696ff2ce01ceeae308ad25b5ec26ccd1e4c3d28a6e4555297415a01cd4bf2065512359d2600953c47187d24c510fdd3d3c2b089e77bbcbb829a78afd17d203412f38ca3bb4404894ebe17f4c278d9fcfb9934aa3bdd09c91d3f13dba667111cd54bcfb079"}]}}}, @tclass={{0x14, 0x29, 0x43, 0x8}}, @dstopts_2292={{0x28, 0x29, 0x4, {0x21, 0x1, '\x00', [@pad1, @pad1, @pad1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xd5}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x3a, 0x0, '\x00', [@ra={0x5, 0x2, 0x101}]}}}], 0x190}}, {{0x0, 0x0, &(0x7f00000059c0)=[{&(0x7f00000049c0)="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", 0x1000}], 0x1, &(0x7f0000005a80)=[@dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}, @rthdrdstopts={{0x120, 0x29, 0x37, {0x84, 0x20, '\x00', [@generic={0xf, 0x99, "cd648e8170f28167ffff95f1710b58bceead5365fd14743c94d8872dfe6114b9b06cd0377f620271ad8d87d1491d0e791374b98c7054693a0c4c49330436a1b499d90293dfd1ed5028dbb9dfe011df6bc86f27148583d2e16d28eb1e1db37541dcdb703f169bbaae8f325ffe073b062f153f2b313562337e60f6ab96224659bf6ee71f5c1d5e4e1fad49c00cd97441a36c37d559c3d6d176be"}, @pad1, @calipso={0x7, 0x18, {0x1, 0x4, 0xd3, 0x6, [0x7, 0x1]}}, @calipso={0x7, 0x38, {0x3, 0xc, 0xd9, 0x5, [0x7ff, 0xf08, 0x1, 0x38, 0x0, 0x80000001]}}, @generic={0x3}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}, @enc_lim={0x4, 0x1, 0x6}]}}}, @rthdrdstopts={{0x40, 0x29, 0x37, {0x29, 0x5, '\x00', [@generic={0x8, 0x26, "aa62c500e9535626f4e064a3ca2ea62f30284a3164212e620a620e6f2d4b4d95deea07b92b6a"}]}}}], 0x1a0}}], 0x6, 0x24048004) write$P9_RLERRORu(r7, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, 0x0, &(0x7f00000002c0), 0x4000, &(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYRESOCT=r0, @ANYBLOB="f5b7e2b40c751536f8c9f7d5234216321f2e167904d4aaed5ae7c4accc8bc785eb571780021b27f1c0dbe89675d4e4dd561ca6a8c481bdee83a1aff4cb9df790f95321b860b58d07d83dcb5ce175aa27d4a564d5fde6c1aab7e7e612f375096e0afa564bfebdffc367b0cede06085c05fae238ada13fba21d9ce88720600000032f53f134b68269338dd209d04b0758c761a5b0234311b1f503ae94a7ce78bb941f28f6b2f3f8bcdf260766c9c5f2fc45da9de55145387b2ed05b7edca049aee19057cd4aa7c756a69c0a60a663ad2e52b4341817dbd723f2c868073", @ANYBLOB="3e5081b68c65f6792528"]) open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) 2.186525418s ago: executing program 1 (id=8939): r0 = socket$packet(0x11, 0xa, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000240)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x83f}, 0x18) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ppoll(&(0x7f00000001c0)=[{r3, 0x2000}], 0x1, 0x0, 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="0e9496d2e774f9bf20090000"], 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x35, 0x0, 0x5}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa0}}, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x7fff}, 0x18) syz_init_net_socket$llc(0x1a, 0x1, 0x0) close_range(r5, 0xffffffffffffffff, 0x200000000000000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r9}, 0x10) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x301, 0x400, 0x0, 0x0, 0x0, 0x1}}) r11 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r11, &(0x7f0000000140)={0x1d, r12}, 0x10) 2.09587813s ago: executing program 4 (id=8941): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) getgid() 2.066298991s ago: executing program 4 (id=8942): syz_usb_connect$uac1(0x1, 0xd0, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbe, 0x3, 0x1, 0x9, 0xe0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xa186, 0x8}, [@mixer_unit={0x7, 0x24, 0x4, 0x2, 0xc9, "a12c"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x205, 0x1, 0x3, 0x7, 0xc1, 0x3}, @mixer_unit={0x6, 0x24, 0x4, 0x6, 0x2, "84"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x306, 0x3, 0x6, 0x81}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x205, 0x6, 0x63, 0x81, 0x7, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0xbf, 0x241, 0x5, "a1ce09"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xe7, 0x3, 0x6, 0x7, "efd7cf"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x8, 0x4, 0x2, 0x27}, @as_header={0x7, 0x24, 0x1, 0xff, 0x8, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x6d670a10ff084874, 0x3, 0x1, 0x81, {0x7, 0x25, 0x1, 0x80, 0x8, 0xffff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x3, 0x2, 0x3, 0x7f, "6eaa8b"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xc6, 0x4, 0xe, {0x7, 0x25, 0x1, 0x2, 0x6, 0x9}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x3, 0x6, 0x69, 0x40, 0x3}, 0x37, &(0x7f0000000280)={0x5, 0xf, 0x37, 0x4, [@ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0x508ec81, 0xf00, 0x1000, [0xffffc0]}, @ss_container_id={0x14, 0x10, 0x4, 0xfb, "88acc8398107fcd1dc92e2bd9c07364a"}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x1, 0x0, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x0, 0x2, 0x80}]}, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x43f}}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="4fd700000000000000000000000000001c110010", @ANYRESHEX=r0, @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000001500)={&(0x7f0000000340)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x2000c041) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETSW2(r3, 0x5408, &(0x7f0000000040)={0x0, 0x7bdfd2e3, 0x0, 0x0, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0x1}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x0, 0x7ffc0001}]}) getrandom(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) kexec_load(0x3e00, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x869}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x595, &(0x7f0000000dc0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x1000, 0x8, 0x1, 0x6}, {0x9, 0x4, 0x0, 0x6}, {0x0, 0x5a, 0x7, 0x9}, {0x2, 0x3, 0x9, 0x5}, {0x8, 0x9, 0x1, 0xc}, {0x6, 0x4, 0x2, 0xfcd}]}) r5 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r5, 0x0) shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/2) ioctl$TIOCGPGRP(r3, 0x5437, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a304d000000300003802c000380140001"], 0x110}}, 0x0) 1.671363368s ago: executing program 2 (id=8943): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000005c0)={0x0, 0xc2cf, 0x0, 0x595f314f, 0x19, "00e40000ded0fffdab7923e56de8bd024af900"}) write$UHID_INPUT(r1, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) io_setup(0x20fe, &(0x7f00000001c0)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) io_submit(r2, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x2, 0x0, 0x0, r1, &(0x7f0000000340)='\t', 0x1, 0x600}]) 1.428336183s ago: executing program 2 (id=8950): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000700)='cq_modify\x00', r0, 0x0, 0x2}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000a80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5}, {0x0, [0x2e, 0x2e, 0x5f]}}, &(0x7f0000002340)=""/4096, 0x1d, 0x1000, 0x1, 0x3, 0x10000}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r1}, 0x8) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'syztnl2\x00', &(0x7f0000000880)={'syztnl2\x00', 0x0, 0x80, 0x1, 0x1, 0xfbc, {{0x25, 0x4, 0x3, 0x4, 0x94, 0x64, 0x0, 0x27, 0x2f, 0x0, @local, @multicast1, {[@end, @rr={0x7, 0x7, 0x64, [@local]}, @lsrr={0x83, 0x17, 0xd2, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @rand_addr=0x64010101, @loopback]}, @timestamp_prespec={0x44, 0x24, 0x35, 0x3, 0x5, [{@empty, 0x1}, {@local, 0x120000}, {@multicast1, 0x9}, {@empty, 0x5}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x58, 0x1, 0x6, [{@remote, 0x9}]}, @noop, @rr={0x7, 0x17, 0xca, [@multicast2, @broadcast, @remote, @remote, @loopback]}, @ra={0x94, 0x4}, @generic={0x44, 0x11, "8896ee58d605bd5f3535b20dee334d"}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0500000005000000a400d20000000000000082afb848b56a4b3cd14da9e40fa4eee2e8e540c24bbba5340c2ae617d61b473f2890ca2d16a9e13c3a2cf6e7cf36ed867f3c21edccf4ed63", @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2208000, &(0x7f0000000100)={[{@name={'name', 0x3d, 'qt_,\xac\xa7@\xef\xac\r\xbd\xe6\xec\xa64\x10*o\xe4\xc2\xd2\xa3\x02h\xd3\xee\xbao\xfe\x17\xfc\x0f\xedU\x7f\xdc\x005\x1f\xaaAa\x19V\xc6Ks9\xe6\xa8\xbc\x97\xe6\x1d,\xc4\x16\x8b[h~\t\x04\xdb\xe8\x14\x81\xae\x04\x9fX\xf0`W\x01\xd8\xb4Q\xc9\x96R\xd0\xcf\x85\xcfX\x9d\xdd\x89>Y\x8a\x95\xd7\xde@0R[\xd5'}}]}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x5}]}}, 0x0, 0x26, 0x0, 0x0, 0xffffffff}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x300, 0xed}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x92f5e}, 0x6d) lstat(0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000800)={{}, {0x1, 0x6}, [{}], {0x4, 0x2}, [{0x8, 0x4}, {}, {0x8, 0x1}, {0x8, 0x5, 0xee01}], {}, {0x20, 0x2}}, 0x4c, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000980)=@id={0x1e, 0x3, 0x1, {0x4e20, 0x3}}, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.319892315s ago: executing program 2 (id=8952): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) 1.260826836s ago: executing program 2 (id=8953): syz_usb_connect$uac1(0x1, 0xec, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xda, 0x3, 0x1, 0x9, 0xe0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xa186, 0x8}, [@mixer_unit={0x6, 0x24, 0x4, 0x2, 0xc9, "a1"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x205, 0x1, 0x3, 0x7, 0xc1, 0x3}, @mixer_unit={0x6, 0x24, 0x4, 0x6, 0x2, "84"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x306, 0x3, 0x6, 0x81}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x205, 0x6, 0x63, 0x81, 0x7, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0xbf, 0x241, 0x5, "a1ce09"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xe7, 0x3, 0x6, 0x7, "efd7cf"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x8, 0x4, 0x2, 0x27, "3f81"}, @as_header={0x7, 0x24, 0x1, 0xff, 0x8, 0x2}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x3, 0x3, 0x4, 0x3a, "aa88", "9d"}]}, {{0x9, 0x5, 0x1, 0x9, 0x6d670a10ff084874, 0x3, 0x1, 0x81, {0x7, 0x25, 0x1, 0x80, 0x8, 0xffff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x3, 0x2, 0x3, 0x7f, "6eaa8b"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x0, 0x7, 0x7, "97201183d3edee"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xc6, 0x4, 0xe, {0x7, 0x25, 0x1, 0x2, 0x6, 0x9}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x3, 0x6, 0x69, 0x40, 0x3}, 0x37, &(0x7f0000000280)={0x5, 0xf, 0x37, 0x4, [@ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0x508ec81, 0xf00, 0x1000, [0xffffc0]}, @ss_container_id={0x14, 0x10, 0x4, 0xfb, "88acc8398107fcd1dc92e2bd9c07364a"}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x1, 0x0, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x0, 0x2, 0x80}]}, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x43f}}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"/327], 0x80}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="4fd700000000000000000000000000001c110010", @ANYRESHEX=r0, @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000001500)={&(0x7f0000000340)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x2000c041) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETSW2(r3, 0x5408, &(0x7f0000000040)={0x0, 0x7bdfd2e3, 0x0, 0x0, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0x1}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) getrandom(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) syz_open_procfs(0x0, 0x0) kexec_load(0x3e00, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x1000, 0x8, 0x1, 0x6}, {0x9, 0x4, 0x0, 0x6}, {0x0, 0x5a, 0x7, 0x9}, {0x2, 0x3, 0x9, 0x5}, {0x8, 0x9, 0x1, 0xc}, {0x6, 0x4, 0x2, 0xfcd}]}) r4 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r4, 0x0) shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000180)=""/2) ioctl$TIOCGPGRP(r3, 0x5437, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a304d000000300003802c000380140001"], 0x110}}, 0x0) 1.260197686s ago: executing program 5 (id=8954): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.184398487s ago: executing program 5 (id=8955): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="1400000007ffff", @ANYRES16=r2, @ANYBLOB="f765b814"], 0x15) mount$9p_fd(0x0, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', &(0x7f00000000c0), 0x2000040, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) 1.153007228s ago: executing program 1 (id=8956): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.136933988s ago: executing program 4 (id=8957): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 1.136049858s ago: executing program 5 (id=8958): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b0, &(0x7f0000000280)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x0) 1.101304069s ago: executing program 1 (id=8959): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) pipe(0x0) readv(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0}, 0x18) syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x0, 0x400, 0xa, 0xffffff}, 0x0, &(0x7f0000000400)) r0 = syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x1, 0x24f}, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, {0x2}}) io_uring_enter(r0, 0x47bc, 0x2000, 0x0, 0x0, 0x0) 1.091876049s ago: executing program 4 (id=8960): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000005c0)={0x0, 0xc2cf, 0x0, 0x595f314f, 0x19, "00e40000ded0fffdab7923e56de8bd024af900"}) write$UHID_INPUT(r1, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) io_setup(0x20fe, &(0x7f00000001c0)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) io_submit(r2, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x2, 0x0, 0x0, r1, &(0x7f0000000340)='\t', 0x1, 0x600}]) 1.081969039s ago: executing program 5 (id=8961): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$TCSETSW2(r3, 0x5453, 0x0) 983.986481ms ago: executing program 5 (id=8963): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) write$binfmt_format(r1, &(0x7f0000000100)='0\x00', 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb3", 0x5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], 0x0, 0x0, 0x2}}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1ba7be033964942529c058f7329831ac86fb3d2f228844dc01ba48a38ee494fc88b01971d6d0b05cbddf6d8cfd55514366f0681d8b128007eaa3351aed44b0cca41ba396328cf86e956186d8bc20cdbc45259a1f1fffcce52234df4634e9bc76677f21b94d217f39ec21d9fc7558e4df325e68f7a31f6ddb3f0f4796dbd7b152c5", @ANYRES64=r0, @ANYRES16=r3, @ANYRESHEX=r1, @ANYRESHEX=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_usbip_server_init(0x3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080), 0x3, 0x4cd, &(0x7f00000000c0)="$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") syz_mount_image$ext4(&(0x7f0000000a80)='ext2\x00', &(0x7f0000000a40)='./file0/file0\x00', 0x8e, &(0x7f00000001c0), 0x1, 0x463, &(0x7f0000000b80)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r8}, &(0x7f0000000800), &(0x7f0000000840)=r9}, 0x20) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522ec, 0x0, {0x0, 0x0, 0x74, r10, {0x10, 0xf}, {0x3}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r5, 0x0, 0x80) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r6, {0x6}}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="010000000d000000050010000200000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000009b2300000000", @ANYRES32=r10, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) ioctl$TUNSETGROUP(r12, 0x400454ce, 0x0) 926.724872ms ago: executing program 1 (id=8964): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="1400000007ffff", @ANYRES16=r2, @ANYBLOB="f765b814"], 0x15) mount$9p_fd(0x0, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', &(0x7f00000000c0), 0x2000040, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) 865.867063ms ago: executing program 1 (id=8965): syz_usb_connect$uac1(0x1, 0xed, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdb, 0x3, 0x1, 0x9, 0xe0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xa186, 0x8}, [@mixer_unit={0x7, 0x24, 0x4, 0x2, 0xc9, "a12c"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x205, 0x1, 0x3, 0x7, 0xc1, 0x3}, @mixer_unit={0x6, 0x24, 0x4, 0x6, 0x2, "84"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x306, 0x3, 0x6, 0x81}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x205, 0x6, 0x63, 0x81, 0x7, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0xbf, 0x241, 0x5, "a1ce09"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xe7, 0x3, 0x6, 0x7, "efd7cf"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x8, 0x4, 0x2, 0x27, "3f81"}, @as_header={0x7, 0x24, 0x1, 0xff, 0x8, 0x2}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x3, 0x3, 0x4, 0x3a, "aa88", "9d"}]}, {{0x9, 0x5, 0x1, 0x9, 0x6d670a10ff084874, 0x3, 0x1, 0x81, {0x7, 0x25, 0x1, 0x80, 0x8, 0xffff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x3, 0x2, 0x3, 0x7f, "6eaa8b"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x0, 0x7, 0x7, "97201183d3edee"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xc6, 0x4, 0xe, {0x7, 0x25, 0x1, 0x2, 0x6, 0x9}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x3, 0x6, 0x69, 0x40, 0x3}, 0x37, &(0x7f0000000280)={0x5, 0xf, 0x37, 0x4, [@ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0x508ec81, 0xf00, 0x1000, [0xffffc0]}, @ss_container_id={0x14, 0x10, 0x4, 0xfb, "88acc8398107fcd1dc92e2bd9c07364a"}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x1, 0x0, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x0, 0x2, 0x80}]}, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x43f}}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"/327], 0x80}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="4fd700000000000000000000000000001c110010", @ANYRESHEX=r0, @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000001500)={&(0x7f0000000340)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x2000c041) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETSW2(r3, 0x5408, &(0x7f0000000040)={0x0, 0x7bdfd2e3, 0x0, 0x0, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0x1}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) getrandom(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) syz_open_procfs(0x0, 0x0) kexec_load(0x3e00, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x869}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x595, &(0x7f0000000dc0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x1000, 0x8, 0x1, 0x6}, {0x9, 0x4, 0x0, 0x6}, {0x0, 0x5a, 0x7, 0x9}, {0x2, 0x3, 0x9, 0x5}, {0x8, 0x9, 0x1, 0xc}, {0x6, 0x4, 0x2, 0xfcd}]}) r5 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r5, 0x0) shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/2) ioctl$TIOCGPGRP(r3, 0x5437, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a304d000000300003802c000380140001"], 0x110}}, 0x0) 703.636806ms ago: executing program 2 (id=8967): r0 = socket$packet(0x11, 0xa, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000240)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x83f}, 0x18) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ppoll(&(0x7f00000001c0)=[{r3, 0x2000}], 0x1, 0x0, 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="0e9496d2e774f9bf20090000"], 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x35, 0x0, 0x5}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa0}}, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x7fff}, 0x18) syz_init_net_socket$llc(0x1a, 0x1, 0x0) close_range(r5, 0xffffffffffffffff, 0x200000000000000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r9}, 0x10) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x301, 0x400, 0x0, 0x0, 0x0, 0x1}}) r11 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r11, &(0x7f0000000140)={0x1d, r12}, 0x10) 585.760529ms ago: executing program 4 (id=8973): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$TCSETSW2(r3, 0x5453, 0x0) 560.105069ms ago: executing program 4 (id=8974): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) read$ptp(r0, 0x0, 0x0) 299.833174ms ago: executing program 6 (id=8978): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) 232.407825ms ago: executing program 6 (id=8979): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="1400000007ffff", @ANYRES16=r2, @ANYBLOB="f765b814"], 0x15) mount$9p_fd(0x0, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', &(0x7f00000000c0), 0x2000040, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) 206.353356ms ago: executing program 6 (id=8980): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="1400000007ffff", @ANYRES16=r2, @ANYBLOB="f765b814"], 0x15) mount$9p_fd(0x0, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', &(0x7f00000000c0), 0x2000040, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) 177.939666ms ago: executing program 6 (id=8981): bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 163.612567ms ago: executing program 6 (id=8982): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000000, &(0x7f0000000680)={[{@dioread_lock}, {@nogrpid}, {@abort}, {@nodelalloc}, {@user_xattr}, {@grpjquota, 0x2e}, {@nombcache}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4c7, &(0x7f0000000700)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 131.323277ms ago: executing program 5 (id=8983): setpriority(0x2, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@ssrr={0x89, 0x3, 0xce}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) unshare(0x2c020400) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x80000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x1000000000}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) socket(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x70a, &(0x7f00000232c0)="$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") chroot(&(0x7f0000000000)='./file0/../file0\x00') 91.703958ms ago: executing program 1 (id=8984): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000005c0)={0x0, 0xc2cf, 0x0, 0x595f314f, 0x19, "00e40000ded0fffdab7923e56de8bd024af900"}) write$UHID_INPUT(r1, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) io_setup(0x20fe, &(0x7f00000001c0)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) io_submit(r2, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x2, 0x0, 0x0, r1, &(0x7f0000000340)='\t', 0x1, 0x600}]) 0s ago: executing program 6 (id=8985): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$TCSETSW2(r3, 0x5453, 0x0) kernel console output (not intermixed with test programs): d quota: type 1: error -117 [ 569.094063][T28225] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.8350: corrupted in-inode xattr: invalid ea_ino [ 569.110397][T28225] EXT4-fs (loop1): Remounting filesystem read-only [ 569.131883][T28230] netlink: '+}[@': attribute type 5 has an invalid length. [ 569.141064][T28230] loop6: detected capacity change from 0 to 128 [ 569.149865][T28230] FAULT_INJECTION: forcing a failure. [ 569.149865][T28230] name failslab, interval 1, probability 0, space 0, times 0 [ 569.162576][T28230] CPU: 0 UID: 0 PID: 28230 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) [ 569.162661][T28230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 569.162675][T28230] Call Trace: [ 569.162683][T28230] [ 569.162693][T28230] __dump_stack+0x1d/0x30 [ 569.162718][T28230] dump_stack_lvl+0xe8/0x140 [ 569.162742][T28230] dump_stack+0x15/0x1b [ 569.162762][T28230] should_fail_ex+0x265/0x280 [ 569.162865][T28230] should_failslab+0x8c/0xb0 [ 569.162897][T28230] kmem_cache_alloc_node_noprof+0x57/0x320 [ 569.162926][T28230] ? __alloc_skb+0x101/0x320 [ 569.162970][T28230] __alloc_skb+0x101/0x320 [ 569.162988][T28230] ? audit_log_start+0x365/0x6c0 [ 569.163017][T28230] audit_log_start+0x380/0x6c0 [ 569.163064][T28230] audit_seccomp+0x48/0x100 [ 569.163156][T28230] ? __seccomp_filter+0x68c/0x10d0 [ 569.163183][T28230] __seccomp_filter+0x69d/0x10d0 [ 569.163210][T28230] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 569.163293][T28230] ? vfs_write+0x7e8/0x960 [ 569.163376][T28230] ? __rcu_read_unlock+0x4f/0x70 [ 569.163399][T28230] ? __fget_files+0x184/0x1c0 [ 569.163493][T28230] __secure_computing+0x82/0x150 [ 569.163519][T28230] syscall_trace_enter+0xcf/0x1e0 [ 569.163548][T28230] do_syscall_64+0xac/0x200 [ 569.163586][T28230] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 569.163683][T28230] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 569.163772][T28230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.163799][T28230] RIP: 0033:0x7fba3739eba9 [ 569.163817][T28230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.163887][T28230] RSP: 002b:00007fba35dff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 569.163904][T28230] RAX: ffffffffffffffda RBX: 00007fba375e5fa0 RCX: 00007fba3739eba9 [ 569.163916][T28230] RDX: 0000000000000040 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 569.163928][T28230] RBP: 00007fba35dff090 R08: 0000000000000000 R09: 0000000000000000 [ 569.163940][T28230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.164032][T28230] R13: 00007fba375e6038 R14: 00007fba375e5fa0 R15: 00007ffd76f6b848 [ 569.164055][T28230] [ 569.387867][T28232] netlink: 'syz.1.8353': attribute type 21 has an invalid length. [ 569.404667][T28232] netlink: 'syz.1.8353': attribute type 5 has an invalid length. [ 569.412537][T28232] netlink: 'syz.1.8353': attribute type 6 has an invalid length. [ 569.542092][T28246] loop1: detected capacity change from 0 to 164 [ 569.550925][T28246] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28246 comm=syz.1.8359 [ 569.579544][T28249] loop4: detected capacity change from 0 to 164 [ 569.587938][T28249] siw: device registration error -23 [ 569.600458][T28246] rock: directory entry would overflow storage [ 569.606699][T28246] rock: sig=0x4f50, size=4, remaining=3 [ 569.612283][T28246] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 569.626357][T28256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.645787][T28256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.661151][T28260] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 569.695310][T28256] loop4: detected capacity change from 0 to 1024 [ 569.709591][T28266] program syz.1.8369 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 569.719997][T28266] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 569.731154][ T29] kauditd_printk_skb: 354 callbacks suppressed [ 569.731171][ T29] audit: type=1326 audit(1757476385.563:37317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28265 comm="syz.1.8369" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe63a87eba9 code=0x0 [ 569.741119][T28270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.769222][T28270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.785100][ T29] audit: type=1326 audit(1757476385.613:37318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28269 comm="syz.6.8371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba3739eba9 code=0x7ffc0000 [ 569.791328][T28270] loop6: detected capacity change from 0 to 1024 [ 569.808838][ T29] audit: type=1326 audit(1757476385.613:37319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28269 comm="syz.6.8371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba3739eba9 code=0x7ffc0000 [ 569.838751][ T29] audit: type=1326 audit(1757476385.613:37320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28269 comm="syz.6.8371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fba3739eba9 code=0x7ffc0000 [ 569.862444][ T29] audit: type=1326 audit(1757476385.613:37321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28269 comm="syz.6.8371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba3739eba9 code=0x7ffc0000 [ 569.886174][ T29] audit: type=1326 audit(1757476385.613:37322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28269 comm="syz.6.8371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba3739eba9 code=0x7ffc0000 [ 569.910145][ T29] audit: type=1326 audit(1757476385.613:37323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28269 comm="syz.6.8371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fba3739d510 code=0x7ffc0000 [ 569.913935][T28276] FAULT_INJECTION: forcing a failure. [ 569.913935][T28276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 569.933742][ T29] audit: type=1326 audit(1757476385.613:37324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28269 comm="syz.6.8371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fba3739d510 code=0x7ffc0000 [ 569.946817][T28276] CPU: 1 UID: 0 PID: 28276 Comm: syz.5.8372 Not tainted syzkaller #0 PREEMPT(voluntary) [ 569.946860][T28276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 569.946879][T28276] Call Trace: [ 569.946889][T28276] [ 569.946900][T28276] __dump_stack+0x1d/0x30 [ 569.946930][T28276] dump_stack_lvl+0xe8/0x140 [ 569.947014][T28276] dump_stack+0x15/0x1b [ 569.947036][T28276] should_fail_ex+0x265/0x280 [ 569.947070][T28276] should_fail+0xb/0x20 [ 569.947098][T28276] should_fail_usercopy+0x1a/0x20 [ 569.947168][T28276] _copy_from_user+0x1c/0xb0 [ 569.947212][T28276] do_ipv6_setsockopt+0x124/0x2160 [ 569.947247][T28276] ? kstrtoull+0x111/0x140 [ 569.947346][T28276] ? avc_has_perm_noaudit+0x1b1/0x200 [ 569.947384][T28276] ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0 [ 569.947446][T28276] ipv6_setsockopt+0x59/0x130 [ 569.947480][T28276] udpv6_setsockopt+0x99/0xb0 [ 569.947507][T28276] sock_common_setsockopt+0x69/0x80 [ 569.947628][T28276] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 569.947717][T28276] __sys_setsockopt+0x181/0x200 [ 569.947753][T28276] __x64_sys_setsockopt+0x64/0x80 [ 569.947787][T28276] x64_sys_call+0x20ec/0x2ff0 [ 569.947817][T28276] do_syscall_64+0xd2/0x200 [ 569.947932][T28276] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 569.947967][T28276] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 569.948027][T28276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.948057][T28276] RIP: 0033:0x7f8ea768eba9 [ 569.948079][T28276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.948172][T28276] RSP: 002b:00007f8ea60ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 569.948199][T28276] RAX: ffffffffffffffda RBX: 00007f8ea78d5fa0 RCX: 00007f8ea768eba9 [ 569.948217][T28276] RDX: 000000000000002e RSI: 0000000000000029 RDI: 0000000000000004 [ 569.948235][T28276] RBP: 00007f8ea60ef090 R08: 0000000000000108 R09: 0000000000000000 [ 569.948253][T28276] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 569.948272][T28276] R13: 00007f8ea78d6038 R14: 00007f8ea78d5fa0 R15: 00007fffc8eda678 [ 569.948301][T28276] [ 570.060741][T28285] loop5: detected capacity change from 0 to 164 [ 570.064919][ T29] audit: type=1326 audit(1757476385.613:37325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28269 comm="syz.6.8371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba3739eba9 code=0x7ffc0000 [ 570.077395][T28285] siw: device registration error -23 [ 570.080782][ T29] audit: type=1326 audit(1757476385.613:37326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28269 comm="syz.6.8371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba3739eba9 code=0x7ffc0000 [ 570.287766][T28295] loop2: detected capacity change from 0 to 1024 [ 570.294601][T28295] EXT4-fs: Ignoring removed bh option [ 570.372994][T28302] loop2: detected capacity change from 0 to 164 [ 570.400334][T28302] rock: directory entry would overflow storage [ 570.406633][T28302] rock: sig=0x4f50, size=4, remaining=3 [ 570.412197][T28302] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 570.430543][T28308] netlink: '+}[@': attribute type 5 has an invalid length. [ 570.460837][T28312] loop4: detected capacity change from 0 to 164 [ 570.469360][T28312] siw: device registration error -23 [ 570.531484][T28320] loop4: detected capacity change from 0 to 512 [ 570.541318][T28320] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 570.553077][T28320] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 570.567972][T28320] EXT4-fs (loop4): 1 truncate cleaned up [ 570.587884][T28322] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 570.609541][T28328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.620071][T28328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.716772][T28332] loop2: detected capacity change from 0 to 164 [ 570.731520][T28336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.740061][T28336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.755454][T28332] rock: directory entry would overflow storage [ 570.761718][T28332] rock: sig=0x4f50, size=4, remaining=3 [ 570.761920][T28336] loop1: detected capacity change from 0 to 1024 [ 570.767359][T28332] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 570.818892][T28342] loop6: detected capacity change from 0 to 164 [ 570.819485][T28344] program syz.2.8399 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 570.840080][T28342] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28342 comm=syz.6.8400 [ 570.871179][T28342] rock: directory entry would overflow storage [ 570.877430][T28342] rock: sig=0x4f50, size=4, remaining=3 [ 570.883000][T28342] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 570.887087][T28346] loop2: detected capacity change from 0 to 1024 [ 570.899504][T28346] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.8401: Failed to acquire dquot type 0 [ 570.911412][T28346] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 570.926369][T28346] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.8401: corrupted inode contents [ 570.939023][T28346] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #13: comm syz.2.8401: mark_inode_dirty error [ 570.950724][T28346] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.8401: corrupted inode contents [ 570.963054][T28346] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.8401: mark_inode_dirty error [ 570.970105][T28349] loop6: detected capacity change from 0 to 512 [ 570.975219][T28346] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.8401: corrupted inode contents [ 570.982850][T28349] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.8402: dx entry: limit 0 != root limit 125 [ 570.992806][T28346] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 571.004405][T28349] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.8402: Corrupt directory, running e2fsck is recommended [ 571.013718][T28346] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.8401: corrupted inode contents [ 571.026168][T28349] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 571.038649][T28346] EXT4-fs error (device loop2): ext4_truncate:4666: inode #13: comm syz.2.8401: mark_inode_dirty error [ 571.046168][T28349] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.8402: corrupted in-inode xattr: invalid ea_ino [ 571.057765][T28346] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 571.070802][T28349] EXT4-fs (loop6): Remounting filesystem read-only [ 571.080924][T28346] EXT4-fs (loop2): 1 truncate cleaned up [ 571.113973][T28352] program syz.6.8403 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 571.123453][T28352] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 571.155294][T28356] netlink: 'syz.5.8405': attribute type 21 has an invalid length. [ 571.163337][T28356] __nla_validate_parse: 21 callbacks suppressed [ 571.163357][T28356] netlink: 128 bytes leftover after parsing attributes in process `syz.5.8405'. [ 571.179076][T28356] netlink: 'syz.5.8405': attribute type 5 has an invalid length. [ 571.186980][T28356] netlink: 'syz.5.8405': attribute type 6 has an invalid length. [ 571.194748][T28356] netlink: 3 bytes leftover after parsing attributes in process `syz.5.8405'. [ 571.247618][T28369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8410'. [ 571.257884][T28369] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8410'. [ 571.279238][T28373] loop5: detected capacity change from 0 to 1024 [ 571.336540][T28380] tipc: Enabled bearer , priority 0 [ 571.344864][T28380] tipc: Disabling bearer [ 571.362820][T28378] loop4: detected capacity change from 0 to 512 [ 571.374137][T28382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8415'. [ 571.379615][T28378] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.8413: dx entry: limit 0 != root limit 125 [ 571.395028][T28378] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.8413: Corrupt directory, running e2fsck is recommended [ 571.408271][T28378] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 571.411605][T28384] netlink: 256 bytes leftover after parsing attributes in process `syz.2.8414'. [ 571.427521][T28378] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.8413: corrupted in-inode xattr: invalid ea_ino [ 571.445256][T28378] EXT4-fs (loop4): Remounting filesystem read-only [ 571.457115][T28382] loop1: detected capacity change from 0 to 512 [ 571.485374][T28382] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.8415: dx entry: limit 0 != root limit 125 [ 571.497324][T28382] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.8415: Corrupt directory, running e2fsck is recommended [ 571.510934][T28382] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 571.525163][T28382] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.8415: corrupted in-inode xattr: invalid ea_ino [ 571.527742][T28394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.540527][T28382] EXT4-fs (loop1): Remounting filesystem read-only [ 571.557341][T28394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.566293][T28382] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 571.575876][T28397] netlink: 'syz.2.8419': attribute type 21 has an invalid length. [ 571.583816][T28397] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8419'. [ 571.593932][T28397] netlink: 'syz.2.8419': attribute type 5 has an invalid length. [ 571.601803][T28397] netlink: 'syz.2.8419': attribute type 6 has an invalid length. [ 571.609787][T28397] netlink: 3 bytes leftover after parsing attributes in process `syz.2.8419'. [ 571.634835][T28401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.643607][T28401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.646964][T28403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8422'. [ 571.662662][T28403] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8422'. [ 571.672118][T28401] loop2: detected capacity change from 0 to 1024 [ 571.737400][T28413] loop1: detected capacity change from 0 to 512 [ 571.745776][T28413] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.8426: dx entry: limit 0 != root limit 125 [ 571.757731][T28413] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.8426: Corrupt directory, running e2fsck is recommended [ 571.770902][T28413] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 571.779346][T28413] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.8426: corrupted in-inode xattr: invalid ea_ino [ 571.792895][T28413] EXT4-fs (loop1): Remounting filesystem read-only [ 571.819255][T28416] loop1: detected capacity change from 0 to 1024 [ 571.826077][T28416] EXT4-fs: Ignoring removed bh option [ 571.857606][T28420] FAULT_INJECTION: forcing a failure. [ 571.857606][T28420] name failslab, interval 1, probability 0, space 0, times 0 [ 571.870377][T28420] CPU: 0 UID: 0 PID: 28420 Comm: syz.1.8428 Not tainted syzkaller #0 PREEMPT(voluntary) [ 571.870406][T28420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 571.870424][T28420] Call Trace: [ 571.870430][T28420] [ 571.870438][T28420] __dump_stack+0x1d/0x30 [ 571.870457][T28420] dump_stack_lvl+0xe8/0x140 [ 571.870482][T28420] dump_stack+0x15/0x1b [ 571.870496][T28420] should_fail_ex+0x265/0x280 [ 571.870690][T28420] should_failslab+0x8c/0xb0 [ 571.870711][T28420] kmem_cache_alloc_noprof+0x50/0x310 [ 571.870757][T28420] ? skb_clone+0x151/0x1f0 [ 571.870781][T28420] skb_clone+0x151/0x1f0 [ 571.870805][T28420] __netlink_deliver_tap+0x2c9/0x500 [ 571.870832][T28420] netlink_unicast+0x66b/0x690 [ 571.870863][T28420] netlink_sendmsg+0x58b/0x6b0 [ 571.870888][T28420] ? __pfx_netlink_sendmsg+0x10/0x10 [ 571.870910][T28420] __sock_sendmsg+0x142/0x180 [ 571.870937][T28420] ____sys_sendmsg+0x31e/0x4e0 [ 571.871027][T28420] ___sys_sendmsg+0x17b/0x1d0 [ 571.871077][T28420] __x64_sys_sendmsg+0xd4/0x160 [ 571.871104][T28420] x64_sys_call+0x191e/0x2ff0 [ 571.871124][T28420] do_syscall_64+0xd2/0x200 [ 571.871182][T28420] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 571.871203][T28420] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 571.871228][T28420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.871246][T28420] RIP: 0033:0x7fe63a87eba9 [ 571.871328][T28420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 571.871354][T28420] RSP: 002b:00007fe6392df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 571.871387][T28420] RAX: ffffffffffffffda RBX: 00007fe63aac5fa0 RCX: 00007fe63a87eba9 [ 571.871402][T28420] RDX: 0000000004000004 RSI: 0000200000000500 RDI: 0000000000000003 [ 571.871414][T28420] RBP: 00007fe6392df090 R08: 0000000000000000 R09: 0000000000000000 [ 571.871424][T28420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.871435][T28420] R13: 00007fe63aac6038 R14: 00007fe63aac5fa0 R15: 00007ffe7f5fbf58 [ 571.871501][T28420] [ 572.099395][T28422] loop1: detected capacity change from 0 to 164 [ 572.107837][T28424] loop5: detected capacity change from 0 to 512 [ 572.121650][T28424] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 572.135119][T28422] rock: directory entry would overflow storage [ 572.141393][T28422] rock: sig=0x4f50, size=4, remaining=3 [ 572.146993][T28422] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 572.155213][T28424] EXT4-fs (loop5): orphan cleanup on readonly fs [ 572.162025][T28424] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.8430: Block bitmap for bg 0 marked uninitialized [ 572.175856][T28424] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 572.184838][T28424] EXT4-fs (loop5): 1 orphan inode deleted [ 572.274669][T28437] loop2: detected capacity change from 0 to 512 [ 572.286274][T17461] vhci_hcd: vhci_device speed not set [ 572.298960][T28437] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 572.327220][T28437] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 572.343847][T28437] EXT4-fs (loop2): 1 truncate cleaned up [ 572.366539][T28446] FAULT_INJECTION: forcing a failure. [ 572.366539][T28446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 572.379751][T28446] CPU: 1 UID: 0 PID: 28446 Comm: syz.5.8440 Not tainted syzkaller #0 PREEMPT(voluntary) [ 572.379786][T28446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 572.379801][T28446] Call Trace: [ 572.379809][T28446] [ 572.379816][T28446] __dump_stack+0x1d/0x30 [ 572.379852][T28446] dump_stack_lvl+0xe8/0x140 [ 572.379947][T28446] dump_stack+0x15/0x1b [ 572.379967][T28446] should_fail_ex+0x265/0x280 [ 572.379990][T28446] should_fail+0xb/0x20 [ 572.380009][T28446] should_fail_usercopy+0x1a/0x20 [ 572.380040][T28446] _copy_from_user+0x1c/0xb0 [ 572.380151][T28446] __tun_chr_ioctl+0x147/0x14c0 [ 572.380176][T28446] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 572.380199][T28446] tun_chr_ioctl+0x27/0x40 [ 572.380221][T28446] __se_sys_ioctl+0xcb/0x140 [ 572.380244][T28446] __x64_sys_ioctl+0x43/0x50 [ 572.380334][T28446] x64_sys_call+0x1816/0x2ff0 [ 572.380361][T28446] do_syscall_64+0xd2/0x200 [ 572.380400][T28446] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 572.380432][T28446] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 572.380504][T28446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.380595][T28446] RIP: 0033:0x7f8ea768eba9 [ 572.380610][T28446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 572.380629][T28446] RSP: 002b:00007f8ea60ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 572.380652][T28446] RAX: ffffffffffffffda RBX: 00007f8ea78d5fa0 RCX: 00007f8ea768eba9 [ 572.380667][T28446] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000006 [ 572.380681][T28446] RBP: 00007f8ea60ef090 R08: 0000000000000000 R09: 0000000000000000 [ 572.380758][T28446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.380772][T28446] R13: 00007f8ea78d6038 R14: 00007f8ea78d5fa0 R15: 00007fffc8eda678 [ 572.380790][T28446] [ 572.570771][T28444] loop1: detected capacity change from 0 to 8192 [ 572.623766][T28452] loop5: detected capacity change from 0 to 512 [ 572.631922][T28452] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 572.637426][T28444] loop1: p1 p2 p4 < > [ 572.648459][T28444] loop1: p1 start 4261412864 is beyond EOD, truncated [ 572.655328][T28444] loop1: p2 start 4009754624 is beyond EOD, truncated [ 572.664373][T28452] EXT4-fs (loop5): orphan cleanup on readonly fs [ 572.671555][T28452] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.8443: Block bitmap for bg 0 marked uninitialized [ 572.688469][T28452] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 572.698239][T28452] EXT4-fs (loop5): 1 orphan inode deleted [ 572.816560][T28466] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 572.823226][T28466] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 572.830979][T28466] vhci_hcd vhci_hcd.0: Device attached [ 572.854238][T28466] loop6: detected capacity change from 0 to 512 [ 572.870843][T28466] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.8451: iget: bad i_size value: 38620345925642 [ 572.933488][T28466] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.8451: couldn't read orphan inode 15 (err -117) [ 572.948008][T28481] FAULT_INJECTION: forcing a failure. [ 572.948008][T28481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 572.961169][T28481] CPU: 1 UID: 0 PID: 28481 Comm: syz.2.8455 Not tainted syzkaller #0 PREEMPT(voluntary) [ 572.961250][T28481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 572.961263][T28481] Call Trace: [ 572.961270][T28481] [ 572.961278][T28481] __dump_stack+0x1d/0x30 [ 572.961299][T28481] dump_stack_lvl+0xe8/0x140 [ 572.961318][T28481] dump_stack+0x15/0x1b [ 572.961340][T28481] should_fail_ex+0x265/0x280 [ 572.961423][T28481] should_fail+0xb/0x20 [ 572.961443][T28481] should_fail_usercopy+0x1a/0x20 [ 572.961467][T28481] _copy_to_user+0x20/0xa0 [ 572.961545][T28481] simple_read_from_buffer+0xb5/0x130 [ 572.961575][T28481] proc_fail_nth_read+0x10e/0x150 [ 572.961682][T28481] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 572.961716][T28481] vfs_read+0x1a5/0x770 [ 572.961742][T28481] ? __rcu_read_unlock+0x4f/0x70 [ 572.961764][T28481] ? __fget_files+0x184/0x1c0 [ 572.961790][T28481] ksys_read+0xda/0x1a0 [ 572.961826][T28481] __x64_sys_read+0x40/0x50 [ 572.961852][T28481] x64_sys_call+0x27bc/0x2ff0 [ 572.961873][T28481] do_syscall_64+0xd2/0x200 [ 572.961994][T28481] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 572.962025][T28481] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 572.962059][T28481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.962142][T28481] RIP: 0033:0x7f862f13d5bc [ 572.962160][T28481] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 572.962183][T28481] RSP: 002b:00007f862dba7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 572.962207][T28481] RAX: ffffffffffffffda RBX: 00007f862f385fa0 RCX: 00007f862f13d5bc [ 572.962222][T28481] RDX: 000000000000000f RSI: 00007f862dba70a0 RDI: 000000000000000a [ 572.962300][T28481] RBP: 00007f862dba7090 R08: 0000000000000000 R09: 0000000000000000 [ 572.962321][T28481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.962336][T28481] R13: 00007f862f386038 R14: 00007f862f385fa0 R15: 00007ffe549f4ca8 [ 572.962359][T28481] [ 573.164896][T28472] loop5: detected capacity change from 0 to 32768 [ 573.177380][T28485] sock: sock_set_timeout: `syz.5.8447' (pid 28485) tries to set negative timeout [ 573.191029][T28466] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 573.199965][T28472] loop5: p1 p2 p3 < p5 p6 p7 > [ 573.205499][T28472] loop5: p2 size 16775168 extends beyond EOD, truncated [ 573.214007][T28472] loop5: p5 start 4294970168 is beyond EOD, truncated [ 573.214765][T28466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 573.228638][T28466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.236379][ T3504] usb 13-1: new high-speed USB device number 7 using vhci_hcd [ 573.260477][T28483] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 573.271633][T28466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 573.279180][T28466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.319326][T28467] vhci_hcd: connection reset by peer [ 573.325053][ T7325] vhci_hcd: stop threads [ 573.329431][ T7325] vhci_hcd: release socket [ 573.333863][ T7325] vhci_hcd: disconnect device [ 573.388609][T28496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.399765][T28496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.430935][T28496] loop2: detected capacity change from 0 to 1024 [ 573.431596][T28483] loop1: detected capacity change from 0 to 2048 [ 573.466886][T28483] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 573.651574][T28521] loop5: detected capacity change from 0 to 8192 [ 573.706455][T28521] loop5: p1 p2 p4 < > [ 573.710809][T28521] loop5: p1 start 4261412864 is beyond EOD, truncated [ 573.717680][T28521] loop5: p2 start 4009754624 is beyond EOD, truncated [ 573.783408][T28526] program syz.5.8472 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 573.783637][T28526] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 573.804136][T28526] netlink: '+}[@': attribute type 1 has an invalid length. [ 573.815006][T28526] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.848420][T28526] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.904514][T28526] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.952626][T28526] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.985521][T28541] loop1: detected capacity change from 0 to 164 [ 574.009665][ T7360] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.020171][T28541] rock: directory entry would overflow storage [ 574.026371][T28541] rock: sig=0x4f50, size=4, remaining=3 [ 574.031994][T28541] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 574.073180][ T7360] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.088495][ T7360] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.098391][T28544] loop2: detected capacity change from 0 to 1024 [ 574.099156][ T7360] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.113320][T28547] netlink: 'syz.5.8483': attribute type 21 has an invalid length. [ 574.121382][T28547] netlink: 'syz.5.8483': attribute type 5 has an invalid length. [ 574.126851][T28544] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.8481: Failed to acquire dquot type 0 [ 574.129196][T28547] netlink: 'syz.5.8483': attribute type 6 has an invalid length. [ 574.152608][T28550] loop4: detected capacity change from 0 to 164 [ 574.169768][T28544] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 574.204331][T28544] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.8481: corrupted inode contents [ 574.218166][T28554] loop1: detected capacity change from 0 to 1024 [ 574.224944][T28554] EXT4-fs: Ignoring removed bh option [ 574.239880][T28544] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #13: comm syz.2.8481: mark_inode_dirty error [ 574.256280][T28544] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.8481: corrupted inode contents [ 574.269977][T28550] rock: directory entry would overflow storage [ 574.276250][T28550] rock: sig=0x4f50, size=4, remaining=3 [ 574.281828][T28550] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 574.294787][T28562] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 574.303632][T28544] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.8481: mark_inode_dirty error [ 574.330068][T28544] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.8481: corrupted inode contents [ 574.330265][T28544] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 574.330443][T28544] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.8481: corrupted inode contents [ 574.330645][T28544] EXT4-fs error (device loop2): ext4_truncate:4666: inode #13: comm syz.2.8481: mark_inode_dirty error [ 574.330842][T28544] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 574.331267][T28544] EXT4-fs (loop2): 1 truncate cleaned up [ 574.433750][T28573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.442755][T28573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.472301][T28573] loop2: detected capacity change from 0 to 1024 [ 574.484457][T28579] loop5: detected capacity change from 0 to 164 [ 574.530313][T28577] loop4: detected capacity change from 0 to 8192 [ 574.534566][T28579] rock: directory entry would overflow storage [ 574.537202][T28587] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 574.543066][T28579] rock: sig=0x4f50, size=4, remaining=3 [ 574.549436][T28587] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 574.549505][T28587] vhci_hcd vhci_hcd.0: Device attached [ 574.555224][T28579] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 574.576155][T28587] loop6: detected capacity change from 0 to 512 [ 574.584468][T28587] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.8498: iget: bad i_size value: 38620345925642 [ 574.597378][T28587] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.8498: couldn't read orphan inode 15 (err -117) [ 574.598311][T28577] loop4: p1 p2 p4 < > [ 574.620779][T28577] loop4: p1 start 4261412864 is beyond EOD, truncated [ 574.627631][T28577] loop4: p2 start 4009754624 is beyond EOD, truncated [ 574.639806][T28587] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 574.667625][T17461] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=17461 comm=kworker/0:7 [ 574.683743][ T8461] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=8461 comm=kworker/1:7 [ 574.716719][T28588] vhci_hcd: connection closed [ 574.716965][ T7326] vhci_hcd: stop threads [ 574.725993][ T7326] vhci_hcd: release socket [ 574.730502][ T7326] vhci_hcd: disconnect device [ 574.732566][T28602] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 574.746140][T28600] loop4: detected capacity change from 0 to 164 [ 574.769991][ T29] kauditd_printk_skb: 631 callbacks suppressed [ 574.770008][ T29] audit: type=1326 audit(1757476390.603:37954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28599 comm="syz.4.8503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6c1eeba9 code=0x7ffc0000 [ 574.770684][T28600] rock: directory entry would overflow storage [ 574.776335][ T29] audit: type=1326 audit(1757476390.603:37955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28599 comm="syz.4.8503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f4a6c1eeba9 code=0x7ffc0000 [ 574.829682][T28600] rock: sig=0x4f50, size=4, remaining=3 [ 574.835340][T28600] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 574.843518][ T29] audit: type=1326 audit(1757476390.673:37956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28599 comm="syz.4.8503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6c1eeba9 code=0x7ffc0000 [ 574.867748][ T29] audit: type=1326 audit(1757476390.673:37957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28599 comm="syz.4.8503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6c1eeba9 code=0x7ffc0000 [ 574.891413][ T29] audit: type=1326 audit(1757476390.673:37958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28599 comm="syz.4.8503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f4a6c1eeba9 code=0x7ffc0000 [ 574.915049][ T29] audit: type=1326 audit(1757476390.673:37959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28599 comm="syz.4.8503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6c1eeba9 code=0x7ffc0000 [ 574.938752][ T29] audit: type=1326 audit(1757476390.703:37960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28599 comm="syz.4.8503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6c1eeba9 code=0x7ffc0000 [ 574.971224][T28602] loop5: detected capacity change from 0 to 2048 [ 575.010657][T28602] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 575.012223][T28609] tmpfs: Bad value for 'mpol' [ 575.095665][T28619] loop5: detected capacity change from 0 to 1024 [ 575.102669][T28619] EXT4-fs: Ignoring removed bh option [ 575.147368][ T8461] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=8461 comm=kworker/1:7 [ 575.181629][ T29] audit: type=1326 audit(1757476391.013:37961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28630 comm="syz.2.8515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862f13eba9 code=0x7ffc0000 [ 575.213800][ T29] audit: type=1326 audit(1757476391.043:37962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28630 comm="syz.2.8515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862f13eba9 code=0x7ffc0000 [ 575.237676][ T29] audit: type=1326 audit(1757476391.043:37963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28630 comm="syz.2.8515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f862f13eba9 code=0x7ffc0000 [ 575.343028][T28645] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 575.349667][T28645] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 575.357394][T28645] vhci_hcd vhci_hcd.0: Device attached [ 575.380940][T28651] loop5: detected capacity change from 0 to 1024 [ 575.391203][T28645] loop2: detected capacity change from 0 to 512 [ 575.400874][T28651] EXT4-fs: Ignoring removed bh option [ 575.410523][T28645] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.8522: iget: bad i_size value: 38620345925642 [ 575.423745][T28645] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.8522: couldn't read orphan inode 15 (err -117) [ 575.448653][T28659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.457393][T28659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.483539][T28659] loop4: detected capacity change from 0 to 1024 [ 575.492096][T28645] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 575.550690][T28672] loop6: detected capacity change from 0 to 1024 [ 575.561494][T28647] vhci_hcd: connection closed [ 575.566092][ T7326] vhci_hcd: stop threads [ 575.575292][ T7326] vhci_hcd: release socket [ 575.579790][ T7326] vhci_hcd: disconnect device [ 575.596284][ T8461] usb 5-1: new high-speed USB device number 22 using vhci_hcd [ 575.603913][ T8461] usb 5-1: enqueue for inactive port 0 [ 575.611665][ T8461] usb 5-1: enqueue for inactive port 0 [ 575.617962][T28674] loop1: detected capacity change from 0 to 164 [ 575.624414][ T8461] usb 5-1: enqueue for inactive port 0 [ 575.637900][T28678] loop5: detected capacity change from 0 to 164 [ 575.639401][T28674] siw: device registration error -23 [ 575.670104][T28678] rock: directory entry would overflow storage [ 575.676508][T28678] rock: sig=0x4f50, size=4, remaining=3 [ 575.682080][T28678] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 575.699444][ T8461] vhci_hcd: vhci_device speed not set [ 575.767323][T28689] loop6: detected capacity change from 0 to 1024 [ 575.774160][T28689] EXT4-fs: Ignoring removed bh option [ 575.795470][T28694] loop1: detected capacity change from 0 to 512 [ 575.807910][T28694] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.8540: dx entry: limit 0 != root limit 125 [ 575.819828][T28694] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.8540: Corrupt directory, running e2fsck is recommended [ 575.833178][T28694] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 575.846357][T28694] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.8540: corrupted in-inode xattr: invalid ea_ino [ 575.860533][T28694] EXT4-fs (loop1): Remounting filesystem read-only [ 575.942685][T28711] loop6: detected capacity change from 0 to 164 [ 575.985432][T28711] rock: directory entry would overflow storage [ 575.991697][T28711] rock: sig=0x4f50, size=4, remaining=3 [ 575.997332][T28711] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 576.005856][T28720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.016549][T28720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.054140][T28720] loop1: detected capacity change from 0 to 1024 [ 576.073783][T28724] loop6: detected capacity change from 0 to 1024 [ 576.080767][T28724] EXT4-fs: Ignoring removed bh option [ 576.159668][T28738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.169053][T28738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.195129][T28738] loop6: detected capacity change from 0 to 1024 [ 576.210097][T28742] __nla_validate_parse: 55 callbacks suppressed [ 576.210116][T28742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8560'. [ 576.227059][T28745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.235882][T28742] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8560'. [ 576.245064][T28745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.263611][T28745] loop2: detected capacity change from 0 to 1024 [ 576.278228][T28751] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8565'. [ 576.415555][T28767] loop4: detected capacity change from 0 to 164 [ 576.424081][T28767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8571'. [ 576.443884][T28767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8571'. [ 576.453276][T28767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8571'. [ 576.462496][T28767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8571'. [ 576.472688][T28767] rock: directory entry would overflow storage [ 576.478948][T28767] rock: sig=0x4f50, size=4, remaining=3 [ 576.484501][T28767] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 576.641871][T28777] loop1: detected capacity change from 0 to 1024 [ 576.726445][T17461] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=17461 comm=kworker/0:7 [ 576.811432][T28782] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8576'. [ 576.853556][T28786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8578'. [ 576.930092][T28794] loop2: detected capacity change from 0 to 164 [ 576.939611][T28794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8582'. [ 576.951743][T28796] loop6: detected capacity change from 0 to 1024 [ 576.961095][T28796] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.8583: Failed to acquire dquot type 0 [ 576.968073][T28794] rock: directory entry would overflow storage [ 576.978557][T28794] rock: sig=0x4f50, size=4, remaining=3 [ 576.984164][T28794] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 576.987136][T28796] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 577.006504][T28796] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.8583: corrupted inode contents [ 577.018899][T28796] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #13: comm syz.6.8583: mark_inode_dirty error [ 577.030591][T28796] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.8583: corrupted inode contents [ 577.043347][T28796] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #13: comm syz.6.8583: mark_inode_dirty error [ 577.055289][T28796] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.8583: corrupted inode contents [ 577.068466][T28796] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 577.077439][T28796] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.8583: corrupted inode contents [ 577.095421][T28796] EXT4-fs error (device loop6): ext4_truncate:4666: inode #13: comm syz.6.8583: mark_inode_dirty error [ 577.098582][T28803] FAULT_INJECTION: forcing a failure. [ 577.098582][T28803] name failslab, interval 1, probability 0, space 0, times 0 [ 577.107316][T28796] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 577.119304][T28803] CPU: 1 UID: 0 PID: 28803 Comm: syz.5.8586 Not tainted syzkaller #0 PREEMPT(voluntary) [ 577.119349][T28803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 577.119434][T28803] Call Trace: [ 577.119444][T28803] [ 577.119455][T28803] __dump_stack+0x1d/0x30 [ 577.119483][T28803] dump_stack_lvl+0xe8/0x140 [ 577.119538][T28803] dump_stack+0x15/0x1b [ 577.119562][T28803] should_fail_ex+0x265/0x280 [ 577.119593][T28803] should_failslab+0x8c/0xb0 [ 577.119626][T28803] kmem_cache_alloc_noprof+0x50/0x310 [ 577.119731][T28803] ? skb_clone+0x151/0x1f0 [ 577.119769][T28803] skb_clone+0x151/0x1f0 [ 577.119802][T28803] __netlink_deliver_tap+0x2c9/0x500 [ 577.119867][T28803] netlink_unicast+0x66b/0x690 [ 577.119899][T28803] netlink_sendmsg+0x58b/0x6b0 [ 577.119936][T28803] ? __pfx_netlink_sendmsg+0x10/0x10 [ 577.120023][T28803] __sock_sendmsg+0x142/0x180 [ 577.120075][T28803] ____sys_sendmsg+0x31e/0x4e0 [ 577.120115][T28803] ___sys_sendmsg+0x17b/0x1d0 [ 577.120166][T28803] __x64_sys_sendmsg+0xd4/0x160 [ 577.120254][T28803] x64_sys_call+0x191e/0x2ff0 [ 577.120282][T28803] do_syscall_64+0xd2/0x200 [ 577.120324][T28803] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 577.120364][T28803] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 577.120403][T28803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.120440][T28803] RIP: 0033:0x7f8ea768eba9 [ 577.120538][T28803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.120562][T28803] RSP: 002b:00007f8ea60ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 577.120588][T28803] RAX: ffffffffffffffda RBX: 00007f8ea78d5fa0 RCX: 00007f8ea768eba9 [ 577.120606][T28803] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 577.120622][T28803] RBP: 00007f8ea60ef090 R08: 0000000000000000 R09: 0000000000000000 [ 577.120639][T28803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.120691][T28803] R13: 00007f8ea78d6038 R14: 00007f8ea78d5fa0 R15: 00007fffc8eda678 [ 577.120717][T28803] [ 577.128332][T28802] loop2: detected capacity change from 0 to 1024 [ 577.138811][T28796] EXT4-fs (loop6): 1 truncate cleaned up [ 577.153305][T28802] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.8585: Failed to acquire dquot type 0 [ 577.333451][T28812] loop5: detected capacity change from 0 to 512 [ 577.341010][T28802] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, [ 577.359209][T28812] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.8591: dx entry: limit 0 != root limit 125 [ 577.362872][T28802] inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 577.363522][T28802] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.8585: corrupted inode contents [ 577.370756][T28812] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.8591: Corrupt directory, running e2fsck is recommended [ 577.382834][T28802] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #13: comm syz.2.8585: mark_inode_dirty error [ 577.428151][T28812] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 577.430712][T28802] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.8585: corrupted inode contents [ 577.446546][T28812] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.8591: corrupted in-inode xattr: invalid ea_ino [ 577.449344][T28802] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.8585: mark_inode_dirty error [ 577.473512][T28802] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.8585: corrupted inode contents [ 577.485829][T28802] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 577.496691][T28812] EXT4-fs (loop5): Remounting filesystem read-only [ 577.503324][T28802] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.8585: corrupted inode contents [ 577.503598][T28815] loop6: detected capacity change from 0 to 2048 [ 577.523112][T28802] EXT4-fs error (device loop2): ext4_truncate:4666: inode #13: comm syz.2.8585: mark_inode_dirty error [ 577.534558][T28802] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 577.544768][T28802] EXT4-fs (loop2): 1 truncate cleaned up [ 577.561123][T28815] EXT4-fs error (device loop6): ext4_free_inode:354: comm syz.6.8587: bit already cleared for inode 15 [ 577.597580][T28822] loop4: detected capacity change from 0 to 1024 [ 577.612577][T28822] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.8594: Failed to acquire dquot type 0 [ 577.649848][T28833] loop5: detected capacity change from 0 to 512 [ 577.660974][T28834] loop1: detected capacity change from 0 to 164 [ 577.668991][T28833] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 577.685161][T28822] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 577.710709][T28833] EXT4-fs (loop5): orphan cleanup on readonly fs [ 577.719709][T28822] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.8594: corrupted inode contents [ 577.731729][T28841] FAULT_INJECTION: forcing a failure. [ 577.731729][T28841] name failslab, interval 1, probability 0, space 0, times 0 [ 577.744569][T28841] CPU: 1 UID: 0 PID: 28841 Comm: syz.6.8602 Not tainted syzkaller #0 PREEMPT(voluntary) [ 577.744596][T28841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 577.744622][T28841] Call Trace: [ 577.744628][T28841] [ 577.744636][T28841] __dump_stack+0x1d/0x30 [ 577.744736][T28841] dump_stack_lvl+0xe8/0x140 [ 577.744755][T28841] dump_stack+0x15/0x1b [ 577.744770][T28841] should_fail_ex+0x265/0x280 [ 577.744798][T28841] should_failslab+0x8c/0xb0 [ 577.744826][T28841] __kvmalloc_node_noprof+0x123/0x4e0 [ 577.744879][T28841] ? __nf_hook_entries_try_shrink+0x260/0x450 [ 577.744987][T28841] __nf_hook_entries_try_shrink+0x260/0x450 [ 577.745106][T28841] __nf_unregister_net_hook+0x2d1/0x3b0 [ 577.745214][T28841] nf_unregister_net_hooks+0xab/0xe0 [ 577.745245][T28841] nf_defrag_ipv4_disable+0x84/0xa0 [ 577.745286][T28841] nf_ct_netns_do_put+0x1ce/0x260 [ 577.745326][T28841] ? __pfx_nft_connlimit_destroy+0x10/0x10 [ 577.745435][T28841] nf_ct_netns_put+0xea/0x1f0 [ 577.745458][T28841] nft_connlimit_destroy+0x3b/0x70 [ 577.745499][T28841] __nft_release_table+0x30a/0xa20 [ 577.745611][T28841] nft_rcv_nl_event+0x334/0x3d0 [ 577.745646][T28841] ? __pfx_nft_rcv_nl_event+0x10/0x10 [ 577.745670][T28841] blocking_notifier_call_chain+0x9b/0x1f0 [ 577.745692][T28841] netlink_release+0xac2/0xf40 [ 577.745742][T28841] sock_close+0x6b/0x150 [ 577.745773][T28841] ? __pfx_sock_close+0x10/0x10 [ 577.745801][T28841] __fput+0x29b/0x650 [ 577.745882][T28841] fput_close_sync+0x6e/0x120 [ 577.745919][T28841] __x64_sys_close+0x56/0xf0 [ 577.745936][T28841] x64_sys_call+0x2738/0x2ff0 [ 577.746025][T28841] do_syscall_64+0xd2/0x200 [ 577.746065][T28841] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 577.746095][T28841] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 577.746185][T28841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.746257][T28841] RIP: 0033:0x7fba3739eba9 [ 577.746276][T28841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.746298][T28841] RSP: 002b:00007fba35dff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 577.746325][T28841] RAX: ffffffffffffffda RBX: 00007fba375e5fa0 RCX: 00007fba3739eba9 [ 577.746355][T28841] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 577.746442][T28841] RBP: 00007fba35dff090 R08: 0000000000000000 R09: 0000000000000000 [ 577.746457][T28841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.746472][T28841] R13: 00007fba375e6038 R14: 00007fba375e5fa0 R15: 00007ffd76f6b848 [ 577.746491][T28841] [ 577.757683][T28833] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.8599: Block bitmap for bg 0 marked uninitialized [ 577.842678][T28834] rock: directory entry would overflow storage [ 577.851359][T28822] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #13: comm syz.4.8594: mark_inode_dirty error [ 577.854744][T28834] rock: sig=0x4f50, size=4, remaining=3 [ 577.878981][T28822] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.8594: corrupted inode contents [ 577.879938][T28834] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 577.891650][T28822] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.8594: mark_inode_dirty error [ 577.899347][T28833] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 577.923730][T28822] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.8594: corrupted inode contents [ 577.930147][T28833] EXT4-fs (loop5): 1 orphan inode deleted [ 577.992774][T28822] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 578.104009][T28822] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.8594: corrupted inode contents [ 578.116574][T28822] EXT4-fs error (device loop4): ext4_truncate:4666: inode #13: comm syz.4.8594: mark_inode_dirty error [ 578.139517][T28822] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 578.155482][T28853] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 578.162145][T28853] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 578.169860][T28853] vhci_hcd vhci_hcd.0: Device attached [ 578.176311][T28822] EXT4-fs (loop4): 1 truncate cleaned up [ 578.189484][T28853] loop5: detected capacity change from 0 to 512 [ 578.203250][T28853] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.8607: iget: bad i_size value: 38620345925642 [ 578.220405][T17446] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=17446 comm=kworker/1:8 [ 578.233576][T28853] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.8607: couldn't read orphan inode 15 (err -117) [ 578.260260][T28853] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 578.294093][T28854] vhci_hcd: connection closed [ 578.294262][ T7366] vhci_hcd: stop threads [ 578.303266][ T7366] vhci_hcd: release socket [ 578.307797][ T7366] vhci_hcd: disconnect device [ 578.329833][T28874] loop1: detected capacity change from 0 to 512 [ 578.335749][T28876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.338185][T28874] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.8615: dx entry: limit 0 != root limit 125 [ 578.344759][T28876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.356283][T28874] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.8615: Corrupt directory, running e2fsck is recommended [ 578.364048][T17461] vhci_hcd: vhci_device speed not set [ 578.377433][ T3504] vhci_hcd: vhci_device speed not set [ 578.382944][T28874] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 578.396117][T28874] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.8615: corrupted in-inode xattr: invalid ea_ino [ 578.409893][T28874] EXT4-fs (loop1): Remounting filesystem read-only [ 578.409894][T28876] loop4: detected capacity change from 0 to 1024 [ 578.426986][T28874] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 578.501912][T28883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.510473][T28883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.529008][T28883] loop1: detected capacity change from 0 to 1024 [ 578.740901][T28887] loop2: detected capacity change from 0 to 1024 [ 578.747790][T28887] EXT4-fs: Ignoring removed bh option [ 578.780238][T28891] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 578.931359][T28908] loop5: detected capacity change from 0 to 512 [ 578.939565][T28908] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.8627: dx entry: limit 0 != root limit 125 [ 578.951382][T28908] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.8627: Corrupt directory, running e2fsck is recommended [ 578.964604][T28908] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 578.973286][T28908] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.8627: corrupted in-inode xattr: invalid ea_ino [ 578.987542][T28908] EXT4-fs (loop5): Remounting filesystem read-only [ 578.996617][T28908] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 578.997731][T28912] tmpfs: Bad value for 'mpol' [ 579.067338][T28915] loop4: detected capacity change from 0 to 164 [ 579.088461][T28915] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 579.123398][T28926] loop6: detected capacity change from 0 to 164 [ 579.130878][T28930] loop5: detected capacity change from 0 to 1024 [ 579.138186][T28930] EXT4-fs: Ignoring removed bh option [ 579.175335][T28938] validate_nla: 3 callbacks suppressed [ 579.175358][T28938] netlink: 'syz.4.8640': attribute type 21 has an invalid length. [ 579.181186][T28934] loop1: detected capacity change from 0 to 1024 [ 579.189444][T28938] netlink: 'syz.4.8640': attribute type 5 has an invalid length. [ 579.195817][T28926] rock: directory entry would overflow storage [ 579.202990][T28938] netlink: 'syz.4.8640': attribute type 6 has an invalid length. [ 579.209160][T28926] rock: sig=0x4f50, size=4, remaining=3 [ 579.222478][T28926] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 579.271071][T28947] loop4: detected capacity change from 0 to 1024 [ 579.368958][T28953] loop5: detected capacity change from 0 to 8192 [ 579.416786][T28953] loop5: p1 p2 p4 < > [ 579.422859][T28953] loop5: p1 start 4261412864 is beyond EOD, truncated [ 579.429703][T28953] loop5: p2 start 4009754624 is beyond EOD, truncated [ 579.495170][T28962] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 579.524799][T28968] netlink: 'syz.6.8652': attribute type 21 has an invalid length. [ 579.540708][T28968] netlink: 'syz.6.8652': attribute type 5 has an invalid length. [ 579.548701][T28968] netlink: 'syz.6.8652': attribute type 6 has an invalid length. [ 579.572622][T28970] loop4: detected capacity change from 0 to 512 [ 579.589666][T28974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.598851][T28970] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.8653: dx entry: limit 0 != root limit 125 [ 579.610698][T28970] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.8653: Corrupt directory, running e2fsck is recommended [ 579.624736][T28974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.626541][T28970] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 579.662355][T28974] loop5: detected capacity change from 0 to 1024 [ 579.673485][T28970] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.8653: corrupted in-inode xattr: invalid ea_ino [ 579.689584][T28962] loop1: detected capacity change from 0 to 2048 [ 579.698898][T28970] EXT4-fs (loop4): Remounting filesystem read-only [ 579.751089][T28962] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 579.844365][T28987] loop6: detected capacity change from 0 to 164 [ 579.857625][T28987] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 579.883909][T29001] netlink: 'syz.1.8666': attribute type 21 has an invalid length. [ 579.887374][T29000] loop2: detected capacity change from 0 to 1024 [ 579.892823][T29001] netlink: 'syz.1.8666': attribute type 5 has an invalid length. [ 579.906124][T29001] netlink: 'syz.1.8666': attribute type 6 has an invalid length. [ 579.933192][T29007] loop1: detected capacity change from 0 to 512 [ 579.951595][T29007] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.8668: dx entry: limit 0 != root limit 125 [ 579.963418][T29007] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.8668: Corrupt directory, running e2fsck is recommended [ 579.978801][T29013] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 579.999686][T29013] loop4: detected capacity change from 0 to 2048 [ 580.008811][T29007] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 580.017220][T29007] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.8668: corrupted in-inode xattr: invalid ea_ino [ 580.031035][T29007] EXT4-fs (loop1): Remounting filesystem read-only [ 580.040060][T29016] loop6: detected capacity change from 0 to 512 [ 580.046698][T29007] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 580.056565][T29016] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.8672: dx entry: limit 0 != root limit 125 [ 580.068442][T29016] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.8672: Corrupt directory, running e2fsck is recommended [ 580.087298][T29013] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 580.106875][T29016] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 580.116670][T29016] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.8672: corrupted in-inode xattr: invalid ea_ino [ 580.159053][T29016] EXT4-fs (loop6): Remounting filesystem read-only [ 580.177537][T29025] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 580.206954][T29016] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 580.216663][T29031] loop2: detected capacity change from 0 to 164 [ 580.253967][ T29] kauditd_printk_skb: 542 callbacks suppressed [ 580.253982][ T29] audit: type=1326 audit(1757476396.082:38500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29030 comm="syz.2.8678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862f13eba9 code=0x7ffc0000 [ 580.284464][ T29] audit: type=1326 audit(1757476396.082:38501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29030 comm="syz.2.8678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f862f13eba9 code=0x7ffc0000 [ 580.327452][T29031] rock: directory entry would overflow storage [ 580.333655][T29031] rock: sig=0x4f50, size=4, remaining=3 [ 580.339352][T29031] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 580.352455][T29025] loop4: detected capacity change from 0 to 2048 [ 580.364074][T29034] netlink: 'syz.6.8679': attribute type 21 has an invalid length. [ 580.372535][ T29] audit: type=1326 audit(1757476396.202:38502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29030 comm="syz.2.8678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862f13eba9 code=0x7ffc0000 [ 580.375677][T29036] loop1: detected capacity change from 0 to 1024 [ 580.396283][ T29] audit: type=1326 audit(1757476396.202:38503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29030 comm="syz.2.8678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862f13eba9 code=0x7ffc0000 [ 580.483242][T29045] loop5: detected capacity change from 0 to 1024 [ 580.505179][T29025] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 580.528397][T29054] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 580.535076][T29054] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 580.542719][T29054] vhci_hcd vhci_hcd.0: Device attached [ 580.559378][T29054] loop2: detected capacity change from 0 to 512 [ 580.568625][T29054] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.8687: iget: bad i_size value: 38620345925642 [ 580.582187][T29052] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 580.601950][T29054] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.8687: couldn't read orphan inode 15 (err -117) [ 580.615225][T29052] loop6: detected capacity change from 0 to 2048 [ 580.639537][T29062] loop4: detected capacity change from 0 to 164 [ 580.652520][T29052] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 580.667449][T29054] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 580.688981][T29056] vhci_hcd: connection closed [ 580.689320][ T7360] vhci_hcd: stop threads [ 580.698352][ T7360] vhci_hcd: release socket [ 580.702863][ T7360] vhci_hcd: disconnect device [ 580.736277][ T8461] vhci_hcd: vhci_device speed not set [ 580.748097][ T29] audit: type=1326 audit(1757476396.572:38504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29067 comm="syz.6.8690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba3739eba9 code=0x7ffc0000 [ 580.771802][ T29] audit: type=1326 audit(1757476396.572:38505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29067 comm="syz.6.8690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba3739eba9 code=0x7ffc0000 [ 580.786150][T29062] rock: directory entry would overflow storage [ 580.795610][ T29] audit: type=1326 audit(1757476396.572:38506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29067 comm="syz.6.8690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba3739eba9 code=0x7ffc0000 [ 580.801671][T29062] rock: sig=0x4f50, size=4, remaining=3 [ 580.801686][T29062] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 580.838390][ T29] audit: type=1326 audit(1757476396.572:38507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29067 comm="syz.6.8690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba3739eba9 code=0x7ffc0000 [ 580.862098][ T29] audit: type=1326 audit(1757476396.572:38508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29067 comm="syz.6.8690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba3739eba9 code=0x7ffc0000 [ 580.885680][ T29] audit: type=1326 audit(1757476396.572:38509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29067 comm="syz.6.8690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba3739eba9 code=0x7ffc0000 [ 580.924335][T29071] loop1: detected capacity change from 0 to 1024 [ 580.932759][T29071] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.8691: Failed to acquire dquot type 0 [ 580.944836][T29071] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 580.960092][T29071] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.8691: corrupted inode contents [ 580.976045][T29071] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #13: comm syz.1.8691: mark_inode_dirty error [ 581.001372][T29071] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.8691: corrupted inode contents [ 581.020329][T29071] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.8691: mark_inode_dirty error [ 581.021040][T29080] loop5: detected capacity change from 0 to 164 [ 581.063150][T29071] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.8691: corrupted inode contents [ 581.075585][T29080] rock: directory entry would overflow storage [ 581.081829][T29080] rock: sig=0x4f50, size=4, remaining=3 [ 581.083125][T29088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.087504][T29080] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 581.096118][T29088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.104282][T29071] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 581.127689][T29088] loop6: detected capacity change from 0 to 1024 [ 581.135587][T29071] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.8691: corrupted inode contents [ 581.147833][T29071] EXT4-fs error (device loop1): ext4_truncate:4666: inode #13: comm syz.1.8691: mark_inode_dirty error [ 581.159813][T29071] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 581.171165][T29091] loop4: detected capacity change from 0 to 164 [ 581.184848][T29071] EXT4-fs (loop1): 1 truncate cleaned up [ 581.196084][T29091] rock: directory entry would overflow storage [ 581.196582][T29095] loop5: detected capacity change from 0 to 256 [ 581.202331][T29091] rock: sig=0x4f50, size=4, remaining=3 [ 581.214389][T29091] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 581.249386][T29099] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 581.256182][T29098] loop5: detected capacity change from 0 to 164 [ 581.275530][T29098] __nla_validate_parse: 69 callbacks suppressed [ 581.275547][T29098] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8703'. [ 581.304518][T29098] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8703'. [ 581.314018][T29098] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8703'. [ 581.323711][T29098] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8703'. [ 581.338608][T29098] rock: directory entry would overflow storage [ 581.344837][T29098] rock: sig=0x4f50, size=4, remaining=3 [ 581.350472][T29098] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 581.361333][T29103] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8705'. [ 581.370685][T29103] netlink: 3 bytes leftover after parsing attributes in process `syz.2.8705'. [ 581.396137][T29109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8707'. [ 581.450157][T29108] loop5: detected capacity change from 0 to 8192 [ 581.486803][T29108] loop5: p1 p2 p4 < > [ 581.491123][T29108] loop5: p1 start 4261412864 is beyond EOD, truncated [ 581.498011][T29108] loop5: p2 start 4009754624 is beyond EOD, truncated [ 581.527592][T29122] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8714'. [ 581.537539][T29122] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8714'. [ 581.549592][T29122] loop2: detected capacity change from 0 to 164 [ 581.650514][T29139] loop5: detected capacity change from 0 to 1024 [ 581.660049][T29140] loop2: detected capacity change from 0 to 256 [ 581.768362][T29151] 9pnet_fd: Insufficient options for proto=fd [ 581.791409][T29153] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8727'. [ 581.803559][T29153] loop5: detected capacity change from 0 to 164 [ 581.836773][T29159] program syz.2.8730 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 581.846922][T29159] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 581.863174][T29164] loop5: detected capacity change from 0 to 1024 [ 581.910403][T29173] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 581.910403][T29173] program syz.2.8730 not setting count and/or reply_len properly [ 581.952700][T29177] loop6: detected capacity change from 0 to 256 [ 581.987791][T29180] 9pnet_fd: Insufficient options for proto=fd [ 582.030036][T29183] program syz.6.8740 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 582.039737][T29183] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 582.051624][T29183] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.061740][T29185] loop1: detected capacity change from 0 to 164 [ 582.093338][T29185] rock: directory entry would overflow storage [ 582.099580][T29185] rock: sig=0x4f50, size=4, remaining=3 [ 582.105153][T29185] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 582.114608][T29183] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.117791][T29187] loop5: detected capacity change from 0 to 164 [ 582.167817][T29183] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.195389][T29197] 9pnet_fd: Insufficient options for proto=fd [ 582.214177][T29200] program syz.4.8748 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 582.224123][T29200] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 582.227586][T29201] loop1: detected capacity change from 0 to 164 [ 582.248163][T29183] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.264365][T29201] rock: directory entry would overflow storage [ 582.270611][T29201] rock: sig=0x4f50, size=4, remaining=3 [ 582.276222][T29201] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 582.304444][T29204] loop5: detected capacity change from 0 to 1024 [ 582.319657][ T7360] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.333482][T29210] loop1: detected capacity change from 0 to 256 [ 582.340106][T29204] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.8750: bg 0: block 260: invalid block bitmap [ 582.341021][T29211] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 582.341021][T29211] program syz.4.8748 not setting count and/or reply_len properly [ 582.353297][ T7360] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.378031][ T7360] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.386441][ T7360] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.415275][T29215] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 582.429649][T29217] loop1: detected capacity change from 0 to 764 [ 582.654480][T29226] Symlink component flag not implemented [ 582.661005][T29226] Symlink component flag not implemented (129) [ 582.668499][T29226] rock: directory entry would overflow storage [ 582.674689][T29226] rock: sig=0x4f50, size=4, remaining=3 [ 582.680286][T29226] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 582.709645][T29226] lo speed is unknown, defaulting to 1000 [ 582.755151][T29227] rock: directory entry would overflow storage [ 582.761397][T29227] rock: sig=0x4f50, size=4, remaining=3 [ 582.766967][T29227] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 582.838272][T29231] loop2: detected capacity change from 0 to 512 [ 582.846459][T29231] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.8756: dx entry: limit 0 != root limit 125 [ 582.858375][T29231] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.8756: Corrupt directory, running e2fsck is recommended [ 582.872538][T29231] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 582.880884][T29231] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.8756: corrupted in-inode xattr: invalid ea_ino [ 582.894659][T29231] EXT4-fs (loop2): Remounting filesystem read-only [ 582.903834][T29231] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 583.126127][T29242] loop5: detected capacity change from 0 to 164 [ 583.140857][T29244] loop4: detected capacity change from 0 to 512 [ 583.156125][T29242] rock: directory entry would overflow storage [ 583.162366][T29242] rock: sig=0x4f50, size=4, remaining=3 [ 583.168113][T29242] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 583.179081][T29244] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.8762: dx entry: limit 0 != root limit 125 [ 583.190968][T29244] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.8762: Corrupt directory, running e2fsck is recommended [ 583.195710][T29247] program syz.2.8763 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 583.204137][T29244] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 583.213522][T29247] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 583.230341][T29244] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.8762: corrupted in-inode xattr: invalid ea_ino [ 583.243968][T29244] EXT4-fs (loop4): Remounting filesystem read-only [ 583.258755][T29247] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.276669][T29244] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 583.319709][T29247] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.343840][T29251] loop6: detected capacity change from 0 to 512 [ 583.352701][T29255] loop1: detected capacity change from 0 to 164 [ 583.359199][T29261] loop5: detected capacity change from 0 to 512 [ 583.368681][T29247] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.378489][T29251] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.8765: dx entry: limit 0 != root limit 125 [ 583.390400][T29251] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.8765: Corrupt directory, running e2fsck is recommended [ 583.406401][T29261] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.8767: dx entry: limit 0 != root limit 125 [ 583.418446][T29261] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.8767: Corrupt directory, running e2fsck is recommended [ 583.421369][T29251] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 583.440024][T29261] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 583.442426][T29247] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.449975][T29251] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.8765: corrupted in-inode xattr: invalid ea_ino [ 583.471433][T29261] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.8767: corrupted in-inode xattr: invalid ea_ino [ 583.485238][T29251] EXT4-fs (loop6): Remounting filesystem read-only [ 583.490689][T29261] EXT4-fs (loop5): Remounting filesystem read-only [ 583.498948][T29264] tipc: Enabling of bearer rejected, failed to enable media [ 583.514419][T29255] rock: directory entry would overflow storage [ 583.520654][T29255] rock: sig=0x4f50, size=4, remaining=3 [ 583.526322][T29255] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 583.535110][T29261] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 583.555871][T29268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.564824][T29268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.591969][ T7323] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.600971][ T7323] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.618897][ T7323] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.636831][ T7323] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.655683][T29277] loop1: detected capacity change from 0 to 164 [ 583.692858][T29282] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 583.700559][T29277] rock: directory entry would overflow storage [ 583.707221][T29277] rock: sig=0x4f50, size=4, remaining=3 [ 583.712803][T29277] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 583.773890][T29285] loop1: detected capacity change from 0 to 1024 [ 583.810283][T29282] loop2: detected capacity change from 0 to 2048 [ 583.838013][T29290] loop1: detected capacity change from 0 to 164 [ 583.853322][T29282] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 583.872645][T29290] rock: directory entry would overflow storage [ 583.878942][T29290] rock: sig=0x4f50, size=4, remaining=3 [ 583.884505][T29290] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 583.955523][T29297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.964438][T29297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.986425][T29297] loop1: detected capacity change from 0 to 1024 [ 584.060318][T29309] dummy0: entered promiscuous mode [ 584.067800][T29309] bridge0: port 3(dummy0) entered blocking state [ 584.074324][T29309] bridge0: port 3(dummy0) entered disabled state [ 584.081599][T29309] dummy0: entered allmulticast mode [ 584.090053][T29309] bridge0: port 3(dummy0) entered blocking state [ 584.096891][T29309] bridge0: port 3(dummy0) entered forwarding state [ 584.170910][T17463] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=17463 comm=kworker/0:9 [ 584.184329][T29313] 9pnet: p9_errstr2errno: server reported unknown error ÷e¸ [ 584.795987][T29336] loop4: detected capacity change from 0 to 1024 [ 584.872000][ T3372] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3372 comm=kworker/0:2 [ 584.902166][T29341] 9pnet: p9_errstr2errno: server reported unknown error ÷e¸ [ 585.040202][T29352] loop1: detected capacity change from 0 to 1024 [ 585.061161][T29352] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.8806: Failed to acquire dquot type 0 [ 585.085314][T29351] loop5: detected capacity change from 0 to 8192 [ 585.106603][T29352] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 585.128641][T29352] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.8806: corrupted inode contents [ 585.141289][T29352] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #13: comm syz.1.8806: mark_inode_dirty error [ 585.154647][T29351] loop5: p1 p2 p4 < > [ 585.156929][T29357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.158955][T29351] loop5: p1 start 4261412864 is beyond EOD, truncated [ 585.173951][T29351] loop5: p2 start 4009754624 is beyond EOD, truncated [ 585.180996][T29357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.201176][T29352] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.8806: corrupted inode contents [ 585.222508][T29357] loop2: detected capacity change from 0 to 1024 [ 585.230994][T29352] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.8806: mark_inode_dirty error [ 585.243054][T29352] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.8806: corrupted inode contents [ 585.257544][ T29] kauditd_printk_skb: 350 callbacks suppressed [ 585.257564][ T29] audit: type=1326 audit(1757476401.092:38856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29356 comm="syz.2.8809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f862f13d510 code=0x7ffc0000 [ 585.287491][ T29] audit: type=1326 audit(1757476401.092:38857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29356 comm="syz.2.8809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f862f13d8f7 code=0x7ffc0000 [ 585.288228][T29352] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 585.311178][ T29] audit: type=1326 audit(1757476401.092:38858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29356 comm="syz.2.8809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f862f13d510 code=0x7ffc0000 [ 585.343460][ T29] audit: type=1326 audit(1757476401.092:38859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29356 comm="syz.2.8809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862f13eba9 code=0x7ffc0000 [ 585.367092][ T29] audit: type=1326 audit(1757476401.092:38860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29356 comm="syz.2.8809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f862f13eba9 code=0x7ffc0000 [ 585.390791][ T29] audit: type=1326 audit(1757476401.092:38861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29356 comm="syz.2.8809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862f13eba9 code=0x7ffc0000 [ 585.406308][T29352] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.8806: corrupted inode contents [ 585.414596][ T29] audit: type=1326 audit(1757476401.092:38862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29356 comm="syz.2.8809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f862f13eba9 code=0x7ffc0000 [ 585.414626][ T29] audit: type=1326 audit(1757476401.092:38863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29356 comm="syz.2.8809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862f13eba9 code=0x7ffc0000 [ 585.438831][T29364] 9pnet_fd: Insufficient options for proto=fd [ 585.450130][ T29] audit: type=1326 audit(1757476401.092:38864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29356 comm="syz.2.8809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f862f13eba9 code=0x7ffc0000 [ 585.450206][ T29] audit: type=1326 audit(1757476401.092:38865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29356 comm="syz.2.8809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862f13eba9 code=0x7ffc0000 [ 585.494095][T29352] EXT4-fs error (device loop1): ext4_truncate:4666: inode #13: comm syz.1.8806: mark_inode_dirty error [ 585.547643][T29352] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 585.562054][T29352] EXT4-fs (loop1): 1 truncate cleaned up [ 585.572475][T29370] loop6: detected capacity change from 0 to 512 [ 585.585013][T29370] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.8814: dx entry: limit 0 != root limit 125 [ 585.596855][T29370] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.8814: Corrupt directory, running e2fsck is recommended [ 585.610369][T29370] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 585.618963][T29370] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.8814: corrupted in-inode xattr: invalid ea_ino [ 585.632824][T29370] EXT4-fs (loop6): Remounting filesystem read-only [ 585.642350][T29370] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 585.725687][T29373] hub 2-0:1.0: USB hub found [ 585.730418][T29373] hub 2-0:1.0: 8 ports detected [ 585.912280][T29395] validate_nla: 14 callbacks suppressed [ 585.912365][T29395] netlink: 'syz.6.8823': attribute type 1 has an invalid length. [ 585.930395][T29399] 9pnet_fd: Insufficient options for proto=fd [ 585.942824][T29401] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 585.949435][T29401] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 585.957154][T29401] vhci_hcd vhci_hcd.0: Device attached [ 585.970171][T29401] loop1: detected capacity change from 0 to 512 [ 585.977304][T29407] FAULT_INJECTION: forcing a failure. [ 585.977304][T29407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 585.990684][T29407] CPU: 1 UID: 0 PID: 29407 Comm: syz.5.8826 Not tainted syzkaller #0 PREEMPT(voluntary) [ 585.990712][T29407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 585.990724][T29407] Call Trace: [ 585.990813][T29407] [ 585.990823][T29407] __dump_stack+0x1d/0x30 [ 585.990848][T29407] dump_stack_lvl+0xe8/0x140 [ 585.990867][T29407] dump_stack+0x15/0x1b [ 585.990965][T29407] should_fail_ex+0x265/0x280 [ 585.990994][T29407] should_fail+0xb/0x20 [ 585.991014][T29407] should_fail_usercopy+0x1a/0x20 [ 585.991039][T29407] _copy_from_user+0x1c/0xb0 [ 585.991149][T29407] memdup_user+0x5e/0xd0 [ 585.991184][T29407] strndup_user+0x68/0xb0 [ 585.991218][T29407] __se_sys_fsopen+0x3c/0x1e0 [ 585.991327][T29407] __x64_sys_fsopen+0x31/0x40 [ 585.991356][T29407] x64_sys_call+0x2a9d/0x2ff0 [ 585.991383][T29407] do_syscall_64+0xd2/0x200 [ 585.991413][T29407] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 585.991467][T29407] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 585.991504][T29407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.991540][T29407] RIP: 0033:0x7f8ea768eba9 [ 585.991597][T29407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 585.991641][T29407] RSP: 002b:00007f8ea60ef038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 585.991809][T29407] RAX: ffffffffffffffda RBX: 00007f8ea78d5fa0 RCX: 00007f8ea768eba9 [ 585.991826][T29407] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200 [ 585.991853][T29407] RBP: 00007f8ea60ef090 R08: 0000000000000000 R09: 0000000000000000 [ 585.991930][T29407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 585.991942][T29407] R13: 00007f8ea78d6038 R14: 00007f8ea78d5fa0 R15: 00007fffc8eda678 [ 585.991960][T29407] [ 585.995943][T29401] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.8825: iget: bad i_size value: 38620345925642 [ 586.021937][T29413] loop5: detected capacity change from 0 to 512 [ 586.023565][T29401] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.8825: couldn't read orphan inode 15 (err -117) [ 586.029826][T29413] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.8829: dx entry: limit 0 != root limit 125 [ 586.218161][T29413] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.8829: Corrupt directory, running e2fsck is recommended [ 586.233699][T29413] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 586.234993][T29401] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 586.250799][T29413] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.8829: corrupted in-inode xattr: invalid ea_ino [ 586.266014][T29413] EXT4-fs (loop5): Remounting filesystem read-only [ 586.289597][T29413] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 586.312764][T29401] __nla_validate_parse: 53 callbacks suppressed [ 586.312786][T29401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8825'. [ 586.329423][T29403] vhci_hcd: connection closed [ 586.329622][ T7360] vhci_hcd: stop threads [ 586.338635][ T7360] vhci_hcd: release socket [ 586.343189][ T7360] vhci_hcd: disconnect device [ 586.356323][ T3504] usb 3-1: new high-speed USB device number 21 using vhci_hcd [ 586.363895][ T3504] usb 3-1: enqueue for inactive port 0 [ 586.364196][T29420] loop6: detected capacity change from 0 to 164 [ 586.377392][ T3504] usb 3-1: enqueue for inactive port 0 [ 586.382903][ T3504] usb 3-1: enqueue for inactive port 0 [ 586.391758][T29420] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8831'. [ 586.404444][ T3372] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 586.412024][ T3372] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 586.419240][T29429] loop4: detected capacity change from 0 to 512 [ 586.419708][ T3372] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 586.435188][ T3372] hid-generic 0000:0004:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 586.457216][T29420] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8831'. [ 586.466121][T29429] ext4 filesystem being mounted at /460/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 586.466372][ T3504] vhci_hcd: vhci_device speed not set [ 586.482403][T29420] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8831'. [ 586.486058][T29433] 9pnet_fd: Insufficient options for proto=fd [ 586.491562][T29420] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8831'. [ 586.511345][T29420] rock: directory entry would overflow storage [ 586.517574][T29420] rock: sig=0x4f50, size=4, remaining=3 [ 586.523134][T29420] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 586.540125][T29436] loop5: detected capacity change from 0 to 1024 [ 586.604395][T29441] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 586.606960][T29443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.630804][T29443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.721939][T29441] loop5: detected capacity change from 0 to 2048 [ 586.739412][T29449] loop6: detected capacity change from 0 to 512 [ 586.747572][T29449] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.8843: dx entry: limit 0 != root limit 125 [ 586.759607][T29449] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.8843: Corrupt directory, running e2fsck is recommended [ 586.785032][T29441] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 586.785416][T29453] netlink: 'syz.4.8841': attribute type 13 has an invalid length. [ 586.793936][T29449] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 586.836121][T29449] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.8843: corrupted in-inode xattr: invalid ea_ino [ 586.851504][T29449] EXT4-fs (loop6): Remounting filesystem read-only [ 586.865178][T29449] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 586.883134][T29453] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.890557][T29453] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.907813][ T3412] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3412 comm=kworker/0:5 [ 586.926674][T29458] 9pnet: p9_errstr2errno: server reported unknown error ÷e¸ [ 586.969035][T29462] loop1: detected capacity change from 0 to 1024 [ 587.026888][ T3412] syz1: Port: 1 Link DOWN [ 587.027727][ T7326] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.067691][T29468] lo speed is unknown, defaulting to 1000 [ 587.067986][ T7326] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.099832][ T7326] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.119736][ T7326] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.190741][T29472] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 587.213430][T29474] loop1: detected capacity change from 0 to 512 [ 587.244125][T29474] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.8850: casefold flag without casefold feature [ 587.260987][T29479] loop5: detected capacity change from 0 to 256 [ 587.280474][T29474] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.8850: couldn't read orphan inode 15 (err -117) [ 587.306677][T29474] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8850'. [ 587.341693][T29472] loop2: detected capacity change from 0 to 2048 [ 587.402478][T29472] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 587.549524][T17461] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=17461 comm=kworker/0:7 [ 587.566296][T29499] 9pnet: p9_errstr2errno: server reported unknown error ÷e¸ [ 587.580309][T29501] loop2: detected capacity change from 0 to 164 [ 587.587221][T29503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.596072][T29497] loop5: detected capacity change from 0 to 8192 [ 587.602084][T29503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.603389][T29505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.619278][T29505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.630031][T29503] loop4: detected capacity change from 0 to 1024 [ 587.640403][T29501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8857'. [ 587.656578][T29497] loop5: p1 p2 p4 < > [ 587.660784][T29497] loop5: p1 start 4261412864 is beyond EOD, truncated [ 587.665274][T29501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8857'. [ 587.667645][T29497] loop5: p2 start 4009754624 is beyond EOD, truncated [ 587.684111][T29501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8857'. [ 587.693410][T29501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8857'. [ 587.704410][T29501] rock: directory entry would overflow storage [ 587.710671][T29501] rock: sig=0x4f50, size=4, remaining=3 [ 587.716276][T29501] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 587.718788][T29509] loop5: detected capacity change from 0 to 1024 [ 587.730955][T29509] EXT4-fs: Ignoring removed bh option [ 587.772879][T29513] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 587.842292][T29525] loop5: detected capacity change from 0 to 1024 [ 587.849573][T29525] EXT4-fs: Ignoring removed nobh option [ 587.855341][T29525] EXT4-fs: Ignoring removed bh option [ 587.894380][T29534] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 587.901048][T29534] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 587.908705][T29534] vhci_hcd vhci_hcd.0: Device attached [ 587.918173][T29534] loop2: detected capacity change from 0 to 512 [ 587.929971][T29534] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.8872: iget: bad i_size value: 38620345925642 [ 587.944587][T29534] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.8872: couldn't read orphan inode 15 (err -117) [ 587.962300][T29543] loop6: detected capacity change from 0 to 1024 [ 587.979164][T29534] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 588.030259][T29546] infiniband syz!: set active [ 588.035026][T29546] infiniband syz!: added team_slave_0 [ 588.043113][T29535] vhci_hcd: connection closed [ 588.043265][ T7325] vhci_hcd: stop threads [ 588.052316][ T7325] vhci_hcd: release socket [ 588.056811][ T7325] vhci_hcd: disconnect device [ 588.067833][T29546] RDS/IB: syz!: added [ 588.071999][T29546] smc: adding ib device syz! with port count 1 [ 588.078332][T29546] smc: ib device syz! port 1 has pnetid [ 588.086456][T17461] vhci_hcd: vhci_device speed not set [ 588.101213][T27275] EXT4-fs unmount: 213 callbacks suppressed [ 588.101231][T27275] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.175099][T23314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.208232][T29560] 9pnet_fd: Insufficient options for proto=fd [ 588.287253][T29566] 9pnet_fd: Insufficient options for proto=fd [ 588.353539][T29572] loop1: detected capacity change from 0 to 256 [ 588.442459][T29577] loop5: detected capacity change from 0 to 164 [ 588.449255][T29577] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 588.449654][T29577] FAULT_INJECTION: forcing a failure. [ 588.449654][T29577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 588.449686][T29577] CPU: 0 UID: 0 PID: 29577 Comm: syz.5.8889 Not tainted syzkaller #0 PREEMPT(voluntary) [ 588.449716][T29577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 588.449812][T29577] Call Trace: [ 588.449819][T29577] [ 588.449827][T29577] __dump_stack+0x1d/0x30 [ 588.449856][T29577] dump_stack_lvl+0xe8/0x140 [ 588.449883][T29577] dump_stack+0x15/0x1b [ 588.449908][T29577] should_fail_ex+0x265/0x280 [ 588.449948][T29577] should_fail+0xb/0x20 [ 588.450044][T29577] should_fail_usercopy+0x1a/0x20 [ 588.450079][T29577] strncpy_from_user+0x25/0x230 [ 588.450168][T29577] ? kmem_cache_alloc_noprof+0x186/0x310 [ 588.450207][T29577] ? getname_flags+0x80/0x3b0 [ 588.450298][T29577] getname_flags+0xae/0x3b0 [ 588.450345][T29577] user_path_at+0x28/0x130 [ 588.450390][T29577] __se_sys_chroot+0x45/0x230 [ 588.450484][T29577] __x64_sys_chroot+0x1f/0x30 [ 588.450520][T29577] x64_sys_call+0x214f/0x2ff0 [ 588.450551][T29577] do_syscall_64+0xd2/0x200 [ 588.450670][T29577] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 588.450704][T29577] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 588.450744][T29577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.450801][T29577] RIP: 0033:0x7f8ea768eba9 [ 588.450821][T29577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 588.450845][T29577] RSP: 002b:00007f8ea60ef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a1 [ 588.450870][T29577] RAX: ffffffffffffffda RBX: 00007f8ea78d5fa0 RCX: 00007f8ea768eba9 [ 588.450933][T29577] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 588.450950][T29577] RBP: 00007f8ea60ef090 R08: 0000000000000000 R09: 0000000000000000 [ 588.451037][T29577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.451099][T29577] R13: 00007f8ea78d6038 R14: 00007f8ea78d5fa0 R15: 00007fffc8eda678 [ 588.451125][T29577] [ 588.543767][T29580] loop5: detected capacity change from 0 to 8192 [ 588.675002][T22192] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.696827][T29582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.696919][T29582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.717101][T29580] loop5: p1 p2 p4 < > [ 588.721324][T29580] loop5: p1 start 4261412864 is beyond EOD, truncated [ 588.721351][T29580] loop5: p2 start 4009754624 is beyond EOD, truncated [ 588.768751][T29588] loop5: detected capacity change from 0 to 1024 [ 588.775575][T29582] loop2: detected capacity change from 0 to 1024 [ 588.783363][T29590] loop6: detected capacity change from 0 to 1024 [ 588.784707][T29588] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.8894: Failed to acquire dquot type 0 [ 588.801734][T29588] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 588.804174][T29590] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.8895: Failed to acquire dquot type 0 [ 588.817139][T29588] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.8894: corrupted inode contents [ 588.829616][T29582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 588.840070][T29588] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #13: comm syz.5.8894: mark_inode_dirty error [ 588.852099][T29590] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 588.863677][T29588] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.8894: corrupted inode contents [ 588.884397][T29590] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.8895: corrupted inode contents [ 588.901962][T29588] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.8894: mark_inode_dirty error [ 588.911651][T29590] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #13: comm syz.6.8895: mark_inode_dirty error [ 588.924793][T29588] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.8894: corrupted inode contents [ 588.924818][T29590] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.8895: corrupted inode contents [ 588.938291][T29588] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 588.952714][T29590] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #13: comm syz.6.8895: mark_inode_dirty error [ 588.969010][T29588] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.8894: corrupted inode contents [ 588.981053][T29597] loop1: detected capacity change from 0 to 1024 [ 588.981214][T29590] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.8895: corrupted inode contents [ 588.996500][T29588] EXT4-fs error (device loop5): ext4_truncate:4666: inode #13: comm syz.5.8894: mark_inode_dirty error [ 588.999720][T29590] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 589.012597][T29597] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 589.019261][T29590] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.8895: corrupted inode contents [ 589.031573][T29588] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 589.046726][T29590] EXT4-fs error (device loop6): ext4_truncate:4666: inode #13: comm syz.6.8895: mark_inode_dirty error [ 589.054231][T29588] EXT4-fs (loop5): 1 truncate cleaned up [ 589.069700][T29588] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 589.079199][T29590] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 589.102782][T29590] EXT4-fs (loop6): 1 truncate cleaned up [ 589.107207][T25685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.109368][T29590] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 589.139488][T29601] 9pnet_fd: Insufficient options for proto=fd [ 589.169641][T27275] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.188282][T29603] loop5: detected capacity change from 0 to 164 [ 589.202637][T29597] SELinux: Context system_u:object_r:gpg_exec_t:s0 is not valid (left unmapped). [ 589.219439][T29607] loop6: detected capacity change from 0 to 164 [ 589.248446][T29603] rock: directory entry would overflow storage [ 589.254716][T29603] rock: sig=0x4f50, size=4, remaining=3 [ 589.260511][T29603] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 589.332357][T29615] loop5: detected capacity change from 0 to 512 [ 589.344239][T29615] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.8904: dx entry: limit 0 != root limit 125 [ 589.356174][T29615] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.8904: Corrupt directory, running e2fsck is recommended [ 589.369542][T29615] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 589.378462][T29615] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.8904: corrupted in-inode xattr: invalid ea_ino [ 589.393059][T29615] EXT4-fs (loop5): Remounting filesystem read-only [ 589.400040][T29615] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 589.415693][T22192] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.435842][T25685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.459994][T27555] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.473318][T29626] netlink: 'syz.5.8907': attribute type 21 has an invalid length. [ 589.473356][T29626] netlink: 'syz.5.8907': attribute type 5 has an invalid length. [ 589.488987][T29626] netlink: 'syz.5.8907': attribute type 6 has an invalid length. [ 589.524324][T29630] loop1: detected capacity change from 0 to 1024 [ 589.537150][T29630] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 589.703858][T29645] loop5: detected capacity change from 0 to 164 [ 589.728345][T29645] rock: directory entry would overflow storage [ 589.734582][T29645] rock: sig=0x4f50, size=4, remaining=3 [ 589.740213][T29645] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 589.772899][T29649] loop4: detected capacity change from 0 to 512 [ 589.784015][T27555] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.796080][T29649] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.8917: dx entry: limit 0 != root limit 125 [ 589.796156][T29649] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.8917: Corrupt directory, running e2fsck is recommended [ 589.796377][T29649] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 589.821157][T29652] loop5: detected capacity change from 0 to 256 [ 589.840508][T29649] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.8917: corrupted in-inode xattr: invalid ea_ino [ 589.840710][T29649] EXT4-fs (loop4): Remounting filesystem read-only [ 589.873794][T29649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 589.893060][T29649] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 589.913912][T23314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.963509][T29658] 9pnet_fd: Insufficient options for proto=fd [ 589.974873][T29659] loop4: detected capacity change from 0 to 164 [ 590.005337][T29659] rock: directory entry would overflow storage [ 590.011583][T29659] rock: sig=0x4f50, size=4, remaining=3 [ 590.017189][T29659] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 590.068434][T29668] loop5: detected capacity change from 0 to 164 [ 590.087112][T29672] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 590.130142][T29668] rock: directory entry would overflow storage [ 590.130152][T29668] rock: sig=0x4f50, size=4, remaining=3 [ 590.130168][T29668] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 590.195445][T29677] loop5: detected capacity change from 0 to 512 [ 590.205562][T29677] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.8929: dx entry: limit 0 != root limit 125 [ 590.217510][T29677] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.8929: Corrupt directory, running e2fsck is recommended [ 590.230736][T29677] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 590.230935][T29677] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.8929: corrupted in-inode xattr: invalid ea_ino [ 590.259390][T29677] EXT4-fs (loop5): Remounting filesystem read-only [ 590.293724][T29677] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 590.315034][T29672] loop2: detected capacity change from 0 to 2048 [ 590.338242][T29677] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 590.368407][T29672] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 590.387297][T25685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.401707][T29672] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 590.473000][T22192] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.521366][T29695] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 590.890866][T29703] netlink: 'syz.4.8938': attribute type 21 has an invalid length. [ 590.917396][T29703] netlink: 'syz.4.8938': attribute type 5 has an invalid length. [ 590.925165][T29703] netlink: 'syz.4.8938': attribute type 6 has an invalid length. [ 591.001509][T29695] loop5: detected capacity change from 0 to 2048 [ 591.021019][T29706] loop4: detected capacity change from 0 to 256 [ 591.086791][T29710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.095603][T29710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.111615][ T29] kauditd_printk_skb: 387 callbacks suppressed [ 591.111633][ T29] audit: type=1326 audit(1757476406.942:39249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29709 comm="syz.4.8942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6c1eeba9 code=0x7ffc0000 [ 591.145632][ T29] audit: type=1326 audit(1757476406.952:39250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29709 comm="syz.4.8942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6c1eeba9 code=0x7ffc0000 [ 591.169549][ T29] audit: type=1326 audit(1757476406.952:39251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29709 comm="syz.4.8942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f4a6c1eeba9 code=0x7ffc0000 [ 591.193229][ T29] audit: type=1326 audit(1757476406.952:39252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29709 comm="syz.4.8942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6c1eeba9 code=0x7ffc0000 [ 591.217054][ T29] audit: type=1326 audit(1757476406.952:39253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29709 comm="syz.4.8942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4a6c1ed510 code=0x7ffc0000 [ 591.240736][ T29] audit: type=1326 audit(1757476406.952:39254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29709 comm="syz.4.8942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4a6c1ed510 code=0x7ffc0000 [ 591.264441][ T29] audit: type=1326 audit(1757476406.952:39255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29709 comm="syz.4.8942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6c1eeba9 code=0x7ffc0000 [ 591.288410][ T29] audit: type=1326 audit(1757476406.952:39256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29709 comm="syz.4.8942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f4a6c1eeba9 code=0x7ffc0000 [ 591.288828][T29710] loop4: detected capacity change from 0 to 1024 [ 591.312030][ T29] audit: type=1326 audit(1757476406.952:39257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29709 comm="syz.4.8942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6c1eeba9 code=0x7ffc0000 [ 591.342042][ T29] audit: type=1326 audit(1757476406.952:39258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29709 comm="syz.4.8942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4a6c1eeba9 code=0x7ffc0000 [ 591.373554][T29695] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 591.419208][T29710] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 591.435542][T29695] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 591.548463][T25685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.592424][T29728] loop5: detected capacity change from 0 to 512 [ 591.600689][T29728] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.8944: dx entry: limit 0 != root limit 125 [ 591.612576][T29728] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.8944: Corrupt directory, running e2fsck is recommended [ 591.625948][T29728] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 591.634503][T29728] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.8944: corrupted in-inode xattr: invalid ea_ino [ 591.648214][T29728] EXT4-fs (loop5): Remounting filesystem read-only [ 591.655375][T29728] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 591.681142][T25685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.681163][T29735] program syz.6.8948 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 591.681364][T29735] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 591.728207][T29735] netlink: '+}[@': attribute type 1 has an invalid length. [ 591.735459][T29735] __nla_validate_parse: 30 callbacks suppressed [ 591.735477][T29735] netlink: 224 bytes leftover after parsing attributes in process `+}[@'. [ 591.752709][T29735] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.753266][T29741] loop5: detected capacity change from 0 to 512 [ 591.768508][T29739] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 591.778604][T29741] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.8951: dx entry: limit 0 != root limit 125 [ 591.790546][T29741] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.8951: Corrupt directory, running e2fsck is recommended [ 591.803672][T29741] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 591.812488][T29741] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.8951: corrupted in-inode xattr: invalid ea_ino [ 591.826654][T29741] EXT4-fs (loop5): Remounting filesystem read-only [ 591.833678][T29741] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 591.847988][T29735] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.858373][T29741] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 591.858882][T29746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.874986][T29746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.886567][T25685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.918157][T29735] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.967598][ T3504] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3504 comm=kworker/1:5 [ 591.998843][T29735] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.011284][T23314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.034643][T29756] loop5: detected capacity change from 0 to 256 [ 592.065955][ T51] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.095942][ T51] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.095994][ T51] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.136356][ T51] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.168003][T29767] loop6: detected capacity change from 0 to 164 [ 592.169999][T29767] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8962'. [ 592.182841][T29767] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8962'. [ 592.183189][T29767] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8962'. [ 592.183339][T29767] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8962'. [ 592.184821][T29767] rock: directory entry would overflow storage [ 592.230947][ T3412] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3412 comm=kworker/0:5 [ 592.232701][T29767] rock: sig=0x4f50, size=4, remaining=3 [ 592.232720][T29767] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 592.259668][T29772] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 592.259695][T29772] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 592.259783][T29772] vhci_hcd vhci_hcd.0: Device attached [ 592.262755][T29769] loop5: detected capacity change from 0 to 512 [ 592.271197][T29769] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.8963: iget: bad i_size value: 38620345925642 [ 592.287733][T29778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.290862][T29769] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.8963: couldn't read orphan inode 15 (err -117) [ 592.303752][T29778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.312313][T29769] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.365149][T29769] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 592.396779][T29778] loop1: detected capacity change from 0 to 1024 [ 592.419667][T29778] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 592.442949][T29772] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8963'. [ 592.477338][T29773] vhci_hcd: connection closed [ 592.477463][ T7366] vhci_hcd: stop threads [ 592.478242][T29790] 9pnet_fd: Insufficient options for proto=fd [ 592.482188][ T7366] vhci_hcd: release socket [ 592.482210][ T7366] vhci_hcd: disconnect device [ 592.516278][ T3412] usb 11-1: new high-speed USB device number 18 using vhci_hcd [ 592.524159][ T3412] usb 11-1: enqueue for inactive port 0 [ 592.531688][ T3412] usb 11-1: enqueue for inactive port 0 [ 592.537611][ T3412] usb 11-1: enqueue for inactive port 0 [ 592.554256][T29800] program syz.6.8972 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 592.564118][T29800] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 592.574506][T29800] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 592.574506][T29800] program syz.6.8972 not setting count and/or reply_len properly [ 592.606289][ T3412] vhci_hcd: vhci_device speed not set [ 592.615381][T29806] loop6: detected capacity change from 0 to 164 [ 592.624711][T29806] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8975'. [ 592.649239][T29806] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8975'. [ 592.658523][T29806] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8975'. [ 592.667692][T29806] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8975'. [ 592.678445][T29806] rock: directory entry would overflow storage [ 592.684622][T29806] rock: sig=0x4f50, size=4, remaining=3 [ 592.690289][T29806] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 592.732059][T29808] 9pnet_fd: Insufficient options for proto=fd [ 592.753450][T29810] loop6: detected capacity change from 0 to 512 [ 592.761661][T29810] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.8977: dx entry: limit 0 != root limit 125 [ 592.773546][T29810] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.8977: Corrupt directory, running e2fsck is recommended [ 592.786590][T29810] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 592.794881][T29810] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.8977: corrupted in-inode xattr: invalid ea_ino [ 592.808441][T29810] EXT4-fs (loop6): Remounting filesystem read-only [ 592.815480][T29810] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.830369][T29810] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 592.847096][T27275] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.918757][T17461] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=17461 comm=kworker/0:7 [ 592.946507][T17446] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=17446 comm=kworker/1:8 [ 592.989670][T29821] loop6: detected capacity change from 0 to 512 [ 593.005850][T25685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.007186][T29821] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.8982: dx entry: limit 0 != root limit 125 [ 593.026963][T29821] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.8982: Corrupt directory, running e2fsck is recommended [ 593.040186][T29821] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 593.054178][T29821] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.8982: corrupted in-inode xattr: invalid ea_ino [ 593.068470][T29821] EXT4-fs (loop6): Remounting filesystem read-only [ 593.069150][T27555] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.075820][T29821] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 593.097785][T29824] loop5: detected capacity change from 0 to 164 [ 593.109481][T29824] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 593.118069][T29821] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 593.120665][T29824] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 593.147507][T29824] rock: directory entry would overflow storage [ 593.147562][T29824] rock: sig=0x4f50, size=4, remaining=3 [ 593.147579][T29824] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 593.147604][T27275] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.147709][T29824] ================================================================== [ 593.159468][T29824] BUG: KCSAN: data-race in data_push_tail / string [ 593.159509][T29824] [ 593.159515][T29824] write to 0xffffffff88e56c08 of 1 bytes by task 27275 on cpu 0: [ 593.159532][T29824] string+0x187/0x220 [ 593.159551][T29824] vsnprintf+0x532/0x890 [ 593.159571][T29824] vscnprintf+0x41/0x90 [ 593.159591][T29824] printk_sprint+0x30/0x2d0 [ 593.159607][T29824] vprintk_store+0x599/0x860 [ 593.159622][T29824] vprintk_emit+0x178/0x650 [ 593.159638][T29824] vprintk_default+0x26/0x30 [ 593.159655][T29824] vprintk+0x1d/0x30 [ 593.159677][T29824] _printk+0x79/0xa0 [ 593.159704][T29824] __ext4_msg+0x18f/0x1a0 [ 593.159735][T29824] ext4_put_super+0x90/0x7d0 [ 593.159753][T29824] generic_shutdown_super+0xe3/0x210 [ 593.159786][T29824] kill_block_super+0x2a/0x70 [ 593.159807][T29824] ext4_kill_sb+0x42/0x80 [ 593.159835][T29824] deactivate_locked_super+0x75/0x1c0 [ 593.159867][T29824] deactivate_super+0x97/0xa0 [ 593.159898][T29824] cleanup_mnt+0x269/0x2e0 [ 593.159923][T29824] __cleanup_mnt+0x19/0x20 [ 593.159948][T29824] task_work_run+0x12e/0x1a0 [ 593.159970][T29824] exit_to_user_mode_loop+0xe4/0x100 [ 593.159990][T29824] do_syscall_64+0x1d6/0x200 [ 593.160020][T29824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.160040][T29824] [ 593.160045][T29824] read to 0xffffffff88e56c08 of 8 bytes by task 29824 on cpu 1: [ 593.160060][T29824] data_push_tail+0xfd/0x420 [ 593.160089][T29824] data_alloc+0xbf/0x2b0 [ 593.160116][T29824] prb_reserve+0x808/0xaf0 [ 593.160143][T29824] vprintk_store+0x56d/0x860 [ 593.160158][T29824] vprintk_emit+0x178/0x650 [ 593.160174][T29824] vprintk_default+0x26/0x30 [ 593.160196][T29824] vprintk+0x1d/0x30 [ 593.160219][T29824] _printk+0x79/0xa0 [ 593.160245][T29824] isofs_lookup+0x8b8/0x930 [ 593.160274][T29824] __lookup_slow+0x190/0x250 [ 593.160304][T29824] lookup_slow+0x3c/0x60 [ 593.160334][T29824] link_path_walk+0x753/0x900 [ 593.160359][T29824] path_lookupat+0x63/0x2a0 [ 593.160387][T29824] filename_lookup+0x147/0x340 [ 593.160415][T29824] user_path_at+0x3e/0x130 [ 593.160446][T29824] __se_sys_chroot+0x45/0x230 [ 593.160472][T29824] __x64_sys_chroot+0x1f/0x30 [ 593.160497][T29824] x64_sys_call+0x214f/0x2ff0 [ 593.160518][T29824] do_syscall_64+0xd2/0x200 [ 593.160549][T29824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.160568][T29824] [ 593.160572][T29824] value changed: 0x0000000100003540 -> 0x662d345458453601 [ 593.160583][T29824] [ 593.160586][T29824] Reported by Kernel Concurrency Sanitizer on: [ 593.160597][T29824] CPU: 1 UID: 0 PID: 29824 Comm: syz.5.8983 Not tainted syzkaller #0 PREEMPT(voluntary) [ 593.160622][T29824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 593.160635][T29824] ==================================================================