last executing test programs: 1m3.36851631s ago: executing program 2 (id=346): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 1m3.32625309s ago: executing program 2 (id=348): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000002000010300003218298a000002000000000000001a00000005001300090000005bce7f69c0ea646e14463511eab504"], 0x24}, 0x1, 0x0, 0x0, 0x4050}, 0x4000050) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000600)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x644b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x80a03, 0x7, 0x43a1bd76, 0x0, 0x400009, 0xfffffff9, 0x5, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x5a6c103, 0x400, 0x0, 0x4, 0x5, 0x0, 0x3, 0xfffffffffffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0}, 0x94) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r7, 0x0, 0x0) poll(&(0x7f0000000000)=[{r6, 0x289}], 0x51, 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x4058534c, &(0x7f0000001140)={0x80, 0x1, 0x7d0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@abort}]}, 0xff, 0x258, &(0x7f0000000780)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 1m2.871287403s ago: executing program 2 (id=352): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x1008002, &(0x7f0000000140)={[{@noauto_da_alloc}, {@grpquota}, {@grpjquota}, {@barrier}, {@dioread_nolock}, {@nodiscard}, {@nomblk_io_submit}, {@nodiscard}]}, 0x81, 0x601, &(0x7f00000011c0)="$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") chdir(&(0x7f0000000080)='./file0\x00') r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f700004e2000e2ffca1b1f0000000004c00e72f740805ed08a56231dbf9ed7815e3802000000033a0093b837dc6cc01e32efaec8c7a6ec08200800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="11ea9d3bb6d2853518e62fd3ce984d2fc2e7fd3c0de952605876c4c9e837ad2bce2d42a047681544cc445cfc0bee6a0851c0c6853dfcb7cb9b7aa688c78e5860ee560d70ebaded47688a0ee4bed93a165fcbd1db03c2191cf7781000110ba7c24803dc66b1bb9bc15b4b81711d811d01f2337ab16a78131a7bfa11590f216c5dadde680c5054e7e21f7571cac2d4553515a5044ffc925846e32ad33cee5fd89a35f8038b538f6e671323dbce8cdc289963e0857151e462be81512bbdc7d686364e7eb5f56b2ef3", @ANYRESDEC=0x0, @ANYRES32=r0, @ANYRES8=r0, @ANYRES16=r3, @ANYRESHEX=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2010041, &(0x7f0000000580)={[{@nolazytime}, {@noinit_itable}, {@sysvgroups}, {@norecovery}, {@jqfmt_vfsv0}, {@dax_never}, {@nogrpid}, {@bsdgroups}, {@grpid}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r4 = open(&(0x7f0000000240)='./file1\x00', 0x345342, 0x0) sendfile(r4, r4, 0x0, 0x800000009) syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x0, @multicast, 'caif0\x00'}}, 0x1e) 1m2.820663054s ago: executing program 2 (id=354): syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file2\x00', 0x4204, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001ac0)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sigaltstack(0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000380)='kfree\x00'}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r5 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r7 = syz_open_procfs(r5, &(0x7f0000000100)='stack\x00') r8 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r8, 0x0, 0x0) pread64(r7, &(0x7f0000000400)=""/15, 0xf, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vxcan1\x00', 0x0}) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r11}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="0300e00300040000000000000000000000000020380050f213948130e2a12951eb2f5b9d41b50faa4c2d3cf2621061a662f10378873f3932a28854c2d480065c49cc5f739dc126817cb0583d5558f34792a625b7690a164f979da19565a5391845f20e48971c20b92758dced7be3f18d36ab7e2ffbf28a868f360776e50111c69db33fc5ebc05c9caa490a5bc3cb07341fe5ba673dd17df2861abc27a67e986993bec4714c0c4ca1e402797783b5be3d645660351d0fa87a95c1b873cf5aa0147040c0e3f15cbaf15ca84861738289340d81fcf9349f6a1f6a659b2e6938f8c21da8036653ea4b6cc8ae3e5166e1b8f2285a15292b39b744fbe5c220a18028", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="1808000017f7070d21a701b200000000950000000000002f5b039fb69be0d6d1afb98efccb759248ee0f22cd079e254034f6c726f1ce420033a2a2edff14e87d64f5e9b0d0e9972d5cd273e279426c98cc56c8716459bfdb104f756c5e033398146d74ccf4571a5f68bad54569f382e0944fa3103bceaffc91c907c376ca22189c129dc69ec8ae3450f5ddbcad7697cb0bd2cef3d401db53c6127a2320c48b612361592a45c82b347ee6e66502a85412a883ac82f02ab2e071d3663d248f3c5787b646"], &(0x7f0000000000)='GPL\x00'}, 0x94) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r9}, 0x10) bind$can_raw(r3, &(0x7f00000002c0), 0x10) 1m2.575325816s ago: executing program 2 (id=357): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2010041, &(0x7f0000000580)={[{@nolazytime}, {@noinit_itable}, {@sysvgroups}, {@norecovery}, {@jqfmt_vfsv0}, {@dax_never}, {@nogrpid}, {@bsdgroups}, {@grpid}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") open(&(0x7f0000000240)='./file1\x00', 0x345342, 0x0) 1m2.223637557s ago: executing program 2 (id=365): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x1008002, &(0x7f0000000140)={[{@noauto_da_alloc}, {@grpquota}, {@grpjquota}, {@barrier}, {@dioread_nolock}, {@nodiscard}, {@nomblk_io_submit}, {@nodiscard}]}, 0x81, 0x601, &(0x7f00000011c0)="$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") chdir(&(0x7f0000000080)='./file0\x00') r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f700004e2000e2ffca1b1f0000000004c00e72f740805ed08a56231dbf9ed7815e3802000000033a0093b837dc6cc01e32efaec8c7a6ec08200800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="11ea9d3bb6d2853518e62fd3ce984d2fc2e7fd3c0de952605876c4c9e837ad2bce2d42a047681544cc445cfc0bee6a0851c0c6853dfcb7cb9b7aa688c78e5860ee560d70ebaded47688a0ee4bed93a165fcbd1db03c2191cf7781000110ba7c24803dc66b1bb9bc15b4b81711d811d01f2337ab16a78131a7bfa11590f216c5dadde680c5054e7e21f7571cac2d4553515a5044ffc925846e32ad33cee5fd89a35f8038b538f6e671323dbce8cdc289963e0857151e462be81512bbdc7d686364e7eb5f56b2ef3", @ANYRESDEC=0x0, @ANYRES32=r0, @ANYRES8=r0, @ANYRES16=r3, @ANYRESHEX=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2010041, &(0x7f0000000580)={[{@nolazytime}, {@noinit_itable}, {@sysvgroups}, {@norecovery}, {@jqfmt_vfsv0}, {@dax_never}, {@nogrpid}, {@bsdgroups}, {@grpid}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r4 = open(&(0x7f0000000240)='./file1\x00', 0x345342, 0x0) sendfile(r4, r4, 0x0, 0x800000009) syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x0, @multicast, 'caif0\x00'}}, 0x1e) 1m2.180381128s ago: executing program 32 (id=365): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x1008002, &(0x7f0000000140)={[{@noauto_da_alloc}, {@grpquota}, {@grpjquota}, {@barrier}, {@dioread_nolock}, {@nodiscard}, {@nomblk_io_submit}, {@nodiscard}]}, 0x81, 0x601, &(0x7f00000011c0)="$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") chdir(&(0x7f0000000080)='./file0\x00') r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f700004e2000e2ffca1b1f0000000004c00e72f740805ed08a56231dbf9ed7815e3802000000033a0093b837dc6cc01e32efaec8c7a6ec08200800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="11ea9d3bb6d2853518e62fd3ce984d2fc2e7fd3c0de952605876c4c9e837ad2bce2d42a047681544cc445cfc0bee6a0851c0c6853dfcb7cb9b7aa688c78e5860ee560d70ebaded47688a0ee4bed93a165fcbd1db03c2191cf7781000110ba7c24803dc66b1bb9bc15b4b81711d811d01f2337ab16a78131a7bfa11590f216c5dadde680c5054e7e21f7571cac2d4553515a5044ffc925846e32ad33cee5fd89a35f8038b538f6e671323dbce8cdc289963e0857151e462be81512bbdc7d686364e7eb5f56b2ef3", @ANYRESDEC=0x0, @ANYRES32=r0, @ANYRES8=r0, @ANYRES16=r3, @ANYRESHEX=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2010041, &(0x7f0000000580)={[{@nolazytime}, {@noinit_itable}, {@sysvgroups}, {@norecovery}, {@jqfmt_vfsv0}, {@dax_never}, {@nogrpid}, {@bsdgroups}, {@grpid}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r4 = open(&(0x7f0000000240)='./file1\x00', 0x345342, 0x0) sendfile(r4, r4, 0x0, 0x800000009) syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x0, @multicast, 'caif0\x00'}}, 0x1e) 6.899136547s ago: executing program 3 (id=2271): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="34000000020000010000000000000000d96e6c8d5e85080045f00d80724e11d569116e3a1ce41e2a560254ea0043"], 0x34}, {&(0x7f0000000b80)={0x1d0, 0x1f, 0x8, 0x70bd2a, 0x25dfdbfe, "", [@nested={0x1bd, 0xc9, 0x0, 0x1, [@typed={0x4, 0xca}, @nested={0x185, 0x97, 0x0, 0x1, [@typed={0x4, 0x135, 0x0, 0x0, @str}, @typed={0x8, 0x138, 0x0, 0x0, @ipv4=@empty}, @nested={0x4, 0xe4}, @generic="f16ade12108a3d33142085261dc991fc01deabc8a49c44840de7e5795dfc77aa39fcfb45931139dc82fb81699e85fede732090053fe609c8fd4e0016965816e2a604a55188e995b5760879ccd57aa6297f61ee704972d7b4883211802c138f7169291634c1fec61670352d6decb092556ed8f0aa53c05edd22089e6230b1d873befd8cf6ec4944eb4bc4dc9ea33f29cc4e06d00264cbb867ca9d578acf1598e79296efe1c6", @generic="b81691e8ed04019fd598cad6b11bad1987359b0ce5277212fbc38f7514c89f80264e2c6117945479507c1d2b0f2762994c9b148543ecc1b25a453895c5c810", @generic="a0ee167769bba56ea1d3223e7ea074d5baa07fe882da61d06984281dfaf3bc484dea68e1cf6f853e65decad0bb90a21fdba296d871a9fb32665c65ec6f2f4a37998d5f0428cdc4a62d82ed5292bae3d92bfcae1527a3d83ebf27daca262b71abb6892b7e58814f3514d41f1bbdc0fade185aa4da6651078803", @nested={0x4, 0xd6}, @typed={0x8, 0x79, 0x0, 0x0, @uid}, @nested={0x4, 0x124}, @nested={0x4, 0x12}]}, @typed={0x14, 0x42, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x21}}, @generic="0d420b9db15e321f383b3d1c0a95c900ddb296d35e1bb86ab4"]}]}, 0x1d0}], 0x2}, 0x0) 6.852835127s ago: executing program 3 (id=2272): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) (fail_nth: 10) 6.503871129s ago: executing program 3 (id=2280): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109005000118049005300c9a7befe6f6d645a1a11b81b2c4b101c7510e19fee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed3103bc77d35b296674f1fe35663c0d236fd88d7ba0000001f010580ef", @ANYRESHEX=r1], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000003c0)={{0x2, 0x4e22, @private=0xa010102}, {0x306}, 0x24, {0x2, 0x4e23, @multicast2}, 'batadv_slave_0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0xfb2f8c825a713bae, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40058) syz_mount_image$msdos(&(0x7f0000000b80), &(0x7f0000000140)='./file1\x00', 0x2808007, &(0x7f0000000b40)=ANY=[@ANYRESOCT=r2], 0x9, 0x5a7, &(0x7f0000000440)="$eJzs2jFPE28cB/AfBVr+5B9hNgxNXJwIOjnSGEiITUwwHdSFJuDSEpPrcjDxVpwwzr4gX4AbiWHRM+2dQAUqBeqB+XyS5n59vk+fPs/l2rvh2VrarcX73rtnXw9j7rgelYj48D1icVDlpopjZVBX46yDAADum83NduOqfb89mOxcmIwkabT7z3C1c0nrUykTAgAAAAAAAAAA4Ma2lnY727/2/6/m+/8rx/b/A8C/bJz9/9xPSdJoV4vnt2H2/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADlOc6yhWzEq+z5AQC374r3/8+HEfF/yXMFAG7Hq9dvXjSazbXNen0u4uggbaWt/Jjn6xvNtZX6wOLpp47StDV9kj/J8/pwPhvzRf70wrwajx/leT97/rL5W177b3vyywcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADOWK6fWDxtPUrT1nR87OfLl+V5tb7RXFspOgznM/FwJn/X+FuLAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG6kt7ffaXe7O8kfi0pEXLnzoIhxOt+vYvrCaLY4qUlvPiJGj7MaMe75mYrSllwdbsmyH1nftQasjn0h3eHi7cIlUa24FgYts6OX/GXsH+P57xrVZ+46I5f0hwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJSut7ffaXe7O0mv7JkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHdFb2+/0+52d5IJFmWvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDb9zMAAP//Z61S4w==") openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0700000004000000080000000100000000020000", @ANYRES32, @ANYBLOB="00000000000000f8a73260bf6448788d0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100"/28], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000470000000400000002"], 0x50) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=ANY=[@ANYRES16=r4, @ANYRES16=r5, @ANYBLOB="01002dbd7000ffdbdf2503000000080001", @ANYRESOCT=r2], 0x1c}}, 0x24040840) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="409c9742", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fcffffff0100000008000100020000001c0004800500030001000000050003000100000005000300800000000800020003000000"], 0x40}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="0000faa2293f0000", @ANYRES16=r7, @ANYBLOB="000429bd7000fbdbdf250400000010000c800c000b8008000900b2c2a7180800020002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x8004) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r4, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r8}, 0x20) r9 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r4, &(0x7f0000000600), &(0x7f0000000340)=@udp6=r9, 0x1}, 0x20) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0xc, 0x3, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010003904faffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000020009280080001006772650014000280080000004e200000060011004e210000"], 0x40}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095000000000000007cf58d0236900bb36eceeaf7cafc1754ff16b2f6b5d6c92934cb1f47ef9266fb271c51554f010000000000000067b4b16e3913bcefaf75eb1320384ce672e66bfe5a299ea3063609df217b5795975d64b1aa816abbaa9bb96448f926a0ede244f1"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r0) 6.38975348s ago: executing program 3 (id=2287): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r1, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x87) fchdir(r3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r5}, 0x10) r6 = syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setopts(0x4200, r6, 0xedc7, 0x455b843fbd864c4f) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r7, &(0x7f0000000280)=""/51, 0x33) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f00000000c0)=@buf={0x1000, &(0x7f0000000a40)="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"}) 6.059965592s ago: executing program 3 (id=2295): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0}, 0x94) r1 = gettid() r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r4, 0x2f, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x7}, 0x20) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x2000000000000111, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.914998943s ago: executing program 3 (id=2298): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000021401002cbd700004dcdf250800010000"], 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) 5.914905823s ago: executing program 33 (id=2298): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000021401002cbd700004dcdf250800010000"], 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) 899.842424ms ago: executing program 4 (id=2407): r0 = socket$unix(0x1, 0x3, 0x0) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) sendto$inet6(r1, &(0x7f0000000000)="aa", 0xffe0, 0x100000, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) (async) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x52) (async) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r4, &(0x7f0000000480)=""/177, 0xb1, 0x73) 887.059894ms ago: executing program 1 (id=2408): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 843.350695ms ago: executing program 4 (id=2410): r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r0, 0x0, 0x0) 842.591235ms ago: executing program 4 (id=2412): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002800)=@newtfilter={0x74, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x20000000, 0x7, 0x6, 0x1ff, {0x5, 0x1, 0x6, 0x2, 0x4}, {0x0, 0x1, 0xcb4, 0x7, 0xa1bc, 0x6}, 0x9592, 0x0, 0xffff}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) 817.249025ms ago: executing program 6 (id=2414): r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="34000000020000010000000000000000d96e6c8d5e85080045f00d80724e11d569116e3a1ce41e2a560254ea0043"], 0x34}, {&(0x7f0000000b80)={0x78, 0x1f, 0x8, 0x70bd2a, 0x25dfdbfe, "", [@nested={0x65, 0xc9, 0x0, 0x1, [@typed={0x4, 0xca}, @typed={0x14, 0x42, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x21}}, @generic="0d420b9db15e321f383b3d1c0a95c900ddb296d35e1bb86ab4", @generic="fe933c83fdc342c3302a157704d6ab7f6218c0780cd314b3af69edee0a17d7bb69cc5afe273da63f3ce1b6e406df3cdc"]}]}, 0x78}], 0x2}, 0x0) 817.017155ms ago: executing program 1 (id=2415): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x10000, 0x0) socket$kcm(0x10, 0x2, 0x4) r0 = open(0x0, 0x345342, 0x0) sendfile(r0, r0, 0x0, 0x800000009) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) connect$pppoe(r2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r1, @ANYRES32, @ANYBLOB="0000000000000b0000000000000000007b8af8ff00000200bfa200008000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800006d4ee4c89f92f39d0080000000850000000f000000952243d3aae79380"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) 804.454175ms ago: executing program 6 (id=2416): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x557, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4001, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7fff, 0x1}, 0x100997, 0x7ff, 0x7, 0x6, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1012, 0x0, 0x12011, r2, 0x0) 747.251565ms ago: executing program 1 (id=2417): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r2 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xad6, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x77, 0x29c780}) io_uring_enter(r2, 0x3518, 0xaddf, 0x2, 0x0, 0x0) 727.294306ms ago: executing program 4 (id=2418): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r2 = syz_open_pts(r1, 0x900) r3 = dup3(r2, r1, 0x80000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0xfffd, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f00000004c0)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r4, 0x0, 0x2b, &(0x7f0000000680)={0x2, {{0x2, 0xfffc, @empty}}, {{0x2, 0x4e24, @multicast2}}}, 0x108) r5 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r5, &(0x7f0000001b80)=[{&(0x7f00000000c0)=""/92, 0x5c}], 0x1, 0x62, 0xfd4c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000808500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kmem_cache_free\x00', r8}, 0x18) sendmsg$inet(r7, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r6, &(0x7f0000000900)={0x0, 0x2f, &(0x7f0000000400)=[{&(0x7f0000000800)=""/208, 0xd0}], 0x1, 0x0, 0xfffffffffffffe8f, 0x500}, 0x0) read(r3, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r3, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000380)={0x0, 0xa1c9}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000440)={r9, 0x5}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='qgroup_meta_free_all_pertrans\x00', r3, 0x0, 0x75}, 0x18) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1b00000022000106"], 0x24}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x13, &(0x7f00000009c0)=@framed={{}, [@printk={@llx, {0x3, 0x0, 0x3, 0xa, 0x0}, {0x5}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, @printk={@p, {0x5, 0x3, 0x6, 0xa, 0x1, 0xfff5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000300)) 667.902976ms ago: executing program 6 (id=2419): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) getsockopt$inet6_int(r0, 0x29, 0x10, 0x0, &(0x7f00000001c0)) 644.041176ms ago: executing program 6 (id=2420): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x10001) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x40400, 0x8) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76bf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000002440)=@newtaction={0x8a0, 0x30, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [{0x2c4, 0x1, [@m_vlan={0x110, 0x1e, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x8, 0x5, 0x401, 0x6}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}]}, {0xa0, 0x6, "936e673aa42fcdf1d86a2e8a010cbd123b1a89b7f585b8ee1c1a45e15bc5e7329b43183f22df0fa6aa7c7577a51da1b63b455b331b3df9a0b01a37f8358d619709dc527309a0b4ce6be430af1f8549046fe0851565bbb6e868be45fccfcacaaef5c0e5d2252662c58aae4783afd4c7d11941e6e26890735ccbc6c10b0a1bcc861f8b0cfe8527cadb9fc0e40491be193f9f566172a8c2bc75b255d94f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x1b0, 0x9, 0x0, 0x0, {{0x7}, {0xb4, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_TARG={0x7c, 0x6, {0x1, 'raw\x00', 0x3, 0x0, "5b6584777c9de6f675a4fad720be68ec56bef21e2aa82a954332ad0c93e7c78998109097be391ccc67aa765628ba06ed679fa823e7ce4728da90f7bf7e30168548ceac0357c8c196787dbbfbbf7277e673e0"}}]}, {0xd6, 0x6, "1e3d3929e963ded80b8352a436d0755734369fab53638224aa3227fde0c22715e2c08240e72acfb46bb3cc910496cf1201244dd31bf0001b70b9c44f4a37bd9a7dda7605ddf7387a3f9e6d1e3dfd665012a7f166f89e6f3e050abb1b262f439ac230e06c595ec184843cc2eb10df200c077a927081d05eb1e2154a89b3108b2d81294f7563e638f400fabef245a545a4278d2b4b8e86d0e24d6d51906c468f1a4b5d856df7bd2eeb293bbe0f4a4d6a739d538bfd5af1257306645485d2ecbac1b7ad5ed41387d8126472f6accef4d9a0dfa0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0x5c8, 0x1, [@m_ct={0x158, 0x19, 0x0, 0x0, {{0x7}, {0x64, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @loopback}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_LABELS={0x14, 0x7, "d5bd4b4a2b165ec415e55e6fd279ef49"}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}, @TCA_CT_LABELS_MASK={0x14, 0x8, "ed944a5177fc448033cf123d233ca4b0"}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x28}}, @TCA_CT_ACTION={0x6, 0x3, 0x18}, @TCA_CT_MARK={0x8, 0x5, 0x40000000}]}, {0xcd, 0x6, "bf055ace26c82aff6591798d6a11774293fea8f50bf662da3ac4bff73bed1acab1769ccb9e3f6fd871a4da8caaa50288833fc34ac4d5da675ec58b668fed6d7457215e31827706c795450230a95bae1a1466bb2ea2ea6e6bc87519957e1d0c3be9e5c523fc5605b1418f5430dddc2e29c5f9b9a3074918e3e03abaefdb9fbb364807e8f7232d950066b8b8e1ce8e96085fec4c5a3cbb239f787c41376a50cbb575aff6c5f03f1add1a42e3d37dd982fde4f15d7d79d8fc8423d2e5599b10e05f23caf0b671b9d54c73"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_ct={0x148, 0x10, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @remote}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @empty}, @TCA_CT_ACTION={0x6, 0x3, 0x30}]}, {0xfb, 0x6, "7f996c93e668fccce18b345b7770e0033cadffc61289097e5f81281c5a732872fb210861a42718d290b251c2df2988e90d5ff22b80b891b1e2073c168359e2f0a6600f5f8d77e9f30cb2df63d15b90155e2c416a4b6ddaea2abed5a73ca0e549099bf37adab2589064f2038a04f817d1ee5ebb6650feab02f18368da881bea6cbf075bcfebd09afc729c3a74cebe201a4d6a19da63f5405898824b0dac9f80e660b139dfec254d0628c5940c3f6abe05512109623085a8b0ef165c24599bcf1e1fb43978c25090bd959400cdd9fa6685c087a5fb328302b311f446f8cb8649ef5ff4cbc5a7787f6350ae44cdbe58c0dfc0f062910fadfa"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_sample={0x154, 0x13, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x3, 0x10000000, 0x6, 0x2}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2e1}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x7, 0x1, 0x1, 0x2}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0x1, 0x6, 0xdaa, 0x100d6}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0xe0, 0xffffffffffffffff, 0x6, 0x9}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}]}, {0xa5, 0x6, "58a0ccf3a649da0c83ef5f3c939acc66fe499d539b66430e228d77c763403588e56488bbf539f9d0220b2d32f1876821f417b31f4f3928a4121e82ea2057d759f48dfaac99035ec8b2c821f812877ec7ec3142a75e6024fd5053fb4164475fe08dcbe676dd50086309beaf3d0151682db9fb8a561ac4693fb9f3ccf79b39fb02ee578e5f1c79d14389ae84ada5754c141f9ce665554659334a686b64ea075b56c0"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_police={0x6c, 0x12, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x3fb}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffff0000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x84b}], [], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]]}, {0xd, 0x6, "cc12246bd509221b8c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ct={0x164, 0x1, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @loopback}, @TCA_CT_ACTION={0x6}, @TCA_CT_MARK={0x8, 0x5, 0x2}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x4}, @TCA_CT_ACTION={0x6, 0x3, 0x14}, @TCA_CT_MARK_MASK={0x8}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}]}, {0x101, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x8a0}, 0x1, 0x0, 0x0, 0x20041011}, 0x44010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000300)=0x3, 0x4) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 612.783686ms ago: executing program 6 (id=2421): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000055000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000002000002ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x190) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) pwritev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00!', 0x2}], 0x1, 0x5, 0xc837) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'netdevsim0\x00', @random="2ad9e3d66ae6"}) write$UHID_CREATE(r1, &(0x7f0000000340)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000240)=""/255, 0xff, 0x0, 0x2, 0x1, 0x80000001, 0x3}}, 0x120) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pread64(r1, &(0x7f00000000c0)=""/135, 0x87, 0x5e) 535.304617ms ago: executing program 1 (id=2424): r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r0, 0x0, 0x0) 501.497397ms ago: executing program 6 (id=2426): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 501.215617ms ago: executing program 1 (id=2427): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x10000, 0x0) socket$kcm(0x10, 0x2, 0x4) r0 = open(0x0, 0x345342, 0x0) sendfile(r0, r0, 0x0, 0x800000009) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x0, @multicast, 'caif0\x00'}}, 0x1e) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r1, @ANYRES32, @ANYBLOB="0000000000000b0000000000000000007b8af8ff00000200bfa200008000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800006d4ee4c89f92f39d0080000000850000000f000000952243d3aae79380"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) 448.471987ms ago: executing program 0 (id=2428): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002800)=@newtfilter={0x74, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x20000000, 0x7, 0x6, 0x1ff, {0x5, 0x1, 0x6, 0x2, 0x4}, {0x0, 0x1, 0xcb4, 0x7, 0xa1bc, 0x6}, 0x9592, 0x0, 0xffff}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) 448.144857ms ago: executing program 1 (id=2429): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000100000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000642b70a32120ff870018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='timer_start\x00', r2}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r5 = socket$pptp(0x18, 0x1, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f00000000c0), &(0x7f0000000140)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0x74, 0x9c, 0x21, 0x10, 0xbd5c, 0xbba1, 0x279c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x5, 0xd0, 0x7a, [{{0x9, 0x4, 0xdd, 0x9, 0x0, 0x8, 0x4, 0x50, 0x4}}]}}]}}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r8 = memfd_secret(0x0) fcntl$setlease(r8, 0x400, 0x0) close(r8) 367.807368ms ago: executing program 0 (id=2430): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x557, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4001, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7fff, 0x1}, 0x100997, 0x7ff, 0x7, 0x6, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1012, 0x0, 0x12011, r2, 0x0) 315.378018ms ago: executing program 4 (id=2431): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x10001) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x40400, 0x8) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76bf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000002440)=@newtaction={0x8a0, 0x30, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [{0x2c4, 0x1, [@m_vlan={0x110, 0x1e, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x8, 0x5, 0x401, 0x6}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}]}, {0xa0, 0x6, "936e673aa42fcdf1d86a2e8a010cbd123b1a89b7f585b8ee1c1a45e15bc5e7329b43183f22df0fa6aa7c7577a51da1b63b455b331b3df9a0b01a37f8358d619709dc527309a0b4ce6be430af1f8549046fe0851565bbb6e868be45fccfcacaaef5c0e5d2252662c58aae4783afd4c7d11941e6e26890735ccbc6c10b0a1bcc861f8b0cfe8527cadb9fc0e40491be193f9f566172a8c2bc75b255d94f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x1b0, 0x9, 0x0, 0x0, {{0x7}, {0xb4, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_TARG={0x7c, 0x6, {0x1, 'raw\x00', 0x3, 0x0, "5b6584777c9de6f675a4fad720be68ec56bef21e2aa82a954332ad0c93e7c78998109097be391ccc67aa765628ba06ed679fa823e7ce4728da90f7bf7e30168548ceac0357c8c196787dbbfbbf7277e673e0"}}]}, {0xd6, 0x6, "1e3d3929e963ded80b8352a436d0755734369fab53638224aa3227fde0c22715e2c08240e72acfb46bb3cc910496cf1201244dd31bf0001b70b9c44f4a37bd9a7dda7605ddf7387a3f9e6d1e3dfd665012a7f166f89e6f3e050abb1b262f439ac230e06c595ec184843cc2eb10df200c077a927081d05eb1e2154a89b3108b2d81294f7563e638f400fabef245a545a4278d2b4b8e86d0e24d6d51906c468f1a4b5d856df7bd2eeb293bbe0f4a4d6a739d538bfd5af1257306645485d2ecbac1b7ad5ed41387d8126472f6accef4d9a0dfa0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0x5c8, 0x1, [@m_ct={0x158, 0x19, 0x0, 0x0, {{0x7}, {0x64, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @loopback}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_LABELS={0x14, 0x7, "d5bd4b4a2b165ec415e55e6fd279ef49"}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}, @TCA_CT_LABELS_MASK={0x14, 0x8, "ed944a5177fc448033cf123d233ca4b0"}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x28}}, @TCA_CT_ACTION={0x6, 0x3, 0x18}, @TCA_CT_MARK={0x8, 0x5, 0x40000000}]}, {0xcd, 0x6, "bf055ace26c82aff6591798d6a11774293fea8f50bf662da3ac4bff73bed1acab1769ccb9e3f6fd871a4da8caaa50288833fc34ac4d5da675ec58b668fed6d7457215e31827706c795450230a95bae1a1466bb2ea2ea6e6bc87519957e1d0c3be9e5c523fc5605b1418f5430dddc2e29c5f9b9a3074918e3e03abaefdb9fbb364807e8f7232d950066b8b8e1ce8e96085fec4c5a3cbb239f787c41376a50cbb575aff6c5f03f1add1a42e3d37dd982fde4f15d7d79d8fc8423d2e5599b10e05f23caf0b671b9d54c73"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_ct={0x148, 0x10, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @remote}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @empty}, @TCA_CT_ACTION={0x6, 0x3, 0x30}]}, {0xfb, 0x6, "7f996c93e668fccce18b345b7770e0033cadffc61289097e5f81281c5a732872fb210861a42718d290b251c2df2988e90d5ff22b80b891b1e2073c168359e2f0a6600f5f8d77e9f30cb2df63d15b90155e2c416a4b6ddaea2abed5a73ca0e549099bf37adab2589064f2038a04f817d1ee5ebb6650feab02f18368da881bea6cbf075bcfebd09afc729c3a74cebe201a4d6a19da63f5405898824b0dac9f80e660b139dfec254d0628c5940c3f6abe05512109623085a8b0ef165c24599bcf1e1fb43978c25090bd959400cdd9fa6685c087a5fb328302b311f446f8cb8649ef5ff4cbc5a7787f6350ae44cdbe58c0dfc0f062910fadfa"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_sample={0x154, 0x13, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x3, 0x10000000, 0x6, 0x2}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2e1}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x7, 0x1, 0x1, 0x2}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0x1, 0x6, 0xdaa, 0x100d6}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0xe0, 0xffffffffffffffff, 0x6, 0x9}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}]}, {0xa5, 0x6, "58a0ccf3a649da0c83ef5f3c939acc66fe499d539b66430e228d77c763403588e56488bbf539f9d0220b2d32f1876821f417b31f4f3928a4121e82ea2057d759f48dfaac99035ec8b2c821f812877ec7ec3142a75e6024fd5053fb4164475fe08dcbe676dd50086309beaf3d0151682db9fb8a561ac4693fb9f3ccf79b39fb02ee578e5f1c79d14389ae84ada5754c141f9ce665554659334a686b64ea075b56c0"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_police={0x6c, 0x12, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x3fb}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffff0000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x84b}], [], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]]}, {0xd, 0x6, "cc12246bd509221b8c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ct={0x164, 0x1, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @loopback}, @TCA_CT_ACTION={0x6}, @TCA_CT_MARK={0x8, 0x5, 0x2}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x4}, @TCA_CT_ACTION={0x6, 0x3, 0x14}, @TCA_CT_MARK_MASK={0x8}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}]}, {0x101, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x8a0}, 0x1, 0x0, 0x0, 0x20041011}, 0x44010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000300)=0x3, 0x4) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 314.617958ms ago: executing program 4 (id=2432): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) futex(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x20, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800100, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @loopback, 0xffffffff}, {0xa, 0x4e22, 0xfffffffc, @mcast1}}}, 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0) 264.548658ms ago: executing program 5 (id=2434): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_exit\x00', 0xffffffffffffffff, 0x0, 0x400000000}, 0xf) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) close_range(r1, r2, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x33, &(0x7f0000000980)=ANY=[@ANYBLOB="aaaaaaaaaabbe4336642531e0350333b7493d8d90004aa01bf34fbbd001b6b0da3a004b60bd60e662881462713e66c397dd63a811b1503033ab3f18f59c827764733d67168728a9dcd6549c03e8fa4c91e88afd5434c85078873763a643dc83e449e7ed65e0fb69f0297ae57b5c554a68d6d59abee9cade1506c03a60850215a3b16f1b414c753a0cd0c32728b2235f52dfb26fd1c7097e218cf6490c9b7eab59d35206f6ad578b715ec0bb1a723baf39114e240f413429bc2fdaf35024f67afe4c10c2569dbedf293fedd27ee7c610c55659b", @ANYRES64=r2], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x20000000000000ba, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x10) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socket$inet6(0xa, 0x80002, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf25010018"], 0x18}}, 0x2000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'pimreg\x00'}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x103000, 0x0) r7 = socket$isdn(0x22, 0x3, 0x11) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x800000, &(0x7f0000000240)=ANY=[@ANYBLOB="060000000000000066646e6f3d0000", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',nodevmap,cache=none,cache=loose,hash,measure,\x00']) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 264.207878ms ago: executing program 0 (id=2435): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, 0x0, &(0x7f00000001c0)=r1}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000000100)=@udp=r0}, 0x20) 204.149539ms ago: executing program 0 (id=2436): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r2 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xad6, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x77, 0x29c780}) io_uring_enter(r2, 0x3518, 0xaddf, 0x2, 0x0, 0x0) 203.990599ms ago: executing program 5 (id=2437): r0 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r0, 0x0, 0x78) fcntl$addseals(r0, 0x409, 0x8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000007c0)={@in6={{0xa, 0x0, 0x0, @local, 0x9}}, 0x0, 0x0, 0x1c, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$eJzs3MtvG8UfAPDvbpr219cvoZRHH0CgICIeSZMW6IELCKRekJDgUI4hTavStEFNkGgV0RShckT9C4AjEn8BJ7gg4ATiCneEVKFcCBzQorV3U+PYwU7sOsWfj7TxzO6sd77eHXt2xk4AfWsk/5NE7ImInyJiKCIG6guMVB9Wlhen/1henE4iy177Lcl3i9+XF6fLoknxuLvIjKYR6QdJHGpw3PnLV85Pzc7OXCry4wsX3h6fv3zl6XMXps7OnJ25OHnixPFjE889O/lMR+Lcm9f14Htzhw+cfOPGK9Onbrz57ed5ffcU22vjqBre9DFHYmT1Nan32KaffWvZW5NOtvWwIrQlb+v56RqstP+hGIhbJ28oXn6/p5UDuirLsmzHmrWrPYClDPgPS6LXNQB6o/ygz+9/y+U2dj967uYL1RugPO6VYqlu2RZpUWaw7v62k0Yi4tTSnx/nSzQchwAA6Kwv8/7PU436f2ncW1Pu/8Xc0HBE3BUR+yLi7ojYHxH3RFTK3hcR97d5/JG6/Nr+zw87NxRYi/L+3/PF3NY/+39l7y+GB4rc3kr8g8mZc7MzR4vXZDQGd+T5iXWO8dVLP37UbFtt/y9fVgZjuuwLFvX4dVvdAN3pqYWpzcRc6+a1yhjg1bXxJ6szAUlEHIiIgxt4/vx6OffEZ4ebbV8T//JiXfzr6MA8U/ZpxOPV878UdfGXkvXnJ8f/F7MzR8fLq2Kt776//mqz428q/g7Iz/+uhtf/avzDSe187Xz7x7j+84dN72n+Pf7G1//25PVKenux7t2phYVLExHbk6W16ydv7Vvmy/J5/KNHGrf/fRF/fVLsdygi8ov4gYh4MCIeKur+cEQ8EhFH1on/mxcffWvj8XdXHv/pts5/+4mB819/0ez4rZ3/45XUaLGmlfe/Viu4mdcOAAAA7hRp5TvwSTq2mk7TsbHqd/j3x650dm5+4ckzc+9cPF39rvxwDKblSNdQzXjoRDHWV+Yn6/LHKuPGWZZlOyv5sem52W7NqQOt2d2k/ed+Geh17YCua2serdkv2oA7kt9rQv/S/qF/af/Qv7R/6F+N2v/ViJV1d7rWteoAt5HPf+hf2j/0L+0f+pf2D31pM7/rXy+x72Rrhct/QNilatwBiYGtUY22E5FuiWpsLJFujWpUEzsiotXCV29bS+nxGxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECH/B0AAP//tNHo8Q==") setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}, 0x0, 0x0, 0x11, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) close_range(r1, 0xffffffffffffffff, 0x0) 179.212789ms ago: executing program 5 (id=2438): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, 0x0, 0x20000000) 160.275049ms ago: executing program 5 (id=2439): r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 127.014559ms ago: executing program 5 (id=2440): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x10000, 0x0) socket$kcm(0x10, 0x2, 0x4) r0 = open(0x0, 0x345342, 0x0) sendfile(r0, r0, 0x0, 0x800000009) syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x0, @multicast, 'caif0\x00'}}, 0x1e) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800006d4ee4c89f92f39d0080000000850000000f000000952243d3aae79380"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) 120.299509ms ago: executing program 0 (id=2441): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002800)=@newtfilter={0x74, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x20000000, 0x7, 0x6, 0x1ff, {0x5, 0x1, 0x6, 0x2, 0x4}, {0x0, 0x1, 0xcb4, 0x7, 0xa1bc, 0x6}, 0x9592, 0x0, 0xffff}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) 71.20482ms ago: executing program 5 (id=2442): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) getrlimit(0xc, &(0x7f00000005c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) copy_file_range(r0, 0x0, r0, &(0x7f00000004c0)=0xae8, 0xb7, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474203, 0x408}, 0x18) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x90501, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r4}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB="18d6"]) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x94) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x10d342, 0x24) write$cgroup_subtree(r8, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYRES8, @ANYRESHEX], 0x32600) sendmsg$unix(r8, &(0x7f00000001c0)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000000)="37e5124d91a2fbf0236c2b4a912aad7b69034cbcbc44ffb4d20c04cce2304f2d4eb288a4479b8fbbc08b79", 0x2b}], 0x1, 0x0, 0x0, 0x10}, 0x48094) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000240), &(0x7f0000000580)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r7, 0x0, 0xfffffffffffffffd}, 0x18) 0s ago: executing program 0 (id=2443): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x81f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r3, &(0x7f0000000240), 0xfffffecc) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000100)={0x4000009, 0x8d6, 0xffffff00, 0x8, 0x6, "a56a187107d8d8af0615434d861582690f78f1"}) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000d00)) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000007800)=0xffffffff0000003d, 0x8) bind$vsock_stream(r2, &(0x7f0000000940), 0x10) listen(r2, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x9}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) kernel console output (not intermixed with test programs): .067130][ T5685] loop5: detected capacity change from 0 to 1024 [ 68.083467][ T5685] EXT4-fs: Ignoring removed nomblk_io_submit option [ 68.095703][ T5685] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.115818][ T5687] netlink: 12 bytes leftover after parsing attributes in process `syz.3.693'. [ 68.135903][ T5685] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.227522][ T5691] loop3: detected capacity change from 0 to 1024 [ 68.254714][ T5691] EXT4-fs: Ignoring removed nomblk_io_submit option [ 68.261682][ T5691] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.282228][ T5691] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.313318][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.440947][ T5701] netlink: 'syz.0.698': attribute type 1 has an invalid length. [ 68.464902][ T5703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.481049][ T5704] blktrace: Concurrent blktraces are not allowed on loop6 [ 68.507531][ T5703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.769230][ T5709] vlan2: entered allmulticast mode [ 68.829341][ T5711] bridge0: entered promiscuous mode [ 68.834777][ T5711] bridge0: left promiscuous mode [ 68.873051][ T5715] loop4: detected capacity change from 0 to 2048 [ 68.884257][ T5715] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.899675][ T5715] EXT4-fs (loop4): shut down requested (0) [ 68.914328][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.933812][ T4647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.973604][ T5725] loop5: detected capacity change from 0 to 1024 [ 68.980446][ T5725] EXT4-fs: Ignoring removed nomblk_io_submit option [ 68.987403][ T5725] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.998428][ T5725] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.036582][ T5732] loop4: detected capacity change from 0 to 2048 [ 69.053856][ T5732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.069609][ T5732] EXT4-fs (loop4): shut down requested (0) [ 69.083198][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.103546][ T5736] sd 0:0:1:0: device reset [ 69.122901][ T5740] loop4: detected capacity change from 0 to 128 [ 69.131128][ T5740] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.144032][ T5740] ext4 filesystem being mounted at /129/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 69.201249][ T3312] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.213414][ T5744] netlink: 24 bytes leftover after parsing attributes in process `syz.3.716'. [ 69.227597][ T5744] netlink: 16 bytes leftover after parsing attributes in process `syz.3.716'. [ 69.251443][ T5747] loop4: detected capacity change from 0 to 128 [ 69.260024][ T5747] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.274561][ T5747] ext4 filesystem being mounted at /130/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 69.349846][ T3312] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.513655][ T5774] netlink: 20 bytes leftover after parsing attributes in process `syz.1.726'. [ 69.537205][ T5777] netlink: 20 bytes leftover after parsing attributes in process `syz.3.727'. [ 69.545841][ T5778] loop4: detected capacity change from 0 to 2048 [ 69.552997][ T5778] msdos: Unknown parameter '00000000000000000000005' [ 69.563998][ T5778] kernel profiling enabled (shift: 17) [ 69.609402][ T5786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.732'. [ 69.832115][ T4647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.895522][ T5802] netlink: 20 bytes leftover after parsing attributes in process `syz.5.738'. [ 69.941378][ T5804] loop5: detected capacity change from 0 to 512 [ 69.966971][ T5804] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.981703][ T29] kauditd_printk_skb: 658 callbacks suppressed [ 69.981743][ T29] audit: type=1326 audit(1761792074.598:6533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5805 comm="syz.4.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281260efc9 code=0x7ffc0000 [ 69.989654][ T5804] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.011551][ T29] audit: type=1326 audit(1761792074.598:6534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5805 comm="syz.4.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f281260efc9 code=0x7ffc0000 [ 70.011574][ T29] audit: type=1326 audit(1761792074.598:6535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5805 comm="syz.4.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281260efc9 code=0x7ffc0000 [ 70.011659][ T29] audit: type=1326 audit(1761792074.598:6536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5805 comm="syz.4.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f281260efc9 code=0x7ffc0000 [ 70.011681][ T29] audit: type=1326 audit(1761792074.598:6537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5805 comm="syz.4.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281260efc9 code=0x7ffc0000 [ 70.011705][ T29] audit: type=1326 audit(1761792074.598:6538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5805 comm="syz.4.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f281260efc9 code=0x7ffc0000 [ 70.011805][ T29] audit: type=1326 audit(1761792074.598:6539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5805 comm="syz.4.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281260efc9 code=0x7ffc0000 [ 70.011830][ T29] audit: type=1326 audit(1761792074.598:6540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5805 comm="syz.4.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f281260efc9 code=0x7ffc0000 [ 70.011854][ T29] audit: type=1326 audit(1761792074.598:6541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5805 comm="syz.4.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281260efc9 code=0x7ffc0000 [ 70.011878][ T29] audit: type=1326 audit(1761792074.598:6542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5805 comm="syz.4.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f281260efc9 code=0x7ffc0000 [ 70.251128][ T4647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.293270][ T5822] loop5: detected capacity change from 0 to 128 [ 70.301832][ T5822] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 70.315806][ T5822] ext4 filesystem being mounted at /62/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 70.348076][ T5826] loop3: detected capacity change from 0 to 2048 [ 70.376253][ T5826] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.394628][ T5826] EXT4-fs (loop3): shut down requested (0) [ 70.401872][ T4647] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 70.422660][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.505954][ T5839] netlink: 20 bytes leftover after parsing attributes in process `syz.5.751'. [ 70.700637][ T5857] loop3: detected capacity change from 0 to 2048 [ 70.709325][ T5857] msdos: Unknown parameter '00000000000000000000005' [ 70.792312][ T5860] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 70.831571][ T5865] netlink: 20 bytes leftover after parsing attributes in process `syz.4.762'. [ 70.870045][ T5870] loop3: detected capacity change from 0 to 2048 [ 70.894600][ T5870] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.920283][ T5870] EXT4-fs (loop3): shut down requested (0) [ 70.940023][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.985491][ T5880] sd 0:0:1:0: device reset [ 71.007309][ T5882] loop3: detected capacity change from 0 to 1024 [ 71.014269][ T5882] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.021130][ T5882] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 71.031547][ T5882] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.059460][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.076313][ T5885] loop3: detected capacity change from 0 to 128 [ 71.097301][ T5885] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.110151][ T5885] ext4 filesystem being mounted at /151/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 71.183141][ T5892] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 71.200193][ T3321] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.501660][ T5899] loop5: detected capacity change from 0 to 2048 [ 71.518652][ T5902] loop4: detected capacity change from 0 to 2048 [ 71.522710][ T5899] msdos: Unknown parameter '00000000000000000000005' [ 71.547331][ T5902] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.561229][ T5902] EXT4-fs (loop4): shut down requested (0) [ 71.587742][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.655774][ T5911] loop4: detected capacity change from 0 to 1024 [ 71.682420][ T5911] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.689487][ T5911] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 71.715477][ T5911] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.749242][ T5911] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.781: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 71.807228][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.362861][ T5939] tipc: Started in network mode [ 72.367769][ T5939] tipc: Node identity 2edd66cc482, cluster identity 4711 [ 72.374967][ T5939] tipc: Enabled bearer , priority 0 [ 72.382426][ T5939] syzkaller0: entered promiscuous mode [ 72.387938][ T5939] syzkaller0: entered allmulticast mode [ 72.397893][ T5939] tipc: Resetting bearer [ 72.412440][ T5938] tipc: Resetting bearer [ 72.425705][ T5938] tipc: Disabling bearer [ 72.596577][ T5957] bridge_slave_1: left allmulticast mode [ 72.602625][ T5957] bridge_slave_1: left promiscuous mode [ 72.608357][ T5957] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.628208][ T5957] bridge_slave_0: left allmulticast mode [ 72.634174][ T5957] bridge_slave_0: left promiscuous mode [ 72.639888][ T5957] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.687946][ T5965] loop3: detected capacity change from 0 to 128 [ 72.696635][ T5965] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.709231][ T5965] ext4 filesystem being mounted at /158/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 72.783426][ T3321] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.809856][ T5968] bond1: entered promiscuous mode [ 72.814999][ T5968] bond1: entered allmulticast mode [ 72.815226][ T5973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.820665][ T5968] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.829510][ T5973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.844622][ T5968] bond1 (unregistering): Released all slaves [ 72.864503][ T5979] loop3: detected capacity change from 0 to 1024 [ 72.871239][ T5979] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.873351][ T5980] bond1: option mode: invalid value (9) [ 72.878143][ T5979] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.893509][ T5980] bond1 (unregistering): Released all slaves [ 72.893642][ T5979] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.918647][ T5979] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.805: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 72.944850][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.088808][ T5998] loop3: detected capacity change from 0 to 2048 [ 73.110483][ T6000] __nla_validate_parse: 3 callbacks suppressed [ 73.110497][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.5.815'. [ 73.129349][ T5998] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.158054][ T5998] EXT4-fs (loop3): shut down requested (0) [ 73.162184][ T6000] netlink: 'syz.5.815': attribute type 10 has an invalid length. [ 73.172281][ T6000] netlink: 40 bytes leftover after parsing attributes in process `syz.5.815'. [ 73.212147][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.230367][ T6000] team0: Port device geneve1 added [ 73.338390][ T6020] loop5: detected capacity change from 0 to 1024 [ 73.345174][ T6020] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.352762][ T6020] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 73.363784][ T6020] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.434187][ T6025] loop4: detected capacity change from 0 to 1024 [ 73.495347][ T6026] FAULT_INJECTION: forcing a failure. [ 73.495347][ T6026] name failslab, interval 1, probability 0, space 0, times 0 [ 73.508031][ T6026] CPU: 1 UID: 0 PID: 6026 Comm: syz.4.823 Not tainted syzkaller #0 PREEMPT(voluntary) [ 73.508058][ T6026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 73.508081][ T6026] Call Trace: [ 73.508088][ T6026] [ 73.508096][ T6026] __dump_stack+0x1d/0x30 [ 73.508118][ T6026] dump_stack_lvl+0xe8/0x140 [ 73.508138][ T6026] dump_stack+0x15/0x1b [ 73.508154][ T6026] should_fail_ex+0x265/0x280 [ 73.508211][ T6026] should_failslab+0x8c/0xb0 [ 73.508233][ T6026] kmem_cache_alloc_noprof+0x50/0x480 [ 73.508313][ T6026] ? audit_log_start+0x342/0x720 [ 73.508332][ T6026] audit_log_start+0x342/0x720 [ 73.508421][ T6026] ? kstrtouint+0x76/0xc0 [ 73.508449][ T6026] audit_seccomp+0x48/0x100 [ 73.508477][ T6026] ? __seccomp_filter+0x82d/0x1250 [ 73.508498][ T6026] __seccomp_filter+0x83e/0x1250 [ 73.508572][ T6026] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 73.508596][ T6026] ? vfs_write+0x7e8/0x960 [ 73.508621][ T6026] __secure_computing+0x82/0x150 [ 73.508698][ T6026] syscall_trace_enter+0xcf/0x1e0 [ 73.508720][ T6026] do_syscall_64+0xac/0x200 [ 73.508735][ T6026] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 73.508800][ T6026] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 73.508828][ T6026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.508847][ T6026] RIP: 0033:0x7f281260efc9 [ 73.508860][ T6026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.508874][ T6026] RSP: 002b:00007f281104e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 73.508900][ T6026] RAX: ffffffffffffffda RBX: 00007f2812866090 RCX: 00007f281260efc9 [ 73.508968][ T6026] RDX: 000000000000001d RSI: 0000200000000100 RDI: 0000000000000007 [ 73.509033][ T6026] RBP: 00007f281104e090 R08: 0000000000000000 R09: 0000000000000000 [ 73.509045][ T6026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.509057][ T6026] R13: 00007f2812866128 R14: 00007f2812866090 R15: 00007ffee1743868 [ 73.509075][ T6026] [ 73.942047][ T6038] loop4: detected capacity change from 0 to 2048 [ 73.953522][ T6038] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.967273][ T6038] EXT4-fs (loop4): shut down requested (0) [ 73.980838][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.999359][ T6042] loop4: detected capacity change from 0 to 1024 [ 74.201675][ T6056] bridge0: entered promiscuous mode [ 74.207194][ T6056] bridge0: left promiscuous mode [ 74.253199][ T6060] loop4: detected capacity change from 0 to 2048 [ 74.274688][ T4647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.284785][ T6060] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.324615][ T6067] loop5: detected capacity change from 0 to 1024 [ 74.340148][ T6067] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 74.354070][ T6067] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 74.371318][ T6067] EXT4-fs (loop5): invalid journal inode [ 74.403603][ T6076] loop5: detected capacity change from 0 to 512 [ 74.410328][ T6076] journal_path: Lookup failure for './file0/../file0' [ 74.417149][ T6076] EXT4-fs: error: could not find journal device path [ 74.435406][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.460662][ T6080] loop4: detected capacity change from 0 to 1024 [ 74.479550][ T6080] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.488368][ T6080] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 74.498614][ T6086] bridge0: entered promiscuous mode [ 74.499147][ T6080] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.504019][ T6086] bridge0: left promiscuous mode [ 74.635397][ T6100] bridge0: entered promiscuous mode [ 74.640889][ T6100] bridge0: left promiscuous mode [ 74.657459][ T6102] netlink: 20 bytes leftover after parsing attributes in process `syz.5.851'. [ 74.811829][ T6121] loop5: detected capacity change from 0 to 2048 [ 74.823195][ T6121] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.837342][ T6121] EXT4-fs (loop5): shut down requested (0) [ 74.861006][ T4647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.903733][ T6129] loop5: detected capacity change from 0 to 2048 [ 74.917083][ T6129] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.942679][ T6129] EXT4-fs (loop5): shut down requested (0) [ 74.965896][ T4647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.993839][ T29] kauditd_printk_skb: 1207 callbacks suppressed [ 74.993852][ T29] audit: type=1326 audit(1761792079.619:7748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6144 comm="syz.0.865" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5485c0efc9 code=0x0 [ 75.047940][ T29] audit: type=1326 audit(1761792079.669:7749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6153 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f3afefc9 code=0x7ffc0000 [ 75.071884][ T29] audit: type=1326 audit(1761792079.669:7750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6153 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f3afefc9 code=0x7ffc0000 [ 75.095220][ T29] audit: type=1326 audit(1761792079.669:7751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6153 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1f3afefc9 code=0x7ffc0000 [ 75.118525][ T29] audit: type=1326 audit(1761792079.669:7752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6153 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f3afefc9 code=0x7ffc0000 [ 75.142040][ T29] audit: type=1326 audit(1761792079.669:7753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6153 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1f3afefc9 code=0x7ffc0000 [ 75.165390][ T29] audit: type=1326 audit(1761792079.669:7754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6153 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f3afefc9 code=0x7ffc0000 [ 75.188713][ T29] audit: type=1326 audit(1761792079.669:7755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6153 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7fe1f3afefc9 code=0x7ffc0000 [ 75.212653][ T29] audit: type=1326 audit(1761792079.669:7756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6153 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f3afefc9 code=0x7ffc0000 [ 75.236117][ T29] audit: type=1326 audit(1761792079.669:7757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6153 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1f3afefc9 code=0x7ffc0000 [ 75.241530][ T6156] netlink: 'syz.0.867': attribute type 30 has an invalid length. [ 75.298970][ T6162] loop3: detected capacity change from 0 to 2048 [ 75.305433][ T6161] loop5: detected capacity change from 0 to 2048 [ 75.313208][ T6161] msdos: Unknown parameter '00000000000000000000005' [ 75.320719][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.332741][ T6162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.351818][ T6162] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.358652][ T6166] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 75.376629][ T6168] netlink: 'syz.5.875': attribute type 13 has an invalid length. [ 75.388709][ T5307] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.388763][ T6168] netlink: 'syz.5.875': attribute type 13 has an invalid length. [ 75.398506][ T5307] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.415269][ T5307] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.422521][ T6170] loop4: detected capacity change from 0 to 512 [ 75.430306][ T6168] lo speed is unknown, defaulting to 1000 [ 75.430516][ T5307] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.445044][ T6168] lo speed is unknown, defaulting to 1000 [ 75.451103][ T6168] lo speed is unknown, defaulting to 1000 [ 75.453605][ T6170] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.458039][ T6168] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 75.470061][ T6170] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.477875][ T6168] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 75.501519][ T6168] lo speed is unknown, defaulting to 1000 [ 75.507910][ T6168] lo speed is unknown, defaulting to 1000 [ 75.514744][ T6168] lo speed is unknown, defaulting to 1000 [ 75.521108][ T6168] lo speed is unknown, defaulting to 1000 [ 75.527277][ T6168] lo speed is unknown, defaulting to 1000 [ 75.609089][ T6179] loop5: detected capacity change from 0 to 128 [ 75.627732][ T6179] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.651483][ T6179] ext4 filesystem being mounted at /105/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 75.723414][ T4647] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.779797][ T6183] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 75.804100][ T6186] loop5: detected capacity change from 0 to 512 [ 75.804760][ T6171] Cannot find set identified by id 0 to match [ 75.812290][ T6186] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.880: inode has both inline data and extents flags [ 75.830230][ T6186] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.880: couldn't read orphan inode 15 (err -117) [ 75.847090][ T6186] netlink: 'syz.5.880': attribute type 12 has an invalid length. [ 76.121681][ T5689] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 76.136710][ T5689] EXT4-fs (loop3): Remounting filesystem read-only [ 76.195476][ T6201] wireguard0: entered promiscuous mode [ 76.200970][ T6201] wireguard0: entered allmulticast mode [ 76.342769][ T6207] netlink: 20 bytes leftover after parsing attributes in process `syz.3.887'. [ 76.364613][ T6210] tipc: Can't bind to reserved service type 2 [ 76.369120][ T6213] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 76.458063][ T3395] hid-generic 0003:80000004:0000.0001: unknown main item tag 0x0 [ 76.466011][ T3395] hid-generic 0003:80000004:0000.0001: unknown main item tag 0x0 [ 76.473778][ T3395] hid-generic 0003:80000004:0000.0001: unknown main item tag 0x0 [ 76.481553][ T3395] hid-generic 0003:80000004:0000.0001: unknown main item tag 0x0 [ 76.489305][ T3395] hid-generic 0003:80000004:0000.0001: unknown main item tag 0x0 [ 76.497072][ T3395] hid-generic 0003:80000004:0000.0001: unknown main item tag 0x0 [ 76.504955][ T3395] hid-generic 0003:80000004:0000.0001: unknown main item tag 0x0 [ 76.512835][ T3395] hid-generic 0003:80000004:0000.0001: unknown main item tag 0x0 [ 76.520696][ T3395] hid-generic 0003:80000004:0000.0001: unknown main item tag 0x0 [ 76.528513][ T3395] hid-generic 0003:80000004:0000.0001: unknown main item tag 0x0 [ 76.537797][ T3395] hid-generic 0003:80000004:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 76.539334][ T6231] loop3: detected capacity change from 0 to 2048 [ 76.555470][ T6224] loop4: detected capacity change from 0 to 1024 [ 76.574064][ T6231] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.648768][ T6239] loop4: detected capacity change from 0 to 512 [ 76.662528][ T6239] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.899: bg 0: block 248: padding at end of block bitmap is not set [ 76.677730][ T6239] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.899: Failed to acquire dquot type 1 [ 76.690347][ T6239] EXT4-fs (loop4): 1 truncate cleaned up [ 76.696637][ T6239] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.819523][ T6246] loop4: detected capacity change from 0 to 1024 [ 76.851737][ T6246] EXT4-fs: Ignoring removed orlov option [ 76.857530][ T6246] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.883691][ T6248] loop5: detected capacity change from 0 to 164 [ 76.899436][ T6248] ISOFS: unable to read i-node block [ 76.912707][ T6246] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 23 with max blocks 1 with error 28 [ 76.914256][ T6248] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 76.925037][ T6246] EXT4-fs (loop4): This should not happen!! Data will be lost [ 76.925037][ T6246] [ 76.925057][ T6246] EXT4-fs (loop4): Total free blocks count 0 [ 76.950474][ T6246] EXT4-fs (loop4): Free/Dirty block details [ 76.956505][ T6246] EXT4-fs (loop4): free_blocks=0 [ 76.962063][ T6246] EXT4-fs (loop4): dirty_blocks=0 [ 76.967086][ T6246] EXT4-fs (loop4): Block reservation details [ 76.973078][ T6246] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 76.994133][ T6237] Cannot find set identified by id 0 to match [ 77.042076][ T6259] loop4: detected capacity change from 0 to 128 [ 77.050054][ T6259] ext4 filesystem being mounted at /178/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 77.167071][ T6265] can0: slcan on ptm1. [ 77.201680][ T6260] netlink: 20 bytes leftover after parsing attributes in process `syz.5.906'. [ 77.284792][ T6276] loop5: detected capacity change from 0 to 256 [ 77.330207][ T5311] FAT-fs (loop5): error, corrupted file size (i_pos 196, 2097152) [ 77.338177][ T5311] FAT-fs (loop5): Filesystem has been set read-only [ 77.347025][ T5311] FAT-fs (loop5): error, corrupted file size (i_pos 196, 2097152) [ 77.377623][ T6281] loop4: detected capacity change from 0 to 512 [ 77.386822][ T6281] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.914: error while reading EA inode 32 err=-116 [ 77.399308][ T6281] EXT4-fs (loop4): Remounting filesystem read-only [ 77.406132][ T6281] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 77.422673][ T6264] can0 (unregistered): slcan off ptm1. [ 77.449013][ T6281] EXT4-fs (loop4): 1 orphan inode deleted [ 77.457894][ T6291] netlink: 20 bytes leftover after parsing attributes in process `syz.0.916'. [ 77.512868][ T6298] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 77.551219][ T6302] FAULT_INJECTION: forcing a failure. [ 77.551219][ T6302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.564427][ T6302] CPU: 0 UID: 0 PID: 6302 Comm: syz.5.920 Not tainted syzkaller #0 PREEMPT(voluntary) [ 77.564451][ T6302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 77.564461][ T6302] Call Trace: [ 77.564467][ T6302] [ 77.564475][ T6302] __dump_stack+0x1d/0x30 [ 77.564555][ T6302] dump_stack_lvl+0xe8/0x140 [ 77.564571][ T6302] dump_stack+0x15/0x1b [ 77.564586][ T6302] should_fail_ex+0x265/0x280 [ 77.564605][ T6302] should_fail+0xb/0x20 [ 77.564619][ T6302] should_fail_usercopy+0x1a/0x20 [ 77.564692][ T6302] _copy_to_iter+0xd2/0xe70 [ 77.564714][ T6302] ? __kfree_skb+0x109/0x150 [ 77.564793][ T6302] ? __kfree_skb+0x109/0x150 [ 77.564814][ T6302] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 77.564829][ T6302] __skb_datagram_iter+0xc6/0x690 [ 77.564907][ T6302] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 77.564923][ T6302] skb_copy_datagram_iter+0x3d/0x110 [ 77.564939][ T6302] tipc_recvstream+0x4d7/0x780 [ 77.564966][ T6302] ? __pfx_tipc_recvstream+0x10/0x10 [ 77.564988][ T6302] sock_recvmsg+0x139/0x170 [ 77.565043][ T6302] ____sys_recvmsg+0xf5/0x280 [ 77.565068][ T6302] ___sys_recvmsg+0x11f/0x370 [ 77.565095][ T6302] __x64_sys_recvmsg+0xd1/0x160 [ 77.565119][ T6302] x64_sys_call+0x2b46/0x3000 [ 77.565258][ T6302] do_syscall_64+0xd2/0x200 [ 77.565335][ T6302] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 77.565360][ T6302] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 77.565389][ T6302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.565450][ T6302] RIP: 0033:0x7f7356f9efc9 [ 77.565463][ T6302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.565476][ T6302] RSP: 002b:00007f73559ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 77.565492][ T6302] RAX: ffffffffffffffda RBX: 00007f73571f5fa0 RCX: 00007f7356f9efc9 [ 77.565503][ T6302] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000005 [ 77.565516][ T6302] RBP: 00007f73559ff090 R08: 0000000000000000 R09: 0000000000000000 [ 77.565527][ T6302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.565563][ T6302] R13: 00007f73571f6038 R14: 00007f73571f5fa0 R15: 00007ffd680ac498 [ 77.565579][ T6302] [ 77.795580][ T3395] hid-generic 0003:80000004:0000.0002: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 77.854457][ T6315] loop4: detected capacity change from 0 to 2048 [ 77.872367][ T6317] loop5: detected capacity change from 0 to 1024 [ 77.879102][ T6317] EXT4-fs: Ignoring removed orlov option [ 77.894574][ T6315] EXT4-fs (loop4): shut down requested (0) [ 77.989968][ T6332] bridge0: entered promiscuous mode [ 78.002128][ T6332] bridge0: left promiscuous mode [ 78.126285][ T6357] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 78.199461][ T6364] loop5: detected capacity change from 0 to 2048 [ 78.208855][ T6360] loop4: detected capacity change from 0 to 2048 [ 78.224012][ T6364] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.237548][ T6360] EXT4-fs (loop4): shut down requested (0) [ 78.263411][ T6376] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 78.264119][ T6375] bridge0: entered promiscuous mode [ 78.276905][ T6375] bridge0: left promiscuous mode [ 78.346975][ T6390] loop4: detected capacity change from 0 to 128 [ 78.355450][ T6390] ext4 filesystem being mounted at /197/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 78.577208][ T6407] netlink: 20 bytes leftover after parsing attributes in process `syz.4.952'. [ 78.593127][ T6380] xt_connbytes: Forcing CT accounting to be enabled [ 78.599833][ T6380] set match dimension is over the limit! [ 78.606783][ T6394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.616253][ T6394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.618570][ T6412] bridge0: entered promiscuous mode [ 78.630600][ T6412] bridge0: left promiscuous mode [ 78.731943][ T6424] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 78.775768][ T6428] loop4: detected capacity change from 0 to 2048 [ 78.813962][ T6428] Alternate GPT is invalid, using primary GPT. [ 78.820374][ T6428] loop4: p2 p3 p7 [ 78.860243][ T6432] loop4: detected capacity change from 0 to 1024 [ 78.867512][ T6432] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 78.881839][ T6432] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 79.097352][ T6450] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 79.113566][ T6451] loop4: detected capacity change from 0 to 2048 [ 79.119126][ T6453] netlink: 20 bytes leftover after parsing attributes in process `syz.1.971'. [ 79.131510][ T6451] msdos: Unknown parameter '00000000000000000000005' [ 79.273474][ T6473] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 79.287202][ T6471] netlink: 'syz.0.979': attribute type 29 has an invalid length. [ 79.334131][ T6477] netlink: 20 bytes leftover after parsing attributes in process `syz.0.982'. [ 79.390840][ T6485] netlink: 'syz.5.985': attribute type 1 has an invalid length. [ 79.417166][ T6485] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.453148][ T6485] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.479612][ T6485] bond1: (slave team0): making interface the new active one [ 79.497122][ T6485] bond1: (slave team0): Enslaving as an active interface with an up link [ 79.631918][ T6502] netlink: 24 bytes leftover after parsing attributes in process `syz.0.991'. [ 79.640832][ T6502] netlink: 24 bytes leftover after parsing attributes in process `syz.0.991'. [ 79.674707][ T6502] 9pnet_fd: Insufficient options for proto=fd [ 79.682770][ T6502] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 79.682770][ T6502] program syz.0.991 not setting count and/or reply_len properly [ 79.707111][ T6506] loop5: detected capacity change from 0 to 1024 [ 79.715764][ T6502] block device autoloading is deprecated and will be removed. [ 79.722150][ T6510] netlink: 20 bytes leftover after parsing attributes in process `syz.3.995'. [ 79.732856][ T6506] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 79.758198][ T6506] JBD2: no valid journal superblock found [ 79.764055][ T6506] EXT4-fs (loop5): Could not load journal inode [ 79.832033][ T6474] Cannot find set identified by id 0 to match [ 79.836761][ T6524] bridge0: entered promiscuous mode [ 79.844193][ T6524] bridge0: left promiscuous mode [ 79.894032][ T6535] bridge0: entered promiscuous mode [ 79.899560][ T6535] bridge0: left promiscuous mode [ 79.992984][ T6549] bridge0: entered promiscuous mode [ 79.998350][ T6549] bridge0: left promiscuous mode [ 80.015743][ T29] kauditd_printk_skb: 981 callbacks suppressed [ 80.015756][ T29] audit: type=1326 audit(1761792084.640:8737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6550 comm="syz.4.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281260efc9 code=0x7ffc0000 [ 80.048223][ T29] audit: type=1326 audit(1761792084.640:8738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6550 comm="syz.4.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281260efc9 code=0x7ffc0000 [ 80.072382][ T29] audit: type=1326 audit(1761792084.640:8739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6550 comm="syz.4.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f281260efc9 code=0x7ffc0000 [ 80.095995][ T29] audit: type=1326 audit(1761792084.640:8740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6550 comm="syz.4.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281260efc9 code=0x7ffc0000 [ 80.119445][ T29] audit: type=1326 audit(1761792084.640:8741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6550 comm="syz.4.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f281260efc9 code=0x7ffc0000 [ 80.143527][ T29] audit: type=1326 audit(1761792084.640:8742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6550 comm="syz.4.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281260efc9 code=0x7ffc0000 [ 80.145113][ T6554] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 80.166954][ T29] audit: type=1326 audit(1761792084.640:8743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6550 comm="syz.4.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f281260efc9 code=0x7ffc0000 [ 80.173674][ T6554] FAULT_INJECTION: forcing a failure. [ 80.173674][ T6554] name failslab, interval 1, probability 0, space 0, times 0 [ 80.196411][ T29] audit: type=1326 audit(1761792084.640:8744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6550 comm="syz.4.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281260efc9 code=0x7ffc0000 [ 80.209024][ T6554] CPU: 0 UID: 0 PID: 6554 Comm: syz.5.1015 Not tainted syzkaller #0 PREEMPT(voluntary) [ 80.209098][ T6554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 80.209111][ T6554] Call Trace: [ 80.209117][ T6554] [ 80.209124][ T6554] __dump_stack+0x1d/0x30 [ 80.209145][ T6554] dump_stack_lvl+0xe8/0x140 [ 80.209166][ T6554] dump_stack+0x15/0x1b [ 80.209184][ T6554] should_fail_ex+0x265/0x280 [ 80.209259][ T6554] ? kobject_uevent_env+0x1c0/0x570 [ 80.209280][ T6554] should_failslab+0x8c/0xb0 [ 80.209306][ T6554] __kmalloc_cache_noprof+0x4c/0x4a0 [ 80.209363][ T6554] kobject_uevent_env+0x1c0/0x570 [ 80.209441][ T6554] kobject_rename+0x2d6/0x350 [ 80.209489][ T6554] ? sysfs_rename_link_ns+0x106/0x120 [ 80.209515][ T6554] device_rename+0x11f/0x180 [ 80.209537][ T6554] netif_change_name+0x1eb/0x6b0 [ 80.209558][ T6554] ? cred_has_capability+0x210/0x280 [ 80.209667][ T6554] dev_change_name+0xc0/0x170 [ 80.209689][ T6554] dev_ifsioc+0x302/0xaa0 [ 80.209709][ T6554] dev_ioctl+0x4a7/0x960 [ 80.209727][ T6554] sock_do_ioctl+0x197/0x220 [ 80.209819][ T6554] sock_ioctl+0x41b/0x610 [ 80.209840][ T6554] ? __pfx_sock_ioctl+0x10/0x10 [ 80.209859][ T6554] __se_sys_ioctl+0xce/0x140 [ 80.209878][ T6554] __x64_sys_ioctl+0x43/0x50 [ 80.209941][ T6554] x64_sys_call+0x1816/0x3000 [ 80.210010][ T6554] do_syscall_64+0xd2/0x200 [ 80.210028][ T6554] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 80.210075][ T6554] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 80.210102][ T6554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.210151][ T6554] RIP: 0033:0x7f7356f9efc9 [ 80.210166][ T6554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.210183][ T6554] RSP: 002b:00007f73559ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.210201][ T6554] RAX: ffffffffffffffda RBX: 00007f73571f5fa0 RCX: 00007f7356f9efc9 [ 80.210218][ T6554] RDX: 0000200000000000 RSI: 0000000000008923 RDI: 0000000000000004 [ 80.210282][ T6554] RBP: 00007f73559ff090 R08: 0000000000000000 R09: 0000000000000000 [ 80.210294][ T6554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.210305][ T6554] R13: 00007f73571f6038 R14: 00007f73571f5fa0 R15: 00007ffd680ac498 [ 80.210322][ T6554] [ 80.321057][ T6560] loop4: detected capacity change from 0 to 512 [ 80.324235][ T29] audit: type=1326 audit(1761792084.640:8745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6550 comm="syz.4.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f281260efc9 code=0x7ffc0000 [ 80.335843][ T6560] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.1017: iget: bad i_size value: 2533274857506816 [ 80.336937][ T29] audit: type=1326 audit(1761792084.670:8746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6550 comm="syz.4.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281260efc9 code=0x7ffc0000 [ 80.596120][ T6568] bridge0: entered promiscuous mode [ 80.602167][ T6568] bridge0: left promiscuous mode [ 80.625546][ T6566] loop5: detected capacity change from 0 to 2048 [ 80.634886][ T6566] msdos: Unknown parameter '00000000000000000000005' [ 80.906260][ T6581] loop5: detected capacity change from 0 to 1024 [ 80.929981][ T6581] EXT4-fs: Ignoring removed nomblk_io_submit option [ 80.936859][ T6581] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 81.170202][ T6596] loop0: detected capacity change from 0 to 128 [ 81.177119][ T6596] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 81.189372][ T6596] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 81.210750][ T4679] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 81.305196][ T6606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.314435][ T6606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.415578][ T6610] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1038'. [ 81.424798][ T6610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1038'. [ 81.428039][ T6613] bridge0: entered promiscuous mode [ 81.433803][ T6610] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1038'. [ 81.450824][ T6613] bridge0: left promiscuous mode [ 81.487375][ T6617] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 81.725982][ T6635] loop5: detected capacity change from 0 to 128 [ 81.735766][ T6635] ext4 filesystem being mounted at /138/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 81.840172][ T6646] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 81.841845][ T6648] bridge0: entered promiscuous mode [ 81.853595][ T6648] bridge0: left promiscuous mode [ 81.899158][ T6656] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 81.907765][ T6657] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 81.967026][ T6664] netlink: 'syz.0.1058': attribute type 39 has an invalid length. [ 81.984756][ T6668] loop0: detected capacity change from 0 to 512 [ 82.002262][ T6668] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 82.013403][ T6668] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 82.021639][ T6668] EXT4-fs (loop0): failed to initialize system zone (-117) [ 82.029480][ T6668] EXT4-fs (loop0): mount failed [ 82.107432][ T6666] lo speed is unknown, defaulting to 1000 [ 82.174314][ T6681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.183261][ T6681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.221920][ T6678] lo speed is unknown, defaulting to 1000 [ 82.335043][ T6687] bridge0: entered promiscuous mode [ 82.343556][ T6687] bridge0: left promiscuous mode [ 82.372751][ T6691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.374708][ T6693] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 82.388397][ T6690] loop5: detected capacity change from 0 to 1024 [ 82.395511][ T6690] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.403517][ T6691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.406892][ T6690] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.457744][ T6698] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 82.819585][ T6707] loop0: detected capacity change from 0 to 128 [ 82.856998][ T6712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1076'. [ 82.868759][ T6712] @: entered allmulticast mode [ 82.875666][ T5312] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.884773][ T5312] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.894295][ T5312] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.903380][ T5312] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.936500][ T6716] loop0: detected capacity change from 0 to 512 [ 82.952464][ T6716] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 82.970063][ T6716] EXT4-fs (loop0): mount failed [ 83.004816][ T6722] loop0: detected capacity change from 0 to 2048 [ 83.022382][ T6722] ext4 filesystem being mounted at /227/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.099019][ T6735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1014 sclass=netlink_route_socket pid=6735 comm=syz.3.1085 [ 83.182992][ T6742] bridge0: entered promiscuous mode [ 83.198620][ T6742] bridge0: left promiscuous mode [ 83.413145][ T6755] loop4: detected capacity change from 0 to 2048 [ 83.447748][ T6755] msdos: Unknown parameter '00000000000000000000005' [ 83.591890][ T6760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.611207][ T6760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.686661][ T6763] lo speed is unknown, defaulting to 1000 [ 83.734832][ T6736] Cannot find set identified by id 0 to match [ 83.756267][ T6768] lo speed is unknown, defaulting to 1000 [ 84.047069][ T6776] tipc: Started in network mode [ 84.052252][ T6776] tipc: Node identity 4, cluster identity 4711 [ 84.058395][ T6776] tipc: Node number set to 4 [ 84.190571][ T6793] __nla_validate_parse: 7 callbacks suppressed [ 84.190585][ T6793] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1107'. [ 84.244908][ T6800] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1109'. [ 84.342736][ T6813] loop4: detected capacity change from 0 to 128 [ 84.361793][ T6813] ext4 filesystem being mounted at /233/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 84.495684][ T6822] loop5: detected capacity change from 0 to 1024 [ 84.526366][ T6822] EXT4-fs: Ignoring removed orlov option [ 84.563235][ T6822] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1118: bg 0: block 232: padding at end of block bitmap is not set [ 84.579472][ T6822] EXT4-fs (loop5): Remounting filesystem read-only [ 84.608962][ T6826] Illegal XDP return value 4294967274 on prog (id 804) dev syz_tun, expect packet loss! [ 84.722790][ T6830] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1121'. [ 84.982752][ T6836] bridge0: entered promiscuous mode [ 84.988196][ T6836] bridge0: left promiscuous mode [ 85.078516][ T6847] loop5: detected capacity change from 0 to 2048 [ 85.086331][ T6847] msdos: Unknown parameter '00000000000000000000005' [ 85.097267][ T6849] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1128'. [ 85.154862][ T6855] loop5: detected capacity change from 0 to 1024 [ 85.174800][ T29] kauditd_printk_skb: 614 callbacks suppressed [ 85.174817][ T29] audit: type=1326 audit(1761792089.780:9360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6852 comm="syz.3.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f3afefc9 code=0x7ffc0000 [ 85.204700][ T29] audit: type=1326 audit(1761792089.780:9361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6852 comm="syz.3.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe1f3afefc9 code=0x7ffc0000 [ 85.228383][ T29] audit: type=1326 audit(1761792089.780:9362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6852 comm="syz.3.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f3afefc9 code=0x7ffc0000 [ 85.252083][ T29] audit: type=1326 audit(1761792089.780:9363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6852 comm="syz.3.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe1f3afefc9 code=0x7ffc0000 [ 85.275518][ T29] audit: type=1326 audit(1761792089.780:9364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6852 comm="syz.3.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f3afefc9 code=0x7ffc0000 [ 85.299484][ T6855] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.308548][ T29] audit: type=1326 audit(1761792089.900:9365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6859 comm="syz.1.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d704efc9 code=0x7ffc0000 [ 85.332230][ T29] audit: type=1326 audit(1761792089.900:9366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6859 comm="syz.1.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d704efc9 code=0x7ffc0000 [ 85.355742][ T29] audit: type=1326 audit(1761792089.900:9367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6859 comm="syz.1.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88d704efc9 code=0x7ffc0000 [ 85.358721][ T6863] loop4: detected capacity change from 0 to 2048 [ 85.379211][ T29] audit: type=1326 audit(1761792089.900:9368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6859 comm="syz.1.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d704efc9 code=0x7ffc0000 [ 85.409062][ T29] audit: type=1326 audit(1761792089.900:9369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6859 comm="syz.1.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d704efc9 code=0x7ffc0000 [ 85.432752][ T6855] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.470892][ T6863] ext4 filesystem being mounted at /242/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.500535][ T6862] lo speed is unknown, defaulting to 1000 [ 85.530839][ T6878] netlink: 'syz.0.1140': attribute type 62 has an invalid length. [ 85.619325][ T6888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.628495][ T6888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.797695][ T6897] loop3: detected capacity change from 0 to 128 [ 85.822067][ T6897] ext4 filesystem being mounted at /227/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 85.937985][ T6879] Cannot find set identified by id 0 to match [ 85.997548][ T6903] loop3: detected capacity change from 0 to 512 [ 86.011409][ T6903] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.1147: bad orphan inode 11862016 [ 86.022646][ T6903] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.182414][ T6915] SELinux: Context system_u:object_r:mqueue_spool_t:s0 is not valid (left unmapped). [ 86.209535][ T6915] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1150'. [ 86.289468][ T6920] FAULT_INJECTION: forcing a failure. [ 86.289468][ T6920] name failslab, interval 1, probability 0, space 0, times 0 [ 86.302122][ T6920] CPU: 1 UID: 0 PID: 6920 Comm: syz.5.1152 Not tainted syzkaller #0 PREEMPT(voluntary) [ 86.302148][ T6920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 86.302160][ T6920] Call Trace: [ 86.302168][ T6920] [ 86.302176][ T6920] __dump_stack+0x1d/0x30 [ 86.302213][ T6920] dump_stack_lvl+0xe8/0x140 [ 86.302229][ T6920] dump_stack+0x15/0x1b [ 86.302244][ T6920] should_fail_ex+0x265/0x280 [ 86.302264][ T6920] should_failslab+0x8c/0xb0 [ 86.302288][ T6920] kmem_cache_alloc_bulk_noprof+0x50/0x3d0 [ 86.302375][ T6920] ? bpf_test_run_xdp_live+0x8b8/0x11c0 [ 86.302404][ T6920] bpf_test_run_xdp_live+0xdbd/0x11c0 [ 86.302432][ T6920] ? synchronize_rcu+0x45/0x320 [ 86.302468][ T6920] ? bpf_test_run_xdp_live+0x354/0x11c0 [ 86.302508][ T6920] bpf_prog_test_run_xdp+0x525/0x970 [ 86.302553][ T6920] ? _kstrtol+0x71/0x90 [ 86.302575][ T6920] ? __rcu_read_unlock+0x4f/0x70 [ 86.302598][ T6920] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 86.302667][ T6920] bpf_prog_test_run+0x22a/0x390 [ 86.302690][ T6920] __sys_bpf+0x4c0/0x7c0 [ 86.302746][ T6920] __x64_sys_bpf+0x41/0x50 [ 86.302770][ T6920] x64_sys_call+0x2aee/0x3000 [ 86.302787][ T6920] do_syscall_64+0xd2/0x200 [ 86.302843][ T6920] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 86.302865][ T6920] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 86.302888][ T6920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.302972][ T6920] RIP: 0033:0x7f7356f9efc9 [ 86.302986][ T6920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.303000][ T6920] RSP: 002b:00007f73559ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 86.303044][ T6920] RAX: ffffffffffffffda RBX: 00007f73571f5fa0 RCX: 00007f7356f9efc9 [ 86.303057][ T6920] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 86.303116][ T6920] RBP: 00007f73559ff090 R08: 0000000000000000 R09: 0000000000000000 [ 86.303164][ T6920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 86.303173][ T6920] R13: 00007f73571f6038 R14: 00007f73571f5fa0 R15: 00007ffd680ac498 [ 86.303189][ T6920] [ 86.524317][ T6871] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 86.546428][ T6871] EXT4-fs (loop4): Remounting filesystem read-only [ 86.565790][ T6926] bridge0: entered promiscuous mode [ 86.571142][ T6926] bridge0: left promiscuous mode [ 86.576512][ T6924] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 86.591775][ T36] IPVS: starting estimator thread 0... [ 86.625479][ T6936] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1159'. [ 86.643802][ T6936] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1159'. [ 86.656581][ T6937] SELinux: failed to load policy [ 86.680846][ T6929] IPVS: using max 2976 ests per chain, 148800 per kthread [ 86.711315][ T6945] loop5: detected capacity change from 0 to 2048 [ 86.718292][ T6945] msdos: Unknown parameter '00000000000000000000005' [ 86.768702][ T6948] loop4: detected capacity change from 0 to 2048 [ 86.771433][ T6942] lo speed is unknown, defaulting to 1000 [ 86.780083][ T6948] msdos: Unknown parameter '00000000000000000000005' [ 86.909277][ T6961] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 87.059965][ T6973] netlink: 'syz.3.1173': attribute type 39 has an invalid length. [ 87.232114][ T6994] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.245546][ T6994] netlink: 'syz.5.1179': attribute type 12 has an invalid length. [ 87.253513][ T6994] netlink: 'syz.5.1179': attribute type 29 has an invalid length. [ 87.257461][ T6992] infiniband syz!: set down [ 87.261429][ T6994] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1179'. [ 87.265976][ T6992] infiniband syz!: added team_slave_0 [ 87.275626][ T6994] netlink: 'syz.5.1179': attribute type 1 has an invalid length. [ 87.288039][ T6994] netlink: 47 bytes leftover after parsing attributes in process `syz.5.1179'. [ 87.299601][ T6992] RDS/IB: syz!: added [ 87.304051][ T6992] smc: adding ib device syz! with port count 1 [ 87.310428][ T6992] smc: ib device syz! port 1 has no pnetid [ 87.320008][ T6998] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 87.352637][ T7000] bridge0: entered promiscuous mode [ 87.361598][ T7002] loop3: detected capacity change from 0 to 2048 [ 87.368538][ T7000] bridge0: left promiscuous mode [ 87.403520][ T7004] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1183'. [ 87.423524][ T7002] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.532224][ T7016] SELinux: Context system_u:object is not valid (left unmapped). [ 87.551774][ T7013] Cannot find set identified by id 0 to match [ 87.698631][ T7023] lo speed is unknown, defaulting to 1000 [ 88.078816][ T7036] loop4: detected capacity change from 0 to 1024 [ 88.089900][ T7036] EXT4-fs: Ignoring removed orlov option [ 88.664971][ T7060] loop0: detected capacity change from 0 to 1024 [ 88.671963][ T7060] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.678860][ T7060] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 88.839491][ T7077] lo speed is unknown, defaulting to 1000 [ 88.869470][ T7079] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7079 comm=syz.3.1208 [ 89.292472][ T7145] __nla_validate_parse: 7 callbacks suppressed [ 89.292501][ T7145] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1235'. [ 89.307566][ T7145] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1235'. [ 89.439481][ T7170] bond1: (slave bond_slave_1): Device is not our slave [ 89.446462][ T7170] bond1: option active_slave: invalid value (bond_slave_1) [ 89.462395][ T7170] bond1 (unregistering): Released all slaves [ 89.533922][ T5308] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 89.622523][ T7200] syz_tun: entered allmulticast mode [ 90.630967][ T7259] lo speed is unknown, defaulting to 1000 [ 90.682612][ T7266] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1282'. [ 90.691675][ T7266] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1282'. [ 90.783354][ T7276] netlink: 'syz.4.1287': attribute type 19 has an invalid length. [ 90.791255][ T7276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1287'. [ 90.805168][ T5308] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.819840][ T7276] netlink: 'syz.4.1287': attribute type 19 has an invalid length. [ 90.827687][ T7276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1287'. [ 90.847404][ T5308] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.874048][ T5308] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.890531][ T5308] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.147436][ T3409] IPVS: starting estimator thread 0... [ 91.239722][ T7302] IPVS: using max 2928 ests per chain, 146400 per kthread [ 91.372935][ T7319] tipc: Started in network mode [ 91.377903][ T7319] tipc: Node identity 1e2668cfb67f, cluster identity 4711 [ 91.385191][ T7319] tipc: Enabled bearer , priority 0 [ 91.393400][ T7319] syzkaller0: entered promiscuous mode [ 91.398902][ T7319] syzkaller0: entered allmulticast mode [ 91.411321][ T7319] tipc: Resetting bearer [ 91.434956][ T7318] tipc: Resetting bearer [ 91.443971][ T7318] tipc: Disabling bearer [ 91.513882][ T7329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1311'. [ 91.622017][ T3394] IPVS: starting estimator thread 0... [ 91.709731][ T7342] IPVS: using max 2736 ests per chain, 136800 per kthread [ 91.756310][ T29] kauditd_printk_skb: 360 callbacks suppressed [ 91.756324][ T29] audit: type=1400 audit(1761792096.381:9730): avc: denied { write } for pid=7371 comm="syz.1.1325" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 91.863013][ T7392] syzkaller1: entered promiscuous mode [ 91.868527][ T7392] syzkaller1: entered allmulticast mode [ 91.897061][ T7402] syzkaller0: entered promiscuous mode [ 91.902758][ T7402] syzkaller0: entered allmulticast mode [ 91.910403][ T7404] netlink: 'syz.4.1338': attribute type 1 has an invalid length. [ 92.020266][ T7417] syzkaller0: entered promiscuous mode [ 92.025768][ T7417] syzkaller0: entered allmulticast mode [ 93.297300][ T3382] IPVS: starting estimator thread 0... [ 93.389525][ T7503] IPVS: using max 2784 ests per chain, 139200 per kthread [ 93.416307][ T7533] netlink: 'syz.1.1392': attribute type 10 has an invalid length. [ 93.424294][ T7533] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1392'. [ 93.437202][ T7533] team0: Port device geneve1 added [ 93.526077][ T7545] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1399'. [ 93.742157][ T29] audit: type=1400 audit(1761792098.371:9731): avc: denied { read } for pid=7601 comm="syz.5.1423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.793568][ T7615] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1423'. [ 93.813467][ T7617] syzkaller0: entered promiscuous mode [ 93.819010][ T7617] syzkaller0: entered allmulticast mode [ 94.562160][ C1] vcan0: j1939_tp_rxtimer: 0xffff888104dc8400: rx timeout, send abort [ 94.633717][ T7740] syzkaller1: entered promiscuous mode [ 94.639200][ T7740] syzkaller1: entered allmulticast mode [ 94.945555][ T7778] __nla_validate_parse: 1 callbacks suppressed [ 94.945571][ T7778] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1500'. [ 95.036459][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a904c00: rx timeout, send abort [ 95.045268][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a904c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 95.062156][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a35b200: rx timeout, send abort [ 95.071048][ C1] vcan0: j1939_tp_rxtimer: 0xffff888104dc8400: abort rx timeout. Force session deactivation [ 95.145240][ T7817] syzkaller0: entered promiscuous mode [ 95.150848][ T7817] syzkaller0: entered allmulticast mode [ 95.251545][ T7843] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1530'. [ 95.305378][ T7851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.325891][ T7851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.357007][ T7863] syzkaller0: entered promiscuous mode [ 95.362684][ T7863] syzkaller0: entered allmulticast mode [ 95.386916][ T7867] loop4: detected capacity change from 0 to 1024 [ 95.395880][ T7867] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.403481][ T7867] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 95.414870][ T7867] EXT4-fs mount: 56 callbacks suppressed [ 95.414918][ T7867] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.478699][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.543713][ T7901] syzkaller0: entered promiscuous mode [ 95.549849][ T7901] syzkaller0: entered allmulticast mode [ 95.570382][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a35b200: abort rx timeout. Force session deactivation [ 95.581543][ T7903] bridge0: entered promiscuous mode [ 95.586888][ T7903] bridge0: left promiscuous mode [ 95.614879][ T29] audit: type=1326 audit(1761792100.242:9732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7908 comm="syz.1.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d704efc9 code=0x7ffc0000 [ 95.650730][ T7915] loop4: detected capacity change from 0 to 2048 [ 95.658118][ T29] audit: type=1326 audit(1761792100.242:9733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7908 comm="syz.1.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d704efc9 code=0x7ffc0000 [ 95.681847][ T29] audit: type=1326 audit(1761792100.242:9734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7908 comm="syz.1.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88d704efc9 code=0x7ffc0000 [ 95.705514][ T29] audit: type=1326 audit(1761792100.242:9735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7908 comm="syz.1.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d704efc9 code=0x7ffc0000 [ 95.730145][ T29] audit: type=1326 audit(1761792100.242:9736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7908 comm="syz.1.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88d704efc9 code=0x7ffc0000 [ 95.753875][ T29] audit: type=1326 audit(1761792100.242:9737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7908 comm="syz.1.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d704efc9 code=0x7ffc0000 [ 95.777309][ T29] audit: type=1326 audit(1761792100.242:9738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7908 comm="syz.1.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88d704efc9 code=0x7ffc0000 [ 95.800965][ T29] audit: type=1326 audit(1761792100.242:9739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7908 comm="syz.1.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d704efc9 code=0x7ffc0000 [ 95.818776][ T7915] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.837001][ T7915] ext4 filesystem being mounted at /328/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.888048][ T7943] syzkaller0: entered promiscuous mode [ 95.894101][ T7943] syzkaller0: entered allmulticast mode [ 95.958566][ T7946] set match dimension is over the limit! [ 96.041795][ T7978] loop0: detected capacity change from 0 to 1024 [ 96.048728][ T7978] EXT4-fs: Ignoring removed nomblk_io_submit option [ 96.056191][ T7978] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 96.067644][ T7978] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.082613][ T7983] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 96.116479][ T7987] syzkaller0: entered promiscuous mode [ 96.122097][ T7987] syzkaller0: entered allmulticast mode [ 96.147771][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.197568][ T8001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.216241][ T8001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.411768][ T8047] loop0: detected capacity change from 0 to 128 [ 96.420074][ T8047] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 96.432367][ T8047] ext4 filesystem being mounted at /338/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 96.486929][ T3313] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.510348][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.624465][ T8076] loop3: detected capacity change from 0 to 128 [ 96.633571][ T8076] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 96.645903][ T8076] ext4 filesystem being mounted at /330/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 96.731581][ T3321] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.741048][ T8093] loop4: detected capacity change from 0 to 1024 [ 96.741409][ T8093] EXT4-fs: Ignoring removed nomblk_io_submit option [ 96.758601][ T8093] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 96.779540][ T8093] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.893053][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.939744][ T8133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.949411][ T8133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.964604][ T8131] syzkaller0: entered promiscuous mode [ 96.970191][ T8131] syzkaller0: entered allmulticast mode [ 97.133963][ T8177] syzkaller0: entered promiscuous mode [ 97.139610][ T8177] syzkaller0: entered allmulticast mode [ 97.167522][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 97.167535][ T29] audit: type=1326 audit(1761792101.792:9772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8180 comm="syz.0.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5485c0efc9 code=0x7ffc0000 [ 97.174034][ T8185] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 97.197665][ T29] audit: type=1326 audit(1761792101.792:9773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8180 comm="syz.0.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5485c0efc9 code=0x7ffc0000 [ 97.226953][ T29] audit: type=1326 audit(1761792101.792:9774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8180 comm="syz.0.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5485c0efc9 code=0x7ffc0000 [ 97.250532][ T29] audit: type=1326 audit(1761792101.792:9775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8180 comm="syz.0.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5485c0efc9 code=0x7ffc0000 [ 97.274183][ T29] audit: type=1326 audit(1761792101.792:9776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8180 comm="syz.0.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5485c0efc9 code=0x7ffc0000 [ 97.297802][ T29] audit: type=1326 audit(1761792101.792:9777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8180 comm="syz.0.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5485c0efc9 code=0x7ffc0000 [ 97.321323][ T29] audit: type=1326 audit(1761792101.792:9778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8180 comm="syz.0.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5485c0efc9 code=0x7ffc0000 [ 97.346113][ T29] audit: type=1326 audit(1761792101.792:9779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8180 comm="syz.0.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5485c0efc9 code=0x7ffc0000 [ 97.369994][ T29] audit: type=1326 audit(1761792101.792:9780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8180 comm="syz.0.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5485c0efc9 code=0x7ffc0000 [ 97.393485][ T29] audit: type=1326 audit(1761792101.792:9781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8180 comm="syz.0.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5485c0efc9 code=0x7ffc0000 [ 97.606002][ T8238] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 97.713218][ T8258] loop5: detected capacity change from 0 to 2048 [ 97.747485][ T8258] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.761725][ T8258] ext4 filesystem being mounted at /286/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.886938][ T8286] Cannot find set identified by id 0 to match [ 97.951185][ T8204] Cannot find set identified by id 0 to match [ 98.004816][ T8301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1738'. [ 98.029054][ T8304] loop3: detected capacity change from 0 to 128 [ 98.037107][ T8304] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.049654][ T8304] ext4 filesystem being mounted at /353/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 98.069566][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811ab14200: rx timeout, send abort [ 98.109470][ T3321] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.131589][ T8312] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 98.201959][ T8326] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1750'. [ 98.418719][ T8352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.427659][ T8352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.567575][ T4647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.577267][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811ab14c00: rx timeout, send abort [ 98.589869][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811ab14200: abort rx timeout. Force session deactivation [ 98.697328][ T8389] loop3: detected capacity change from 0 to 2048 [ 98.704394][ T8389] msdos: Unknown parameter '00000000000000000000005' [ 98.732711][ T8393] lo speed is unknown, defaulting to 1000 [ 98.795387][ T8403] loop3: detected capacity change from 0 to 2048 [ 98.812017][ T8403] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.824809][ T8403] ext4 filesystem being mounted at /376/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.941139][ T8426] set match dimension is over the limit! [ 99.049765][ T8442] lo speed is unknown, defaulting to 1000 [ 99.077251][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811ab14c00: abort rx timeout. Force session deactivation [ 99.107330][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811aa20e00: rx timeout, send abort [ 99.388905][ T8478] loop4: detected capacity change from 0 to 1024 [ 99.397372][ T8478] EXT4-fs: Ignoring removed nomblk_io_submit option [ 99.404592][ T8478] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 99.415000][ T8478] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.461903][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.492225][ T8487] lo speed is unknown, defaulting to 1000 [ 99.517505][ T8495] loop4: detected capacity change from 0 to 128 [ 99.530094][ T8495] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.542529][ T8495] ext4 filesystem being mounted at /377/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 99.607237][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811aa20a00: rx timeout, send abort [ 99.616106][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811aa20e00: abort rx timeout. Force session deactivation [ 99.619311][ T8506] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 99.709601][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.727578][ T3312] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.743930][ T8518] loop3: detected capacity change from 0 to 1024 [ 99.752691][ T8518] EXT4-fs: Ignoring removed nomblk_io_submit option [ 99.771115][ T8518] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 99.784957][ T8518] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.819820][ T8533] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 99.838818][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.920417][ T8548] lo speed is unknown, defaulting to 1000 [ 100.107647][ T8583] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1861'. [ 100.115417][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811aa20a00: abort rx timeout. Force session deactivation [ 100.116687][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a9f0e00: rx timeout, send abort [ 100.213672][ T8599] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 100.250708][ T8603] lo speed is unknown, defaulting to 1000 [ 100.267055][ T8605] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1882'. [ 100.480833][ T8635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1885'. [ 100.486679][ T8633] loop5: detected capacity change from 0 to 1024 [ 100.499872][ T8633] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.506884][ T8633] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 100.522593][ T8633] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.590544][ T4647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.610152][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a9f0600: rx timeout, send abort [ 100.634860][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a9f0e00: abort rx timeout. Force session deactivation [ 100.690626][ T8661] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 100.734799][ T8672] loop5: detected capacity change from 0 to 128 [ 100.743025][ T8672] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 100.755774][ T8672] ext4 filesystem being mounted at /312/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 100.816773][ T4647] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.911621][ T8690] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 100.959323][ T8698] loop5: detected capacity change from 0 to 1024 [ 100.966011][ T8698] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.972821][ T8698] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 100.983069][ T8698] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.026185][ T4647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.055281][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811ab0ee00: rx timeout, send abort [ 101.070037][ T8708] loop5: detected capacity change from 0 to 128 [ 101.080464][ T8708] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.093628][ T8708] ext4 filesystem being mounted at /321/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 101.125416][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a9f0600: abort rx timeout. Force session deactivation [ 101.160621][ T4647] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.254838][ T8715] loop5: detected capacity change from 0 to 256 [ 101.262154][ T8715] FAT-fs (loop5): bogus number of FAT sectors [ 101.268253][ T8715] FAT-fs (loop5): Can't find a valid FAT filesystem [ 101.381067][ T8700] set match dimension is over the limit! [ 101.445611][ T8731] loop5: detected capacity change from 0 to 2048 [ 101.452667][ T8731] msdos: Unknown parameter '00000000000000000000005' [ 101.463414][ T8737] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 101.555238][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811ab0f000: rx timeout, send abort [ 101.563497][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811ab0ee00: abort rx timeout. Force session deactivation [ 101.738245][ T8782] loop0: detected capacity change from 0 to 2048 [ 101.746562][ T8782] msdos: Unknown parameter '00000000000000000000005' [ 102.063417][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811ab0f000: abort rx timeout. Force session deactivation [ 102.628910][ T8825] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 103.018095][ T8881] loop0: detected capacity change from 0 to 2048 [ 103.052154][ T8885] loop3: detected capacity change from 0 to 2048 [ 103.068729][ T8881] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.069649][ T8885] msdos: Unknown parameter '00000000000000000000005' [ 103.137169][ T8881] ext4 filesystem being mounted at /381/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.208890][ T8881] Cannot find set identified by id 0 to match [ 103.229916][ T8931] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 103.269075][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.329210][ T8954] lo speed is unknown, defaulting to 1000 [ 103.393828][ T8961] loop5: detected capacity change from 0 to 128 [ 103.401832][ T8961] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.414116][ T8961] ext4 filesystem being mounted at /348/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 103.477812][ T4647] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.556086][ T8980] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2025'. [ 103.598218][ T8985] loop5: detected capacity change from 0 to 128 [ 103.607206][ T8985] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.621509][ T8985] ext4 filesystem being mounted at /352/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 103.671423][ T4647] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.194241][ T9016] loop5: detected capacity change from 0 to 2048 [ 104.201714][ T9016] msdos: Unknown parameter '00000000000000000000005' [ 104.612058][ T9067] loop3: detected capacity change from 0 to 128 [ 104.629826][ T9067] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 104.645546][ T9013] Cannot find set identified by id 0 to match [ 104.652631][ T9067] ext4 filesystem being mounted at /416/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 104.684378][ T9076] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 104.691280][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811ab14200: rx timeout, send abort [ 104.723817][ T3321] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.754960][ T9086] lo speed is unknown, defaulting to 1000 [ 104.842215][ T9100] loop4: detected capacity change from 0 to 2048 [ 104.860882][ T9102] lo speed is unknown, defaulting to 1000 [ 104.869417][ T9108] loop3: detected capacity change from 0 to 128 [ 104.869615][ T9100] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.888186][ T9100] ext4 filesystem being mounted at /442/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.909699][ T9108] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 104.922224][ T9108] ext4 filesystem being mounted at /419/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 104.988502][ T9100] set match dimension is over the limit! [ 105.007847][ T3321] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.030186][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.187739][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811ab14c00: rx timeout, send abort [ 105.199436][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811ab14200: abort rx timeout. Force session deactivation [ 105.211450][ T9132] lo speed is unknown, defaulting to 1000 [ 105.246977][ T9138] loop5: detected capacity change from 0 to 128 [ 105.263220][ T9138] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.280544][ T9138] ext4 filesystem being mounted at /363/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 105.341495][ T9144] loop0: detected capacity change from 0 to 2048 [ 105.348180][ T9144] msdos: Unknown parameter '00000000000000000000005' [ 105.360647][ T4647] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.478146][ T9164] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 105.515422][ T9157] set match dimension is over the limit! [ 105.695969][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811ab14c00: abort rx timeout. Force session deactivation [ 105.721834][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 105.721849][ T29] audit: type=1326 audit(1761792110.343:9986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9202 comm="syz.3.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f3afefc9 code=0x7ffc0000 [ 105.752229][ T29] audit: type=1326 audit(1761792110.343:9987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9202 comm="syz.3.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f3afefc9 code=0x7ffc0000 [ 105.776284][ T29] audit: type=1326 audit(1761792110.343:9988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9202 comm="syz.3.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1f3afefc9 code=0x7ffc0000 [ 105.800307][ T29] audit: type=1326 audit(1761792110.343:9989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9202 comm="syz.3.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f3afefc9 code=0x7ffc0000 [ 105.823790][ T29] audit: type=1326 audit(1761792110.343:9990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9202 comm="syz.3.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f3afefc9 code=0x7ffc0000 [ 105.847808][ T29] audit: type=1326 audit(1761792110.343:9991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9202 comm="syz.3.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1f3afefc9 code=0x7ffc0000 [ 105.872144][ T29] audit: type=1326 audit(1761792110.343:9992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9202 comm="syz.3.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f3afefc9 code=0x7ffc0000 [ 105.895587][ T29] audit: type=1326 audit(1761792110.343:9993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9202 comm="syz.3.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1f3afefc9 code=0x7ffc0000 [ 105.919822][ T29] audit: type=1326 audit(1761792110.343:9994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9202 comm="syz.3.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f3afefc9 code=0x7ffc0000 [ 105.943240][ T29] audit: type=1326 audit(1761792110.343:9995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9202 comm="syz.3.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f3afefc9 code=0x7ffc0000 [ 106.157356][ T9243] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 106.185967][ T9240] loop0: detected capacity change from 0 to 2048 [ 106.248346][ T9240] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.277328][ T9240] ext4 filesystem being mounted at /387/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.429565][ T9261] Cannot find set identified by id 0 to match [ 106.499697][ T9273] loop3: detected capacity change from 0 to 128 [ 106.510712][ T9273] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.528255][ T9273] ext4 filesystem being mounted at /438/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 106.582300][ T3321] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.585164][ T9282] loop4: detected capacity change from 0 to 1024 [ 106.598048][ T9282] EXT4-fs: Ignoring removed orlov option [ 106.609291][ T9282] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.632588][ T9286] loop5: detected capacity change from 0 to 2048 [ 106.640636][ T9286] msdos: Unknown parameter '00000000000000000000005' [ 106.656869][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.742280][ T9298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.751026][ T9298] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 106.762216][ T9298] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 106.794278][ T9311] loop5: detected capacity change from 0 to 128 [ 106.809239][ T9311] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.828449][ T9311] ext4 filesystem being mounted at /373/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 106.905414][ T4647] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.937876][ T9333] syzkaller0: entered promiscuous mode [ 106.943340][ T9333] syzkaller0: entered allmulticast mode [ 106.991398][ T9337] loop4: detected capacity change from 0 to 2048 [ 106.998133][ T9337] msdos: Unknown parameter '00000000000000000000005' [ 107.024041][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.089984][ T9350] lo speed is unknown, defaulting to 1000 [ 107.208069][ T9366] lo speed is unknown, defaulting to 1000 [ 107.244869][ T9378] syzkaller0: entered promiscuous mode [ 107.251044][ T9378] syzkaller0: entered allmulticast mode [ 107.283755][ T9381] loop3: detected capacity change from 0 to 2048 [ 107.315826][ T9381] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.331884][ T9381] ext4 filesystem being mounted at /447/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.446388][ T9399] set match dimension is over the limit! [ 107.499046][ T9416] loop5: detected capacity change from 0 to 128 [ 107.514428][ T9416] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 107.528431][ T9416] ext4 filesystem being mounted at /383/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 107.569224][ T9419] syzkaller0: entered promiscuous mode [ 107.574727][ T9419] syzkaller0: entered allmulticast mode [ 107.582066][ T4647] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.639686][ T9421] lo speed is unknown, defaulting to 1000 [ 107.804826][ T9450] loop4: detected capacity change from 0 to 128 [ 107.837225][ T9452] syzkaller0: entered promiscuous mode [ 107.842759][ T9452] syzkaller0: entered allmulticast mode [ 107.871549][ T9450] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 107.884375][ T9450] ext4 filesystem being mounted at /462/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 107.958428][ T3312] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.037011][ T9477] loop4: detected capacity change from 0 to 128 [ 108.047596][ T9475] lo speed is unknown, defaulting to 1000 [ 108.085626][ T9480] loop0: detected capacity change from 0 to 2048 [ 108.092764][ T9480] msdos: Unknown parameter '00000000000000000000005' [ 108.134022][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.177036][ T9491] syzkaller0: entered promiscuous mode [ 108.182678][ T9491] syzkaller0: entered allmulticast mode [ 108.191975][ T9493] loop3: detected capacity change from 0 to 128 [ 108.232908][ T9493] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.252523][ T9493] ext4 filesystem being mounted at /448/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 108.317023][ T9502] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2227'. [ 108.371978][ T3321] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.395150][ T9514] loop5: detected capacity change from 0 to 2048 [ 108.420409][ T9521] syzkaller0: entered promiscuous mode [ 108.425917][ T9521] syzkaller0: entered allmulticast mode [ 108.435072][ T9514] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.447925][ T9514] ext4 filesystem being mounted at /398/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.571207][ T9525] Cannot find set identified by id 0 to match [ 108.919014][ T9553] syzkaller0: entered promiscuous mode [ 108.924529][ T9553] syzkaller0: entered allmulticast mode [ 108.925799][ T9551] loop4: detected capacity change from 0 to 512 [ 108.939834][ T9551] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 108.948107][ T9551] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 108.957076][ T9551] EXT4-fs (loop4): 1 truncate cleaned up [ 108.963167][ T9551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.976253][ T9551] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 4: comm syz.4.2247: lblock 0 mapped to illegal pblock 4 (length 1) [ 108.990538][ T9551] EXT4-fs (loop4): Remounting filesystem read-only [ 109.088435][ T9576] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2258'. [ 109.111095][ T9578] loop0: detected capacity change from 0 to 128 [ 109.121360][ T9578] ext4 filesystem being mounted at /411/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 109.182012][ T9583] syzkaller0: entered promiscuous mode [ 109.188181][ T9583] syzkaller0: entered allmulticast mode [ 109.321801][ T9603] lo speed is unknown, defaulting to 1000 [ 109.333278][ T9607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2270'. [ 109.384629][ T9614] FAULT_INJECTION: forcing a failure. [ 109.384629][ T9614] name failslab, interval 1, probability 0, space 0, times 0 [ 109.397328][ T9614] CPU: 0 UID: 0 PID: 9614 Comm: syz.3.2272 Not tainted syzkaller #0 PREEMPT(voluntary) [ 109.397405][ T9614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 109.397415][ T9614] Call Trace: [ 109.397421][ T9614] [ 109.397454][ T9614] __dump_stack+0x1d/0x30 [ 109.397477][ T9614] dump_stack_lvl+0xe8/0x140 [ 109.397494][ T9614] dump_stack+0x15/0x1b [ 109.397510][ T9614] should_fail_ex+0x265/0x280 [ 109.397528][ T9614] should_failslab+0x8c/0xb0 [ 109.397591][ T9614] kmem_cache_alloc_noprof+0x50/0x480 [ 109.397618][ T9614] ? dst_alloc+0xbd/0x100 [ 109.397646][ T9614] dst_alloc+0xbd/0x100 [ 109.397742][ T9614] rt_dst_clone+0x3b/0x2e0 [ 109.397819][ T9614] NF_HOOK+0x65/0x200 [ 109.397841][ T9614] ? __pfx_ip_mc_finish_output+0x10/0x10 [ 109.397865][ T9614] ip_mc_output+0x139/0x340 [ 109.397884][ T9614] ? __pfx_dst_output+0x10/0x10 [ 109.397970][ T9614] ip_send_skb+0x151/0x160 [ 109.397994][ T9614] udp_send_skb+0x6e3/0xa40 [ 109.398018][ T9614] ? ip_make_skb+0x197/0x2c0 [ 109.398093][ T9614] udp_sendmsg+0x1050/0x13c0 [ 109.398117][ T9614] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 109.398145][ T9614] ? __pfx_udp_sendmsg+0x10/0x10 [ 109.398180][ T9614] inet_sendmsg+0xac/0xd0 [ 109.398201][ T9614] __sock_sendmsg+0x102/0x180 [ 109.398221][ T9614] ____sys_sendmsg+0x345/0x4e0 [ 109.398326][ T9614] ___sys_sendmsg+0x17b/0x1d0 [ 109.398365][ T9614] __sys_sendmmsg+0x178/0x300 [ 109.398392][ T9614] __x64_sys_sendmmsg+0x57/0x70 [ 109.398408][ T9614] x64_sys_call+0x1c4a/0x3000 [ 109.398436][ T9614] do_syscall_64+0xd2/0x200 [ 109.398451][ T9614] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 109.398484][ T9614] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 109.398550][ T9614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.398570][ T9614] RIP: 0033:0x7fe1f3afefc9 [ 109.398586][ T9614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.398602][ T9614] RSP: 002b:00007fe1f255f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 109.398686][ T9614] RAX: ffffffffffffffda RBX: 00007fe1f3d55fa0 RCX: 00007fe1f3afefc9 [ 109.398698][ T9614] RDX: 0000000000000003 RSI: 0000200000004540 RDI: 0000000000000003 [ 109.398711][ T9614] RBP: 00007fe1f255f090 R08: 0000000000000000 R09: 0000000000000000 [ 109.398723][ T9614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 109.398736][ T9614] R13: 00007fe1f3d56038 R14: 00007fe1f3d55fa0 R15: 00007ffd353f89b8 [ 109.398787][ T9614] [ 109.740117][ T9635] loop3: detected capacity change from 0 to 2048 [ 109.742889][ T9637] syzkaller0: entered promiscuous mode [ 109.746825][ T9635] msdos: Unknown parameter '00000000000000000000005' [ 109.752028][ T9637] syzkaller0: entered allmulticast mode [ 109.811984][ T9647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2285'. [ 109.855514][ T9652] loop3: detected capacity change from 0 to 1024 [ 109.862987][ T9652] EXT4-fs: Ignoring removed bh option [ 109.871837][ T9652] EXT4-fs: inline encryption not supported [ 109.877090][ T9658] lo speed is unknown, defaulting to 1000 [ 109.884740][ T9652] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 109.896258][ T9652] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 109.910300][ T9652] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.2287: lblock 2 mapped to illegal pblock 2 (length 1) [ 109.926475][ T9648] set match dimension is over the limit! [ 109.933922][ T9652] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.2287: lblock 0 mapped to illegal pblock 48 (length 1) [ 109.949478][ T9652] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.2287: Failed to acquire dquot type 0 [ 109.962796][ T9666] bridge0: entered promiscuous mode [ 109.968193][ T9666] macvtap1: entered allmulticast mode [ 109.968323][ T9652] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 109.973581][ T9666] bridge0: entered allmulticast mode [ 109.984527][ T9652] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.2287: mark_inode_dirty error [ 109.989833][ T9666] batman_adv: batadv0: Adding interface: macvtap1 [ 110.001349][ T9652] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 110.005953][ T9666] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.006510][ T9666] batman_adv: batadv0: Interface activated: macvtap1 [ 110.017629][ T9652] EXT4-fs (loop3): 1 orphan inode deleted [ 110.042135][ T5312] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:50: lblock 1 mapped to illegal pblock 1 (length 1) [ 110.066272][ T5312] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:50: Failed to release dquot type 0 [ 110.104078][ T9652] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 16: comm syz.3.2287: lblock 0 mapped to illegal pblock 16 (length 1) [ 110.119701][ T9652] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz.3.2287: Invalid inode table block 1 in block_group 0 [ 110.133375][ T9652] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 110.143029][ T9652] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.2287: mark_inode_dirty error [ 110.163809][ T3321] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 110.193570][ T5289] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm kworker/u8:32: Invalid inode table block 1 in block_group 0 [ 110.208911][ T9674] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz.3.2287: Invalid inode table block 1 in block_group 0 [ 110.222661][ T4679] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.233743][ T4679] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.234430][ T9674] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 110.254362][ T9674] EXT4-fs error (device loop3): ext4_quota_off:7229: inode #3: comm syz.3.2287: mark_inode_dirty error [ 110.272493][ T4679] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.282921][ T4679] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.333092][ T4679] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.343607][ T4679] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.362542][ T9689] loop0: detected capacity change from 0 to 2048 [ 110.369389][ T9689] msdos: Unknown parameter '00000000000000000000005' [ 110.410354][ T4679] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.420641][ T4679] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.432010][ T9686] lo speed is unknown, defaulting to 1000 [ 110.510826][ T9686] chnl_net:caif_netlink_parms(): no params data found [ 110.519890][ T4679] bridge_slave_1: left allmulticast mode [ 110.525555][ T4679] bridge_slave_1: left promiscuous mode [ 110.531327][ T4679] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.539253][ T4679] bridge_slave_0: left allmulticast mode [ 110.544894][ T4679] bridge_slave_0: left promiscuous mode [ 110.550658][ T4679] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.719214][ T4679] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.729057][ T4679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.738496][ T4679] bond0 (unregistering): Released all slaves [ 110.772794][ T9686] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.780307][ T9686] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.795434][ T9686] bridge_slave_0: entered allmulticast mode [ 110.802292][ T9686] bridge_slave_0: entered promiscuous mode [ 110.809392][ T9686] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.816493][ T9686] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.824083][ T9686] bridge_slave_1: entered allmulticast mode [ 110.831563][ T9686] bridge_slave_1: entered promiscuous mode [ 110.854292][ T4679] hsr_slave_0: left promiscuous mode [ 110.861839][ T4679] hsr_slave_1: left promiscuous mode [ 110.870457][ T4679] veth1_macvtap: left promiscuous mode [ 110.876081][ T4679] veth0_macvtap: left promiscuous mode [ 110.881694][ T4679] veth1_vlan: left promiscuous mode [ 110.886960][ T4679] veth0_vlan: left promiscuous mode [ 110.945344][ T4679] team0 (unregistering): Port device team_slave_1 removed [ 110.955519][ T4679] team0 (unregistering): Port device team_slave_0 removed [ 110.983892][ T9686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.994659][ T9686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.016746][ T9686] team0: Port device team_slave_0 added [ 111.023365][ T9686] team0: Port device team_slave_1 added [ 111.029168][ T9721] lo speed is unknown, defaulting to 1000 [ 111.043378][ T9686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.050492][ T9686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.077328][ T9686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.089680][ T9686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.096618][ T9686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.122892][ T9686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.159398][ T9686] hsr_slave_0: entered promiscuous mode [ 111.165338][ T9686] hsr_slave_1: entered promiscuous mode [ 111.290634][ T4679] IPVS: stop unused estimator thread 0... [ 111.342067][ T9737] loop5: detected capacity change from 0 to 256 [ 111.360759][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 111.360774][ T29] audit: type=1326 audit(1761792115.993:10064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9736 comm="syz.5.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7356f9efc9 code=0x7ffc0000 [ 111.391087][ T29] audit: type=1326 audit(1761792115.993:10065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9736 comm="syz.5.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7356f9efc9 code=0x7ffc0000 [ 111.414624][ T29] audit: type=1326 audit(1761792115.993:10066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9736 comm="syz.5.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7356f9efc9 code=0x7ffc0000 [ 111.420791][ T5289] FAT-fs (loop5): error, corrupted file size (i_pos 196, 2097152) [ 111.438316][ T29] audit: type=1326 audit(1761792115.993:10067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9736 comm="syz.5.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7356f9efc9 code=0x7ffc0000 [ 111.438344][ T29] audit: type=1326 audit(1761792115.993:10068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9736 comm="syz.5.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7356f9efc9 code=0x7ffc0000 [ 111.438404][ T29] audit: type=1326 audit(1761792115.993:10069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9736 comm="syz.5.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7356f9efc9 code=0x7ffc0000 [ 111.438428][ T29] audit: type=1326 audit(1761792115.993:10070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9736 comm="syz.5.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7356f9efc9 code=0x7ffc0000 [ 111.438451][ T29] audit: type=1326 audit(1761792115.993:10071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9736 comm="syz.5.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7356f9efc9 code=0x7ffc0000 [ 111.438532][ T29] audit: type=1326 audit(1761792115.993:10072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9736 comm="syz.5.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7356f9efc9 code=0x7ffc0000 [ 111.438559][ T29] audit: type=1326 audit(1761792115.993:10073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9736 comm="syz.5.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7356f9efc9 code=0x7ffc0000 [ 111.614660][ T5289] FAT-fs (loop5): Filesystem has been set read-only [ 111.621436][ T5289] FAT-fs (loop5): error, corrupted file size (i_pos 196, 2097152) [ 111.638705][ T9686] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 111.650709][ T9686] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 111.659894][ T9686] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 111.671586][ T9686] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 111.739797][ T9755] lo speed is unknown, defaulting to 1000 [ 111.767338][ T9686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.788215][ T9686] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.799657][ T5307] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.806813][ T5307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.814196][ T9763] loop5: detected capacity change from 0 to 2048 [ 111.821341][ T9763] msdos: Unknown parameter '00000000000000000000005' [ 111.840382][ T5307] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.847489][ T5307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.906862][ T9766] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 111.975973][ T9686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.988778][ T9784] syzkaller0: entered promiscuous mode [ 111.994285][ T9784] syzkaller0: entered allmulticast mode [ 112.121845][ T9686] veth0_vlan: entered promiscuous mode [ 112.133079][ T9686] veth1_vlan: entered promiscuous mode [ 112.148210][ T9686] veth0_macvtap: entered promiscuous mode [ 112.155626][ T9686] veth1_macvtap: entered promiscuous mode [ 112.166497][ T9686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.179073][ T9686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.195394][ T5312] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.215199][ T5312] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.226143][ T5312] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.653325][ T5312] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.801801][ T9838] loop4: detected capacity change from 0 to 2048 [ 112.836287][ T9836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2336'. [ 112.853236][ T9838] GPT:first_usable_lbas don't match. [ 112.858592][ T9838] GPT:34 != 290 [ 112.862064][ T9838] GPT: Use GNU Parted to correct GPT errors. [ 112.868249][ T9838] loop4: p1 p2 p3 [ 112.872363][ T9836] FAULT_INJECTION: forcing a failure. [ 112.872363][ T9836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.887372][ T9836] CPU: 1 UID: 0 PID: 9836 Comm: syz.0.2336 Not tainted syzkaller #0 PREEMPT(voluntary) [ 112.887394][ T9836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 112.887405][ T9836] Call Trace: [ 112.887410][ T9836] [ 112.887417][ T9836] __dump_stack+0x1d/0x30 [ 112.887437][ T9836] dump_stack_lvl+0xe8/0x140 [ 112.887470][ T9836] dump_stack+0x15/0x1b [ 112.887484][ T9836] should_fail_ex+0x265/0x280 [ 112.887500][ T9836] should_fail+0xb/0x20 [ 112.887586][ T9836] should_fail_usercopy+0x1a/0x20 [ 112.887605][ T9836] _copy_from_iter+0xd2/0xe80 [ 112.887626][ T9836] ? rep_movs_alternative+0x4a/0x90 [ 112.887661][ T9836] ? _copy_from_iter+0x170/0xe80 [ 112.887682][ T9836] copy_page_from_iter+0x178/0x2a0 [ 112.887723][ T9836] skb_copy_datagram_from_iter+0x232/0x490 [ 112.887745][ T9836] packet_sendmsg+0x25bf/0x31f0 [ 112.887795][ T9836] ? avc_has_perm+0xf7/0x180 [ 112.887811][ T9836] ? selinux_socket_sendmsg+0x175/0x1b0 [ 112.887844][ T9836] ? __pfx_packet_sendmsg+0x10/0x10 [ 112.887885][ T9836] __sock_sendmsg+0x145/0x180 [ 112.887903][ T9836] __sys_sendto+0x268/0x330 [ 112.887930][ T9836] __x64_sys_sendto+0x76/0x90 [ 112.887950][ T9836] x64_sys_call+0x2d14/0x3000 [ 112.887976][ T9836] do_syscall_64+0xd2/0x200 [ 112.888069][ T9836] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 112.888089][ T9836] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 112.888192][ T9836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.888208][ T9836] RIP: 0033:0x7f5485c0efc9 [ 112.888220][ T9836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.888234][ T9836] RSP: 002b:00007f5484677038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 112.888251][ T9836] RAX: ffffffffffffffda RBX: 00007f5485e65fa0 RCX: 00007f5485c0efc9 [ 112.888261][ T9836] RDX: 000000000000fc13 RSI: 0000200000000800 RDI: 0000000000000005 [ 112.888270][ T9836] RBP: 00007f5484677090 R08: 0000000000000000 R09: fffffffffffffef0 [ 112.888280][ T9836] R10: 0000000000000880 R11: 0000000000000246 R12: 0000000000000001 [ 112.888290][ T9836] R13: 00007f5485e66038 R14: 00007f5485e65fa0 R15: 00007ffca67a5768 [ 112.888304][ T9836] [ 112.891392][ T9836] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9836 comm=syz.0.2336 [ 113.279065][ T9871] syzkaller0: entered promiscuous mode [ 113.284564][ T9871] syzkaller0: entered allmulticast mode [ 113.296483][ T9873] lo speed is unknown, defaulting to 1000 [ 113.432982][ T9884] Cannot find set identified by id 0 to match [ 113.579189][ T9927] lo speed is unknown, defaulting to 1000 [ 113.726494][ T3409] hid_parser_main: 26 callbacks suppressed [ 113.726510][ T3409] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 113.740708][ T3409] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 113.748760][ T3409] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 113.756420][ T3409] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 113.764700][ T3409] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 113.765747][ T9948] netlink: 'syz.1.2370': attribute type 1 has an invalid length. [ 113.772436][ T3409] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 113.772462][ T3409] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 113.772485][ T3409] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 113.772577][ T3409] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 113.811494][ T3409] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 113.857830][ T3409] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 113.917744][ T9959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2376'. [ 113.936154][ T9959] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9959 comm=syz.1.2376 [ 114.051704][ T9968] lo speed is unknown, defaulting to 1000 [ 114.216348][ T9994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9994 comm=syz.5.2383 [ 114.241404][ T9994] loop5: detected capacity change from 0 to 1024 [ 114.263625][ T9994] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2383'. [ 114.279056][ T9996] netlink: 'syz.4.2388': attribute type 10 has an invalid length. [ 114.289136][ T9996] batman_adv: batadv0: Adding interface: netdevsim1 [ 114.295830][ T9996] batman_adv: batadv0: The MTU of interface netdevsim1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.325369][ T9994] loop5: detected capacity change from 0 to 512 [ 114.332177][ T9996] batman_adv: batadv0: Interface activated: netdevsim1 [ 114.340883][ T9999] loop4: detected capacity change from 0 to 128 [ 114.349613][ T9994] ext4 filesystem being mounted at /423/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.423138][ T9999] bio_check_eod: 22511 callbacks suppressed [ 114.423155][ T9999] syz.4.2388: attempt to access beyond end of device [ 114.423155][ T9999] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 114.465465][ T9999] syz.4.2388: attempt to access beyond end of device [ 114.465465][ T9999] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 114.481884][ T9999] syz.4.2388: attempt to access beyond end of device [ 114.481884][ T9999] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 114.518578][ T9999] syz.4.2388: attempt to access beyond end of device [ 114.518578][ T9999] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 114.532248][ T9999] syz.4.2388: attempt to access beyond end of device [ 114.532248][ T9999] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 114.545986][ T9999] syz.4.2388: attempt to access beyond end of device [ 114.545986][ T9999] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 114.560878][ T9999] syz.4.2388: attempt to access beyond end of device [ 114.560878][ T9999] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 114.576847][ T9999] syz.4.2388: attempt to access beyond end of device [ 114.576847][ T9999] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 114.590450][ T9999] syz.4.2388: attempt to access beyond end of device [ 114.590450][ T9999] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 114.604934][ T9999] syz.4.2388: attempt to access beyond end of device [ 114.604934][ T9999] loop4: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 114.717227][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2392'. [ 114.760398][T10011] can0: slcan on ttyS3. [ 114.817184][T10011] can0 (unregistered): slcan off ttyS3. [ 114.904671][T10016] Cannot find set identified by id 0 to match [ 115.222536][T10048] lo speed is unknown, defaulting to 1000 [ 115.341694][T10059] syzkaller0: entered promiscuous mode [ 115.347257][T10059] syzkaller0: entered allmulticast mode [ 115.436148][T10082] lo speed is unknown, defaulting to 1000 [ 115.629863][T10101] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 115.730553][T10111] syzkaller0: entered promiscuous mode [ 115.736064][T10111] syzkaller0: entered allmulticast mode [ 115.792244][T10119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.810819][T10119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.888389][T10127] lo speed is unknown, defaulting to 1000 [ 115.982941][T10143] loop5: detected capacity change from 0 to 512 [ 115.991806][T10143] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 116.000743][T10143] EXT4-fs error (device loop5): ext4_get_branch:178: inode #13: block 1024: comm syz.5.2437: invalid block [ 116.012514][T10143] EXT4-fs (loop5): Remounting filesystem read-only [ 116.019404][T10143] EXT4-fs (loop5): 1 truncate cleaned up [ 116.020510][T10140] Cannot find set identified by id 0 to match [ 116.120470][T10157] loop5: detected capacity change from 0 to 1024 [ 116.128133][T10157] EXT4-fs: Ignoring removed oldalloc option [ 116.134163][T10157] EXT4-fs: Ignoring removed bh option [ 116.206908][T10160] 9p: Unknown access argument 00000000000000000000Ö: -22 [ 116.282518][T10162] ================================================================== [ 116.290614][T10162] BUG: KCSAN: data-race in n_tty_write / tty_set_termios [ 116.297629][T10162] [ 116.299937][T10162] write to 0xffff888104283508 of 44 bytes by task 10163 on cpu 0: [ 116.307722][T10162] tty_set_termios+0xc0/0x8c0 [ 116.312407][T10162] set_termios+0x35b/0x4d0 [ 116.316819][T10162] tty_mode_ioctl+0x379/0x5c0 [ 116.321495][T10162] n_tty_ioctl_helper+0x91/0x210 [ 116.326421][T10162] n_tty_ioctl+0x101/0x200 [ 116.330832][T10162] tty_ioctl+0x83f/0xb80 [ 116.335064][T10162] __se_sys_ioctl+0xce/0x140 [ 116.339660][T10162] __x64_sys_ioctl+0x43/0x50 [ 116.344252][T10162] x64_sys_call+0x1816/0x3000 [ 116.348922][T10162] do_syscall_64+0xd2/0x200 [ 116.353495][T10162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.359374][T10162] [ 116.361680][T10162] read to 0xffff888104283514 of 4 bytes by task 10162 on cpu 1: [ 116.369290][T10162] n_tty_write+0x9f/0xb40 [ 116.373613][T10162] file_tty_write+0x378/0x690 [ 116.378278][T10162] tty_write+0x25/0x30 [ 116.382331][T10162] vfs_write+0x52a/0x960 [ 116.386648][T10162] ksys_write+0xda/0x1a0 [ 116.390881][T10162] __x64_sys_write+0x40/0x50 [ 116.395460][T10162] x64_sys_call+0x2802/0x3000 [ 116.400124][T10162] do_syscall_64+0xd2/0x200 [ 116.404614][T10162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.410490][T10162] [ 116.412793][T10162] value changed: 0x00008a3b -> 0x00000008 [ 116.418489][T10162] [ 116.420795][T10162] Reported by Kernel Concurrency Sanitizer on: [ 116.426924][T10162] CPU: 1 UID: 0 PID: 10162 Comm: syz.0.2443 Not tainted syzkaller #0 PREEMPT(voluntary) [ 116.436711][T10162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 116.446751][T10162] ==================================================================