last executing test programs: 56.711231681s ago: executing program 3 (id=5052): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000280)={0xfffff5c8, 0x9, 0x3, 0x7, 0x5, "aecc3e9cbec4ec31f904d5a722e53c7fe3a862"}) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000040000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:semanage_exec_t:s0\x00', 0x25, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000140)={[{@grpid}, {@user_xattr}]}, 0xff, 0x48f, &(0x7f0000000b80)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) 55.782015406s ago: executing program 3 (id=5064): syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file2\x00', 0x4204, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x4) r0 = socket$inet6(0xa, 0x3, 0x3c) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x88, &(0x7f00000009c0)={[{@nogrpid}, {@auto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_continue}, {@lazytime}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$eJzs289rHFUcAPDv7GZT01+Jpf5oWjVaxeCPpElr7cGLouBBQdBDPcYkLbHbRpoItgSNIvUoBe/iUfAv8KQXUU8Fr3oXoUgurZ5WZncm2d1sfnaTrd3PByb5vpm3vPfNzNt9My8bQNcaSn8kEfsj4veI6K8VGysM1X7dXlqY/GdpYTKJSuXtv5NqvVtLC5N51fx1+/JCT0Th8ySOtmh37srVCxPl8vTlrDw6f/GD0bkrV5+fuThxfvr89KXxM2dOnRx78fT4C23JM83r1uDHs8eOvP7u9Tcnz15/75fvkjz/pjzaZGi9g09VKm1urrMO1MVJTwc7wpYUa8M0StXx3x/FWDl5/fHaZx3tHLCjKpVK5cG1Dy9WgHtYEp3uAdAZ+Qd9ev+bb7s09bgr3Hy5dgOU5n0722pHeqKQ1Sk13d+201BEnF389+t0i515DgEA0OCHdP7zXKv5XyHqnwsdzNZQBiLi/og4FBGnI+JwRDwQUa37UEQ8vMX2mxdJVs9/Dm4rr81K538vZWtbjfO/fPYXA8WsdKCafyk5N1OePpH1bDhKe9Ly2Dpt/Pjqb1+2PJA1kc//0i1tP58LZpX+6tnT+LKpifmJO8m53s1PIwZ7WuWfLK8EJBFxJCIGt9nGzDPfHlvr2NCG+a+jDetMlW8inq6d/8Voyj+XrL8+OXpflKdPjOZXxWq/3rj21lrt31H+bZCe/70tr//l/AeS+vXaua23ce2PL9a8p9k4/9bXf2/yTsO+jybm5y+PRfQmb9Q6Xb9/vKne+Er9NP/h463H/6FY+UscjYj0In4kIh6NiMeyvj8eEU9ExPHVqd3ozYKfX3ny/WpQ2k7+OyvNf2pL538l6I3mPa2D4oWfvm9odGAr+afn/1Q1Gs72bOb9bzP92t7VDAAAAP8/hYjYH0lhZDkuFEZGav/Dfzj2Fsqzc/PPnpv98NJU7TsCA1Eq5E+6+uueh45lt/V5ebypfDJ7bvxVsa9aHpmcLU91OnnocvvWGP+pP4ud7h2w43xfC7qX8Q/dy/iH7mX8Q/dqMf77OtEPYPe1+vz/pAP9AHZf0/i37AddxP0/dC/jH7qX8Q9daa4vNv6SvECwKojCXdENwQ4FnX5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI//AgAA//9Lr+a0") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x1a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x8031, 0xffffffffffffffff, 0x0) getgroups(0x0, 0x0) 55.623009349s ago: executing program 3 (id=5065): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 55.60867209s ago: executing program 3 (id=5066): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000b00), 0x1, 0x55f, &(0x7f0000000580)="$eJzs3d9rU+cbAPDnpK2/v18riGxjjIIXczhT2+6Hg124y7HJhO3ehfZYpKmRJhXbCdOLebObIYMxJozdb/e7lP0D+yuETZAhZbvYTcZJT2q0SRNrtNF8PnDkfXNO+p4n73le35M3IQEMrYnsn0LEyxHxTRJxMCKSfN9o5Dsn1o9bu391NtuSqNc//StpHJfVm3+r+bz9eeWliPjtq4jjhc3tVldWF0rlcrqU1ydri5cmqyurJy4slubT+fTi9MzMqbdnpt97952+xfrG2X++/+T2h6e+Prr23S93D91M4nQcyPe1xvEErrVWJmIif03G4vQjB071obFBkuz0CbAtI3mej0U2BhyMkTzrgRfflxFRB4ZUIv9hSDXnAc17+z7dBz837n2wfgO0Of7R9fdGYk/j3mjfWvLQnVF2vzveh/azNn7989bNbIv+vQ8B0NW16xFxcnR08/iX5OPf9p3s4ZhH2zD+wbNzO5v/vNlu/lPYmP9Em/nP/ja5ux3d879wtw/NdJTN/95vO//dWLQaH8lr/2vM+caS8xfKaTa2/T8ijsXY7qy+1XrOqbU79U77Wud/2Za135wL5udxd3T3w8+ZK9VKTxJzq3vXI15pO/9NNvo/adP/2etxtsc2jqS3Xuu0r3v8T1f9p4jX2/b/gxWtZOv1ycnG9TDZvCo2+/vGkd87tb/T8Wf9v2/r+MeT1vXa6uO38eOef9NO+x6KP3q//nclnzXKu/LHrpRqtaWpiF3Jx5sfn37w3Ga9eXwW/7GjW49/7a7/vRHxeY/x3zj886s9xd+t/5/CImsW/9xj9f/jF+589MUP248/6/+3GqVj+SO9jH+9nuCTvHYAAAAAAAAwaAoRcSCSQnGjXCgUi+uf7zgc+wrlSrV2/Hxl+eJcNL4rOx5jheZK98GWz0NM5Z+HbdanH6nPRMShiPh2ZG+jXpytlOd2OngAAAAAAAAAAAAAAAAAAAAYEPs7fP8/88fITp8d8NT5yW8YXl3zvx+/9AQMJP//w/CS/zC85D8ML/kPw0v+w/CS/zC85D8ML/kPAAAAAAAAAAAAAAAAAAAAAAAAAAAAfXX2zJlsq6/dvzqb1ecurywvVC6fmEurC8XF5dnibGXpUnG+Upkvp8XZymK3v1euVC5NTcfylclaWq1NVldWzy1Wli/Wzl1YLM2n59KxZxIVAAAAAAAAAAAAAAAAAAAAPF+qK6sLpXI5XVJQ2FZhdDBOY3UhYiBO40Up7PTIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/BcAAP//8NI25Q==") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000240)=ANY=[], 0x361, 0x0) lsetxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000200)=ANY=[], 0x9, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1000000002000000fdffffff0800000004100000", @ANYRES32=r0, @ANYBLOB="07000000000000000000000000020000000000005a18c02523f9ee764a87e94a1f45b5e4705bc40850c419699167890400000000000000700fc2608caf162b8bdcd8be602caf06", @ANYRES32=r2, @ANYRES32, @ANYBLOB="06000000050000000500"/28], 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r4 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x20000009}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x10000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00') mount$9p_fd(0x0, 0x0, 0x0, 0x2004048, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',pcr=00000000000000000034,smackfsfloor=-\\%,*&%!#,appraise,uid>', @ANYRESDEC=0x0, @ANYBLOB="2c66736e616d653d002c726f6f74636f6e746578743d757365725f752c646f6e745f6d6561737572652c646f6e745f6d6561737572652c002bd359aa8d8f9e79baf9d4abdd94c5ed4ad8b65e6e4350f298c4d98ec4c142704d91352400b3ddbb500760069ff57af10e6396e70ee55733efa54e207b5a05e589c5820922f169dc83"]) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x12001}, 0x0) sendmmsg$inet(r5, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000b40)="08c4feec08f04249568d68bc00366aa9a5aada50f004beb7bd5aa198734f53c450ca96605c67c2281f95aa401d2e96217adfd0804ec4fad114ad0ff98ad8fcfc1cd75771329e960120ae3926ef24a8e4052f6813cf61569c1d90b006c82e1407ac472212d8ae8fe34925b99ba2788ed361f2727b5c91a46822ac83184a2ae4f2e56aa4f6f8b0100992fce6398466d0e8068d81623b94b7a5dd", 0x99}], 0x1}}, {{&(0x7f0000000c00)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000c80)=[{&(0x7f0000000c40)="56a22773a228cf20d86abd6771462f6943ae9baafd6cfe5ffe757006d1e8b7d799848bed3289c074d36810c9253b", 0x2e}], 0x1}}, {{&(0x7f0000000cc0)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000001000)=[{&(0x7f0000000d00)="da043ef84102e67a3237ade80223c4d6c9ced39304db9de5aa172991673d891481fdf79e0ad251288547fa47786f22f6d243db68f06c833f31625c4976e7eedbe0923ac1afb8491da517390411158f3a0dba1068619b1bd592b8636b216ad4ae62e4a7e1d9f8fe125c2eaf8aa4ac602fd09b2bd4f81d11ead1ad5b2ab5b22b58dcac0ae4a10ab801e37a380aed3c5373a6262260a7feea8818fcdc537925b7fe08b0c98b06b615be7fdb6606aec204023fae48fcc885539c1e3ecd9ad57becc6f93c45ac58e47f30286af92f0f407f34cd854b", 0xd3}, {&(0x7f0000000e00)="85c2ce67815f7e66283f4a060199396164965f4be5e9d1856bfae7ff10b719f2a44ebd70dd01d4b42f1201ddb591bb3716091560b382f0447a9fa9945392e0604e83187e3561ab1f22921326b8bd9a10989cdc0a11d512b33542f39b305519d72d70e330969339e227a8db839320bca1379dc3f1fc732cf9bb3c30521de2fc05176efe716bf9df559e9261202378f6348cd680826a6c76dd971642bfdf187c1ef2981a212d9b9395efa9865e04e7d52e87bb8f7c88ac1aba70e315374da358f05d7c52ad11996655ff7c933cd1627dd5940c02f7cc5ca23e1f8812b6c0c216deb312da", 0xe3}, {&(0x7f0000000f00)="384d590622eee76febed2d38a14ea7e16937d189e389ed4c7486f986dd6f8c0b07bdcf637df23ee7823f715924c1dafdbb100b9062f78a19e36446567ccaefdce28196748ce3e54a3c80c38c544af13f3d696bd4ef8c5b4aa2ae080e3a5fd56e6575b5553bd7ebf6ba5403765338569f1f129069c27c696658440d049b3c09864619851dfaca34b5e0070ab7315703ffa403076283a804d6786e70068a5978c168decd96416e4b5fe5e37f4aa5ac596d1ca42b676135b42854931a36eeaa14d1a9fff11814395ee9ebce4777df1568a50bb58bc1ed61c6f5", 0xd8}], 0x3, &(0x7f0000002bc0)=ANY=[@ANYBLOB="1c000000000000000000000008000000465fa8bc7f6583ca365033b6bbaf4b1e744e6c5b1337769dc225e178d61dd29ff223cdc1492d179f32517850e4fbc9f3baeea53c1b24d902145458f3ab70b988df88f2f08fc26a2a081fcfbe007712251d7776c277a2ef2bba5d1894d88bfded9684cfc481d891dfc248b5bf905dfa962b384d5f59cf2a25a4563e7eee397f786c9083fd0869f824dadcf31deda71c80fdd93d4b044e83fa9cc09fbeff7b3b8d10d00d6caab21882061fecbc59a1a3f4154344591e6bb24f09bab7f6216d027bb6ce5be66d5100"/238, @ANYRES32=r2, @ANYBLOB="ffffffffac1e0101000000001100000000000000000000000100000003000000000000001c000000000000000000000008000000", @ANYRES32=r2, @ANYBLOB="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"], 0x178}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000011c0)="e339d0ed77a6c445bc5dee8fc5e202e1e82b7cfb828d4a979b5e6f6212a54468db6a4848a4d87149ba1a8b8a5a731b", 0x2f}, {&(0x7f0000001200)="a69b881993525b1c9d60b0e85061ddc112737b13b094021052ba74b4eb2306d1b66bf0d5bd61866999ca81d576e67e9e3d349acdd86402b72c9f6fc7ce8724c52bed9eb01f0af017064d49047dd4cca7da6d", 0x52}, {&(0x7f0000001280)="1c763d308b22ba6baa7b85e26c809e4ad02080e08466b0bd1d939845f61f949a09711e58b788519872f57b083b80b26cd269143f27392d1f", 0x38}, {&(0x7f00000012c0)="79e7593a135a6328f6e3c1bd5f055ad6438e81dd6c626d1eb86d5b4ee9b831908a5993441f16e010374e4f55a1d7c6504f306db5258185491d8f5a8765f8ca7daa1dc0978b68a78abede9e75b2b3e6fe614b99224e7acc909444773fb0b2f9981342c6d256176c811db9f3a5e966d5727e214571a021bd24b081ad154cf64bf07cb908b8f34df1987bc47ce55de7e6f93d6c4a16c1f0482173ae9e913380c8e2752660d00ef158265291df65091ae6ebbce417211698", 0xb6}, {&(0x7f0000001bc0)="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", 0x1000}, {&(0x7f0000001380)="a9fe86be5f7d9187664f4492bad3dcec04fa477f", 0x14}, {&(0x7f00000013c0)="b394db1982b9595824dc159aeb3ec1db8e3e72377309eb9987af97a79f9862342304421ced20df3b8dcd6f38aefbc1d15873549f64eaac958e22091f882d6c78c2a5eb624098783cc767c3f939e1e8c96fc2efb48f1b02309f04a5844a43d32d9e68ed1cb2d0f1610af0e64ab385fc579d54ec8ac8e3fc25af76e27e587e16", 0x7f}, {&(0x7f0000001440)="4a3baa78989f47e6a416a88b335c4511479374d4a817ac8f516b079ef7b4a6ea16830f9b83d2b0c308322b8f504387fd88a0a6ae7138064fd4276dfa72a086e5ac9d8533f47c48f6063e27261cc6e9aacb3989fc1e", 0x55}, {&(0x7f00000014c0)="9d12540514174d3164dd03c3b607fc9a747a8eb675986a328d0e37f952a2fb4fccb618a397799384bcbaa97adbfa388fe48887c6dfcda959d9156a6d7fdefc26ffdbd0d8bbf7", 0x46}, {&(0x7f0000001540)="db8ef672a5d1b6ed3bacf00f7166d5e83adec38920cf30638be16cd39f3ec7b3fa8fe51a42b57e1985247bbcb0a8a91fdb2179df4ab4eb7a8335419eca1dcb198176feba87077e6275190b239380de8ba10543c5c9a1a585ef9f6b1b67c1a0c366ba680b4776dbe9d23b8136304e3e", 0x6f}], 0xa, &(0x7f0000001680)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x18}}], 0x4, 0x4891) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x4008, r5}, 0x18) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000001040)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[], 0x24, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000480)=ANY=[], 0xfe37, 0x0) 55.566324464s ago: executing program 3 (id=5067): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r0}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 55.347905672s ago: executing program 3 (id=5068): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_RMID(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x400000, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x98}}, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000340)={0x8, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000600)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) membarrier(0x40, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write(r4, &(0x7f0000000140)="e8cbcd3d0e141c53f96afb3bc1c3c856a09f31eba58da3a12d1f2384a8043983cffd5a4e1ec27d51efa2e85d346f5cb30744cb414fda80e9440dc72a8b7e70a6f2eddce0bc81f63e3aad8db367c8e044c48133552c98e500caf291ce8c", 0x5d) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES8=r2, @ANYRES32=r6, @ANYBLOB="0000000000000000b702000007000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r7 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4) 55.347510412s ago: executing program 32 (id=5068): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_RMID(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x400000, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x98}}, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000340)={0x8, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000600)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) membarrier(0x40, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write(r4, &(0x7f0000000140)="e8cbcd3d0e141c53f96afb3bc1c3c856a09f31eba58da3a12d1f2384a8043983cffd5a4e1ec27d51efa2e85d346f5cb30744cb414fda80e9440dc72a8b7e70a6f2eddce0bc81f63e3aad8db367c8e044c48133552c98e500caf291ce8c", 0x5d) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES8=r2, @ANYRES32=r6, @ANYBLOB="0000000000000000b702000007000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r7 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4) 44.124049316s ago: executing program 5 (id=5220): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180040008003950"], 0x15) r2 = dup(r1) r3 = socket$netlink(0x10, 0x3, 0xf) r4 = socket$netlink(0x10, 0x3, 0xf) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4800000010001fff0000000000000000000000002fa67aa1c568182b72c97803b32181f05a1f9c62c6dc6827a7dea56d88549b21e3ab2c854240bc", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x101}, 0x14}}, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) socket(0x21, 0x6, 0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r7 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) sendfile(r7, r7, 0x0, 0x800000009) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r8, 0x11, 0x67, &(0x7f0000000940)=0x28, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r9, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000380)}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) 43.801485662s ago: executing program 5 (id=5223): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r1}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 43.786997233s ago: executing program 5 (id=5225): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, 0x0, 0x53) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$sg(&(0x7f0000000040), 0x6, 0x200100) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x8000) getgroups(0x0, &(0x7f0000000ac0)) setxattr$system_posix_acl(&(0x7f0000000280)='\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000010000000000000002000600", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=0x0, @ANYBLOB="c1e01bcba050d67a6a1b16774c94528df8864689d5fd3310437cd185dda0799dedc0d761d94fb057cbb25c24c9dfd399f9a19a8fa981dc89fad206ef2c404b3d6ab076598ae4fd3ab78abd673bbee9ec43788811a549", @ANYRES32=0x0, @ANYBLOB="02000700", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYRESHEX, @ANYBLOB="040000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="080001", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\b\x00\a', @ANYRES32], 0xa4, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="7472616e733d660600000000000000", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 42.857943359s ago: executing program 5 (id=5230): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000b00), 0x1, 0x55f, &(0x7f0000000580)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000240)=ANY=[], 0x361, 0x0) lsetxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000200)=ANY=[], 0x9, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1000000002000000fdffffff0800000004100000", @ANYRES32=r0, @ANYBLOB="07000000000000000000000000020000000000005a18c02523f9ee764a87e94a1f45b5e4705bc40850c419699167890400000000000000700fc2608caf162b8bdcd8be602caf06", @ANYRES32=r2, @ANYRES32, @ANYBLOB="06000000050000000500"/28], 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r4 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x20000009}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x10000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00') mount$9p_fd(0x0, 0x0, 0x0, 0x2004048, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',pcr=00000000000000000034,smackfsfloor=-\\%,*&%!#,appraise,uid>', @ANYRESDEC=0x0, @ANYBLOB="2c66736e616d653d002c726f6f74636f6e746578743d757365725f752c646f6e745f6d6561737572652c646f6e745f6d6561737572652c002bd359aa8d8f9e79baf9d4abdd94c5ed4ad8b65e6e4350f298c4d98ec4c142704d91352400b3ddbb500760069ff57af10e6396e70ee55733efa54e207b5a05e589c5820922f169dc83"]) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x12001}, 0x0) sendmmsg$inet(r5, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000b40)="08c4feec08f04249568d68bc00366aa9a5aada50f004beb7bd5aa198734f53c450ca96605c67c2281f95aa401d2e96217adfd0804ec4fad114ad0ff98ad8fcfc1cd75771329e960120ae3926ef24a8e4052f6813cf61569c1d90b006c82e1407ac472212d8ae8fe34925b99ba2788ed361f2727b5c91a46822ac83184a2ae4f2e56aa4f6f8b0100992fce6398466d0e8068d81623b94b7a5dd", 0x99}], 0x1}}, {{&(0x7f0000000c00)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000c80)=[{&(0x7f0000000c40)="56a22773a228cf20d86abd6771462f6943ae9baafd6cfe5ffe757006d1e8b7d799848bed3289c074d36810c9253b", 0x2e}], 0x1}}, {{&(0x7f0000000cc0)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000001000)=[{&(0x7f0000000d00)="da043ef84102e67a3237ade80223c4d6c9ced39304db9de5aa172991673d891481fdf79e0ad251288547fa47786f22f6d243db68f06c833f31625c4976e7eedbe0923ac1afb8491da517390411158f3a0dba1068619b1bd592b8636b216ad4ae62e4a7e1d9f8fe125c2eaf8aa4ac602fd09b2bd4f81d11ead1ad5b2ab5b22b58dcac0ae4a10ab801e37a380aed3c5373a6262260a7feea8818fcdc537925b7fe08b0c98b06b615be7fdb6606aec204023fae48fcc885539c1e3ecd9ad57becc6f93c45ac58e47f30286af92f0f407f34cd854b", 0xd3}, {&(0x7f0000000e00)="85c2ce67815f7e66283f4a060199396164965f4be5e9d1856bfae7ff10b719f2a44ebd70dd01d4b42f1201ddb591bb3716091560b382f0447a9fa9945392e0604e83187e3561ab1f22921326b8bd9a10989cdc0a11d512b33542f39b305519d72d70e330969339e227a8db839320bca1379dc3f1fc732cf9bb3c30521de2fc05176efe716bf9df559e9261202378f6348cd680826a6c76dd971642bfdf187c1ef2981a212d9b9395efa9865e04e7d52e87bb8f7c88ac1aba70e315374da358f05d7c52ad11996655ff7c933cd1627dd5940c02f7cc5ca23e1f8812b6c0c216deb312da", 0xe3}, {&(0x7f0000000f00)="384d590622eee76febed2d38a14ea7e16937d189e389ed4c7486f986dd6f8c0b07bdcf637df23ee7823f715924c1dafdbb100b9062f78a19e36446567ccaefdce28196748ce3e54a3c80c38c544af13f3d696bd4ef8c5b4aa2ae080e3a5fd56e6575b5553bd7ebf6ba5403765338569f1f129069c27c696658440d049b3c09864619851dfaca34b5e0070ab7315703ffa403076283a804d6786e70068a5978c168decd96416e4b5fe5e37f4aa5ac596d1ca42b676135b42854931a36eeaa14d1a9fff11814395ee9ebce4777df1568a50bb58bc1ed61c6f5", 0xd8}], 0x3, &(0x7f0000002bc0)=ANY=[@ANYBLOB="1c000000000000000000000008000000465fa8bc7f6583ca365033b6bbaf4b1e744e6c5b1337769dc225e178d61dd29ff223cdc1492d179f32517850e4fbc9f3baeea53c1b24d902145458f3ab70b988df88f2f08fc26a2a081fcfbe007712251d7776c277a2ef2bba5d1894d88bfded9684cfc481d891dfc248b5bf905dfa962b384d5f59cf2a25a4563e7eee397f786c9083fd0869f824dadcf31deda71c80fdd93d4b044e83fa9cc09fbeff7b3b8d10d00d6caab21882061fecbc59a1a3f4154344591e6bb24f09bab7f6216d027bb6ce5be66d5100"/238, @ANYRES32=r2, @ANYBLOB="ffffffffac1e0101000000001100000000000000000000000100000003000000000000001c000000000000000000000008000000", @ANYRES32=r2, @ANYBLOB="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"], 0x178}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000011c0)="e339d0ed77a6c445bc5dee8fc5e202e1e82b7cfb828d4a979b5e6f6212a54468db6a4848a4d87149ba1a8b8a5a731b", 0x2f}, {&(0x7f0000001200)="a69b881993525b1c9d60b0e85061ddc112737b13b094021052ba74b4eb2306d1b66bf0d5bd61866999ca81d576e67e9e3d349acdd86402b72c9f6fc7ce8724c52bed9eb01f0af017064d49047dd4cca7da6d", 0x52}, {&(0x7f0000001280)="1c763d308b22ba6baa7b85e26c809e4ad02080e08466b0bd1d939845f61f949a09711e58b788519872f57b083b80b26cd269143f27392d1f", 0x38}, {&(0x7f00000012c0)="79e7593a135a6328f6e3c1bd5f055ad6438e81dd6c626d1eb86d5b4ee9b831908a5993441f16e010374e4f55a1d7c6504f306db5258185491d8f5a8765f8ca7daa1dc0978b68a78abede9e75b2b3e6fe614b99224e7acc909444773fb0b2f9981342c6d256176c811db9f3a5e966d5727e214571a021bd24b081ad154cf64bf07cb908b8f34df1987bc47ce55de7e6f93d6c4a16c1f0482173ae9e913380c8e2752660d00ef158265291df65091ae6ebbce417211698", 0xb6}, {&(0x7f0000001bc0)="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", 0x1000}, {&(0x7f0000001380)="a9fe86be5f7d9187664f4492bad3dcec04fa477f", 0x14}, {&(0x7f00000013c0)="b394db1982b9595824dc159aeb3ec1db8e3e72377309eb9987af97a79f9862342304421ced20df3b8dcd6f38aefbc1d15873549f64eaac958e22091f882d6c78c2a5eb624098783cc767c3f939e1e8c96fc2efb48f1b02309f04a5844a43d32d9e68ed1cb2d0f1610af0e64ab385fc579d54ec8ac8e3fc25af76e27e587e16", 0x7f}, {&(0x7f0000001440)="4a3baa78989f47e6a416a88b335c4511479374d4a817ac8f516b079ef7b4a6ea16830f9b83d2b0c308322b8f504387fd88a0a6ae7138064fd4276dfa72a086e5ac9d8533f47c48f6063e27261cc6e9aacb3989fc1e", 0x55}, {&(0x7f00000014c0)="9d12540514174d3164dd03c3b607fc9a747a8eb675986a328d0e37f952a2fb4fccb618a397799384bcbaa97adbfa388fe48887c6dfcda959d9156a6d7fdefc26ffdbd0d8bbf7", 0x46}, {&(0x7f0000001540)="db8ef672a5d1b6ed3bacf00f7166d5e83adec38920cf30638be16cd39f3ec7b3fa8fe51a42b57e1985247bbcb0a8a91fdb2179df4ab4eb7a8335419eca1dcb198176feba87077e6275190b239380de8ba10543c5c9a1a585ef9f6b1b67c1a0c366ba680b4776dbe9d23b8136304e3e", 0x6f}], 0xa, &(0x7f0000001680)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x18}}], 0x4, 0x4891) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x4008, r5}, 0x18) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000001040)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[], 0x24, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000480)=ANY=[], 0xfe37, 0x0) 42.737388559s ago: executing program 5 (id=5233): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x6, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) fcntl$lock(r0, 0x5, &(0x7f00000000c0)={0x1, 0x1, 0x401, 0x401}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYRES32=r1, @ANYRESDEC=r0, @ANYRES64=r4, @ANYRES32=r3, @ANYRES16=r3, @ANYRES64=r2, @ANYRES8=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r7 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r6, 0x0, 0x0}) io_uring_enter(r7, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 42.522060267s ago: executing program 5 (id=5236): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000280)={0xfffff5c8, 0x9, 0x3, 0x7, 0x5, "aecc3e9cbec4ec31f904d5a722e53c7fe3a862"}) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000040000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:semanage_exec_t:s0\x00', 0x25, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000140)={[{@grpid}, {@user_xattr}]}, 0xff, 0x48f, &(0x7f0000000b80)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) 42.521629436s ago: executing program 33 (id=5236): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000280)={0xfffff5c8, 0x9, 0x3, 0x7, 0x5, "aecc3e9cbec4ec31f904d5a722e53c7fe3a862"}) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000040000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:semanage_exec_t:s0\x00', 0x25, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000140)={[{@grpid}, {@user_xattr}]}, 0xff, 0x48f, &(0x7f0000000b80)="$eJzs3MtvVNUfAPDvvW15/Hi0P0QUBK2gkfhoaUFl4UKNJi40MdEFLmtbEBmooTUR0mgxBpeGxL1xaeJf4M6NURfGxK0mLg0J0caE4qrmvugwnZa2tB3pfD7JdM6Ze+6c8733nplz7+mdANpWb/YnidgeEb9GRHeRvbVAb/E0Mz05fGN6cjiJ2dk3/kzyctenJ4erotV628rM4TQi/SSJ55P59Y5fuHhmqFYbPV/m+yfOvtc/fuHiU6fPDp0aPTV6bvD48WNHB559ZvDpVYkzi+v6vg/H9u995a0rrw2fuPL2D19nzdpzoFheH8dt3WgSUBO92Vb7azbXuOzRZbT9brCjLp10trAhLEtHRGS7qyvv/93REXM7rzte/riljQPWVPbdtHnhxVOzwAaWRKtbALRG9UWfnf9Wj3UaevwnXHshYlOZnpmeHJ65GX9npOXrXWtYf29EnJj654vsEcu9DgEAsAL52ObJZuO/NPbkz8Vcx85yDqUnIv4fEbsi4p6I2B0R90bkZe+LiPuLlWe7l1h/b0N+/vgnvdq0zaskG/89Vzf2m6mLv3zq6ShzO/L4u5KTp2ujR8ptcji6Nmf5gUXq+PalXz5baFn9+C97ZPVXY8GyAVc7Gy7QjQxNDK3WRrh2KWJfZ7P4k5szAdkRsDci9i3vrXdWidOPf7V/oUK3j38RqzDPNPtlxGPF/p+KhvgryeLzk/1bojZ6pL86Kub78efLry9U/x3FvwquHXygSMzt/4YS3X8nxXxtV9Rqo+fHl1/H5d8+XfCcZqXH/6bkzXzO+qd3itc+GJqYOD8QsSl5Nc9X53T564Nz61b5qnx2/B8+1Lz/7yrXyeLPtlJ2EB+IiAcj4qGy7Q9HxMGIOLRI/N+/+Mi7i8SfRBKt2/+XIkaafv7dPP57kvr5+hUkOs58981CM+ZL2//HYir/rC3kn3+3sdQG3uHmAwAAgLtCGhHbI0n7inTv9kjTvr7if/h3x//S2tj4xBMnx94/N1LcI9ATXWl1pau77nroQDJVvmORHyyvFVfLj5bXjT/v2Jrn+4bHaiMtjh3a3bZb+39U/T/zR0erWwesOfdrQftq7P9pi9oBrL+lfP87F4CN6db+vyX7s7VVbQHWl/N/aF/N+v9HDXnjf9iY5vf/35v8ZB2wERn/Q/vS/6F96f/Qlu7kvv6VJ6qbBVb+PluWfId/uySqX7xYy7q2xtwrkbY85DZKZD1mfSud+w0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAu9m/AQAA//+kuOWe") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) 31.222046997s ago: executing program 2 (id=5368): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e30", 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffff, 0x20000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[0xffffffffffffffff], 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x1, 0x644, &(0x7f00000012c0)="$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") 30.348708948s ago: executing program 2 (id=5384): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_RMID(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x400000, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x98}}, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000340)={0x8, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000600)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) membarrier(0x40, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) socket$inet_udp(0x2, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write(r4, &(0x7f0000000140)="e8cbcd3d0e141c53f96afb3bc1c3c856a09f31eba58da3a12d1f2384a8043983cffd5a4e1ec27d51efa2e85d346f5cb30744cb414fda80e9440dc72a8b7e70a6f2eddce0bc81f63e3aad8db367c8e044c48133552c98e500caf291ce8c", 0x5d) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES8=r2, @ANYRES32=r7, @ANYBLOB="0000000000000000b702000007000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r8 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r8, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4) 29.969800339s ago: executing program 2 (id=5393): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x6, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) fcntl$lock(r0, 0x5, &(0x7f00000000c0)={0x1, 0x1, 0x401, 0x401}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYRES32=r1, @ANYRESDEC=r0, @ANYRES64=r4, @ANYRES32=r3, @ANYRES16=r3, @ANYRES64=r2, @ANYRES8=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r8 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r7, 0x0, 0x0}) io_uring_enter(r8, 0x40f9, 0x217, 0xa5, 0x0, 0x0) close_range(r6, r7, 0x0) r11 = dup(0xffffffffffffffff) write$UHID_INPUT(r11, &(0x7f0000001080)={0xf, {"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", 0x1000}}, 0x1006) 28.906652036s ago: executing program 2 (id=5398): bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0xc0011122) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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") r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, 0x0, 0x0) write$binfmt_register(r2, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) (fail_nth: 1) 28.517555207s ago: executing program 2 (id=5404): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_RMID(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x400000, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x98}}, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000340)={0x8, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000600)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) membarrier(0x40, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) socket$inet_udp(0x2, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write(r4, &(0x7f0000000140)="e8cbcd3d0e141c53f96afb3bc1c3c856a09f31eba58da3a12d1f2384a8043983cffd5a4e1ec27d51efa2e85d346f5cb30744cb414fda80e9440dc72a8b7e70a6f2eddce0bc81f63e3aad8db367c8e044c48133552c98e500caf291ce8c", 0x5d) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES8=r2, @ANYRES32=r7, @ANYBLOB="0000000000000000b702000007000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r8 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r8, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4) 28.319344083s ago: executing program 2 (id=5410): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="120000000800000004000000b47c000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000000000000000000000000000000000000000001"], 0x50) pipe(0x0) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e30", 0x3, r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffff, 0x20000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, 0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_io_uring_submit(0x0, r7, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[r6], 0x1}) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b000000050000000500000009"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x1, 0x644, &(0x7f00000012c0)="$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") openat(r8, &(0x7f0000000040)='./file1\x00', 0x650242, 0x64) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) syz_clone(0x10008400, 0x0, 0x0, 0x0, 0x0, 0x0) 28.286956986s ago: executing program 34 (id=5410): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="120000000800000004000000b47c000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000000000000000000000000000000000000000001"], 0x50) pipe(0x0) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e30", 0x3, r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffff, 0x20000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, 0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_io_uring_submit(0x0, r7, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[r6], 0x1}) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b000000050000000500000009"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x1, 0x644, &(0x7f00000012c0)="$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") openat(r8, &(0x7f0000000040)='./file1\x00', 0x650242, 0x64) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) syz_clone(0x10008400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.711550611s ago: executing program 1 (id=5919): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x2, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_STATUS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) ioctl$EVIOCRMFF(r0, 0x40085507, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240), 0x80802, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x73}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xc}]}]}, @NFT_MSG_NEWFLOWTABLE={0xd8, 0x16, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_FLOWTABLE_HOOK={0x88, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x57f1faeb}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'erspan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'team0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x150}, 0x1, 0x0, 0x0, 0x20000000}, 0x10008081) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf252001000000000000000000000000000120010000000000000000000000000001000000004e2100020200000024000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000fe32000000fe80000000000000000000000000001b000000000000000004000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000041050000000000000400000000000000ffffffffffffff7f0000000000000000000000000000000000000000000000000000000028bd7000003500000a00049d00000000000000006000120061656769733132382d6165736e690000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r3}, 0x8) syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000004c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x269, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x30, 0x50, 0x8, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0xbe6f, 0xc, 0x1, {0x22, 0x462}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1, 0xe7}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x4, 0xf8, 0x2}}]}}}]}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x201, 0xef, 0x2, 0x1, 0x40, 0xe}, 0x140, &(0x7f00000007c0)={0x5, 0xf, 0x140, 0x5, [@generic={0x6e, 0x10, 0x2, "2566e23c698adbd7e27e02b6bb7ad1403a4fd8a2262429efb557a1cb458605e71d0bb3c54d09cf63b83b1c0dbe8a4803ecc30e44338b7e28721efbeb86d6b177a3bd2188fe16b1a3673ba9cc0e4ebed43bd828a2b6346e599b1a22c351ddef84ef2748f5f80d93bbdc80f5"}, @ptm_cap={0x3}, @generic={0x3c, 0x10, 0x2, "ab33542b0704a3b7763200382b23a92596e7b59d1cb589cf29a341f374ee6b74ad630d0fe6c42d5ae57d3d7c670f0a9f6685d53723f62e33d6"}, @ptm_cap={0x3}, @generic={0x8b, 0x10, 0x2, "4b61f2327224a21abde716a4b4796951ad702bc532aba60e1b7bab18bf45e9d03539088cd85f45a68ad209efa5474d04e4696a76756f5279c016892e27f379992eec4200979f69bc28ad62b90396acc80a3d777518e01d4dea2fa35bbfc82b8e99bdcae4ba618865482345e86655576adbc644b2ef847e29b5e8148f55ca167a693d687617404a65"}]}, 0x8, [{0x91, &(0x7f0000000540)=@string={0x91, 0x3, "03a4a645788ecfe2a37fbdbdaa3561b6405ecb3205618c02c165068fdc4e27454e08c95c11bdc9089dbe145ea1b995264f5354c0fb8653fd6f7e49be0aac6578b5a4c1398d417cae69304be1e00f0fe7a8ca332612f7b601e549d8adef128bb79736a3396ecfe6b80490aa737f846cd44a970637188aaf1ade86da408f0306caf0045af0d8a13e45be5e14c7fea528"}}, {0x34, &(0x7f0000000600)=@string={0x34, 0x3, "ef9f58e15cf87484a31ffea444dc91f3c89578fcb9386b7c3c08b15b10852eb7366d21aaa9a03ed507c741a413eebe3034c3"}}, {0xa2, &(0x7f0000000900)=@string={0xa2, 0x3, "f0b45beef7b5040218277a23448290ef7a80659ea79b73d7881461de505bf4186662452740137e3b2a1c9d3ff478d169f39666a055bad820ef8242c8b4dcd7b6346a51fe90b90bfa7c0b97f3b155dc75e3248c72cb401c35adb00718477c93a541deb5f14d6a77f87fb4b2890e8ea2a6326a547fe32f1eb60cfc17941187b781358219f0990334cd3457892d03851aa7ef9e01980efe5a6e9b61bcc3c44fa41d"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x140a}}, {0xd9, &(0x7f0000000b00)=@string={0xd9, 0x3, "923795f3149a9ac87a65e2dd53e3b70efbcf4b1fc607a8007cb2fd453061f57c59b578be963feba7cbbf5007bb098d786f81859eebe8720e93ab0852ec78b7f6ef5e79f6b4d28b47a718e1e5bd52ad64a0f89d17521d2c3c092f315f50b162a7e8ecf6a580e59569d4584863752ddd5a25c9529e0c9a923faa8777d1ade014edc023f6e6c62256078d7544f8e8a5a0920c926e38e8f321be5919eee8c462ef1ae23271058419ee6ee7ab58c44972f2247711ff400b193ee3559d59dada00926b69a0adc5b6eb29450a48b7463e3d31a3370738438bbbc1"}}, {0x4b, &(0x7f0000000c00)=@string={0x4b, 0x3, "5b1f831458de77ff8000c2a968f43da97946c2276cd08242d75225ffb8d96cc98c74fdeebe85295533fa62ad5e034bb562a1fc1d9830f6aa52b65330eec9b9369e4e690b0c6b4e95dd"}}, {0x3b, &(0x7f0000000a00)=@string={0x3b, 0x3, "57bf7ebea3712bc2e5c39f774efa8e738a842dce00447a55cb5d4cdbfbfdc62be2ab8c5b479eaef4ee246a3456f81cf2afe71cd6dc5d7e7e7f"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0xc0c}}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) 1.384636957s ago: executing program 4 (id=5928): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x3, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r2) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012) 1.360808859s ago: executing program 4 (id=5929): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='mm_page_alloc\x00', r0, 0x0, 0x5}, 0xfffffffffffffff2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000020000000000000000000f300000000000000"], 0x48) socket$tipc(0x1e, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1.333893842s ago: executing program 4 (id=5930): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffa}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) rename(0x0, 0x0) 1.322995632s ago: executing program 4 (id=5931): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000001a000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000100000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="010100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000200"/20], 0x50) 1.246099539s ago: executing program 4 (id=5932): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x7, 0x9) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000181100004256b6ea2d8539e6e3708d962dd59586606a5dc8592555f99d56a52ffb92ec3a15894cc905314b9ac0ab8fa87ed40b5fe62bc5c9e4940b080b26ce54f6c7d4d4faa870b276d4e526106bac9776b2", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f00000000c0)='syzkaller\x00', 0xd2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) write$P9_RWRITE(r4, &(0x7f0000000040)={0xb}, 0x11000) read(r3, &(0x7f0000032440)=""/102364, 0x18fdc) sendto$packet(r4, &(0x7f00000003c0)="93d667313daa68f2b91a4260c929399d13fceaaa78e9a7c2f52f863298baac9c5e736a5899a2a0f7ecd3a55f41418d07586062b3da95f0d3a9dee3cbcd4525b505b1809c80f97dcce837f33b7304281fadbbe2cf134d23eb684e3115c796457cc54e36dd44d808662152bda5417975dd5076bef32237ad024450a44a8302f5ba7443a3d40488950d160d0fdcac6518763aa487ccec5a2ff459a17d764bc05d5ef866458d93a9bccd8a1237396dd5f8f7f9e122983e54c1e83734b66fb773c0eb4c7001caf15d92cca4a0c658229b56e26bccc1ebae507e8a", 0xd8, 0x8810, 0x0, 0x0) write$binfmt_elf64(r4, 0x0, 0x78) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe9a, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) 1.055455764s ago: executing program 7 (id=5938): syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file2\x00', 0x4204, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x4) r0 = socket$inet6(0xa, 0x3, 0x3c) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x88, &(0x7f00000009c0)={[{@nogrpid}, {@auto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_continue}, {@lazytime}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$eJzs289rHFUcAPDv7GZT01+Jpf5oWjVaxeCPpElr7cGLouBBQdBDPcYkLbHbRpoItgSNIvUoBe/iUfAv8KQXUU8Fr3oXoUgurZ5WZncm2d1sfnaTrd3PByb5vpm3vPfNzNt9My8bQNcaSn8kEfsj4veI6K8VGysM1X7dXlqY/GdpYTKJSuXtv5NqvVtLC5N51fx1+/JCT0Th8ySOtmh37srVCxPl8vTlrDw6f/GD0bkrV5+fuThxfvr89KXxM2dOnRx78fT4C23JM83r1uDHs8eOvP7u9Tcnz15/75fvkjz/pjzaZGi9g09VKm1urrMO1MVJTwc7wpYUa8M0StXx3x/FWDl5/fHaZx3tHLCjKpVK5cG1Dy9WgHtYEp3uAdAZ+Qd9ev+bb7s09bgr3Hy5dgOU5n0722pHeqKQ1Sk13d+201BEnF389+t0i515DgEA0OCHdP7zXKv5XyHqnwsdzNZQBiLi/og4FBGnI+JwRDwQUa37UEQ8vMX2mxdJVs9/Dm4rr81K538vZWtbjfO/fPYXA8WsdKCafyk5N1OePpH1bDhKe9Ly2Dpt/Pjqb1+2PJA1kc//0i1tP58LZpX+6tnT+LKpifmJO8m53s1PIwZ7WuWfLK8EJBFxJCIGt9nGzDPfHlvr2NCG+a+jDetMlW8inq6d/8Voyj+XrL8+OXpflKdPjOZXxWq/3rj21lrt31H+bZCe/70tr//l/AeS+vXaua23ce2PL9a8p9k4/9bXf2/yTsO+jybm5y+PRfQmb9Q6Xb9/vKne+Er9NP/h463H/6FY+UscjYj0In4kIh6NiMeyvj8eEU9ExPHVqd3ozYKfX3ny/WpQ2k7+OyvNf2pL538l6I3mPa2D4oWfvm9odGAr+afn/1Q1Gs72bOb9bzP92t7VDAAAAP8/hYjYH0lhZDkuFEZGav/Dfzj2Fsqzc/PPnpv98NJU7TsCA1Eq5E+6+uueh45lt/V5ebypfDJ7bvxVsa9aHpmcLU91OnnocvvWGP+pP4ud7h2w43xfC7qX8Q/dy/iH7mX8Q/dqMf77OtEPYPe1+vz/pAP9AHZf0/i37AddxP0/dC/jH7qX8Q9daa4vNv6SvECwKojCXdENwQ4FnX5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI//AgAA//9Lr+a0") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x1a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x8031, 0xffffffffffffffff, 0x0) getgroups(0x0, 0x0) 965.327632ms ago: executing program 6 (id=5940): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='mm_page_alloc\x00', r0, 0x0, 0x5}, 0xfffffffffffffff2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000020000000000000000000f300000000000000"], 0x48) socket$tipc(0x1e, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 918.481725ms ago: executing program 0 (id=5941): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffa}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) rename(0x0, 0x0) 902.881966ms ago: executing program 1 (id=5942): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='mm_page_alloc\x00', r0, 0x0, 0x5}, 0xfffffffffffffff2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000020000000000000000000f300000000000000"], 0x48) socket$tipc(0x1e, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\xac\xed\x00\x00') inotify_init() socket$inet6(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 827.500333ms ago: executing program 0 (id=5943): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf006e76e8696d0000000f0001006e657464651df7dd4f9267e886ff8d6ba00c97d941a6911482c800000000b75d7ce04f384d87ecff2306cc4cd7000000009d758fa4402197f9b56d79dde773cf7a6ec63cbf69f0b23d51105ea24947457ae120210ee7a88b2e16f636a9d471a7f5bd1e3162773e99"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80100}, 0xc, &(0x7f0000000500)={&(0x7f0000000b40)=ANY=[@ANYBLOB="0573025ee99ead2a6bdb8a88011100", @ANYRES16=r1, @ANYBLOB="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"], 0x188}, 0x1, 0x0, 0x0, 0x4040}, 0x48010) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x23, 0x803, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x80, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000008c0)='workqueue_execute_end\x00', r8}, 0x18) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r10, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 665.933056ms ago: executing program 6 (id=5944): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x800000000800, 0xfffffffc, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800e0001006970366772657461700000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x48}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000001300)=@gcm_256={{0x304}, "67c3f71b0f188109", "2c9e910757c2725dd5795f705ac44b9d43498e33fe93a0c9001c5c65f7107d0d", "ddfb00", "5a3e2c1b40238e79"}, 0x38) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "54164ace030000f5", "faad50724acb18aba4e3bc654d684ad9c694f3e96ca4b72643dd3689727968e9", "5cb6d03a", "29a78ab9b0a4e8ae"}, 0x38) 647.096927ms ago: executing program 0 (id=5945): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x6, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f00000000c0)={0x1, 0x1, 0x401, 0x401}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32, @ANYRES32=r0, @ANYRESDEC, @ANYRES64, @ANYRES32, @ANYRES16, @ANYRES64=r1, @ANYRES8=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r4 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r4, 0x40f9, 0x217, 0xa5, 0x0, 0x0) close_range(0xffffffffffffffff, r3, 0x0) 641.020888ms ago: executing program 6 (id=5946): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b000000050000000200000002000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = dup(r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r3) 625.137189ms ago: executing program 6 (id=5947): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x9, 0x0, 0x7ffc0002}]}) prlimit64(0x0, 0xe, 0x0, 0x0) (fail_nth: 9) 612.76227ms ago: executing program 1 (id=5948): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x40, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0xfffffffc, 0x0, 0x20200006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4800) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r2 = memfd_create(0x0, 0x1) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000380)}, {&(0x7f0000000480)="a8a90d1bc4094f27e1711de6a70364e44753947cc348d2747aa816c1a960eb380b5349ffcd075335b2725b701d5f03da16e9cf7d56a11cf9771b9ab850d4440f89e7fc477b06d086dc05ee717680fcb28ce12213ba10b7075c087b237b2a48990cc9e537677d0b4a8af3af7cd75c78b67e48f2f2739eaf0422c7632f6847c1a4066c6234ef30b98484b2ab4730fda02844576fb246b5a5acdb858cab13f7cd7ec7917b99537f7b37356677f190911050257900c2bcfe8150e8bb6d2d7d5a40b24eda46442c8d23495c77052cac36adf2d39ecf862ae9d5546b46b7fff89ef505d2ff", 0xe2}, {&(0x7f0000000580)="c29d96efe4fd82632576f3a1691abbb4b6774c301fcc5fee84ea123ded062989552ac36aec84ada503cd89c7104864e8d55b4e883e774b5995b0cd7d8f35f83515cd3f28abf1d8f241a4329b8e705ab324a1940f9721cb2bc04f976273a3716510ce82015167114d1f60ff91953565348f02f603bf1476718ee33089243a203564c5b85477c70113d7359b678954cc83416ac58eeb25dcca03000000000000008b1ea6327954327b1deff28aee6f6f4ef8da7583aebc681e3e1e610acdf0fb3b81e65d", 0xc3}, {&(0x7f0000000040)="5d7abc3e5de56afce793dd6d3d68d7681576ea0d02df3a6746d92de527ab822054078924d0d19e5d12517367925bf92d6670099f8c6abd0d3c5cd96a999a1e18956f765779", 0x45}], 0x4, 0x2, 0x1, 0x10) sendfile(r1, r1, 0x0, 0x24002de8) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x40000004, 0x0, 0xffffffff, 0x18, "28f5c9ea1f1ae4be4111ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba7663c435aff94793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d541", "07a9310978042a8bfe1406584a128d7469166f4f07b84819e7df4af14e1df82d", [0x6, 0x9]}) ioctl$LOOP_SET_STATUS(r1, 0x4c02, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x37fffe, @remote}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r5, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) creat(&(0x7f00000001c0)='./file0\x00', 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000140)={0x3, {{0x2, 0x4e21, @local}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}}}, 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='attr/prev\x00') 549.371195ms ago: executing program 7 (id=5949): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x3, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) quotactl_fd$Q_SYNC(r2, 0xffffffff80000100, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r3) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) 276.799818ms ago: executing program 4 (id=5950): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x8}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000a00)={0x0, 0xfffffffffffffe7f, &(0x7f00000009c0)={&(0x7f0000000640)={0x2c, r2, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x141}, 0x0) r3 = syz_io_uring_setup(0x328, &(0x7f0000000000)={0x0, 0x6fa9, 0x10000, 0x4}, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x4000, &(0x7f00000001c0), 0x1, 0x40}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r3, 0x2, 0x10a5, 0x3, 0x0, 0x0) r6 = syz_io_uring_setup(0x3d96, &(0x7f0000000480)={0x0, 0xcdb3, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r10 = socket(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bind$inet6(r10, &(0x7f0000000000)={0xa, 0xe64, 0x3, @empty, 0x2}, 0x1c) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r11, 0x0, r9, 0x0, 0x6, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000280)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file1\x00'}) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) 276.100548ms ago: executing program 0 (id=5951): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x101101, 0x0) write$vga_arbiter(r0, 0x0, 0x0) 257.097869ms ago: executing program 6 (id=5952): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000b00), 0x1, 0x55f, &(0x7f0000000580)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000240)=ANY=[], 0x361, 0x0) lsetxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, 0x9, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1000000002000000fdffffff0800000004100000", @ANYRES32=r0, @ANYBLOB="07000000000000000000000000020000000000005a18c02523f9ee764a87e94a1f45b5e4705bc40850c419699167890400000000000000700fc2608caf162b8bdcd8be602caf06", @ANYRES32=r2, @ANYRES32, @ANYBLOB="06000000050000000500"/28], 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r4 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x20000009}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x10000, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00') mount$9p_fd(0x0, 0x0, 0x0, 0x2004048, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',pcr=00000000000000000034,smackfsfloor=-\\%,*&%!#,appraise,uid>', @ANYRESDEC=0x0, @ANYBLOB="2c66736e616d653d002c726f6f74636f6e746578743d757365725f752c646f6e745f6d6561737572652c646f6e745f6d6561737572652c002bd359aa8d8f9e79baf9d4abdd94c5ed4ad8b65e6e4350f298c4d98ec4c142704d91352400b3ddbb500760069ff57af10e6396e70ee55733efa54e207b5a05e589c5820922f169dc83"]) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x12001}, 0x0) sendmmsg$inet(r5, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000b40)="08c4feec08f04249568d68bc00366aa9a5aada50f004beb7bd5aa198734f53c450ca96605c67c2281f95aa401d2e96217adfd0804ec4fad114ad0ff98ad8fcfc1cd75771329e960120ae3926ef24a8e4052f6813cf61569c1d90b006c82e1407ac472212d8ae8fe34925b99ba2788ed361f2727b5c91a46822ac83184a2ae4f2e56aa4f6f8b0100992fce6398466d0e8068d81623b94b7a5dd", 0x99}], 0x1}}, {{&(0x7f0000000c00)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000c80)=[{&(0x7f0000000c40)="56a22773a228cf20d86abd6771462f6943ae9baafd6cfe5ffe757006d1e8b7d799848bed3289c074d36810c9253b", 0x2e}], 0x1}}, {{&(0x7f0000000cc0)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000001000)=[{&(0x7f0000000d00)="da043ef84102e67a3237ade80223c4d6c9ced39304db9de5aa172991673d891481fdf79e0ad251288547fa47786f22f6d243db68f06c833f31625c4976e7eedbe0923ac1afb8491da517390411158f3a0dba1068619b1bd592b8636b216ad4ae62e4a7e1d9f8fe125c2eaf8aa4ac602fd09b2bd4f81d11ead1ad5b2ab5b22b58dcac0ae4a10ab801e37a380aed3c5373a6262260a7feea8818fcdc537925b7fe08b0c98b06b615be7fdb6606aec204023fae48fcc885539c1e3ecd9ad57becc6f93c45ac58e47f30286af92f0f407f34cd854b", 0xd3}, {&(0x7f0000000e00)="85c2ce67815f7e66283f4a060199396164965f4be5e9d1856bfae7ff10b719f2a44ebd70dd01d4b42f1201ddb591bb3716091560b382f0447a9fa9945392e0604e83187e3561ab1f22921326b8bd9a10989cdc0a11d512b33542f39b305519d72d70e330969339e227a8db839320bca1379dc3f1fc732cf9bb3c30521de2fc05176efe716bf9df559e9261202378f6348cd680826a6c76dd971642bfdf187c1ef2981a212d9b9395efa9865e04e7d52e87bb8f7c88ac1aba70e315374da358f05d7c52ad11996655ff7c933cd1627dd5940c02f7cc5ca23e1f8812b6c0c216deb312da", 0xe3}, {&(0x7f0000000f00)="384d590622eee76febed2d38a14ea7e16937d189e389ed4c7486f986dd6f8c0b07bdcf637df23ee7823f715924c1dafdbb100b9062f78a19e36446567ccaefdce28196748ce3e54a3c80c38c544af13f3d696bd4ef8c5b4aa2ae080e3a5fd56e6575b5553bd7ebf6ba5403765338569f1f129069c27c696658440d049b3c09864619851dfaca34b5e0070ab7315703ffa403076283a804d6786e70068a5978c168decd96416e4b5fe5e37f4aa5ac596d1ca42b676135b42854931a36eeaa14d1a9fff11814395ee9ebce4777df1568a50bb58bc1ed61c6f5", 0xd8}], 0x3, &(0x7f0000002bc0)=ANY=[@ANYBLOB="1c000000000000000000000008000000465fa8bc7f6583ca365033b6bbaf4b1e744e6c5b1337769dc225e178d61dd29ff223cdc1492d179f32517850e4fbc9f3baeea53c1b24d902145458f3ab70b988df88f2f08fc26a2a081fcfbe007712251d7776c277a2ef2bba5d1894d88bfded9684cfc481d891dfc248b5bf905dfa962b384d5f59cf2a25a4563e7eee397f786c9083fd0869f824dadcf31deda71c80fdd93d4b044e83fa9cc09fbeff7b3b8d10d00d6caab21882061fecbc59a1a3f4154344591e6bb24f09bab7f6216d027bb6ce5be66d5100"/238, @ANYRES32=r2, @ANYBLOB="ffffffffac1e0101000000001100000000000000000000000100000003000000000000001c000000000000000000000008000000", @ANYRES32=r2, @ANYBLOB="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"], 0x178}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000011c0)="e339d0ed77a6c445bc5dee8fc5e202e1e82b7cfb828d4a979b5e6f6212a54468db6a4848a4d87149ba1a8b8a5a731b", 0x2f}, {&(0x7f0000001200)="a69b881993525b1c9d60b0e85061ddc112737b13b094021052ba74b4eb2306d1b66bf0d5bd61866999ca81d576e67e9e3d349acdd86402b72c9f6fc7ce8724c52bed9eb01f0af017064d49047dd4cca7da6d", 0x52}, {&(0x7f0000001280)="1c763d308b22ba6baa7b85e26c809e4ad02080e08466b0bd1d939845f61f949a09711e58b788519872f57b083b80b26cd269143f27392d1f", 0x38}, {&(0x7f00000012c0)="79e7593a135a6328f6e3c1bd5f055ad6438e81dd6c626d1eb86d5b4ee9b831908a5993441f16e010374e4f55a1d7c6504f306db5258185491d8f5a8765f8ca7daa1dc0978b68a78abede9e75b2b3e6fe614b99224e7acc909444773fb0b2f9981342c6d256176c811db9f3a5e966d5727e214571a021bd24b081ad154cf64bf07cb908b8f34df1987bc47ce55de7e6f93d6c4a16c1f0482173ae9e913380c8e2752660d00ef158265291df65091ae6ebbce417211698", 0xb6}, {&(0x7f0000001bc0)="a405bc81c0a873c85b14880496d3e908836a5927e3644207a33488b0e26d19b6b019a44ec004ecf0c6d0a0c55681c2458a113cec79585de37597d9d459e42905a5364a3585ffbed1fa4be978b1741e5df084519198d206ea19feb224d199246a91775b2c94c8d100520733169858789efd74af5356b9deaea8991adf36908c7f13e3edea68f4ac8b1c1cc2ccd6c9be232dee17dfbe876e4564ddd093a3587e6032c1c8acfcb9201a2c4d83312916599b3807f90af272378a4a34c9cc7d5325a0651416bf7db6f7cbd64bd8c4ba5b65de49f1781cab2a8174949a1627a12f3a6b88310a154021b6e6b5130e5b7d4e36b13890a0721cab45def8b3aa68a950c888643724cee5842e3460bd886bd0b2a802df1720214d124f0f5074a8da60b2704ab86bbbba05a577b682b7e41cb2f2c0d42a6404c85591bb58e09b8e024bc01a8dc75f87236a1796917e426f3ed71111c8756d04d25a4b2bab70ab6bf468c87b6ca6f501255d3fad73482736cf9b0ecaaf8d4be305a719ab3e81f05204361939fc05ae31cce6eefed4ce3d33235054e84407657b60dfe4fde80cce899436ea08e65c5a0dd20d7401559f9ef02af7cb4e6121f021cd06d3fcae9c0ab9e69e48cfc7f687f1b13b83fc901d8f54e0ad8d8a74f0bbb5ed85ce0628388b705a490479f439d05771e729d59f342c257fcf2ced1909fee3bdfb3e82017fd76289270ee37b287841536cb4bf87a4ca0ac2d42b6d817b0a208aa357034f79d25da929f5622aaff464166d3d8f08170968f5ccf82e35c79ec8a3a1fee3e3019978d565d4656e72bc9885913807e1b8b1aa805b7212ab6c2d69a20956d37aa8a059075b4e96b5cd31eec47ace1386c0f8af01c751d1fed7001de589a04751a8d0d8183cb5c47bc8329aa30a930a710f22b6a885f95fc30d429aab2543d2736ca7128d077a5a8d7a529a015f9eb5f833f6463a095448f96aadeba6a5145f1b5452c3c1c41b36e0d97c1cb596d8d34fb6d020523e16e7cc3ba6da486a1932a529376e8a703a0c9d57dda61ee2325a2244fa5847230828a6e350af16f9556f3a7c04bfc9d74d8c20dad2aae0771c59af4f03088c9f81a91b83228234c6a33e09bc6e978715f9ccd39592c99d419b22d99b529617058ed4ab1c28110f41eeb123a22e300a250663b666d1b309c457e598f60ff4f6249b859eff132eb531d616ff95631954d023fb77e391fb4e26388a3437310b2ab9045175cdee533cd7c9dd64fb68d20fb4389c8a6a92bb228b0157ca088ded8b0bfc89efdfcdfaf034c6eceb0d9d2401699f862623956505c2bbd551b6dce6e99f1843d0fb7e24f54c8a4a26a39febaf0384c1efee6cd349e55288a7438a215fd08ecbc32cbc82c4cf4117543f08d4576c7713ed7b6d72c13768ee00e25d5bbfdf587e1402d33d8602df1a67f1ce8f8f322cee8501f122bd8afaab0ed86c2fb69526afad10fba0b1b374cbf5b909e9a7d46f48a0a374d3beb8c2345c99104e4515a06ebc8f4b7f4f6c47c35b650bace01c7f830d7c7399f839178de64fc8ad003612206db44a8faf474659657058981c040716ae1641679b69f05ebbca9f25ee7f3ea57781031b9fa52987040694da341f1c2e016a3105c07a66d2f56d635e9f08e26d632832355c206ee458638163525f716afcab78528b283ba7a49db71d7f747c4bf3538c376f5b96357ef10fe3413835ce1101ea439fc360110a1e53a1b200d48398ef0b515cea2da431781ba35d14950a94f5c7608d58d9b32676f6b15951cb3b212f1518980509dc5aa8f5eb63393ae6f9669dd49d24b8d84e5e380899e37a255933ed97c8d2ea15ff609c2ef4d2cb06882a2db1368a86c481c5da5b28bdbc3b84467dbc3dd8ea685d94079bbe7f213dc59a35696281c76a0856be53d0e84425675e2c89924ea85109ea0e91854dc233fb405e2a07cba0f5a86879e5389dae239ad099752d3ea8fa1a2962263be84b113a094ba15d3ac80322569dace0c3f4c84a297c4147ae2c8974249e6d83a56b98d435dc3bf9b40607db67577788ede5106a10da2d84623f3b3c07b60ceea26ff32e844eda5ea7e6ca6caffd399d4689ab9cff55271b68a1c40c73f16355eb9c5eed2baa2edc5d41f7acbf65a6af5a9e85e962f0b7945344c5c0c39bf71af8d7f15eb6951adb53da5b93378ede8a7c7c0ae1778b9321286fde7bed49e70c1da56a14c506377d1a5a92588a82fbff829d8e3245adf18078a1db04899932c7a0d1a9b7f1b93ef3a6c6eb4abbefc67a17fd364099d8bb6c419b2e5bd6e54d85fcd7c9275981e9148cf9b62a761ac526abfc7044f7e010dd7c9695afb15220b9a7e64ec60ea3572ef07305932b77a73bdb5608a085899b0da5fe24692e037dc85f470144bec2747a5e3b12d93dd19ea496c5d94d1ec48c83400d6b773400747c8f049326ab78759774c0fa05dc2da58c2c47e67531a0ed80882fead1018a3259ba748a15ce0516a1823b97326fd1906b375800872060074f4b42995b2e23b70620c59b3062b57cdfd0fbe86278e11a6b9643ca45eaee04767189594ca21ad016bf4a8d0cccbb2a56823979fdcf8efce8e0a13d5920176221aabe8c0a742ee010948d3284f9a53a495a2bc752fa3af28393dbf2d9cc0a5143fd8321933fa65200b4fdf69cde6e75e0251aea8c93df7e31002230fc14f049bbfea2f817c6a50e97f2b1859b72a8179a6440185b8a0d7bde76e36a9544cbe12f1958d0999bc636265d191ba2d6efeb1cd40f077a2882d4660d84af60704854c222b045fde7ce56eb67c9c119ac48cc572336b5d3f01939122ab39e63c021a6b4406edb246703688dd83d82efc1d2fd28498b52416fae6af64d82bfb3910f4dc4ce0cb0bbd0dd5436d7d02c35645c5abb55521e01b2a5aba5eb312fac0b9039de1f0b37f01985cfbddb8a724f94c54cac5c3cf60849dcb8169f6be68d61f3d793f84746ecee32e3e7853f8f68044ef3c062a26b4b6f1add3aae1a779474b03a8d8e1fec8aedf155eb5b8439a86ee7e5a51e581658221e30ce7dbfdf6e2871909e4f0495d7d67beb9cd66a36f6024b6e641691fb8299c1a4913581e4ca4864298f3b4044a2f4bdd51baf209a5c4e83bf88f604a38c8962414e24945ab57b915b2db8036bde607507d13ed7ab08e15a5ce1bbd9dabb17adf501e8d70eb8f9bc2649eeb9e6672610d3e1f8797aad07174f96274601069c0e3f44e3e0de08785ce0a2266df58145ec76c93d4fc77e76068aac00e1e5ed8d6f82eafcb01d4af9f0e09bc8c0c9530227213aaa7e57db248028ad9f1a11141dbe11fb05c1ffa3ef8246d4dc470ef8937c36728b2a80b493789559ce9079b6be7e9e1b3f85c7b0c90b9d3e03fcfd996e2621fe004a4ad949f1900b887681656c085deb2f25ca2497735d562f77a5b973f334f0190bcbac2a52c812d7c9016566d263cc3e14c4560d656d1822a39b6fb079d1391e6705de7082ae83bb03933fdce74068f7a1f967669fc7bd0c1898e332db62f64c1a313823f0718047a290ffbddfa707f36fd3c0f82a165b84b4f1a0602645e8b36d72806010578a8a07147175a1ee4ac5620ebe79e94768eff8df9dccd3359d5dff83b4f76478b5b22ee81d031a53844eecaf38c6cbc9ad5c46deccbce45ae9b4bdcac993c64804d17e94ba6d3b394cee48e218fcca35691b7a3e7817864be93987b1c076edaa8f602e887da6fd7283f54bde12c4e03c63657e4c4a9312b475ec6cba2c0c23c6f29021fdb03f19cb0c2f30f6556a82cfaf16c0669bea3bc53975a1755eeae31fb9932580ef962c0ad45bff992d9f01e5c15a1db6ef974abae80ccd7dc8a50126cfbb8eef0a8a8eb4805395fb7a8fab103ca2a78e813032d29bed314a674e4b45e5162271bb0162a9e0b52c8959aab38fc184dc7a667aa97c7e722a65d60c678f2dec80378a6105b77a699738bae489a093cacfa9092e4bbc9e6a60be5c4239723d6d928468ff0e215931b7b4fe46539131b91d0c48920aeb925bfaf4909223ad85873602f67ab2e643c1c375c486b91037bdb8e6baca411d31c568f6ea2f4b615caf1d80db8756ca2eca18902a1c5790d1fd55afce6a1cc7afd3bcc954194f8d3d454a6bd9b915fdb0260ab7b41cedbe8fb25a75ffd76154758b870b1bd6932f6fca27d58459fb37cafa754565e030b8fb00a11d146bcc9e95ffdcb42ca5355ab351d4d4746e3665f96dd47d46d4423f29cbb9285d31ac8db4ca9e6f446b1fb699b2240dfa898e1d02c1b755e1daaba2745dbbdbe4ae3652c3eb81d8b4ab73c6668a8642e039dd75bb933681733c7980b1d087f0e804333ed5e26f75a83d920c5c965d0e86f06eb3b33f63c725fc09f77e560575b64462046d7462f0d7efb7d3d8d3491dca283a12df012fbbedbba87e313978d7621cbf9a99b03443d5d5dd439a3ed2295b5cb98be293d42770d477b350558eba4daebcf4272d4dcc878e950d43ffe572b3e8bea1169c82f48f1fe2fde983231727be14ffb26df1d44b7a65f1900d4714e23b10ad43be6e9f07e60bfc4ae908a0ec0aa4e57052ac36bc538abf182a891ec411dd5094e1ddef790de299c0329d1e678723ab526627008a6a9b35d04bc9696777fdb8bce4c1f3d9c63bcfcd5919bff7354fc793a437153fc4fa65369adeaa7210b90aaec284af78b5903420844076da2af3c6828810ff267462493b40bf927a76b8b3916adde904544dceaf0424de3fb8c30aa1e489ca167141ef0da1c7c17719ee42ba9afebb9a8b7e7958b54daf9773a5b985096705c7544ad66bb170033968d3390331e9ef285e75700e69e8dc57a61857f542523169aa46b421e3d9f7ba5bd01625dfe24c12da1fc6c6610c2e05bed350fc10911387b2cc688420851a91d9a457c075e3b55a048b9daf48f301de23584273abb558cf534768ab686ae32843d4d3af88e2d65213e35cbc6eda5789e0d98c2350aa3108c89a20de0b9e77d87d84d3d25c1edb1d77292ae82ac0c941c8cc734344f0dcca6cf6aa99f52e9d19f26d1ac209e99cf5707df566d7b8f3153eaf4f098a77b155ad104485f458b5e41090ed33560657d469b48b15f4681dc426036d7e2fd92255240ae681d4111e68ced6c6cc583a6aa5c214b64dc87cac6fad6cb12d3b72b2670d52e503dff72ee975e9604cbb8bda4240d4fca6f3a159076ca6a91b72a7922cba6bd1076c786ecdc65acc96580a772d72a1c40b2659903b1c5f3d8a87cfba3bcaaef89a0f7ed65640d0b2512bcb7fcf2f31fea1fcf8e83751743d08f4b8b88a384825dc81714f5d98ae3bd647d2262d460798bd3a23b792e537fc01fd556a64e721265ba2e08d3f4782ef29a6453a51ebc584a40222c535ec7c3641c33069568269ba372f3ea30451760f32b2e3f8c2d5694194a2951ba8bed8dd6c6e3fa6ef802f9520f0f67c04f28f4330e779f0be3846d1772313c03c07bce2535b5691c26f9e84d7de5dcf95c1dfc0523f23b3e990f4d8409b940854b7956a6a036e7a2f9f284a502c72efbd28b81a73b1ebeb68f842726a4455d158dc3b6be85dbbb24ea48a103d66851ccfc0203814f95cace67a891bd52b4bb72691d1fbb1202320e86f62ae65d2e8d0a9295f19d889436a45ba4307ade7bf164afbf955bcb93193d31a069caf12ff31500b8a776ff1e3e01700a9578fc45ec9f676f0a47e28793cd073fb287b9731dd1362fb5ddce349684584aee78868d1e64b13977effbabacced1e534aa5291cb49fd9443dac24798b6ee12018022b311dc65d94eabbe70ab34b", 0x1000}, {&(0x7f0000001380)="a9fe86be5f7d9187664f4492bad3dcec04fa477f", 0x14}, {&(0x7f00000013c0)="b394db1982b9595824dc159aeb3ec1db8e3e72377309eb9987af97a79f9862342304421ced20df3b8dcd6f38aefbc1d15873549f64eaac958e22091f882d6c78c2a5eb624098783cc767c3f939e1e8c96fc2efb48f1b02309f04a5844a43d32d9e68ed1cb2d0f1610af0e64ab385fc579d54ec8ac8e3fc25af76e27e587e16", 0x7f}, {&(0x7f0000001440)="4a3baa78989f47e6a416a88b335c4511479374d4a817ac8f516b079ef7b4a6ea16830f9b83d2b0c308322b8f504387fd88a0a6ae7138064fd4276dfa72a086e5ac9d8533f47c48f6063e27261cc6e9aacb3989fc1e", 0x55}, {&(0x7f00000014c0)="9d12540514174d3164dd03c3b607fc9a747a8eb675986a328d0e37f952a2fb4fccb618a397799384bcbaa97adbfa388fe48887c6dfcda959d9156a6d7fdefc26ffdbd0d8bbf7", 0x46}, {&(0x7f0000001540)="db8ef672a5d1b6ed3bacf00f7166d5e83adec38920cf30638be16cd39f3ec7b3fa8fe51a42b57e1985247bbcb0a8a91fdb2179df4ab4eb7a8335419eca1dcb198176feba87077e6275190b239380de8ba10543c5c9a1a585ef9f6b1b67c1a0c366ba680b4776dbe9d23b8136304e3e", 0x6f}], 0xa, &(0x7f0000001680)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x18}}], 0x4, 0x4891) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x4008, r5}, 0x18) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000001040)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[], 0x24, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000480)=ANY=[], 0xfe37, 0x0) 256.394049ms ago: executing program 7 (id=5953): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000140)={"b418b3cb1bb152603a35cc87b72197cf", 0x0, 0x0, {0xb3, 0xba}, {0x9, 0x2}, 0x2, [0x9, 0x100, 0x8, 0x101, 0x3, 0x5, 0x3, 0x6, 0xe, 0xfb1, 0x8, 0x0, 0x10001, 0x10000, 0x6, 0x3]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000240)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000440)={"6d11d3ebddd7624a031ab5ce87bc7c75", r1, r2, {0x8000000000000000, 0x40}, {0x9, 0x80}, 0x3, [0x509, 0x7, 0xd, 0x14f3aa35, 0x2, 0x9a4, 0xfffffffffffff800, 0x5, 0x1ff, 0x80000001, 0x2, 0x7, 0xe8, 0x7, 0x6, 0x1]}) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000640)=[{0x6, 0x83, 0xfc, 0xfffffffe}]}, 0x10) close(r0) 215.612222ms ago: executing program 1 (id=5954): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffa}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) rename(0x0, 0x0) 215.058012ms ago: executing program 0 (id=5955): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0x800, 0xfffffffc, 0x8, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = io_uring_setup(0x7a3c, &(0x7f0000000280)={0x0, 0x7349, 0x40, 0x0, 0x2a8}) io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f00000005c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x27) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x80080, 0x108) statx(r2, &(0x7f0000000040)='./file0\x00', 0x6000, 0x100, &(0x7f00000004c0)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000200)=0xc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r5, 0x5608) 214.454842ms ago: executing program 1 (id=5956): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf006e76e8696d0000000f0001006e657464651df7dd4f9267e886ff8d6ba00c97d941a6911482c800000000b75d7ce04f384d87ecff2306cc4cd7000000009d758fa4402197f9b56d79dde773cf7a6ec63cbf69f0b23d51105ea24947457ae120210ee7a88b2e16f636a9d471a7f5bd1e3162773e99"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80100}, 0xc, &(0x7f0000000500)={&(0x7f0000000b40)=ANY=[@ANYBLOB="0573025ee99ead2a6bdb8a88011100", @ANYRES16=r1, @ANYBLOB="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"], 0x188}, 0x1, 0x0, 0x0, 0x4040}, 0x48010) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x23, 0x803, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x80, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000008c0)='workqueue_execute_end\x00', r8}, 0x18) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r10, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 161.968337ms ago: executing program 7 (id=5957): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2112010, &(0x7f0000000480)={[], [{@obj_role={'obj_role', 0x3d, '\x00'}}, {@measure}, {@func={'func', 0x3d, 'FILE_MMAP'}}]}, 0x80, 0x7a5, &(0x7f0000000f80)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = openat(r0, &(0x7f00000002c0)='./mnt\x00', 0x1e1a41, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_procfs(0x0, 0x0) renameat(r3, 0x0, r3, &(0x7f0000000100)='./mnt\x00') unlinkat(r3, 0x0, 0x200) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000d6ad", @ANYRES16=r4, @ANYBLOB="00002abd7000fedbdf25020000000500050002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10d0}, 0x20010) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x1e, &(0x7f0000000080)={0x0, {{0xa, 0x6, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x8100, @remote}}}, 0x108) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="35c10062e85451438f76f00ec52fe8ff1b"], 0x2c}], 0x1}, 0x80) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES16=r8, @ANYRESHEX=r9], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r10) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000700)={'ip_vti0\x00', &(0x7f0000000680)={'gre0\x00', 0x0, 0x80, 0x7800, 0x4, 0x4, {{0x11, 0x4, 0x0, 0x6, 0x44, 0x64, 0x0, 0x9, 0x29, 0x0, @multicast1, @broadcast, {[@timestamp_prespec={0x44, 0xc, 0x7a, 0x3, 0x3, [{@rand_addr=0x64010102, 0x7}]}, @end, @timestamp={0x44, 0x18, 0x72, 0x0, 0x2, [0x0, 0x5, 0x89, 0x49, 0x5]}, @lsrr={0x83, 0xb, 0x8b, [@rand_addr=0x64010100, @dev]}]}}}}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000a00)={0xb8, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xe}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4040000}, 0x8004) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000500)={'wg0\x00'}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000a00), 0x0, 0x2002, &(0x7f0000000980)) 98.316442ms ago: executing program 6 (id=5958): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8, 0x0, 0x0, 0x1e00, 0x20, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x3, 0x800) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x2}, 0x8) process_madvise(r3, &(0x7f00000004c0)=[{&(0x7f0000000180)="8dcdf2e31ebd5600a7414f34d2af91162a43c709933ea675c4cc9741faa68b86ed109613e7a6f312d901be86cd83a4f6f102bf8df672af59d516f82c1a51125cdc0f756b3060734f8b22ea5b98b333da47a6a6d2263b0535354ed7842501dd79bd2f6fc18a5f3d96690c5f510053015ba59649ed31152514d4256eacf99709bab6cd9a8d", 0x84}, {&(0x7f0000000240)="64d018dc0407fcaf27662d2734ef6927832677a558404a7108b228e60b2f8bfea006e3e4d68976f5e592d5f376a98479df041a5e88d41404f2d7ed523d0c71e8dc553500dc0c1eee20e642ca99248468ab6d8bacbd0b392b076c9b849df291d1f60c905ea030df40039f5f121c9ee6ebd4cb90ea712919d0c665461600e1c4fb28fd3659f11b67245f5a6e368b89", 0x8e}, {&(0x7f0000000040)="1c64221071202db6e9ec3d557e", 0xd}, {&(0x7f0000000300)="6a6e4692188e584f1e0b293dec117a1c6edf8e9e2a93f84d291ee5b22502ef8da90023b3a8769889ac50a19c8d5231dcd43118e7537e28be11b305ecf331e99e435bb727c3ff209bb79e56ec7fabed1d", 0x50}, {&(0x7f0000000440)="4a54437223d3fc51b79a35daa6a3fd9c3746d47c55e14b755b1790d3e9daeec86dde5362f44582fb152b886c544f1c35124eeb8e5d9394d190591cb012daffc9d3d7310b3bcf3a35d9b9a5aa165581b9643372", 0x53}, {0x0}], 0x6, 0x9, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002200d00", @ANYRES32=r6, @ANYBLOB="08000b000000000008000200ac"], 0x54}}, 0x0) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x101101, 0x0) write$vga_arbiter(r7, &(0x7f0000000540)=@target={'target ', {'PCI:', '1e', ':', '7', ':', '18', '.', '14'}}, 0x16) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r9 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r9, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0xb8, @rand_addr=' \x01\x00', 0x7}, 0x1c, &(0x7f0000002440)=[{&(0x7f0000000340)='b', 0x1}], 0x1}}], 0x2, 0x10) shutdown(r9, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0xffffffff}, 0xc) mount$9p_fd(0x0, &(0x7f0000000100)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000140), 0x21c804, &(0x7f0000002600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f0000000400)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x28, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004014}, 0x10) 84.570303ms ago: executing program 1 (id=5959): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x6, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) fcntl$lock(r0, 0x5, &(0x7f00000000c0)={0x1, 0x1, 0x401, 0x401}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32, @ANYRES32=r1, @ANYRESDEC=r0, @ANYRES64, @ANYRES32=r3, @ANYRES16=r3, @ANYRES64=r2, @ANYRES8=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r7 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r6, 0x0, 0x0}) io_uring_enter(r7, 0x40f9, 0x217, 0xa5, 0x0, 0x0) close_range(r5, r6, 0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) r11 = dup(r10) write$UHID_INPUT(r11, &(0x7f0000001080)={0xf, {"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", 0x1000}}, 0x1006) 22.144248ms ago: executing program 7 (id=5960): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x800000000800, 0xfffffffc, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800e0001006970366772657461700000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x48}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000001300)=@gcm_256={{0x304}, "67c3f71b0f188109", "2c9e910757c2725dd5795f705ac44b9d43498e33fe93a0c9001c5c65f7107d0d", "ddfb00", "5a3e2c1b40238e79"}, 0x38) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "54164ace030000f5", "faad50724acb18aba4e3bc654d684ad9c694f3e96ca4b72643dd3689727968e9", "5cb6d03a", "29a78ab9b0a4e8ae"}, 0x38) 21.623208ms ago: executing program 0 (id=5961): fcntl$getown(0xffffffffffffffff, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a23cdec590806000108000604"], 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) r6 = syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4000}, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r7, 0xc0105502, &(0x7f0000000300)={0x1}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r10}, 0x10) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r11}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x70) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xffffffff}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) fsetxattr$security_selinux(r12, &(0x7f0000000080), &(0x7f0000000180)='system_u:object_r:setrans_initrc_exec_t:s0\x00', 0x2b, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r13, 0x0, 0x100}, 0x18) ioctl$IMGETDEVINFO(r6, 0x80044944, &(0x7f0000000000)={0x5}) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a017f7f00000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080002400000001208000140000000000d0003"], 0xac}, 0x1, 0x0, 0x0, 0xc0c1}, 0x0) 0s ago: executing program 7 (id=5962): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x6, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f00000000c0)={0x1, 0x1, 0x401, 0x401}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32, @ANYRES32=r0, @ANYRESDEC, @ANYRES64, @ANYRES32, @ANYRES16, @ANYRES64=r1, @ANYRES8=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r4 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r4, 0x40f9, 0x217, 0xa5, 0x0, 0x0) close_range(0xffffffffffffffff, r3, 0x0) kernel console output (not intermixed with test programs): 8 comm="syz.1.5353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5ab80ebe9 code=0x7ffc0000 [ 352.017172][ T29] audit: type=1326 audit(1756503246.237:14717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19558 comm="syz.1.5353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5ab80ebe9 code=0x7ffc0000 [ 352.030907][T19561] EXT4-fs (loop1): orphan cleanup on readonly fs [ 352.040860][ T29] audit: type=1326 audit(1756503246.237:14718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19558 comm="syz.1.5353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5ab80ebe9 code=0x7ffc0000 [ 352.047415][T19561] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 11: [ 352.070761][ T29] audit: type=1326 audit(1756503246.237:14719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19558 comm="syz.1.5353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5ab80ebe9 code=0x7ffc0000 [ 352.070791][ T29] audit: type=1326 audit(1756503246.237:14720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19558 comm="syz.1.5353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5ab80ebe9 code=0x7ffc0000 [ 352.126749][T19561] block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 352.149491][T19561] EXT4-fs (loop1): Remounting filesystem read-only [ 352.156273][T19561] EXT4-fs (loop1): 1 truncate cleaned up [ 352.162565][T19561] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 352.216854][T19566] binfmt_misc: register: failed to install interpreter file ./file2 [ 352.227146][T19572] sch_fq: defrate 4294967295 ignored. [ 352.283532][T19579] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5362'. [ 352.292538][T19579] netlink: 372 bytes leftover after parsing attributes in process `syz.4.5362'. [ 352.301697][T19579] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5362'. [ 352.318528][T19582] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5363'. [ 352.375956][T19586] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5365'. [ 352.427682][T19596] FAULT_INJECTION: forcing a failure. [ 352.427682][T19596] name failslab, interval 1, probability 0, space 0, times 0 [ 352.440514][T19596] CPU: 1 UID: 0 PID: 19596 Comm: syz.4.5371 Not tainted syzkaller #0 PREEMPT(voluntary) [ 352.440540][T19596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 352.440579][T19596] Call Trace: [ 352.440585][T19596] [ 352.440593][T19596] __dump_stack+0x1d/0x30 [ 352.440614][T19596] dump_stack_lvl+0xe8/0x140 [ 352.440630][T19596] dump_stack+0x15/0x1b [ 352.440643][T19596] should_fail_ex+0x265/0x280 [ 352.440660][T19596] should_failslab+0x8c/0xb0 [ 352.440782][T19596] kmem_cache_alloc_noprof+0x50/0x310 [ 352.440807][T19596] ? audit_log_start+0x365/0x6c0 [ 352.440849][T19596] audit_log_start+0x365/0x6c0 [ 352.440872][T19596] audit_seccomp+0x48/0x100 [ 352.440895][T19596] ? __seccomp_filter+0x68c/0x10d0 [ 352.440915][T19596] __seccomp_filter+0x69d/0x10d0 [ 352.441000][T19596] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 352.441026][T19596] ? vfs_write+0x7e8/0x960 [ 352.441046][T19596] ? __rcu_read_unlock+0x4f/0x70 [ 352.441067][T19596] ? __fget_files+0x184/0x1c0 [ 352.441098][T19596] __secure_computing+0x82/0x150 [ 352.441119][T19596] syscall_trace_enter+0xcf/0x1e0 [ 352.441142][T19596] do_syscall_64+0xac/0x200 [ 352.441168][T19596] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 352.441229][T19596] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 352.441249][T19596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.441266][T19596] RIP: 0033:0x7f5484d6ebe9 [ 352.441281][T19596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.441320][T19596] RSP: 002b:00007f54837cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.441339][T19596] RAX: ffffffffffffffda RBX: 00007f5484f95fa0 RCX: 00007f5484d6ebe9 [ 352.441350][T19596] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000006 [ 352.441362][T19596] RBP: 00007f54837cf090 R08: 0000000000000000 R09: 0000000000000000 [ 352.441374][T19596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.441387][T19596] R13: 00007f5484f96038 R14: 00007f5484f95fa0 R15: 00007ffce048f6f8 [ 352.441462][T19596] [ 352.752690][T19602] loop1: detected capacity change from 0 to 512 [ 352.770563][T19608] loop2: detected capacity change from 0 to 1024 [ 352.779331][T19608] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 352.809245][T19608] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 352.817904][T19608] EXT4-fs (loop2): orphan cleanup on readonly fs [ 352.825229][T19608] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 352.839978][T19608] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 352.847579][T19608] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.5368: Freeing blocks not in datazone - block = 0, count = 4096 [ 352.862895][T19608] EXT4-fs (loop2): 1 orphan inode deleted [ 352.916407][T19611] sch_fq: defrate 4294967295 ignored. [ 352.999424][T19614] loop1: detected capacity change from 0 to 512 [ 353.088446][T19620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5378'. [ 353.125791][T19624] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5380'. [ 353.290843][T19634] netlink: 'syz.2.5384': attribute type 13 has an invalid length. [ 353.384530][T19641] sch_fq: defrate 4294967295 ignored. [ 353.410589][T19634] loop2: detected capacity change from 0 to 512 [ 353.450552][T19634] EXT4-fs (loop2): too many log groups per flexible block group [ 353.450947][T19638] loop6: detected capacity change from 0 to 512 [ 353.459718][T19634] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 353.479847][T19634] EXT4-fs (loop2): mount failed [ 353.494589][T19646] loop1: detected capacity change from 0 to 512 [ 353.527618][T19646] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 353.546388][T19648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5390'. [ 353.560679][T19646] EXT4-fs (loop1): orphan cleanup on readonly fs [ 353.578794][T19646] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 353.596444][T19646] EXT4-fs (loop1): Remounting filesystem read-only [ 353.608274][T19646] EXT4-fs (loop1): 1 truncate cleaned up [ 354.434384][T19670] loop6: detected capacity change from 0 to 1024 [ 354.526667][T19667] loop4: detected capacity change from 0 to 1024 [ 354.544409][T19667] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 354.544984][T19670] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 354.566394][T19670] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 354.571018][T19667] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 354.574528][T19670] EXT4-fs (loop6): orphan cleanup on readonly fs [ 354.582521][T19667] EXT4-fs (loop4): orphan cleanup on readonly fs [ 354.590063][T19670] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 354.604142][T19667] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 354.610020][T19670] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 354.624798][T19667] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 354.625982][T19667] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.5392: Freeing blocks not in datazone - block = 0, count = 4096 [ 354.631652][T19670] EXT4-fs error (device loop6): ext4_free_blocks:6696: comm syz.6.5395: Freeing blocks not in datazone - block = 0, count = 4096 [ 354.651877][T19667] EXT4-fs (loop4): 1 orphan inode deleted [ 354.667497][T19670] EXT4-fs (loop6): 1 orphan inode deleted [ 354.716740][T19675] loop2: detected capacity change from 0 to 512 [ 354.721301][T19677] sch_fq: defrate 4294967295 ignored. [ 354.742124][T19675] FAULT_INJECTION: forcing a failure. [ 354.742124][T19675] name failslab, interval 1, probability 0, space 0, times 0 [ 354.754924][T19675] CPU: 0 UID: 0 PID: 19675 Comm: syz.2.5398 Not tainted syzkaller #0 PREEMPT(voluntary) [ 354.754948][T19675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 354.754958][T19675] Call Trace: [ 354.754966][T19675] [ 354.754973][T19675] __dump_stack+0x1d/0x30 [ 354.754999][T19675] dump_stack_lvl+0xe8/0x140 [ 354.755015][T19675] dump_stack+0x15/0x1b [ 354.755076][T19675] should_fail_ex+0x265/0x280 [ 354.755172][T19675] should_failslab+0x8c/0xb0 [ 354.755192][T19675] kmem_cache_alloc_noprof+0x50/0x310 [ 354.755256][T19675] ? getname_flags+0x80/0x3b0 [ 354.755276][T19675] ? fput+0x8f/0xc0 [ 354.755297][T19675] getname_flags+0x80/0x3b0 [ 354.755327][T19675] __x64_sys_mkdirat+0x40/0x60 [ 354.755347][T19675] x64_sys_call+0x2b7/0x2ff0 [ 354.755365][T19675] do_syscall_64+0xd2/0x200 [ 354.755428][T19675] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 354.755449][T19675] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 354.755471][T19675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.755558][T19675] RIP: 0033:0x7f52df93d457 [ 354.755571][T19675] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.755585][T19675] RSP: 002b:00007f52de3a6e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 354.755603][T19675] RAX: ffffffffffffffda RBX: 00007f52de3a6ef0 RCX: 00007f52df93d457 [ 354.755615][T19675] RDX: 00000000000001ff RSI: 0000200000000f00 RDI: 00000000ffffff9c [ 354.755626][T19675] RBP: 0000200000000f40 R08: 0000200000000000 R09: 0000000000000000 [ 354.755638][T19675] R10: 0000200000000f40 R11: 0000000000000246 R12: 0000200000000f00 [ 354.755733][T19675] R13: 00007f52de3a6eb0 R14: 0000000000000000 R15: 0000200000000f80 [ 354.755797][T19675] [ 354.979295][T19675] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.5398: Failed to acquire dquot type 0 [ 354.997221][T19675] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 355.048865][T12513] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz-executor: path /458/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 355.173164][T19697] loop1: detected capacity change from 0 to 512 [ 355.229012][T19697] ext4 filesystem being mounted at /497/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.240506][T19684] loop6: detected capacity change from 0 to 512 [ 355.281908][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.350196][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.410117][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.459489][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.722491][ T12] bridge_slave_1: left allmulticast mode [ 355.728192][ T12] bridge_slave_1: left promiscuous mode [ 355.733976][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.766948][ T12] bridge_slave_0: left allmulticast mode [ 355.772744][ T12] bridge_slave_0: left promiscuous mode [ 355.778543][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.825306][ T12] team0: Port device geneve1 removed [ 355.875235][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.884922][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.894441][ T12] bond0 (unregistering): Released all slaves [ 355.927619][T19707] chnl_net:caif_netlink_parms(): no params data found [ 355.972325][ T12] hsr_slave_0: left promiscuous mode [ 355.979806][ T12] hsr_slave_1: left promiscuous mode [ 355.988182][ T12] veth1_macvtap: left promiscuous mode [ 355.993705][ T12] veth0_macvtap: left promiscuous mode [ 355.999566][ T12] veth1_vlan: left promiscuous mode [ 356.004815][ T12] veth0_vlan: left promiscuous mode [ 356.059007][ T12] pimreg3 (unregistering): left allmulticast mode [ 356.091932][ T12] team0 (unregistering): Port device team_slave_1 removed [ 356.101835][ T12] team0 (unregistering): Port device C removed [ 356.131195][T19749] netlink: 'syz.1.5420': attribute type 13 has an invalid length. [ 356.203624][T19707] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.211096][T19707] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.238172][T19707] bridge_slave_0: entered allmulticast mode [ 356.257317][T19707] bridge_slave_0: entered promiscuous mode [ 356.264430][T19707] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.271813][T19707] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.280958][T19749] loop1: detected capacity change from 0 to 512 [ 356.291775][T19707] bridge_slave_1: entered allmulticast mode [ 356.298752][T19707] bridge_slave_1: entered promiscuous mode [ 356.330545][T19707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.347728][T19707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.362814][T19749] EXT4-fs (loop1): too many log groups per flexible block group [ 356.371048][T19749] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 356.379122][T19749] EXT4-fs (loop1): mount failed [ 356.411767][T19707] team0: Port device team_slave_0 added [ 356.427133][T19707] team0: Port device team_slave_1 added [ 356.469388][T19707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.477075][T19707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.503083][T19707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.521599][T19749] serio: Serial port ptm0 [ 356.542208][T19707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.549288][T19707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.575239][T19707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.688908][T19805] loop0: detected capacity change from 0 to 512 [ 356.963629][T19805] ext4 filesystem being mounted at /469/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 356.976603][T19707] hsr_slave_0: entered promiscuous mode [ 356.986459][T19707] hsr_slave_1: entered promiscuous mode [ 357.000941][T19707] debugfs: 'hsr0' already exists in 'hsr' [ 357.007103][T19707] Cannot create hsr debugfs directory [ 357.019252][T19824] loop1: detected capacity change from 0 to 2048 [ 357.036225][T19824] /dev/loop1: Can't open blockdev [ 357.076617][T19824] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 357.096188][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 357.096203][ T29] audit: type=1326 audit(1756503251.470:14881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19823 comm="syz.1.5430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5ab80ebe9 code=0x7ffc0000 [ 357.126359][ T29] audit: type=1326 audit(1756503251.480:14882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19823 comm="syz.1.5430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7fd5ab80ebe9 code=0x7ffc0000 [ 357.150016][ T29] audit: type=1326 audit(1756503251.480:14883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19823 comm="syz.1.5430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5ab80ebe9 code=0x7ffc0000 [ 357.231620][ T29] audit: type=1326 audit(1756503251.540:14884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19823 comm="syz.1.5430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5ab80ebe9 code=0x7ffc0000 [ 357.255588][ T29] audit: type=1326 audit(1756503251.540:14885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19823 comm="syz.1.5430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5ab80ebe9 code=0x7ffc0000 [ 357.279421][ T29] audit: type=1326 audit(1756503251.540:14886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19823 comm="syz.1.5430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5ab80ebe9 code=0x7ffc0000 [ 357.303161][ T29] audit: type=1326 audit(1756503251.570:14887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19823 comm="syz.1.5430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5ab80ebe9 code=0x7ffc0000 [ 357.327454][ T29] audit: type=1326 audit(1756503251.570:14888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19823 comm="syz.1.5430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5ab80ebe9 code=0x7ffc0000 [ 357.351873][ T29] audit: type=1326 audit(1756503251.570:14889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19823 comm="syz.1.5430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5ab80ebe9 code=0x7ffc0000 [ 357.375805][ T29] audit: type=1326 audit(1756503251.570:14890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19823 comm="syz.1.5430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd5ab80ebe9 code=0x7ffc0000 [ 357.433863][T19707] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 357.453260][T19707] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 357.491304][T19707] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 357.514002][T19707] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 357.542741][T19857] __nla_validate_parse: 7 callbacks suppressed [ 357.542755][T19857] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5434'. [ 357.638759][T19707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.668800][T19707] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.676660][T19877] loop1: detected capacity change from 0 to 1024 [ 357.697333][T11179] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.704523][T11179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.725229][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.732313][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.755506][T19847] loop6: detected capacity change from 0 to 512 [ 357.757517][T19877] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5435'. [ 357.846936][T19887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5437'. [ 357.899748][T19895] loop6: detected capacity change from 0 to 1024 [ 357.950345][T19707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.969164][T19895] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5439'. [ 358.118184][T19899] loop1: detected capacity change from 0 to 512 [ 358.273350][T19942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5445'. [ 358.289674][T19941] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5446'. [ 358.334213][T19942] netlink: 'syz.0.5445': attribute type 2 has an invalid length. [ 358.359167][T19952] loop4: detected capacity change from 0 to 128 [ 358.382703][T19952] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 358.388326][T19952] FAT-fs (loop4): error, corrupted file size (i_pos 548, 512) [ 358.400791][T19952] FAT-fs (loop4): Filesystem has been set read-only [ 358.411865][T19707] veth0_vlan: entered promiscuous mode [ 358.430402][T19707] veth1_vlan: entered promiscuous mode [ 358.459035][T19707] veth0_macvtap: entered promiscuous mode [ 358.493454][T19707] veth1_macvtap: entered promiscuous mode [ 358.508537][T19966] loop0: detected capacity change from 0 to 1024 [ 358.517020][T19707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.527992][T19967] loop1: detected capacity change from 0 to 512 [ 358.540830][T19707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.555192][T19967] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 358.575553][ T1767] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.599542][T19967] EXT4-fs (loop1): orphan cleanup on readonly fs [ 358.616889][ T1767] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.626989][T19966] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5449'. [ 358.643490][ T41] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.652366][T19967] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 358.677755][T19967] EXT4-fs (loop1): Remounting filesystem read-only [ 358.685081][ T41] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.695104][T19967] EXT4-fs (loop1): 1 truncate cleaned up [ 358.742069][T19956] loop6: detected capacity change from 0 to 512 [ 358.973893][T19990] loop7: detected capacity change from 0 to 1024 [ 358.984026][T19990] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 359.040279][T19990] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 359.048379][T19990] EXT4-fs (loop7): orphan cleanup on readonly fs [ 359.056725][T19990] EXT4-fs warning (device loop7): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 359.071558][T19990] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 359.079807][T19990] EXT4-fs error (device loop7): ext4_free_blocks:6696: comm syz.7.5411: Freeing blocks not in datazone - block = 0, count = 4096 [ 359.094099][T19990] EXT4-fs (loop7): 1 orphan inode deleted [ 359.278622][T19999] netlink: 'syz.6.5456': attribute type 13 has an invalid length. [ 359.357805][T19997] loop0: detected capacity change from 0 to 512 [ 359.367349][T19999] loop6: detected capacity change from 0 to 512 [ 359.412080][T19999] EXT4-fs (loop6): too many log groups per flexible block group [ 359.420718][T19999] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 359.428177][T19999] EXT4-fs (loop6): mount failed [ 359.445601][T19999] serio: Serial port ptm0 [ 359.462756][T20014] loop1: detected capacity change from 0 to 1024 [ 359.472802][T20016] loop4: detected capacity change from 0 to 512 [ 359.491235][T20016] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 359.492655][T20014] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5461'. [ 359.526770][T20016] EXT4-fs (loop4): orphan cleanup on readonly fs [ 359.544821][T20016] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 359.565270][T20016] EXT4-fs (loop4): Remounting filesystem read-only [ 359.567699][T20026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5464'. [ 359.579566][T20016] EXT4-fs (loop4): 1 truncate cleaned up [ 359.691526][T20040] loop7: detected capacity change from 0 to 512 [ 359.707597][T20040] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 359.734997][T20040] EXT4-fs (loop7): orphan cleanup on readonly fs [ 359.744875][T20040] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 359.766325][T20040] EXT4-fs (loop7): Remounting filesystem read-only [ 359.773034][T20040] EXT4-fs (loop7): 1 truncate cleaned up [ 359.873426][T20056] netlink: 'syz.0.5474': attribute type 13 has an invalid length. [ 359.874013][T20059] loop4: detected capacity change from 0 to 1024 [ 359.891358][T20038] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5469'. [ 359.892687][T20050] loop7: detected capacity change from 0 to 512 [ 359.908976][T20038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.941953][T20038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.009798][T20056] loop0: detected capacity change from 0 to 512 [ 360.070079][T20056] EXT4-fs (loop0): too many log groups per flexible block group [ 360.079245][T20056] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 360.106845][T20056] EXT4-fs (loop0): mount failed [ 360.119819][T20072] loop1: detected capacity change from 0 to 512 [ 360.130175][T20072] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 360.153983][T20078] loop7: detected capacity change from 0 to 512 [ 360.170695][T20072] EXT4-fs (loop1): orphan cleanup on readonly fs [ 360.172869][T20078] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.5480: casefold flag without casefold feature [ 360.177586][T20072] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 360.205045][T20078] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.5480: couldn't read orphan inode 15 (err -117) [ 360.205501][T20072] EXT4-fs (loop1): Remounting filesystem read-only [ 360.223806][T20072] EXT4-fs (loop1): 1 truncate cleaned up [ 360.300518][T20082] loop4: detected capacity change from 0 to 1024 [ 360.308786][T20082] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 360.320583][T20082] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 360.328959][T20082] EXT4-fs (loop4): orphan cleanup on readonly fs [ 360.338337][T20082] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 360.353173][T20082] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 360.361003][T20082] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.5479: Freeing blocks not in datazone - block = 0, count = 4096 [ 360.375177][T20082] EXT4-fs (loop4): 1 orphan inode deleted [ 360.611279][T20091] loop1: detected capacity change from 0 to 512 [ 360.618936][T20091] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 360.634287][T20091] EXT4-fs (loop1): orphan cleanup on readonly fs [ 360.653528][T20091] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 360.694026][T20091] EXT4-fs (loop1): Remounting filesystem read-only [ 360.700690][T20091] EXT4-fs (loop1): 1 truncate cleaned up [ 360.803476][T20101] loop1: detected capacity change from 0 to 512 [ 360.996579][T20113] loop4: detected capacity change from 0 to 512 [ 361.017843][T20113] ext4 filesystem being mounted at /471/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.350260][ T5402] failed while handling packet from 1:16386 [ 361.350278][ T5402] failed while handling packet from 1:16386 [ 361.373607][ T5402] failed while handling packet from 1:16386 [ 361.389838][ T5402] failed while handling packet from 1:16386 [ 361.410904][T20138] loop0: detected capacity change from 0 to 1024 [ 361.423551][ T5402] failed while handling packet from 1:16386 [ 361.423573][ T5402] failed while handling packet from 1:16386 [ 361.443737][ T5402] failed while handling packet from 1:16386 [ 361.453833][ T5402] failed while handling packet from 1:16386 [ 361.463687][ T5402] failed while handling packet from 1:16386 [ 361.469601][ T5402] failed while handling packet from 1:16386 [ 361.478154][ T5402] failed while handling packet from 1:16386 [ 361.484103][ T5402] failed while handling packet from 1:16386 [ 361.491610][ T5402] failed while handling packet from 1:16386 [ 361.497962][ T5402] failed while handling packet from 1:16386 [ 361.499402][T20140] loop6: detected capacity change from 0 to 512 [ 361.508512][ T5402] failed while handling packet from 1:16386 [ 361.517028][ T5402] failed while handling packet from 1:16386 [ 361.523044][ T5402] failed while handling packet from 1:16386 [ 361.529190][ T5402] failed while handling packet from 1:16386 [ 361.535223][ T5402] failed while handling packet from 1:16386 [ 361.541123][ T5402] failed while handling packet from 1:16386 [ 361.547250][ T5402] failed while handling packet from 1:16386 [ 361.553151][ T5402] failed while handling packet from 1:16386 [ 361.559326][ T5402] failed while handling packet from 1:16386 [ 361.561125][T20140] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.5504: casefold flag without casefold feature [ 361.565331][ T5402] failed while handling packet from 1:16386 [ 361.584189][ T5402] failed while handling packet from 1:16386 [ 361.590200][ T5402] failed while handling packet from 1:16386 [ 361.596674][ T5402] failed while handling packet from 1:16386 [ 361.604304][ T5402] failed while handling packet from 1:16386 [ 361.611528][ T5402] failed while handling packet from 1:16386 [ 361.617930][ T5402] failed while handling packet from 1:16386 [ 361.620332][T20140] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.5504: couldn't read orphan inode 15 (err -117) [ 361.624007][ T5402] failed while handling packet from 1:16386 [ 361.642363][ T5402] failed while handling packet from 1:16386 [ 361.648600][ T5402] failed while handling packet from 1:16386 [ 361.654608][ T5402] failed while handling packet from 1:16386 [ 361.660520][ T5402] failed while handling packet from 1:16386 [ 361.666537][ T5402] failed while handling packet from 1:16385 [ 361.672628][ T5402] failed while handling packet from 1:16385 [ 361.678702][ T5402] failed while handling packet from 1:16385 [ 361.684709][ T5402] failed while handling packet from 1:16385 [ 361.690656][ T5402] failed while handling packet from 1:16385 [ 361.715085][ T5402] failed while handling packet from 1:16385 [ 361.735946][T20135] loop4: detected capacity change from 0 to 512 [ 361.736139][ T5402] failed while handling packet from 1:16385 [ 361.749014][T20152] loop7: detected capacity change from 0 to 16384 [ 361.761634][ T5402] failed while handling packet from 1:16385 [ 361.761650][ T5402] failed while handling packet from 1:16385 [ 361.775399][ T5402] failed while handling packet from 1:16385 [ 361.810257][ T5402] failed while handling packet from 1:16385 [ 361.825020][ T5402] failed while handling packet from 1:16385 [ 361.856050][ T5402] failed while handling packet from 1:16385 [ 361.872983][ T5402] failed while handling packet from 1:16385 [ 361.882345][ T5402] failed while handling packet from 1:16385 [ 361.897607][ T5402] failed while handling packet from 1:16385 [ 361.905669][ T5402] failed while handling packet from 1:16385 [ 361.911576][ T5402] failed while handling packet from 1:16385 [ 361.917817][ T5402] failed while handling packet from 1:16385 [ 361.923746][ T5402] failed while handling packet from 1:16385 [ 361.929692][ T5402] failed while handling packet from 1:16385 [ 361.939036][ T5402] failed while handling packet from 1:16385 [ 361.943288][T20156] loop7: detected capacity change from 16384 to 0 [ 361.945488][ T5402] failed while handling packet from 1:16385 [ 361.951074][ C1] I/O error, dev loop7, sector 7424 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 2 [ 361.991300][ T5402] failed while handling packet from 1:16385 [ 361.991337][ T5402] failed while handling packet from 1:16385 [ 362.012636][ T5402] failed while handling packet from 1:16385 [ 362.018916][ T5402] failed while handling packet from 1:16385 [ 362.020669][T20164] loop7: detected capacity change from 0 to 16384 [ 362.026096][ T5402] failed while handling packet from 1:16385 [ 362.063794][ T5402] failed while handling packet from 1:16385 [ 362.070197][ T5402] failed while handling packet from 1:16385 [ 362.111506][ T5402] failed while handling packet from 1:16385 [ 362.118975][ T29] kauditd_printk_skb: 414 callbacks suppressed [ 362.118989][ T29] audit: type=1400 audit(1756503256.502:15303): avc: denied { create } for pid=20165 comm="syz.4.5512" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 362.124912][T20166] loop4: detected capacity change from 0 to 512 [ 362.158496][ T29] audit: type=1400 audit(1756503256.502:15304): avc: denied { write } for pid=20165 comm="syz.4.5512" name="file0" dev="tmpfs" ino=2708 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 362.181242][ T29] audit: type=1400 audit(1756503256.502:15305): avc: denied { open } for pid=20165 comm="syz.4.5512" path="/474/file0" dev="tmpfs" ino=2708 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 362.215015][ T5402] failed while handling packet from 1:16385 [ 362.215132][ T5402] failed while handling packet from 1:16385 [ 362.221043][ T5402] failed while handling packet from 1:16385 [ 362.228776][ T5402] failed while handling packet from 1:16385 [ 362.234915][ T5402] failed while handling packet from 1:16385 [ 362.241006][ T5402] failed while handling packet from 1:16385 [ 362.253017][ T5402] failed while handling packet from 1:16385 [ 362.259210][ T5402] failed while handling packet from 1:16385 [ 362.268764][ T5402] failed while handling packet from 1:16385 [ 362.269596][T20166] ext4 filesystem being mounted at /474/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.274961][ T5402] failed while handling packet from 1:16385 [ 362.274974][ T5402] failed while handling packet from 1:16385 [ 362.274985][ T5402] failed while handling packet from 1:16385 [ 362.274995][ T5402] failed while handling packet from 1:16385 [ 362.309468][ T5402] failed while handling packet from 1:16385 [ 362.315532][ T5402] failed while handling packet from 1:16385 [ 362.321563][ T5402] failed while handling packet from 1:16385 [ 362.327534][T20167] loop7: detected capacity change from 16384 to 0 [ 362.327760][ C1] I/O error, dev loop7, sector 16264 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 362.345589][ T5402] failed while handling packet from 1:16385 [ 362.349952][ T5402] failed while handling packet from 1:16385 [ 362.356079][ T5402] failed while handling packet from 1:16385 [ 362.361988][ T5402] failed while handling packet from 1:16385 [ 362.368128][ T5402] failed while handling packet from 1:16385 [ 362.374202][ T5402] failed while handling packet from 1:16385 [ 362.380103][ T5402] failed while handling packet from 1:16385 [ 362.386314][ T5402] failed while handling packet from 1:16385 [ 362.392226][ T5402] failed while handling packet from 1:16385 [ 362.398369][ T5402] failed while handling packet from 1:16385 [ 362.404432][ T5402] failed while handling packet from 1:16385 [ 362.411079][ T5402] failed while handling packet from 1:16385 [ 362.417819][ T29] audit: type=1400 audit(1756503256.802:15306): avc: denied { create } for pid=20175 comm="syz.1.5514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 362.418319][ T5402] failed while handling packet from 1:16385 [ 362.468285][T20177] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20177 comm=syz.1.5514 [ 362.494478][T20176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20176 comm=syz.1.5514 [ 362.511462][T20181] loop6: detected capacity change from 0 to 1024 [ 362.518991][ T29] audit: type=1400 audit(1756503256.902:15307): avc: denied { create } for pid=20175 comm="syz.1.5514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 362.519373][ T5402] failed while handling packet from 1:16385 [ 362.541304][ T5402] failed while handling packet from 1:16385 [ 362.549174][ T5402] failed while handling packet from 1:16385 [ 362.555182][ T5402] failed while handling packet from 1:16385 [ 362.561166][ T5402] failed while handling packet from 1:16385 [ 362.562281][T20181] __nla_validate_parse: 6 callbacks suppressed [ 362.562294][T20181] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5516'. [ 362.567199][ T5402] failed while handling packet from 1:16385 [ 362.588578][ T5402] failed while handling packet from 1:16385 [ 362.594558][ T5402] failed while handling packet from 1:16385 [ 362.600628][ T5402] failed while handling packet from 1:16385 [ 362.606593][ T5402] failed while handling packet from 1:16385 [ 362.612684][ T5402] failed while handling packet from 1:16385 [ 362.618775][ T5402] failed while handling packet from 1:16385 [ 362.624993][ T5402] failed while handling packet from 1:16385 [ 362.632416][ T5402] failed while handling packet from 1:16385 [ 362.638533][ T5402] failed while handling packet from 1:16385 [ 362.644495][ T5402] failed while handling packet from 1:16385 [ 362.650603][ T5402] failed while handling packet from 1:16385 [ 362.656789][ T5402] failed while handling packet from 1:16385 [ 362.662906][ T5402] failed while handling packet from 1:16385 [ 362.669009][ T5402] failed while handling packet from 1:16385 [ 362.675119][ T5402] failed while handling packet from 1:16385 [ 362.681117][ T5402] failed while handling packet from 1:16385 [ 362.690511][ T5402] failed while handling packet from 1:16385 [ 362.697178][ T5402] failed while handling packet from 1:16385 [ 362.703236][ T5402] failed while handling packet from 1:16385 [ 362.709281][ T5402] failed while handling packet from 1:16385 [ 362.715290][ T5402] failed while handling packet from 1:16385 [ 362.721352][ T5402] failed while handling packet from 1:16385 [ 362.727479][ T5402] failed while handling packet from 1:16385 [ 362.733522][ T5402] failed while handling packet from 1:16385 [ 362.739419][ T5402] failed while handling packet from 1:16385 [ 362.760647][T20191] netlink: 'syz.1.5518': attribute type 13 has an invalid length. [ 362.777216][ T29] audit: type=1326 audit(1756503257.163:15308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20193 comm="syz.6.5519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5453cdebe9 code=0x7ffc0000 [ 362.777302][ T5402] failed while handling packet from 1:16385 [ 362.801285][ T29] audit: type=1326 audit(1756503257.163:15309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20193 comm="syz.6.5519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5453cdebe9 code=0x7ffc0000 [ 362.838241][ T5402] failed while handling packet from 1:16385 [ 362.838302][ T5402] failed while handling packet from 1:16385 [ 362.852262][ T29] audit: type=1326 audit(1756503257.223:15310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20193 comm="syz.6.5519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5453cdebe9 code=0x7ffc0000 [ 362.882438][ T29] audit: type=1326 audit(1756503257.223:15311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20193 comm="syz.6.5519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5453cdebe9 code=0x7ffc0000 [ 362.883274][ T5402] failed while handling packet from 1:16385 [ 362.906606][ T29] audit: type=1326 audit(1756503257.223:15312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20193 comm="syz.6.5519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5453cdebe9 code=0x7ffc0000 [ 362.969440][T20191] loop1: detected capacity change from 0 to 512 [ 362.981607][ T5402] failed while handling packet from 1:16385 [ 362.981642][ T5402] failed while handling packet from 1:16385 [ 363.003102][ T5402] failed while handling packet from 1:16385 [ 363.041524][ T5402] failed while handling packet from 1:16385 [ 363.057477][T20191] EXT4-fs (loop1): too many log groups per flexible block group [ 363.072210][T20191] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 363.073835][ T5402] failed while handling packet from 1:16385 [ 363.086413][ T5402] failed while handling packet from 1:16385 [ 363.092831][ T5402] failed while handling packet from 1:16385 [ 363.099003][ T5402] failed while handling packet from 1:16385 [ 363.105187][ T5402] failed while handling packet from 1:16385 [ 363.111386][ T5402] failed while handling packet from 1:16385 [ 363.122873][T20191] EXT4-fs (loop1): mount failed [ 363.131168][ T5402] failed while handling packet from 1:16385 [ 363.134043][ T5402] failed while handling packet from 1:16385 [ 363.140312][ T5402] failed while handling packet from 1:16385 [ 363.146573][ T5402] failed while handling packet from 1:16385 [ 363.154538][ T5402] failed while handling packet from 1:16385 [ 363.161391][ T5402] failed while handling packet from 1:16385 [ 363.172932][ T5402] failed while handling packet from 1:16385 [ 363.181646][ T5402] failed while handling packet from 1:16385 [ 363.187887][ T5402] failed while handling packet from 1:16385 [ 363.194379][ T5402] failed while handling packet from 1:16385 [ 363.200403][ T5402] failed while handling packet from 1:16385 [ 363.215611][T20207] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5523'. [ 363.220481][ T5402] failed while handling packet from 1:16385 [ 363.242645][ T5402] failed while handling packet from 1:16385 [ 363.250859][ T5402] failed while handling packet from 1:16385 [ 363.271117][ T5402] failed while handling packet from 1:16385 [ 363.286901][ T5402] failed while handling packet from 1:16385 [ 363.293100][ T5402] failed while handling packet from 1:16385 [ 363.299232][ T5402] failed while handling packet from 1:16385 [ 363.305976][T20212] loop7: detected capacity change from 0 to 16384 [ 363.312996][T20215] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5527'. [ 363.330420][ T5402] failed while handling packet from 1:16385 [ 363.330443][ T5402] failed while handling packet from 1:16385 [ 363.365912][ T5402] failed while handling packet from 1:16385 [ 363.391748][T20223] loop6: detected capacity change from 0 to 1024 [ 363.413473][ T5402] failed while handling packet from 1:16385 [ 363.413505][ T5402] failed while handling packet from 1:16385 [ 363.433624][T20223] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5530'. [ 363.443718][ T5402] failed while handling packet from 1:16385 [ 363.448592][ T5402] failed while handling packet from 1:16385 [ 363.455114][ T5402] failed while handling packet from 1:16385 [ 363.461028][ T5402] failed while handling packet from 1:16385 [ 363.467183][ T5402] failed while handling packet from 1:16385 [ 363.473498][ T5402] failed while handling packet from 1:16385 [ 363.479521][ T5402] failed while handling packet from 1:16385 [ 363.486843][ T5402] failed while handling packet from 1:16385 [ 363.492612][T20221] loop7: detected capacity change from 16384 to 0 [ 363.492934][ T5402] failed while handling packet from 1:16385 [ 363.498920][ C1] I/O error, dev loop7, sector 14464 op 0x0:(READ) flags 0x80700 phys_seg 9 prio class 2 [ 363.528585][ T5402] failed while handling packet from 1:16385 [ 363.528602][ T5402] failed while handling packet from 1:16385 [ 363.534599][ T5402] failed while handling packet from 1:16385 [ 363.540717][ T5402] failed while handling packet from 1:16385 [ 363.546913][ T5402] failed while handling packet from 1:16385 [ 363.553087][ T5402] failed while handling packet from 1:16385 [ 363.567049][ T5402] failed while handling packet from 1:16385 [ 363.567862][T20231] sch_fq: defrate 4294967295 ignored. [ 363.582443][ T5402] failed while handling packet from 1:16385 [ 363.584584][ T5402] failed while handling packet from 1:16385 [ 363.590507][ T5402] failed while handling packet from 1:16385 [ 363.597985][ T5402] failed while handling packet from 1:16385 [ 363.604714][ T5402] failed while handling packet from 1:16385 [ 363.608215][T20235] loop6: detected capacity change from 0 to 512 [ 363.610866][ T5402] failed while handling packet from 1:16385 [ 363.623379][ T5402] failed while handling packet from 1:16385 [ 363.642160][T20235] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 363.653246][ T5402] failed while handling packet from 1:16385 [ 363.688627][T20235] EXT4-fs (loop6): orphan cleanup on readonly fs [ 363.699551][ T5402] failed while handling packet from 1:16385 [ 363.700999][ T5402] failed while handling packet from 1:16385 [ 363.711261][T20235] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 363.723519][T20239] netlink: 'syz.1.5535': attribute type 13 has an invalid length. [ 363.749151][ T5402] failed while handling packet from 1:16385 [ 363.749171][ T5402] failed while handling packet from 1:16385 [ 363.755515][T20235] EXT4-fs (loop6): Remounting filesystem read-only [ 363.772630][ T5402] failed while handling packet from 1:16385 [ 363.772651][ T5402] failed while handling packet from 1:16385 [ 363.778691][T20235] EXT4-fs (loop6): 1 truncate cleaned up [ 363.792563][ T5402] failed while handling packet from 1:16385 [ 363.792582][ T5402] failed while handling packet from 1:16385 [ 363.798571][ T5402] failed while handling packet from 1:16385 [ 363.847240][ T5402] failed while handling packet from 1:16385 [ 363.865555][ T5402] failed while handling packet from 1:16385 [ 363.885727][ T5402] failed while handling packet from 1:16385 [ 363.898046][ T5402] failed while handling packet from 1:16385 [ 363.909671][ T5402] failed while handling packet from 1:16385 [ 363.916002][ T5402] failed while handling packet from 1:16385 [ 363.930062][ T5402] failed while handling packet from 1:16385 [ 363.961493][ T5402] failed while handling packet from 1:16385 [ 363.975510][T20249] loop6: detected capacity change from 0 to 512 [ 363.976706][T20239] loop1: detected capacity change from 0 to 512 [ 364.009775][ T5402] failed while handling packet from 1:16385 [ 364.009799][ T5402] failed while handling packet from 1:16385 [ 364.027628][ T5402] failed while handling packet from 1:16385 [ 364.066599][ T5402] failed while handling packet from 1:16385 [ 364.075747][ T5402] failed while handling packet from 1:16385 [ 364.082010][ T5402] failed while handling packet from 1:16385 [ 364.088444][ T5402] failed while handling packet from 1:16385 [ 364.095132][ T5402] failed while handling packet from 1:16385 [ 364.101458][ T5402] failed while handling packet from 1:16385 [ 364.107747][ T5402] failed while handling packet from 1:16385 [ 364.114848][ T5402] failed while handling packet from 1:16385 [ 364.115719][T20239] EXT4-fs (loop1): too many log groups per flexible block group [ 364.121057][ T5402] failed while handling packet from 1:16385 [ 364.121073][ T5402] failed while handling packet from 1:16385 [ 364.121087][ T5402] failed while handling packet from 1:16385 [ 364.121152][ T5402] failed while handling packet from 1:16385 [ 364.127664][T20239] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 364.155748][ T5402] failed while handling packet from 1:16385 [ 364.174356][T20239] EXT4-fs (loop1): mount failed [ 364.191675][ T5402] failed while handling packet from 1:16385 [ 364.191698][ T5402] failed while handling packet from 1:16385 [ 364.202485][ T5402] failed while handling packet from 1:16385 [ 364.218952][ T5402] failed while handling packet from 1:16385 [ 364.226443][T20239] serio: Serial port ptm0 [ 364.252395][ T5402] failed while handling packet from 1:16385 [ 364.252465][ T5402] failed while handling packet from 1:16385 [ 364.265521][ T5402] failed while handling packet from 1:16384 [ 364.271479][ T5402] failed while handling packet from 1:16384 [ 364.282981][T20264] loop4: detected capacity change from 0 to 1024 [ 364.299810][ T5402] failed while handling packet from 1:16384 [ 364.299827][ T5402] failed while handling packet from 1:16384 [ 364.306200][ T5402] failed while handling packet from 1:16384 [ 364.318772][ T5402] failed while handling packet from 1:16384 [ 364.325171][ T5402] failed while handling packet from 1:16384 [ 364.331127][ T5402] failed while handling packet from 1:16384 [ 364.337503][ T5402] failed while handling packet from 1:16384 [ 364.344863][T20264] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5544'. [ 364.345635][T20271] loop7: detected capacity change from 0 to 16384 [ 364.357098][ T5402] failed while handling packet from 1:16384 [ 364.367269][ T5402] failed while handling packet from 1:16384 [ 364.373392][ T5402] failed while handling packet from 1:16385 [ 364.379291][ T5402] failed while handling packet from 1:16385 [ 364.385581][ T5402] failed while handling packet from 1:16385 [ 364.391709][ T5402] failed while handling packet from 1:16385 [ 364.398088][ T5402] failed while handling packet from 1:16385 [ 364.405213][ T5402] failed while handling packet from 1:16385 [ 364.411175][ T5402] failed while handling packet from 1:16385 [ 364.417385][ T5402] failed while handling packet from 1:16385 [ 364.423536][ T5402] failed while handling packet from 1:16385 [ 364.429459][ T5402] failed while handling packet from 1:16385 [ 364.442010][ T5402] failed while handling packet from 1:16385 [ 364.448711][ T5402] failed while handling packet from 1:16385 [ 364.455076][ T5402] failed while handling packet from 1:16385 [ 364.461080][ T5402] failed while handling packet from 1:16385 [ 364.471359][ T5402] failed while handling packet from 1:16385 [ 364.479289][ T5402] failed while handling packet from 1:16385 [ 364.492037][T20275] loop7: detected capacity change from 16384 to 0 [ 364.492171][ C0] I/O error, dev loop7, sector 4352 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 364.502511][T20266] netlink: 124 bytes leftover after parsing attributes in process `syz.7.5543'. [ 364.523692][ T5402] failed while handling packet from 1:16385 [ 364.523710][ T5402] failed while handling packet from 1:16385 [ 364.529662][ T5402] failed while handling packet from 1:16385 [ 364.537779][ T5402] failed while handling packet from 1:16385 [ 364.552237][ T5402] failed while handling packet from 1:16385 [ 364.558408][ T5402] failed while handling packet from 1:16385 [ 364.564708][ T5402] failed while handling packet from 1:16385 [ 364.570842][ T5402] failed while handling packet from 1:16385 [ 364.576805][ T5402] failed while handling packet from 1:16385 [ 364.583215][ T5402] failed while handling packet from 1:16385 [ 364.589131][ T5402] failed while handling packet from 1:16385 [ 364.595249][ T5402] failed while handling packet from 1:16385 [ 364.601154][ T5402] failed while handling packet from 1:16385 [ 364.607608][ T5402] failed while handling packet from 1:16385 [ 364.613553][ T5402] failed while handling packet from 1:16385 [ 364.619558][ T5402] failed while handling packet from 1:16385 [ 364.634911][ T5402] failed while handling packet from 1:16385 [ 364.640832][ T5402] failed while handling packet from 1:16385 [ 364.647081][ T5402] failed while handling packet from 1:16385 [ 364.653492][ T5402] failed while handling packet from 1:16385 [ 364.661710][ T5402] failed while handling packet from 1:16385 [ 364.682284][ T5402] failed while handling packet from 1:16385 [ 364.689847][ T5402] failed while handling packet from 1:16385 [ 364.697243][ T5402] failed while handling packet from 1:16385 [ 364.704570][T20291] loop1: detected capacity change from 0 to 512 [ 364.712739][ T5402] failed while handling packet from 1:16385 [ 364.716782][ T5402] failed while handling packet from 1:16385 [ 364.746746][ T5402] failed while handling packet from 1:16385 [ 364.753045][ T5402] failed while handling packet from 1:16385 [ 364.759028][ T5402] failed while handling packet from 1:16385 [ 364.767576][T20295] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5554'. [ 364.783083][ T5402] failed while handling packet from 1:16385 [ 364.783102][ T5402] failed while handling packet from 1:16385 [ 364.801729][ T5402] failed while handling packet from 1:16385 [ 364.808318][ T5402] failed while handling packet from 1:16385 [ 364.814892][ T5402] failed while handling packet from 1:16385 [ 364.816490][T20297] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5556'. [ 364.820902][ T5402] failed while handling packet from 1:16385 [ 364.828058][T20291] ext4 filesystem being mounted at /533/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.835859][ T5402] failed while handling packet from 1:16385 [ 364.853287][ T5402] failed while handling packet from 1:16385 [ 364.859186][ T5402] failed while handling packet from 1:16385 [ 364.865548][ T5402] failed while handling packet from 1:16385 [ 364.871446][ T5402] failed while handling packet from 1:16385 [ 364.877995][ T5402] failed while handling packet from 1:16385 [ 364.884025][ T5402] failed while handling packet from 1:16385 [ 364.891343][ T5402] failed while handling packet from 1:16385 [ 364.897308][ T5402] failed while handling packet from 1:16385 [ 364.903514][ T5402] failed while handling packet from 1:16385 [ 364.909404][ T5402] failed while handling packet from 1:16385 [ 364.913065][T20289] netlink: 124 bytes leftover after parsing attributes in process `syz.4.5551'. [ 364.915533][ T5402] failed while handling packet from 1:16385 [ 364.930661][ T5402] failed while handling packet from 1:16385 [ 364.936851][ T5402] failed while handling packet from 1:16385 [ 364.942864][ T5402] failed while handling packet from 1:16385 [ 364.948830][ T5402] failed while handling packet from 1:16385 [ 364.954838][ T5402] failed while handling packet from 1:16385 [ 364.961173][ T5402] failed while handling packet from 1:16385 [ 364.967412][ T5402] failed while handling packet from 1:16385 [ 364.973372][ T5402] failed while handling packet from 1:16385 [ 364.979318][ T5402] failed while handling packet from 1:16385 [ 364.985313][ T5402] failed while handling packet from 1:16385 [ 364.992561][ T5402] failed while handling packet from 1:16385 [ 364.999730][ T5402] failed while handling packet from 1:16385 [ 365.005738][ T5402] failed while handling packet from 1:16385 [ 365.011913][ T5402] failed while handling packet from 1:16385 [ 365.017921][ T5402] failed while handling packet from 1:16385 [ 365.027495][ T5402] failed while handling packet from 1:16385 [ 365.039945][ T5402] failed while handling packet from 1:16385 [ 365.046095][ T5402] failed while handling packet from 1:16385 [ 365.052086][ T5402] failed while handling packet from 1:16385 [ 365.058638][ T5402] failed while handling packet from 1:16385 [ 365.064872][ T5402] failed while handling packet from 1:16385 [ 365.074813][ T5402] failed while handling packet from 1:16385 [ 365.080894][ T5402] failed while handling packet from 1:16385 [ 365.087183][ T5402] failed while handling packet from 1:16385 [ 365.093226][ T5402] failed while handling packet from 1:16385 [ 365.099994][ T5402] failed while handling packet from 1:16385 [ 365.105936][ T5402] failed while handling packet from 1:16385 [ 365.111944][ T5402] failed while handling packet from 1:16385 [ 365.125300][ T5402] failed while handling packet from 1:16385 [ 365.131211][ T5402] failed while handling packet from 1:16385 [ 365.137408][ T5402] failed while handling packet from 1:16385 [ 365.149148][ T5402] failed while handling packet from 1:16385 [ 365.149166][ T5402] failed while handling packet from 1:16385 [ 365.149184][ T5402] failed while handling packet from 1:16385 [ 365.149252][ T5402] failed while handling packet from 1:16385 [ 365.149264][ T5402] failed while handling packet from 1:16385 [ 365.149275][ T5402] failed while handling packet from 1:16385 [ 365.149333][ T5402] failed while handling packet from 1:16385 [ 365.149345][ T5402] failed while handling packet from 1:16385 [ 365.149357][ T5402] failed while handling packet from 1:16385 [ 365.149372][ T5402] failed while handling packet from 1:16385 [ 365.149425][ T5402] failed while handling packet from 1:16385 [ 365.149437][ T5402] failed while handling packet from 1:16385 [ 365.149455][ T5402] failed while handling packet from 1:16384 [ 365.149468][ T5402] failed while handling packet from 1:16384 [ 365.149481][ T5402] failed while handling packet from 1:16384 [ 365.149491][ T5402] failed while handling packet from 1:16384 [ 365.149504][ T5402] failed while handling packet from 1:16384 [ 365.149516][ T5402] failed while handling packet from 1:16384 [ 365.149559][ T5402] failed while handling packet from 1:16384 [ 365.149572][ T5402] failed while handling packet from 1:16384 [ 365.149583][ T5402] failed while handling packet from 1:16384 [ 365.149595][ T5402] failed while handling packet from 1:16384 [ 365.149607][ T5402] failed while handling packet from 1:16384 [ 365.149619][ T5402] failed while handling packet from 1:16384 [ 365.149631][ T5402] failed while handling packet from 1:16384 [ 365.149680][ T5402] failed while handling packet from 1:16384 [ 365.149693][ T5402] failed while handling packet from 1:16384 [ 365.149704][ T5402] failed while handling packet from 1:16384 [ 365.149717][ T5402] failed while handling packet from 1:16384 [ 365.149737][ T5402] failed while handling packet from 1:16384 [ 365.149750][ T5402] failed while handling packet from 1:16384 [ 365.149761][ T5402] failed while handling packet from 1:16384 [ 365.149773][ T5402] failed while handling packet from 1:16384 [ 365.149844][ T5402] failed while handling packet from 1:16384 [ 365.149855][ T5402] failed while handling packet from 1:16384 [ 365.492733][T20330] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5566'. [ 365.522181][T20321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.531126][T20321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.543552][T20332] loop7: detected capacity change from 0 to 16384 [ 365.656439][T20337] loop0: detected capacity change from 0 to 1024 [ 365.701434][T20335] loop7: detected capacity change from 16384 to 0 [ 365.747750][T20344] loop0: detected capacity change from 0 to 128 [ 365.758866][T20344] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 365.787209][T20344] FAT-fs (loop0): error, corrupted file size (i_pos 548, 512) [ 365.794871][T20344] FAT-fs (loop0): Filesystem has been set read-only [ 365.904880][T20347] loop4: detected capacity change from 0 to 512 [ 365.923454][T20350] loop0: detected capacity change from 0 to 128 [ 365.931712][T20350] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 365.950261][T20350] FAT-fs (loop0): error, corrupted file size (i_pos 548, 512) [ 365.957905][T20350] FAT-fs (loop0): Filesystem has been set read-only [ 365.969329][T20352] loop4: detected capacity change from 0 to 512 [ 366.185090][T20368] loop0: detected capacity change from 0 to 1024 [ 366.196638][T20370] loop1: detected capacity change from 0 to 128 [ 366.215182][T20370] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 366.250571][T20370] FAT-fs (loop1): error, corrupted file size (i_pos 548, 512) [ 366.258138][T20370] FAT-fs (loop1): Filesystem has been set read-only [ 366.422070][T20384] loop4: detected capacity change from 0 to 1024 [ 366.429583][T20384] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 366.462258][T20384] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 366.470482][T20384] EXT4-fs (loop4): orphan cleanup on readonly fs [ 366.477867][T20384] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 366.492752][T20384] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 366.500017][T20384] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.5582: Freeing blocks not in datazone - block = 0, count = 4096 [ 366.516666][T20384] EXT4-fs (loop4): 1 orphan inode deleted [ 366.649923][T20393] loop7: detected capacity change from 0 to 16384 [ 366.658110][T20391] loop0: detected capacity change from 0 to 512 [ 366.791037][T20395] loop7: detected capacity change from 16384 to 0 [ 366.801850][ C1] I/O error, dev loop7, sector 3328 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 366.970179][T20415] loop0: detected capacity change from 0 to 512 [ 366.976948][T20415] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 366.985863][T20415] EXT4-fs (loop0): orphan cleanup on readonly fs [ 366.993078][T20415] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 367.007854][T20415] EXT4-fs (loop0): Remounting filesystem read-only [ 367.014983][T20415] EXT4-fs (loop0): 1 truncate cleaned up [ 367.032602][T20403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.041708][T20403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.100148][T20420] loop4: detected capacity change from 0 to 512 [ 367.113688][T20424] loop7: detected capacity change from 0 to 128 [ 367.121928][T20424] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 367.148730][T20424] FAT-fs (loop7): error, corrupted file size (i_pos 548, 512) [ 367.156364][T20424] FAT-fs (loop7): Filesystem has been set read-only [ 367.252119][ T29] kauditd_printk_skb: 373 callbacks suppressed [ 367.252131][ T29] audit: type=1400 audit(1756503261.645:15685): avc: denied { create } for pid=20429 comm="syz.4.5602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 367.280181][T20431] loop0: detected capacity change from 0 to 512 [ 367.299823][ T29] audit: type=1326 audit(1756503261.675:15686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20429 comm="syz.4.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5484d6ebe9 code=0x7ffc0000 [ 367.324197][ T29] audit: type=1326 audit(1756503261.675:15687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20429 comm="syz.4.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5484d6ebe9 code=0x7ffc0000 [ 367.348346][ T29] audit: type=1326 audit(1756503261.675:15688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20429 comm="syz.4.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5484d6ebe9 code=0x7ffc0000 [ 367.372036][ T29] audit: type=1326 audit(1756503261.675:15689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20429 comm="syz.4.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5484d6ebe9 code=0x7ffc0000 [ 367.396345][ T29] audit: type=1326 audit(1756503261.675:15690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20429 comm="syz.4.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5484d6ebe9 code=0x7ffc0000 [ 367.419927][ T29] audit: type=1326 audit(1756503261.675:15691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20429 comm="syz.4.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5484d6ebe9 code=0x7ffc0000 [ 367.444222][ T29] audit: type=1326 audit(1756503261.675:15692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20429 comm="syz.4.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5484d6ebe9 code=0x7ffc0000 [ 367.467961][ T29] audit: type=1326 audit(1756503261.685:15693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20429 comm="syz.4.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5484d6ebe9 code=0x7ffc0000 [ 367.491624][ T29] audit: type=1326 audit(1756503261.685:15694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20429 comm="syz.4.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5484d6ebe9 code=0x7ffc0000 [ 367.649688][T20441] loop7: detected capacity change from 0 to 512 [ 367.771605][T20450] loop1: detected capacity change from 0 to 512 [ 367.807504][T20453] loop0: detected capacity change from 0 to 1024 [ 367.864361][T20453] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 367.875650][T20453] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 367.883978][T20453] EXT4-fs (loop0): orphan cleanup on readonly fs [ 367.891875][T20453] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 367.906940][T20453] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 367.915170][T20453] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.5609: Freeing blocks not in datazone - block = 0, count = 4096 [ 367.929409][T20453] EXT4-fs (loop0): 1 orphan inode deleted [ 367.935820][T20453] EXT4-fs mount: 87 callbacks suppressed [ 367.935835][T20453] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 368.098624][T20462] loop1: detected capacity change from 0 to 128 [ 368.117111][T20462] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 368.134898][T20462] FAT-fs (loop1): error, corrupted file size (i_pos 548, 512) [ 368.142703][T20462] FAT-fs (loop1): Filesystem has been set read-only [ 368.198901][T20473] loop7: detected capacity change from 0 to 512 [ 368.207360][T20473] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 368.219357][T20473] EXT4-fs (loop7): orphan cleanup on readonly fs [ 368.226047][T20473] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 368.241032][T20473] EXT4-fs (loop7): Remounting filesystem read-only [ 368.247657][T20473] EXT4-fs (loop7): 1 truncate cleaned up [ 368.253885][T20473] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 368.276081][T19707] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.344447][T20479] __nla_validate_parse: 10 callbacks suppressed [ 368.344462][T20479] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5621'. [ 368.485575][T12255] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.514128][T20487] loop7: detected capacity change from 0 to 16384 [ 368.548067][T20485] loop6: detected capacity change from 0 to 512 [ 368.565046][T20481] netlink: 124 bytes leftover after parsing attributes in process `syz.1.5620'. [ 368.580602][T20483] netlink: 124 bytes leftover after parsing attributes in process `syz.7.5622'. [ 368.600608][T20481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.612938][T20481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.689978][T20488] loop7: detected capacity change from 16384 to 0 [ 368.690528][ C1] I/O error, dev loop7, sector 12544 op 0x0:(READ) flags 0x80700 phys_seg 25 prio class 2 [ 368.870447][T20492] loop6: detected capacity change from 0 to 512 [ 369.044745][T20515] sch_fq: defrate 4294967295 ignored. [ 369.059141][T20517] netlink: 'syz.0.5630': attribute type 13 has an invalid length. [ 369.072116][T20517] loop0: detected capacity change from 0 to 512 [ 369.082942][T20517] EXT4-fs (loop0): too many log groups per flexible block group [ 369.090900][T20517] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 369.098151][T20517] EXT4-fs (loop0): mount failed [ 369.115058][T20517] serio: Serial port ptm0 [ 369.173931][T20527] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5633'. [ 369.260988][T20534] netlink: 'syz.0.5636': attribute type 13 has an invalid length. [ 369.350887][T20534] loop0: detected capacity change from 0 to 512 [ 369.388153][T20545] sch_fq: defrate 4294967295 ignored. [ 369.397387][T20534] EXT4-fs (loop0): too many log groups per flexible block group [ 369.407492][T20534] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 369.416582][T20534] EXT4-fs (loop0): mount failed [ 369.450776][T20534] serio: Serial port ptm0 [ 369.535037][T20563] loop0: detected capacity change from 0 to 512 [ 369.550527][T20563] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.5643: casefold flag without casefold feature [ 369.568307][T20563] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.5643: couldn't read orphan inode 15 (err -117) [ 369.588803][T20563] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.692865][T20554] netlink: 124 bytes leftover after parsing attributes in process `syz.7.5642'. [ 369.744857][T20565] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5644'. [ 369.758411][T20565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.767291][T20565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.307592][T20619] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5647'. [ 370.418892][T12255] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.465908][T20637] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5654'. [ 370.489956][T20641] loop1: detected capacity change from 0 to 512 [ 370.497154][T20641] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 370.506094][T20641] EXT4-fs (loop1): orphan cleanup on readonly fs [ 370.513142][T20641] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 370.528269][T20641] EXT4-fs (loop1): Remounting filesystem read-only [ 370.536682][T20641] EXT4-fs (loop1): 1 truncate cleaned up [ 370.543135][T20641] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 370.573123][T11090] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.601597][T20650] loop1: detected capacity change from 0 to 128 [ 370.621557][T20650] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 370.650469][T20650] FAT-fs (loop1): error, corrupted file size (i_pos 548, 512) [ 370.657521][T20635] netlink: 124 bytes leftover after parsing attributes in process `syz.7.5656'. [ 370.658385][T20650] FAT-fs (loop1): Filesystem has been set read-only [ 370.800928][T20671] loop0: detected capacity change from 0 to 512 [ 370.809853][T20671] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.5665: casefold flag without casefold feature [ 370.823291][T20671] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.5665: couldn't read orphan inode 15 (err -117) [ 370.836092][T20671] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.971578][T20680] loop7: detected capacity change from 0 to 16384 [ 371.128692][T20681] loop7: detected capacity change from 16384 to 0 [ 371.234811][T20690] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5673'. [ 371.498198][T20706] loop7: detected capacity change from 0 to 512 [ 371.571745][T20720] loop7: detected capacity change from 0 to 512 [ 371.589043][T20720] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 371.614534][T20720] EXT4-fs (loop7): orphan cleanup on readonly fs [ 371.630724][T20720] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 371.645622][T20720] EXT4-fs (loop7): Remounting filesystem read-only [ 371.652410][T20720] EXT4-fs (loop7): 1 truncate cleaned up [ 371.658756][T20720] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 371.659466][T12255] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.689863][T19707] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.776396][T20737] bridge0: entered promiscuous mode [ 371.781981][T20737] macsec1: entered promiscuous mode [ 371.784120][T20739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.790040][T20737] bridge0: port 3(macsec1) entered blocking state [ 371.799086][T20739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.802590][T20737] bridge0: port 3(macsec1) entered disabled state [ 371.813687][T20739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.817752][T20737] macsec1: entered allmulticast mode [ 371.826561][T20739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.830458][T20737] bridge0: entered allmulticast mode [ 371.841896][T20739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.851987][T20737] macsec1: left allmulticast mode [ 371.852593][T20739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.857041][T20737] bridge0: left allmulticast mode [ 371.870540][T20737] bridge0: left promiscuous mode [ 371.870808][T20739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.884916][T20739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.924428][T20742] sch_fq: defrate 4294967295 ignored. [ 371.987605][T20748] netlink: 'syz.0.5699': attribute type 13 has an invalid length. [ 372.019345][T20750] ieee802154 phy0 wpan0: encryption failed: -22 [ 372.038901][T20750] bridge0: entered promiscuous mode [ 372.044244][T20750] macsec1: entered promiscuous mode [ 372.050937][T20750] bridge0: port 3(macsec1) entered blocking state [ 372.057524][T20750] bridge0: port 3(macsec1) entered disabled state [ 372.059267][T20748] loop0: detected capacity change from 0 to 512 [ 372.064369][T20750] macsec1: entered allmulticast mode [ 372.075765][T20750] bridge0: entered allmulticast mode [ 372.084590][T20750] macsec1: left allmulticast mode [ 372.089773][T20750] bridge0: left allmulticast mode [ 372.098667][T20748] EXT4-fs (loop0): too many log groups per flexible block group [ 372.103348][T20750] bridge0: left promiscuous mode [ 372.106900][T20748] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 372.118640][T20748] EXT4-fs (loop0): mount failed [ 372.133878][T20748] serio: Serial port ptm0 [ 372.169207][T20756] loop6: detected capacity change from 0 to 512 [ 372.182530][T20756] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 372.201241][T20756] EXT4-fs (loop6): orphan cleanup on readonly fs [ 372.207748][T20756] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 372.242032][T20762] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=20762 comm=syz.1.5704 [ 372.261639][T20756] EXT4-fs (loop6): Remounting filesystem read-only [ 372.285532][ T29] kauditd_printk_skb: 458 callbacks suppressed [ 372.285545][ T29] audit: type=1400 audit(1756503266.667:16152): avc: denied { create } for pid=20765 comm="syz.0.5706" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 372.287122][T20756] EXT4-fs (loop6): 1 truncate cleaned up [ 372.296736][T20766] loop0: detected capacity change from 0 to 512 [ 372.314545][T20756] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 372.323113][ T29] audit: type=1400 audit(1756503266.687:16153): avc: denied { write } for pid=20765 comm="syz.0.5706" name="file0" dev="tmpfs" ino=3001 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 372.361210][ T29] audit: type=1400 audit(1756503266.687:16154): avc: denied { open } for pid=20765 comm="syz.0.5706" path="/530/file0" dev="tmpfs" ino=3001 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 372.385278][T19036] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.395704][T20766] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.396183][ T29] audit: type=1400 audit(1756503266.787:16155): avc: denied { create } for pid=20769 comm="syz.7.5708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 372.418417][T20766] ext4 filesystem being mounted at /530/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.456629][ T29] audit: type=1326 audit(1756503266.797:16156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20767 comm="syz.1.5707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5ab80ebe9 code=0x7ffc0000 [ 372.480669][ T29] audit: type=1326 audit(1756503266.807:16157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20767 comm="syz.1.5707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7fd5ab80ebe9 code=0x7ffc0000 [ 372.504380][ T29] audit: type=1400 audit(1756503266.827:16158): avc: denied { connect } for pid=20769 comm="syz.7.5708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 372.524412][ T29] audit: type=1400 audit(1756503266.827:16159): avc: denied { write } for pid=20769 comm="syz.7.5708" path="socket:[64251]" dev="sockfs" ino=64251 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 372.558117][T20775] sch_fq: defrate 4294967295 ignored. [ 372.568939][ T29] audit: type=1326 audit(1756503266.957:16160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20767 comm="syz.1.5707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5ab80ebe9 code=0x7ffc0000 [ 372.592820][ T29] audit: type=1326 audit(1756503266.957:16161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20767 comm="syz.1.5707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5ab80ebe9 code=0x7ffc0000 [ 372.747261][T20792] loop7: detected capacity change from 0 to 512 [ 372.764854][T20792] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 372.807430][T20792] EXT4-fs (loop7): 1 truncate cleaned up [ 372.813478][T20794] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=20794 comm=syz.1.5717 [ 373.180912][T20792] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.196735][T20792] netlink: zone id is out of range [ 373.202139][T20792] netlink: zone id is out of range [ 373.207446][T20792] netlink: zone id is out of range [ 373.214190][T12255] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.214333][T20792] netlink: zone id is out of range [ 373.228687][T20792] netlink: zone id is out of range [ 373.233864][T20792] netlink: zone id is out of range [ 373.240882][T20792] netlink: zone id is out of range [ 373.246160][T20792] netlink: zone id is out of range [ 373.251537][T20792] netlink: zone id is out of range [ 373.256644][T20792] netlink: zone id is out of range [ 373.279057][T20808] FAULT_INJECTION: forcing a failure. [ 373.279057][T20808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.292231][T20808] CPU: 0 UID: 0 PID: 20808 Comm: syz.1.5722 Not tainted syzkaller #0 PREEMPT(voluntary) [ 373.292326][T20808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 373.292336][T20808] Call Trace: [ 373.292341][T20808] [ 373.292347][T20808] __dump_stack+0x1d/0x30 [ 373.292442][T20808] dump_stack_lvl+0xe8/0x140 [ 373.292459][T20808] dump_stack+0x15/0x1b [ 373.292477][T20808] should_fail_ex+0x265/0x280 [ 373.292547][T20808] should_fail+0xb/0x20 [ 373.292561][T20808] should_fail_usercopy+0x1a/0x20 [ 373.292645][T20808] _copy_from_user+0x1c/0xb0 [ 373.292666][T20808] sctp_setsockopt+0x154/0xe30 [ 373.292694][T20808] sock_common_setsockopt+0x66/0x80 [ 373.292738][T20808] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 373.292827][T20808] __sys_setsockopt+0x184/0x200 [ 373.292848][T20808] __x64_sys_setsockopt+0x64/0x80 [ 373.292868][T20808] x64_sys_call+0x20ec/0x2ff0 [ 373.292885][T20808] do_syscall_64+0xd2/0x200 [ 373.292996][T20808] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 373.293015][T20808] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 373.293037][T20808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.293065][T20808] RIP: 0033:0x7fd5ab80ebe9 [ 373.293081][T20808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.293095][T20808] RSP: 002b:00007fd5aa277038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 373.293114][T20808] RAX: ffffffffffffffda RBX: 00007fd5aba35fa0 RCX: 00007fd5ab80ebe9 [ 373.293127][T20808] RDX: 0000000000000018 RSI: 0000000000000084 RDI: 0000000000000004 [ 373.293143][T20808] RBP: 00007fd5aa277090 R08: 0000000000000008 R09: 0000000000000000 [ 373.293153][T20808] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 373.293164][T20808] R13: 00007fd5aba36038 R14: 00007fd5aba35fa0 R15: 00007ffd74725c38 [ 373.293231][T20808] [ 373.341993][T19707] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.575814][T20819] __nla_validate_parse: 4 callbacks suppressed [ 373.575828][T20819] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5726'. [ 373.610500][T20825] loop7: detected capacity change from 0 to 128 [ 373.628357][T20825] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 373.659599][T20829] sch_fq: defrate 4294967295 ignored. [ 373.681488][T20825] FAT-fs (loop7): error, corrupted file size (i_pos 548, 512) [ 373.689115][T20825] FAT-fs (loop7): Filesystem has been set read-only [ 373.704207][T20831] netlink: 'syz.4.5732': attribute type 13 has an invalid length. [ 373.814955][T20831] loop4: detected capacity change from 0 to 512 [ 373.852146][T20831] EXT4-fs (loop4): too many log groups per flexible block group [ 373.861481][T20831] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 373.869337][T20831] EXT4-fs (loop4): mount failed [ 373.909516][T20831] serio: Serial port ptm0 [ 374.039344][T20848] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5738'. [ 374.061787][T20852] netlink: 'syz.7.5740': attribute type 13 has an invalid length. [ 374.153577][T20852] loop7: detected capacity change from 0 to 512 [ 374.266408][T20860] loop1: detected capacity change from 0 to 512 [ 374.293948][T20852] EXT4-fs (loop7): too many log groups per flexible block group [ 374.302591][T20852] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 374.322111][T20860] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 374.386935][T20852] EXT4-fs (loop7): mount failed [ 374.411794][T20860] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 374.438372][T20858] loop4: detected capacity change from 0 to 512 [ 374.469025][T20852] serio: Serial port ptm0 [ 374.514754][T20867] pimreg: entered allmulticast mode [ 374.547435][T20867] 9pnet_fd: Insufficient options for proto=fd [ 374.602982][T20878] netlink: 'syz.7.5750': attribute type 13 has an invalid length. [ 374.639158][T20880] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5751'. [ 374.690614][T20884] loop1: detected capacity change from 0 to 512 [ 374.691091][T20878] loop7: detected capacity change from 0 to 512 [ 374.723049][T20884] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 374.748010][T20884] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 374.777193][T20878] EXT4-fs (loop7): too many log groups per flexible block group [ 374.785513][T20878] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 374.836272][T20878] EXT4-fs (loop7): mount failed [ 374.859463][T20878] serio: Serial port ptm0 [ 374.861065][T20895] loop0: detected capacity change from 0 to 512 [ 374.891900][T20895] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 374.903708][T20895] EXT4-fs (loop0): orphan cleanup on readonly fs [ 374.915629][T20895] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 374.941810][T20895] EXT4-fs (loop0): Remounting filesystem read-only [ 374.948561][T20895] EXT4-fs (loop0): 1 truncate cleaned up [ 374.962017][T20895] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 374.987742][T12255] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.014989][T20906] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5763'. [ 375.100334][T20917] netlink: 'syz.1.5764': attribute type 11 has an invalid length. [ 375.108285][T20917] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5764'. [ 375.108906][T20891] loop4: detected capacity change from 0 to 512 [ 375.121943][T20917] 9pnet_fd: Insufficient options for proto=fd [ 375.157768][T20921] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5768'. [ 375.168518][T20923] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5769'. [ 375.259015][T20937] 9pnet: p9_errstr2errno: server reported unknown error [ 375.259587][T20936] 9pnet: p9_errstr2errno: server reported unknown error [ 375.289413][T20919] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5767'. [ 375.300233][T20937] FAULT_INJECTION: forcing a failure. [ 375.300233][T20937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.301315][T20919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.313410][T20937] CPU: 0 UID: 0 PID: 20937 Comm: syz.7.5776 Not tainted syzkaller #0 PREEMPT(voluntary) [ 375.313433][T20937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 375.313477][T20937] Call Trace: [ 375.313484][T20937] [ 375.313492][T20937] __dump_stack+0x1d/0x30 [ 375.313514][T20937] dump_stack_lvl+0xe8/0x140 [ 375.313531][T20937] dump_stack+0x15/0x1b [ 375.313546][T20937] should_fail_ex+0x265/0x280 [ 375.313566][T20937] should_fail+0xb/0x20 [ 375.313597][T20937] should_fail_usercopy+0x1a/0x20 [ 375.313616][T20937] _copy_from_user+0x1c/0xb0 [ 375.313641][T20937] memdup_user+0x5e/0xd0 [ 375.313741][T20937] strndup_user+0x68/0xb0 [ 375.313763][T20937] __se_sys_mount+0x4d/0x2e0 [ 375.313794][T20937] ? fput+0x8f/0xc0 [ 375.313819][T20937] ? ksys_write+0x192/0x1a0 [ 375.313863][T20937] __x64_sys_mount+0x67/0x80 [ 375.313883][T20937] x64_sys_call+0x2b4d/0x2ff0 [ 375.313902][T20937] do_syscall_64+0xd2/0x200 [ 375.313962][T20937] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 375.314036][T20937] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 375.314059][T20937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.314078][T20937] RIP: 0033:0x7ff8a422ebe9 [ 375.314093][T20937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.314174][T20937] RSP: 002b:00007ff8a2c8f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 375.314192][T20937] RAX: ffffffffffffffda RBX: 00007ff8a4455fa0 RCX: 00007ff8a422ebe9 [ 375.314204][T20937] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 375.314216][T20937] RBP: 00007ff8a2c8f090 R08: 0000200000000080 R09: 0000000000000000 [ 375.314228][T20937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.314239][T20937] R13: 00007ff8a4456038 R14: 00007ff8a4455fa0 R15: 00007ffeae7ab7f8 [ 375.314256][T20937] [ 375.509326][T20919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.587337][T20950] pim6reg1: entered promiscuous mode [ 375.592679][T20950] pim6reg1: entered allmulticast mode [ 375.617366][T20952] loop1: detected capacity change from 0 to 512 [ 375.660822][T20955] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5782'. [ 375.727075][T20964] loop4: detected capacity change from 0 to 128 [ 375.734059][T20966] netlink: 'syz.1.5788': attribute type 1 has an invalid length. [ 375.742088][T20966] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.5788'. [ 375.754614][T20968] sch_fq: defrate 4294967295 ignored. [ 375.761184][T20964] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 375.781454][T20964] FAT-fs (loop4): error, corrupted file size (i_pos 548, 512) [ 375.789305][T20964] FAT-fs (loop4): Filesystem has been set read-only [ 375.840186][T20971] loop7: detected capacity change from 0 to 1024 [ 375.871639][T20971] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.924361][T19707] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.990809][T20987] bridge_slave_1: left allmulticast mode [ 375.996796][T20987] bridge_slave_1: left promiscuous mode [ 376.002516][T20987] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.010771][T20987] bridge_slave_0: left allmulticast mode [ 376.016476][T20987] bridge_slave_0: left promiscuous mode [ 376.022112][T20987] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.074775][T20991] loop0: detected capacity change from 0 to 512 [ 376.169907][T20999] FAULT_INJECTION: forcing a failure. [ 376.169907][T20999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.183129][T20999] CPU: 1 UID: 0 PID: 20999 Comm: syz.7.5800 Not tainted syzkaller #0 PREEMPT(voluntary) [ 376.183169][T20999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 376.183204][T20999] Call Trace: [ 376.183211][T20999] [ 376.183219][T20999] __dump_stack+0x1d/0x30 [ 376.183240][T20999] dump_stack_lvl+0xe8/0x140 [ 376.183259][T20999] dump_stack+0x15/0x1b [ 376.183308][T20999] should_fail_ex+0x265/0x280 [ 376.183334][T20999] should_fail+0xb/0x20 [ 376.183355][T20999] should_fail_usercopy+0x1a/0x20 [ 376.183390][T20999] _copy_to_user+0x20/0xa0 [ 376.183445][T20999] simple_read_from_buffer+0xb5/0x130 [ 376.183465][T20999] proc_fail_nth_read+0x10e/0x150 [ 376.183495][T20999] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 376.183570][T20999] vfs_read+0x1a8/0x770 [ 376.183590][T20999] ? __rcu_read_unlock+0x4f/0x70 [ 376.183647][T20999] ? __fget_files+0x184/0x1c0 [ 376.183671][T20999] ksys_read+0xda/0x1a0 [ 376.183692][T20999] __x64_sys_read+0x40/0x50 [ 376.183712][T20999] x64_sys_call+0x27bc/0x2ff0 [ 376.183743][T20999] do_syscall_64+0xd2/0x200 [ 376.183783][T20999] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 376.183801][T20999] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 376.183823][T20999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.183896][T20999] RIP: 0033:0x7ff8a422d5fc [ 376.183911][T20999] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 376.183928][T20999] RSP: 002b:00007ff8a2c8f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 376.183947][T20999] RAX: ffffffffffffffda RBX: 00007ff8a4455fa0 RCX: 00007ff8a422d5fc [ 376.184040][T20999] RDX: 000000000000000f RSI: 00007ff8a2c8f0a0 RDI: 0000000000000003 [ 376.184052][T20999] RBP: 00007ff8a2c8f090 R08: 0000000000000000 R09: 0000000000000000 [ 376.184064][T20999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.184077][T20999] R13: 00007ff8a4456038 R14: 00007ff8a4455fa0 R15: 00007ffeae7ab7f8 [ 376.184104][T20999] [ 376.601682][T21018] loop1: detected capacity change from 0 to 512 [ 376.652340][T21011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.661017][T21011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.771245][T21026] FAULT_INJECTION: forcing a failure. [ 376.771245][T21026] name failslab, interval 1, probability 0, space 0, times 0 [ 376.784202][T21026] CPU: 0 UID: 0 PID: 21026 Comm: syz.1.5812 Not tainted syzkaller #0 PREEMPT(voluntary) [ 376.784227][T21026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 376.784238][T21026] Call Trace: [ 376.784315][T21026] [ 376.784328][T21026] __dump_stack+0x1d/0x30 [ 376.784349][T21026] dump_stack_lvl+0xe8/0x140 [ 376.784364][T21026] dump_stack+0x15/0x1b [ 376.784379][T21026] should_fail_ex+0x265/0x280 [ 376.784399][T21026] should_failslab+0x8c/0xb0 [ 376.784420][T21026] kmem_cache_alloc_node_noprof+0x57/0x320 [ 376.784512][T21026] ? __alloc_skb+0x101/0x320 [ 376.784557][T21026] __alloc_skb+0x101/0x320 [ 376.784567][T21026] netlink_alloc_large_skb+0xba/0xf0 [ 376.784620][T21026] netlink_sendmsg+0x3cf/0x6b0 [ 376.784711][T21026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.784723][T21026] __sock_sendmsg+0x145/0x180 [ 376.784751][T21026] ____sys_sendmsg+0x31e/0x4e0 [ 376.784764][T21026] ___sys_sendmsg+0x17b/0x1d0 [ 376.784783][T21026] __x64_sys_sendmsg+0xd4/0x160 [ 376.784839][T21026] x64_sys_call+0x191e/0x2ff0 [ 376.784851][T21026] do_syscall_64+0xd2/0x200 [ 376.784865][T21026] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 376.784934][T21026] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 376.785022][T21026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.785036][T21026] RIP: 0033:0x7fd5ab80ebe9 [ 376.785045][T21026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.785054][T21026] RSP: 002b:00007fd5aa277038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.785098][T21026] RAX: ffffffffffffffda RBX: 00007fd5aba35fa0 RCX: 00007fd5ab80ebe9 [ 376.785105][T21026] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 376.785112][T21026] RBP: 00007fd5aa277090 R08: 0000000000000000 R09: 0000000000000000 [ 376.785119][T21026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.785125][T21026] R13: 00007fd5aba36038 R14: 00007fd5aba35fa0 R15: 00007ffd74725c38 [ 376.785135][T21026] [ 377.065740][T21036] loop1: detected capacity change from 0 to 1024 [ 377.077328][T21036] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.139333][T11090] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.192608][T21045] loop4: detected capacity change from 0 to 512 [ 377.210875][T21045] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 377.226086][T21045] EXT4-fs (loop4): orphan cleanup on readonly fs [ 377.249689][T21045] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 377.277707][T21045] EXT4-fs (loop4): Remounting filesystem read-only [ 377.284435][T21045] EXT4-fs (loop4): 1 truncate cleaned up [ 377.303778][ T29] kauditd_printk_skb: 494 callbacks suppressed [ 377.303792][ T29] audit: type=1326 audit(1756503271.690:16656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21054 comm="syz.7.5824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a422ebe9 code=0x7ffc0000 [ 377.318627][T21045] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 377.360061][ T29] audit: type=1326 audit(1756503271.730:16657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21054 comm="syz.7.5824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8a422ebe9 code=0x7ffc0000 [ 377.383844][ T29] audit: type=1326 audit(1756503271.730:16658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21054 comm="syz.7.5824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a422ebe9 code=0x7ffc0000 [ 377.407775][ T29] audit: type=1326 audit(1756503271.730:16659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21054 comm="syz.7.5824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a422ebe9 code=0x7ffc0000 [ 377.431671][ T29] audit: type=1326 audit(1756503271.730:16660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21054 comm="syz.7.5824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8a422ebe9 code=0x7ffc0000 [ 377.455469][ T29] audit: type=1326 audit(1756503271.740:16661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21054 comm="syz.7.5824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a422ebe9 code=0x7ffc0000 [ 377.480051][ T29] audit: type=1326 audit(1756503271.740:16662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21054 comm="syz.7.5824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a422ebe9 code=0x7ffc0000 [ 377.503779][ T29] audit: type=1326 audit(1756503271.740:16663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21054 comm="syz.7.5824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8a422ebe9 code=0x7ffc0000 [ 377.527807][ T29] audit: type=1326 audit(1756503271.750:16664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21054 comm="syz.7.5824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a422ebe9 code=0x7ffc0000 [ 377.551664][ T29] audit: type=1326 audit(1756503271.750:16665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21054 comm="syz.7.5824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a422ebe9 code=0x7ffc0000 [ 377.585320][T11661] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.638031][T21066] loop6: detected capacity change from 0 to 512 [ 377.702715][T21066] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.718848][ T12] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.732264][T21066] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 377.787848][ T12] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.863755][ T12] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.931786][T21092] FAULT_INJECTION: forcing a failure. [ 377.931786][T21092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.945484][T21092] CPU: 0 UID: 0 PID: 21092 Comm: syz.0.5837 Not tainted syzkaller #0 PREEMPT(voluntary) [ 377.945524][T21092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 377.945536][T21092] Call Trace: [ 377.945544][T21092] [ 377.945553][T21092] __dump_stack+0x1d/0x30 [ 377.945575][T21092] dump_stack_lvl+0xe8/0x140 [ 377.945636][T21092] dump_stack+0x15/0x1b [ 377.945653][T21092] should_fail_ex+0x265/0x280 [ 377.945675][T21092] should_fail+0xb/0x20 [ 377.945692][T21092] should_fail_usercopy+0x1a/0x20 [ 377.945714][T21092] _copy_from_user+0x1c/0xb0 [ 377.945765][T21092] ____sys_sendmsg+0x1c5/0x4e0 [ 377.945791][T21092] ___sys_sendmsg+0x17b/0x1d0 [ 377.945818][T21092] __x64_sys_sendmsg+0xd4/0x160 [ 377.945838][T21092] x64_sys_call+0x191e/0x2ff0 [ 377.945855][T21092] do_syscall_64+0xd2/0x200 [ 377.946003][T21092] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 377.946027][T21092] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 377.946052][T21092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.946073][T21092] RIP: 0033:0x7f03f75febe9 [ 377.946088][T21092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.946186][T21092] RSP: 002b:00007f03f605f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.946207][T21092] RAX: ffffffffffffffda RBX: 00007f03f7825fa0 RCX: 00007f03f75febe9 [ 377.946220][T21092] RDX: 0000000000000081 RSI: 0000200000000700 RDI: 0000000000000003 [ 377.946233][T21092] RBP: 00007f03f605f090 R08: 0000000000000000 R09: 0000000000000000 [ 377.946245][T21092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.946258][T21092] R13: 00007f03f7826038 R14: 00007f03f7825fa0 R15: 00007ffe70cb0848 [ 377.946275][T21092] [ 377.954086][T21083] loop4: detected capacity change from 0 to 512 [ 378.163081][ T12] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.219090][T21051] chnl_net:caif_netlink_parms(): no params data found [ 378.336180][T21112] netlink: 'syz.4.5844': attribute type 13 has an invalid length. [ 378.351973][T19036] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.430557][ T12] bridge_slave_1: left allmulticast mode [ 378.436479][ T12] bridge_slave_1: left promiscuous mode [ 378.442235][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.466810][ T12] bridge_slave_0: left allmulticast mode [ 378.472603][ T12] bridge_slave_0: left promiscuous mode [ 378.478488][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.558793][T21112] loop4: detected capacity change from 0 to 512 [ 378.597824][T21112] EXT4-fs (loop4): too many log groups per flexible block group [ 378.606734][T21112] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 378.610405][T21141] loop6: detected capacity change from 0 to 512 [ 378.614200][T21112] EXT4-fs (loop4): mount failed [ 378.625943][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.639038][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.652779][T21112] serio: Serial port ptm0 [ 378.659167][ T12] bond0 (unregistering): Released all slaves [ 378.675094][T21051] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.682229][T21051] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.689681][T21051] bridge_slave_0: entered allmulticast mode [ 378.697124][T21051] bridge_slave_0: entered promiscuous mode [ 378.709230][T21051] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.716453][T21051] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.729874][T21051] bridge_slave_1: entered allmulticast mode [ 378.740347][T21051] bridge_slave_1: entered promiscuous mode [ 378.765945][ T12] hsr_slave_0: left promiscuous mode [ 378.777305][ T12] hsr_slave_1: left promiscuous mode [ 378.782877][T21153] loop4: detected capacity change from 0 to 128 [ 378.789929][ T12] veth1_macvtap: left promiscuous mode [ 378.790332][T21153] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 378.811638][ T12] veth0_macvtap: left promiscuous mode [ 378.818239][ T12] veth1_vlan: left promiscuous mode [ 378.823668][ T12] veth0_vlan: left promiscuous mode [ 378.836785][T21153] FAT-fs (loop4): error, corrupted file size (i_pos 548, 512) [ 378.844468][T21153] FAT-fs (loop4): Filesystem has been set read-only [ 378.878922][ T12] pimreg3 (unregistering): left allmulticast mode [ 378.956215][ T12] team0 (unregistering): Port device team_slave_1 removed [ 378.966887][ T12] team0 (unregistering): Port device team_slave_0 removed [ 379.040886][T21051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.061596][T21051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.106417][T21051] team0: Port device team_slave_0 added [ 379.112632][T21175] netlink: 'syz.6.5861': attribute type 13 has an invalid length. [ 379.130691][T21051] team0: Port device team_slave_1 added [ 379.159512][T21051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.166613][T21051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.193142][T21051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.205514][T21051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.212483][T21051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.238524][T21051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.282064][T21051] hsr_slave_0: entered promiscuous mode [ 379.282868][T21175] loop6: detected capacity change from 0 to 512 [ 379.300942][T21051] hsr_slave_1: entered promiscuous mode [ 379.323684][T21051] debugfs: 'hsr0' already exists in 'hsr' [ 379.329489][T21051] Cannot create hsr debugfs directory [ 379.353650][T21175] EXT4-fs (loop6): too many log groups per flexible block group [ 379.361999][T21175] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 379.417218][T21175] EXT4-fs (loop6): mount failed [ 379.428185][T21202] __nla_validate_parse: 8 callbacks suppressed [ 379.428199][T21202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5864'. [ 379.465318][T21204] FAULT_INJECTION: forcing a failure. [ 379.465318][T21204] name failslab, interval 1, probability 0, space 0, times 0 [ 379.477376][T21175] serio: Serial port ptm0 [ 379.478213][T21204] CPU: 1 UID: 0 PID: 21204 Comm: syz.0.5865 Not tainted syzkaller #0 PREEMPT(voluntary) [ 379.478239][T21204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 379.478252][T21204] Call Trace: [ 379.478258][T21204] [ 379.478266][T21204] __dump_stack+0x1d/0x30 [ 379.478290][T21204] dump_stack_lvl+0xe8/0x140 [ 379.478305][T21204] dump_stack+0x15/0x1b [ 379.478341][T21204] should_fail_ex+0x265/0x280 [ 379.478364][T21204] ? v9fs_mount+0x51/0x5c0 [ 379.478389][T21204] should_failslab+0x8c/0xb0 [ 379.478462][T21204] __kmalloc_cache_noprof+0x4c/0x320 [ 379.478490][T21204] v9fs_mount+0x51/0x5c0 [ 379.478513][T21204] ? selinux_capable+0x31/0x40 [ 379.478538][T21204] ? __pfx_v9fs_mount+0x10/0x10 [ 379.478594][T21204] legacy_get_tree+0x75/0xd0 [ 379.478615][T21204] vfs_get_tree+0x54/0x1d0 [ 379.478698][T21204] do_new_mount+0x207/0x5e0 [ 379.478718][T21204] ? security_capable+0x83/0x90 [ 379.478859][T21204] path_mount+0x4a4/0xb20 [ 379.478879][T21204] ? user_path_at+0x109/0x130 [ 379.478906][T21204] __se_sys_mount+0x28f/0x2e0 [ 379.478926][T21204] ? fput+0x8f/0xc0 [ 379.478961][T21204] __x64_sys_mount+0x67/0x80 [ 379.479052][T21204] x64_sys_call+0x2b4d/0x2ff0 [ 379.479073][T21204] do_syscall_64+0xd2/0x200 [ 379.479104][T21204] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 379.479127][T21204] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 379.479189][T21204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.479209][T21204] RIP: 0033:0x7f03f75febe9 [ 379.479224][T21204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.479242][T21204] RSP: 002b:00007f03f605f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 379.479327][T21204] RAX: ffffffffffffffda RBX: 00007f03f7825fa0 RCX: 00007f03f75febe9 [ 379.479339][T21204] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 379.479351][T21204] RBP: 00007f03f605f090 R08: 0000200000000240 R09: 0000000000000000 [ 379.479364][T21204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.479376][T21204] R13: 00007f03f7826038 R14: 00007f03f7825fa0 R15: 00007ffe70cb0848 [ 379.479394][T21204] [ 379.572795][T21194] loop7: detected capacity change from 0 to 512 [ 379.843214][T21227] loop6: detected capacity change from 0 to 128 [ 379.879067][T21229] loop7: detected capacity change from 0 to 512 [ 379.908532][T21227] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 379.931885][T21229] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 379.982946][T21227] FAT-fs (loop6): error, corrupted file size (i_pos 548, 512) [ 379.988116][T21197] net_ratelimit: 73 callbacks suppressed [ 379.988130][T21197] Set syz1 is full, maxelem 65536 reached [ 379.990499][T21227] FAT-fs (loop6): Filesystem has been set read-only [ 380.010364][T21229] EXT4-fs (loop7): orphan cleanup on readonly fs [ 380.057316][T21229] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 380.083710][T21247] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5871'. [ 380.094002][T21229] EXT4-fs (loop7): Remounting filesystem read-only [ 380.133490][T21229] EXT4-fs (loop7): 1 truncate cleaned up [ 380.139894][T21051] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 380.147295][T21229] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 380.171636][T21051] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 380.193011][T21051] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 380.216115][T21051] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 380.225554][T19707] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.295609][T21277] FAULT_INJECTION: forcing a failure. [ 380.295609][T21277] name failslab, interval 1, probability 0, space 0, times 0 [ 380.308287][T21277] CPU: 0 UID: 0 PID: 21277 Comm: syz.4.5874 Not tainted syzkaller #0 PREEMPT(voluntary) [ 380.308321][T21277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 380.308331][T21277] Call Trace: [ 380.308338][T21277] [ 380.308345][T21277] __dump_stack+0x1d/0x30 [ 380.308379][T21277] dump_stack_lvl+0xe8/0x140 [ 380.308398][T21277] dump_stack+0x15/0x1b [ 380.308482][T21277] should_fail_ex+0x265/0x280 [ 380.308609][T21277] should_failslab+0x8c/0xb0 [ 380.308629][T21277] kmem_cache_alloc_node_noprof+0x57/0x320 [ 380.308658][T21277] ? __alloc_skb+0x101/0x320 [ 380.308731][T21277] __alloc_skb+0x101/0x320 [ 380.308750][T21277] netlink_alloc_large_skb+0xba/0xf0 [ 380.308855][T21277] netlink_sendmsg+0x3cf/0x6b0 [ 380.308876][T21277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.308933][T21277] __sock_sendmsg+0x145/0x180 [ 380.308959][T21277] ____sys_sendmsg+0x31e/0x4e0 [ 380.309054][T21277] ___sys_sendmsg+0x17b/0x1d0 [ 380.309083][T21277] __x64_sys_sendmsg+0xd4/0x160 [ 380.309102][T21277] x64_sys_call+0x191e/0x2ff0 [ 380.309118][T21277] do_syscall_64+0xd2/0x200 [ 380.309191][T21277] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 380.309214][T21277] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 380.309237][T21277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.309258][T21277] RIP: 0033:0x7f5484d6ebe9 [ 380.309335][T21277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.309352][T21277] RSP: 002b:00007f54837cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 380.309368][T21277] RAX: ffffffffffffffda RBX: 00007f5484f95fa0 RCX: 00007f5484d6ebe9 [ 380.309379][T21277] RDX: 0000000000004886 RSI: 0000200000000240 RDI: 0000000000000003 [ 380.309389][T21277] RBP: 00007f54837cf090 R08: 0000000000000000 R09: 0000000000000000 [ 380.309474][T21277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.309486][T21277] R13: 00007f5484f96038 R14: 00007f5484f95fa0 R15: 00007ffce048f6f8 [ 380.309570][T21277] [ 380.526429][T21051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.537590][T21051] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.555807][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.562864][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.616288][T21293] sch_fq: defrate 4294967295 ignored. [ 380.629494][T21051] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 380.640011][T21051] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 380.656078][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.663225][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.684241][T21294] netlink: 'syz.6.5877': attribute type 13 has an invalid length. [ 380.744783][T21051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.799345][T21320] loop6: detected capacity change from 0 to 512 [ 380.827669][T21320] EXT4-fs (loop6): too many log groups per flexible block group [ 380.835693][T21320] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 380.849820][T21320] EXT4-fs (loop6): mount failed [ 380.872843][T21294] serio: Serial port ptm0 [ 380.881828][T21051] veth0_vlan: entered promiscuous mode [ 380.897038][T21051] veth1_vlan: entered promiscuous mode [ 380.899475][T21332] netlink: 'syz.4.5884': attribute type 11 has an invalid length. [ 380.910477][T21332] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5884'. [ 380.913501][T21051] veth0_macvtap: entered promiscuous mode [ 380.928185][T21051] veth1_macvtap: entered promiscuous mode [ 380.950588][T21332] 9pnet_fd: Insufficient options for proto=fd [ 380.969832][T21338] loop7: detected capacity change from 0 to 128 [ 380.978458][T21051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.984706][T21338] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 381.015264][T21338] FAT-fs (loop7): error, corrupted file size (i_pos 548, 512) [ 381.019432][T21051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.022941][T21338] FAT-fs (loop7): Filesystem has been set read-only [ 381.035598][ T41] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.048919][ T41] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.088617][ T41] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.106954][T21347] loop6: detected capacity change from 0 to 2048 [ 381.111607][T21344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5890'. [ 381.123136][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.139833][T21344] loop4: detected capacity change from 0 to 164 [ 381.179189][T21353] loop1: detected capacity change from 0 to 512 [ 381.184182][T21347] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.199203][T21353] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 381.218606][T21353] EXT4-fs (loop1): orphan cleanup on readonly fs [ 381.233697][T21353] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 381.286329][T21353] EXT4-fs (loop1): Remounting filesystem read-only [ 381.300450][T21353] EXT4-fs (loop1): 1 truncate cleaned up [ 381.314112][T21353] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 381.335772][T19036] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.397447][T21051] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.426033][T21372] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5899'. [ 381.500554][T21378] netlink: 'syz.1.5901': attribute type 11 has an invalid length. [ 381.508473][T21378] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5901'. [ 381.535694][T21378] 9pnet_fd: Insufficient options for proto=fd [ 381.610938][T21368] loop4: detected capacity change from 0 to 512 [ 381.649749][T21382] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5904'. [ 381.658958][T21382] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5904'. [ 381.713145][T21396] loop7: detected capacity change from 0 to 1024 [ 381.726936][T21400] loop4: detected capacity change from 0 to 512 [ 381.738618][T21396] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.768907][T21400] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.784002][T21400] ext4 filesystem being mounted at /563/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 381.794210][T21409] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5914'. [ 381.795948][T19707] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.851832][T21414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.863151][T21414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.879148][T21394] netlink: 124 bytes leftover after parsing attributes in process `syz.6.5907'. [ 381.912174][T11661] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.919484][T21418] syzkaller0: entered promiscuous mode [ 381.926885][T21418] syzkaller0: entered allmulticast mode [ 381.956455][T21427] netlink: 'syz.4.5920': attribute type 13 has an invalid length. [ 381.990085][T21427] loop4: detected capacity change from 0 to 512 [ 382.018544][T21427] EXT4-fs (loop4): too many log groups per flexible block group [ 382.027130][T21427] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 382.035107][T21427] EXT4-fs (loop4): mount failed [ 382.050631][T21427] serio: Serial port ptm0 [ 382.058372][T21435] loop7: detected capacity change from 0 to 512 [ 382.067340][T21435] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 382.080190][T21435] EXT4-fs (loop7): orphan cleanup on readonly fs [ 382.087197][T21435] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 382.101924][T21435] EXT4-fs (loop7): Remounting filesystem read-only [ 382.103965][T21423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.109110][T21435] EXT4-fs (loop7): 1 truncate cleaned up [ 382.123543][T21435] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 382.128852][T21423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.172732][T19707] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.200985][T21445] netlink: 'syz.7.5926': attribute type 13 has an invalid length. [ 382.262220][T21445] loop7: detected capacity change from 0 to 512 [ 382.301866][T21445] EXT4-fs (loop7): too many log groups per flexible block group [ 382.311110][T21445] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 382.320766][T21445] EXT4-fs (loop7): mount failed [ 382.334348][T21445] serio: Serial port ptm0 [ 382.441963][T21459] netlink: 'syz.4.5932': attribute type 1 has an invalid length. [ 382.526813][T21470] loop6: detected capacity change from 0 to 512 [ 382.533932][T21470] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 382.544138][T21470] EXT4-fs (loop6): orphan cleanup on readonly fs [ 382.552431][T21470] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 382.558466][T21473] loop7: detected capacity change from 0 to 128 [ 382.572503][T21470] EXT4-fs (loop6): Remounting filesystem read-only [ 382.580479][T21470] EXT4-fs (loop6): 1 truncate cleaned up [ 382.587047][T21470] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 382.617029][T21473] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 382.631567][T19036] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.653299][T21473] FAT-fs (loop7): error, corrupted file size (i_pos 548, 512) [ 382.660803][T21473] FAT-fs (loop7): Filesystem has been set read-only [ 382.675885][ T29] kauditd_printk_skb: 489 callbacks suppressed [ 382.675899][ T29] audit: type=1326 audit(1756503277.063:17155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21476 comm="syz.0.5941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f75febe9 code=0x7ffc0000 [ 382.706152][ T29] audit: type=1326 audit(1756503277.063:17156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21476 comm="syz.0.5941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f75febe9 code=0x7ffc0000 [ 382.730418][ T29] audit: type=1326 audit(1756503277.063:17157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21476 comm="syz.0.5941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03f75febe9 code=0x7ffc0000 [ 382.754564][ T29] audit: type=1326 audit(1756503277.063:17158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21476 comm="syz.0.5941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f75febe9 code=0x7ffc0000 [ 382.778589][ T29] audit: type=1326 audit(1756503277.063:17159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21476 comm="syz.0.5941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f75febe9 code=0x7ffc0000 [ 382.802230][ T29] audit: type=1326 audit(1756503277.063:17160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21476 comm="syz.0.5941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03f75febe9 code=0x7ffc0000 [ 382.826372][ T29] audit: type=1326 audit(1756503277.063:17161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21476 comm="syz.0.5941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f75febe9 code=0x7ffc0000 [ 382.850312][ T29] audit: type=1326 audit(1756503277.063:17162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21476 comm="syz.0.5941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f75febe9 code=0x7ffc0000 [ 382.874084][ T29] audit: type=1326 audit(1756503277.073:17163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21476 comm="syz.0.5941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03f75febe9 code=0x7ffc0000 [ 382.898002][ T29] audit: type=1326 audit(1756503277.073:17164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21476 comm="syz.0.5941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f75febe9 code=0x7ffc0000 [ 383.018996][T21492] FAULT_INJECTION: forcing a failure. [ 383.018996][T21492] name failslab, interval 1, probability 0, space 0, times 0 [ 383.032005][T21492] CPU: 0 UID: 0 PID: 21492 Comm: syz.6.5947 Not tainted syzkaller #0 PREEMPT(voluntary) [ 383.032033][T21492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 383.032095][T21492] Call Trace: [ 383.032101][T21492] [ 383.032109][T21492] __dump_stack+0x1d/0x30 [ 383.032129][T21492] dump_stack_lvl+0xe8/0x140 [ 383.032148][T21492] dump_stack+0x15/0x1b [ 383.032164][T21492] should_fail_ex+0x265/0x280 [ 383.032183][T21492] should_failslab+0x8c/0xb0 [ 383.032238][T21492] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 383.032276][T21492] ? sidtab_sid2str_get+0xa0/0x130 [ 383.032296][T21492] kmemdup_noprof+0x2b/0x70 [ 383.032314][T21492] sidtab_sid2str_get+0xa0/0x130 [ 383.032410][T21492] security_sid_to_context_core+0x1eb/0x2e0 [ 383.032480][T21492] security_sid_to_context+0x27/0x40 [ 383.032525][T21492] selinux_lsmprop_to_secctx+0x67/0xf0 [ 383.032543][T21492] security_lsmprop_to_secctx+0x43/0x80 [ 383.032565][T21492] audit_log_task_context+0x77/0x190 [ 383.032592][T21492] audit_log_task+0xf4/0x250 [ 383.032664][T21492] audit_seccomp+0x61/0x100 [ 383.032754][T21492] ? __seccomp_filter+0x68c/0x10d0 [ 383.032790][T21492] __seccomp_filter+0x69d/0x10d0 [ 383.032807][T21492] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 383.032828][T21492] ? vfs_write+0x7e8/0x960 [ 383.032846][T21492] ? _raw_spin_unlock+0x26/0x50 [ 383.032896][T21492] ? do_prlimit+0x271/0x2c0 [ 383.033001][T21492] __secure_computing+0x82/0x150 [ 383.033021][T21492] syscall_trace_enter+0xcf/0x1e0 [ 383.033089][T21492] do_syscall_64+0xac/0x200 [ 383.033115][T21492] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 383.033138][T21492] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 383.033234][T21492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.033255][T21492] RIP: 0033:0x7f5453cdd5fc [ 383.033327][T21492] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 383.033341][T21492] RSP: 002b:00007f545273f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 383.033357][T21492] RAX: ffffffffffffffda RBX: 00007f5453f05fa0 RCX: 00007f5453cdd5fc [ 383.033440][T21492] RDX: 000000000000000f RSI: 00007f545273f0a0 RDI: 0000000000000006 [ 383.033452][T21492] RBP: 00007f545273f090 R08: 0000000000000000 R09: 0000000000000000 [ 383.033462][T21492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.033475][T21492] R13: 00007f5453f06038 R14: 00007f5453f05fa0 R15: 00007ffc2ea4dfd8 [ 383.033560][T21492] [ 383.374657][T21507] loop6: detected capacity change from 0 to 1024 [ 383.412071][T21507] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.420447][T21515] loop7: detected capacity change from 0 to 2048 [ 383.513974][T19036] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.516302][T21515] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 383.626352][T21524] netlink: 'syz.6.5958': attribute type 11 has an invalid length. [ 383.626528][T21532] ================================================================== [ 383.642337][T21532] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 383.649316][T21532] [ 383.651636][T21532] write to 0xffffffff8687f688 of 8 bytes by task 21524 on cpu 1: [ 383.657599][T21524] 9pnet_fd: Insufficient options for proto=fd [ 383.659455][T21532] data_alloc+0x271/0x2b0 [ 383.669838][T21532] prb_reserve+0x808/0xaf0 [ 383.674289][T21532] vprintk_store+0x56d/0x860 [ 383.678879][T21532] vprintk_emit+0x178/0x650 [ 383.683366][T21532] vprintk_default+0x26/0x30 [ 383.687938][T21532] vprintk+0x1d/0x30 [ 383.692008][T21532] _printk+0x79/0xa0 [ 383.695897][T21532] __nla_validate_parse+0x1227/0x1d00 [ 383.701319][T21532] __nla_parse+0x40/0x60 [ 383.705558][T21532] inet_rtm_newaddr+0xe1/0xc30 [ 383.710311][T21532] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 383.715341][T21532] netlink_rcv_skb+0x123/0x220 [ 383.720261][T21532] rtnetlink_rcv+0x1c/0x30 [ 383.724686][T21532] netlink_unicast+0x5bd/0x690 [ 383.729453][T21532] netlink_sendmsg+0x58b/0x6b0 [ 383.734205][T21532] __sock_sendmsg+0x145/0x180 [ 383.738883][T21532] ____sys_sendmsg+0x31e/0x4e0 [ 383.743631][T21532] ___sys_sendmsg+0x17b/0x1d0 [ 383.748299][T21532] __x64_sys_sendmsg+0xd4/0x160 [ 383.753138][T21532] x64_sys_call+0x191e/0x2ff0 [ 383.757813][T21532] do_syscall_64+0xd2/0x200 [ 383.762305][T21532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.768184][T21532] [ 383.770496][T21532] read to 0xffffffff8687f688 of 16 bytes by task 21532 on cpu 0: [ 383.778206][T21532] _prb_read_valid+0x1bc/0x920 [ 383.783057][T21532] prb_read_valid+0x3c/0x60 [ 383.787757][T21532] console_unlock+0x164/0x330 [ 383.792417][T21532] do_con_write+0x28d7/0x2940 [ 383.797111][T21532] con_write+0x24/0x40 [ 383.801175][T21532] n_tty_write+0x7d0/0xb50 [ 383.805591][T21532] file_tty_write+0x370/0x690 [ 383.810350][T21532] tty_write+0x25/0x30 [ 383.814589][T21532] vfs_write+0x52a/0x960 [ 383.818819][T21532] ksys_write+0xda/0x1a0 [ 383.823239][T21532] __x64_sys_write+0x40/0x50 [ 383.827821][T21532] x64_sys_call+0x27fe/0x2ff0 [ 383.832495][T21532] do_syscall_64+0xd2/0x200 [ 383.837031][T21532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.842993][T21532] [ 383.845347][T21532] Reported by Kernel Concurrency Sanitizer on: [ 383.851476][T21532] CPU: 0 UID: 0 PID: 21532 Comm: syz.1.5959 Not tainted syzkaller #0 PREEMPT(voluntary) [ 383.861542][T21532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 383.871699][T21532] ==================================================================