last executing test programs: 1m2.065884839s ago: executing program 4 (id=226): lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:netutils_exec_t:s0\x00', 0x25, 0x0) 1m1.737873173s ago: executing program 4 (id=229): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000500)}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0xff, 0x0, 0x0, 0x5022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r0) 1m0.626801911s ago: executing program 4 (id=236): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16, @ANYRES8=0x0, @ANYRES8=0x0], &(0x7f00000002c0)='syzkaller\x00', 0x800001, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000b8000000000000000000005ce80042906a2c526b1b07971829cb040e2faffbdff26868a0d744b952363cda57f960e1bcdbeb56fd0e829bfecb01e47ab42bfb6a3e0967995f61c1076b1377e84a0ed0a924d41d516eda801c15861521bb1cef9d5b9094015e84896491b5d5ea2f0a846e31cfd7ed944250bab4c1a7f6814a5e87a6508872704f71206c2dc0c305be3525de80af0fba0282907c78b9b3e998f5139848bf33a86bb6bf6919e6a55d7d7f8c61106d3028f19e9a2f91aa00c99886f75e641f33e0b10b00"/227], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="140100002900010000000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) r3 = dup(r2) ioctl$GIO_UNISCRNMAP(r3, 0x43403d0e, 0x0) 1m0.498210096s ago: executing program 4 (id=241): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRESOCT=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000002d0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000840000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f0000000140)=""/89, 0x59, 0x0, &(0x7f0000000040)}}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x4, 0xfffffffc, 0xff, "d4e9002b2c000000ff00"}) r3 = syz_open_pts(r2, 0x0) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="63727566742c6d61703d6e6f726d616c2c73657373696f6e3d3078303030303030303030303030303031362c636865636b3d72656c617865642c636865636b3d72656c617865642c004ebe02d83839c183098ea4c343c253a3817a1be99fce11d4eb199c8293a8e4edde99717f074b2f8657ce6ba6ad43223cc53c7956558e58c034cc0480ac8c6aa3dc369cd820bf5e83cbc56c0a80d15de24e02d679ed41f8c6c857ae056f277f0cf61fd89cdbf69e958ecb1fb37260f1579c4aa969bbd1f441590c9176efa1e5b98583b0ed66fdc6f1c3311d3033b260303cc6556bd6ce3d5e3c85b1d4cf3d35b7dbce8b8545f832c1346e6a0dd95ed6144444fba9592efe8559", @ANYBLOB="d46a36dddbe3394f28b173bb7ddeed7195d211cb375278ce585b3b0579e9faaacfe9321ef89bf90f9297038b23932e645c7fce80e8df760f01b3d3b8199e015d436bd19a83ac1e80128faa0ed7d843324b5e64db3da0c152e097"], 0x1, 0x538, &(0x7f0000003480)="$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") mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) r4 = dup(r3) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x2}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x337) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r7}, 0x10) r8 = socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000000)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x80000001, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x7, 0x8, 0x105, 0x14, 0x0, 0x0, 0x0, 0x0, {0x0, 0x1, 0xfffffffe, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40d1}, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000380)={@dev={0xac, 0x14, 0x14, 0x18}, @loopback, r10}, 0xc) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000800)=ANY=[@ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="2f0000003020000004000000", @ANYRES32=0x0, @ANYBLOB="706f6197901cb89ebe86519a604bd71f78d55641b90e492468ec8cfabde97b483b5bff496d88cacdc2035cf57fb6a4efbcacfdb9d03151a8b15f1bf2c604880d06096759fd0e2797d1a28e95d66231e2146f2c96c96064c3d2d27381ae73384b9cb41ba20f23cf61958495b9ae59961b8e530d99b4eb66796b9995f9c29c869a6ae0248b8dc76253ebafdcbf3e9388f0643d3bace73769e74044dd91d60b40fd46a7a1ada7f2be8c1aca2b032f41ca", @ANYRES64=0x0], 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in=@private=0xa010101, @in6=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa417}, {0x0, 0x0, 0xa}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4002, 0x23}, 0x0, @in=@multicast2, 0x0, 0x3, 0x0, 0xfd}}, 0xe8) 1m0.380626121s ago: executing program 4 (id=245): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000300), &(0x7f0000000340)=r1}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 59.900506311s ago: executing program 4 (id=249): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16, @ANYRES8=0x0, @ANYRES8=0x0], &(0x7f00000002c0)='syzkaller\x00', 0x800001, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000b8000000000000000000005ce80042906a2c526b1b07971829cb040e2faffbdff26868a0d744b952363cda57f960e1bcdbeb56fd0e829bfecb01e47ab42bfb6a3e0967995f61c1076b1377e84a0ed0a924d41d516eda801c15861521bb1cef9d5b9094015e84896491b5d5ea2f0a846e31cfd7ed944250bab4c1a7f6814a5e87a6508872704f71206c2dc0c305be3525de80af0fba0282907c78b9b3e998f5139848bf33a86bb6bf6919e6a55d7d7f8c61106d3028f19e9a2f91aa00c99886f75e641f33e0b10b00"/227], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000100000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="140100002900010000000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r6 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_TTY_SET(r6, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) dup(0xffffffffffffffff) 59.871689903s ago: executing program 32 (id=249): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16, @ANYRES8=0x0, @ANYRES8=0x0], &(0x7f00000002c0)='syzkaller\x00', 0x800001, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000b8000000000000000000005ce80042906a2c526b1b07971829cb040e2faffbdff26868a0d744b952363cda57f960e1bcdbeb56fd0e829bfecb01e47ab42bfb6a3e0967995f61c1076b1377e84a0ed0a924d41d516eda801c15861521bb1cef9d5b9094015e84896491b5d5ea2f0a846e31cfd7ed944250bab4c1a7f6814a5e87a6508872704f71206c2dc0c305be3525de80af0fba0282907c78b9b3e998f5139848bf33a86bb6bf6919e6a55d7d7f8c61106d3028f19e9a2f91aa00c99886f75e641f33e0b10b00"/227], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000100000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="140100002900010000000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r6 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_TTY_SET(r6, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) dup(0xffffffffffffffff) 40.563851694s ago: executing program 0 (id=538): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) prctl$PR_SET_NAME(0xf, 0x0) r0 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x200400a0) socket(0x18, 0x0, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3ac3209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b135ab6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385beef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6c30ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88372091cd397b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca00000000000000000000007925d0f1256330b9e2aa9a18cea8e009116f63c6c7d8f7f95bf0f6731e5eb1dcdc534f357b9f08e7a9a3aebeca145d695053b5bef004ca24e6c57ed10f01488d38b8b0b68d93e3cf630837915d518fde2115e66615786fe7b9216de958119cf762cac77ac829a02f48e72c0d2841880b2c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) write(r2, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 40.504559017s ago: executing program 0 (id=540): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYRESOCT=r0], 0x0, 0xffb, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x9, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="cfef55340aca612d8a973f91664d6fd9b64d2346010ddb0140ce19ab5667cb7bc07fd9d6e36c06de4c58a217403bad2f8559c63abe625862db4609f911d1b5aade788bac0af732ae01c5a83ed36f6c569d9cffdcae2d5381f23f65dfa034b244471737cc81145a8351dcf8507f6cd0db8f73f8a83a275bdeff0508ed8757d7b0ca5c7e90"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='mm_page_free\x00', r6}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 40.379168782s ago: executing program 0 (id=541): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x8, 0x6, 0x46f7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41102, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) 40.316469405s ago: executing program 0 (id=542): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0xa00008, &(0x7f0000000000), 0x1, 0x7c8, &(0x7f0000001280)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JrsQ2JQeSqGBQHtOYmTFpJatYMkhNoYklEIvPbT0UGguOTdtesuhl/64tpf+DT2UhLR1QlN6KC4jjRL5hxw7seQ0/nxgrPdmRnrvO2/mzfPMIAWwZw2nf3IRByN60uRgNj+JbEZ0R5yor/dgeamQTkmsrLz6Q1Jb5/7yUiGa3pPan2X+GhFfvBlxKLe+3MrC4vREqVScy/Kj1ZkLo5WFxcPnZyamilPF2aNj4+NHjv3n2NGdi/WnrxcP3HnnpX9+fOKXN/5y8+0vkzgRB7JlzXHslOEYzrZJT7oJV3lxpwvbZcluV4Ankh6aXfWjPA7GYHRt0pL/72jNAIB2uRwRKwDAHpM4/wPAHtO4DnB/eanQmKJ+P+fK464dHG/3xYkOuPtCRPTX42/c36wv6a7fs/umv3YfdOB+UrtH0pBExNAOlD8cEddunb6RTtGm+5AAG7lyNSLODg2v7f/THm7tMwvb9a8trDPcSHxaf9H/Qed8lo5//rt+/BeRy47//trfteOfvuZj9yms/Yz1x3/u9qpszw4U2iQd/x1verbtQVP8maGuLPeH2pivJzl3vlRM+7Y/RsRI9PSl+bFNyhi59+u9Vsuax38/vvv6h2n56eujNXK3u/tWv2dyojrxNDE3u3s14m/dG8WfPGz/pMX499QWy3j5f2990GpZGn8ab2NaH397rVyP+MeG7f/oOahk0+cTR2u7w2hjp9hg//zk2/cHWpXf3P7XbqUlLRUa/wt0Qtr+A5vHP5Q0P69Z2X4ZX10f/LzVstXxn76Rlr86/o33/97ktVq6N5t3aaJanRuL6E1eWT//yKP3NvKN9dP4R/6+Kv6sBXOb7v/pSmez9MpjHn7svvP9R08ef3ul8U+m7Z9kQTy2/befuPlguqtV+Vtr//FaaiSbs77/6173uVut4FNtPAAAAAAAAAAAAAAAAAAAAAAAAADYolxEHIgkl3+YzuXy+fpveP85BnKlcqV66Fx5fnYyar+VPRQ9ucZXXQ42fR/qWPZ9+I38kTX5f0fEnyLivb59tXy+UC5N7nbwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJDZ3+L3/1Pf9e127QCAtunf7QoAAB23rfO/wQIAPBdanNJ7N569r611AQA6o3b+T7p3uxoAQAe5pA8Ae4/zPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG126uTJdFr5eXmpkOYnLy7MT5cvHp4sVqbzM/OFfKE8dyE/VS5PlYr5Qnmm5Qddqb+UyuUL4zE7f2m0WqxURysLi2dmyvOz1TPnZyamimeKPR2LDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2rrKwOD1RKhXnJDZPXH4mqnE1a7bd3hrPU+Jstk2flfpsI9EXEe0qormX2Nf5jgkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgd+K3AAAA//+aBB1p") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x503142, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x3}, 0x18) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x40000000000000, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000140)={0x17c04, r0, 0x3052, 0x973f, 0x81, 0x1}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r7}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r9}, 0x10) listxattr(0x0, 0x0, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010300000000000000000100"], 0x30}}, 0x44) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0xffffffac, r10, 0x300, 0xfac, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) 40.094481424s ago: executing program 0 (id=547): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000500000000000000000000001801000020a0702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, &(0x7f0000000200)=""/119, &(0x7f0000000000)=0x77) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0xd0}, @call={0x85, 0x0, 0x0, 0x11}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f00000007c0)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r5}, 0x18) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r6, 0x4b41, &(0x7f0000000200)) 39.760203019s ago: executing program 0 (id=557): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_pidfd_open(0x0, 0x0) r2 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f00000003c0)=[@ioring_restriction_sqe_op, @ioring_restriction_sqe_flags_required={0x3, 0x19}], 0x2) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r2, 0xc, 0x0, 0x0) io_uring_enter(r2, 0x2e6f, 0x8555, 0x2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x30, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r5 = pidfd_getfd(r1, r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='dummy0\x00', 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) fstatfs(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e00)=@newqdisc={0x874, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xffff}, {0xf, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x848, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5ec888eb7598db49}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x4, 0xff, 0x6}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x80000000}, 0x3, 0x8, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x1, 0x2, 0xc, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x7ffd, 0x400, 0x255, 0x6, 0xc, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0xc, 0x1ff000, 0x7, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x80000001, 0x7c, 0xfffffffc, 0x5, 0x3, 0x9, 0x8, 0x6, 0x1, 0xd, 0x80, 0x3fc, 0x80, 0x90000010, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf6, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x8009, 0xe, 0x6, 0xfffffff7, 0x6, 0x0, 0x5, 0x1, 0x81, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x5, 0x0, 0x3, 0x7ff, 0xb09, 0x3ff, 0xa, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x6, 0x1, 0x8762, 0x10008e, 0x80000005, 0x800, 0x0, 0x4, 0x4275c4e9, 0xeb6, 0x7fd, 0x800, 0x4, 0x955, 0x5, 0x6cdf13a0, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x5, 0x200ece, 0x5, 0xfffffffa, 0x10001, 0x18d0, 0x0, 0x3, 0x9486, 0x80, 0x5, 0x80000000, 0xdb, 0x3, 0x80, 0xffbf7ffc, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8008, 0x2, 0x8, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x2, 0x40, 0x10005, 0x27f, 0x200, 0x7, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x104, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x5, 0x8, 0x7, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0x3, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x0, 0x4, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xfbff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x80008, 0x159, 0xfffffff7, 0x81, 0x382ae49a, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0x8d, 0x6, 0xfffffef7, 0x89c3, 0x6319da67, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x7, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10002, 0x1, 0x800, 0x5ffc, 0xfe000000, 0xfffffffd]}, @TCA_TBF_PBURST={0x8, 0x7, 0x714}, @TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x2, 0x4, 0x5, 0x9, 0xc8b6, 0x3ff, 0x5, 0x400, 0x2, 0xffff, 0xf, 0x8, 0x2, 0x210, 0x2, 0x5, 0xf, 0x7, 0x261c, 0x7, 0xe5, 0x3c02, 0x1, 0x2, 0x8, 0x10, 0x6a1, 0xa1, 0xe0, 0xfffffffa, 0x3, 0x7669aade, 0x4, 0xfffffff9, 0x1ff, 0x3, 0x2, 0x2, 0x400, 0x0, 0x48, 0x9, 0x81, 0x6, 0x0, 0x4, 0x4, 0x0, 0x4, 0x8001, 0x8000, 0x7, 0x6, 0x9, 0x0, 0x6, 0x4, 0x6, 0x725, 0x8492, 0x1, 0x80, 0x2, 0x2, 0x4, 0xa000, 0x0, 0x3, 0x9, 0x400, 0x8, 0xfff, 0x5, 0x9, 0x80000001, 0x6e22, 0x5, 0x4c992e15, 0x85d9, 0xfffff001, 0x1, 0x2, 0x7ff, 0xa3fe, 0x0, 0xdc, 0x6, 0x8, 0x6, 0xfff, 0x70, 0x9, 0x3, 0x39a8, 0x4, 0x800, 0x9, 0x80000001, 0xf, 0x4, 0x994, 0x73, 0x8, 0xaca, 0x7, 0x6, 0x7, 0x6acf64d, 0x4, 0x2, 0x8, 0x249, 0x1, 0x8, 0x3, 0x42, 0x2, 0x1, 0xe, 0x10, 0x9, 0x1, 0x24, 0x100, 0x3, 0x8, 0x7, 0x4f, 0x100, 0x8, 0xa, 0xfff, 0x5, 0x9, 0x100, 0x8, 0x8, 0x400, 0x9, 0x6, 0x10, 0x8, 0x4, 0x2, 0x7, 0x1ff800, 0x7b32, 0x2, 0x62, 0x6, 0x4, 0x8, 0xffff0001, 0x4, 0xfffffff8, 0x9, 0x5, 0xe63e, 0x8, 0xfffffffd, 0x10, 0x2, 0x1, 0x11, 0x4, 0x80000001, 0x2, 0x5, 0x10000, 0xb, 0x4, 0x0, 0x2, 0x6, 0x401, 0x1, 0xffff, 0xfff, 0x40, 0x1, 0x80000001, 0x2, 0x2, 0xf, 0x1, 0x10001, 0x9, 0x4, 0x3, 0x7, 0xd, 0x4, 0x10, 0x3, 0x5d05, 0x3, 0x7fa, 0x4, 0x10000, 0x9, 0xad, 0x3, 0x5, 0xfffeffff, 0x1, 0x7, 0x1, 0x3, 0x4, 0xa7, 0x38bc, 0x9, 0xf6e, 0x5, 0x7, 0x73, 0xb, 0x8, 0x1, 0x6e, 0x540, 0x35, 0xf0, 0x10, 0x1ff, 0x9, 0x7, 0x40, 0x2, 0xf6e1, 0x8, 0xce, 0x6, 0x90000000, 0x6, 0x0, 0x9, 0x77a4a6a9, 0xff, 0x8, 0x1, 0x7, 0x7fe, 0x8, 0x75, 0xa00, 0x9, 0xe, 0x8001, 0x6, 0xb1e, 0x5, 0x0, 0x4d73, 0xb]}]}}]}, 0x874}}, 0x0) 39.759865199s ago: executing program 33 (id=557): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_pidfd_open(0x0, 0x0) r2 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f00000003c0)=[@ioring_restriction_sqe_op, @ioring_restriction_sqe_flags_required={0x3, 0x19}], 0x2) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r2, 0xc, 0x0, 0x0) io_uring_enter(r2, 0x2e6f, 0x8555, 0x2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x30, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r5 = pidfd_getfd(r1, r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='dummy0\x00', 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) fstatfs(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e00)=@newqdisc={0x874, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xffff}, {0xf, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x848, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5ec888eb7598db49}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x4, 0xff, 0x6}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x80000000}, 0x3, 0x8, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x1, 0x2, 0xc, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x7ffd, 0x400, 0x255, 0x6, 0xc, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0xc, 0x1ff000, 0x7, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x80000001, 0x7c, 0xfffffffc, 0x5, 0x3, 0x9, 0x8, 0x6, 0x1, 0xd, 0x80, 0x3fc, 0x80, 0x90000010, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf6, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x8009, 0xe, 0x6, 0xfffffff7, 0x6, 0x0, 0x5, 0x1, 0x81, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x5, 0x0, 0x3, 0x7ff, 0xb09, 0x3ff, 0xa, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x6, 0x1, 0x8762, 0x10008e, 0x80000005, 0x800, 0x0, 0x4, 0x4275c4e9, 0xeb6, 0x7fd, 0x800, 0x4, 0x955, 0x5, 0x6cdf13a0, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x5, 0x200ece, 0x5, 0xfffffffa, 0x10001, 0x18d0, 0x0, 0x3, 0x9486, 0x80, 0x5, 0x80000000, 0xdb, 0x3, 0x80, 0xffbf7ffc, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8008, 0x2, 0x8, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x2, 0x40, 0x10005, 0x27f, 0x200, 0x7, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x104, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x5, 0x8, 0x7, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0x3, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x0, 0x4, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xfbff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x80008, 0x159, 0xfffffff7, 0x81, 0x382ae49a, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0x8d, 0x6, 0xfffffef7, 0x89c3, 0x6319da67, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x7, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10002, 0x1, 0x800, 0x5ffc, 0xfe000000, 0xfffffffd]}, @TCA_TBF_PBURST={0x8, 0x7, 0x714}, @TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x2, 0x4, 0x5, 0x9, 0xc8b6, 0x3ff, 0x5, 0x400, 0x2, 0xffff, 0xf, 0x8, 0x2, 0x210, 0x2, 0x5, 0xf, 0x7, 0x261c, 0x7, 0xe5, 0x3c02, 0x1, 0x2, 0x8, 0x10, 0x6a1, 0xa1, 0xe0, 0xfffffffa, 0x3, 0x7669aade, 0x4, 0xfffffff9, 0x1ff, 0x3, 0x2, 0x2, 0x400, 0x0, 0x48, 0x9, 0x81, 0x6, 0x0, 0x4, 0x4, 0x0, 0x4, 0x8001, 0x8000, 0x7, 0x6, 0x9, 0x0, 0x6, 0x4, 0x6, 0x725, 0x8492, 0x1, 0x80, 0x2, 0x2, 0x4, 0xa000, 0x0, 0x3, 0x9, 0x400, 0x8, 0xfff, 0x5, 0x9, 0x80000001, 0x6e22, 0x5, 0x4c992e15, 0x85d9, 0xfffff001, 0x1, 0x2, 0x7ff, 0xa3fe, 0x0, 0xdc, 0x6, 0x8, 0x6, 0xfff, 0x70, 0x9, 0x3, 0x39a8, 0x4, 0x800, 0x9, 0x80000001, 0xf, 0x4, 0x994, 0x73, 0x8, 0xaca, 0x7, 0x6, 0x7, 0x6acf64d, 0x4, 0x2, 0x8, 0x249, 0x1, 0x8, 0x3, 0x42, 0x2, 0x1, 0xe, 0x10, 0x9, 0x1, 0x24, 0x100, 0x3, 0x8, 0x7, 0x4f, 0x100, 0x8, 0xa, 0xfff, 0x5, 0x9, 0x100, 0x8, 0x8, 0x400, 0x9, 0x6, 0x10, 0x8, 0x4, 0x2, 0x7, 0x1ff800, 0x7b32, 0x2, 0x62, 0x6, 0x4, 0x8, 0xffff0001, 0x4, 0xfffffff8, 0x9, 0x5, 0xe63e, 0x8, 0xfffffffd, 0x10, 0x2, 0x1, 0x11, 0x4, 0x80000001, 0x2, 0x5, 0x10000, 0xb, 0x4, 0x0, 0x2, 0x6, 0x401, 0x1, 0xffff, 0xfff, 0x40, 0x1, 0x80000001, 0x2, 0x2, 0xf, 0x1, 0x10001, 0x9, 0x4, 0x3, 0x7, 0xd, 0x4, 0x10, 0x3, 0x5d05, 0x3, 0x7fa, 0x4, 0x10000, 0x9, 0xad, 0x3, 0x5, 0xfffeffff, 0x1, 0x7, 0x1, 0x3, 0x4, 0xa7, 0x38bc, 0x9, 0xf6e, 0x5, 0x7, 0x73, 0xb, 0x8, 0x1, 0x6e, 0x540, 0x35, 0xf0, 0x10, 0x1ff, 0x9, 0x7, 0x40, 0x2, 0xf6e1, 0x8, 0xce, 0x6, 0x90000000, 0x6, 0x0, 0x9, 0x77a4a6a9, 0xff, 0x8, 0x1, 0x7, 0x7fe, 0x8, 0x75, 0xa00, 0x9, 0xe, 0x8001, 0x6, 0xb1e, 0x5, 0x0, 0x4d73, 0xb]}]}}]}, 0x874}}, 0x0) 2.735613282s ago: executing program 1 (id=1098): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x3d8}, 0x18) memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x2d) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r4, 0x9c3fa077fa966179, 0x70bd28, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x7ff, 0x69}}}}}, 0x20}}, 0x4000054) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0x178) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 2.036741402s ago: executing program 3 (id=1102): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) sendfile(r2, r0, 0x0, 0x7ffff088) 1.994221214s ago: executing program 3 (id=1103): socket$nl_generic(0x10, 0x3, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x1, 0xf533, 0x2}, 0x20}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000000)=0xffff, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 1.967812246s ago: executing program 3 (id=1104): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x3d8}, 0x18) memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x2d) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r4, 0x9c3fa077fa966179, 0x70bd28, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x7ff, 0x69}}}}}, 0x20}}, 0x4000054) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x178) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1.913957788s ago: executing program 6 (id=1105): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='F\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4d7e00000000fedbdf252a00000008002f000000000005003600000000000c0005000202aaaaaaaaaaaa05003700010000000a0001007770616e31000000"], 0x44}, 0x4, 0x700000000000000, 0x0, 0x80c0}, 0x40) r2 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0423, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000640), 0xeaadeccf785108fa}, 0x102932, 0x0, 0x80002, 0x5, 0x1, 0x4, 0x10, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x30ef6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000040), &(0x7f0000000080)=r7}, 0x20) unshare(0x62040200) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$802154_dgram(r8, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r8, &(0x7f0000000240)={0x24, @short={0x2, 0x0, 0xaaa0}}, 0x14) 1.314489323s ago: executing program 1 (id=1110): socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc888, &(0x7f0000002340)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0], 0x4, 0x273, &(0x7f0000000680)="$eJzs281qE1EYxvGnH9ra2k60Wm1FfFEE3QxtvIJQWhADSm3EDxCmdqIh06RkQiUitju3Xkdx6U4Qb6AbL0BcuOvGZRfiSCexTdoUdWFGzf+3OW85fcI5vGfCWWS27r5aLuZDN+9V1dtj6pfWtS2l1Ks+1fU0xt64Pqpm67o6lv10/va9+zcy2ezsvNlcZuFa2sxGL7x7+vz1xffV4TtvRt8OaDP1cOtL+vPm+ObE1reFJ4XQCqGVylXzbLFcrnqLgW9LhbDomt26/NELfSuUQr/SMp8PyisrNfNKSyNDKxU/DM0r1azo16xatmqlZt5jr1Ay13VtZEj4mdzG/LyXSXoV+LMqlYw3I2nywExuI5EFAQCARP2d9//A5/7fCdz/u8HO/f9B4/ltxf0fAAAAAAAAAAAAAAAAAAAAAIB/wXYUOVEUOT/GI1L8hk/U+PuYpCFJw5KOSxqRNCrJkZSSdELSSUljkk5JOi1pXNIZSWclTTR9VtJ7xUGH9b+P/ncFnv/uRv+7W9OLu4PS8svV3GquPtbnM3kVFMjXlBx9jXvZUK/nrmdnpyyW0rnltUZ+bTXX15qflrNzYNrlp+t5a80PxOduN5+Ws3PA2uXTbfODunKpKe/K0YdHKivQUnwm9/Ivps1mbmb35Sfj//vfubarbf9c97D5ev4Xzkc01bY//ZrsT3bvkMLas6IXBH6FgoKCYrdI+psJnbDX9KRXAgAAAAAAAAAAAAAAAAD4HZ34OWHSewQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYL/vAQAA//94NGA9") (async, rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) add_key$fscrypt_v1(0x0, &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000380)={0x0, "3ff4057cbe5924464c439b8f826f00a0b3ab198e40a55462c05d329ad8430d9611dc0ff693dd1367edfa74cf2a6da5f4d68b3cfb2979dc95ee34f9c3da5707ae", 0x34}, 0x48, 0xffffffffffffffff) (async, rerun: 64) r1 = gettid() (rerun: 64) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x4000) (async, rerun: 64) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async, rerun: 64) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) (async) munlock(&(0x7f0000daf000/0x1000)=nil, 0x1000) munlockall() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async, rerun: 64) r2 = eventfd2(0x0, 0x0) (rerun: 64) read$eventfd(r2, &(0x7f0000000040), 0x8) mq_notify(r0, &(0x7f0000000540)={0x0, 0x5, 0x0, @thr={&(0x7f0000000480)="9bc74e148e336ed4da3f201626971269292232f9c2dfa06a168f8c9d13bdbcfd7fc0101dd8b7e70c90c82d88aae8169f8a7f4bc885b2097fbcc8256dff68c8c5c4fbd1bb5f4d07875be872e692c178dd9b885975063558411ed5a47a7cb6c9f481c8ae6b7d1be748c3eb930b33a95f443baca754470410dad167acc2218e1d0eb073e2f7b6d804ba74664886c2213e8d68df3b115361c02fd4531f3f8fb2cf68a29b8803aa52ef5cf10c429900271baeef57bf77aa21207fa961a1a0", &(0x7f0000000400)="1a74a7eb17e77a5130cb27e879871cf0687fc4253a27c8933a3d07d62cccd73fc5e8acedabb29fb22bef1ec45dd150c46b2c3f5614b3148d77e3c6e8"}}) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=@known='system.posix_acl_access\x00') (async) fsopen(&(0x7f0000000040)='btrfs\x00', 0x1) r3 = accept4$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e, 0x80400) (async, rerun: 64) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000580), 0x121081, 0x0) (rerun: 64) bind$802154_raw(r4, &(0x7f00000005c0)={0x24, @short={0x2, 0x0, 0xaaa0}}, 0x14) bind$unix(r3, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) (async) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0x0}, 0x50) (async, rerun: 64) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (rerun: 64) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='kfree\x00', r7, 0x0, 0x898}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6}, &(0x7f0000000000), &(0x7f00000003c0)=r7}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) 1.081856574s ago: executing program 1 (id=1113): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) sendfile(r2, r0, 0x0, 0x7ffff088) 1.047442725s ago: executing program 2 (id=1114): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x1, 0xf533, 0x2}, 0x20}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000000)=0xffff, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 1.020670156s ago: executing program 1 (id=1116): r0 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb7020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 1.014527526s ago: executing program 2 (id=1117): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000f00)) 968.613058ms ago: executing program 3 (id=1118): bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYRESOCT], 0x0, 0xffb, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='mm_page_free\x00', r2}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 949.769299ms ago: executing program 2 (id=1119): times(&(0x7f0000000000)) times(&(0x7f0000000040)) (async) times(&(0x7f0000000080)) (async) times(&(0x7f00000000c0)) (async) times(&(0x7f0000000100)) times(&(0x7f0000000140)) times(&(0x7f0000000180)) (async) statx(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x100, 0x200, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getegid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) setgroups(0x5, &(0x7f0000000340)=[r1, 0x0, r2, 0x0, r4]) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2000) (async) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x4) sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@delqdisc={0x44, 0x25, 0x200, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xfff1, 0x6}, {0x8, 0x9}, {0xb, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x6}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x48000}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xe6}, @qdisc_kind_options=@q_drr={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8084}, 0x10084) (async) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000600)='mm_compaction_end\x00', r3, 0x0, 0x100000001}, 0x18) (async) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) times(&(0x7f0000000680)) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000780)={'gretap0\x00', &(0x7f00000006c0)={'erspan0\x00', r5, 0x10, 0x700, 0x1, 0x10000, {{0x26, 0x4, 0x2, 0x33, 0x98, 0x66, 0x0, 0x6, 0x29, 0x0, @local, @local, {[@lsrr={0x83, 0x13, 0xf6, [@broadcast, @remote, @rand_addr=0x64010101, @empty]}, @rr={0x7, 0x1b, 0xc2, [@loopback, @local, @local, @local, @local, @empty]}, @rr={0x7, 0x27, 0x8b, [@broadcast, @remote, @empty, @multicast1, @remote, @multicast2, @rand_addr=0x64010102, @broadcast, @private=0xa010102]}, @timestamp_addr={0x44, 0x2c, 0x17, 0x1, 0x4, [{@empty, 0x2}, {@broadcast, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x101}, {@loopback, 0x7419}, {@multicast2, 0xffff}]}, @noop, @end]}}}}}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000007c0)={'batadv0\x00', @local}) times(&(0x7f0000000800)) (async) write$sndseq(r3, &(0x7f0000000840)=[{0xf7, 0x83, 0x4, 0xe, @tick=0x9, {0x7f, 0xdc}, {0x4, 0x6}, @result={0xa, 0x1}}, {0x2, 0x2, 0x2, 0x5, @tick=0x37d9, {0x7, 0x9}, {0x4}, @connect={{0x3, 0x30}, {0xff}}}, {0x3, 0x6, 0x8, 0xfc, @time={0x1, 0x4}, {0xea, 0xf}, {0x2, 0x9}, @raw8={"e9492eba724db0ae2fab0327"}}], 0x54) (async) ioctl$int_in(r6, 0x5452, &(0x7f00000008c0)=0x9) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000900)={'bond0\x00', 0x200}) times(&(0x7f0000000940)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@bloom_filter={0x1e, 0x80, 0x3, 0xf, 0x410, 0x1, 0xa, '\x00', r7, r3, 0x4, 0x5, 0x1, 0x4}, 0x50) (async) times(&(0x7f0000000a00)) (async) r8 = accept4$llc(r3, &(0x7f0000000a40)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000a80)=0x10, 0x800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r8, {r0}}, './file0\x00'}) times(&(0x7f0000000b00)) (async) sendmsg$TCPDIAG_GETSOCK(r9, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x4c, 0x12, 0x20, 0x70bd2d, 0x25dfdbff, {0x1d, 0x60, 0x7a, 0x60, {0x4e20, 0x4e22, [0x0, 0x9, 0xde7d, 0x9], [0x3, 0x3, 0x8, 0x101], r7, [0x3773, 0xfffffff9]}, 0x470f, 0x4}}, 0x4c}, 0x1, 0x0, 0x0, 0x40011}, 0x4000014) 942.812639ms ago: executing program 1 (id=1120): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000012c0), 0x0, 0x0) syz_clone(0x400c000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40dddb51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88370d9ed9467b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42553ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca000000000000000000000509619f5f0cbc72eebc653946d3552236f0dfe485cfa71bd69f4ded6e131128c3875b785875addfcbd5931c12adbef75535e694f3a19f28f9f99fa32e8ff66e7b1ff674434fb63ba0e28aadccf77d387525c98e81476058c958eaccfa7d251d0671222dc9d06485f7f690d3d4227bd21bd7ff8338617705b7faec47c86789a488b43d0fedf1b0ee05d65c677ced1e8214b2f6cb74d73886eb"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x6d) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000ec0)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)={0xb0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xf28}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7}]}]}, 0xb0}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfffe) 856.697393ms ago: executing program 2 (id=1121): timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) io_getevents(0x0, 0xfffe, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000004000), &(0x7f00000003c0)}, 0x20) timer_getoverrun(r0) 855.515113ms ago: executing program 6 (id=1122): bind$inet(0xffffffffffffffff, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYRESOCT], 0x0, 0xffb, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='mm_page_free\x00', r2}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 808.655315ms ago: executing program 2 (id=1123): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="07000000040000008000000004", @ANYRESOCT], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00'], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$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") open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) unshare(0x20060400) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe, 0x10010, r2, 0xc47fe000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000004980)={0x7, 'vlan0\x00', {0x3}, 0x6}) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400000, 0x0, 0x800000, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x1000000, 0x0, 0x1, 0x1}, 0x21) gettid() bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x48) 724.301219ms ago: executing program 3 (id=1125): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000000000000200ff0000004e23000000000200000000000000ffffffff00"/53, @ANYRES32=0x0, @ANYBLOB="ffffffff0300000000000200000000000800030011"], 0x54}}, 0x20004010) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) open(&(0x7f0000000280)='.\x00', 0x40080, 0x1d2) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES64=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX, @ANYBLOB="1900000000000002000000000000000000dd9a7568ed889e31eb208794b2a944200000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00"], &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000300)='kmem_cache_free\x00', r6}, 0x18) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000080), &(0x7f0000000140)=0x4) getpriority(0x3, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$getregset(0x4205, r7, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000440)='kfree\x00'}, 0x18) 699.5346ms ago: executing program 5 (id=1126): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r0 = socket$inet(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='mm_page_free\x00', r4}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 645.893892ms ago: executing program 5 (id=1127): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x1, 0xf533, 0x2}, 0x20}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000000)=0xffff, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 594.736395ms ago: executing program 5 (id=1128): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000001080)="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", 0x2d9}, {&(0x7f0000000b00)="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", 0x274}, {&(0x7f00000006c0)="5be08105437c98b91b9455046f57b5fc090014bde2bb01000000000000001a7838d859207067c30aa7", 0x29}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) 574.480055ms ago: executing program 3 (id=1129): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x3d8}, 0x18) memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x2d) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r4, 0x9c3fa077fa966179, 0x70bd28, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x7ff, 0x69}}}}}, 0x20}}, 0x4000054) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x178) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 524.296777ms ago: executing program 2 (id=1130): r0 = syz_io_uring_setup(0x223d, 0x0, &(0x7f0000000280), &(0x7f00000005c0)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r2, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5f58a51a27e27356) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1c000000}, 0x1c) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000800)=@req={0x1, 0x2, 0x2, 0xe0000000}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="06000000040000000400000002"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x1979cdc91f213706) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) close(0x4) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x0, r2, 0x10, 0x1, @in6={0xa, 0x7, 0x913, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x100}}}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000010110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x21, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7fff}, 0x18) 523.990427ms ago: executing program 5 (id=1131): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0xa00008, &(0x7f0000000000), 0x1, 0x7c8, &(0x7f0000001280)="$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") pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5412, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x3}, 0x18) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x40000000000000, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 523.362897ms ago: executing program 6 (id=1132): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1, 0x1000ffffffff}, 0x2000, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@alu={0x4, 0x1, 0x9, 0x8, 0x6, 0xffffffffffffffff}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 439.639131ms ago: executing program 6 (id=1133): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1a2) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) setsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000080)={@mcast1, r4}, 0x14) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001600)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 439.138501ms ago: executing program 5 (id=1134): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x8a) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder1\x00') ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x10000100, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000050000000000f400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x1, 0xf533, 0x2}, 0x20}) 150.765853ms ago: executing program 6 (id=1135): r0 = syz_open_dev$loop(0x0, 0x40, 0x1c0862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000280)={r1, 0x1000, {0x0, 0x0, 0x0, 0x0, 0x4000000000001001, 0x0, 0x0, 0x1c, 0xd08e4f10c3dd92a1, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524b0c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a00", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) 28.712879ms ago: executing program 1 (id=1136): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7ffc, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x2}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x48200, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000200)=0x237a, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x12141, 0x0) io_uring_enter(r0, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000180), 0x6, 0x10000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000004c0)) 28.326589ms ago: executing program 6 (id=1137): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x23f) (fail_nth: 12) 0s ago: executing program 5 (id=1138): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b00000005000000070000000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x1, 0x8, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) kernel console output (not intermixed with test programs): 08845][ T5069] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.461: corrupted xattr block 33: invalid ea_ino [ 58.709062][ T5069] EXT4-fs (loop2): Remounting filesystem read-only [ 58.709083][ T5069] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 58.709112][ T5069] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 58.709269][ T5069] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 58.760783][ T3005] loop0: p1 p2 p3 < p5 p6 > [ 58.760927][ T3005] loop0: p1 size 242222080 extends beyond EOD, truncated [ 58.761585][ T3005] loop0: p2 start 4294967295 is beyond EOD, truncated [ 58.796876][ T5082] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.868929][ T5082] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.944189][ T5082] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.006783][ T5082] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.089354][ T384] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.089391][ T384] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.089422][ T384] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.089447][ T384] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.452944][ T5110] rdma_op ffff88811c7e3180 conn xmit_rdma 0000000000000000 [ 60.792797][ T3395] hid-generic 0003:0004:0000.0008: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 60.856829][ T5178] fido_id[5178]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 61.053692][ T5150] loop3: detected capacity change from 0 to 32768 [ 61.123323][ T5150] loop3: p1 p2 p3 < p5 p6 > [ 61.130148][ T5150] loop3: p2 size 16775168 extends beyond EOD, truncated [ 61.145729][ T5150] loop3: p5 start 4294970168 is beyond EOD, truncated [ 61.168466][ T5169] loop0: detected capacity change from 0 to 32768 [ 61.220021][ T5169] loop0: p1 p2 p3 < p5 p6 > [ 61.224836][ T5169] loop0: p1 size 242222080 extends beyond EOD, truncated [ 61.257421][ T5169] loop0: p2 start 4294967295 is beyond EOD, truncated [ 61.261577][ T5196] rdma_op ffff88810229d980 conn xmit_rdma 0000000000000000 [ 61.373264][ T5201] netlink: 'syz.5.485': attribute type 1 has an invalid length. [ 61.381137][ T5201] netlink: 'syz.5.485': attribute type 6 has an invalid length. [ 61.388900][ T5201] netlink: 'syz.5.485': attribute type 3 has an invalid length. [ 61.396781][ T5201] netlink: 24 bytes leftover after parsing attributes in process `syz.5.485'. [ 61.426663][ T5205] loop3: detected capacity change from 0 to 512 [ 61.483779][ T5205] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 61.510842][ T5205] EXT4-fs (loop3): orphan cleanup on readonly fs [ 61.521730][ T3528] udevd[3528]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 61.524301][ T3612] udevd[3612]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 61.532671][ T5205] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.487: corrupted inode contents [ 61.566201][ T5216] loop2: detected capacity change from 0 to 512 [ 61.602705][ T5216] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 61.634339][ T5205] EXT4-fs (loop3): Remounting filesystem read-only [ 61.655416][ T5216] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c119, mo2=0002] [ 61.663922][ T5205] EXT4-fs (loop3): 1 truncate cleaned up [ 61.668353][ T5216] System zones: 1-12 [ 61.674285][ T384] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 61.684882][ T384] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 61.696227][ T5216] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.491: corrupted in-inode xattr: e_value size too large [ 61.710519][ T384] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 61.722214][ T5216] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.491: couldn't read orphan inode 15 (err -117) [ 61.774417][ T5231] rdma_op ffff88811a910180 conn xmit_rdma 0000000000000000 [ 61.785436][ T5229] loop2: detected capacity change from 0 to 512 [ 61.805026][ T5229] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 61.826510][ T5229] EXT4-fs (loop2): orphan cleanup on readonly fs [ 61.834741][ T5229] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.495: corrupted inode contents [ 61.847602][ T5229] EXT4-fs (loop2): Remounting filesystem read-only [ 61.855098][ T5229] EXT4-fs (loop2): 1 truncate cleaned up [ 61.861101][ T113] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 61.871670][ T113] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 61.883287][ T113] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 62.356144][ T5254] netlink: 48 bytes leftover after parsing attributes in process `syz.5.504'. [ 62.426458][ T5256] netlink: 'syz.5.505': attribute type 1 has an invalid length. [ 62.434156][ T5256] netlink: 224 bytes leftover after parsing attributes in process `syz.5.505'. [ 62.467074][ T5258] loop0: detected capacity change from 0 to 4096 [ 62.487655][ T5258] ALSA: seq fatal error: cannot create timer (-16) [ 62.563510][ T5265] rdma_op ffff88811c7dc180 conn xmit_rdma 0000000000000000 [ 62.909740][ T5283] netlink: 48 bytes leftover after parsing attributes in process `syz.3.516'. [ 62.942702][ T5284] loop1: detected capacity change from 0 to 512 [ 62.977184][ T5286] loop2: detected capacity change from 0 to 512 [ 62.988261][ T5284] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 63.011827][ T5288] netlink: 'syz.0.518': attribute type 1 has an invalid length. [ 63.019527][ T5288] netlink: 224 bytes leftover after parsing attributes in process `syz.0.518'. [ 63.035883][ T5286] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 63.055504][ T5284] EXT4-fs (loop1): 1 truncate cleaned up [ 63.065229][ T5291] rdma_op ffff88811a933d80 conn xmit_rdma 0000000000000000 [ 63.078928][ T5286] EXT4-fs (loop2): 1 truncate cleaned up [ 63.383722][ T5324] rdma_op ffff88811ab39180 conn xmit_rdma 0000000000000000 [ 63.473948][ T5325] loop1: detected capacity change from 0 to 1024 [ 63.646919][ T5325] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.526: missing EA_INODE flag [ 63.659075][ T5325] EXT4-fs (loop1): Remounting filesystem read-only [ 63.665731][ T5325] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1226: inode #18: comm syz.1.526: ea_inode dec ref err=-30 [ 63.678428][ T5325] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -30) [ 63.900952][ T5344] loop2: detected capacity change from 0 to 512 [ 63.929210][ T5344] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 63.949966][ T29] kauditd_printk_skb: 756 callbacks suppressed [ 63.949983][ T29] audit: type=1326 audit(1764325589.681:3306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5337 comm="syz.5.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246796f749 code=0x7ffc0000 [ 63.979471][ T29] audit: type=1326 audit(1764325589.681:3307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5337 comm="syz.5.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246796f749 code=0x7ffc0000 [ 64.002775][ T29] audit: type=1326 audit(1764325589.691:3308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5337 comm="syz.5.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f246796f749 code=0x7ffc0000 [ 64.026127][ T29] audit: type=1326 audit(1764325589.691:3309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5337 comm="syz.5.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246796f749 code=0x7ffc0000 [ 64.049491][ T29] audit: type=1326 audit(1764325589.691:3310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5337 comm="syz.5.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246796f749 code=0x7ffc0000 [ 64.072827][ T29] audit: type=1326 audit(1764325589.691:3311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5337 comm="syz.5.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f246796f749 code=0x7ffc0000 [ 64.096178][ T29] audit: type=1326 audit(1764325589.691:3312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5337 comm="syz.5.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246796f749 code=0x7ffc0000 [ 64.119530][ T29] audit: type=1326 audit(1764325589.691:3313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5337 comm="syz.5.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246796f749 code=0x7ffc0000 [ 64.143180][ T29] audit: type=1326 audit(1764325589.701:3314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5337 comm="syz.5.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f246796f749 code=0x7ffc0000 [ 64.166494][ T29] audit: type=1326 audit(1764325589.701:3315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5337 comm="syz.5.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246796f749 code=0x7ffc0000 [ 64.378494][ T5344] EXT4-fs (loop2): 1 truncate cleaned up [ 64.545013][ T5362] loop0: detected capacity change from 0 to 2048 [ 64.598818][ T5367] rdma_op ffff88811c7ddd80 conn xmit_rdma 0000000000000000 [ 64.609629][ T5362] netlink: 28 bytes leftover after parsing attributes in process `syz.0.542'. [ 64.694474][ T3319] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 65.150784][ T5405] loop1: detected capacity change from 0 to 512 [ 65.380738][ T113] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.423389][ T5405] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 65.494664][ T5405] EXT4-fs (loop1): orphan cleanup on readonly fs [ 65.532723][ T113] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.550068][ T5405] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.560: corrupted inode contents [ 65.562754][ T5405] EXT4-fs (loop1): Remounting filesystem read-only [ 65.569704][ T5405] EXT4-fs (loop1): 1 truncate cleaned up [ 65.575497][ T272] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 65.586069][ T272] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 65.611409][ T272] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 65.624196][ T5418] netlink: 256 bytes leftover after parsing attributes in process `syz.3.562'. [ 65.651347][ T113] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.696827][ T113] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.723924][ T5394] chnl_net:caif_netlink_parms(): no params data found [ 65.737147][ T5431] netlink: 96 bytes leftover after parsing attributes in process `syz.3.566'. [ 65.823207][ T5444] netlink: 48 bytes leftover after parsing attributes in process `syz.1.571'. [ 65.860536][ T5394] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.867675][ T5394] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.874999][ T5394] bridge_slave_0: entered allmulticast mode [ 65.881888][ T5394] bridge_slave_0: entered promiscuous mode [ 65.888443][ T5394] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.895681][ T5394] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.917568][ T5446] loop1: detected capacity change from 0 to 512 [ 65.929335][ T5394] bridge_slave_1: entered allmulticast mode [ 65.936429][ T5394] bridge_slave_1: entered promiscuous mode [ 65.950475][ T113] bridge_slave_1: left allmulticast mode [ 65.955863][ T5446] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 65.956181][ T113] bridge_slave_1: left promiscuous mode [ 65.969843][ T113] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.978327][ T113] bridge_slave_0: left allmulticast mode [ 65.984170][ T113] bridge_slave_0: left promiscuous mode [ 65.989871][ T113] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.017449][ T5446] EXT4-fs (loop1): orphan cleanup on readonly fs [ 66.025559][ T5452] loop2: detected capacity change from 0 to 512 [ 66.033224][ T5446] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.572: corrupted inode contents [ 66.056307][ T5446] EXT4-fs (loop1): Remounting filesystem read-only [ 66.063264][ T5446] EXT4-fs (loop1): 1 truncate cleaned up [ 66.070303][ T384] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 66.075130][ T5452] EXT4-fs mount: 42 callbacks suppressed [ 66.075144][ T5452] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.080859][ T384] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 66.086816][ T5452] ext4 filesystem being mounted at /118/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 66.141309][ T384] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 66.141828][ T5446] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 66.166451][ T5448] loop3: detected capacity change from 0 to 32768 [ 66.186669][ T5452] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.574: corrupted xattr block 33: invalid ea_ino [ 66.205249][ T5452] EXT4-fs (loop2): Remounting filesystem read-only [ 66.211846][ T5452] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 66.220878][ T5452] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 66.221220][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.229818][ T5452] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 66.240578][ T3528] loop3: p1 p2 p3 < p5 p6 > [ 66.253208][ T3528] loop3: p2 size 16775168 extends beyond EOD, truncated [ 66.265870][ T113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.275513][ T3528] loop3: p5 start 4294970168 is beyond EOD, truncated [ 66.282667][ T113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.294457][ T113] bond0 (unregistering): Released all slaves [ 66.296778][ T5448] loop3: p1 p2 p3 < p5 p6 > [ 66.305934][ T5448] loop3: p2 size 16775168 extends beyond EOD, truncated [ 66.316053][ T5448] loop3: p5 start 4294970168 is beyond EOD, truncated [ 66.323954][ T5458] sch_tbf: peakrate 2147483648 is lower than or equals to rate 6829859379779001161 ! [ 66.339609][ T113] hsr_slave_0: left promiscuous mode [ 66.345643][ T113] hsr_slave_1: left promiscuous mode [ 66.351598][ T113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.359060][ T113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.366749][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.378634][ T113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.386061][ T113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.426222][ T113] veth1_macvtap: left promiscuous mode [ 66.432017][ T113] veth0_macvtap: left promiscuous mode [ 66.457469][ T113] veth1_vlan: left promiscuous mode [ 66.469312][ T113] veth0_vlan: left promiscuous mode [ 66.522011][ T3612] udevd[3612]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 66.532975][ T3528] udevd[3528]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 66.544294][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 66.560530][ T5473] netlink: 48 bytes leftover after parsing attributes in process `syz.1.581'. [ 66.570954][ T5109] udevd[5109]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 66.621787][ T3612] udevd[3612]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 66.627890][ T3528] udevd[3528]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 66.634800][ T5109] udevd[5109]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 66.646634][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 66.733283][ T5394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.764664][ T5394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.774809][ T5481] netlink: 28 bytes leftover after parsing attributes in process `syz.1.585'. [ 66.860073][ T5491] rdma_op ffff88811ab30980 conn xmit_rdma 0000000000000000 [ 66.934492][ T5394] team0: Port device team_slave_0 added [ 66.957347][ T5394] team0: Port device team_slave_1 added [ 66.991211][ T5394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.998204][ T5394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.024154][ T5394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.051795][ T5394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.058758][ T5394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.084726][ T5394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.116281][ T5394] hsr_slave_0: entered promiscuous mode [ 67.122372][ T5394] hsr_slave_1: entered promiscuous mode [ 67.129370][ T5394] debugfs: 'hsr0' already exists in 'hsr' [ 67.135185][ T5394] Cannot create hsr debugfs directory [ 67.158804][ T5517] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 67.301156][ T5539] loop3: detected capacity change from 0 to 2048 [ 67.330925][ T5539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.344172][ T5394] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 67.390320][ T5394] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 67.431909][ T5394] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 67.470194][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.507405][ T5394] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 67.640080][ T5567] loop5: detected capacity change from 0 to 1024 [ 67.704394][ T5571] loop3: detected capacity change from 0 to 512 [ 67.713261][ T5571] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 67.745818][ T5567] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.775703][ T5567] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.600: missing EA_INODE flag [ 67.801665][ T5567] EXT4-fs (loop5): Remounting filesystem read-only [ 67.808267][ T5567] EXT4-fs warning (device loop5): ext4_xattr_inode_dec_ref_all:1226: inode #18: comm syz.5.600: ea_inode dec ref err=-30 [ 67.820990][ T5567] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -30) [ 68.095549][ T5571] loop3: detected capacity change from 0 to 4096 [ 68.140024][ T5571] EXT4-fs: Ignoring removed nomblk_io_submit option [ 68.390007][ T5571] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.518903][ T5394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.529774][ T5394] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.545033][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.694588][ T5606] loop2: detected capacity change from 0 to 4096 [ 68.717586][ T5606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.765703][ T5606] ALSA: seq fatal error: cannot create timer (-16) [ 68.805552][ T113] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.812681][ T113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.831739][ T5394] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.842183][ T5394] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.863149][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.874629][ T113] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.881699][ T113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.937616][ T5394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.953599][ T4351] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.008250][ T5627] FAULT_INJECTION: forcing a failure. [ 69.008250][ T5627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.021424][ T5627] CPU: 1 UID: 0 PID: 5627 Comm: syz.2.612 Not tainted syzkaller #0 PREEMPT(voluntary) [ 69.021452][ T5627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 69.021462][ T5627] Call Trace: [ 69.021468][ T5627] [ 69.021476][ T5627] __dump_stack+0x1d/0x30 [ 69.021495][ T5627] dump_stack_lvl+0xe8/0x140 [ 69.021513][ T5627] dump_stack+0x15/0x1b [ 69.021607][ T5627] should_fail_ex+0x265/0x280 [ 69.021626][ T5627] should_fail+0xb/0x20 [ 69.021642][ T5627] should_fail_usercopy+0x1a/0x20 [ 69.021728][ T5627] _copy_from_iter+0xd2/0xe80 [ 69.021754][ T5627] ? __rcu_read_unlock+0x4f/0x70 [ 69.021778][ T5627] ? __rcu_read_unlock+0x4f/0x70 [ 69.021802][ T5627] packet_sendmsg+0x2003/0x31f0 [ 69.021891][ T5627] ? __rcu_read_unlock+0x4f/0x70 [ 69.021910][ T5627] ? avc_has_perm_noaudit+0x1b1/0x200 [ 69.022008][ T5627] ? avc_has_perm+0xf7/0x180 [ 69.022028][ T5627] ? selinux_socket_sendmsg+0x175/0x1b0 [ 69.022125][ T5627] ? __pfx_packet_sendmsg+0x10/0x10 [ 69.022165][ T5627] __sock_sendmsg+0x145/0x180 [ 69.022190][ T5627] __sys_sendto+0x268/0x330 [ 69.022297][ T5627] __x64_sys_sendto+0x76/0x90 [ 69.022324][ T5627] x64_sys_call+0x2d14/0x3000 [ 69.022392][ T5627] do_syscall_64+0xd2/0x200 [ 69.022413][ T5627] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 69.022438][ T5627] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 69.022471][ T5627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.022493][ T5627] RIP: 0033:0x7f9deea6f749 [ 69.022509][ T5627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.022571][ T5627] RSP: 002b:00007f9ded4cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 69.022588][ T5627] RAX: ffffffffffffffda RBX: 00007f9deecc5fa0 RCX: 00007f9deea6f749 [ 69.022598][ T5627] RDX: 000000000000e90c RSI: 00002000000000c0 RDI: 0000000000000003 [ 69.022608][ T5627] RBP: 00007f9ded4cf090 R08: 0000200000000540 R09: 0000000000000014 [ 69.022619][ T5627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.022657][ T5627] R13: 00007f9deecc6038 R14: 00007f9deecc5fa0 R15: 00007ffccf1d8ba8 [ 69.022676][ T5627] [ 69.261569][ T5637] netlink: 176 bytes leftover after parsing attributes in process `syz.3.616'. [ 69.272910][ T5637] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=5637 comm=syz.3.616 [ 69.290485][ T5635] netlink: 'syz.5.615': attribute type 1 has an invalid length. [ 69.298167][ T5635] netlink: 224 bytes leftover after parsing attributes in process `syz.5.615'. [ 69.342969][ T5394] veth0_vlan: entered promiscuous mode [ 69.354495][ T5394] veth1_vlan: entered promiscuous mode [ 69.367862][ T5394] veth0_macvtap: entered promiscuous mode [ 69.395291][ T5394] veth1_macvtap: entered promiscuous mode [ 69.402083][ T5651] FAULT_INJECTION: forcing a failure. [ 69.402083][ T5651] name failslab, interval 1, probability 0, space 0, times 0 [ 69.414772][ T5651] CPU: 0 UID: 0 PID: 5651 Comm: syz.3.619 Not tainted syzkaller #0 PREEMPT(voluntary) [ 69.414820][ T5651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 69.414831][ T5651] Call Trace: [ 69.414837][ T5651] [ 69.414844][ T5651] __dump_stack+0x1d/0x30 [ 69.414883][ T5651] dump_stack_lvl+0xe8/0x140 [ 69.414963][ T5651] dump_stack+0x15/0x1b [ 69.414977][ T5651] should_fail_ex+0x265/0x280 [ 69.414993][ T5651] should_failslab+0x8c/0xb0 [ 69.415046][ T5651] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 69.415074][ T5651] ? __alloc_skb+0x101/0x320 [ 69.415101][ T5651] __alloc_skb+0x101/0x320 [ 69.415185][ T5651] netlink_ack+0xfd/0x500 [ 69.415214][ T5651] netlink_rcv_skb+0x192/0x220 [ 69.415268][ T5651] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 69.415292][ T5651] rtnetlink_rcv+0x1c/0x30 [ 69.415311][ T5651] netlink_unicast+0x5c0/0x690 [ 69.415413][ T5651] netlink_sendmsg+0x58b/0x6b0 [ 69.415432][ T5651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.415450][ T5651] __sock_sendmsg+0x145/0x180 [ 69.415543][ T5651] ____sys_sendmsg+0x31e/0x4e0 [ 69.415561][ T5651] ___sys_sendmsg+0x17b/0x1d0 [ 69.415592][ T5651] __x64_sys_sendmsg+0xd4/0x160 [ 69.415615][ T5651] x64_sys_call+0x191e/0x3000 [ 69.415670][ T5651] do_syscall_64+0xd2/0x200 [ 69.415687][ T5651] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 69.415708][ T5651] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 69.415769][ T5651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.415790][ T5651] RIP: 0033:0x7fdc45e1f749 [ 69.415805][ T5651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.415890][ T5651] RSP: 002b:00007fdc44887038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.415906][ T5651] RAX: ffffffffffffffda RBX: 00007fdc46075fa0 RCX: 00007fdc45e1f749 [ 69.415918][ T5651] RDX: 0000000024040084 RSI: 0000200000006040 RDI: 0000000000000003 [ 69.415930][ T5651] RBP: 00007fdc44887090 R08: 0000000000000000 R09: 0000000000000000 [ 69.416000][ T5651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.416011][ T5651] R13: 00007fdc46076038 R14: 00007fdc46075fa0 R15: 00007ffdb18bb368 [ 69.416038][ T5651] [ 69.706049][ T5394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.717744][ T5394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.730690][ T113] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.741050][ T113] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.741089][ T113] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.741119][ T113] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.802159][ T29] kauditd_printk_skb: 193 callbacks suppressed [ 69.802173][ T29] audit: type=1400 audit(1764325595.631:3497): avc: denied { mount } for pid=5394 comm="syz-executor" name="/" dev="gadgetfs" ino=4028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 69.832259][ T5674] rdma_op ffff888119c64980 conn xmit_rdma 0000000000000000 [ 70.027754][ T5678] loop3: detected capacity change from 0 to 32768 [ 70.037554][ T5702] rdma_op ffff888119441180 conn xmit_rdma 0000000000000000 [ 70.070601][ T3612] loop3: p1 p2 p3 < p5 p6 > [ 70.076084][ T3612] loop3: p2 size 16775168 extends beyond EOD, truncated [ 70.076923][ T3612] loop3: p5 start 4294970168 is beyond EOD, truncated [ 70.101151][ T5678] loop3: p1 p2 p3 < p5 p6 > [ 70.106667][ T5678] loop3: p2 size 16775168 extends beyond EOD, truncated [ 70.126247][ T5678] loop3: p5 start 4294970168 is beyond EOD, truncated [ 70.146275][ T5710] rdma_op ffff8881048c0580 conn xmit_rdma 0000000000000000 [ 70.181833][ T5713] netlink: 256 bytes leftover after parsing attributes in process `syz.6.642'. [ 70.246545][ T5721] loop1: detected capacity change from 0 to 4096 [ 70.258915][ T5721] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.285996][ T5721] ALSA: seq fatal error: cannot create timer (-16) [ 70.295258][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 70.295401][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 70.381042][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.407433][ T5737] netlink: 48 bytes leftover after parsing attributes in process `syz.3.652'. [ 70.431536][ T29] audit: type=1326 audit(1764325596.261:3498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5738 comm="syz.3.654" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc45e1f749 code=0x0 [ 70.485935][ T5746] netlink: 256 bytes leftover after parsing attributes in process `syz.1.657'. [ 70.534717][ T5756] loop5: detected capacity change from 0 to 512 [ 70.571334][ T5756] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.584248][ T5756] ext4 filesystem being mounted at /70/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 70.617507][ T5756] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.659: corrupted xattr block 33: invalid ea_ino [ 70.631230][ T5756] EXT4-fs (loop5): Remounting filesystem read-only [ 70.637765][ T5756] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 70.647719][ T5756] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 70.658327][ T5756] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 70.674132][ T29] audit: type=1326 audit(1764325596.501:3499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5755 comm="syz.5.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246796f749 code=0x7ffc0000 [ 70.714067][ T5765] loop1: detected capacity change from 0 to 4096 [ 70.728181][ T29] audit: type=1326 audit(1764325596.501:3500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5755 comm="syz.5.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f246796f749 code=0x7ffc0000 [ 70.751657][ T29] audit: type=1326 audit(1764325596.501:3501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5755 comm="syz.5.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246796f749 code=0x7ffc0000 [ 70.775348][ T29] audit: type=1326 audit(1764325596.531:3502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5755 comm="syz.5.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246796f749 code=0x7ffc0000 [ 70.803128][ T4351] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.803745][ T29] audit: type=1326 audit(1764325596.551:3503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.6.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9014ddf749 code=0x7ffc0000 [ 70.835633][ T29] audit: type=1326 audit(1764325596.551:3504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.6.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9014ddf749 code=0x7ffc0000 [ 70.839391][ T5765] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.858966][ T29] audit: type=1326 audit(1764325596.551:3505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.6.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9014ddf749 code=0x7ffc0000 [ 70.858992][ T29] audit: type=1326 audit(1764325596.551:3506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.6.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9014ddf749 code=0x7ffc0000 [ 70.942804][ T5765] ALSA: seq fatal error: cannot create timer (-16) [ 70.989058][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.066265][ T5788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.669'. [ 71.090617][ T5791] loop1: detected capacity change from 0 to 512 [ 71.097207][ T5791] EXT4-fs: Ignoring removed oldalloc option [ 71.104742][ T5791] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 71.116586][ T5791] EXT4-fs (loop1): 1 truncate cleaned up [ 71.123363][ T5791] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.714201][ T5816] netlink: 660 bytes leftover after parsing attributes in process `syz.6.680'. [ 71.751191][ T5816] infiniband sy: set active [ 71.755852][ T5816] infiniband sy: added bond_slave_0 [ 71.768561][ T5816] RDS/IB: sy: added [ 71.772516][ T5816] smc: adding ib device sy with port count 1 [ 71.778577][ T5816] smc: ib device sy port 1 has no pnetid [ 71.827208][ T5825] loop5: detected capacity change from 0 to 512 [ 71.834456][ T5825] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 71.847987][ T5825] EXT4-fs (loop5): 1 truncate cleaned up [ 71.854386][ T5825] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.972949][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.032552][ T4351] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.446017][ T5835] netlink: 'syz.6.685': attribute type 1 has an invalid length. [ 72.453748][ T5835] netlink: 224 bytes leftover after parsing attributes in process `syz.6.685'. [ 72.598735][ T5843] netlink: 'syz.2.688': attribute type 7 has an invalid length. [ 72.606454][ T5843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.688'. [ 72.700225][ T5858] netlink: 256 bytes leftover after parsing attributes in process `syz.3.695'. [ 72.748266][ T3395] hid_parser_main: 44 callbacks suppressed [ 72.748283][ T3395] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 72.761777][ T3395] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 72.769338][ T3395] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 72.777032][ T3395] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 72.784718][ T3395] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 72.792161][ T3395] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 72.799576][ T3395] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 72.802142][ T5865] loop3: detected capacity change from 0 to 512 [ 72.806991][ T3395] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 72.820737][ T3395] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 72.828301][ T3395] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 72.843231][ T5867] loop2: detected capacity change from 0 to 512 [ 72.893540][ T5865] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 72.901814][ T5865] EXT4-fs (loop3): orphan cleanup on readonly fs [ 72.909803][ T5865] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.697: corrupted inode contents [ 72.931206][ T5865] EXT4-fs (loop3): Remounting filesystem read-only [ 72.938017][ T3395] hid-generic 0003:0004:0000.0009: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 72.938686][ T5867] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 72.966238][ T5865] EXT4-fs (loop3): 1 truncate cleaned up [ 72.972222][ T272] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 72.982871][ T272] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 72.987866][ T5876] fido_id[5876]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 72.994935][ T5867] EXT4-fs (loop2): orphan cleanup on readonly fs [ 73.021663][ T272] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 73.045006][ T5878] netlink: 48 bytes leftover after parsing attributes in process `syz.5.700'. [ 73.057506][ T5867] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.698: corrupted inode contents [ 73.078052][ T5865] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.092925][ T5867] EXT4-fs (loop2): Remounting filesystem read-only [ 73.102689][ T5873] loop6: detected capacity change from 0 to 32768 [ 73.106327][ T5867] EXT4-fs (loop2): 1 truncate cleaned up [ 73.115218][ T272] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 73.126044][ T272] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 73.140572][ T3528] loop6: p1 p2 p3 < p5 p6 > [ 73.141451][ T272] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 73.145242][ T3528] loop6: p1 size 242222080 extends beyond EOD, truncated [ 73.163134][ T5867] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.185784][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.196342][ T3528] loop6: p2 start 4294967295 is beyond EOD, truncated [ 73.235065][ T5873] loop6: p1 p2 p3 < p5 p6 > [ 73.240211][ T5873] loop6: p1 size 242222080 extends beyond EOD, truncated [ 73.240695][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.256765][ T5873] loop6: p2 start 4294967295 is beyond EOD, truncated [ 73.320180][ T5893] netlink: 256 bytes leftover after parsing attributes in process `syz.5.707'. [ 73.344251][ T5899] loop2: detected capacity change from 0 to 512 [ 73.395466][ T3395] hid-generic 0003:0004:0000.000A: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 73.417235][ T5899] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.458358][ T5899] ext4 filesystem being mounted at /144/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 73.459278][ T5911] fido_id[5911]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 73.491041][ T5913] netlink: 'syz.5.713': attribute type 1 has an invalid length. [ 73.511539][ T5913] netlink: 224 bytes leftover after parsing attributes in process `syz.5.713'. [ 73.542161][ T5899] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.709: corrupted xattr block 33: invalid ea_ino [ 73.562276][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 73.567261][ T5109] udevd[5109]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 73.574902][ T3528] udevd[3528]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 73.607241][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 73.621328][ T5899] EXT4-fs (loop2): Remounting filesystem read-only [ 73.627898][ T5899] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 73.647246][ T5899] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 73.656690][ T5899] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 73.667378][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 73.667716][ T3612] udevd[3612]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 73.679805][ T3528] udevd[3528]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 73.689399][ T5109] udevd[5109]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 73.712052][ T5922] rdma_op ffff88811a0ae980 conn xmit_rdma 0000000000000000 [ 73.766897][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.795290][ T5900] loop6: detected capacity change from 0 to 32768 [ 73.853903][ T3528] loop6: p1 p2 p3 < p5 p6 > [ 73.867072][ T5933] loop5: detected capacity change from 0 to 4096 [ 73.873770][ T3528] loop6: p1 size 242222080 extends beyond EOD, truncated [ 73.912102][ T5935] FAULT_INJECTION: forcing a failure. [ 73.912102][ T5935] name failslab, interval 1, probability 0, space 0, times 0 [ 73.924758][ T5935] CPU: 0 UID: 0 PID: 5935 Comm: syz.1.722 Not tainted syzkaller #0 PREEMPT(voluntary) [ 73.924846][ T5935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 73.924855][ T5935] Call Trace: [ 73.924861][ T5935] [ 73.924867][ T5935] __dump_stack+0x1d/0x30 [ 73.924888][ T5935] dump_stack_lvl+0xe8/0x140 [ 73.924904][ T5935] dump_stack+0x15/0x1b [ 73.924990][ T5935] should_fail_ex+0x265/0x280 [ 73.925009][ T5935] ? __tcf_chain_get+0x91/0x280 [ 73.925035][ T5935] should_failslab+0x8c/0xb0 [ 73.925061][ T5935] __kmalloc_cache_noprof+0x4c/0x4a0 [ 73.925162][ T5935] __tcf_chain_get+0x91/0x280 [ 73.925234][ T5935] ? __tcf_block_find+0x11a/0x1a0 [ 73.925254][ T5935] tc_new_tfilter+0x5ac/0x10a0 [ 73.925269][ T5935] ? __rcu_read_unlock+0x4f/0x70 [ 73.925294][ T5935] ? avc_has_perm_noaudit+0x1b1/0x200 [ 73.925344][ T5935] ? ns_capable+0x7d/0xb0 [ 73.925425][ T5935] ? __pfx_tc_new_tfilter+0x10/0x10 [ 73.925443][ T5935] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 73.925469][ T5935] netlink_rcv_skb+0x123/0x220 [ 73.925541][ T5935] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 73.925569][ T5935] rtnetlink_rcv+0x1c/0x30 [ 73.925666][ T5935] netlink_unicast+0x5c0/0x690 [ 73.925697][ T5935] netlink_sendmsg+0x58b/0x6b0 [ 73.925746][ T5935] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.925766][ T5935] __sock_sendmsg+0x145/0x180 [ 73.925790][ T5935] ____sys_sendmsg+0x31e/0x4e0 [ 73.925809][ T5935] ___sys_sendmsg+0x17b/0x1d0 [ 73.925903][ T5935] __x64_sys_sendmsg+0xd4/0x160 [ 73.925925][ T5935] x64_sys_call+0x191e/0x3000 [ 73.925944][ T5935] do_syscall_64+0xd2/0x200 [ 73.925962][ T5935] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 73.926027][ T5935] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 73.926053][ T5935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.926118][ T5935] RIP: 0033:0x7f7d1c30f749 [ 73.926133][ T5935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.926151][ T5935] RSP: 002b:00007f7d1ad77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.926171][ T5935] RAX: ffffffffffffffda RBX: 00007f7d1c565fa0 RCX: 00007f7d1c30f749 [ 73.926184][ T5935] RDX: 0000000024040084 RSI: 0000200000006040 RDI: 0000000000000007 [ 73.926198][ T5935] RBP: 00007f7d1ad77090 R08: 0000000000000000 R09: 0000000000000000 [ 73.926208][ T5935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.926219][ T5935] R13: 00007f7d1c566038 R14: 00007f7d1c565fa0 R15: 00007fffb2f93ad8 [ 73.926287][ T5935] [ 73.926704][ T3528] loop6: p2 start 4294967295 is beyond EOD, [ 74.061318][ T5933] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.064622][ T3528] truncated [ 74.171588][ T5933] ALSA: seq fatal error: cannot create timer (-16) [ 74.219462][ T5900] loop6: p1 p2 p3 < > [ 74.223990][ T5900] loop6: p1 size 242222080 extends beyond EOD, truncated [ 74.257528][ T3409] hid-generic 0003:0004:0000.000B: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 74.276288][ T5900] loop6: p2 start 4294967295 is beyond EOD, truncated [ 74.319054][ T5952] fido_id[5952]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 74.341369][ T4351] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.408156][ T5961] loop5: detected capacity change from 0 to 2048 [ 74.451688][ T5961] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.512297][ T4351] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.552440][ T5970] rdma_op ffff8881043fa980 conn xmit_rdma 0000000000000000 [ 74.576889][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 74.583617][ T3528] udevd[3528]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 74.608201][ T5972] rdma_op ffff8881043fa980 conn xmit_rdma 0000000000000000 [ 74.619014][ T5945] loop1: detected capacity change from 0 to 32768 [ 74.662004][ T5945] loop1: p1 p2 p3 < p5 p6 > [ 74.670448][ T5945] loop1: p1 size 242222080 extends beyond EOD, truncated [ 74.694128][ T5945] loop1: p2 start 4294967295 is beyond EOD, truncated [ 74.720304][ T5979] IPv6: Can't replace route, no match found [ 74.745258][ T5983] IPv6: Can't replace route, no match found [ 74.802556][ T3427] hid-generic 0003:0004:0000.000C: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 75.011291][ T5985] loop1: detected capacity change from 0 to 32768 [ 75.070454][ T3612] loop1: p1 p2 p3 < p5 p6 > [ 75.077386][ T3612] loop1: p1 size 242222080 extends beyond EOD, truncated [ 75.086720][ T3612] loop1: p2 start 4294967295 is beyond EOD, truncated [ 75.108036][ T29] kauditd_printk_skb: 458 callbacks suppressed [ 75.108049][ T29] audit: type=1326 audit(1764325600.931:3953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5984 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1c30f749 code=0x7ffc0000 [ 75.141045][ T29] audit: type=1326 audit(1764325600.961:3954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5984 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f7d1c30f749 code=0x7ffc0000 [ 75.164657][ T29] audit: type=1326 audit(1764325600.961:3955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5984 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1c30f749 code=0x7ffc0000 [ 75.187992][ T29] audit: type=1326 audit(1764325600.961:3956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5984 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1c30f749 code=0x7ffc0000 [ 75.211390][ T29] audit: type=1326 audit(1764325600.971:3957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5984 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d1c30f749 code=0x7ffc0000 [ 75.234738][ T29] audit: type=1326 audit(1764325600.971:3958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5984 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1c30f749 code=0x7ffc0000 [ 75.258175][ T29] audit: type=1326 audit(1764325600.971:3959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5984 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1c30f749 code=0x7ffc0000 [ 75.281693][ T29] audit: type=1326 audit(1764325600.971:3960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5984 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f7d1c30f749 code=0x7ffc0000 [ 75.305014][ T29] audit: type=1326 audit(1764325600.971:3961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5984 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1c30f749 code=0x7ffc0000 [ 75.328344][ T29] audit: type=1326 audit(1764325600.971:3962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5984 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7d1c30f749 code=0x7ffc0000 [ 75.364565][ T6019] FAULT_INJECTION: forcing a failure. [ 75.364565][ T6019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.377804][ T6019] CPU: 1 UID: 0 PID: 6019 Comm: syz.5.750 Not tainted syzkaller #0 PREEMPT(voluntary) [ 75.377847][ T6019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 75.377857][ T6019] Call Trace: [ 75.377862][ T6019] [ 75.377868][ T6019] __dump_stack+0x1d/0x30 [ 75.377910][ T6019] dump_stack_lvl+0xe8/0x140 [ 75.377931][ T6019] dump_stack+0x15/0x1b [ 75.378009][ T6019] should_fail_ex+0x265/0x280 [ 75.378078][ T6019] should_fail+0xb/0x20 [ 75.378135][ T6019] should_fail_usercopy+0x1a/0x20 [ 75.378156][ T6019] _copy_to_user+0x20/0xa0 [ 75.378180][ T6019] __x64_sys_sysinfo+0x57/0xa0 [ 75.378214][ T6019] x64_sys_call+0x284f/0x3000 [ 75.378284][ T6019] do_syscall_64+0xd2/0x200 [ 75.378302][ T6019] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 75.378368][ T6019] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 75.378463][ T6019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.378482][ T6019] RIP: 0033:0x7f246796f749 [ 75.378495][ T6019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.378512][ T6019] RSP: 002b:00007f24663d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000063 [ 75.378553][ T6019] RAX: ffffffffffffffda RBX: 00007f2467bc5fa0 RCX: 00007f246796f749 [ 75.378567][ T6019] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000d00 [ 75.378578][ T6019] RBP: 00007f24663d7090 R08: 0000000000000000 R09: 0000000000000000 [ 75.378636][ T6019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.378648][ T6019] R13: 00007f2467bc6038 R14: 00007f2467bc5fa0 R15: 00007ffe97ae7a08 [ 75.378735][ T6019] [ 75.430303][ T5985] loop1: p1 p2 p3 < p5 p6 > [ 75.563121][ T5985] loop1: p1 size 242222080 extends beyond EOD, truncated [ 75.571086][ T5985] loop1: p2 start 4294967295 is beyond EOD, truncated [ 76.334612][ T6042] loop1: detected capacity change from 0 to 32768 [ 76.478521][ T6042] loop1: p1 p2 p3 < p5 p6 > [ 76.485208][ T6042] loop1: p2 size 16775168 extends beyond EOD, truncated [ 76.493675][ T6042] loop1: p5 start 4294970168 is beyond EOD, truncated [ 76.513288][ T6049] loop3: detected capacity change from 0 to 128 [ 76.616364][ T6050] loop6: detected capacity change from 0 to 1024 [ 76.782616][ T6050] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.821069][ T6050] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.758: missing EA_INODE flag [ 76.833175][ T6050] EXT4-fs (loop6): Remounting filesystem read-only [ 76.839843][ T6050] EXT4-fs warning (device loop6): ext4_xattr_inode_dec_ref_all:1226: inode #18: comm syz.6.758: ea_inode dec ref err=-30 [ 76.852612][ T6050] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -30) [ 77.203808][ T6049] syz.3.761: attempt to access beyond end of device [ 77.203808][ T6049] loop3: rw=2049, sector=138, nr_sectors = 80 limit=128 [ 77.238267][ T6049] syz.3.761: attempt to access beyond end of device [ 77.238267][ T6049] loop3: rw=2049, sector=234, nr_sectors = 8 limit=128 [ 77.292538][ T6062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.761'. [ 77.334124][ T6049] syz.3.761: attempt to access beyond end of device [ 77.334124][ T6049] loop3: rw=2049, sector=240, nr_sectors = 2 limit=128 [ 77.347522][ T6049] Buffer I/O error on dev loop3, logical block 120, lost async page write [ 77.403212][ T6060] loop1: detected capacity change from 0 to 8192 [ 77.415428][ T6065] SELinux: policydb version -1411311999 does not match my version range 15-35 [ 77.432985][ T6049] syz.3.761: attempt to access beyond end of device [ 77.432985][ T6049] loop3: rw=2049, sector=242, nr_sectors = 8 limit=128 [ 77.446501][ T6065] SELinux: failed to load policy [ 77.461148][ T6049] syz.3.761: attempt to access beyond end of device [ 77.461148][ T6049] loop3: rw=2049, sector=248, nr_sectors = 2 limit=128 [ 77.474503][ T6049] Buffer I/O error on dev loop3, logical block 124, lost async page write [ 77.566045][ T3417] hid-generic 0003:0004:0000.000D: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 77.602086][ T6049] syz.3.761: attempt to access beyond end of device [ 77.602086][ T6049] loop3: rw=2049, sector=218, nr_sectors = 8 limit=128 [ 77.649501][ T6049] syz.3.761: attempt to access beyond end of device [ 77.649501][ T6049] loop3: rw=2049, sector=224, nr_sectors = 2 limit=128 [ 77.662914][ T6049] Buffer I/O error on dev loop3, logical block 112, lost async page write [ 77.697167][ T6049] syz.3.761: attempt to access beyond end of device [ 77.697167][ T6049] loop3: rw=2049, sector=226, nr_sectors = 8 limit=128 [ 77.845626][ T6068] loop5: detected capacity change from 0 to 32768 [ 77.931889][ T3612] loop5: p1 p2 p3 < p5 p6 > [ 77.936673][ T3612] loop5: p1 size 242222080 extends beyond EOD, truncated [ 77.958576][ T3612] loop5: p2 start 4294967295 is beyond EOD, truncated [ 78.115281][ T6068] loop5: p1 p2 p3 < p5 p6 > [ 78.120366][ T6068] loop5: p1 size 242222080 extends beyond EOD, truncated [ 78.144950][ T6068] loop5: p2 start 4294967295 is beyond EOD, truncated [ 78.820657][ T5394] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.958673][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 78.969553][ T3528] udevd[3528]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 78.980880][ T5109] udevd[5109]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 79.080890][ T3601] udevd[3601]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 79.082644][ T3528] udevd[3528]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 79.091759][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 79.114275][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 79.160301][ T6098] loop3: detected capacity change from 0 to 1024 [ 79.221541][ T6098] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 79.300024][ T6098] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 79.321078][ T6098] EXT4-fs (loop3): orphan cleanup on readonly fs [ 79.328090][ T6098] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz.3.778: Invalid inode table block 0 in block_group 0 [ 79.472380][ T6115] netlink: 12 bytes leftover after parsing attributes in process `syz.6.779'. [ 79.481320][ T6115] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 79.590091][ T6098] EXT4-fs (loop3): Remounting filesystem read-only [ 79.640766][ T6098] EXT4-fs (loop3): 1 truncate cleaned up [ 79.736239][ T6086] hid_parser_main: 80 callbacks suppressed [ 79.736256][ T6086] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 79.749620][ T6086] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 79.757078][ T6086] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 79.764600][ T6086] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 79.772053][ T6086] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 79.779497][ T6086] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 79.786947][ T6086] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 79.794418][ T6086] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 79.801933][ T6086] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 79.809319][ T6086] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 79.819272][ T6098] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.840126][ T6098] EXT4-fs (loop3): shut down requested (1) [ 79.846646][ T6098] netlink: 'syz.3.778': attribute type 7 has an invalid length. [ 79.903721][ T6086] hid-generic 0003:0004:0000.000E: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 79.940612][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.041920][ T6144] fido_id[6144]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 80.176103][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 80.176117][ T29] audit: type=1326 audit(1764325606.001:4103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6120 comm="syz.5.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246796f749 code=0x7ffc0000 [ 80.267257][ T29] audit: type=1326 audit(1764325606.041:4104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6120 comm="syz.5.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246796f749 code=0x7ffc0000 [ 80.291175][ T29] audit: type=1326 audit(1764325606.041:4105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6120 comm="syz.5.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f246796f749 code=0x7ffc0000 [ 80.314454][ T29] audit: type=1326 audit(1764325606.041:4106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6120 comm="syz.5.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246796f749 code=0x7ffc0000 [ 80.338006][ T29] audit: type=1326 audit(1764325606.041:4107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6120 comm="syz.5.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246796f749 code=0x7ffc0000 [ 80.361384][ T29] audit: type=1326 audit(1764325606.041:4108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6120 comm="syz.5.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f246796f749 code=0x7ffc0000 [ 80.384798][ T29] audit: type=1326 audit(1764325606.041:4109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6120 comm="syz.5.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246796f749 code=0x7ffc0000 [ 80.408237][ T29] audit: type=1326 audit(1764325606.041:4110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6120 comm="syz.5.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246796f749 code=0x7ffc0000 [ 80.431613][ T29] audit: type=1326 audit(1764325606.041:4111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6120 comm="syz.5.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f246796f749 code=0x7ffc0000 [ 80.454907][ T29] audit: type=1326 audit(1764325606.041:4112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6120 comm="syz.5.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246796f749 code=0x7ffc0000 [ 80.558951][ T6163] loop3: detected capacity change from 0 to 32768 [ 80.568274][ T6196] netlink: 'syz.2.798': attribute type 7 has an invalid length. [ 80.576010][ T6196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.798'. [ 80.596370][ T6198] loop1: detected capacity change from 0 to 512 [ 80.611040][ T3528] loop3: p1 p2 p3 < p5 p6 > [ 80.623095][ T3528] loop3: p2 size 16775168 extends beyond EOD, truncated [ 80.639469][ T6198] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #12: comm syz.1.799: corrupted in-inode xattr: bad e_name length [ 80.653425][ T3528] loop3: p5 start 4294970168 is beyond EOD, truncated [ 80.671860][ T6198] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.799: couldn't read orphan inode 12 (err -117) [ 80.671946][ T6163] loop3: p1 p2 p3 < p5 p6 > [ 80.690214][ T6198] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.693915][ T6163] loop3: p2 size 16775168 extends beyond EOD, truncated [ 80.712994][ T6198] EXT4-fs (loop1): shut down requested (2) [ 80.713780][ T6163] loop3: p5 start 4294970168 is beyond EOD, truncated [ 80.802362][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.951321][ T6215] loop5: detected capacity change from 0 to 1024 [ 81.644443][ T6243] netlink: 96 bytes leftover after parsing attributes in process `syz.6.811'. [ 81.771060][ T6246] rdma_op ffff88812a523980 conn xmit_rdma 0000000000000000 [ 81.815529][ T6249] : renamed from vlan1 (while UP) [ 81.832544][ T6215] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.852589][ T6215] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.803: missing EA_INODE flag [ 81.864907][ T6215] EXT4-fs (loop5): Remounting filesystem read-only [ 81.871632][ T6215] EXT4-fs warning (device loop5): ext4_xattr_inode_dec_ref_all:1226: inode #18: comm syz.5.803: ea_inode dec ref err=-30 [ 81.884306][ T6215] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -30) [ 82.091982][ T6258] loop2: detected capacity change from 0 to 2048 [ 82.105910][ T6262] loop3: detected capacity change from 0 to 2048 [ 82.163195][ T6262] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.179699][ T3528] loop2: p1 < > p4 [ 82.186653][ T3528] loop2: p4 size 8388608 extends beyond EOD, truncated [ 82.210513][ T6258] loop2: p1 < > p4 [ 82.214849][ T6258] loop2: p4 size 8388608 extends beyond EOD, truncated [ 82.251034][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.333841][ T4351] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.375546][ T6272] netlink: 'syz.2.823': attribute type 1 has an invalid length. [ 82.383404][ T6272] netlink: 224 bytes leftover after parsing attributes in process `syz.2.823'. [ 82.558802][ T6290] loop3: detected capacity change from 0 to 512 [ 82.566120][ T6290] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 82.577994][ T6290] EXT4-fs (loop3): 1 truncate cleaned up [ 82.584266][ T6290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.649817][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.052181][ T6307] loop6: detected capacity change from 0 to 512 [ 84.592036][ T6302] loop1: detected capacity change from 0 to 1024 [ 84.618779][ T6305] loop3: detected capacity change from 0 to 1024 [ 84.642901][ T6302] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.664725][ T6302] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.830: missing EA_INODE flag [ 84.678265][ T6305] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.695376][ T6305] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.832: missing EA_INODE flag [ 84.707689][ T6305] EXT4-fs (loop3): Remounting filesystem read-only [ 84.714378][ T6305] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1226: inode #18: comm syz.3.832: ea_inode dec ref err=-30 [ 84.727067][ T6305] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -30) [ 84.747104][ T6302] EXT4-fs (loop1): Remounting filesystem read-only [ 84.753768][ T6302] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1226: inode #18: comm syz.1.830: ea_inode dec ref err=-30 [ 84.766761][ T6302] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -30) [ 84.783488][ T6307] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 84.950128][ T6307] EXT4-fs (loop6): orphan cleanup on readonly fs [ 84.967310][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.988595][ T6307] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.834: corrupted inode contents [ 85.129955][ T6307] EXT4-fs (loop6): Remounting filesystem read-only [ 85.165388][ T6307] EXT4-fs (loop6): 1 truncate cleaned up [ 85.188212][ T6328] loop5: detected capacity change from 0 to 128 [ 85.229535][ T6328] syz.5.839: attempt to access beyond end of device [ 85.229535][ T6328] loop5: rw=2049, sector=138, nr_sectors = 72 limit=128 [ 85.270404][ T6330] netlink: 96 bytes leftover after parsing attributes in process `syz.1.840'. [ 85.279474][ T29] kauditd_printk_skb: 358 callbacks suppressed [ 85.279522][ T29] audit: type=1326 audit(1764325611.091:4471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6329 comm="syz.1.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1c30f749 code=0x7ffc0000 [ 85.308979][ T29] audit: type=1326 audit(1764325611.091:4472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6329 comm="syz.1.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1c30f749 code=0x7ffc0000 [ 85.332296][ T29] audit: type=1326 audit(1764325611.091:4473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6329 comm="syz.1.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d1c30f749 code=0x7ffc0000 [ 85.355802][ T29] audit: type=1326 audit(1764325611.091:4474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6329 comm="syz.1.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1c30f749 code=0x7ffc0000 [ 85.379096][ T29] audit: type=1326 audit(1764325611.091:4475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6329 comm="syz.1.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d1c30f749 code=0x7ffc0000 [ 85.402593][ T29] audit: type=1326 audit(1764325611.101:4476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6329 comm="syz.1.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1c30f749 code=0x7ffc0000 [ 85.425964][ T29] audit: type=1326 audit(1764325611.101:4477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6329 comm="syz.1.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1c30f749 code=0x7ffc0000 [ 85.449309][ T29] audit: type=1326 audit(1764325611.101:4478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6329 comm="syz.1.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f7d1c30f749 code=0x7ffc0000 [ 85.481095][ T6328] syz.5.839: attempt to access beyond end of device [ 85.481095][ T6328] loop5: rw=2049, sector=210, nr_sectors = 8 limit=128 [ 85.522302][ T6328] syz.5.839: attempt to access beyond end of device [ 85.522302][ T6328] loop5: rw=2049, sector=216, nr_sectors = 2 limit=128 [ 85.535645][ T6328] Buffer I/O error on dev loop5, logical block 108, lost async page write [ 85.582581][ T6334] loop1: detected capacity change from 0 to 128 [ 85.599323][ T6328] syz.5.839: attempt to access beyond end of device [ 85.599323][ T6328] loop5: rw=2049, sector=234, nr_sectors = 8 limit=128 [ 85.627198][ T6328] syz.5.839: attempt to access beyond end of device [ 85.627198][ T6328] loop5: rw=2049, sector=240, nr_sectors = 2 limit=128 [ 85.637527][ T29] audit: type=1326 audit(1764325611.321:4479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6329 comm="syz.1.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1c30f749 code=0x7ffc0000 [ 85.640614][ T6328] Buffer I/O error on dev loop5, logical block 120, lost async page write [ 85.680529][ T6334] syz.1.841: attempt to access beyond end of device [ 85.680529][ T6334] loop1: rw=2049, sector=138, nr_sectors = 72 limit=128 [ 85.700090][ T6123] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 85.700615][ T6334] syz.1.841: attempt to access beyond end of device [ 85.700615][ T6334] loop1: rw=2049, sector=210, nr_sectors = 8 limit=128 [ 85.710786][ T6123] Quota error (device loop6): write_blk: dquota write failed [ 85.724673][ T6328] syz.5.839: attempt to access beyond end of device [ 85.724673][ T6328] loop5: rw=2049, sector=242, nr_sectors = 8 limit=128 [ 85.731635][ T6123] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 85.731718][ T6123] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 85.765938][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.766246][ T6307] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 85.790340][ T6334] syz.1.841: attempt to access beyond end of device [ 85.790340][ T6334] loop1: rw=2049, sector=216, nr_sectors = 2 limit=128 [ 85.803711][ T6334] Buffer I/O error on dev loop1, logical block 108, lost async page write [ 85.812801][ T6328] syz.5.839: attempt to access beyond end of device [ 85.812801][ T6328] loop5: rw=2049, sector=248, nr_sectors = 2 limit=128 [ 85.826227][ T6328] Buffer I/O error on dev loop5, logical block 124, lost async page write [ 85.849861][ T5394] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.878521][ T6328] Buffer I/O error on dev loop5, logical block 112, lost async page write [ 85.888859][ T6334] Buffer I/O error on dev loop1, logical block 120, lost async page write [ 85.898054][ T6334] Buffer I/O error on dev loop1, logical block 124, lost async page write [ 85.907316][ T6328] Buffer I/O error on dev loop5, logical block 116, lost async page write [ 85.914671][ T6334] Buffer I/O error on dev loop1, logical block 112, lost async page write [ 85.925502][ T6334] Buffer I/O error on dev loop1, logical block 116, lost async page write [ 86.036876][ T6086] hid_parser_main: 8 callbacks suppressed [ 86.036895][ T6086] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 86.050540][ T6086] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 86.057984][ T6086] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 86.065394][ T6086] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 86.072789][ T6086] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 86.080279][ T6086] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 86.087719][ T6086] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 86.095096][ T6086] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 86.102490][ T6086] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 86.109872][ T6086] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 86.166650][ T6346] loop2: detected capacity change from 0 to 1024 [ 86.212423][ T6348] netlink: 16 bytes leftover after parsing attributes in process `syz.3.845'. [ 86.277939][ T6348] bond0: entered promiscuous mode [ 86.283065][ T6348] bond_slave_0: entered promiscuous mode [ 86.288772][ T6348] bond_slave_1: entered promiscuous mode [ 86.451712][ T6346] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.483914][ T6346] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.843: missing EA_INODE flag [ 86.514690][ T6348] bond0: left promiscuous mode [ 86.519516][ T6348] bond_slave_0: left promiscuous mode [ 86.525214][ T6348] bond_slave_1: left promiscuous mode [ 86.541755][ T6346] EXT4-fs (loop2): Remounting filesystem read-only [ 86.548361][ T6346] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1226: inode #18: comm syz.2.843: ea_inode dec ref err=-30 [ 86.561057][ T6346] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -30) [ 86.917408][ T6357] netlink: 'syz.1.847': attribute type 13 has an invalid length. [ 86.953098][ T6086] hid-generic 0003:0004:0000.000F: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 87.112327][ T6357] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.119559][ T6357] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.141494][ T6369] rdma_op ffff888104284580 conn xmit_rdma 0000000000000000 [ 87.621433][ T6357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.635875][ T6357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.789324][ T6376] netlink: 96 bytes leftover after parsing attributes in process `syz.5.855'. [ 87.798555][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.807796][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.827148][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.889287][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.913026][ T6381] netlink: 256 bytes leftover after parsing attributes in process `syz.1.856'. [ 87.923126][ T6382] netlink: 28 bytes leftover after parsing attributes in process `syz.5.857'. [ 87.998337][ T6388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.858'. [ 88.057343][ T6388] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 88.069762][ T6392] loop1: detected capacity change from 0 to 512 [ 88.124871][ T6390] loop5: detected capacity change from 0 to 4096 [ 88.138939][ T6392] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.181081][ T6086] hid-generic 0003:0004:0000.0010: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 88.196605][ T6398] rdma_op ffff888104285580 conn xmit_rdma 0000000000000000 [ 88.216229][ T6390] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.229566][ T6392] ext4 filesystem being mounted at /170/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 88.277173][ T6403] fido_id[6403]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 88.313544][ T6392] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.861: corrupted xattr block 33: invalid ea_ino [ 88.347107][ T6392] EXT4-fs (loop1): Remounting filesystem read-only [ 88.353753][ T6392] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 88.380444][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.393945][ T4351] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.410122][ T6392] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 88.419136][ T6392] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 88.428380][ T6405] loop3: detected capacity change from 0 to 4096 [ 88.467269][ T6405] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.515302][ T6394] loop6: detected capacity change from 0 to 32768 [ 88.545380][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.557537][ T6415] loop2: detected capacity change from 0 to 512 [ 88.570765][ T6394] loop6: p1 p2 p3 < p5 p6 > [ 88.572038][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.575582][ T6394] loop6: p1 size 242222080 extends beyond EOD, truncated [ 88.614950][ T6394] loop6: p2 start 4294967295 is beyond EOD, truncated [ 88.617681][ T6416] pim6reg: entered allmulticast mode [ 88.642460][ T6415] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.679010][ T6422] netlink: 256 bytes leftover after parsing attributes in process `syz.6.871'. [ 88.738161][ T6415] ext4 filesystem being mounted at /178/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 88.819810][ T6432] loop1: detected capacity change from 0 to 128 [ 88.856894][ T6415] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.868: corrupted xattr block 33: invalid ea_ino [ 88.869645][ T3528] udevd[3528]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 88.881181][ T6415] EXT4-fs (loop2): Remounting filesystem read-only [ 88.887792][ T6415] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 88.898259][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 88.910545][ T5109] udevd[5109]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 88.922319][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 89.017077][ T6415] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 89.017108][ T6415] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 89.047943][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 89.047896][ T3612] udevd[3612]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 89.053158][ T3528] udevd[3528]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 89.076419][ T5109] udevd[5109]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 89.120597][ T6443] netlink: 'syz.3.877': attribute type 1 has an invalid length. [ 89.120614][ T6443] netlink: 224 bytes leftover after parsing attributes in process `syz.3.877'. [ 89.120801][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.176686][ T6448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.878'. [ 89.255594][ T6452] loop3: detected capacity change from 0 to 4096 [ 89.273064][ T6452] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.292796][ T6086] hid-generic 0003:0004:0000.0011: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 89.372470][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.464768][ T6413] syz.5.867 (6413) used greatest stack depth: 6328 bytes left [ 89.552697][ T6454] loop6: detected capacity change from 0 to 32768 [ 89.559703][ T6473] loop2: detected capacity change from 0 to 512 [ 89.568741][ T6473] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 89.590684][ T6473] EXT4-fs (loop2): 1 truncate cleaned up [ 89.596748][ T6473] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.693087][ T6454] loop6: p1 p2 p3 < p5 p6 > [ 89.706992][ T6454] loop6: p1 size 242222080 extends beyond EOD, truncated [ 89.715797][ T6454] loop6: p2 start 4294967295 is beyond EOD, truncated [ 89.826499][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.840464][ T3612] udevd[3612]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 89.841216][ T5109] udevd[5109]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 89.960636][ T6497] netlink: 48 bytes leftover after parsing attributes in process `syz.6.895'. [ 90.071833][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 90.437612][ T6507] loop3: detected capacity change from 0 to 512 [ 90.503991][ T6507] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.899: bg 0: block 393: padding at end of block bitmap is not set [ 90.518927][ T6507] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 90.538033][ T6507] EXT4-fs (loop3): 2 truncates cleaned up [ 90.756284][ T29] kauditd_printk_skb: 266 callbacks suppressed [ 90.756298][ T29] audit: type=1326 audit(1764325616.581:4741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6491 comm="syz.2.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9deea6f749 code=0x7ffc0000 [ 90.785898][ T29] audit: type=1326 audit(1764325616.581:4742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6491 comm="syz.2.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9deea6f749 code=0x7ffc0000 [ 90.853071][ T6513] netlink: 12 bytes leftover after parsing attributes in process `syz.5.900'. [ 90.928511][ T6525] netlink: 'syz.5.905': attribute type 1 has an invalid length. [ 90.936413][ T6525] netlink: 224 bytes leftover after parsing attributes in process `syz.5.905'. [ 90.970971][ T6527] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.089145][ T6540] loop5: detected capacity change from 0 to 4096 [ 91.143632][ T6527] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.466880][ T6545] batadv0: entered promiscuous mode [ 91.509824][ T6545] bond_slave_0: entered promiscuous mode [ 91.515516][ T6545] bond_slave_1: entered promiscuous mode [ 91.552399][ T6545] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 91.601707][ T6545] bond_slave_0: left promiscuous mode [ 91.607148][ T6545] bond_slave_1: left promiscuous mode [ 91.633700][ T6527] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.661690][ T6544] batadv0: left promiscuous mode [ 91.702810][ T6527] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.792165][ T1715] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.811061][ T1715] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.823631][ T1715] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.844025][ T1715] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.913475][ T6568] loop3: detected capacity change from 0 to 2048 [ 92.019509][ T6586] loop3: detected capacity change from 0 to 512 [ 92.039578][ T6586] ext4 filesystem being mounted at /212/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 92.075345][ T6586] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.928: corrupted xattr block 33: invalid ea_ino [ 92.089037][ T6586] EXT4-fs (loop3): Remounting filesystem read-only [ 92.095598][ T6586] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 92.105045][ T6586] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 92.114155][ T6586] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 92.120248][ T3551] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 92.211553][ T6608] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 92.221665][ T29] audit: type=1400 audit(1764325618.051:4743): avc: denied { relabelto } for pid=6607 comm="syz.3.931" name="213" dev="tmpfs" ino=1150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 92.248039][ T29] audit: type=1400 audit(1764325618.051:4744): avc: denied { associate } for pid=6607 comm="syz.3.931" name="213" dev="tmpfs" ino=1150 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 92.288404][ T29] audit: type=1400 audit(1764325618.111:4745): avc: denied { remove_name } for pid=3314 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 92.315550][ T29] audit: type=1400 audit(1764325618.111:4746): avc: denied { rmdir } for pid=3314 comm="syz-executor" name="213" dev="tmpfs" ino=1150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 92.363726][ T6618] loop6: detected capacity change from 0 to 2048 [ 92.498909][ T6645] loop2: detected capacity change from 0 to 512 [ 92.531908][ T6645] ext4 filesystem being mounted at /188/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 92.565854][ T6645] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.941: corrupted xattr block 33: invalid ea_ino [ 92.586034][ T6651] hsr_slave_1 (unregistering): left promiscuous mode [ 92.592865][ T6645] EXT4-fs (loop2): Remounting filesystem read-only [ 92.599410][ T6645] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 92.629635][ T6645] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 92.666477][ T6639] loop6: detected capacity change from 0 to 32768 [ 92.675449][ T6645] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 92.721030][ T6639] loop6: p1 p2 p3 < p5 p6 > [ 92.727497][ T6639] loop6: p2 size 16775168 extends beyond EOD, truncated [ 92.750863][ T6639] loop6: p5 start 4294970168 is beyond EOD, truncated [ 92.876834][ T6665] FAULT_INJECTION: forcing a failure. [ 92.876834][ T6665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.889956][ T6665] CPU: 0 UID: 0 PID: 6665 Comm: syz.5.948 Not tainted syzkaller #0 PREEMPT(voluntary) [ 92.890043][ T6665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 92.890053][ T6665] Call Trace: [ 92.890058][ T6665] [ 92.890065][ T6665] __dump_stack+0x1d/0x30 [ 92.890084][ T6665] dump_stack_lvl+0xe8/0x140 [ 92.890172][ T6665] dump_stack+0x15/0x1b [ 92.890217][ T6665] should_fail_ex+0x265/0x280 [ 92.890235][ T6665] should_fail+0xb/0x20 [ 92.890316][ T6665] should_fail_usercopy+0x1a/0x20 [ 92.890334][ T6665] _copy_from_user+0x1c/0xb0 [ 92.890382][ T6665] ___sys_sendmsg+0xc1/0x1d0 [ 92.890411][ T6665] __x64_sys_sendmsg+0xd4/0x160 [ 92.890435][ T6665] x64_sys_call+0x191e/0x3000 [ 92.890536][ T6665] do_syscall_64+0xd2/0x200 [ 92.890555][ T6665] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 92.890583][ T6665] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 92.890625][ T6665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.890646][ T6665] RIP: 0033:0x7f246796f749 [ 92.890661][ T6665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.890738][ T6665] RSP: 002b:00007f24663d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.890755][ T6665] RAX: ffffffffffffffda RBX: 00007f2467bc5fa0 RCX: 00007f246796f749 [ 92.890765][ T6665] RDX: 0000000020008010 RSI: 00002000000002c0 RDI: 0000000000000004 [ 92.890777][ T6665] RBP: 00007f24663d7090 R08: 0000000000000000 R09: 0000000000000000 [ 92.890790][ T6665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.890803][ T6665] R13: 00007f2467bc6038 R14: 00007f2467bc5fa0 R15: 00007ffe97ae7a08 [ 92.890869][ T6665] [ 93.096479][ T6667] __nla_validate_parse: 7 callbacks suppressed [ 93.096493][ T6667] netlink: 256 bytes leftover after parsing attributes in process `syz.2.950'. [ 93.142891][ T29] audit: type=1400 audit(1764325618.971:4747): avc: denied { accept } for pid=6674 comm="syz.5.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.167343][ T6677] loop2: detected capacity change from 0 to 512 [ 93.188257][ T6677] ext4 filesystem being mounted at /191/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 93.323953][ T6693] netlink: 'syz.1.959': attribute type 1 has an invalid length. [ 93.331681][ T6693] netlink: 224 bytes leftover after parsing attributes in process `syz.1.959'. [ 93.455264][ T29] audit: type=1400 audit(1764325619.281:4748): avc: denied { append } for pid=6700 comm="syz.1.961" name="event3" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 93.690441][ T29] audit: type=1326 audit(1764325619.521:4749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6700 comm="syz.1.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1c30f749 code=0x7ffc0000 [ 93.714021][ T29] audit: type=1326 audit(1764325619.541:4750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6700 comm="syz.1.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f7d1c30f749 code=0x7ffc0000 [ 93.777468][ T6714] syz.2.967 uses obsolete (PF_INET,SOCK_PACKET) [ 93.938054][ T6720] loop2: detected capacity change from 0 to 2048 [ 93.966754][ T6722] loop6: detected capacity change from 0 to 4096 [ 93.999102][ T6720] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.086955][ T6730] loop6: detected capacity change from 0 to 128 [ 94.294668][ T6739] loop5: detected capacity change from 0 to 512 [ 94.340435][ T6739] ext4 filesystem being mounted at /136/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 94.798697][ T42] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set [ 94.813517][ T42] EXT4-fs (loop2): Remounting filesystem read-only [ 94.897263][ T6769] loop2: detected capacity change from 0 to 4096 [ 94.971856][ T6778] loop2: detected capacity change from 0 to 128 [ 95.393041][ T6782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.990'. [ 95.402065][ T6782] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 95.985017][ T6795] netlink: 12 bytes leftover after parsing attributes in process `syz.6.991'. [ 95.993940][ T6795] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 96.003489][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 96.003504][ T29] audit: type=1326 audit(1764325621.811:4905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6779 comm="syz.2.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9deea6f749 code=0x7ffc0000 [ 96.033009][ T29] audit: type=1326 audit(1764325621.811:4906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6779 comm="syz.2.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9deea6f749 code=0x7ffc0000 [ 96.122863][ T6797] loop2: detected capacity change from 0 to 512 [ 96.129328][ T29] audit: type=1326 audit(1764325621.951:4907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6796 comm="syz.2.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9deea6f749 code=0x7ffc0000 [ 96.152836][ T29] audit: type=1326 audit(1764325621.951:4908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6796 comm="syz.2.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9deea6f749 code=0x7ffc0000 [ 96.176567][ T29] audit: type=1326 audit(1764325621.951:4909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6796 comm="syz.2.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9deea6f749 code=0x7ffc0000 [ 96.200381][ T29] audit: type=1326 audit(1764325621.951:4910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6796 comm="syz.2.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9deea6f749 code=0x7ffc0000 [ 96.224059][ T29] audit: type=1326 audit(1764325621.951:4911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6796 comm="syz.2.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9deea6f783 code=0x7ffc0000 [ 96.247472][ T29] audit: type=1326 audit(1764325621.951:4912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6796 comm="syz.2.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9deea6e1ff code=0x7ffc0000 [ 96.270788][ T29] audit: type=1326 audit(1764325621.951:4913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6796 comm="syz.2.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f9deea6f7d7 code=0x7ffc0000 [ 96.272376][ T6797] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 96.294439][ T29] audit: type=1326 audit(1764325621.951:4914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6796 comm="syz.2.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9deea6df90 code=0x7ffc0000 [ 96.329888][ T6797] EXT4-fs (loop2): 1 truncate cleaned up [ 96.336753][ T6797] EXT4-fs mount: 22 callbacks suppressed [ 96.336768][ T6797] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.384776][ T6806] loop5: detected capacity change from 0 to 512 [ 96.448514][ T6812] FAULT_INJECTION: forcing a failure. [ 96.448514][ T6812] name failslab, interval 1, probability 0, space 0, times 0 [ 96.461367][ T6812] CPU: 1 UID: 0 PID: 6812 Comm: syz.6.1002 Not tainted syzkaller #0 PREEMPT(voluntary) [ 96.461459][ T6812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 96.461471][ T6812] Call Trace: [ 96.461477][ T6812] [ 96.461485][ T6812] __dump_stack+0x1d/0x30 [ 96.461536][ T6812] dump_stack_lvl+0xe8/0x140 [ 96.461568][ T6812] dump_stack+0x15/0x1b [ 96.461586][ T6812] should_fail_ex+0x265/0x280 [ 96.461645][ T6812] should_failslab+0x8c/0xb0 [ 96.461724][ T6812] __kmalloc_noprof+0xa5/0x570 [ 96.461750][ T6812] ? usb_alloc_urb+0x42/0xc0 [ 96.461815][ T6812] usb_alloc_urb+0x42/0xc0 [ 96.461836][ T6812] do_proc_control+0x1a8/0x8b0 [ 96.461916][ T6812] ? should_fail_ex+0xdb/0x280 [ 96.461968][ T6812] proc_control+0x71/0xa0 [ 96.461989][ T6812] usbdev_ioctl+0x93c/0x1700 [ 96.462011][ T6812] ? __pfx_usbdev_ioctl+0x10/0x10 [ 96.462036][ T6812] __se_sys_ioctl+0xce/0x140 [ 96.462103][ T6812] __x64_sys_ioctl+0x43/0x50 [ 96.462122][ T6812] x64_sys_call+0x1816/0x3000 [ 96.462188][ T6812] do_syscall_64+0xd2/0x200 [ 96.462206][ T6812] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 96.462290][ T6812] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 96.462359][ T6812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.462377][ T6812] RIP: 0033:0x7f9014ddf749 [ 96.462390][ T6812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.462408][ T6812] RSP: 002b:00007f9013847038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 96.462434][ T6812] RAX: ffffffffffffffda RBX: 00007f9015035fa0 RCX: 00007f9014ddf749 [ 96.462446][ T6812] RDX: 0000200000000080 RSI: 00000000c0185500 RDI: 0000000000000005 [ 96.462457][ T6812] RBP: 00007f9013847090 R08: 0000000000000000 R09: 0000000000000000 [ 96.462469][ T6812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.462482][ T6812] R13: 00007f9015036038 R14: 00007f9015035fa0 R15: 00007ffccf1dad18 [ 96.462501][ T6812] [ 96.465403][ T6806] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 96.560638][ T6818] loop6: detected capacity change from 0 to 512 [ 96.566253][ T6806] EXT4-fs (loop5): orphan cleanup on readonly fs [ 96.600770][ T6818] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 96.613159][ T6806] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.999: corrupted inode contents [ 96.637331][ T6818] EXT4-fs (loop6): orphan cleanup on readonly fs [ 96.644908][ T6806] EXT4-fs (loop5): Remounting filesystem read-only [ 96.680054][ T6818] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.1003: corrupted inode contents [ 96.704030][ T6806] EXT4-fs (loop5): 1 truncate cleaned up [ 96.734637][ T384] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 96.745202][ T384] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 96.755953][ T384] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 96.767116][ T6806] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 96.780084][ T6818] EXT4-fs (loop6): Remounting filesystem read-only [ 96.786685][ T6818] EXT4-fs (loop6): 1 truncate cleaned up [ 96.792581][ T42] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 96.803125][ T42] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 96.820551][ T42] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 96.831126][ T6818] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 96.847840][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.861207][ T4351] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.898454][ T5394] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.300229][ T6847] netlink: 'syz.5.1013': attribute type 1 has an invalid length. [ 97.307995][ T6847] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1013'. [ 97.330215][ T6851] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1015'. [ 97.359258][ T6857] FAULT_INJECTION: forcing a failure. [ 97.359258][ T6857] name failslab, interval 1, probability 0, space 0, times 0 [ 97.372048][ T6857] CPU: 0 UID: 0 PID: 6857 Comm: syz.5.1017 Not tainted syzkaller #0 PREEMPT(voluntary) [ 97.372093][ T6857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 97.372103][ T6857] Call Trace: [ 97.372109][ T6857] [ 97.372116][ T6857] __dump_stack+0x1d/0x30 [ 97.372197][ T6857] dump_stack_lvl+0xe8/0x140 [ 97.372309][ T6857] dump_stack+0x15/0x1b [ 97.372326][ T6857] should_fail_ex+0x265/0x280 [ 97.372390][ T6857] ? resv_map_alloc+0x32/0x190 [ 97.372420][ T6857] should_failslab+0x8c/0xb0 [ 97.372442][ T6857] __kmalloc_cache_noprof+0x4c/0x4a0 [ 97.372536][ T6857] ? vfs_write+0x7e8/0x960 [ 97.372556][ T6857] resv_map_alloc+0x32/0x190 [ 97.372582][ T6857] hugetlbfs_get_inode+0x67/0x370 [ 97.372607][ T6857] hugetlb_file_setup+0x192/0x3d0 [ 97.372654][ T6857] ksys_mmap_pgoff+0x157/0x310 [ 97.372670][ T6857] x64_sys_call+0x14a3/0x3000 [ 97.372688][ T6857] do_syscall_64+0xd2/0x200 [ 97.372708][ T6857] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 97.372733][ T6857] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 97.372774][ T6857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.372794][ T6857] RIP: 0033:0x7f246796f749 [ 97.372831][ T6857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.372848][ T6857] RSP: 002b:00007f24663d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 97.372864][ T6857] RAX: ffffffffffffffda RBX: 00007f2467bc5fa0 RCX: 00007f246796f749 [ 97.372875][ T6857] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 97.372929][ T6857] RBP: 00007f24663d7090 R08: ffffffffffffffff R09: 0000000000000000 [ 97.372940][ T6857] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000001 [ 97.372950][ T6857] R13: 00007f2467bc6038 R14: 00007f2467bc5fa0 R15: 00007ffe97ae7a08 [ 97.372966][ T6857] [ 97.717028][ T6882] loop2: detected capacity change from 0 to 2048 [ 97.754423][ T6882] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.806470][ T6888] netlink: 'syz.1.1029': attribute type 10 has an invalid length. [ 97.821013][ T6888] team0: Port device dummy0 added [ 97.829882][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.844293][ T6888] netlink: 'syz.1.1029': attribute type 10 has an invalid length. [ 97.860533][ T6888] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 97.869411][ T6865] loop6: detected capacity change from 0 to 32768 [ 97.877583][ T6888] team0: Failed to send options change via netlink (err -105) [ 97.885240][ T6888] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 97.894933][ T6888] team0: Port device dummy0 removed [ 97.907646][ T6888] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 97.921810][ T3528] loop6: p1 p2 p3 < p5 p6 > [ 97.926931][ T3528] loop6: p2 size 16775168 extends beyond EOD, truncated [ 97.936592][ T6890] loop5: detected capacity change from 0 to 2048 [ 97.941715][ T3528] loop6: p5 start 4294970168 is beyond EOD, truncated [ 97.966342][ T6865] loop6: p1 p2 p3 < p5 p6 > [ 97.972013][ T6892] loop2: detected capacity change from 0 to 2048 [ 97.978762][ T6865] loop6: p2 size 16775168 extends beyond EOD, truncated [ 97.994491][ T6890] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.012825][ T6865] loop6: p5 start 4294970168 is beyond EOD, truncated [ 98.025971][ T6902] FAULT_INJECTION: forcing a failure. [ 98.025971][ T6902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.039107][ T6902] CPU: 0 UID: 0 PID: 6902 Comm: syz.1.1035 Not tainted syzkaller #0 PREEMPT(voluntary) [ 98.039139][ T6902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 98.039150][ T6902] Call Trace: [ 98.039157][ T6902] [ 98.039164][ T6902] __dump_stack+0x1d/0x30 [ 98.039185][ T6902] dump_stack_lvl+0xe8/0x140 [ 98.039227][ T6902] dump_stack+0x15/0x1b [ 98.039244][ T6902] should_fail_ex+0x265/0x280 [ 98.039263][ T6902] should_fail+0xb/0x20 [ 98.039279][ T6902] should_fail_usercopy+0x1a/0x20 [ 98.039299][ T6902] strncpy_from_user+0x25/0x230 [ 98.039381][ T6902] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 98.039406][ T6902] __se_sys_memfd_create+0x1ff/0x590 [ 98.039426][ T6902] __x64_sys_memfd_create+0x31/0x40 [ 98.039519][ T6902] x64_sys_call+0x2ac2/0x3000 [ 98.039541][ T6902] do_syscall_64+0xd2/0x200 [ 98.039561][ T6902] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 98.039587][ T6902] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 98.039673][ T6902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.039694][ T6902] RIP: 0033:0x7f7d1c30f749 [ 98.039709][ T6902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.039740][ T6902] RSP: 002b:00007f7d1ad76e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 98.039760][ T6902] RAX: ffffffffffffffda RBX: 00000000000004e0 RCX: 00007f7d1c30f749 [ 98.039772][ T6902] RDX: 00007f7d1ad76ef0 RSI: 0000000000000000 RDI: 00007f7d1c394960 [ 98.039803][ T6902] RBP: 0000200000001a40 R08: 00007f7d1ad76bb7 R09: 00007f7d1ad76e40 [ 98.039857][ T6902] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000140 [ 98.039869][ T6902] R13: 00007f7d1ad76ef0 R14: 00007f7d1ad76eb0 R15: 0000200000000440 [ 98.039887][ T6902] [ 98.239132][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 98.250253][ T6892] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.263407][ T3612] udevd[3612]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 98.263539][ T3528] udevd[3528]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 98.274851][ T5109] udevd[5109]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 98.303675][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.327477][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 98.338461][ T5109] udevd[5109]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 98.341277][ T3528] udevd[3528]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 98.349464][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 98.368948][ T4351] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.415427][ T6913] netlink: 'syz.2.1039': attribute type 1 has an invalid length. [ 98.423250][ T6913] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1039'. [ 98.447897][ T6915] loop1: detected capacity change from 0 to 256 [ 98.462476][ T6915] FAT-fs (loop1): Directory bread(block 1285) failed [ 98.515986][ T6924] syzkaller1: entered promiscuous mode [ 98.521580][ T6924] syzkaller1: entered allmulticast mode [ 98.973320][ T6929] loop3: detected capacity change from 0 to 4096 [ 99.012263][ T6929] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.070683][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.131645][ T6946] loop3: detected capacity change from 0 to 512 [ 99.141216][ T6946] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 99.150023][ T6946] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 99.173350][ T6946] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.1051: Allocating blocks 41-42 which overlap fs metadata [ 99.187501][ T6946] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.1051: Allocating blocks 41-42 which overlap fs metadata [ 99.201465][ T6938] loop1: detected capacity change from 0 to 32768 [ 99.202155][ T6946] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.1051: Failed to acquire dquot type 1 [ 99.224266][ T6946] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 99.239108][ T6946] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.1051: corrupted inode contents [ 99.251545][ T6946] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #12: comm syz.3.1051: mark_inode_dirty error [ 99.264716][ T6946] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.1051: corrupted inode contents [ 99.270759][ T3528] loop1: p1 p2 p3 < p5 p6 > [ 99.281896][ T6946] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.1051: mark_inode_dirty error [ 99.293926][ T3528] loop1: p2 size 16775168 extends beyond EOD, truncated [ 99.301551][ T6946] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.1051: corrupted inode contents [ 99.304560][ T3528] loop1: p5 start 4294970168 is beyond EOD, truncated [ 99.314136][ T6946] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 99.329167][ T6946] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.1051: corrupted inode contents [ 99.341805][ T6946] EXT4-fs error (device loop3): ext4_truncate:4637: inode #12: comm syz.3.1051: mark_inode_dirty error [ 99.341918][ T6946] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 99.356174][ T6938] loop1: p1 p2 p3 < p5 p6 > [ 99.362135][ T6946] EXT4-fs (loop3): 1 truncate cleaned up [ 99.367419][ T6938] loop1: p2 size 16775168 extends beyond EOD, truncated [ 99.372519][ T6946] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.380654][ T6938] loop1: p5 start 4294970168 is beyond EOD, truncated [ 99.392438][ T6957] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1054'. [ 99.396647][ T6946] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.481949][ T6962] netlink: 'syz.3.1056': attribute type 1 has an invalid length. [ 99.489707][ T6962] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1056'. [ 99.531176][ T5109] udevd[5109]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 99.549470][ T3612] udevd[3612]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 99.599595][ T6973] 9pnet_fd: Insufficient options for proto=fd [ 100.109633][ T6989] FAULT_INJECTION: forcing a failure. [ 100.109633][ T6989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.122946][ T6989] CPU: 1 UID: 0 PID: 6989 Comm: syz.6.1066 Not tainted syzkaller #0 PREEMPT(voluntary) [ 100.123053][ T6989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 100.123064][ T6989] Call Trace: [ 100.123070][ T6989] [ 100.123078][ T6989] __dump_stack+0x1d/0x30 [ 100.123100][ T6989] dump_stack_lvl+0xe8/0x140 [ 100.123120][ T6989] dump_stack+0x15/0x1b [ 100.123138][ T6989] should_fail_ex+0x265/0x280 [ 100.123172][ T6989] should_fail+0xb/0x20 [ 100.123188][ T6989] should_fail_usercopy+0x1a/0x20 [ 100.123206][ T6989] _copy_from_user+0x1c/0xb0 [ 100.123227][ T6989] memdup_user+0x5e/0xd0 [ 100.123261][ T6989] strndup_user+0x68/0xb0 [ 100.123341][ T6989] __se_sys_mount+0x4d/0x2e0 [ 100.123437][ T6989] ? fput+0x8f/0xc0 [ 100.123452][ T6989] ? ksys_write+0x192/0x1a0 [ 100.123472][ T6989] __x64_sys_mount+0x67/0x80 [ 100.123560][ T6989] x64_sys_call+0x2b51/0x3000 [ 100.123643][ T6989] do_syscall_64+0xd2/0x200 [ 100.123660][ T6989] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 100.123732][ T6989] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 100.123866][ T6989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.123888][ T6989] RIP: 0033:0x7f9014ddf749 [ 100.123903][ T6989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.123926][ T6989] RSP: 002b:00007f9013847038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 100.123943][ T6989] RAX: ffffffffffffffda RBX: 00007f9015035fa0 RCX: 00007f9014ddf749 [ 100.123953][ T6989] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000 [ 100.123964][ T6989] RBP: 00007f9013847090 R08: 0000200000000200 R09: 0000000000000000 [ 100.123975][ T6989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.123988][ T6989] R13: 00007f9015036038 R14: 00007f9015035fa0 R15: 00007ffccf1dad18 [ 100.124062][ T6989] [ 100.347231][ T6997] batadv_slave_1: entered promiscuous mode [ 100.354384][ T6995] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1069'. [ 100.379894][ T6997] netlink: 'syz.6.1070': attribute type 3 has an invalid length. [ 100.399500][ T6996] batadv_slave_1: left promiscuous mode [ 100.430018][ T7001] loop5: detected capacity change from 0 to 512 [ 100.437901][ T7001] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 100.457948][ T7003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1073'. [ 100.476602][ T7001] EXT4-fs (loop5): 1 truncate cleaned up [ 100.486694][ T7003] team0 (unregistering): Port device team_slave_0 removed [ 100.494889][ T384] Bluetooth: hci0: Frame reassembly failed (-84) [ 100.503949][ T7003] team0 (unregistering): Port device team_slave_1 removed [ 100.514398][ T7001] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.588017][ T6986] loop1: detected capacity change from 0 to 32768 [ 100.634994][ T7016] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1076'. [ 100.642375][ T3528] loop1: p1 p2 p3 < p5 p6 > [ 100.650338][ T3528] loop1: p2 size 16775168 extends beyond EOD, truncated [ 100.653590][ T4351] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.658288][ T3528] loop1: p5 start 4294970168 is beyond EOD, truncated [ 100.678644][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1076'. [ 100.691280][ T6986] loop1: p1 p2 p3 < > [ 100.698584][ T6986] loop1: p2 size 16775168 extends beyond EOD, truncated [ 100.832052][ T7028] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1082'. [ 100.937664][ T7034] loop1: detected capacity change from 0 to 4096 [ 101.033785][ T7040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1081'. [ 101.042829][ T7040] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 101.750919][ T7034] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.805120][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.827622][ T7052] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1091'. [ 101.843433][ T7052] ip6gre1: entered promiscuous mode [ 101.848734][ T7052] ip6gre1: entered allmulticast mode [ 101.909463][ T7061] lo: entered allmulticast mode [ 101.922329][ T7061] tunl0: entered allmulticast mode [ 101.938488][ T7061] gre0: entered allmulticast mode [ 101.947281][ T29] kauditd_printk_skb: 302 callbacks suppressed [ 101.947294][ T29] audit: type=1326 audit(1764325627.771:5201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7066 comm="syz.2.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9deea6f749 code=0x7ffc0000 [ 101.977685][ T29] audit: type=1326 audit(1764325627.791:5202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7066 comm="syz.2.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9deea6f749 code=0x7ffc0000 [ 101.979237][ T7061] gretap0: entered allmulticast mode [ 102.012273][ T29] audit: type=1326 audit(1764325627.831:5203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7069 comm="syz.1.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1c30f749 code=0x7ffc0000 [ 102.035778][ T29] audit: type=1326 audit(1764325627.831:5204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7069 comm="syz.1.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d1c30f749 code=0x7ffc0000 [ 102.059368][ T29] audit: type=1326 audit(1764325627.831:5205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7069 comm="syz.1.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1c30f749 code=0x7ffc0000 [ 102.064913][ T7061] erspan0: entered allmulticast mode [ 102.082779][ T29] audit: type=1326 audit(1764325627.831:5206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7069 comm="syz.1.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f7d1c30f749 code=0x7ffc0000 [ 102.095073][ T7061] ip_vti0: entered allmulticast mode [ 102.111599][ T29] audit: type=1326 audit(1764325627.831:5207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7069 comm="syz.1.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1c30f749 code=0x7ffc0000 [ 102.118294][ T7061] ip6_vti0: entered allmulticast mode [ 102.140288][ T29] audit: type=1326 audit(1764325627.831:5208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7069 comm="syz.1.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f7d1c30f749 code=0x7ffc0000 [ 102.147875][ T7061] sit0: entered allmulticast mode [ 102.169180][ T29] audit: type=1326 audit(1764325627.831:5209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7069 comm="syz.1.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1c30f749 code=0x7ffc0000 [ 102.181489][ T7061] ip6tnl0: entered allmulticast mode [ 102.197667][ T29] audit: type=1326 audit(1764325627.831:5210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7069 comm="syz.1.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f7d1c30f749 code=0x7ffc0000 [ 102.226435][ T7061] ip6gre0: entered allmulticast mode [ 102.234540][ T7061] syz_tun: entered allmulticast mode [ 102.241886][ T7061] ip6gretap0: entered allmulticast mode [ 102.249427][ T7061] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.256779][ T7061] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.264408][ T7061] bridge0: entered allmulticast mode [ 102.271462][ T7061] vcan0: entered allmulticast mode [ 102.277814][ T7061] bond0: entered allmulticast mode [ 102.282975][ T7061] bond_slave_0: entered allmulticast mode [ 102.288792][ T7061] bond_slave_1: entered allmulticast mode [ 102.296347][ T7061] team0: entered allmulticast mode [ 102.301700][ T7061] team_slave_0: entered allmulticast mode [ 102.307423][ T7061] team_slave_1: entered allmulticast mode [ 102.323254][ T7061] dummy0: entered allmulticast mode [ 102.330273][ T7061] nlmon0: entered allmulticast mode [ 102.336586][ T7061] caif0: entered allmulticast mode [ 102.342219][ T7061] batadv0: entered allmulticast mode [ 102.349127][ T7061] vxcan0: entered allmulticast mode [ 102.355464][ T7061] vxcan1: entered allmulticast mode [ 102.361672][ T7061] veth0: entered allmulticast mode [ 102.368240][ T7061] veth1: entered allmulticast mode [ 102.374860][ T7061] wg0: entered allmulticast mode [ 102.380905][ T7061] wg1: entered allmulticast mode [ 102.386772][ T7061] wg2: entered allmulticast mode [ 102.392838][ T7061] veth0_to_bridge: entered allmulticast mode [ 102.401890][ T7061] veth1_to_bridge: entered allmulticast mode [ 102.410935][ T7061] veth0_to_bond: entered allmulticast mode [ 102.418788][ T7061] veth1_to_bond: entered allmulticast mode [ 102.426532][ T7061] veth0_to_team: entered allmulticast mode [ 102.436553][ T7061] veth1_to_team: entered allmulticast mode [ 102.445873][ T7061] veth0_to_batadv: entered allmulticast mode [ 102.461577][ T7061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.470223][ T7061] batadv_slave_0: entered allmulticast mode [ 102.477458][ T7061] veth1_to_batadv: entered allmulticast mode [ 102.485177][ T7061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.492988][ T7061] batadv_slave_1: entered allmulticast mode [ 102.500481][ T7061] xfrm0: entered allmulticast mode [ 102.506669][ T7061] veth0_to_hsr: entered allmulticast mode [ 102.520378][ T3551] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 102.527317][ T7061] hsr_slave_0: entered allmulticast mode [ 102.534485][ T7061] veth1_to_hsr: entered allmulticast mode [ 102.543246][ T7061] hsr_slave_1: entered allmulticast mode [ 102.550905][ T7061] hsr0: entered allmulticast mode [ 102.557074][ T7061] veth1_virt_wifi: entered allmulticast mode [ 102.607323][ T7061] veth0_virt_wifi: entered allmulticast mode [ 102.688875][ T7061] veth1_vlan: entered allmulticast mode [ 102.721012][ T7061] veth0_vlan: entered allmulticast mode [ 102.730495][ T7061] vlan0: entered allmulticast mode [ 102.735776][ T7061] vlan1: entered allmulticast mode [ 102.746794][ T7061] macvlan0: entered allmulticast mode [ 102.759317][ T7061] macvlan1: entered allmulticast mode [ 102.772135][ T7061] ipvlan0: entered allmulticast mode [ 102.777517][ T7061] ipvlan1: entered allmulticast mode [ 102.788398][ T7083] loop6: detected capacity change from 0 to 4096 [ 102.795148][ T7061] veth1_macvtap: entered allmulticast mode [ 102.802897][ T7061] veth0_macvtap: entered allmulticast mode [ 102.810602][ T7061] macvtap0: entered allmulticast mode [ 102.819748][ T7083] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.834466][ T7061] macsec0: entered allmulticast mode [ 102.843385][ T7061] geneve0: entered allmulticast mode [ 102.849829][ T7061] geneve1: entered allmulticast mode [ 102.855939][ T7061] netdevsim netdevsim5 eth0: entered allmulticast mode [ 102.863262][ T7061] netdevsim netdevsim5 eth1: entered allmulticast mode [ 102.870465][ T7061] netdevsim netdevsim5 eth2: entered allmulticast mode [ 102.877570][ T7061] netdevsim netdevsim5 eth3: entered allmulticast mode [ 102.928595][ T5394] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.967025][ T272] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.980813][ T1715] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.989233][ T1715] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.014232][ T1715] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.807641][ T7126] __nla_validate_parse: 2 callbacks suppressed [ 103.807656][ T7126] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1116'. [ 103.827402][ T7122] loop5: detected capacity change from 0 to 4096 [ 103.900774][ T7122] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.954877][ T7140] loop2: detected capacity change from 0 to 512 [ 103.972098][ T7140] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 104.004552][ T7140] EXT4-fs (loop2): 1 truncate cleaned up [ 104.020679][ T4351] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.044034][ T7140] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.115525][ T7152] SELinux: ebitmap: truncated map [ 104.159490][ T7152] SELinux: failed to load policy [ 104.245909][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.297954][ T7166] loop5: detected capacity change from 0 to 2048 [ 104.329132][ T7166] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.357437][ T4351] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.358742][ T7173] loop9: detected capacity change from 0 to 7 [ 104.373097][ T7173] Buffer I/O error on dev loop9, logical block 0, async page read [ 104.381063][ T7173] Buffer I/O error on dev loop9, logical block 0, async page read [ 104.388903][ T7173] loop9: unable to read partition table [ 104.467162][ T7173] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 104.467162][ T7173] ) failed (rc=-5) [ 104.487452][ T3528] Buffer I/O error on dev loop9, logical block 0, async page read [ 104.505430][ T3528] Buffer I/O error on dev loop9, logical block 0, async page read [ 104.526847][ T7176] loop5: detected capacity change from 0 to 4096 [ 104.534579][ T3528] Buffer I/O error on dev loop9, logical block 0, async page read [ 104.579048][ T3528] Buffer I/O error on dev loop9, logical block 0, async page read [ 104.604950][ T7176] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.638694][ T3528] Buffer I/O error on dev loop9, logical block 0, async page read [ 104.795343][ T3301] ================================================================== [ 104.803438][ T3301] BUG: KCSAN: data-race in virtqueue_disable_cb / virtqueue_disable_cb [ 104.811657][ T3301] [ 104.813957][ T3301] read to 0xffff888102175478 of 2 bytes by interrupt on cpu 0: [ 104.821472][ T3301] virtqueue_disable_cb+0x58/0x150 [ 104.826561][ T3301] skb_xmit_done+0x65/0x140 [ 104.831045][ T3301] vring_interrupt+0x155/0x180 [ 104.835792][ T3301] __handle_irq_event_percpu+0x9d/0x540 [ 104.841319][ T3301] handle_irq_event+0x64/0xf0 [ 104.845975][ T3301] handle_edge_irq+0x154/0x470 [ 104.850719][ T3301] __common_interrupt+0x60/0xb0 [ 104.855553][ T3301] common_interrupt+0x7e/0x90 [ 104.860211][ T3301] asm_common_interrupt+0x26/0x40 [ 104.865218][ T3301] kcsan_setup_watchpoint+0x415/0x430 [ 104.870575][ T3301] ebitmap_destroy+0x6e/0xa0 [ 104.875157][ T3301] security_context_to_sid_core+0x321/0x3b0 [ 104.881043][ T3301] security_context_to_sid+0x2e/0x40 [ 104.886320][ T3301] selinux_inode_setxattr+0x4af/0x6e0 [ 104.891672][ T3301] security_inode_setxattr+0x13a/0x1b0 [ 104.897112][ T3301] __vfs_setxattr_locked+0x83/0x1d0 [ 104.902289][ T3301] vfs_setxattr+0x132/0x270 [ 104.906769][ T3301] filename_setxattr+0x1ad/0x400 [ 104.911694][ T3301] path_setxattrat+0x2c9/0x310 [ 104.916442][ T3301] __x64_sys_lsetxattr+0x71/0x90 [ 104.921364][ T3301] x64_sys_call+0x287b/0x3000 [ 104.926027][ T3301] do_syscall_64+0xd2/0x200 [ 104.930521][ T3301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.936407][ T3301] [ 104.938719][ T3301] write to 0xffff888102175478 of 2 bytes by task 3301 on cpu 1: [ 104.946325][ T3301] virtqueue_disable_cb+0x7a/0x150 [ 104.951420][ T3301] start_xmit+0x10e/0x17a0 [ 104.955821][ T3301] dev_hard_start_xmit+0x125/0x3e0 [ 104.960915][ T3301] sch_direct_xmit+0x192/0x550 [ 104.965672][ T3301] __dev_queue_xmit+0xe9a/0x2000 [ 104.970586][ T3301] ip_finish_output2+0x77f/0x8b0 [ 104.975519][ T3301] ip_finish_output+0x114/0x2a0 [ 104.980350][ T3301] ip_output+0xbd/0x190 [ 104.984506][ T3301] __ip_queue_xmit+0xbbf/0xc00 [ 104.989259][ T3301] ip_queue_xmit+0x39/0x50 [ 104.993662][ T3301] __tcp_transmit_skb+0x17fd/0x1c10 [ 104.998847][ T3301] tcp_write_xmit+0x129c/0x30f0 [ 105.003680][ T3301] __tcp_push_pending_frames+0x6d/0x1b0 [ 105.009206][ T3301] tcp_push+0x311/0x330 [ 105.013343][ T3301] tcp_sendmsg_locked+0x2458/0x2c00 [ 105.018521][ T3301] tcp_sendmsg+0x2f/0x50 [ 105.022742][ T3301] inet_sendmsg+0x76/0xd0 [ 105.027051][ T3301] __sock_sendmsg+0x102/0x180 [ 105.031713][ T3301] sock_write_iter+0x1a7/0x1f0 [ 105.036463][ T3301] vfs_write+0x52a/0x960 [ 105.040691][ T3301] ksys_write+0xda/0x1a0 [ 105.044924][ T3301] __x64_sys_write+0x40/0x50 [ 105.049584][ T3301] x64_sys_call+0x2802/0x3000 [ 105.054248][ T3301] do_syscall_64+0xd2/0x200 [ 105.058729][ T3301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.064598][ T3301] [ 105.066903][ T3301] value changed: 0x0000 -> 0x0001 [ 105.071905][ T3301] [ 105.074201][ T3301] Reported by Kernel Concurrency Sanitizer on: [ 105.080325][ T3301] CPU: 1 UID: 0 PID: 3301 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 105.090203][ T3301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 105.100242][ T3301] ================================================================== [ 105.109724][ T7184] FAULT_INJECTION: forcing a failure. [ 105.109724][ T7184] name failslab, interval 1, probability 0, space 0, times 0 [ 105.122368][ T7184] CPU: 0 UID: 0 PID: 7184 Comm: syz.6.1137 Not tainted syzkaller #0 PREEMPT(voluntary) [ 105.122465][ T7184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 105.122475][ T7184] Call Trace: [ 105.122481][ T7184] [ 105.122488][ T7184] __dump_stack+0x1d/0x30 [ 105.122506][ T7184] dump_stack_lvl+0xe8/0x140 [ 105.122522][ T7184] dump_stack+0x15/0x1b [ 105.122566][ T7184] should_fail_ex+0x265/0x280 [ 105.122582][ T7184] ? audit_log_d_path+0x8d/0x150 [ 105.122598][ T7184] should_failslab+0x8c/0xb0 [ 105.122658][ T7184] __kmalloc_cache_noprof+0x4c/0x4a0 [ 105.122682][ T7184] audit_log_d_path+0x8d/0x150 SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 105.122758][ T7184] audit_log_d_path_exe+0x42/0x70 [ 105.122775][ T7184] audit_log_task+0x1e9/0x250 [ 105.122800][ T7184] audit_seccomp+0x61/0x100 [ 105.122942][ T7184] ? __seccomp_filter+0x82d/0x1250 [ 105.122962][ T7184] __seccomp_filter+0x83e/0x1250 [ 105.123061][ T7184] ? __rcu_read_unlock+0x4f/0x70 [ 105.123080][ T7184] ? mntput_no_expire+0x6f/0x440 [ 105.123099][ T7184] __secure_computing+0x82/0x150 [ 105.123154][ T7184] syscall_trace_enter+0xcf/0x1e0 [ 105.123175][ T7184] do_syscall_64+0xac/0x200 [ 105.123264][ T7184] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 105.123284][ T7184] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 105.123371][ T7184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.123387][ T7184] RIP: 0033:0x7f9014dde15c [ 105.123400][ T7184] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 105.123484][ T7184] RSP: 002b:00007f9013847030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 105.123500][ T7184] RAX: ffffffffffffffda RBX: 00007f9015035fa0 RCX: 00007f9014dde15c [ 105.123510][ T7184] RDX: 000000000000000f RSI: 00007f90138470a0 RDI: 0000000000000006 [ 105.123521][ T7184] RBP: 00007f9013847090 R08: 0000000000000000 R09: 0000000000000000 [ 105.123531][ T7184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 105.123541][ T7184] R13: 00007f9015036038 R14: 00007f9015035fa0 R15: 00007ffccf1dad18 [ 105.123556][ T7184] [ 105.138251][ T4351] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.938982][ T12] bridge_slave_1: left allmulticast mode [ 105.944707][ T12] bridge_slave_1: left promiscuous mode [ 105.950372][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.958143][ T12] bridge_slave_0: left allmulticast mode [ 105.963855][ T12] bridge_slave_0: left promiscuous mode [ 105.969530][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.012549][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.021670][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.030767][ T12] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 106.039215][ T12] bond0 (unregistering): Released all slaves [ 106.100361][ T12] hsr_slave_0: left promiscuous mode [ 106.106073][ T12] hsr_slave_1: left promiscuous mode [ 106.112570][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.121099][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.153269][ T12] team0 (unregistering): Port device team_slave_1 removed [ 106.162602][ T12] team0 (unregistering): Port device team_slave_0 removed [ 106.690114][ T12] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.741337][ T12] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.791632][ T12] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.861500][ T12] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.939122][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.002708][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.042684][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.102583][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.174891][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.213226][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.254145][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.302937][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.371794][ T12] bridge_slave_1: left promiscuous mode [ 107.377519][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.385186][ T12] bridge_slave_0: left promiscuous mode [ 107.390877][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.398837][ T12] bridge_slave_1: left allmulticast mode [ 107.404543][ T12] bridge_slave_1: left promiscuous mode [ 107.410189][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.417932][ T12] bridge_slave_0: left allmulticast mode [ 107.423595][ T12] bridge_slave_0: left promiscuous mode [ 107.429303][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.437382][ T12] bridge_slave_1: left allmulticast mode [ 107.443088][ T12] bridge_slave_1: left promiscuous mode [ 107.448797][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.456693][ T12] bridge_slave_0: left allmulticast mode [ 107.462471][ T12] bridge_slave_0: left promiscuous mode [ 107.468077][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.476090][ T12] bridge_slave_1: left allmulticast mode [ 107.481760][ T12] bridge_slave_1: left promiscuous mode [ 107.487475][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.495693][ T12] bridge_slave_0: left allmulticast mode [ 107.501340][ T12] bridge_slave_0: left promiscuous mode [ 107.507025][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.621411][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.630794][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.639764][ T12] bond0 (unregistering): Released all slaves [ 107.721895][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.731647][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.740819][ T12] bond0 (unregistering): Released all slaves [ 107.801682][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.811542][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.820771][ T12] bond0 (unregistering): Released all slaves [ 107.962763][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.972321][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.981517][ T12] bond0 (unregistering): Released all slaves [ 107.992709][ T3416] sy: Port: 1 Link DOWN [ 108.081197][ T12] hsr_slave_0: left promiscuous mode [ 108.086866][ T12] hsr_slave_1: left promiscuous mode [ 108.093118][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.100786][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.109573][ T12] hsr_slave_0: left promiscuous mode [ 108.115414][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.122875][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.130516][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.137935][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.146524][ T12] hsr_slave_0: left promiscuous mode [ 108.152102][ T12] hsr_slave_1: left promiscuous mode [ 108.157598][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.165023][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.172410][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.179768][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.187878][ T12] hsr_slave_0: left promiscuous mode [ 108.193466][ T12] hsr_slave_1: left promiscuous mode [ 108.199191][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.206586][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.214088][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.221564][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.234713][ T12] veth1_macvtap: left promiscuous mode [ 108.240250][ T12] veth0_macvtap: left promiscuous mode [ 108.245789][ T12] veth1_vlan: left promiscuous mode [ 108.251089][ T12] veth0_vlan: left promiscuous mode [ 108.256699][ T12] veth1_vlan: left promiscuous mode [ 108.261932][ T12] veth0_vlan: left promiscuous mode [ 108.267500][ T12] veth1_macvtap: left promiscuous mode [ 108.272969][ T12] veth0_macvtap: left promiscuous mode [ 108.365388][ T12] team0 (unregistering): Port device team_slave_1 removed [ 108.374521][ T12] team0 (unregistering): Port device team_slave_0 removed [ 108.417296][ T12] team0 (unregistering): Port device team_slave_1 removed [ 108.426244][ T12] team0 (unregistering): Port device team_slave_0 removed [ 108.467905][ T12] team0 (unregistering): Port device team_slave_1 removed [ 108.476940][ T12] team0 (unregistering): Port device team_slave_0 removed [ 108.490455][ T1715] smc: removing ib device sy